4688201331200x8020000000000000303240Securityar-win-2.attackrange.localATTACKRANGE\AdministratoradministratorATTACKRANGE0x4ea7ad0x23d0C:\Users\ADMINI~1.ATT\AppData\Local\Temp\69CC839A-CE9E-49F7-A482-541EFDD03BCF\DismHost.exe%%19360x22e8C:\Users\ADMINI~1.ATT\AppData\Local\Temp\69CC839A-CE9E-49F7-A482-541EFDD03BCF\dismhost.exe {A55FBE29-E403-433B-89AF-5B1379DF1218}NULL SID--0x0C:\Windows\System32\Dism.exeMandatory Label\High Mandatory Level
4688201331200x8020000000000000303239Securityar-win-2.attackrange.localATTACKRANGE\AdministratoradministratorATTACKRANGE0x4ea7ad0x22e8C:\Windows\System32\Dism.exe%%19360x23d4dism /online /enable-feature /featurename:IIS-WebServerRole /allNULL SID--0x0C:\Windows\System32\cmd.exeMandatory Label\High Mandatory Level
4688201331200x8020000000000000303234Securityar-win-2.attackrange.localATTACKRANGE\AdministratoradministratorATTACKRANGE0x4ea7ad0x1f7cC:\Users\ADMINI~1.ATT\AppData\Local\Temp\8C25E15B-7293-4BCC-88D6-8B0A49334773\DismHost.exe%%19360x154cC:\Users\ADMINI~1.ATT\AppData\Local\Temp\8C25E15B-7293-4BCC-88D6-8B0A49334773\dismhost.exe {617617EA-3635-4566-9A94-B7AFE1F676DE}NULL SID--0x0C:\Windows\System32\Dism.exeMandatory Label\High Mandatory Level
4688201331200x8020000000000000303233Securityar-win-2.attackrange.localATTACKRANGE\AdministratoradministratorATTACKRANGE0x4ea7ad0x154cC:\Windows\System32\Dism.exe%%19360x23d4dism /online /enable-feature /featurename:WindowsPowerShellWebAccess /allNULL SID--0x0C:\Windows\System32\cmd.exeMandatory Label\High Mandatory Level