354300x80000000000000003058223Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:10:01.969{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60133-false10.221.53.6azure_dc_07.attackrange.local9389- 354300x80000000000000003058222Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:10:01.826{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60131-false10.221.53.6azure_dc_07.attackrange.local9389- 354300x80000000000000003058221Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:09:52.892{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60130-false10.221.53.5azure_dc_06.attackrange.local9389- 354300x80000000000000003058220Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:09:52.742{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60128-false10.221.53.5azure_dc_06.attackrange.local9389- 354300x80000000000000003058219Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:09:34.938{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60126-false10.221.53.4azure_dc_05.attackrange.local9389- 354300x80000000000000003058218Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:09:34.785{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60124-false10.221.53.4azure_dc_05.attackrange.local9389- 354300x80000000000000003058217Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:09:26.155{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60123-false10.221.39.6azure_dc_03.attackrange.local9389- 354300x80000000000000003058216Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:09:25.959{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60121-false10.221.39.6azure_dc_03.attackrange.local9389- 354300x80000000000000003058214Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:09:08.115{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60120-false10.221.39.5azure_dc_02.attackrange.local9389- 354300x80000000000000003058213Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:09:07.931{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60118-false10.221.39.5azure_dc_02.attackrange.local9389- 354300x80000000000000003058212Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:08:59.572{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60117-false10.221.39.4azure_dc_01.attackrange.local9389- 354300x80000000000000003058211Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:08:59.391{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60115-false10.221.39.4azure_dc_01.attackrange.local9389- 354300x80000000000000003058210Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:08:41.366{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60114-false10.8.25.231aws_dc_25edc2.attackrange.local9389- 354300x80000000000000003058209Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:08:41.099{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60112-false10.8.25.231aws_dc_25edc2.attackrange.local9389- 354300x80000000000000003058208Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:08:33.360{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60111-false10.8.17.230aws_dc_22edc1.attackrange.local9389- 354300x80000000000000003058207Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:08:33.239{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60109-false10.8.17.230aws_dc_22edc1.attackrange.local9389- 354300x80000000000000003058206Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:08:15.621{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60108-false10.8.25.230aws_dc_24edc2.attackrange.local9389- 354300x80000000000000003058205Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:08:15.353{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60106-false10.8.25.230aws_dc_24edc2.attackrange.local9389- 354300x80000000000000003058204Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:08:07.982{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60105-false10.8.17.231aws_dc_23edc1.attackrange.local9389- 354300x80000000000000003058203Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:08:07.860{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60103-false10.8.17.231aws_dc_23edc1.attackrange.local9389- 354300x80000000000000003058202Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:08:00.846{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60100-false10.19.96.192local_dc_02.attackrange.local9389- 354300x80000000000000003058201Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:08:00.800{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60098-false10.19.96.192local_dc_02.attackrange.local9389- 354300x80000000000000003058200Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:07:44.464{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60096-false10.19.105.182local_dc_03.attackrange.local9389- 354300x80000000000000003058199Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:07:44.436{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60094-false10.19.105.182local_dc_03.attackrange.local9389- 354300x80000000000000003058198Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:07:37.757{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60093-false10.2.4.51local_dc_04.attackrange.local9389- 354300x80000000000000003058197Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:07:37.706{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60091-false10.2.4.51local_dc_04.attackrange.local9389- 354300x80000000000000003058195Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:07:31.439{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60090-false10.19.96.174local_dc_05.attackrange.local9389- 354300x80000000000000003058194Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:07:31.411{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60088-false10.19.96.174local_dc_05.attackrange.local9389- 354300x80000000000000003058193Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:07:15.081{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60075-false10.19.104.120local_dc_06.attackrange.local9389- 354300x80000000000000003058192Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:07:15.033{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60072-false10.19.104.120local_dc_06.attackrange.local9389- 354300x80000000000000003058191Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:07:08.991{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60067-false10.19.96.180local_dc_07.attackrange.local9389- 354300x80000000000000003058190Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:07:08.955{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60064-false10.19.96.180local_dc_07.attackrange.local9389- 354300x80000000000000003058189Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:07:02.902{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60059-false10.19.96.150local_dc_11.attackrange.local9389- 354300x80000000000000003058188Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:07:02.873{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60057-false10.19.96.150local_dc_11.attackrange.local9389- 354300x80000000000000003058187Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:06:48.093{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60056-false10.19.105.194local_dc_08.attackrange.local9389- 354300x80000000000000003058186Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:06:48.047{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60054-false10.19.105.194local_dc_08.attackrange.local9389- 354300x80000000000000003058185Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:06:41.957{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60053-false10.2.2.34local_dc_12.attackrange.local9389- 354300x80000000000000003058184Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:06:41.912{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60051-false10.2.2.34local_dc_12.attackrange.local9389- 354300x80000000000000003058183Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:06:36.389{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60050-false10.19.105.120local_dc_13.attackrange.local9389- 354300x80000000000000003058182Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:06:36.357{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60048-false10.19.105.120local_dc_13.attackrange.local9389- 354300x80000000000000003058181Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:06:21.666{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60027-false10.2.12.72local_dc_14.attackrange.local9389- 354300x80000000000000003058180Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:06:21.617{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60025-false10.2.12.72local_dc_14.attackrange.local9389- 354300x80000000000000003058179Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:06:16.157{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60024-false170.98.60.70local_dc_16.attackrange.local9389- 354300x80000000000000003058178Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:06:16.103{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60022-false170.98.60.70local_dc_16.attackrange.local9389- 354300x80000000000000003058177Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:06:10.796{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60021-false10.19.105.171local_dc_17.attackrange.local9389- 354300x80000000000000003058176Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:06:10.767{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60019-false10.19.105.171local_dc_17.attackrange.local9389- 354300x80000000000000003058172Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:56.635{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60018-false10.2.13.61local_dc_15.attackrange.local9389- 354300x80000000000000003058171Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:56.605{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60016-false10.2.13.61local_dc_15.attackrange.local9389- 354300x80000000000000003058170Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:51.669{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60015-false10.19.80.39local_dc_10.attackrange.local9389- 354300x80000000000000003058169Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:51.622{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60013-false10.19.80.39local_dc_10.attackrange.local9389- 354300x80000000000000003058168Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:46.759{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60012-false10.19.80.38local_dc_09.attackrange.local9389- 354300x80000000000000003058167Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:46.729{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60010-false10.19.80.38local_dc_09.attackrange.local9389- 354300x80000000000000003058166Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:42.009{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60009-false10.2.4.80local_dc_18.attackrange.local9389- 354300x80000000000000003058165Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:41.967{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60007-false10.2.4.80local_dc_18.attackrange.local9389- 354300x80000000000000003058164Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:28.216{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60004-false10.2.13.60local_dc_19.attackrange.local9389- 354300x80000000000000003058163Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:28.181{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60002-false10.2.13.60local_dc_19.attackrange.local9389- 354300x80000000000000003058162Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:23.347{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local60001-false10.199.1.75local_dc_21.attackrange.local9389- 354300x80000000000000003058161Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:23.300{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local59999-false10.199.1.75local_dc_21.attackrange.local9389- 354300x80000000000000003058160Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:17.700{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local59998-false10.19.96.216local_dc_20.attackrange.local9389- 354300x80000000000000003058159Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:17.651{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local59996-false10.19.96.216local_dc_20.attackrange.local9389- 354300x80000000000000003058157Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:05.979{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local59992-false10.2.4.80local_dc_18.attackrange.local9389- 354300x80000000000000003058156Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:05.665{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local59991-false10.2.4.80local_dc_18.attackrange.local9389- 354300x80000000000000003058155Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:05.318{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local59990-false10.2.4.80local_dc_18.attackrange.local9389- 354300x80000000000000003058154Microsoft-Windows-Sysmon/OperationalATTACKPC.attackrange.local-2024-12-26 05:05:04.923{a952aaf9-e3fc-676c-35b2-000000006f00}12808C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exeATTACKERtcptruefalse10.19.82.161ATTACKPC.attackrange.local59989-false10.2.4.80local_dc_18.attackrange.local9389-