11241100x80000000000000007712490Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-08 13:01:11.053{0F9A6540-A70E-63E2-3091-00000000BD02}9332C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\CURRENT_USER_My_4_atomic@art2.local.pfx2023-02-08 13:01:11.053 11241100x80000000000000007712489Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-08 13:01:11.037{0F9A6540-A70E-63E2-3091-00000000BD02}9332C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\CURRENT_USER_My_4_atomic@art2.local.der2023-02-08 13:01:11.037 11241100x80000000000000007712488Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-08 13:01:10.942{0F9A6540-A70E-63E2-3091-00000000BD02}9332C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\CURRENT_USER_My_3_administrator.pfx2023-02-08 13:01:10.942 11241100x80000000000000007712487Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-08 13:01:10.926{0F9A6540-A70E-63E2-3091-00000000BD02}9332C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\CURRENT_USER_My_3_administrator.der2023-02-08 13:01:10.926 11241100x80000000000000007712486Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-08 13:01:10.837{0F9A6540-A70E-63E2-3091-00000000BD02}9332C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\CURRENT_USER_My_2_Administrator.pfx2023-02-08 13:01:10.837 11241100x80000000000000007712459Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-08 13:01:08.352{0F9A6540-A70E-63E2-3091-00000000BD02}9332C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\CURRENT_USER_My_2_Administrator.der2023-02-07 18:39:20.842 11241100x80000000000000007712456Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-08 13:01:08.103{0F9A6540-A70E-63E2-3091-00000000BD02}9332C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\CURRENT_USER_My_1_Administrator.pfx2023-02-07 18:39:20.702 11241100x80000000000000007712455Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-08 13:01:08.089{0F9A6540-A70E-63E2-3091-00000000BD02}9332C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\CURRENT_USER_My_1_Administrator.der2023-02-07 18:39:19.367 11241100x80000000000000007712454Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-08 13:01:07.947{0F9A6540-A70E-63E2-3091-00000000BD02}9332C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\CURRENT_USER_My_0_atomic@art.local.pfx2023-02-08 13:01:07.947 11241100x80000000000000007712453Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-08 13:01:07.932{0F9A6540-A70E-63E2-3091-00000000BD02}9332C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\CURRENT_USER_My_0_atomic@art.local.der2023-02-08 13:01:07.932 11241100x80000000000000007235578Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:24.669{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_6_test.atomic.com.pfx2023-02-07 19:11:21.500 11241100x80000000000000007235575Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:24.638{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_6_test.atomic.com.der2023-02-07 19:11:21.480 11241100x80000000000000007235571Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:24.423{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_5_EC2AMAZ-E9NUJQ3.pfx2023-02-07 19:11:21.331 11241100x80000000000000007235569Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:24.386{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_5_EC2AMAZ-E9NUJQ3.der2023-02-07 19:11:21.315 11241100x80000000000000007235566Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:24.186{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_4_win-dc-mhaag-attack-range-84.attackrange.local.pfx2023-02-07 19:11:21.147 11241100x80000000000000007235564Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:24.167{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_4_win-dc-mhaag-attack-range-84.attackrange.local.der2023-02-07 19:11:21.131 11241100x80000000000000007235559Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:23.944{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_3_.pfx2023-02-07 19:11:20.855 11241100x80000000000000007235549Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:23.831{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_3_.der2023-02-07 19:11:20.815 11241100x80000000000000007235521Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:23.547{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_2_attackrange-WIN-DC-MHAAG-AT-CA.pfx2023-02-07 19:11:20.553 11241100x80000000000000007235518Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:23.510{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_2_attackrange-WIN-DC-MHAAG-AT-CA.der2023-02-07 19:11:20.511 11241100x80000000000000007235509Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:23.312{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_1_atomicredteam.com.pfx2023-02-07 19:11:20.235 11241100x80000000000000007235507Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:23.289{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_1_atomicredteam.com.der2023-02-07 19:11:20.213 11241100x80000000000000007235505Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:23.018{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_0_test.atomic.com.pfx2023-02-07 19:11:20.025 11241100x80000000000000007235503Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:22.949{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_0_test.atomic.com.der2023-02-07 19:11:19.986 11241100x80000000000000007235496Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:21.500{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_6_test.atomic.com.pfx2023-02-07 19:11:21.500 11241100x80000000000000007235494Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:21.480{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_6_test.atomic.com.der2023-02-07 19:11:21.480 11241100x80000000000000007235493Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:21.331{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_5_EC2AMAZ-E9NUJQ3.pfx2023-02-07 19:11:21.331 11241100x80000000000000007235492Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:21.315{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_5_EC2AMAZ-E9NUJQ3.der2023-02-07 19:11:21.315 11241100x80000000000000007235490Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:21.147{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_4_win-dc-mhaag-attack-range-84.attackrange.local.pfx2023-02-07 19:11:21.147 11241100x80000000000000007235489Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:21.131{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_4_win-dc-mhaag-attack-range-84.attackrange.local.der2023-02-07 19:11:21.131 11241100x80000000000000007235484Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:20.855{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_3_.pfx2023-02-07 19:11:20.855 11241100x80000000000000007235483Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:20.816{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_3_.der2023-02-07 19:11:20.815 11241100x80000000000000007235482Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:20.554{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_2_attackrange-WIN-DC-MHAAG-AT-CA.pfx2023-02-07 19:11:20.553 11241100x80000000000000007235481Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:20.511{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_2_attackrange-WIN-DC-MHAAG-AT-CA.der2023-02-07 19:11:20.511 11241100x80000000000000007235477Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:20.235{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_1_atomicredteam.com.pfx2023-02-07 19:11:20.235 11241100x80000000000000007235476Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:20.213{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_1_atomicredteam.com.der2023-02-07 19:11:20.213 11241100x80000000000000007235457Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:20.025{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_0_test.atomic.com.pfx2023-02-07 19:11:20.025 11241100x80000000000000007235454Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 19:11:19.987{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\local_machine_my_0_test.atomic.com.der2023-02-07 19:11:19.986 11241100x80000000000000007221952Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 18:39:20.845{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\CURRENT_USER_My_2_administrator.pfx2023-02-07 18:39:20.845 11241100x80000000000000007221951Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 18:39:20.843{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\CURRENT_USER_My_2_administrator.der2023-02-07 18:39:20.842 11241100x80000000000000007221950Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 18:39:20.702{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\CURRENT_USER_My_1_Administrator.pfx2023-02-07 18:39:20.702 11241100x80000000000000007221893Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 18:39:19.367{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\CURRENT_USER_My_1_Administrator.der2023-02-07 18:39:19.367 11241100x80000000000000007221891Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 18:39:19.082{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\CURRENT_USER_My_0_Administrator.pfx2023-01-27 16:57:26.149 11241100x80000000000000007221889Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 18:39:19.067{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\CURRENT_USER_My_0_Administrator.der2023-01-27 16:57:26.141 11241100x80000000000000007221210Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 18:37:36.823{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\user_capi_3_te-0d713529-443a-4096-8775-2eec92c72870.keyx.rsa.pvk2023-02-07 18:37:36.823 11241100x80000000000000007221135Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 18:37:33.227{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\user_capi_1_te-ba0c51f5-8700-4ec5-9ec0-bbcf3b6b0eb1.keyx.rsa.pvk2023-02-07 18:37:33.227 11241100x80000000000000007221134Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 18:37:33.158{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\user_capi_0_eae48e08-55fa-44a1-82d3-d766fc6218ef.keyx.rsa.pvk2023-01-27 17:03:47.609 11241100x80000000000000007218555Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 18:31:33.643{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\ntds_capi_0_bf9171b9-98bd-4f7a-84cd-d99ec7d98914.der2023-02-07 18:31:33.643 11241100x80000000000000007218552Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 18:31:33.643{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\ntds_capi_0_bf9171b9-98bd-4f7a-84cd-d99ec7d98914.pfx2023-02-07 18:31:33.643 11241100x80000000000000007218551Microsoft-Windows-Sysmon/Operationalwin-dc-mhaag-attack-range-84.attackrange.localDownloads2023-02-07 18:31:33.627{0F9A6540-986C-63E2-6D8F-00000000BD02}7336C:\Users\Administrator\Downloads\mimikatz_trunk\x64\mimikatz.exeC:\Users\Administrator\Downloads\mimikatz_trunk\x64\ntds_capi_0_bf9171b9-98bd-4f7a-84cd-d99ec7d98914.keyx.rsa.pvk2023-02-07 18:31:33.627