diff --git a/.playwright-mcp/console-2026-02-20T16-32-53-248Z.log b/.playwright-mcp/console-2026-02-20T16-32-53-248Z.log new file mode 100644 index 0000000..78bc6c1 --- /dev/null +++ b/.playwright-mcp/console-2026-02-20T16-32-53-248Z.log @@ -0,0 +1 @@ +[ 656ms] [WARNING] No routes matched location "/network-map" @ http://localhost:3000/static/js/main.c0a7ab6d.js:1 diff --git a/.playwright-mcp/console-2026-02-20T18-16-44-089Z.log b/.playwright-mcp/console-2026-02-20T18-16-44-089Z.log new file mode 100644 index 0000000..c3980e2 --- /dev/null +++ b/.playwright-mcp/console-2026-02-20T18-16-44-089Z.log @@ -0,0 +1 @@ +[ 4269ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.6d916bcf.js:1 diff --git a/.playwright-mcp/console-2026-02-20T18-26-05-692Z.log b/.playwright-mcp/console-2026-02-20T18-26-05-692Z.log new file mode 100644 index 0000000..f9bdf8e --- /dev/null +++ b/.playwright-mcp/console-2026-02-20T18-26-05-692Z.log @@ -0,0 +1 @@ +[ 496ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.28ae077d.js:1 diff --git a/.playwright-mcp/console-2026-02-20T18-30-45-724Z.log b/.playwright-mcp/console-2026-02-20T18-30-45-724Z.log new file mode 100644 index 0000000..c9fdda9 --- /dev/null +++ b/.playwright-mcp/console-2026-02-20T18-30-45-724Z.log @@ -0,0 +1,76 @@ +[ 402ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.cb47c3a0.js:1 +[ 60389ms] [ERROR] Failed to load resource: the server responded with a status of 500 (Internal Server Error) @ http://localhost:3000/api/analysis/process-tree?hunt_id=4bb956a4225e45459a464da1146d3cf5:0 +[ 114742ms] [ERROR] Failed to load resource: the server responded with a status of 500 (Internal Server Error) @ http://localhost:3000/api/analysis/process-tree?hunt_id=4bb956a4225e45459a464da1146d3cf5:0 +[ 116603ms] [ERROR] Failed to load resource: the server responded with a status of 500 (Internal Server Error) @ http://localhost:3000/api/analysis/process-tree?hunt_id=4bb956a4225e45459a464da1146d3cf5:0 +[ 362021ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.cb47c3a0.js:1 +[ 379006ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.cb47c3a0.js:1 +[ 379019ms] [ERROR] NotFoundError: Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node. + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227378) + at ds (http://localhost:3000/static/js/main.cb47c3a0.js:2:227062) + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227824) + at ds (http://localhost:3000/static/js/main.cb47c3a0.js:2:227062) + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227824) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228635) + at vs (http://localhost:3000/static/js/main.cb47c3a0.js:2:229095) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228785) + at vs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228898) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228785) @ http://localhost:3000/static/js/main.cb47c3a0.js:1 +[ 379021ms] NotFoundError: Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node. + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227378) + at ds (http://localhost:3000/static/js/main.cb47c3a0.js:2:227062) + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227824) + at ds (http://localhost:3000/static/js/main.cb47c3a0.js:2:227062) + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227824) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228635) + at vs (http://localhost:3000/static/js/main.cb47c3a0.js:2:229095) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228785) + at vs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228898) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228785) +[ 382647ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.cb47c3a0.js:1 +[ 386088ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.cb47c3a0.js:1 +[ 386343ms] [ERROR] NotFoundError: Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node. + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227378) + at ds (http://localhost:3000/static/js/main.cb47c3a0.js:2:227062) + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227824) + at ds (http://localhost:3000/static/js/main.cb47c3a0.js:2:227062) + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227824) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228635) + at vs (http://localhost:3000/static/js/main.cb47c3a0.js:2:229095) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228785) + at vs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228898) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228785) @ http://localhost:3000/static/js/main.cb47c3a0.js:1 +[ 386345ms] NotFoundError: Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node. + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227378) + at ds (http://localhost:3000/static/js/main.cb47c3a0.js:2:227062) + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227824) + at ds (http://localhost:3000/static/js/main.cb47c3a0.js:2:227062) + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227824) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228635) + at vs (http://localhost:3000/static/js/main.cb47c3a0.js:2:229095) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228785) + at vs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228898) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228785) +[ 397704ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.cb47c3a0.js:1 +[ 519009ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.cb47c3a0.js:1 +[ 519273ms] [ERROR] NotFoundError: Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node. + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227378) + at ds (http://localhost:3000/static/js/main.cb47c3a0.js:2:227062) + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227824) + at ds (http://localhost:3000/static/js/main.cb47c3a0.js:2:227062) + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227824) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228635) + at vs (http://localhost:3000/static/js/main.cb47c3a0.js:2:229095) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228785) + at vs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228898) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228785) @ http://localhost:3000/static/js/main.cb47c3a0.js:1 +[ 519274ms] NotFoundError: Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node. + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227378) + at ds (http://localhost:3000/static/js/main.cb47c3a0.js:2:227062) + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227824) + at ds (http://localhost:3000/static/js/main.cb47c3a0.js:2:227062) + at ps (http://localhost:3000/static/js/main.cb47c3a0.js:2:227824) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228635) + at vs (http://localhost:3000/static/js/main.cb47c3a0.js:2:229095) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228785) + at vs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228898) + at hs (http://localhost:3000/static/js/main.cb47c3a0.js:2:228785) diff --git a/.playwright-mcp/console-2026-02-20T18-44-41-738Z.log b/.playwright-mcp/console-2026-02-20T18-44-41-738Z.log new file mode 100644 index 0000000..08ae19b --- /dev/null +++ b/.playwright-mcp/console-2026-02-20T18-44-41-738Z.log @@ -0,0 +1 @@ +[ 1803ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.b2c21c5a.js:1 diff --git a/.playwright-mcp/console-2026-02-20T18-46-54-542Z.log b/.playwright-mcp/console-2026-02-20T18-46-54-542Z.log new file mode 100644 index 0000000..6a96b06 --- /dev/null +++ b/.playwright-mcp/console-2026-02-20T18-46-54-542Z.log @@ -0,0 +1,48 @@ +[ 2196ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.0e63bc98.js:1 +[ 46100ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.0e63bc98.js:1 +[ 46117ms] [ERROR] NotFoundError: Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node. + at ps (http://localhost:3000/static/js/main.0e63bc98.js:2:227378) + at ds (http://localhost:3000/static/js/main.0e63bc98.js:2:227062) + at ps (http://localhost:3000/static/js/main.0e63bc98.js:2:227824) + at ds (http://localhost:3000/static/js/main.0e63bc98.js:2:227062) + at ps (http://localhost:3000/static/js/main.0e63bc98.js:2:227824) + at hs (http://localhost:3000/static/js/main.0e63bc98.js:2:228635) + at vs (http://localhost:3000/static/js/main.0e63bc98.js:2:229095) + at hs (http://localhost:3000/static/js/main.0e63bc98.js:2:228785) + at vs (http://localhost:3000/static/js/main.0e63bc98.js:2:228898) + at hs (http://localhost:3000/static/js/main.0e63bc98.js:2:228785) @ http://localhost:3000/static/js/main.0e63bc98.js:1 +[ 46118ms] NotFoundError: Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node. + at ps (http://localhost:3000/static/js/main.0e63bc98.js:2:227378) + at ds (http://localhost:3000/static/js/main.0e63bc98.js:2:227062) + at ps (http://localhost:3000/static/js/main.0e63bc98.js:2:227824) + at ds (http://localhost:3000/static/js/main.0e63bc98.js:2:227062) + at ps (http://localhost:3000/static/js/main.0e63bc98.js:2:227824) + at hs (http://localhost:3000/static/js/main.0e63bc98.js:2:228635) + at vs (http://localhost:3000/static/js/main.0e63bc98.js:2:229095) + at hs (http://localhost:3000/static/js/main.0e63bc98.js:2:228785) + at vs (http://localhost:3000/static/js/main.0e63bc98.js:2:228898) + at hs (http://localhost:3000/static/js/main.0e63bc98.js:2:228785) +[ 52506ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.0e63bc98.js:1 +[ 54912ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.0e63bc98.js:1 +[ 54928ms] [ERROR] NotFoundError: Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node. + at ps (http://localhost:3000/static/js/main.0e63bc98.js:2:227378) + at ds (http://localhost:3000/static/js/main.0e63bc98.js:2:227062) + at ps (http://localhost:3000/static/js/main.0e63bc98.js:2:227824) + at ds (http://localhost:3000/static/js/main.0e63bc98.js:2:227062) + at ps (http://localhost:3000/static/js/main.0e63bc98.js:2:227824) + at hs (http://localhost:3000/static/js/main.0e63bc98.js:2:228635) + at vs (http://localhost:3000/static/js/main.0e63bc98.js:2:229095) + at hs (http://localhost:3000/static/js/main.0e63bc98.js:2:228785) + at vs (http://localhost:3000/static/js/main.0e63bc98.js:2:228898) + at hs (http://localhost:3000/static/js/main.0e63bc98.js:2:228785) @ http://localhost:3000/static/js/main.0e63bc98.js:1 +[ 54929ms] NotFoundError: Failed to execute 'removeChild' on 'Node': The node to be removed is not a child of this node. + at ps (http://localhost:3000/static/js/main.0e63bc98.js:2:227378) + at ds (http://localhost:3000/static/js/main.0e63bc98.js:2:227062) + at ps (http://localhost:3000/static/js/main.0e63bc98.js:2:227824) + at ds (http://localhost:3000/static/js/main.0e63bc98.js:2:227062) + at ps (http://localhost:3000/static/js/main.0e63bc98.js:2:227824) + at hs (http://localhost:3000/static/js/main.0e63bc98.js:2:228635) + at vs (http://localhost:3000/static/js/main.0e63bc98.js:2:229095) + at hs (http://localhost:3000/static/js/main.0e63bc98.js:2:228785) + at vs (http://localhost:3000/static/js/main.0e63bc98.js:2:228898) + at hs (http://localhost:3000/static/js/main.0e63bc98.js:2:228785) diff --git a/.playwright-mcp/console-2026-02-20T18-50-52-269Z.log b/.playwright-mcp/console-2026-02-20T18-50-52-269Z.log new file mode 100644 index 0000000..048598a --- /dev/null +++ b/.playwright-mcp/console-2026-02-20T18-50-52-269Z.log @@ -0,0 +1,7 @@ +[ 2548ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.c311038e.js:1 +[ 32912ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.c311038e.js:1 +[ 55583ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.c311038e.js:1 +[ 58208ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.c311038e.js:1 +[ 1168933ms] [ERROR] Failed to load resource: the server responded with a status of 504 (Gateway Time-out) @ http://localhost:3000/api/analysis/llm-analyze:0 +[ 1477343ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.c311038e.js:1 +[ 1482908ms] [WARNING] You have set a custom wheel sensitivity. This will make your app zoom unnaturally when using mainstream mice. You should change this value from the default only if you can guarantee that all your users will use the same hardware and OS configuration as your current machine. @ http://localhost:3000/static/js/main.c311038e.js:1 diff --git a/.playwright-mcp/console-2026-02-20T19-16-43-503Z.log b/.playwright-mcp/console-2026-02-20T19-16-43-503Z.log new file mode 100644 index 0000000..1f3adc5 --- /dev/null +++ b/.playwright-mcp/console-2026-02-20T19-16-43-503Z.log @@ -0,0 +1,7 @@ +[ 9612ms] [WARNING] The resource https://github.githubassets.com/assets/mona-sans-14595085164a.woff2 was preloaded using link preload but not used within a few seconds from the window's load event. Please make sure it has an appropriate `as` value and it is preloaded intentionally. @ https://github.com/:0 +[ 17464ms] [WARNING] The resource https://github.githubassets.com/assets/mona-sans-14595085164a.woff2 was preloaded using link preload but not used within a few seconds from the window's load event. Please make sure it has an appropriate `as` value and it is preloaded intentionally. @ https://github.com/enterprise:0 +[ 20742ms] [WARNING] The resource https://github.githubassets.com/assets/mona-sans-14595085164a.woff2 was preloaded using link preload but not used within a few seconds from the window's load event. Please make sure it has an appropriate `as` value and it is preloaded intentionally. @ https://github.com/enterprise:0 +[ 53258ms] [WARNING] The resource https://github.githubassets.com/assets/mona-sans-14595085164a.woff2 was preloaded using link preload but not used within a few seconds from the window's load event. Please make sure it has an appropriate `as` value and it is preloaded intentionally. @ https://github.com/pricing:0 +[ 59240ms] [WARNING] The resource https://github.githubassets.com/assets/mona-sans-14595085164a.woff2 was preloaded using link preload but not used within a few seconds from the window's load event. Please make sure it has an appropriate `as` value and it is preloaded intentionally. @ https://github.com/features/copilot#pricing:0 +[ 67668ms] [WARNING] The resource https://github.githubassets.com/assets/mona-sans-14595085164a.woff2 was preloaded using link preload but not used within a few seconds from the window's load event. Please make sure it has an appropriate `as` value and it is preloaded intentionally. @ https://github.com/features/spark?utm_source=web-copilot-ce-cta&utm_campaign=spark-launch-sep-2025:0 +[ 72166ms] [WARNING] The resource https://github.githubassets.com/assets/mona-sans-14595085164a.woff2 was preloaded using link preload but not used within a few seconds from the window's load event. Please make sure it has an appropriate `as` value and it is preloaded intentionally. @ https://github.com/features/spark?utm_source=web-copilot-ce-cta&utm_campaign=spark-launch-sep-2025:0 diff --git a/.playwright-mcp/console-2026-02-20T19-27-06-976Z.log b/.playwright-mcp/console-2026-02-20T19-27-06-976Z.log new file mode 100644 index 0000000..3ff0361 --- /dev/null +++ b/.playwright-mcp/console-2026-02-20T19-27-06-976Z.log @@ -0,0 +1,3923 @@ +[ 4126ms] [ERROR] Failed to load resource: the server responded with a status of 404 () @ https://www.cbc.ca/akam/13/6e342c4b:0 +[ 5326ms] [ERROR] Failed to load resource: net::ERR_NAME_NOT_RESOLVED @ https://bro-qa.apps.ocp.int.nm.cbc.ca/5aa06764-ab9f-496e-ac45-41dbebed5778:0 +[ 6387ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 6407ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 8987ms] [ERROR] Failed to load resource: net::ERR_NAME_NOT_RESOLVED @ https://cs.lkqd.net/cs?partnerId=109&partnerUserId=eb25020bcc&gdpr=0&gdpr_consent=:0 +[ 9189ms] [ERROR] Failed to load resource: the server responded with a status of 400 (Bad Request) @ https://measureadv.com/userIframe?gdpr=0&gdpr_consent=&p=2&redirect=https%3A%2F%2Fcs.yellowblue.io%2Fcs%3Ffwrd%3D1%26aid%3D11586%26id%3D%7BUID%7D&usp_consent=%5BUS_PRIVACY%5D:0 +[ 9241ms] [ERROR] Failed to load resource: the server responded with a status of 400 (Bad Request) @ https://match.prod.bidr.io/cookie-sync/syn:0 +[ 9256ms] [ERROR] Failed to load resource: the server responded with a status of 404 () @ https://x.bidswitch.net/sync?ssp=synacor&user_id=9A99A1B3400B4CD986A3EA555A52D881:0 +[ 9397ms] [ERROR] Failed to load resource: the server responded with a status of 400 (Bad Request) @ https://measureadv.com/userBackIframe?uid=72949627-bb6f-44f2-a2c5-449b85e77d5a&gdpr={GDPR}&gdpr_consent={GDPR_CONSENT}&p=9:0 +[ 9399ms] [ERROR] Failed to load resource: the server responded with a status of 400 (Bad Request) @ https://measureadv.com/userBackIframe?uid=8620198487172567031&gdpr=%7BGDPR%7D&gdpr_consent=%7BGDPR_CONSENT%7D&p=6:0 +[ 9399ms] [ERROR] Failed to load resource: the server responded with a status of 400 (Bad Request) @ https://measureadv.com/userBackIframe?uid=3383be5a-a993-408d-94f0-ccb21c99e2f2&gdpr=0&gdpr_consent=&p=3:0 +[ 9618ms] [ERROR] Failed to load resource: net::ERR_TOO_MANY_REDIRECTS @ https://partners.tremorhub.com/sync?UIIQ=72b4943b-3fc9-40c8-ad61-2653b44755aa:0 +[ 9688ms] [ERROR] Failed to load resource: net::ERR_CERT_DATE_INVALID @ https://tracker.adex-rtb.com/sync?id=1&uid=9A99A1B3400B4CD986A3EA555A52D881:0 +[ 9696ms] [ERROR] Failed to load resource: the server responded with a status of 424 (Failed Dependency) @ https://t.adx.opera.com/pub/sync?pubid=pub10101531197440&gdpr=1&gdpr_consent=:0 +[ 9696ms] [ERROR] Failed to load resource: the server responded with a status of 424 (Failed Dependency) @ https://t.adx.opera.com/pub/sync?pubid=pub10101531197440&gdpr=1&gdpr_consent=:0 +[ 10228ms] [ERROR] Failed to load resource: the server responded with a status of 424 (Failed Dependency) @ https://t.adx.opera.com/pub/sync?pubid=pub10101531197440&gdpr=1&gdpr_consent=:0 +[ 10711ms] [ERROR] Failed to load resource: net::ERR_TOO_MANY_REDIRECTS @ https://pxl.iqm.com/i/ck/pubmatic?puid=03BA536A-23C8-450A-BEAC-4C43F22FECC9:0 +[ 12159ms] [ERROR] Failed to load resource: net::ERR_CONNECTION_RESET @ https://cs.admanmedia.com/2d3a53bfd5e6a5d474cb0cccf071882f.gif?puid=eb25020bcc&gdpr=0&gdpr_consent=:0 +[ 13451ms] [ERROR] Failed to load resource: net::ERR_NAME_NOT_RESOLVED @ https://usermatch.krxd.net/um/v2?partner=tapad:0 +[ 8987ms] [ERROR] Failed to load resource: net::ERR_NAME_NOT_RESOLVED @ https://cs.lkqd.net/cs?partnerId=109&partnerUserId=eb25020bcc&gdpr=0&gdpr_consent=:0 +[ 13451ms] [ERROR] Failed to load resource: net::ERR_NAME_NOT_RESOLVED @ https://usermatch.krxd.net/um/v2?partner=tapad:0 +[ 8987ms] [ERROR] Failed to load resource: net::ERR_NAME_NOT_RESOLVED @ https://cs.lkqd.net/cs?partnerId=109&partnerUserId=eb25020bcc&gdpr=0&gdpr_consent=:0 +[ 13451ms] [ERROR] Failed to load resource: net::ERR_NAME_NOT_RESOLVED @ https://usermatch.krxd.net/um/v2?partner=tapad:0 +[ 9696ms] [ERROR] Failed to load resource: the server responded with a status of 424 (Failed Dependency) @ https://t.adx.opera.com/pub/sync?pubid=pub10101531197440&gdpr=1&gdpr_consent=:0 +[ 10228ms] [ERROR] Failed to load resource: the server responded with a status of 424 (Failed Dependency) @ https://t.adx.opera.com/pub/sync?pubid=pub10101531197440&gdpr=1&gdpr_consent=:0 +[ 13889ms] [ERROR] Failed to load resource: net::ERR_TOO_MANY_REDIRECTS @ https://id5-sync.com/k/264.gif?puid=e6a467ce-4b8a-4f8d-9b92-bdbc46d704e7&ttl=%%TTL%%:0 +[ 9696ms] [ERROR] Failed to load resource: the server responded with a status of 424 (Failed Dependency) @ https://t.adx.opera.com/pub/sync?pubid=pub10101531197440&gdpr=1&gdpr_consent=:0 +[ 10228ms] [ERROR] Failed to load resource: the server responded with a status of 424 (Failed Dependency) @ https://t.adx.opera.com/pub/sync?pubid=pub10101531197440&gdpr=1&gdpr_consent=:0 +[ 14006ms] [ERROR] Failed to load resource: the server responded with a status of 410 (Gone) @ https://ads.stickyadstv.com/pbs-user-sync?gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&r=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dfreewheel-ssp%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%7Bviewerid%7D:0 +[ 14006ms] [ERROR] Failed to load resource: the server responded with a status of 410 (Gone) @ https://ads.stickyadstv.com/pbs-user-sync?gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&r=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dfreewheel-ssp%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%7Bviewerid%7D:0 +[ 14010ms] [ERROR] Failed to load resource: the server responded with a status of 410 (Gone) @ https://ads.stickyadstv.com/pbs-user-sync?gdpr=&gdpr_consent=&us_privacy=&gpp=&gpp_sid=&r=https%3A%2F%2Fcookies.nextmillmedia.com%2Fsetuid%3Fbidder%3Dfreewheel-ssp%26nmuid%3D%26gdpr%3D%26gdpr_consent%3D%26us_privacy%3D%26uid%3D%7Bviewerid%7D:0 +[ 13889ms] [ERROR] Failed to load resource: net::ERR_TOO_MANY_REDIRECTS @ https://id5-sync.com/k/264.gif?puid=e6a467ce-4b8a-4f8d-9b92-bdbc46d704e7&ttl=%%TTL%%:0 +[ 9696ms] [ERROR] Failed to load resource: the server responded with a status of 424 (Failed Dependency) @ https://t.adx.opera.com/pub/sync?pubid=pub10101531197440&gdpr=1&gdpr_consent=:0 +[ 10228ms] [ERROR] Failed to load resource: the server responded with a status of 424 (Failed Dependency) @ https://t.adx.opera.com/pub/sync?pubid=pub10101531197440&gdpr=1&gdpr_consent=:0 +[ 8987ms] [ERROR] Failed to load resource: net::ERR_NAME_NOT_RESOLVED @ https://cs.lkqd.net/cs?partnerId=109&partnerUserId=eb25020bcc&gdpr=0&gdpr_consent=:0 +[ 13889ms] [ERROR] Failed to load resource: net::ERR_TOO_MANY_REDIRECTS @ https://id5-sync.com/k/264.gif?puid=e6a467ce-4b8a-4f8d-9b92-bdbc46d704e7&ttl=%%TTL%%:0 +[ 9696ms] [ERROR] Failed to load resource: the server responded with a status of 424 (Failed Dependency) @ https://t.adx.opera.com/pub/sync?pubid=pub10101531197440&gdpr=1&gdpr_consent=:0 +[ 10228ms] [ERROR] Failed to load resource: the server responded with a status of 424 (Failed Dependency) @ https://t.adx.opera.com/pub/sync?pubid=pub10101531197440&gdpr=1&gdpr_consent=:0 +[ 13889ms] [ERROR] Failed to load resource: net::ERR_TOO_MANY_REDIRECTS @ https://id5-sync.com/k/264.gif?puid=e6a467ce-4b8a-4f8d-9b92-bdbc46d704e7&ttl=%%TTL%%:0 +[ 14573ms] [ERROR] Failed to load resource: the server responded with a status of 400 () @ https://cs.ingage.tech/v1/sync/equative/9c655ee5-e828-419e-8f8a-534b308d0e89?uid=:0 +[ 9696ms] [ERROR] Failed to load resource: the server responded with a status of 424 (Failed Dependency) @ https://t.adx.opera.com/pub/sync?pubid=pub10101531197440&gdpr=1&gdpr_consent=:0 +[ 10228ms] [ERROR] Failed to load resource: the server responded with a status of 424 (Failed Dependency) @ https://t.adx.opera.com/pub/sync?pubid=pub10101531197440&gdpr=1&gdpr_consent=:0 +[ 14645ms] [ERROR] Failed to load resource: the server responded with a status of 400 () @ https://eb2.3lift.com/getuid?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fvisitor.us-west1.gcp.omnitagjs.com%2Fvisitor%2Fsync%3Fgdpr%3D0%26gdpr_consent%3D%26is_cookie_sync_uid%3D1%26name%3DTRIPLELIFT_cookie_sync%26ttl%3D720%26uid%3D771bebe2d6221e9ca65e16ebf8d2f6f3%26visitor%3D%24UID:0 +[ 14709ms] [ERROR] Failed to load resource: the server responded with a status of 400 () @ https://eb2.3lift.com/getuid?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fvisitor.us-west1.gcp.omnitagjs.com%2Fvisitor%2Fsync%3Fgdpr%3D0%26gdpr_consent%3D%26is_cookie_sync_uid%3D1%26name%3DTRIPLELIFT_cookie_sync%26ttl%3D720%26uid%3D771bebe2d6221e9ca65e16ebf8d2f6f3%26visitor%3D%24UID:0 +[ 15765ms] [ERROR] Failed to load resource: the server responded with a status of 400 () @ https://cs.ingage.tech/v1/sync/loopme/9c655ee5-e828-419e-8f8a-534b308d0e89?uid=0c00c7bc-2265-49c8-a2e0-0080e12d6f69:0 +[ 15793ms] Error: Minified React error #421; visit https://reactjs.org/docs/error-decoder.html?invariant=421 for the full message or use the non-minified dev environment for full errors and additional helpful warnings. + at https://www.cbc.ca/a/scripts/oc-vendor-react.cea8d0fc619f37ab.js:1:89942 + at ow (https://www.cbc.ca/a/scripts/oc-vendor-react.cea8d0fc619f37ab.js:1:90216) + at i (https://www.cbc.ca/a/scripts/oc-vendor-react.cea8d0fc619f37ab.js:1:133190) + at uF (https://www.cbc.ca/a/scripts/oc-vendor-react.cea8d0fc619f37ab.js:1:110948) + at https://www.cbc.ca/a/scripts/oc-vendor-react.cea8d0fc619f37ab.js:1:110814 + at uD (https://www.cbc.ca/a/scripts/oc-vendor-react.cea8d0fc619f37ab.js:1:110822) + at uP (https://www.cbc.ca/a/scripts/oc-vendor-react.cea8d0fc619f37ab.js:1:107907) + at r6 (https://www.cbc.ca/a/scripts/oc-vendor-react.cea8d0fc619f37ab.js:1:56680) + at https://www.cbc.ca/a/scripts/oc-vendor-react.cea8d0fc619f37ab.js:1:105471 +[ 16008ms] [WARNING] [Meta Pixel] - Duplicate Pixel ID: 1023886784662676. @ https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:9 +[ 16053ms] [ERROR] Attestation check for Attribution Reporting on https://www.facebook.com failed. @ https://www.cbc.ca/news/world/livestory/scotus-tariff-ruling-9.7099048:0 +[ 17325ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 19371ms] [ERROR] Failed to load resource: net::ERR_NAME_NOT_RESOLVED @ https://hb.yahoo.net/cksync.php?cs=1&type=58280&ovsid=7869f8d3-7fa5-4b8a-be28-dff4f5dd51ed:0 +[ 19481ms] [ERROR] Failed to load resource: the server responded with a status of 400 () @ https://eb2.3lift.com/xuid?idenv=:0 +[ 19481ms] [ERROR] Failed to load resource: the server responded with a status of 400 () @ https://eb2.3lift.com/xuid?idenv=:0 +[ 19699ms] [ERROR] Failed to load resource: the server responded with a status of 400 (Bad Request) @ https://match.prod.bidr.io/cookie-sync/syn:0 +[ 19715ms] [ERROR] Failed to load resource: the server responded with a status of 404 () @ https://x.bidswitch.net/sync?ssp=synacor&user_id=9A99A1B3400B4CD986A3EA555A52D881:0 +[ 20939ms] [ERROR] Failed to load resource: net::ERR_TOO_MANY_REDIRECTS @ https://freewheel-match.dotomi.com/match/bounce/current?networkId=41963&version=1&gdpr=&gdpr_consent=:0 +[ 59241ms] [WARNING] [GPT] Slot bigbox-single-656840 rendered inside of the viewport. +https://goo.gle/gpt-message#169 @ https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:9 +[ 17325ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 59265ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 109535ms] [ERROR] Failed to load resource: the server responded with a status of 404 (Not Found) @ https://us.shb-sync.com/76193a03-069b-4536-bc35-499b8e20d2af.gif?puid=[UID]&gdpr=0&gdpr_consent=&ccpa=&redir=https%3A%2F%2Fhb.trustedstack.com%2Fcksync.php%3Fcs%3D61%26type%3Dtst%26ovsid%3D%5BUID%5D%26gdpr%3D0%26gdpr_consent%3D%26ccpa%3D:0 +[ 113300ms] [WARNING] [GPT] Slot bigbox-single-447429 rendered inside of the viewport. +https://goo.gle/gpt-message#169 @ https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:9 +[ 17325ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 59265ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 113328ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 124417ms] [WARNING] [GPT] Slot bigbox-single-710105 rendered inside of the viewport. +https://goo.gle/gpt-message#169 @ https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:9 +[ 17325ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 59265ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 113328ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 124451ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 136334ms] [ERROR] Attestation check for Attribution Reporting on https://www.facebook.com failed. @ https://www.cbc.ca/news/world/livestory/scotus-tariff-ruling-9.7099048:0 +[ 138922ms] [WARNING] [GPT] Slot bigbox-single-236464 rendered inside of the viewport. +https://goo.gle/gpt-message#169 @ https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:9 +[ 17325ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 59265ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 113328ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 124451ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 138943ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 201957ms] [WARNING] [GPT] Slot bigbox-single-219131 rendered inside of the viewport. +https://goo.gle/gpt-message#169 @ https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:9 +[ 17325ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 59265ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 113328ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 124451ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 138943ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 201979ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 206724ms] [ERROR] Failed to load resource: net::ERR_NAME_NOT_RESOLVED @ https://bro-qa.apps.ocp.int.nm.cbc.ca/5aa06764-ab9f-496e-ac45-41dbebed5778:0 +[ 206987ms] [WARNING] [Meta Pixel] - Duplicate Pixel ID: 1023886784662676. @ https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:9 +[ 207032ms] [ERROR] Attestation check for Attribution Reporting on https://www.facebook.com failed. @ https://www.cbc.ca/:0 +[ 207805ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=ceeid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207806ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=crwdcntrl.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207806ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=epsilon.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207806ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207806ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=utiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207806ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intimatemerger.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207806ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/ping?e=1:0 +[ 207806ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intentiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207806ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=google.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207806ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=50&pc=1457076390800947&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&ns=3:0 +[ 207808ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=56&pc=1457076390800947&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&nc=5876:0 +[ 207808ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=52&pc=1457076390800947&lid=pubcid.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&sl=36:0 +[ 207808ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.indexexchange.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207808ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=openx.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207808ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=id5-sync.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207808ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=rubiconproject.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207808ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=euid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207809ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=novatiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207809ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=adserver.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207809ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.triplelift.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207809ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=justtag.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207809ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=yahoo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207809ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=mygaruID&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207809ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.sovrn.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207809ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207809ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveramp.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207809ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=uidapi.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207810ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=pubmatic.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207810ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=bidswitch.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207810ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=audigent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207810ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=ceeid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207810ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=19&pc=1457076390800947&lid=pubcid.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&fp=1&hs=1&sl=36:0 +[ 207810ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=crwdcntrl.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207810ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=epsilon.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207810ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207810ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=utiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207810ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intimatemerger.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207810ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intentiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207810ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=google.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207810ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=19&pc=1457076390800947&lid=esp.criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&hs=0&sl=-1:0 +[ 207811ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=19&pc=1457076390800947&lid=esp.pubmatic.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&hs=0&sl=0:0 +[ 207811ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=permutive-secure-signal&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207811ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=esp.criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207811ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.indexexchange.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207811ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=openx.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207811ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=id5-sync.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207811ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=rubiconproject.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207811ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=euid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207811ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=novatiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207811ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=adserver.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207811ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.triplelift.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207812ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=justtag.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207812ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=yahoo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207812ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=mygaruID&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207812ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.sovrn.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207812ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=bidswitch.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207812ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=audigent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207812ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=ceeid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207813ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=crwdcntrl.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207813ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=epsilon.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207813ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207815ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=pubmatic.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207815ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=bidswitch.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207815ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=audigent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207815ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=ceeid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207815ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=crwdcntrl.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207816ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=epsilon.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207816ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207816ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=utiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207816ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intimatemerger.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207816ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intentiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207816ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=google.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207816ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=19&pc=1457076390800947&lid=esp.criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&hs=0&sl=-1:0 +[ 207816ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=19&pc=1457076390800947&lid=esp.pubmatic.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&hs=0&sl=0:0 +[ 207816ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=permutive-secure-signal&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207816ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=esp.criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207816ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.indexexchange.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207817ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=novatiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207817ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=adserver.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207817ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.triplelift.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207817ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=justtag.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207817ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=yahoo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207817ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=mygaruID&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207817ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207817ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveramp.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207817ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=uidapi.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207817ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=pubmatic.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207818ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=bidswitch.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207818ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=audigent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207818ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=ceeid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207818ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=crwdcntrl.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207818ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=epsilon.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207818ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207818ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=utiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207818ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intimatemerger.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207818ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intentiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207818ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=google.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207818ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=50&pc=1457076390800947&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&ns=3:0 +[ 207818ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=56&pc=1457076390800947&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&nc=5876:0 +[ 207818ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=52&pc=1457076390800947&lid=pubcid.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&sl=36:0 +[ 207818ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.indexexchange.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=openx.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=id5-sync.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=rubiconproject.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=euid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=novatiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=adserver.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.triplelift.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=justtag.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=yahoo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=mygaruID&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.sovrn.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveramp.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=uidapi.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=pubmatic.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=bidswitch.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=audigent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207819ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=ceeid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=19&pc=1457076390800947&lid=pubcid.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&fp=1&hs=1&sl=36:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=crwdcntrl.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=epsilon.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=utiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intimatemerger.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intentiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=google.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=19&pc=1457076390800947&lid=esp.criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&hs=0&sl=-1:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=19&pc=1457076390800947&lid=esp.pubmatic.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&hs=0&sl=0:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=permutive-secure-signal&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=esp.criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.indexexchange.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=openx.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=id5-sync.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=rubiconproject.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=euid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207820ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=novatiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207821ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=adserver.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207821ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.triplelift.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207821ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=justtag.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207821ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=yahoo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207821ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=mygaruID&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207821ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.sovrn.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207821ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207821ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveramp.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207821ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=uidapi.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207821ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=pubmatic.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207821ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=audigent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207821ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=ceeid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207821ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=crwdcntrl.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207821ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=epsilon.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207822ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207822ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=utiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207822ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intimatemerger.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207822ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intentiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207822ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=google.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207822ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=50&pc=1457076390800947&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&ns=3:0 +[ 207822ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=56&pc=1457076390800947&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&nc=5876:0 +[ 207822ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=52&pc=1457076390800947&lid=pubcid.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&sl=36:0 +[ 207822ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.indexexchange.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207822ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=openx.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207822ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=id5-sync.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207822ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=rubiconproject.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207822ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=euid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207822ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=novatiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207822ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=adserver.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207823ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=justtag.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207823ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=yahoo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207823ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=mygaruID&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207823ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.sovrn.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207823ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207823ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveramp.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207823ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=uidapi.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207823ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/ping?e=1:0 +[ 207823ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=pubmatic.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207823ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=bidswitch.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207823ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=audigent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207823ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=ceeid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207823ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=19&pc=1457076390800947&lid=pubcid.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&fp=1&hs=1&sl=36:0 +[ 207823ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=crwdcntrl.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207823ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=epsilon.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207823ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207824ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=utiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207824ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intimatemerger.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207824ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=permutive-secure-signal&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207824ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=esp.criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207824ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.indexexchange.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207824ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=openx.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207824ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=id5-sync.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207824ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=rubiconproject.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207824ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=euid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207825ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=novatiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207825ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=adserver.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207825ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.triplelift.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207825ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=justtag.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207825ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=yahoo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207825ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=mygaruID&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207826ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=bidswitch.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207826ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=audigent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207826ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=ceeid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207826ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=crwdcntrl.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207826ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=epsilon.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207827ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=google.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207827ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=50&pc=1457076390800947&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&ns=3:0 +[ 207827ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=rubiconproject.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207828ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=euid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207828ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=novatiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207828ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=adserver.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207828ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.triplelift.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207828ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=justtag.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207829ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=yahoo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207829ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=pubmatic.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207829ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=bidswitch.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207829ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=audigent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207829ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=ceeid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207829ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=19&pc=1457076390800947&lid=pubcid.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&fp=1&hs=1&sl=36:0 +[ 207829ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=crwdcntrl.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207830ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=epsilon.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207830ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207830ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=utiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207830ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intimatemerger.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207830ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intentiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207831ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=19&pc=1457076390800947&lid=esp.pubmatic.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&hs=0&sl=0:0 +[ 207831ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=permutive-secure-signal&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207831ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=esp.criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207831ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.indexexchange.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207831ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=openx.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207831ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=id5-sync.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207831ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=rubiconproject.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207831ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=euid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207831ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=novatiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207831ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=adserver.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207831ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.triplelift.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207832ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=justtag.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207832ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=yahoo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207832ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=mygaruID&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207832ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.sovrn.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207832ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207832ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveramp.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207832ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=uidapi.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207833ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=ceeid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207833ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=crwdcntrl.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207833ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=epsilon.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207833ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207833ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=utiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207833ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intimatemerger.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207833ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intentiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207834ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=google.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207834ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=euid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207834ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=novatiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207834ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=adserver.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207835ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.triplelift.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207835ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=justtag.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207835ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=yahoo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207835ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=mygaruID&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207835ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.sovrn.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207835ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207835ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveramp.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207835ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=uidapi.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207835ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=audigent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207835ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=ceeid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207835ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=19&pc=1457076390800947&lid=pubcid.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&fp=1&hs=1&sl=36:0 +[ 207836ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=crwdcntrl.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207836ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=epsilon.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207836ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207836ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=utiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207836ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intimatemerger.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207836ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intentiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207836ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=google.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207836ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=19&pc=1457076390800947&lid=esp.criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&hs=0&sl=-1:0 +[ 207836ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=19&pc=1457076390800947&lid=esp.pubmatic.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&hs=0&sl=0:0 +[ 207836ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=permutive-secure-signal&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207836ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=esp.criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207836ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=openx.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207837ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=id5-sync.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207837ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=rubiconproject.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207837ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=euid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207837ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=novatiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207837ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=adserver.org&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207837ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.triplelift.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207837ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=criteo.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207837ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveramp.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207838ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=audigent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207838ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=ceeid.eu&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207838ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=crwdcntrl.net&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207838ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=epsilon.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207838ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=liveintent.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207838ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=utiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207838ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intimatemerger.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207838ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=intentiq.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207839ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=57&pc=1457076390800947&lid=google.com&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462:0 +[ 207839ms] [ERROR] Failed to load resource: net::ERR_INSUFFICIENT_RESOURCES @ https://pagead2.googlesyndication.com/pagead/gen_204?id=esp&c=50&pc=1457076390800947&eids=31096825%2C95379660%2C31096860%2C31088081%2C95383157%2C95382462&ns=3:0 +[ 208012ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208013ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208014ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208015ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208015ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208016ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208017ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208017ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208018ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561440) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208019ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560190) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208021ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560494) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208021ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208022ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208023ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208023ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208023ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208024ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208024ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208025ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208025ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208025ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208026ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208026ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208026ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208027ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208027ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208028ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208028ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208029ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208029ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208029ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90266) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208030ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208030ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208030ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208030ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208030ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208031ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208031ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208032ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at wp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:91122) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560956) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208032ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at wp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:91122) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560956) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208033ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208033ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208033ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208033ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208033ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208034ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208034ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208034ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208034ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208035ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208035ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208035ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208035ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208035ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208037ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208037ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208037ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208037ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208038ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208038ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208042ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208042ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208042ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208042ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208043ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208044ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208045ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208045ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208045ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208046ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208046ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208046ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at wp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:91122) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560956) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208047ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at wp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:91122) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560956) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208047ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208047ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208048ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208049ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208050ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208050ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208050ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208050ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208051ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208051ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208051ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208051ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208051ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208052ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208052ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208052ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208052ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208052ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208052ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208053ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208053ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208054ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208054ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208054ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561440) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208055ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560190) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208056ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560494) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208056ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208057ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208057ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208057ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208057ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208057ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208058ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208058ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208058ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208058ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208059ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208059ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208059ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208062ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208062ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208063ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208063ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208063ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208064ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208064ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90266) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208064ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208065ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208065ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208065ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208066ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208066ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208066ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208068ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at wp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:91122) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560956) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208069ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at wp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:91122) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560956) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208070ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208071ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208072ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208072ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208072ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208073ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208073ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208073ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208074ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208074ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208074ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208075ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208075ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208075ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208076ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208076ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208077ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208078ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208079ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208079ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208080ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208080ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208080ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208080ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208081ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208082ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208082ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208082ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561440) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208083ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560190) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208084ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560494) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208084ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208084ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208084ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208084ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208085ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208085ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208085ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208086ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208086ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208087ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208087ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208087ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208088ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208088ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208088ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208089ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208089ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208089ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208092ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90266) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208093ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208094ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208094ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208095ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208096ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208098ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208099ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208099ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208100ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208101ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208102ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208104ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208104ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208105ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208105ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208106ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208108ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208108ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208110ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208110ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208111ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208111ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208111ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208114ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208115ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561440) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208117ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208117ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208118ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208118ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208119ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208119ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208121ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208122ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208123ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208123ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208123ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208124ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90266) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208124ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208124ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208125ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208126ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208126ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208128ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208129ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at wp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:91122) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560956) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208130ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208130ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208131ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208131ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208132ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208132ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208132ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208133ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208133ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208135ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208135ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208136ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208136ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208136ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208137ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208137ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208138ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208140ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208141ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208142ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208143ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208143ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208144ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208144ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208145ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208146ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208147ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208147ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208148ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208148ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208148ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208149ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208149ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208149ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208150ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208150ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208151ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208151ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208152ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90266) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208153ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208154ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208154ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208155ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208155ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208156ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208157ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560944) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208157ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at wp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:91122) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560956) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208158ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at wp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:91122) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:560956) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208158ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208159ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208161ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208161ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208162ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208163ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208163ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208163ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208164ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208166ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208167ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208168ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208168ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208168ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208168ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208169ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208170ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208170ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208171ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208171ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at np (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:90098) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561269) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208172ms] TypeError: Failed to fetch + at https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:13:1819 + at Mj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42640) + at Nj (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:42257) + at jp (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:89346) + at M.id [as f] (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:561440) + at QZ.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:366821) + at jG.j (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:365844) + at lG (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:209860) + at nG.next (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210152) + at b (https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202602190101/pubads_impl.js?cb=31096860:19:210403) +[ 208276ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 208276ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 208336ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 209950ms] [ERROR] Failed to load resource: the server responded with a status of 413 () @ https://o148878.ingest.sentry.io/api/5733890/envelope/?sentry_key=fef33bc017414f09bcf117882ad6b34a&sentry_version=7&sentry_client=sentry.javascript.react%2F8.20.0:0 +[ 210682ms] [ERROR] Failed to load resource: the server responded with a status of 404 (Not Found) @ https://us.shb-sync.com/76193a03-069b-4536-bc35-499b8e20d2af.gif?puid=[UID]&gdpr=0&gdpr_consent=&ccpa=&redir=https%3A%2F%2Fhb.trustedstack.com%2Fcksync.php%3Fcs%3D61%26type%3Dtst%26ovsid%3D%5BUID%5D%26gdpr%3D0%26gdpr_consent%3D%26ccpa%3D:0 +[ 210868ms] [ERROR] Failed to load resource: the server responded with a status of 404 () @ https://x.bidswitch.net/sync?ssp=synacor&user_id=9A99A1B3400B4CD986A3EA555A52D881:0 +[ 210932ms] [ERROR] Failed to load resource: the server responded with a status of 400 (Bad Request) @ https://match.prod.bidr.io/cookie-sync/syn:0 +[ 217105ms] [WARNING] [GPT] Slot intercept-412200 rendered inside of the viewport. +https://goo.gle/gpt-message#169 @ https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:9 +[ 208276ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 208336ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 217128ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 222939ms] [WARNING] [GPT] Slot intercept-404329 rendered inside of the viewport. +https://goo.gle/gpt-message#169 @ https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:9 +[ 208276ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 208336ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 217128ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 222967ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 237305ms] [WARNING] [GPT] Slot intercept-483886 rendered inside of the viewport. +https://goo.gle/gpt-message#169 @ https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:9 +[ 208276ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 208336ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 217128ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 222967ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 237337ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 245891ms] [WARNING] [GPT] Slot intercept-628997 rendered inside of the viewport. +https://goo.gle/gpt-message#169 @ https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:9 +[ 208276ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 208336ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 217128ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 222967ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 237337ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 245924ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 260849ms] [WARNING] [GPT] Slot intercept-804313 rendered inside of the viewport. +https://goo.gle/gpt-message#169 @ https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:9 +[ 208276ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 208336ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 217128ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 222967ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 237337ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 245924ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 260884ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 262197ms] [WARNING] [GPT] Slot intercept-330266 rendered inside of the viewport. +https://goo.gle/gpt-message#169 @ https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:9 +[ 208276ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 208336ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 217128ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 222967ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 237337ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 245924ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 260884ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 262219ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 281371ms] [WARNING] [GPT] Slot intercept-718485 rendered inside of the viewport. +https://goo.gle/gpt-message#169 @ https://www.cbc.ca/a/scripts/oc-vendor-sentry.c08f9c3fae3f762b.js:9 +[ 208276ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 208336ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 217128ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 222967ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 237337ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 245924ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 260884ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 262219ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 +[ 281402ms] [ERROR] Attestation check for Shared Storage on https://www.googleadservices.com failed. @ https://www.googleadservices.com/pagead/managed/js/activeview/current/reach_worklet.html:0 diff --git a/.playwright-mcp/page-2026-02-20T16-33-40-311Z.png b/.playwright-mcp/page-2026-02-20T16-33-40-311Z.png new file mode 100644 index 0000000..a1a2f0a Binary files /dev/null and b/.playwright-mcp/page-2026-02-20T16-33-40-311Z.png differ diff --git a/.playwright-mcp/page-2026-02-20T16-34-14-809Z.png b/.playwright-mcp/page-2026-02-20T16-34-14-809Z.png new file mode 100644 index 0000000..12eae08 Binary files /dev/null and b/.playwright-mcp/page-2026-02-20T16-34-14-809Z.png differ diff --git a/.playwright-mcp/page-2026-02-20T16-38-20-099Z.png b/.playwright-mcp/page-2026-02-20T16-38-20-099Z.png new file mode 100644 index 0000000..ed2a6e5 Binary files /dev/null and b/.playwright-mcp/page-2026-02-20T16-38-20-099Z.png differ diff --git a/.playwright-mcp/page-2026-02-20T16-42-11-611Z.png b/.playwright-mcp/page-2026-02-20T16-42-11-611Z.png new file mode 100644 index 0000000..e2f35ab Binary files /dev/null and b/.playwright-mcp/page-2026-02-20T16-42-11-611Z.png differ diff --git a/.playwright-mcp/page-2026-02-20T18-17-19-668Z.png b/.playwright-mcp/page-2026-02-20T18-17-19-668Z.png new file mode 100644 index 0000000..9b6cddd Binary files /dev/null and b/.playwright-mcp/page-2026-02-20T18-17-19-668Z.png differ diff --git a/.playwright-mcp/page-2026-02-20T18-26-49-357Z.png b/.playwright-mcp/page-2026-02-20T18-26-49-357Z.png new file mode 100644 index 0000000..feb8dc7 Binary files /dev/null and b/.playwright-mcp/page-2026-02-20T18-26-49-357Z.png differ diff --git a/.playwright-mcp/page-2026-02-20T18-31-29-013Z.png b/.playwright-mcp/page-2026-02-20T18-31-29-013Z.png new file mode 100644 index 0000000..9110233 Binary files /dev/null and b/.playwright-mcp/page-2026-02-20T18-31-29-013Z.png differ diff --git a/.playwright-mcp/page-2026-02-20T18-44-58-287Z.png b/.playwright-mcp/page-2026-02-20T18-44-58-287Z.png new file mode 100644 index 0000000..f0d7791 Binary files /dev/null and b/.playwright-mcp/page-2026-02-20T18-44-58-287Z.png differ diff --git a/.playwright-mcp/page-2026-02-20T18-45-12-934Z.png b/.playwright-mcp/page-2026-02-20T18-45-12-934Z.png new file mode 100644 index 0000000..7dea99e Binary files /dev/null and b/.playwright-mcp/page-2026-02-20T18-45-12-934Z.png differ diff --git a/.playwright-mcp/page-2026-02-20T18-47-14-660Z.png b/.playwright-mcp/page-2026-02-20T18-47-14-660Z.png new file mode 100644 index 0000000..87818e6 Binary files /dev/null and b/.playwright-mcp/page-2026-02-20T18-47-14-660Z.png differ diff --git a/.playwright-mcp/page-2026-02-20T18-51-32-804Z.png b/.playwright-mcp/page-2026-02-20T18-51-32-804Z.png new file mode 100644 index 0000000..add8109 Binary files /dev/null and b/.playwright-mcp/page-2026-02-20T18-51-32-804Z.png differ diff --git a/backend/alembic/versions/a3b1c2d4e5f6_add_cases_and_activity_logs.py b/backend/alembic/versions/a3b1c2d4e5f6_add_cases_and_activity_logs.py new file mode 100644 index 0000000..e53c673 --- /dev/null +++ b/backend/alembic/versions/a3b1c2d4e5f6_add_cases_and_activity_logs.py @@ -0,0 +1,72 @@ +"""add cases and activity logs + +Revision ID: a3b1c2d4e5f6 +Revises: 98ab619418bc +Create Date: 2025-01-01 00:00:00.000000 +""" +from typing import Sequence, Union +from alembic import op +import sqlalchemy as sa + +revision: str = "a3b1c2d4e5f6" +down_revision: Union[str, None] = "98ab619418bc" +branch_labels: Union[str, Sequence[str], None] = None +depends_on: Union[str, Sequence[str], None] = None + + +def upgrade() -> None: + op.create_table( + "cases", + sa.Column("id", sa.String(32), primary_key=True), + sa.Column("title", sa.String(512), nullable=False), + sa.Column("description", sa.Text, nullable=True), + sa.Column("severity", sa.String(16), server_default="medium"), + sa.Column("tlp", sa.String(16), server_default="amber"), + sa.Column("pap", sa.String(16), server_default="amber"), + sa.Column("status", sa.String(24), server_default="open"), + sa.Column("priority", sa.Integer, server_default="2"), + sa.Column("assignee", sa.String(128), nullable=True), + sa.Column("tags", sa.JSON, nullable=True), + sa.Column("hunt_id", sa.String(32), sa.ForeignKey("hunts.id"), nullable=True), + sa.Column("owner_id", sa.String(32), sa.ForeignKey("users.id"), nullable=True), + sa.Column("mitre_techniques", sa.JSON, nullable=True), + sa.Column("iocs", sa.JSON, nullable=True), + sa.Column("started_at", sa.DateTime(timezone=True), nullable=True), + sa.Column("resolved_at", sa.DateTime(timezone=True), nullable=True), + sa.Column("created_at", sa.DateTime(timezone=True), nullable=False), + sa.Column("updated_at", sa.DateTime(timezone=True), nullable=False), + ) + op.create_index("ix_cases_hunt", "cases", ["hunt_id"]) + op.create_index("ix_cases_status", "cases", ["status"]) + + op.create_table( + "case_tasks", + sa.Column("id", sa.String(32), primary_key=True), + sa.Column("case_id", sa.String(32), sa.ForeignKey("cases.id", ondelete="CASCADE"), nullable=False), + sa.Column("title", sa.String(512), nullable=False), + sa.Column("description", sa.Text, nullable=True), + sa.Column("status", sa.String(24), server_default="todo"), + sa.Column("assignee", sa.String(128), nullable=True), + sa.Column("order", sa.Integer, server_default="0"), + sa.Column("created_at", sa.DateTime(timezone=True), nullable=False), + sa.Column("updated_at", sa.DateTime(timezone=True), nullable=False), + ) + op.create_index("ix_case_tasks_case", "case_tasks", ["case_id"]) + + op.create_table( + "activity_logs", + sa.Column("id", sa.Integer, primary_key=True, autoincrement=True), + sa.Column("entity_type", sa.String(32), nullable=False), + sa.Column("entity_id", sa.String(32), nullable=False), + sa.Column("action", sa.String(64), nullable=False), + sa.Column("details", sa.JSON, nullable=True), + sa.Column("user_id", sa.String(32), nullable=True), + sa.Column("created_at", sa.DateTime(timezone=True), nullable=False), + ) + op.create_index("ix_activity_entity", "activity_logs", ["entity_type", "entity_id"]) + + +def downgrade() -> None: + op.drop_table("activity_logs") + op.drop_table("case_tasks") + op.drop_table("cases") diff --git a/backend/alembic/versions/b4c2d3e5f6a7_add_alerts_and_alert_rules.py b/backend/alembic/versions/b4c2d3e5f6a7_add_alerts_and_alert_rules.py new file mode 100644 index 0000000..aefec1f --- /dev/null +++ b/backend/alembic/versions/b4c2d3e5f6a7_add_alerts_and_alert_rules.py @@ -0,0 +1,63 @@ +"""add alerts and alert_rules tables + +Revision ID: b4c2d3e5f6a7 +Revises: a3b1c2d4e5f6 +Create Date: 2025-01-01 00:00:00.000000 +""" +from typing import Sequence, Union +from alembic import op +import sqlalchemy as sa + +# revision identifiers +revision: str = "b4c2d3e5f6a7" +down_revision: Union[str, None] = "a3b1c2d4e5f6" +branch_labels: Union[str, Sequence[str], None] = None +depends_on: Union[str, Sequence[str], None] = None + + +def upgrade() -> None: + op.create_table( + "alerts", + sa.Column("id", sa.String(32), primary_key=True), + sa.Column("title", sa.String(512), nullable=False), + sa.Column("description", sa.Text, nullable=True), + sa.Column("severity", sa.String(16), server_default="medium"), + sa.Column("status", sa.String(24), server_default="new"), + sa.Column("analyzer", sa.String(64), nullable=False), + sa.Column("score", sa.Float, server_default="0"), + sa.Column("evidence", sa.JSON, nullable=True), + sa.Column("mitre_technique", sa.String(32), nullable=True), + sa.Column("tags", sa.JSON, nullable=True), + sa.Column("hunt_id", sa.String(32), sa.ForeignKey("hunts.id"), nullable=True), + sa.Column("dataset_id", sa.String(32), sa.ForeignKey("datasets.id"), nullable=True), + sa.Column("case_id", sa.String(32), sa.ForeignKey("cases.id"), nullable=True), + sa.Column("assignee", sa.String(128), nullable=True), + sa.Column("acknowledged_at", sa.DateTime(timezone=True), nullable=True), + sa.Column("resolved_at", sa.DateTime(timezone=True), nullable=True), + sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now()), + sa.Column("updated_at", sa.DateTime(timezone=True), server_default=sa.func.now()), + ) + op.create_index("ix_alerts_severity", "alerts", ["severity"]) + op.create_index("ix_alerts_status", "alerts", ["status"]) + op.create_index("ix_alerts_hunt", "alerts", ["hunt_id"]) + op.create_index("ix_alerts_dataset", "alerts", ["dataset_id"]) + + op.create_table( + "alert_rules", + sa.Column("id", sa.String(32), primary_key=True), + sa.Column("name", sa.String(256), nullable=False), + sa.Column("description", sa.Text, nullable=True), + sa.Column("analyzer", sa.String(64), nullable=False), + sa.Column("config", sa.JSON, nullable=True), + sa.Column("severity_override", sa.String(16), nullable=True), + sa.Column("enabled", sa.Boolean, server_default=sa.text("1")), + sa.Column("hunt_id", sa.String(32), sa.ForeignKey("hunts.id"), nullable=True), + sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now()), + sa.Column("updated_at", sa.DateTime(timezone=True), server_default=sa.func.now()), + ) + op.create_index("ix_alert_rules_analyzer", "alert_rules", ["analyzer"]) + + +def downgrade() -> None: + op.drop_table("alert_rules") + op.drop_table("alerts") diff --git a/backend/alembic/versions/c5d3e4f6a7b8_add_notebooks_and_playbook_runs.py b/backend/alembic/versions/c5d3e4f6a7b8_add_notebooks_and_playbook_runs.py new file mode 100644 index 0000000..f838fb2 --- /dev/null +++ b/backend/alembic/versions/c5d3e4f6a7b8_add_notebooks_and_playbook_runs.py @@ -0,0 +1,54 @@ +"""add notebooks and playbook_runs tables + +Revision ID: c5d3e4f6a7b8 +Revises: b4c2d3e5f6a7 +Create Date: 2025-01-01 00:00:00.000000 +""" +from typing import Sequence, Union +from alembic import op +import sqlalchemy as sa + +revision: str = "c5d3e4f6a7b8" +down_revision: Union[str, None] = "b4c2d3e5f6a7" +branch_labels: Union[str, Sequence[str], None] = None +depends_on: Union[str, Sequence[str], None] = None + + +def upgrade() -> None: + op.create_table( + "notebooks", + sa.Column("id", sa.String(32), primary_key=True), + sa.Column("title", sa.String(512), nullable=False), + sa.Column("description", sa.Text, nullable=True), + sa.Column("cells", sa.JSON, nullable=True), + sa.Column("hunt_id", sa.String(32), sa.ForeignKey("hunts.id"), nullable=True), + sa.Column("case_id", sa.String(32), sa.ForeignKey("cases.id"), nullable=True), + sa.Column("owner_id", sa.String(32), sa.ForeignKey("users.id"), nullable=True), + sa.Column("tags", sa.JSON, nullable=True), + sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now()), + sa.Column("updated_at", sa.DateTime(timezone=True), server_default=sa.func.now()), + ) + op.create_index("ix_notebooks_hunt", "notebooks", ["hunt_id"]) + + op.create_table( + "playbook_runs", + sa.Column("id", sa.String(32), primary_key=True), + sa.Column("playbook_name", sa.String(256), nullable=False), + sa.Column("status", sa.String(24), server_default="in-progress"), + sa.Column("current_step", sa.Integer, server_default="1"), + sa.Column("total_steps", sa.Integer, server_default="0"), + sa.Column("step_results", sa.JSON, nullable=True), + sa.Column("hunt_id", sa.String(32), sa.ForeignKey("hunts.id"), nullable=True), + sa.Column("case_id", sa.String(32), sa.ForeignKey("cases.id"), nullable=True), + sa.Column("started_by", sa.String(128), nullable=True), + sa.Column("created_at", sa.DateTime(timezone=True), server_default=sa.func.now()), + sa.Column("updated_at", sa.DateTime(timezone=True), server_default=sa.func.now()), + sa.Column("completed_at", sa.DateTime(timezone=True), nullable=True), + ) + op.create_index("ix_playbook_runs_hunt", "playbook_runs", ["hunt_id"]) + op.create_index("ix_playbook_runs_status", "playbook_runs", ["status"]) + + +def downgrade() -> None: + op.drop_table("playbook_runs") + op.drop_table("notebooks") diff --git a/backend/app/api/routes/alerts.py b/backend/app/api/routes/alerts.py new file mode 100644 index 0000000..d4c1b4b --- /dev/null +++ b/backend/app/api/routes/alerts.py @@ -0,0 +1,404 @@ +"""API routes for alerts — CRUD, analyze triggers, and alert rules.""" + +import logging +from typing import Optional + +from fastapi import APIRouter, Depends, HTTPException, Query +from pydantic import BaseModel, Field +from sqlalchemy import select, func, desc +from sqlalchemy.ext.asyncio import AsyncSession + +from app.db import get_db +from app.db.models import Alert, AlertRule, _new_id, _utcnow +from app.db.repositories.datasets import DatasetRepository +from app.services.analyzers import ( + get_available_analyzers, + get_analyzer, + run_all_analyzers, + AlertCandidate, +) +from app.services.process_tree import _fetch_rows + +logger = logging.getLogger(__name__) + +router = APIRouter(prefix="/api/alerts", tags=["alerts"]) + + +# ── Pydantic models ────────────────────────────────────────────────── + + +class AlertUpdate(BaseModel): + status: Optional[str] = None + severity: Optional[str] = None + assignee: Optional[str] = None + case_id: Optional[str] = None + tags: Optional[list[str]] = None + + +class RuleCreate(BaseModel): + name: str + description: Optional[str] = None + analyzer: str + config: Optional[dict] = None + severity_override: Optional[str] = None + enabled: bool = True + hunt_id: Optional[str] = None + + +class RuleUpdate(BaseModel): + name: Optional[str] = None + description: Optional[str] = None + config: Optional[dict] = None + severity_override: Optional[str] = None + enabled: Optional[bool] = None + + +class AnalyzeRequest(BaseModel): + dataset_id: Optional[str] = None + hunt_id: Optional[str] = None + analyzers: Optional[list[str]] = None # None = run all + config: Optional[dict] = None + auto_create: bool = True # automatically persist alerts + + +# ── Helpers ─────────────────────────────────────────────────────────── + + +def _alert_to_dict(a: Alert) -> dict: + return { + "id": a.id, + "title": a.title, + "description": a.description, + "severity": a.severity, + "status": a.status, + "analyzer": a.analyzer, + "score": a.score, + "evidence": a.evidence or [], + "mitre_technique": a.mitre_technique, + "tags": a.tags or [], + "hunt_id": a.hunt_id, + "dataset_id": a.dataset_id, + "case_id": a.case_id, + "assignee": a.assignee, + "acknowledged_at": a.acknowledged_at.isoformat() if a.acknowledged_at else None, + "resolved_at": a.resolved_at.isoformat() if a.resolved_at else None, + "created_at": a.created_at.isoformat() if a.created_at else None, + "updated_at": a.updated_at.isoformat() if a.updated_at else None, + } + + +def _rule_to_dict(r: AlertRule) -> dict: + return { + "id": r.id, + "name": r.name, + "description": r.description, + "analyzer": r.analyzer, + "config": r.config, + "severity_override": r.severity_override, + "enabled": r.enabled, + "hunt_id": r.hunt_id, + "created_at": r.created_at.isoformat() if r.created_at else None, + "updated_at": r.updated_at.isoformat() if r.updated_at else None, + } + + +# ── Alert CRUD ──────────────────────────────────────────────────────── + + +@router.get("", summary="List alerts") +async def list_alerts( + status: str | None = Query(None), + severity: str | None = Query(None), + analyzer: str | None = Query(None), + hunt_id: str | None = Query(None), + dataset_id: str | None = Query(None), + limit: int = Query(100, ge=1, le=500), + offset: int = Query(0, ge=0), + db: AsyncSession = Depends(get_db), +): + stmt = select(Alert) + count_stmt = select(func.count(Alert.id)) + if status: + stmt = stmt.where(Alert.status == status) + count_stmt = count_stmt.where(Alert.status == status) + if severity: + stmt = stmt.where(Alert.severity == severity) + count_stmt = count_stmt.where(Alert.severity == severity) + if analyzer: + stmt = stmt.where(Alert.analyzer == analyzer) + count_stmt = count_stmt.where(Alert.analyzer == analyzer) + if hunt_id: + stmt = stmt.where(Alert.hunt_id == hunt_id) + count_stmt = count_stmt.where(Alert.hunt_id == hunt_id) + if dataset_id: + stmt = stmt.where(Alert.dataset_id == dataset_id) + count_stmt = count_stmt.where(Alert.dataset_id == dataset_id) + + total = (await db.execute(count_stmt)).scalar() or 0 + results = (await db.execute( + stmt.order_by(desc(Alert.score), desc(Alert.created_at)).offset(offset).limit(limit) + )).scalars().all() + + return {"alerts": [_alert_to_dict(a) for a in results], "total": total} + + +@router.get("/stats", summary="Alert statistics dashboard") +async def alert_stats( + hunt_id: str | None = Query(None), + db: AsyncSession = Depends(get_db), +): + """Return aggregated alert statistics.""" + base = select(Alert) + if hunt_id: + base = base.where(Alert.hunt_id == hunt_id) + + # Severity breakdown + sev_stmt = select(Alert.severity, func.count(Alert.id)).group_by(Alert.severity) + if hunt_id: + sev_stmt = sev_stmt.where(Alert.hunt_id == hunt_id) + sev_rows = (await db.execute(sev_stmt)).all() + severity_counts = {s: c for s, c in sev_rows} + + # Status breakdown + status_stmt = select(Alert.status, func.count(Alert.id)).group_by(Alert.status) + if hunt_id: + status_stmt = status_stmt.where(Alert.hunt_id == hunt_id) + status_rows = (await db.execute(status_stmt)).all() + status_counts = {s: c for s, c in status_rows} + + # Analyzer breakdown + analyzer_stmt = select(Alert.analyzer, func.count(Alert.id)).group_by(Alert.analyzer) + if hunt_id: + analyzer_stmt = analyzer_stmt.where(Alert.hunt_id == hunt_id) + analyzer_rows = (await db.execute(analyzer_stmt)).all() + analyzer_counts = {a: c for a, c in analyzer_rows} + + # Top MITRE techniques + mitre_stmt = ( + select(Alert.mitre_technique, func.count(Alert.id)) + .where(Alert.mitre_technique.isnot(None)) + .group_by(Alert.mitre_technique) + .order_by(desc(func.count(Alert.id))) + .limit(10) + ) + if hunt_id: + mitre_stmt = mitre_stmt.where(Alert.hunt_id == hunt_id) + mitre_rows = (await db.execute(mitre_stmt)).all() + top_mitre = [{"technique": t, "count": c} for t, c in mitre_rows] + + total = sum(severity_counts.values()) + + return { + "total": total, + "severity_counts": severity_counts, + "status_counts": status_counts, + "analyzer_counts": analyzer_counts, + "top_mitre": top_mitre, + } + + +@router.get("/{alert_id}", summary="Get alert detail") +async def get_alert(alert_id: str, db: AsyncSession = Depends(get_db)): + result = await db.get(Alert, alert_id) + if not result: + raise HTTPException(status_code=404, detail="Alert not found") + return _alert_to_dict(result) + + +@router.put("/{alert_id}", summary="Update alert (status, assignee, etc.)") +async def update_alert( + alert_id: str, body: AlertUpdate, db: AsyncSession = Depends(get_db) +): + alert = await db.get(Alert, alert_id) + if not alert: + raise HTTPException(status_code=404, detail="Alert not found") + + if body.status is not None: + alert.status = body.status + if body.status == "acknowledged" and not alert.acknowledged_at: + alert.acknowledged_at = _utcnow() + if body.status in ("resolved", "false-positive") and not alert.resolved_at: + alert.resolved_at = _utcnow() + if body.severity is not None: + alert.severity = body.severity + if body.assignee is not None: + alert.assignee = body.assignee + if body.case_id is not None: + alert.case_id = body.case_id + if body.tags is not None: + alert.tags = body.tags + + await db.commit() + await db.refresh(alert) + return _alert_to_dict(alert) + + +@router.delete("/{alert_id}", summary="Delete alert") +async def delete_alert(alert_id: str, db: AsyncSession = Depends(get_db)): + alert = await db.get(Alert, alert_id) + if not alert: + raise HTTPException(status_code=404, detail="Alert not found") + await db.delete(alert) + await db.commit() + return {"ok": True} + + +# ── Bulk operations ────────────────────────────────────────────────── + + +@router.post("/bulk-update", summary="Bulk update alert statuses") +async def bulk_update_alerts( + alert_ids: list[str], + status: str = Query(...), + db: AsyncSession = Depends(get_db), +): + updated = 0 + for aid in alert_ids: + alert = await db.get(Alert, aid) + if alert: + alert.status = status + if status == "acknowledged" and not alert.acknowledged_at: + alert.acknowledged_at = _utcnow() + if status in ("resolved", "false-positive") and not alert.resolved_at: + alert.resolved_at = _utcnow() + updated += 1 + await db.commit() + return {"updated": updated} + + +# ── Run Analyzers ──────────────────────────────────────────────────── + + +@router.get("/analyzers/list", summary="List available analyzers") +async def list_analyzers(): + return {"analyzers": get_available_analyzers()} + + +@router.post("/analyze", summary="Run analyzers on a dataset/hunt and optionally create alerts") +async def run_analysis( + request: AnalyzeRequest, db: AsyncSession = Depends(get_db) +): + if not request.dataset_id and not request.hunt_id: + raise HTTPException(status_code=400, detail="Provide dataset_id or hunt_id") + + # Load rows + rows_objs = await _fetch_rows( + db, dataset_id=request.dataset_id, hunt_id=request.hunt_id, limit=10000, + ) + if not rows_objs: + raise HTTPException(status_code=404, detail="No rows found") + + rows = [r.normalized_data or r.data for r in rows_objs] + + # Run analyzers + candidates = await run_all_analyzers(rows, enabled=request.analyzers, config=request.config) + + created_alerts: list[dict] = [] + if request.auto_create and candidates: + for c in candidates: + alert = Alert( + id=_new_id(), + title=c.title, + description=c.description, + severity=c.severity, + analyzer=c.analyzer, + score=c.score, + evidence=c.evidence, + mitre_technique=c.mitre_technique, + tags=c.tags, + hunt_id=request.hunt_id, + dataset_id=request.dataset_id, + ) + db.add(alert) + created_alerts.append(_alert_to_dict(alert)) + await db.commit() + + return { + "candidates_found": len(candidates), + "alerts_created": len(created_alerts), + "alerts": created_alerts, + "summary": { + "by_severity": _count_by(candidates, "severity"), + "by_analyzer": _count_by(candidates, "analyzer"), + "rows_analyzed": len(rows), + }, + } + + +def _count_by(items: list[AlertCandidate], attr: str) -> dict[str, int]: + counts: dict[str, int] = {} + for item in items: + key = getattr(item, attr, "unknown") + counts[key] = counts.get(key, 0) + 1 + return counts + + +# ── Alert Rules CRUD ───────────────────────────────────────────────── + + +@router.get("/rules/list", summary="List alert rules") +async def list_rules( + enabled: bool | None = Query(None), + db: AsyncSession = Depends(get_db), +): + stmt = select(AlertRule) + if enabled is not None: + stmt = stmt.where(AlertRule.enabled == enabled) + results = (await db.execute(stmt.order_by(AlertRule.created_at))).scalars().all() + return {"rules": [_rule_to_dict(r) for r in results]} + + +@router.post("/rules", summary="Create alert rule") +async def create_rule(body: RuleCreate, db: AsyncSession = Depends(get_db)): + # Validate analyzer exists + if not get_analyzer(body.analyzer): + raise HTTPException(status_code=400, detail=f"Unknown analyzer: {body.analyzer}") + + rule = AlertRule( + id=_new_id(), + name=body.name, + description=body.description, + analyzer=body.analyzer, + config=body.config, + severity_override=body.severity_override, + enabled=body.enabled, + hunt_id=body.hunt_id, + ) + db.add(rule) + await db.commit() + await db.refresh(rule) + return _rule_to_dict(rule) + + +@router.put("/rules/{rule_id}", summary="Update alert rule") +async def update_rule( + rule_id: str, body: RuleUpdate, db: AsyncSession = Depends(get_db) +): + rule = await db.get(AlertRule, rule_id) + if not rule: + raise HTTPException(status_code=404, detail="Rule not found") + + if body.name is not None: + rule.name = body.name + if body.description is not None: + rule.description = body.description + if body.config is not None: + rule.config = body.config + if body.severity_override is not None: + rule.severity_override = body.severity_override + if body.enabled is not None: + rule.enabled = body.enabled + + await db.commit() + await db.refresh(rule) + return _rule_to_dict(rule) + + +@router.delete("/rules/{rule_id}", summary="Delete alert rule") +async def delete_rule(rule_id: str, db: AsyncSession = Depends(get_db)): + rule = await db.get(AlertRule, rule_id) + if not rule: + raise HTTPException(status_code=404, detail="Rule not found") + await db.delete(rule) + await db.commit() + return {"ok": True} diff --git a/backend/app/api/routes/analysis.py b/backend/app/api/routes/analysis.py index 03d3178..99fb6bd 100644 --- a/backend/app/api/routes/analysis.py +++ b/backend/app/api/routes/analysis.py @@ -1,371 +1,296 @@ -"""Analysis API routes - triage, host profiles, reports, IOC extraction, -host grouping, anomaly detection, data query (SSE), and job management.""" - -from __future__ import annotations +"""API routes for process trees, storyline graphs, risk scoring, LLM analysis, timeline, and field stats.""" import logging -from typing import Optional +from typing import Any, Optional -from fastapi import APIRouter, BackgroundTasks, Depends, HTTPException, Query -from fastapi.responses import StreamingResponse -from pydantic import BaseModel -from sqlalchemy import select +from fastapi import APIRouter, Depends, HTTPException, Query, Body +from pydantic import BaseModel, Field from sqlalchemy.ext.asyncio import AsyncSession from app.db import get_db -from app.db.models import HostProfile, HuntReport, TriageResult +from app.db.repositories.datasets import DatasetRepository +from app.services.process_tree import ( + build_process_tree, + build_storyline, + compute_risk_scores, + _fetch_rows, +) +from app.services.llm_analysis import ( + AnalysisRequest, + AnalysisResult, + run_llm_analysis, +) +from app.services.timeline import ( + build_timeline_bins, + compute_field_stats, + search_rows, +) +from app.services.mitre import ( + map_to_attack, + build_knowledge_graph, +) logger = logging.getLogger(__name__) router = APIRouter(prefix="/api/analysis", tags=["analysis"]) -# --- Response models --- - -class TriageResultResponse(BaseModel): - id: str - dataset_id: str - row_start: int - row_end: int - risk_score: float - verdict: str - findings: list | None = None - suspicious_indicators: list | None = None - mitre_techniques: list | None = None - model_used: str | None = None - node_used: str | None = None - - class Config: - from_attributes = True +# ── Response models ─────────────────────────────────────────────────── -class HostProfileResponse(BaseModel): - id: str - hunt_id: str +class ProcessTreeResponse(BaseModel): + trees: list[dict] = Field(default_factory=list) + total_processes: int = 0 + + +class StorylineResponse(BaseModel): + nodes: list[dict] = Field(default_factory=list) + edges: list[dict] = Field(default_factory=list) + summary: dict = Field(default_factory=dict) + + +class RiskHostEntry(BaseModel): hostname: str - fqdn: str | None = None - risk_score: float - risk_level: str - artifact_summary: dict | None = None - timeline_summary: str | None = None - suspicious_findings: list | None = None - mitre_techniques: list | None = None - llm_analysis: str | None = None - model_used: str | None = None - - class Config: - from_attributes = True + score: int = 0 + signals: list[str] = Field(default_factory=list) + event_count: int = 0 + process_count: int = 0 + network_count: int = 0 + file_count: int = 0 -class HuntReportResponse(BaseModel): - id: str - hunt_id: str - status: str - exec_summary: str | None = None - full_report: str | None = None - findings: list | None = None - recommendations: list | None = None - mitre_mapping: dict | None = None - ioc_table: list | None = None - host_risk_summary: list | None = None - models_used: list | None = None - generation_time_ms: int | None = None - - class Config: - from_attributes = True +class RiskSummaryResponse(BaseModel): + hosts: list[RiskHostEntry] = Field(default_factory=list) + overall_score: int = 0 + total_events: int = 0 + severity_breakdown: dict[str, int] = Field(default_factory=dict) -class QueryRequest(BaseModel): - question: str - mode: str = "quick" # quick or deep +# ── Routes ──────────────────────────────────────────────────────────── -# --- Triage endpoints --- - -@router.get("/triage/{dataset_id}", response_model=list[TriageResultResponse]) -async def get_triage_results( - dataset_id: str, - min_risk: float = Query(0.0, ge=0.0, le=10.0), +@router.get( + "/process-tree", + response_model=ProcessTreeResponse, + summary="Build process tree from dataset rows", + description=( + "Extracts parent→child process relationships from dataset rows " + "and returns a hierarchical forest of process nodes." + ), +) +async def get_process_tree( + dataset_id: str | None = Query(None, description="Dataset ID"), + hunt_id: str | None = Query(None, description="Hunt ID (scans all datasets in hunt)"), + hostname: str | None = Query(None, description="Filter by hostname"), db: AsyncSession = Depends(get_db), ): - result = await db.execute( - select(TriageResult) - .where(TriageResult.dataset_id == dataset_id) - .where(TriageResult.risk_score >= min_risk) - .order_by(TriageResult.risk_score.desc()) + """Return process tree(s) for a dataset or hunt.""" + if not dataset_id and not hunt_id: + raise HTTPException(status_code=400, detail="Provide dataset_id or hunt_id") + + trees = await build_process_tree( + db, dataset_id=dataset_id, hunt_id=hunt_id, hostname_filter=hostname, ) - return result.scalars().all() + + # Count total processes recursively + def _count(node: dict) -> int: + return 1 + sum(_count(c) for c in node.get("children", [])) + + total = sum(_count(t) for t in trees) + + return ProcessTreeResponse(trees=trees, total_processes=total) -@router.post("/triage/{dataset_id}") -async def trigger_triage( - dataset_id: str, - background_tasks: BackgroundTasks, -): - async def _run(): - from app.services.triage import triage_dataset - await triage_dataset(dataset_id) - - background_tasks.add_task(_run) - return {"status": "triage_started", "dataset_id": dataset_id} - - -# --- Host profile endpoints --- - -@router.get("/profiles/{hunt_id}", response_model=list[HostProfileResponse]) -async def get_host_profiles( - hunt_id: str, - min_risk: float = Query(0.0, ge=0.0, le=10.0), +@router.get( + "/storyline", + response_model=StorylineResponse, + summary="Build CrowdStrike-style storyline attack graph", + description=( + "Creates a Cytoscape-compatible graph of events connected by " + "process lineage (spawned) and temporal sequence within each host." + ), +) +async def get_storyline( + dataset_id: str | None = Query(None, description="Dataset ID"), + hunt_id: str | None = Query(None, description="Hunt ID (scans all datasets in hunt)"), + hostname: str | None = Query(None, description="Filter by hostname"), db: AsyncSession = Depends(get_db), ): - result = await db.execute( - select(HostProfile) - .where(HostProfile.hunt_id == hunt_id) - .where(HostProfile.risk_score >= min_risk) - .order_by(HostProfile.risk_score.desc()) + """Return a storyline graph for a dataset or hunt.""" + if not dataset_id and not hunt_id: + raise HTTPException(status_code=400, detail="Provide dataset_id or hunt_id") + + result = await build_storyline( + db, dataset_id=dataset_id, hunt_id=hunt_id, hostname_filter=hostname, ) - return result.scalars().all() + + return StorylineResponse(**result) -@router.post("/profiles/{hunt_id}") -async def trigger_all_profiles( - hunt_id: str, - background_tasks: BackgroundTasks, -): - async def _run(): - from app.services.host_profiler import profile_all_hosts - await profile_all_hosts(hunt_id) - - background_tasks.add_task(_run) - return {"status": "profiling_started", "hunt_id": hunt_id} - - -@router.post("/profiles/{hunt_id}/{hostname}") -async def trigger_single_profile( - hunt_id: str, - hostname: str, - background_tasks: BackgroundTasks, -): - async def _run(): - from app.services.host_profiler import profile_host - await profile_host(hunt_id, hostname) - - background_tasks.add_task(_run) - return {"status": "profiling_started", "hunt_id": hunt_id, "hostname": hostname} - - -# --- Report endpoints --- - -@router.get("/reports/{hunt_id}", response_model=list[HuntReportResponse]) -async def list_reports( - hunt_id: str, +@router.get( + "/risk-summary", + response_model=RiskSummaryResponse, + summary="Compute risk scores per host", + description=( + "Analyzes dataset rows for suspicious patterns (encoded PowerShell, " + "credential dumping, lateral movement) and produces per-host risk scores." + ), +) +async def get_risk_summary( + hunt_id: str | None = Query(None, description="Hunt ID"), db: AsyncSession = Depends(get_db), ): - result = await db.execute( - select(HuntReport) - .where(HuntReport.hunt_id == hunt_id) - .order_by(HuntReport.created_at.desc()) + """Return risk scores for all hosts in a hunt.""" + result = await compute_risk_scores(db, hunt_id=hunt_id) + return RiskSummaryResponse(**result) + + +# ── LLM Analysis ───────────────────────────────────────────────────── + + +@router.post( + "/llm-analyze", + response_model=AnalysisResult, + summary="Run LLM-powered threat analysis on dataset", + description=( + "Loads dataset rows server-side, builds a summary, and sends to " + "Wile (deep analysis) or Roadrunner (quick) for comprehensive " + "threat analysis. Returns structured findings, IOCs, MITRE techniques." + ), +) +async def llm_analyze( + request: AnalysisRequest, + db: AsyncSession = Depends(get_db), +): + """Run LLM analysis on a dataset or hunt.""" + if not request.dataset_id and not request.hunt_id: + raise HTTPException(status_code=400, detail="Provide dataset_id or hunt_id") + + # Load rows + rows_objs = await _fetch_rows( + db, + dataset_id=request.dataset_id, + hunt_id=request.hunt_id, + limit=2000, ) - return result.scalars().all() + + if not rows_objs: + raise HTTPException(status_code=404, detail="No rows found for analysis") + + # Extract data dicts + rows = [r.normalized_data or r.data for r in rows_objs] + + # Get dataset name + ds_name = "hunt datasets" + if request.dataset_id: + repo = DatasetRepository(db) + ds = await repo.get_dataset(request.dataset_id) + if ds: + ds_name = ds.name + + result = await run_llm_analysis(rows, request, dataset_name=ds_name) + return result -@router.get("/reports/{hunt_id}/{report_id}", response_model=HuntReportResponse) -async def get_report( - hunt_id: str, - report_id: str, +# ── Timeline ────────────────────────────────────────────────────────── + + +@router.get( + "/timeline", + summary="Get event timeline histogram bins", +) +async def get_timeline( + dataset_id: str | None = Query(None), + hunt_id: str | None = Query(None), + bins: int = Query(60, ge=10, le=200), db: AsyncSession = Depends(get_db), ): - result = await db.execute( - select(HuntReport) - .where(HuntReport.id == report_id) - .where(HuntReport.hunt_id == hunt_id) - ) - report = result.scalar_one_or_none() - if not report: - raise HTTPException(status_code=404, detail="Report not found") - return report + if not dataset_id and not hunt_id: + raise HTTPException(status_code=400, detail="Provide dataset_id or hunt_id") + return await build_timeline_bins(db, dataset_id=dataset_id, hunt_id=hunt_id, bins=bins) -@router.post("/reports/{hunt_id}/generate") -async def trigger_report( - hunt_id: str, - background_tasks: BackgroundTasks, -): - async def _run(): - from app.services.report_generator import generate_report - await generate_report(hunt_id) - - background_tasks.add_task(_run) - return {"status": "report_generation_started", "hunt_id": hunt_id} - - -# --- IOC extraction endpoints --- - -@router.get("/iocs/{dataset_id}") -async def extract_iocs( - dataset_id: str, - max_rows: int = Query(5000, ge=1, le=50000), +@router.get( + "/field-stats", + summary="Get per-field value distributions", +) +async def get_field_stats( + dataset_id: str | None = Query(None), + hunt_id: str | None = Query(None), + fields: str | None = Query(None, description="Comma-separated field names"), + top_n: int = Query(20, ge=5, le=100), db: AsyncSession = Depends(get_db), ): - """Extract IOCs (IPs, domains, hashes, etc.) from dataset rows.""" - from app.services.ioc_extractor import extract_iocs_from_dataset - iocs = await extract_iocs_from_dataset(dataset_id, db, max_rows=max_rows) - total = sum(len(v) for v in iocs.values()) - return {"dataset_id": dataset_id, "iocs": iocs, "total": total} - - -# --- Host grouping endpoints --- - -@router.get("/hosts/{hunt_id}") -async def get_host_groups( - hunt_id: str, - db: AsyncSession = Depends(get_db), -): - """Group data by hostname across all datasets in a hunt.""" - from app.services.ioc_extractor import extract_host_groups - groups = await extract_host_groups(hunt_id, db) - return {"hunt_id": hunt_id, "hosts": groups} - - -# --- Anomaly detection endpoints --- - -@router.get("/anomalies/{dataset_id}") -async def get_anomalies( - dataset_id: str, - outliers_only: bool = Query(False), - db: AsyncSession = Depends(get_db), -): - """Get anomaly detection results for a dataset.""" - from app.db.models import AnomalyResult - stmt = select(AnomalyResult).where(AnomalyResult.dataset_id == dataset_id) - if outliers_only: - stmt = stmt.where(AnomalyResult.is_outlier == True) - stmt = stmt.order_by(AnomalyResult.anomaly_score.desc()) - result = await db.execute(stmt) - rows = result.scalars().all() - return [ - { - "id": r.id, - "dataset_id": r.dataset_id, - "row_id": r.row_id, - "anomaly_score": r.anomaly_score, - "distance_from_centroid": r.distance_from_centroid, - "cluster_id": r.cluster_id, - "is_outlier": r.is_outlier, - "explanation": r.explanation, - } - for r in rows - ] - - -@router.post("/anomalies/{dataset_id}") -async def trigger_anomaly_detection( - dataset_id: str, - k: int = Query(3, ge=2, le=20), - threshold: float = Query(0.35, ge=0.1, le=0.9), - background_tasks: BackgroundTasks = None, -): - """Trigger embedding-based anomaly detection on a dataset.""" - async def _run(): - from app.services.anomaly_detector import detect_anomalies - await detect_anomalies(dataset_id, k=k, outlier_threshold=threshold) - - if background_tasks: - background_tasks.add_task(_run) - return {"status": "anomaly_detection_started", "dataset_id": dataset_id} - else: - from app.services.anomaly_detector import detect_anomalies - results = await detect_anomalies(dataset_id, k=k, outlier_threshold=threshold) - return {"status": "complete", "dataset_id": dataset_id, "count": len(results)} - - -# --- Natural language data query (SSE streaming) --- - -@router.post("/query/{dataset_id}") -async def query_dataset_endpoint( - dataset_id: str, - body: QueryRequest, -): - """Ask a natural language question about a dataset. - - Returns an SSE stream with token-by-token LLM response. - Event types: status, metadata, token, error, done - """ - from app.services.data_query import query_dataset_stream - - return StreamingResponse( - query_dataset_stream(dataset_id, body.question, body.mode), - media_type="text/event-stream", - headers={ - "Cache-Control": "no-cache", - "Connection": "keep-alive", - "X-Accel-Buffering": "no", - }, + if not dataset_id and not hunt_id: + raise HTTPException(status_code=400, detail="Provide dataset_id or hunt_id") + field_list = [f.strip() for f in fields.split(",")] if fields else None + return await compute_field_stats( + db, dataset_id=dataset_id, hunt_id=hunt_id, + fields=field_list, top_n=top_n, ) -@router.post("/query/{dataset_id}/sync") -async def query_dataset_sync( - dataset_id: str, - body: QueryRequest, +class SearchRequest(BaseModel): + dataset_id: Optional[str] = None + hunt_id: Optional[str] = None + query: str = "" + filters: dict[str, str] = Field(default_factory=dict) + time_start: Optional[str] = None + time_end: Optional[str] = None + limit: int = 500 + offset: int = 0 + + +@router.post( + "/search", + summary="Search and filter dataset rows", +) +async def search_dataset_rows( + request: SearchRequest, + db: AsyncSession = Depends(get_db), ): - """Non-streaming version of data query.""" - from app.services.data_query import query_dataset - - try: - answer = await query_dataset(dataset_id, body.question, body.mode) - return {"dataset_id": dataset_id, "question": body.question, "answer": answer, "mode": body.mode} - except ValueError as e: - raise HTTPException(status_code=404, detail=str(e)) - except Exception as e: - logger.error(f"Query failed: {e}", exc_info=True) - raise HTTPException(status_code=500, detail=str(e)) + if not request.dataset_id and not request.hunt_id: + raise HTTPException(status_code=400, detail="Provide dataset_id or hunt_id") + return await search_rows( + db, + dataset_id=request.dataset_id, + hunt_id=request.hunt_id, + query=request.query, + filters=request.filters, + time_start=request.time_start, + time_end=request.time_end, + limit=request.limit, + offset=request.offset, + ) -# --- Job queue endpoints --- +# ── MITRE ATT&CK ───────────────────────────────────────────────────── -@router.get("/jobs") -async def list_jobs( - status: str | None = Query(None), - job_type: str | None = Query(None), - limit: int = Query(50, ge=1, le=200), + +@router.get( + "/mitre-map", + summary="Map dataset events to MITRE ATT&CK techniques", +) +async def get_mitre_map( + dataset_id: str | None = Query(None), + hunt_id: str | None = Query(None), + db: AsyncSession = Depends(get_db), ): - """List all tracked jobs.""" - from app.services.job_queue import job_queue, JobStatus, JobType - - s = JobStatus(status) if status else None - t = JobType(job_type) if job_type else None - jobs = job_queue.list_jobs(status=s, job_type=t, limit=limit) - stats = job_queue.get_stats() - return {"jobs": jobs, "stats": stats} + if not dataset_id and not hunt_id: + raise HTTPException(status_code=400, detail="Provide dataset_id or hunt_id") + return await map_to_attack(db, dataset_id=dataset_id, hunt_id=hunt_id) -@router.get("/jobs/{job_id}") -async def get_job(job_id: str): - """Get status of a specific job.""" - from app.services.job_queue import job_queue - - job = job_queue.get_job(job_id) - if not job: - raise HTTPException(status_code=404, detail="Job not found") - return job.to_dict() - - -@router.delete("/jobs/{job_id}") -async def cancel_job(job_id: str): - """Cancel a running or queued job.""" - from app.services.job_queue import job_queue - - if job_queue.cancel_job(job_id): - return {"status": "cancelled", "job_id": job_id} - raise HTTPException(status_code=400, detail="Job cannot be cancelled (already complete or not found)") - - -@router.post("/jobs/submit/{job_type}") -async def submit_job( - job_type: str, - params: dict = {}, +@router.get( + "/knowledge-graph", + summary="Build entity-technique knowledge graph", +) +async def get_knowledge_graph( + dataset_id: str | None = Query(None), + hunt_id: str | None = Query(None), + db: AsyncSession = Depends(get_db), ): +<<<<<<< HEAD """Submit a new job to the queue. Job types: triage, host_profile, report, anomaly, query @@ -403,4 +328,9 @@ async def lb_health_check(): """Force a health check of both nodes.""" from app.services.load_balancer import lb await lb.check_health() - return lb.get_status() \ No newline at end of file + return lb.get_status() +======= + if not dataset_id and not hunt_id: + raise HTTPException(status_code=400, detail="Provide dataset_id or hunt_id") + return await build_knowledge_graph(db, dataset_id=dataset_id, hunt_id=hunt_id) +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 diff --git a/backend/app/api/routes/cases.py b/backend/app/api/routes/cases.py new file mode 100644 index 0000000..68e7afc --- /dev/null +++ b/backend/app/api/routes/cases.py @@ -0,0 +1,296 @@ +"""API routes for case management — CRUD for cases, tasks, and activity logs.""" + +import logging +from typing import Optional + +from fastapi import APIRouter, Depends, HTTPException, Query +from pydantic import BaseModel, Field +from sqlalchemy import select, func, desc +from sqlalchemy.ext.asyncio import AsyncSession + +from app.db import get_db +from app.db.models import Case, CaseTask, ActivityLog, _new_id, _utcnow + +logger = logging.getLogger(__name__) + +router = APIRouter(prefix="/api/cases", tags=["cases"]) + + +# ── Pydantic models ────────────────────────────────────────────────── + +class CaseCreate(BaseModel): + title: str + description: Optional[str] = None + severity: str = "medium" + tlp: str = "amber" + pap: str = "amber" + priority: int = 2 + assignee: Optional[str] = None + tags: Optional[list[str]] = None + hunt_id: Optional[str] = None + mitre_techniques: Optional[list[str]] = None + iocs: Optional[list[dict]] = None + + +class CaseUpdate(BaseModel): + title: Optional[str] = None + description: Optional[str] = None + severity: Optional[str] = None + tlp: Optional[str] = None + pap: Optional[str] = None + status: Optional[str] = None + priority: Optional[int] = None + assignee: Optional[str] = None + tags: Optional[list[str]] = None + mitre_techniques: Optional[list[str]] = None + iocs: Optional[list[dict]] = None + + +class TaskCreate(BaseModel): + title: str + description: Optional[str] = None + assignee: Optional[str] = None + + +class TaskUpdate(BaseModel): + title: Optional[str] = None + description: Optional[str] = None + status: Optional[str] = None + assignee: Optional[str] = None + order: Optional[int] = None + + +# ── Helper: log activity ───────────────────────────────────────────── + +async def _log_activity( + db: AsyncSession, + entity_type: str, + entity_id: str, + action: str, + details: dict | None = None, +): + log = ActivityLog( + entity_type=entity_type, + entity_id=entity_id, + action=action, + details=details, + created_at=_utcnow(), + ) + db.add(log) + + +# ── Case CRUD ───────────────────────────────────────────────────────── + +@router.post("", summary="Create a case") +async def create_case(body: CaseCreate, db: AsyncSession = Depends(get_db)): + now = _utcnow() + case = Case( + id=_new_id(), + title=body.title, + description=body.description, + severity=body.severity, + tlp=body.tlp, + pap=body.pap, + priority=body.priority, + assignee=body.assignee, + tags=body.tags, + hunt_id=body.hunt_id, + mitre_techniques=body.mitre_techniques, + iocs=body.iocs, + created_at=now, + updated_at=now, + ) + db.add(case) + await _log_activity(db, "case", case.id, "created", {"title": body.title}) + await db.commit() + await db.refresh(case) + return _case_to_dict(case) + + +@router.get("", summary="List cases") +async def list_cases( + status: Optional[str] = Query(None), + hunt_id: Optional[str] = Query(None), + limit: int = Query(50, ge=1, le=200), + offset: int = Query(0, ge=0), + db: AsyncSession = Depends(get_db), +): + q = select(Case).order_by(desc(Case.updated_at)) + if status: + q = q.where(Case.status == status) + if hunt_id: + q = q.where(Case.hunt_id == hunt_id) + q = q.offset(offset).limit(limit) + result = await db.execute(q) + cases = result.scalars().all() + + count_q = select(func.count(Case.id)) + if status: + count_q = count_q.where(Case.status == status) + if hunt_id: + count_q = count_q.where(Case.hunt_id == hunt_id) + total = (await db.execute(count_q)).scalar() or 0 + + return {"cases": [_case_to_dict(c) for c in cases], "total": total} + + +@router.get("/{case_id}", summary="Get case detail") +async def get_case(case_id: str, db: AsyncSession = Depends(get_db)): + case = await db.get(Case, case_id) + if not case: + raise HTTPException(status_code=404, detail="Case not found") + return _case_to_dict(case) + + +@router.put("/{case_id}", summary="Update a case") +async def update_case(case_id: str, body: CaseUpdate, db: AsyncSession = Depends(get_db)): + case = await db.get(Case, case_id) + if not case: + raise HTTPException(status_code=404, detail="Case not found") + changes = {} + for field in ["title", "description", "severity", "tlp", "pap", "status", + "priority", "assignee", "tags", "mitre_techniques", "iocs"]: + val = getattr(body, field) + if val is not None: + old = getattr(case, field) + setattr(case, field, val) + changes[field] = {"old": old, "new": val} + if "status" in changes and changes["status"]["new"] == "in-progress" and not case.started_at: + case.started_at = _utcnow() + if "status" in changes and changes["status"]["new"] in ("resolved", "closed"): + case.resolved_at = _utcnow() + case.updated_at = _utcnow() + await _log_activity(db, "case", case.id, "updated", changes) + await db.commit() + await db.refresh(case) + return _case_to_dict(case) + + +@router.delete("/{case_id}", summary="Delete a case") +async def delete_case(case_id: str, db: AsyncSession = Depends(get_db)): + case = await db.get(Case, case_id) + if not case: + raise HTTPException(status_code=404, detail="Case not found") + await db.delete(case) + await db.commit() + return {"deleted": True} + + +# ── Task CRUD ───────────────────────────────────────────────────────── + +@router.post("/{case_id}/tasks", summary="Add task to case") +async def create_task(case_id: str, body: TaskCreate, db: AsyncSession = Depends(get_db)): + case = await db.get(Case, case_id) + if not case: + raise HTTPException(status_code=404, detail="Case not found") + now = _utcnow() + task = CaseTask( + id=_new_id(), + case_id=case_id, + title=body.title, + description=body.description, + assignee=body.assignee, + created_at=now, + updated_at=now, + ) + db.add(task) + await _log_activity(db, "case", case_id, "task_created", {"title": body.title}) + await db.commit() + await db.refresh(task) + return _task_to_dict(task) + + +@router.put("/{case_id}/tasks/{task_id}", summary="Update a task") +async def update_task(case_id: str, task_id: str, body: TaskUpdate, db: AsyncSession = Depends(get_db)): + task = await db.get(CaseTask, task_id) + if not task or task.case_id != case_id: + raise HTTPException(status_code=404, detail="Task not found") + for field in ["title", "description", "status", "assignee", "order"]: + val = getattr(body, field) + if val is not None: + setattr(task, field, val) + task.updated_at = _utcnow() + await _log_activity(db, "case", case_id, "task_updated", {"task_id": task_id}) + await db.commit() + await db.refresh(task) + return _task_to_dict(task) + + +@router.delete("/{case_id}/tasks/{task_id}", summary="Delete a task") +async def delete_task(case_id: str, task_id: str, db: AsyncSession = Depends(get_db)): + task = await db.get(CaseTask, task_id) + if not task or task.case_id != case_id: + raise HTTPException(status_code=404, detail="Task not found") + await db.delete(task) + await db.commit() + return {"deleted": True} + + +# ── Activity Log ────────────────────────────────────────────────────── + +@router.get("/{case_id}/activity", summary="Get case activity log") +async def get_activity( + case_id: str, + limit: int = Query(50, ge=1, le=200), + db: AsyncSession = Depends(get_db), +): + q = ( + select(ActivityLog) + .where(ActivityLog.entity_type == "case", ActivityLog.entity_id == case_id) + .order_by(desc(ActivityLog.created_at)) + .limit(limit) + ) + result = await db.execute(q) + logs = result.scalars().all() + return { + "logs": [ + { + "id": l.id, + "action": l.action, + "details": l.details, + "user_id": l.user_id, + "created_at": l.created_at.isoformat() if l.created_at else None, + } + for l in logs + ] + } + + +# ── Helpers ─────────────────────────────────────────────────────────── + +def _case_to_dict(c: Case) -> dict: + return { + "id": c.id, + "title": c.title, + "description": c.description, + "severity": c.severity, + "tlp": c.tlp, + "pap": c.pap, + "status": c.status, + "priority": c.priority, + "assignee": c.assignee, + "tags": c.tags or [], + "hunt_id": c.hunt_id, + "owner_id": c.owner_id, + "mitre_techniques": c.mitre_techniques or [], + "iocs": c.iocs or [], + "started_at": c.started_at.isoformat() if c.started_at else None, + "resolved_at": c.resolved_at.isoformat() if c.resolved_at else None, + "created_at": c.created_at.isoformat() if c.created_at else None, + "updated_at": c.updated_at.isoformat() if c.updated_at else None, + "tasks": [_task_to_dict(t) for t in (c.tasks or [])], + } + + +def _task_to_dict(t: CaseTask) -> dict: + return { + "id": t.id, + "case_id": t.case_id, + "title": t.title, + "description": t.description, + "status": t.status, + "assignee": t.assignee, + "order": t.order, + "created_at": t.created_at.isoformat() if t.created_at else None, + "updated_at": t.updated_at.isoformat() if t.updated_at else None, + } diff --git a/backend/app/api/routes/datasets.py b/backend/app/api/routes/datasets.py index 899a484..c71c4fb 100644 --- a/backend/app/api/routes/datasets.py +++ b/backend/app/api/routes/datasets.py @@ -398,3 +398,30 @@ async def delete_dataset( raise HTTPException(status_code=404, detail="Dataset not found") keyword_scan_cache.invalidate_dataset(dataset_id) return {"message": "Dataset deleted", "id": dataset_id} + + +@router.post( + "/rescan-ioc", + summary="Re-scan IOC columns for all datasets", +) +async def rescan_ioc_columns( + db: AsyncSession = Depends(get_db), +): + """Re-run detect_ioc_columns on every dataset using current detection logic.""" + repo = DatasetRepository(db) + all_ds = await repo.list_datasets(limit=10000) + updated = 0 + for ds in all_ds: + columns = list((ds.column_schema or {}).keys()) + if not columns: + continue + new_ioc = detect_ioc_columns( + columns, + ds.column_schema or {}, + ds.normalized_columns or {}, + ) + if new_ioc != (ds.ioc_columns or {}): + ds.ioc_columns = new_ioc + updated += 1 + await db.commit() + return {"message": f"Rescanned {len(all_ds)} datasets, updated {updated}"} diff --git a/backend/app/api/routes/network.py b/backend/app/api/routes/network.py index 7dea039..bfd2098 100644 --- a/backend/app/api/routes/network.py +++ b/backend/app/api/routes/network.py @@ -1,20 +1,34 @@ +<<<<<<< HEAD """Network topology API - host inventory endpoint with background caching.""" +======= +"""API routes for Network Picture — deduplicated host inventory.""" +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 import logging from fastapi import APIRouter, Depends, HTTPException, Query +<<<<<<< HEAD from fastapi.responses import JSONResponse +======= +from pydantic import BaseModel, Field +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 from sqlalchemy.ext.asyncio import AsyncSession from app.config import settings from app.db import get_db +<<<<<<< HEAD from app.services.host_inventory import build_host_inventory, inventory_cache from app.services.job_queue import job_queue, JobType +======= +from app.services.network_inventory import build_network_picture +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 logger = logging.getLogger(__name__) + router = APIRouter(prefix="/api/network", tags=["network"]) +<<<<<<< HEAD @router.get("/host-inventory") async def get_host_inventory( hunt_id: str = Query(..., description="Hunt ID to build inventory for"), @@ -173,3 +187,58 @@ async def trigger_rebuild( inventory_cache.invalidate(hunt_id) job = job_queue.submit(JobType.HOST_INVENTORY, hunt_id=hunt_id) return {"job_id": job.id, "status": "queued"} +======= +# ── Response models ─────────────────────────────────────────────────── + + +class HostEntry(BaseModel): + hostname: str + ips: list[str] = Field(default_factory=list) + users: list[str] = Field(default_factory=list) + os: list[str] = Field(default_factory=list) + mac_addresses: list[str] = Field(default_factory=list) + protocols: list[str] = Field(default_factory=list) + open_ports: list[str] = Field(default_factory=list) + remote_targets: list[str] = Field(default_factory=list) + datasets: list[str] = Field(default_factory=list) + connection_count: int = 0 + first_seen: str | None = None + last_seen: str | None = None + + +class PictureSummary(BaseModel): + total_hosts: int = 0 + total_connections: int = 0 + total_unique_ips: int = 0 + datasets_scanned: int = 0 + + +class NetworkPictureResponse(BaseModel): + hosts: list[HostEntry] + summary: PictureSummary + + +# ── Routes ──────────────────────────────────────────────────────────── + + +@router.get( + "/picture", + response_model=NetworkPictureResponse, + summary="Build deduplicated host inventory for a hunt", + description=( + "Scans all datasets in the specified hunt, extracts host-identifying " + "fields (hostname, IP, username, OS, MAC, ports), deduplicates by " + "hostname, and returns a clean one-row-per-host network picture." + ), +) +async def get_network_picture( + hunt_id: str = Query(..., description="Hunt ID to scan"), + db: AsyncSession = Depends(get_db), +): + """Return a deduplicated network picture for a hunt.""" + if not hunt_id: + raise HTTPException(status_code=400, detail="hunt_id is required") + + result = await build_network_picture(db, hunt_id) + return result +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 diff --git a/backend/app/api/routes/notebooks.py b/backend/app/api/routes/notebooks.py new file mode 100644 index 0000000..66d0450 --- /dev/null +++ b/backend/app/api/routes/notebooks.py @@ -0,0 +1,360 @@ +"""API routes for investigation notebooks and playbooks.""" + +import logging +from typing import Optional + +from fastapi import APIRouter, Depends, HTTPException, Query +from pydantic import BaseModel, Field +from sqlalchemy import select, func, desc +from sqlalchemy.ext.asyncio import AsyncSession + +from app.db import get_db +from app.db.models import Notebook, PlaybookRun, _new_id, _utcnow +from app.services.playbook import ( + get_builtin_playbooks, + get_playbook_template, + validate_notebook_cells, +) + +logger = logging.getLogger(__name__) + +router = APIRouter(prefix="/api/notebooks", tags=["notebooks"]) + + +# ── Pydantic models ────────────────────────────────────────────────── + + +class NotebookCreate(BaseModel): + title: str + description: Optional[str] = None + cells: Optional[list[dict]] = None + hunt_id: Optional[str] = None + case_id: Optional[str] = None + tags: Optional[list[str]] = None + + +class NotebookUpdate(BaseModel): + title: Optional[str] = None + description: Optional[str] = None + cells: Optional[list[dict]] = None + tags: Optional[list[str]] = None + + +class CellUpdate(BaseModel): + """Update a single cell or add a new one.""" + cell_id: str + cell_type: Optional[str] = None + source: Optional[str] = None + output: Optional[str] = None + metadata: Optional[dict] = None + + +class PlaybookStart(BaseModel): + playbook_name: str + hunt_id: Optional[str] = None + case_id: Optional[str] = None + started_by: Optional[str] = None + + +class StepComplete(BaseModel): + notes: Optional[str] = None + status: str = "completed" # completed | skipped + + +# ── Helpers ─────────────────────────────────────────────────────────── + + +def _notebook_to_dict(nb: Notebook) -> dict: + return { + "id": nb.id, + "title": nb.title, + "description": nb.description, + "cells": nb.cells or [], + "hunt_id": nb.hunt_id, + "case_id": nb.case_id, + "owner_id": nb.owner_id, + "tags": nb.tags or [], + "cell_count": len(nb.cells or []), + "created_at": nb.created_at.isoformat() if nb.created_at else None, + "updated_at": nb.updated_at.isoformat() if nb.updated_at else None, + } + + +def _run_to_dict(run: PlaybookRun) -> dict: + return { + "id": run.id, + "playbook_name": run.playbook_name, + "status": run.status, + "current_step": run.current_step, + "total_steps": run.total_steps, + "step_results": run.step_results or [], + "hunt_id": run.hunt_id, + "case_id": run.case_id, + "started_by": run.started_by, + "created_at": run.created_at.isoformat() if run.created_at else None, + "updated_at": run.updated_at.isoformat() if run.updated_at else None, + "completed_at": run.completed_at.isoformat() if run.completed_at else None, + } + + +# ── Notebook CRUD ───────────────────────────────────────────────────── + + +@router.get("", summary="List notebooks") +async def list_notebooks( + hunt_id: str | None = Query(None), + limit: int = Query(50, ge=1, le=200), + offset: int = Query(0, ge=0), + db: AsyncSession = Depends(get_db), +): + stmt = select(Notebook) + count_stmt = select(func.count(Notebook.id)) + if hunt_id: + stmt = stmt.where(Notebook.hunt_id == hunt_id) + count_stmt = count_stmt.where(Notebook.hunt_id == hunt_id) + + total = (await db.execute(count_stmt)).scalar() or 0 + results = (await db.execute( + stmt.order_by(desc(Notebook.updated_at)).offset(offset).limit(limit) + )).scalars().all() + + return {"notebooks": [_notebook_to_dict(n) for n in results], "total": total} + + +@router.get("/{notebook_id}", summary="Get notebook") +async def get_notebook(notebook_id: str, db: AsyncSession = Depends(get_db)): + nb = await db.get(Notebook, notebook_id) + if not nb: + raise HTTPException(status_code=404, detail="Notebook not found") + return _notebook_to_dict(nb) + + +@router.post("", summary="Create notebook") +async def create_notebook(body: NotebookCreate, db: AsyncSession = Depends(get_db)): + cells = validate_notebook_cells(body.cells or []) + if not cells: + # Start with a default markdown cell + cells = [{"id": "cell-0", "cell_type": "markdown", "source": "# Investigation Notes\n\nStart documenting your findings here.", "output": None, "metadata": {}}] + + nb = Notebook( + id=_new_id(), + title=body.title, + description=body.description, + cells=cells, + hunt_id=body.hunt_id, + case_id=body.case_id, + tags=body.tags, + ) + db.add(nb) + await db.commit() + await db.refresh(nb) + return _notebook_to_dict(nb) + + +@router.put("/{notebook_id}", summary="Update notebook") +async def update_notebook( + notebook_id: str, body: NotebookUpdate, db: AsyncSession = Depends(get_db) +): + nb = await db.get(Notebook, notebook_id) + if not nb: + raise HTTPException(status_code=404, detail="Notebook not found") + + if body.title is not None: + nb.title = body.title + if body.description is not None: + nb.description = body.description + if body.cells is not None: + nb.cells = validate_notebook_cells(body.cells) + if body.tags is not None: + nb.tags = body.tags + + await db.commit() + await db.refresh(nb) + return _notebook_to_dict(nb) + + +@router.post("/{notebook_id}/cells", summary="Add or update a cell") +async def upsert_cell( + notebook_id: str, body: CellUpdate, db: AsyncSession = Depends(get_db) +): + nb = await db.get(Notebook, notebook_id) + if not nb: + raise HTTPException(status_code=404, detail="Notebook not found") + + cells = list(nb.cells or []) + found = False + for i, c in enumerate(cells): + if c.get("id") == body.cell_id: + if body.cell_type is not None: + cells[i]["cell_type"] = body.cell_type + if body.source is not None: + cells[i]["source"] = body.source + if body.output is not None: + cells[i]["output"] = body.output + if body.metadata is not None: + cells[i]["metadata"] = body.metadata + found = True + break + + if not found: + cells.append({ + "id": body.cell_id, + "cell_type": body.cell_type or "markdown", + "source": body.source or "", + "output": body.output, + "metadata": body.metadata or {}, + }) + + nb.cells = cells + await db.commit() + await db.refresh(nb) + return _notebook_to_dict(nb) + + +@router.delete("/{notebook_id}/cells/{cell_id}", summary="Delete a cell") +async def delete_cell( + notebook_id: str, cell_id: str, db: AsyncSession = Depends(get_db) +): + nb = await db.get(Notebook, notebook_id) + if not nb: + raise HTTPException(status_code=404, detail="Notebook not found") + + cells = [c for c in (nb.cells or []) if c.get("id") != cell_id] + nb.cells = cells + await db.commit() + return {"ok": True, "remaining_cells": len(cells)} + + +@router.delete("/{notebook_id}", summary="Delete notebook") +async def delete_notebook(notebook_id: str, db: AsyncSession = Depends(get_db)): + nb = await db.get(Notebook, notebook_id) + if not nb: + raise HTTPException(status_code=404, detail="Notebook not found") + await db.delete(nb) + await db.commit() + return {"ok": True} + + +# ── Playbooks ───────────────────────────────────────────────────────── + + +@router.get("/playbooks/templates", summary="List built-in playbook templates") +async def list_playbook_templates(): + templates = get_builtin_playbooks() + return { + "templates": [ + { + "name": t["name"], + "description": t["description"], + "category": t["category"], + "tags": t["tags"], + "step_count": len(t["steps"]), + } + for t in templates + ] + } + + +@router.get("/playbooks/templates/{name}", summary="Get playbook template detail") +async def get_playbook_template_detail(name: str): + template = get_playbook_template(name) + if not template: + raise HTTPException(status_code=404, detail="Playbook template not found") + return template + + +@router.post("/playbooks/start", summary="Start a playbook run") +async def start_playbook(body: PlaybookStart, db: AsyncSession = Depends(get_db)): + template = get_playbook_template(body.playbook_name) + if not template: + raise HTTPException(status_code=404, detail="Playbook template not found") + + run = PlaybookRun( + id=_new_id(), + playbook_name=body.playbook_name, + status="in-progress", + current_step=1, + total_steps=len(template["steps"]), + step_results=[], + hunt_id=body.hunt_id, + case_id=body.case_id, + started_by=body.started_by, + ) + db.add(run) + await db.commit() + await db.refresh(run) + return _run_to_dict(run) + + +@router.get("/playbooks/runs", summary="List playbook runs") +async def list_playbook_runs( + status: str | None = Query(None), + hunt_id: str | None = Query(None), + limit: int = Query(50, ge=1, le=200), + db: AsyncSession = Depends(get_db), +): + stmt = select(PlaybookRun) + if status: + stmt = stmt.where(PlaybookRun.status == status) + if hunt_id: + stmt = stmt.where(PlaybookRun.hunt_id == hunt_id) + + results = (await db.execute( + stmt.order_by(desc(PlaybookRun.created_at)).limit(limit) + )).scalars().all() + + return {"runs": [_run_to_dict(r) for r in results]} + + +@router.get("/playbooks/runs/{run_id}", summary="Get playbook run detail") +async def get_playbook_run(run_id: str, db: AsyncSession = Depends(get_db)): + run = await db.get(PlaybookRun, run_id) + if not run: + raise HTTPException(status_code=404, detail="Run not found") + + # Also include the template steps + template = get_playbook_template(run.playbook_name) + result = _run_to_dict(run) + result["steps"] = template["steps"] if template else [] + return result + + +@router.post("/playbooks/runs/{run_id}/complete-step", summary="Complete current playbook step") +async def complete_step( + run_id: str, body: StepComplete, db: AsyncSession = Depends(get_db) +): + run = await db.get(PlaybookRun, run_id) + if not run: + raise HTTPException(status_code=404, detail="Run not found") + if run.status != "in-progress": + raise HTTPException(status_code=400, detail="Run is not in progress") + + step_results = list(run.step_results or []) + step_results.append({ + "step": run.current_step, + "status": body.status, + "notes": body.notes, + "completed_at": _utcnow().isoformat(), + }) + run.step_results = step_results + + if run.current_step >= run.total_steps: + run.status = "completed" + run.completed_at = _utcnow() + else: + run.current_step += 1 + + await db.commit() + await db.refresh(run) + return _run_to_dict(run) + + +@router.post("/playbooks/runs/{run_id}/abort", summary="Abort a playbook run") +async def abort_run(run_id: str, db: AsyncSession = Depends(get_db)): + run = await db.get(PlaybookRun, run_id) + if not run: + raise HTTPException(status_code=404, detail="Run not found") + run.status = "aborted" + run.completed_at = _utcnow() + await db.commit() + return _run_to_dict(run) diff --git a/backend/app/config.py b/backend/app/config.py index 25e2952..ed8fa05 100644 --- a/backend/app/config.py +++ b/backend/app/config.py @@ -15,7 +15,7 @@ class AppConfig(BaseSettings): # -- General -------------------------------------------------------- APP_NAME: str = "ThreatHunt" - APP_VERSION: str = "0.3.0" + APP_VERSION: str = "0.4.0" DEBUG: bool = Field(default=False, description="Enable debug mode") # -- Database ------------------------------------------------------- diff --git a/backend/app/db/engine.py b/backend/app/db/engine.py index db54e68..76de89a 100644 --- a/backend/app/db/engine.py +++ b/backend/app/db/engine.py @@ -75,8 +75,20 @@ async def get_db() -> AsyncSession: # type: ignore[misc] async def init_db() -> None: """Create all tables (for dev / first-run). In production use Alembic.""" + from sqlalchemy import inspect as sa_inspect + async with engine.begin() as conn: - await conn.run_sync(Base.metadata.create_all) + # Only create tables that don't already exist (safe alongside Alembic) + def _create_missing(sync_conn): + inspector = sa_inspect(sync_conn) + existing = set(inspector.get_table_names()) + tables_to_create = [ + t for t in Base.metadata.sorted_tables + if t.name not in existing + ] + Base.metadata.create_all(sync_conn, tables=tables_to_create) + + await conn.run_sync(_create_missing) async def dispose_db() -> None: diff --git a/backend/app/db/models.py b/backend/app/db/models.py index 0cc39ec..373639c 100644 --- a/backend/app/db/models.py +++ b/backend/app/db/models.py @@ -1,7 +1,7 @@ """SQLAlchemy ORM models for ThreatHunt. All persistent entities: datasets, hunts, conversations, annotations, -hypotheses, enrichment results, users, and AI analysis tables. +hypotheses, enrichment results, and users. """ import uuid @@ -32,7 +32,8 @@ def _new_id() -> str: return uuid.uuid4().hex -# -- Users --- +# ── Users ────────────────────────────────────────────────────────────── + class User(Base): __tablename__ = "users" @@ -41,16 +42,18 @@ class User(Base): username: Mapped[str] = mapped_column(String(64), unique=True, nullable=False, index=True) email: Mapped[str] = mapped_column(String(256), unique=True, nullable=False) hashed_password: Mapped[str] = mapped_column(String(256), nullable=False) - role: Mapped[str] = mapped_column(String(16), default="analyst") + role: Mapped[str] = mapped_column(String(16), default="analyst") # analyst | admin | viewer is_active: Mapped[bool] = mapped_column(Boolean, default=True) display_name: Mapped[Optional[str]] = mapped_column(String(128), nullable=True) created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), default=_utcnow) + # relationships hunts: Mapped[list["Hunt"]] = relationship(back_populates="owner", lazy="selectin") annotations: Mapped[list["Annotation"]] = relationship(back_populates="author", lazy="selectin") -# -- Hunts --- +# ── Hunts ────────────────────────────────────────────────────────────── + class Hunt(Base): __tablename__ = "hunts" @@ -58,7 +61,7 @@ class Hunt(Base): id: Mapped[str] = mapped_column(String(32), primary_key=True, default=_new_id) name: Mapped[str] = mapped_column(String(256), nullable=False) description: Mapped[Optional[str]] = mapped_column(Text, nullable=True) - status: Mapped[str] = mapped_column(String(32), default="active") + status: Mapped[str] = mapped_column(String(32), default="active") # active | closed | archived owner_id: Mapped[Optional[str]] = mapped_column( String(32), ForeignKey("users.id"), nullable=True ) @@ -67,15 +70,15 @@ class Hunt(Base): DateTime(timezone=True), default=_utcnow, onupdate=_utcnow ) + # relationships owner: Mapped[Optional["User"]] = relationship(back_populates="hunts", lazy="selectin") datasets: Mapped[list["Dataset"]] = relationship(back_populates="hunt", lazy="selectin") conversations: Mapped[list["Conversation"]] = relationship(back_populates="hunt", lazy="selectin") hypotheses: Mapped[list["Hypothesis"]] = relationship(back_populates="hunt", lazy="selectin") - host_profiles: Mapped[list["HostProfile"]] = relationship(back_populates="hunt", lazy="noload") - reports: Mapped[list["HuntReport"]] = relationship(back_populates="hunt", lazy="noload") -# -- Datasets --- +# ── Datasets ─────────────────────────────────────────────────────────── + class Dataset(Base): __tablename__ = "datasets" @@ -83,44 +86,36 @@ class Dataset(Base): id: Mapped[str] = mapped_column(String(32), primary_key=True, default=_new_id) name: Mapped[str] = mapped_column(String(256), nullable=False, index=True) filename: Mapped[str] = mapped_column(String(512), nullable=False) - source_tool: Mapped[Optional[str]] = mapped_column(String(64), nullable=True) + source_tool: Mapped[Optional[str]] = mapped_column(String(64), nullable=True) # velociraptor, etc. row_count: Mapped[int] = mapped_column(Integer, default=0) column_schema: Mapped[Optional[dict]] = mapped_column(JSON, nullable=True) normalized_columns: Mapped[Optional[dict]] = mapped_column(JSON, nullable=True) - ioc_columns: Mapped[Optional[dict]] = mapped_column(JSON, nullable=True) + ioc_columns: Mapped[Optional[dict]] = mapped_column(JSON, nullable=True) # auto-detected IOC columns file_size_bytes: Mapped[int] = mapped_column(Integer, default=0) encoding: Mapped[Optional[str]] = mapped_column(String(32), nullable=True) delimiter: Mapped[Optional[str]] = mapped_column(String(4), nullable=True) time_range_start: Mapped[Optional[datetime]] = mapped_column(DateTime(timezone=True), nullable=True) time_range_end: Mapped[Optional[datetime]] = mapped_column(DateTime(timezone=True), nullable=True) - # New Phase 1-2 columns - processing_status: Mapped[str] = mapped_column(String(20), default="ready") - artifact_type: Mapped[Optional[str]] = mapped_column(String(128), nullable=True) - error_message: Mapped[Optional[str]] = mapped_column(Text, nullable=True) - file_path: Mapped[Optional[str]] = mapped_column(String(512), nullable=True) - hunt_id: Mapped[Optional[str]] = mapped_column( String(32), ForeignKey("hunts.id"), nullable=True ) uploaded_by: Mapped[Optional[str]] = mapped_column(String(32), nullable=True) created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), default=_utcnow) + # relationships hunt: Mapped[Optional["Hunt"]] = relationship(back_populates="datasets", lazy="selectin") rows: Mapped[list["DatasetRow"]] = relationship( back_populates="dataset", lazy="noload", cascade="all, delete-orphan" ) - triage_results: Mapped[list["TriageResult"]] = relationship( - back_populates="dataset", lazy="noload", cascade="all, delete-orphan" - ) __table_args__ = ( Index("ix_datasets_hunt", "hunt_id"), - Index("ix_datasets_status", "processing_status"), ) class DatasetRow(Base): + """Individual row from a CSV dataset, stored as JSON blob.""" __tablename__ = "dataset_rows" id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True) @@ -131,6 +126,7 @@ class DatasetRow(Base): data: Mapped[dict] = mapped_column(JSON, nullable=False) normalized_data: Mapped[Optional[dict]] = mapped_column(JSON, nullable=True) + # relationships dataset: Mapped["Dataset"] = relationship(back_populates="rows") annotations: Mapped[list["Annotation"]] = relationship( back_populates="row", lazy="noload" @@ -142,7 +138,8 @@ class DatasetRow(Base): ) -# -- Conversations --- +# ── Conversations ───────────────────────────────────────────────────── + class Conversation(Base): __tablename__ = "conversations" @@ -160,6 +157,7 @@ class Conversation(Base): DateTime(timezone=True), default=_utcnow, onupdate=_utcnow ) + # relationships hunt: Mapped[Optional["Hunt"]] = relationship(back_populates="conversations", lazy="selectin") messages: Mapped[list["Message"]] = relationship( back_populates="conversation", lazy="selectin", cascade="all, delete-orphan", @@ -174,15 +172,16 @@ class Message(Base): conversation_id: Mapped[str] = mapped_column( String(32), ForeignKey("conversations.id", ondelete="CASCADE"), nullable=False ) - role: Mapped[str] = mapped_column(String(16), nullable=False) + role: Mapped[str] = mapped_column(String(16), nullable=False) # user | agent | system content: Mapped[str] = mapped_column(Text, nullable=False) model_used: Mapped[Optional[str]] = mapped_column(String(128), nullable=True) - node_used: Mapped[Optional[str]] = mapped_column(String(64), nullable=True) + node_used: Mapped[Optional[str]] = mapped_column(String(64), nullable=True) # wile | roadrunner | cluster token_count: Mapped[Optional[int]] = mapped_column(Integer, nullable=True) latency_ms: Mapped[Optional[int]] = mapped_column(Integer, nullable=True) response_meta: Mapped[Optional[dict]] = mapped_column(JSON, nullable=True) created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), default=_utcnow) + # relationships conversation: Mapped["Conversation"] = relationship(back_populates="messages") __table_args__ = ( @@ -190,7 +189,8 @@ class Message(Base): ) -# -- Annotations --- +# ── Annotations ─────────────────────────────────────────────────────── + class Annotation(Base): __tablename__ = "annotations" @@ -206,14 +206,19 @@ class Annotation(Base): String(32), ForeignKey("users.id"), nullable=True ) text: Mapped[str] = mapped_column(Text, nullable=False) - severity: Mapped[str] = mapped_column(String(16), default="info") - tag: Mapped[Optional[str]] = mapped_column(String(32), nullable=True) + severity: Mapped[str] = mapped_column( + String(16), default="info" + ) # info | low | medium | high | critical + tag: Mapped[Optional[str]] = mapped_column( + String(32), nullable=True + ) # suspicious | benign | needs-review highlight_color: Mapped[Optional[str]] = mapped_column(String(16), nullable=True) created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), default=_utcnow) updated_at: Mapped[datetime] = mapped_column( DateTime(timezone=True), default=_utcnow, onupdate=_utcnow ) + # relationships row: Mapped[Optional["DatasetRow"]] = relationship(back_populates="annotations") author: Mapped[Optional["User"]] = relationship(back_populates="annotations") @@ -223,7 +228,8 @@ class Annotation(Base): ) -# -- Hypotheses --- +# ── Hypotheses ──────────────────────────────────────────────────────── + class Hypothesis(Base): __tablename__ = "hypotheses" @@ -235,7 +241,9 @@ class Hypothesis(Base): title: Mapped[str] = mapped_column(String(256), nullable=False) description: Mapped[Optional[str]] = mapped_column(Text, nullable=True) mitre_technique: Mapped[Optional[str]] = mapped_column(String(32), nullable=True) - status: Mapped[str] = mapped_column(String(16), default="draft") + status: Mapped[str] = mapped_column( + String(16), default="draft" + ) # draft | active | confirmed | rejected evidence_row_ids: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) evidence_notes: Mapped[Optional[str]] = mapped_column(Text, nullable=True) created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), default=_utcnow) @@ -243,6 +251,7 @@ class Hypothesis(Base): DateTime(timezone=True), default=_utcnow, onupdate=_utcnow ) + # relationships hunt: Mapped[Optional["Hunt"]] = relationship(back_populates="hypotheses", lazy="selectin") __table_args__ = ( @@ -250,16 +259,21 @@ class Hypothesis(Base): ) -# -- Enrichment Results --- +# ── Enrichment Results ──────────────────────────────────────────────── + class EnrichmentResult(Base): __tablename__ = "enrichment_results" id: Mapped[str] = mapped_column(String(32), primary_key=True, default=_new_id) ioc_value: Mapped[str] = mapped_column(String(512), nullable=False, index=True) - ioc_type: Mapped[str] = mapped_column(String(32), nullable=False) - source: Mapped[str] = mapped_column(String(32), nullable=False) - verdict: Mapped[Optional[str]] = mapped_column(String(16), nullable=True) + ioc_type: Mapped[str] = mapped_column( + String(32), nullable=False + ) # ip | hash_md5 | hash_sha1 | hash_sha256 | domain | url + source: Mapped[str] = mapped_column(String(32), nullable=False) # virustotal | abuseipdb | shodan | ai + verdict: Mapped[Optional[str]] = mapped_column( + String(16), nullable=True + ) # clean | suspicious | malicious | unknown confidence: Mapped[Optional[float]] = mapped_column(Float, nullable=True) raw_result: Mapped[Optional[dict]] = mapped_column(JSON, nullable=True) summary: Mapped[Optional[str]] = mapped_column(Text, nullable=True) @@ -274,24 +288,28 @@ class EnrichmentResult(Base): ) -# -- AUP Keyword Themes & Keywords --- +# ── AUP Keyword Themes & Keywords ──────────────────────────────────── + class KeywordTheme(Base): + """A named category of keywords for AUP scanning (e.g. gambling, gaming).""" __tablename__ = "keyword_themes" id: Mapped[str] = mapped_column(String(32), primary_key=True, default=_new_id) name: Mapped[str] = mapped_column(String(128), unique=True, nullable=False, index=True) - color: Mapped[str] = mapped_column(String(16), default="#9e9e9e") + color: Mapped[str] = mapped_column(String(16), default="#9e9e9e") # hex chip color enabled: Mapped[bool] = mapped_column(Boolean, default=True) - is_builtin: Mapped[bool] = mapped_column(Boolean, default=False) + is_builtin: Mapped[bool] = mapped_column(Boolean, default=False) # seed-provided created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), default=_utcnow) + # relationships keywords: Mapped[list["Keyword"]] = relationship( back_populates="theme", lazy="selectin", cascade="all, delete-orphan" ) class Keyword(Base): + """Individual keyword / pattern belonging to a theme.""" __tablename__ = "keywords" id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True) @@ -302,6 +320,7 @@ class Keyword(Base): is_regex: Mapped[bool] = mapped_column(Boolean, default=False) created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), default=_utcnow) + # relationships theme: Mapped["KeywordTheme"] = relationship(back_populates="keywords") __table_args__ = ( @@ -310,91 +329,223 @@ class Keyword(Base): ) -# -- AI Analysis Tables (Phase 2) --- +# ── Cases ───────────────────────────────────────────────────────────── -class TriageResult(Base): - __tablename__ = "triage_results" + +class Case(Base): + """Incident / investigation case, inspired by TheHive.""" + __tablename__ = "cases" id: Mapped[str] = mapped_column(String(32), primary_key=True, default=_new_id) - dataset_id: Mapped[str] = mapped_column( - String(32), ForeignKey("datasets.id", ondelete="CASCADE"), nullable=False, index=True + title: Mapped[str] = mapped_column(String(512), nullable=False) + description: Mapped[Optional[str]] = mapped_column(Text, nullable=True) + severity: Mapped[str] = mapped_column(String(16), default="medium") # info|low|medium|high|critical + tlp: Mapped[str] = mapped_column(String(16), default="amber") # white|green|amber|red + pap: Mapped[str] = mapped_column(String(16), default="amber") # white|green|amber|red + status: Mapped[str] = mapped_column(String(24), default="open") # open|in-progress|resolved|closed + priority: Mapped[int] = mapped_column(Integer, default=2) # 1(urgent)..4(low) + assignee: Mapped[Optional[str]] = mapped_column(String(128), nullable=True) + tags: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) + hunt_id: Mapped[Optional[str]] = mapped_column( + String(32), ForeignKey("hunts.id"), nullable=True ) - row_start: Mapped[int] = mapped_column(Integer, nullable=False) - row_end: Mapped[int] = mapped_column(Integer, nullable=False) - risk_score: Mapped[float] = mapped_column(Float, default=0.0) - verdict: Mapped[str] = mapped_column(String(20), default="pending") - findings: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) - suspicious_indicators: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) - mitre_techniques: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) - model_used: Mapped[Optional[str]] = mapped_column(String(128), nullable=True) - node_used: Mapped[Optional[str]] = mapped_column(String(64), nullable=True) - created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), default=_utcnow) - - dataset: Mapped["Dataset"] = relationship(back_populates="triage_results") - - -class HostProfile(Base): - __tablename__ = "host_profiles" - - id: Mapped[str] = mapped_column(String(32), primary_key=True, default=_new_id) - hunt_id: Mapped[str] = mapped_column( - String(32), ForeignKey("hunts.id", ondelete="CASCADE"), nullable=False, index=True + owner_id: Mapped[Optional[str]] = mapped_column( + String(32), ForeignKey("users.id"), nullable=True ) - hostname: Mapped[str] = mapped_column(String(256), nullable=False) - fqdn: Mapped[Optional[str]] = mapped_column(String(512), nullable=True) - client_id: Mapped[Optional[str]] = mapped_column(String(64), nullable=True) - risk_score: Mapped[float] = mapped_column(Float, default=0.0) - risk_level: Mapped[str] = mapped_column(String(20), default="unknown") - artifact_summary: Mapped[Optional[dict]] = mapped_column(JSON, nullable=True) - timeline_summary: Mapped[Optional[str]] = mapped_column(Text, nullable=True) - suspicious_findings: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) mitre_techniques: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) - llm_analysis: Mapped[Optional[str]] = mapped_column(Text, nullable=True) - model_used: Mapped[Optional[str]] = mapped_column(String(128), nullable=True) - node_used: Mapped[Optional[str]] = mapped_column(String(64), nullable=True) + iocs: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) # [{type, value, description}] + started_at: Mapped[Optional[datetime]] = mapped_column(DateTime(timezone=True), nullable=True) + resolved_at: Mapped[Optional[datetime]] = mapped_column(DateTime(timezone=True), nullable=True) created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), default=_utcnow) updated_at: Mapped[datetime] = mapped_column( DateTime(timezone=True), default=_utcnow, onupdate=_utcnow ) - hunt: Mapped["Hunt"] = relationship(back_populates="host_profiles") + # relationships + tasks: Mapped[list["CaseTask"]] = relationship( + back_populates="case", lazy="selectin", cascade="all, delete-orphan" + ) + + __table_args__ = ( + Index("ix_cases_hunt", "hunt_id"), + Index("ix_cases_status", "status"), + ) -class HuntReport(Base): - __tablename__ = "hunt_reports" +class CaseTask(Base): + """Task within a case (Kanban board item).""" + __tablename__ = "case_tasks" id: Mapped[str] = mapped_column(String(32), primary_key=True, default=_new_id) - hunt_id: Mapped[str] = mapped_column( - String(32), ForeignKey("hunts.id", ondelete="CASCADE"), nullable=False, index=True + case_id: Mapped[str] = mapped_column( + String(32), ForeignKey("cases.id", ondelete="CASCADE"), nullable=False ) - status: Mapped[str] = mapped_column(String(20), default="pending") - exec_summary: Mapped[Optional[str]] = mapped_column(Text, nullable=True) - full_report: Mapped[Optional[str]] = mapped_column(Text, nullable=True) - findings: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) - recommendations: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) - mitre_mapping: Mapped[Optional[dict]] = mapped_column(JSON, nullable=True) - ioc_table: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) - host_risk_summary: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) - models_used: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) - generation_time_ms: Mapped[Optional[int]] = mapped_column(Integer, nullable=True) + title: Mapped[str] = mapped_column(String(512), nullable=False) + description: Mapped[Optional[str]] = mapped_column(Text, nullable=True) + status: Mapped[str] = mapped_column(String(24), default="todo") # todo|in-progress|done + assignee: Mapped[Optional[str]] = mapped_column(String(128), nullable=True) + order: Mapped[int] = mapped_column(Integer, default=0) created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), default=_utcnow) updated_at: Mapped[datetime] = mapped_column( DateTime(timezone=True), default=_utcnow, onupdate=_utcnow ) - hunt: Mapped["Hunt"] = relationship(back_populates="reports") + # relationships + case: Mapped["Case"] = relationship(back_populates="tasks") + + __table_args__ = ( + Index("ix_case_tasks_case", "case_id"), + ) -class AnomalyResult(Base): - __tablename__ = "anomaly_results" +# ── Activity Log ────────────────────────────────────────────────────── + + +class ActivityLog(Base): + """Audit trail / activity log for cases and hunts.""" + __tablename__ = "activity_logs" + + id: Mapped[int] = mapped_column(Integer, primary_key=True, autoincrement=True) + entity_type: Mapped[str] = mapped_column(String(32), nullable=False) # case|hunt|annotation + entity_id: Mapped[str] = mapped_column(String(32), nullable=False) + action: Mapped[str] = mapped_column(String(64), nullable=False) # created|updated|status_changed|etc + details: Mapped[Optional[dict]] = mapped_column(JSON, nullable=True) + user_id: Mapped[Optional[str]] = mapped_column(String(32), nullable=True) + created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), default=_utcnow) + + __table_args__ = ( + Index("ix_activity_entity", "entity_type", "entity_id"), + ) + + +# ── Alerts ──────────────────────────────────────────────────────────── + + +class Alert(Base): + """Security alert generated by analyzers or rules.""" + __tablename__ = "alerts" id: Mapped[str] = mapped_column(String(32), primary_key=True, default=_new_id) - dataset_id: Mapped[str] = mapped_column( - String(32), ForeignKey("datasets.id", ondelete="CASCADE"), nullable=False, index=True + title: Mapped[str] = mapped_column(String(512), nullable=False) + description: Mapped[Optional[str]] = mapped_column(Text, nullable=True) + severity: Mapped[str] = mapped_column(String(16), default="medium") # critical|high|medium|low|info + status: Mapped[str] = mapped_column(String(24), default="new") # new|acknowledged|in-progress|resolved|false-positive + analyzer: Mapped[str] = mapped_column(String(64), nullable=False) # which analyzer produced it + score: Mapped[float] = mapped_column(Float, default=0.0) + evidence: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) # [{row_index, field, value, ...}] + mitre_technique: Mapped[Optional[str]] = mapped_column(String(32), nullable=True) + tags: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) + hunt_id: Mapped[Optional[str]] = mapped_column( + String(32), ForeignKey("hunts.id"), nullable=True ) - row_id: Mapped[Optional[int]] = mapped_column( - Integer, ForeignKey("dataset_rows.id", ondelete="CASCADE"), nullable=True + dataset_id: Mapped[Optional[str]] = mapped_column( + String(32), ForeignKey("datasets.id"), nullable=True ) + case_id: Mapped[Optional[str]] = mapped_column( + String(32), ForeignKey("cases.id"), nullable=True + ) + assignee: Mapped[Optional[str]] = mapped_column(String(128), nullable=True) + acknowledged_at: Mapped[Optional[datetime]] = mapped_column(DateTime(timezone=True), nullable=True) + resolved_at: Mapped[Optional[datetime]] = mapped_column(DateTime(timezone=True), nullable=True) + created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), default=_utcnow) + updated_at: Mapped[datetime] = mapped_column( + DateTime(timezone=True), default=_utcnow, onupdate=_utcnow + ) + + __table_args__ = ( + Index("ix_alerts_severity", "severity"), + Index("ix_alerts_status", "status"), + Index("ix_alerts_hunt", "hunt_id"), + Index("ix_alerts_dataset", "dataset_id"), + ) + + +class AlertRule(Base): + """User-defined alert rule (triggers analyzers automatically on upload).""" + __tablename__ = "alert_rules" + + id: Mapped[str] = mapped_column(String(32), primary_key=True, default=_new_id) + name: Mapped[str] = mapped_column(String(256), nullable=False) + description: Mapped[Optional[str]] = mapped_column(Text, nullable=True) + analyzer: Mapped[str] = mapped_column(String(64), nullable=False) # analyzer name + config: Mapped[Optional[dict]] = mapped_column(JSON, nullable=True) # analyzer config overrides + severity_override: Mapped[Optional[str]] = mapped_column(String(16), nullable=True) + enabled: Mapped[bool] = mapped_column(Boolean, default=True) + hunt_id: Mapped[Optional[str]] = mapped_column( + String(32), ForeignKey("hunts.id"), nullable=True + ) # None = global + created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), default=_utcnow) + updated_at: Mapped[datetime] = mapped_column( + DateTime(timezone=True), default=_utcnow, onupdate=_utcnow + ) + + __table_args__ = ( + Index("ix_alert_rules_analyzer", "analyzer"), + ) + + +# ── Notebooks ──────────────────────────────────────────────────────── + + +class Notebook(Base): + """Investigation notebook — cell-based document for analyst notes and queries.""" + __tablename__ = "notebooks" + + id: Mapped[str] = mapped_column(String(32), primary_key=True, default=_new_id) + title: Mapped[str] = mapped_column(String(512), nullable=False) + description: Mapped[Optional[str]] = mapped_column(Text, nullable=True) + cells: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) # [{id, cell_type, source, output, metadata}] + hunt_id: Mapped[Optional[str]] = mapped_column( + String(32), ForeignKey("hunts.id"), nullable=True + ) + case_id: Mapped[Optional[str]] = mapped_column( + String(32), ForeignKey("cases.id"), nullable=True + ) + owner_id: Mapped[Optional[str]] = mapped_column( + String(32), ForeignKey("users.id"), nullable=True + ) + tags: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) + created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), default=_utcnow) + updated_at: Mapped[datetime] = mapped_column( + DateTime(timezone=True), default=_utcnow, onupdate=_utcnow + ) + + __table_args__ = ( + Index("ix_notebooks_hunt", "hunt_id"), + ) + + +# ── Playbook Runs ──────────────────────────────────────────────────── + + +class PlaybookRun(Base): + """Record of a playbook execution (links a template to a hunt/case).""" + __tablename__ = "playbook_runs" + + id: Mapped[str] = mapped_column(String(32), primary_key=True, default=_new_id) + playbook_name: Mapped[str] = mapped_column(String(256), nullable=False) + status: Mapped[str] = mapped_column(String(24), default="in-progress") # in-progress | completed | aborted + current_step: Mapped[int] = mapped_column(Integer, default=1) + total_steps: Mapped[int] = mapped_column(Integer, default=0) + step_results: Mapped[Optional[list]] = mapped_column(JSON, nullable=True) # [{step, status, notes, completed_at}] + hunt_id: Mapped[Optional[str]] = mapped_column( + String(32), ForeignKey("hunts.id"), nullable=True + ) + case_id: Mapped[Optional[str]] = mapped_column( + String(32), ForeignKey("cases.id"), nullable=True + ) + started_by: Mapped[Optional[str]] = mapped_column(String(128), nullable=True) + created_at: Mapped[datetime] = mapped_column(DateTime(timezone=True), default=_utcnow) + updated_at: Mapped[datetime] = mapped_column( + DateTime(timezone=True), default=_utcnow, onupdate=_utcnow + ) + completed_at: Mapped[Optional[datetime]] = mapped_column(DateTime(timezone=True), nullable=True) + + __table_args__ = ( + Index("ix_playbook_runs_hunt", "hunt_id"), + Index("ix_playbook_runs_status", "status"), + ) +<<<<<<< HEAD anomaly_score: Mapped[float] = mapped_column(Float, default=0.0) distance_from_centroid: Mapped[Optional[float]] = mapped_column(Float, nullable=True) cluster_id: Mapped[Optional[int]] = mapped_column(Integer, nullable=True) @@ -505,3 +656,5 @@ class SavedSearch(Base): __table_args__ = ( Index("ix_saved_searches_type", "search_type"), ) +======= +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 diff --git a/backend/app/main.py b/backend/app/main.py index 96d66b6..0a1eed4 100644 --- a/backend/app/main.py +++ b/backend/app/main.py @@ -1,12 +1,10 @@ """ThreatHunt backend application. Wires together: database, CORS, agent routes, dataset routes, hunt routes, -annotation/hypothesis routes, analysis routes, network routes, job queue, -load balancer. DB tables are auto-created on startup. +annotation/hypothesis routes. DB tables are auto-created on startup. """ import logging -import os from contextlib import asynccontextmanager from fastapi import FastAPI @@ -23,13 +21,19 @@ from app.api.routes.correlation import router as correlation_router from app.api.routes.reports import router as reports_router from app.api.routes.auth import router as auth_router from app.api.routes.keywords import router as keywords_router -from app.api.routes.analysis import router as analysis_router from app.api.routes.network import router as network_router +<<<<<<< HEAD from app.api.routes.mitre import router as mitre_router from app.api.routes.timeline import router as timeline_router from app.api.routes.playbooks import router as playbooks_router from app.api.routes.saved_searches import router as searches_router from app.api.routes.stix_export import router as stix_router +======= +from app.api.routes.analysis import router as analysis_router +from app.api.routes.cases import router as cases_router +from app.api.routes.alerts import router as alerts_router +from app.api.routes.notebooks import router as notebooks_router +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 logger = logging.getLogger(__name__) @@ -37,20 +41,16 @@ logger = logging.getLogger(__name__) @asynccontextmanager async def lifespan(app: FastAPI): """Startup / shutdown lifecycle.""" - logger.info("Starting ThreatHunt API ...") + logger.info("Starting ThreatHunt API …") await init_db() logger.info("Database initialised") - - # Ensure uploads directory exists - os.makedirs(settings.UPLOAD_DIR, exist_ok=True) - logger.info("Upload dir: %s", os.path.abspath(settings.UPLOAD_DIR)) - # Seed default AUP keyword themes from app.db import async_session_factory from app.services.keyword_defaults import seed_defaults async with async_session_factory() as seed_db: await seed_defaults(seed_db) logger.info("AUP keyword defaults checked") +<<<<<<< HEAD # Start job queue from app.services.job_queue import ( @@ -141,6 +141,10 @@ async def lifespan(app: FastAPI): await _lb.stop_health_loop() logger.info("Load balancer stopped") +======= + yield + logger.info("Shutting down …") +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 from app.agents.providers_v2 import cleanup_client from app.services.enrichment import enrichment_engine await cleanup_client() @@ -148,13 +152,15 @@ async def lifespan(app: FastAPI): await dispose_db() +# Create FastAPI application app = FastAPI( title="ThreatHunt API", description="Analyst-assist threat hunting platform powered by Wile & Roadrunner LLM cluster", - version=settings.APP_VERSION, + version="0.3.0", lifespan=lifespan, ) +# Configure CORS app.add_middleware( CORSMiddleware, allow_origins=settings.cors_origins, @@ -174,17 +180,24 @@ app.include_router(enrichment_router) app.include_router(correlation_router) app.include_router(reports_router) app.include_router(keywords_router) -app.include_router(analysis_router) app.include_router(network_router) +<<<<<<< HEAD app.include_router(mitre_router) app.include_router(timeline_router) app.include_router(playbooks_router) app.include_router(searches_router) app.include_router(stix_router) +======= +app.include_router(analysis_router) +app.include_router(cases_router) +app.include_router(alerts_router) +app.include_router(notebooks_router) +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 @app.get("/", tags=["health"]) async def root(): + """API health check.""" return { "service": "ThreatHunt API", "version": settings.APP_VERSION, @@ -196,6 +209,7 @@ async def root(): "openwebui": settings.OPENWEBUI_URL, }, } +<<<<<<< HEAD @app.get("/health", tags=["health"]) @@ -205,3 +219,5 @@ async def health(): "version": settings.APP_VERSION, "status": "ok", } +======= +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 diff --git a/backend/app/services/analyzers.py b/backend/app/services/analyzers.py new file mode 100644 index 0000000..e78b8aa --- /dev/null +++ b/backend/app/services/analyzers.py @@ -0,0 +1,464 @@ +"""Pluggable Analyzer Framework for ThreatHunt. + +Each analyzer implements a simple protocol: + - name / description properties + - async analyze(rows, config) -> list[AlertCandidate] + +The AnalyzerRegistry discovers and runs all enabled analyzers against +a dataset, producing alert candidates that the alert system can persist. +""" + +from __future__ import annotations + +import logging +import math +import re +from abc import ABC, abstractmethod +from collections import Counter, defaultdict +from dataclasses import dataclass, field +from typing import Any, Optional, Sequence + +logger = logging.getLogger(__name__) + + +# ── Alert Candidate DTO ────────────────────────────────────────────── + + +@dataclass +class AlertCandidate: + """A single finding from an analyzer, before it becomes a persisted Alert.""" + analyzer: str + title: str + severity: str # critical | high | medium | low | info + description: str + evidence: list[dict] = field(default_factory=list) # [{row_index, field, value, ...}] + mitre_technique: Optional[str] = None + tags: list[str] = field(default_factory=list) + score: float = 0.0 # 0-100 + + +# ── Base Analyzer ──────────────────────────────────────────────────── + + +class BaseAnalyzer(ABC): + """Interface every analyzer must implement.""" + + @property + @abstractmethod + def name(self) -> str: ... + + @property + @abstractmethod + def description(self) -> str: ... + + @abstractmethod + async def analyze( + self, rows: list[dict[str, Any]], config: dict[str, Any] | None = None + ) -> list[AlertCandidate]: ... + + +# ── Built-in Analyzers ────────────────────────────────────────────── + + +class EntropyAnalyzer(BaseAnalyzer): + """Detects high-entropy strings (encoded payloads, obfuscated commands).""" + + name = "entropy" + description = "Flags fields with high Shannon entropy (possible encoding/obfuscation)" + + ENTROPY_FIELDS = [ + "command_line", "commandline", "process_command_line", "cmdline", + "powershell_command", "script_block", "url", "uri", "path", + "file_path", "target_filename", "query", "dns_query", + ] + DEFAULT_THRESHOLD = 4.5 + + @staticmethod + def _shannon(s: str) -> float: + if not s or len(s) < 8: + return 0.0 + freq = Counter(s) + length = len(s) + return -sum((c / length) * math.log2(c / length) for c in freq.values()) + + async def analyze(self, rows, config=None): + config = config or {} + threshold = config.get("entropy_threshold", self.DEFAULT_THRESHOLD) + min_length = config.get("min_length", 20) + alerts: list[AlertCandidate] = [] + + for idx, row in enumerate(rows): + for field_name in self.ENTROPY_FIELDS: + val = str(row.get(field_name, "")) + if len(val) < min_length: + continue + ent = self._shannon(val) + if ent >= threshold: + sev = "critical" if ent > 5.5 else "high" if ent > 5.0 else "medium" + alerts.append(AlertCandidate( + analyzer=self.name, + title=f"High-entropy string in {field_name}", + severity=sev, + description=f"Shannon entropy {ent:.2f} (threshold {threshold}) in row {idx}, field '{field_name}'", + evidence=[{"row_index": idx, "field": field_name, "value": val[:200], "entropy": round(ent, 3)}], + mitre_technique="T1027", # Obfuscated Files or Information + tags=["obfuscation", "entropy"], + score=min(100, ent * 18), + )) + return alerts + + +class SuspiciousCommandAnalyzer(BaseAnalyzer): + """Detects known-bad command patterns (credential dumping, lateral movement, persistence).""" + + name = "suspicious_commands" + description = "Flags processes executing known-suspicious command patterns" + + PATTERNS: list[tuple[str, str, str, str]] = [ + # (regex, title, severity, mitre_technique) + (r"mimikatz|sekurlsa|lsadump|kerberos::list", "Mimikatz / Credential Dumping", "critical", "T1003"), + (r"(?i)-enc\s+[A-Za-z0-9+/=]{40,}", "Encoded PowerShell command", "high", "T1059.001"), + (r"(?i)invoke-(mimikatz|expression|webrequest|shellcode)", "Suspicious PowerShell Invoke", "high", "T1059.001"), + (r"(?i)net\s+(user|localgroup|group)\s+/add", "Local account creation", "high", "T1136.001"), + (r"(?i)schtasks\s+/create", "Scheduled task creation", "medium", "T1053.005"), + (r"(?i)reg\s+add\s+.*\\run", "Registry Run key persistence", "high", "T1547.001"), + (r"(?i)wmic\s+.*(process\s+call|shadowcopy\s+delete)", "WMI abuse / shadow copy deletion", "critical", "T1047"), + (r"(?i)psexec|winrm|wmic\s+/node:", "Lateral movement tool", "high", "T1021"), + (r"(?i)certutil\s+-urlcache", "Certutil download (LOLBin)", "high", "T1105"), + (r"(?i)bitsadmin\s+/transfer", "BITSAdmin download", "medium", "T1197"), + (r"(?i)vssadmin\s+delete\s+shadows", "VSS shadow deletion (ransomware)", "critical", "T1490"), + (r"(?i)bcdedit.*recoveryenabled.*no", "Boot config tamper (ransomware)", "critical", "T1490"), + (r"(?i)attrib\s+\+h\s+\+s", "Hidden file attribute set", "low", "T1564.001"), + (r"(?i)netsh\s+advfirewall\s+.*disable", "Firewall disabled", "high", "T1562.004"), + (r"(?i)whoami\s*/priv", "Privilege enumeration", "medium", "T1033"), + (r"(?i)nltest\s+/dclist", "Domain controller enumeration", "medium", "T1018"), + (r"(?i)dsquery|ldapsearch|adfind", "Active Directory enumeration", "medium", "T1087.002"), + (r"(?i)procdump.*-ma\s+lsass", "LSASS memory dump", "critical", "T1003.001"), + (r"(?i)rundll32.*comsvcs.*MiniDump", "LSASS dump via comsvcs", "critical", "T1003.001"), + ] + + CMD_FIELDS = [ + "command_line", "commandline", "process_command_line", "cmdline", + "parent_command_line", "powershell_command", + ] + + async def analyze(self, rows, config=None): + alerts: list[AlertCandidate] = [] + compiled = [(re.compile(p, re.IGNORECASE), t, s, m) for p, t, s, m in self.PATTERNS] + + for idx, row in enumerate(rows): + for fld in self.CMD_FIELDS: + val = str(row.get(fld, "")) + if len(val) < 3: + continue + for pattern, title, sev, mitre in compiled: + if pattern.search(val): + alerts.append(AlertCandidate( + analyzer=self.name, + title=title, + severity=sev, + description=f"Suspicious command pattern in row {idx}: {val[:200]}", + evidence=[{"row_index": idx, "field": fld, "value": val[:300]}], + mitre_technique=mitre, + tags=["command", "suspicious"], + score={"critical": 95, "high": 80, "medium": 60, "low": 30}.get(sev, 50), + )) + return alerts + + +class NetworkAnomalyAnalyzer(BaseAnalyzer): + """Detects anomalous network patterns (beaconing, unusual ports, large transfers).""" + + name = "network_anomaly" + description = "Flags anomalous network behavior (beaconing, unusual ports, large transfers)" + + SUSPICIOUS_PORTS = {4444, 5555, 6666, 8888, 9999, 1234, 31337, 12345, 54321, 1337} + C2_PORTS = {443, 8443, 8080, 4443, 9443} + + async def analyze(self, rows, config=None): + config = config or {} + alerts: list[AlertCandidate] = [] + + # Track destination IP frequency for beaconing detection + dst_freq: dict[str, list[int]] = defaultdict(list) + port_hits: list[tuple[int, str, int]] = [] + + for idx, row in enumerate(rows): + dst_ip = str(row.get("dst_ip", row.get("destination_ip", row.get("dest_ip", "")))) + dst_port = row.get("dst_port", row.get("destination_port", row.get("dest_port", ""))) + + if dst_ip and dst_ip != "": + dst_freq[dst_ip].append(idx) + + if dst_port: + try: + port_num = int(dst_port) + if port_num in self.SUSPICIOUS_PORTS: + port_hits.append((idx, dst_ip, port_num)) + except (ValueError, TypeError): + pass + + # Large transfer detection + bytes_val = row.get("bytes_sent", row.get("bytes_out", row.get("sent_bytes", 0))) + try: + if int(bytes_val or 0) > config.get("large_transfer_threshold", 10_000_000): + alerts.append(AlertCandidate( + analyzer=self.name, + title="Large data transfer detected", + severity="medium", + description=f"Row {idx}: {bytes_val} bytes sent to {dst_ip}", + evidence=[{"row_index": idx, "dst_ip": dst_ip, "bytes": str(bytes_val)}], + mitre_technique="T1048", + tags=["exfiltration", "network"], + score=65, + )) + except (ValueError, TypeError): + pass + + # Beaconing: IPs contacted more than threshold times + beacon_thresh = config.get("beacon_threshold", 20) + for ip, indices in dst_freq.items(): + if len(indices) >= beacon_thresh: + alerts.append(AlertCandidate( + analyzer=self.name, + title=f"Possible beaconing to {ip}", + severity="high", + description=f"Destination {ip} contacted {len(indices)} times (threshold: {beacon_thresh})", + evidence=[{"dst_ip": ip, "contact_count": len(indices), "sample_rows": indices[:10]}], + mitre_technique="T1071", + tags=["beaconing", "c2", "network"], + score=min(95, 50 + len(indices)), + )) + + # Suspicious ports + for idx, ip, port in port_hits: + alerts.append(AlertCandidate( + analyzer=self.name, + title=f"Connection on suspicious port {port}", + severity="medium", + description=f"Row {idx}: connection to {ip}:{port}", + evidence=[{"row_index": idx, "dst_ip": ip, "dst_port": port}], + mitre_technique="T1571", + tags=["suspicious_port", "network"], + score=55, + )) + + return alerts + + +class FrequencyAnomalyAnalyzer(BaseAnalyzer): + """Detects statistically rare values that may indicate anomalies.""" + + name = "frequency_anomaly" + description = "Flags statistically rare field values (potential anomalies)" + + FIELDS_TO_CHECK = [ + "process_name", "image_name", "parent_process_name", + "user", "username", "user_name", + "event_type", "action", "status", + ] + + async def analyze(self, rows, config=None): + config = config or {} + rarity_threshold = config.get("rarity_threshold", 0.01) # <1% occurrence + min_rows = config.get("min_rows", 50) + alerts: list[AlertCandidate] = [] + + if len(rows) < min_rows: + return alerts + + for fld in self.FIELDS_TO_CHECK: + values = [str(row.get(fld, "")) for row in rows if row.get(fld)] + if not values: + continue + counts = Counter(values) + total = len(values) + + for val, cnt in counts.items(): + pct = cnt / total + if pct <= rarity_threshold and cnt <= 3: + # Find row indices + indices = [i for i, r in enumerate(rows) if str(r.get(fld, "")) == val] + alerts.append(AlertCandidate( + analyzer=self.name, + title=f"Rare {fld}: {val[:80]}", + severity="low", + description=f"'{val}' appears {cnt}/{total} times ({pct:.2%}) in field '{fld}'", + evidence=[{"field": fld, "value": val[:200], "count": cnt, "total": total, "rows": indices[:5]}], + tags=["anomaly", "rare"], + score=max(20, 50 - (pct * 5000)), + )) + + return alerts + + +class AuthAnomalyAnalyzer(BaseAnalyzer): + """Detects authentication anomalies (brute force, unusual logon types).""" + + name = "auth_anomaly" + description = "Flags authentication anomalies (failed logins, unusual logon types)" + + async def analyze(self, rows, config=None): + config = config or {} + alerts: list[AlertCandidate] = [] + + # Track failed logins per user + failed_by_user: dict[str, list[int]] = defaultdict(list) + logon_types: dict[str, list[int]] = defaultdict(list) + + for idx, row in enumerate(rows): + event_type = str(row.get("event_type", row.get("action", ""))).lower() + status = str(row.get("status", row.get("result", ""))).lower() + user = str(row.get("username", row.get("user", row.get("user_name", "")))) + logon_type = str(row.get("logon_type", "")) + + if "logon" in event_type or "auth" in event_type or "login" in event_type: + if "fail" in status or "4625" in str(row.get("event_id", "")): + if user: + failed_by_user[user].append(idx) + + if logon_type in ("3", "10"): # Network/RemoteInteractive + logon_types[logon_type].append(idx) + + # Brute force: >5 failed logins for same user + brute_thresh = config.get("brute_force_threshold", 5) + for user, indices in failed_by_user.items(): + if len(indices) >= brute_thresh: + alerts.append(AlertCandidate( + analyzer=self.name, + title=f"Possible brute force: {user}", + severity="high", + description=f"User '{user}' had {len(indices)} failed logins", + evidence=[{"user": user, "failed_count": len(indices), "rows": indices[:10]}], + mitre_technique="T1110", + tags=["brute_force", "authentication"], + score=min(90, 50 + len(indices) * 3), + )) + + # Unusual logon types + for ltype, indices in logon_types.items(): + label = "Network logon (Type 3)" if ltype == "3" else "Remote Desktop (Type 10)" + if len(indices) >= 3: + alerts.append(AlertCandidate( + analyzer=self.name, + title=f"{label} detected", + severity="medium" if ltype == "3" else "high", + description=f"{len(indices)} {label} events detected", + evidence=[{"logon_type": ltype, "count": len(indices), "rows": indices[:10]}], + mitre_technique="T1021", + tags=["authentication", "lateral_movement"], + score=55 if ltype == "3" else 70, + )) + + return alerts + + +class PersistenceAnalyzer(BaseAnalyzer): + """Detects persistence mechanisms (registry keys, services, scheduled tasks).""" + + name = "persistence" + description = "Flags persistence mechanism installations" + + REGISTRY_PATTERNS = [ + (r"(?i)\\CurrentVersion\\Run", "Run key persistence", "T1547.001"), + (r"(?i)\\Services\\", "Service installation", "T1543.003"), + (r"(?i)\\Winlogon\\", "Winlogon persistence", "T1547.004"), + (r"(?i)\\Image File Execution Options\\", "IFEO debugger persistence", "T1546.012"), + (r"(?i)\\Explorer\\Shell Folders", "Shell folder hijack", "T1547.001"), + ] + + async def analyze(self, rows, config=None): + alerts: list[AlertCandidate] = [] + compiled = [(re.compile(p), t, m) for p, t, m in self.REGISTRY_PATTERNS] + + for idx, row in enumerate(rows): + # Check registry paths + reg_path = str(row.get("registry_key", row.get("target_object", row.get("registry_path", "")))) + for pattern, title, mitre in compiled: + if pattern.search(reg_path): + alerts.append(AlertCandidate( + analyzer=self.name, + title=title, + severity="high", + description=f"Row {idx}: {reg_path[:200]}", + evidence=[{"row_index": idx, "registry_key": reg_path[:300]}], + mitre_technique=mitre, + tags=["persistence", "registry"], + score=75, + )) + + # Check for service creation events + event_type = str(row.get("event_type", "")).lower() + if "service" in event_type and "creat" in event_type: + svc_name = row.get("service_name", row.get("target_filename", "unknown")) + alerts.append(AlertCandidate( + analyzer=self.name, + title=f"Service created: {svc_name}", + severity="medium", + description=f"Row {idx}: New service '{svc_name}' created", + evidence=[{"row_index": idx, "service_name": str(svc_name)}], + mitre_technique="T1543.003", + tags=["persistence", "service"], + score=60, + )) + + return alerts + + +# ── Analyzer Registry ──────────────────────────────────────────────── + + +_ALL_ANALYZERS: list[BaseAnalyzer] = [ + EntropyAnalyzer(), + SuspiciousCommandAnalyzer(), + NetworkAnomalyAnalyzer(), + FrequencyAnomalyAnalyzer(), + AuthAnomalyAnalyzer(), + PersistenceAnalyzer(), +] + + +def get_available_analyzers() -> list[dict[str, str]]: + """Return metadata about all registered analyzers.""" + return [{"name": a.name, "description": a.description} for a in _ALL_ANALYZERS] + + +def get_analyzer(name: str) -> BaseAnalyzer | None: + """Get an analyzer by name.""" + for a in _ALL_ANALYZERS: + if a.name == name: + return a + return None + + +async def run_all_analyzers( + rows: list[dict[str, Any]], + enabled: list[str] | None = None, + config: dict[str, Any] | None = None, +) -> list[AlertCandidate]: + """Run all (or selected) analyzers and return combined alert candidates. + + Args: + rows: Flat list of row dicts (normalized_data or data from DatasetRow). + enabled: Optional list of analyzer names to run. Runs all if None. + config: Optional config overrides passed to each analyzer. + + Returns: + Combined list of AlertCandidate from all analyzers, sorted by score desc. + """ + config = config or {} + results: list[AlertCandidate] = [] + + for analyzer in _ALL_ANALYZERS: + if enabled and analyzer.name not in enabled: + continue + try: + candidates = await analyzer.analyze(rows, config) + results.extend(candidates) + logger.info("Analyzer %s produced %d alerts", analyzer.name, len(candidates)) + except Exception: + logger.exception("Analyzer %s failed", analyzer.name) + + # Sort by score descending + results.sort(key=lambda a: a.score, reverse=True) + return results diff --git a/backend/app/services/llm_analysis.py b/backend/app/services/llm_analysis.py new file mode 100644 index 0000000..6f5e533 --- /dev/null +++ b/backend/app/services/llm_analysis.py @@ -0,0 +1,322 @@ +"""LLM-powered dataset analysis — replaces manual IOC enrichment. + +Loads dataset rows server-side, builds a concise summary, and sends it +to Wile (70B heavy) or Roadrunner (fast) for threat analysis. +Supports both single-dataset and hunt-wide analysis. +""" + +import asyncio +import json +import logging +import time +from collections import Counter, defaultdict +from typing import Any, Optional + +from pydantic import BaseModel, Field + +from app.config import settings +from app.agents.providers_v2 import OllamaProvider +from app.agents.router import TaskType, task_router +from app.services.sans_rag import sans_rag + +logger = logging.getLogger(__name__) + + +# ── Request / Response models ───────────────────────────────────────── + + +class AnalysisRequest(BaseModel): + """Request for LLM-powered analysis of a dataset.""" + dataset_id: Optional[str] = None + hunt_id: Optional[str] = None + question: str = Field( + default="Perform a comprehensive threat analysis of this dataset. " + "Identify anomalies, suspicious patterns, potential IOCs, and recommend " + "next steps for the analyst.", + description="Specific question or general analysis request", + ) + mode: str = Field(default="deep", description="quick | deep") + focus: Optional[str] = Field( + None, + description="Focus area: threats, anomalies, lateral_movement, exfil, persistence, recon", + ) + + +class AnalysisResult(BaseModel): + """LLM analysis result.""" + analysis: str = Field(..., description="Full analysis text (markdown)") + confidence: float = Field(default=0.0, description="0-1 confidence") + key_findings: list[str] = Field(default_factory=list) + iocs_identified: list[dict] = Field(default_factory=list) + recommended_actions: list[str] = Field(default_factory=list) + mitre_techniques: list[str] = Field(default_factory=list) + risk_score: int = Field(default=0, description="0-100 risk score") + model_used: str = "" + node_used: str = "" + latency_ms: int = 0 + rows_analyzed: int = 0 + dataset_summary: str = "" + + +# ── Analysis prompts ────────────────────────────────────────────────── + +ANALYSIS_SYSTEM = """You are an expert threat hunter and incident response analyst. +You are analyzing CSV log data from forensic tools (Velociraptor, Sysmon, etc.). + +Your task: Perform deep threat analysis of the data provided and produce actionable findings. + +RESPOND WITH VALID JSON ONLY: +{ + "analysis": "Detailed markdown analysis with headers and bullet points", + "confidence": 0.85, + "key_findings": ["Finding 1", "Finding 2"], + "iocs_identified": [{"type": "ip", "value": "1.2.3.4", "context": "C2 traffic"}], + "recommended_actions": ["Action 1", "Action 2"], + "mitre_techniques": ["T1059.001 - PowerShell", "T1071 - Application Layer Protocol"], + "risk_score": 65 +} +""" + +FOCUS_PROMPTS = { + "threats": "Focus on identifying active threats, malware indicators, and attack patterns.", + "anomalies": "Focus on statistical anomalies, outliers, and unusual behavior patterns.", + "lateral_movement": "Focus on evidence of lateral movement: PsExec, WMI, RDP, SMB, pass-the-hash.", + "exfil": "Focus on data exfiltration indicators: large transfers, DNS tunneling, unusual destinations.", + "persistence": "Focus on persistence mechanisms: scheduled tasks, services, registry, startup items.", + "recon": "Focus on reconnaissance activity: scanning, enumeration, discovery commands.", +} + + +# ── Data summarizer ─────────────────────────────────────────────────── + + +def summarize_dataset_rows( + rows: list[dict], + columns: list[str] | None = None, + max_sample: int = 20, + max_chars: int = 6000, +) -> str: + """Build a concise text summary of dataset rows for LLM consumption. + + Includes: + - Column headers and types + - Statistical summary (unique values, top values per column) + - Sample rows (first N) + - Detected patterns of interest + """ + if not rows: + return "Empty dataset — no rows to analyze." + + cols = columns or list(rows[0].keys()) + n_rows = len(rows) + + parts: list[str] = [] + parts.append(f"## Dataset Summary: {n_rows} rows, {len(cols)} columns") + parts.append(f"Columns: {', '.join(cols)}") + + # Per-column stats + parts.append("\n### Column Statistics:") + for col in cols[:30]: # limit to first 30 cols + values = [str(r.get(col, "")) for r in rows if r.get(col) not in (None, "", "N/A")] + if not values: + continue + unique = len(set(values)) + counter = Counter(values) + top3 = counter.most_common(3) + top_str = ", ".join(f"{v} ({c}x)" for v, c in top3) + parts.append(f"- **{col}**: {len(values)} non-null, {unique} unique. Top: {top_str}") + + # Sample rows + sample = rows[:max_sample] + parts.append(f"\n### Sample Rows (first {len(sample)}):") + for i, row in enumerate(sample): + row_str = " | ".join(f"{k}={v}" for k, v in row.items() if v not in (None, "", "N/A")) + parts.append(f"{i+1}. {row_str}") + + # Detect interesting patterns + patterns: list[str] = [] + all_cmds = [str(r.get("command_line", "")).lower() for r in rows if r.get("command_line")] + sus_cmds = [c for c in all_cmds if any( + k in c for k in ["powershell -enc", "certutil", "bitsadmin", "mshta", + "regsvr32", "invoke-", "mimikatz", "psexec"] + )] + if sus_cmds: + patterns.append(f"⚠️ {len(sus_cmds)} suspicious command lines detected") + + all_ips = [str(r.get("dst_ip", "")) for r in rows if r.get("dst_ip")] + ext_ips = [ip for ip in all_ips if ip and not ip.startswith(("10.", "192.168.", "172.", "127."))] + if ext_ips: + unique_ext = len(set(ext_ips)) + patterns.append(f"🌐 {unique_ext} unique external destination IPs") + + if patterns: + parts.append("\n### Detected Patterns:") + for p in patterns: + parts.append(f"- {p}") + + text = "\n".join(parts) + if len(text) > max_chars: + text = text[:max_chars] + "\n... (truncated)" + return text + + +# ── LLM analysis engine ────────────────────────────────────────────── + + +async def run_llm_analysis( + rows: list[dict], + request: AnalysisRequest, + dataset_name: str = "unknown", +) -> AnalysisResult: + """Run LLM analysis on dataset rows.""" + start = time.monotonic() + + # Build summary + summary = summarize_dataset_rows(rows) + + # Route to appropriate model + task_type = TaskType.DEEP_ANALYSIS if request.mode == "deep" else TaskType.QUICK_CHAT + decision = task_router.route(task_type) + + # Build prompt + focus_text = FOCUS_PROMPTS.get(request.focus or "", "") + prompt = f"""Analyze the following forensic dataset from '{dataset_name}'. + +{focus_text} + +Analyst question: {request.question} + +{summary} +""" + + # Enrich with SANS RAG + try: + rag_context = await sans_rag.enrich_prompt( + request.question, + investigation_context=f"Analyzing {len(rows)} rows from {dataset_name}", + ) + if rag_context: + prompt = f"{prompt}\n\n{rag_context}" + except Exception as e: + logger.warning(f"SANS RAG enrichment failed: {e}") + + # Call LLM + provider = task_router.get_provider(decision) + messages = [ + {"role": "system", "content": ANALYSIS_SYSTEM}, + {"role": "user", "content": prompt}, + ] + + try: + raw = await asyncio.wait_for( + provider.generate( + prompt=prompt, + system=ANALYSIS_SYSTEM, + max_tokens=settings.AGENT_MAX_TOKENS * 2, # longer for analysis + temperature=0.3, + ), + timeout=300, # 5 min hard limit + ) + except asyncio.TimeoutError: + logger.error("LLM analysis timed out after 300s") + return AnalysisResult( + analysis="Analysis timed out after 5 minutes. Try a smaller dataset or 'quick' mode.", + model_used=decision.model, + node_used=decision.node, + latency_ms=int((time.monotonic() - start) * 1000), + rows_analyzed=len(rows), + dataset_summary=summary, + ) + except Exception as e: + logger.error(f"LLM analysis failed: {e}") + return AnalysisResult( + analysis=f"Analysis failed: {str(e)}", + model_used=decision.model, + node_used=decision.node, + latency_ms=int((time.monotonic() - start) * 1000), + rows_analyzed=len(rows), + dataset_summary=summary, + ) + + elapsed = int((time.monotonic() - start) * 1000) + + # Parse JSON response + result = _parse_analysis(raw) + result.model_used = decision.model + result.node_used = decision.node + result.latency_ms = elapsed + result.rows_analyzed = len(rows) + result.dataset_summary = summary + + return result + + +def _parse_analysis(raw) -> AnalysisResult: + """Try to parse LLM output as JSON, fall back to plain text. + + raw may be: + - A dict from OllamaProvider.generate() with key "response" containing LLM text + - A plain string from other providers + """ + # Ollama provider returns {"response": "", "model": ..., ...} + if isinstance(raw, dict): + text = raw.get("response") or raw.get("analysis") or str(raw) + logger.info(f"_parse_analysis: extracted text from dict, len={len(text)}, first 200 chars: {text[:200]}") + else: + text = str(raw) + logger.info(f"_parse_analysis: raw is str, len={len(text)}, first 200 chars: {text[:200]}") + + text = text.strip() + + # Strip markdown code fences + if text.startswith("```"): + lines = text.split("\n") + lines = [l for l in lines if not l.strip().startswith("```")] + text = "\n".join(lines).strip() + + # Try direct JSON parse first + for candidate in _extract_json_candidates(text): + try: + data = json.loads(candidate) + if isinstance(data, dict): + logger.info(f"_parse_analysis: parsed JSON OK, keys={list(data.keys())}") + return AnalysisResult( + analysis=data.get("analysis", text), + confidence=float(data.get("confidence", 0.5)), + key_findings=data.get("key_findings", []), + iocs_identified=data.get("iocs_identified", []), + recommended_actions=data.get("recommended_actions", []), + mitre_techniques=data.get("mitre_techniques", []), + risk_score=int(data.get("risk_score", 0)), + ) + except (json.JSONDecodeError, ValueError) as e: + logger.warning(f"_parse_analysis: JSON parse failed: {e}, candidate len={len(candidate)}, first 100: {candidate[:100]}") + continue + + # Fallback: plain text + logger.warning(f"_parse_analysis: all JSON parse attempts failed, falling back to plain text") + return AnalysisResult( + analysis=text, + confidence=0.5, + ) + + +def _extract_json_candidates(text: str): + """Yield JSON candidate strings from text, trying progressively more aggressive extraction.""" + import re + + # 1. The whole text as-is + yield text + + # 2. Find outermost { ... } block + start = text.find("{") + end = text.rfind("}") + if start != -1 and end > start: + block = text[start:end + 1] + yield block + + # 3. Try to fix common LLM JSON issues: + # - trailing commas before ] or } + fixed = re.sub(r',\s*([}\]])', r'\1', block) + if fixed != block: + yield fixed diff --git a/backend/app/services/mitre.py b/backend/app/services/mitre.py new file mode 100644 index 0000000..624711c --- /dev/null +++ b/backend/app/services/mitre.py @@ -0,0 +1,484 @@ +""" +MITRE ATT&CK mapping service. + +Maps dataset events to ATT&CK techniques using pattern-based heuristics. +Uses the enterprise-attack matrix (embedded patterns for offline use). +""" + +import logging +import re +from collections import Counter, defaultdict +from typing import Any + +from sqlalchemy import select +from sqlalchemy.ext.asyncio import AsyncSession + +from app.db.models import Dataset, DatasetRow + +logger = logging.getLogger(__name__) + +# ── ATT&CK Technique Patterns ──────────────────────────────────────── +# Subset of enterprise-attack techniques with detection patterns. +# Each entry: (technique_id, name, tactic, patterns_list) + +TECHNIQUE_PATTERNS: list[tuple[str, str, str, list[str]]] = [ + # Initial Access + ("T1566", "Phishing", "initial-access", [ + r"phish", r"\.hta\b", r"\.lnk\b", r"mshta\.exe", r"outlook.*attachment", + ]), + ("T1190", "Exploit Public-Facing Application", "initial-access", [ + r"exploit", r"CVE-\d{4}", r"vulnerability", r"webshell", + ]), + + # Execution + ("T1059.001", "PowerShell", "execution", [ + r"powershell", r"pwsh", r"-enc\b", r"-encodedcommand", + r"invoke-expression", r"iex\b", r"bypass\b.*execution", + ]), + ("T1059.003", "Windows Command Shell", "execution", [ + r"cmd\.exe", r"/c\s+", r"command\.com", + ]), + ("T1059.005", "Visual Basic", "execution", [ + r"wscript", r"cscript", r"\.vbs\b", r"\.vbe\b", + ]), + ("T1047", "Windows Management Instrumentation", "execution", [ + r"wmic\b", r"winmgmt", r"wmi\b", + ]), + ("T1053.005", "Scheduled Task", "execution", [ + r"schtasks", r"at\.exe", r"taskschd", + ]), + ("T1204", "User Execution", "execution", [ + r"user.*click", r"open.*attachment", r"macro", + ]), + + # Persistence + ("T1547.001", "Registry Run Keys", "persistence", [ + r"CurrentVersion\\Run", r"HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", + r"reg\s+add.*\\Run", + ]), + ("T1543.003", "Windows Service", "persistence", [ + r"sc\s+create", r"new-service", r"service.*install", + ]), + ("T1136", "Create Account", "persistence", [ + r"net\s+user\s+/add", r"new-localuser", r"useradd", + ]), + ("T1053.005", "Scheduled Task/Job", "persistence", [ + r"schtasks\s+/create", r"crontab", + ]), + + # Privilege Escalation + ("T1548.002", "Bypass User Access Control", "privilege-escalation", [ + r"eventvwr", r"fodhelper", r"uac.*bypass", r"computerdefaults", + ]), + ("T1134", "Access Token Manipulation", "privilege-escalation", [ + r"token.*impersonat", r"runas", r"adjusttokenprivileges", + ]), + + # Defense Evasion + ("T1070.001", "Clear Windows Event Logs", "defense-evasion", [ + r"wevtutil\s+cl", r"clear-eventlog", r"clearlog", + ]), + ("T1562.001", "Disable or Modify Tools", "defense-evasion", [ + r"tamper.*protection", r"disable.*defender", r"set-mppreference", + r"disable.*firewall", + ]), + ("T1027", "Obfuscated Files or Information", "defense-evasion", [ + r"base64", r"-enc\b", r"certutil.*-decode", r"frombase64", + ]), + ("T1036", "Masquerading", "defense-evasion", [ + r"rename.*\.exe", r"masquerad", r"svchost.*unusual", + ]), + ("T1055", "Process Injection", "defense-evasion", [ + r"inject", r"createremotethread", r"ntcreatethreadex", + r"virtualalloc", r"writeprocessmemory", + ]), + + # Credential Access + ("T1003.001", "LSASS Memory", "credential-access", [ + r"mimikatz", r"sekurlsa", r"lsass", r"procdump.*lsass", + ]), + ("T1003.003", "NTDS", "credential-access", [ + r"ntds\.dit", r"vssadmin.*shadow", r"ntdsutil", + ]), + ("T1110", "Brute Force", "credential-access", [ + r"brute.*force", r"failed.*login.*\d{3,}", r"hydra", r"medusa", + ]), + ("T1558.003", "Kerberoasting", "credential-access", [ + r"kerberoast", r"invoke-kerberoast", r"GetUserSPNs", + ]), + + # Discovery + ("T1087", "Account Discovery", "discovery", [ + r"net\s+user", r"net\s+localgroup", r"get-aduser", + ]), + ("T1082", "System Information Discovery", "discovery", [ + r"systeminfo", r"hostname", r"ver\b", + ]), + ("T1083", "File and Directory Discovery", "discovery", [ + r"dir\s+/s", r"tree\s+/f", r"get-childitem.*-recurse", + ]), + ("T1057", "Process Discovery", "discovery", [ + r"tasklist", r"get-process", r"ps\s+aux", + ]), + ("T1018", "Remote System Discovery", "discovery", [ + r"net\s+view", r"ping\s+-", r"arp\s+-a", r"nslookup", + ]), + ("T1016", "System Network Configuration Discovery", "discovery", [ + r"ipconfig", r"ifconfig", r"netstat", + ]), + + # Lateral Movement + ("T1021.001", "Remote Desktop Protocol", "lateral-movement", [ + r"rdp\b", r"mstsc", r"3389", r"remote\s+desktop", + ]), + ("T1021.002", "SMB/Windows Admin Shares", "lateral-movement", [ + r"\\\\.*\\(c|admin)\$", r"psexec", r"smbclient", r"net\s+use", + ]), + ("T1021.006", "Windows Remote Management", "lateral-movement", [ + r"winrm", r"enter-pssession", r"invoke-command.*-computername", + r"wsman", r"5985|5986", + ]), + ("T1570", "Lateral Tool Transfer", "lateral-movement", [ + r"copy.*\\\\", r"xcopy.*\\\\", r"robocopy", + ]), + + # Collection + ("T1560", "Archive Collected Data", "collection", [ + r"compress-archive", r"7z\.exe", r"rar\s+a", r"tar\s+-[cz]", + ]), + ("T1005", "Data from Local System", "collection", [ + r"type\s+.*password", r"findstr.*password", r"select-string.*credential", + ]), + + # Command and Control + ("T1071.001", "Web Protocols", "command-and-control", [ + r"http[s]?://\d+\.\d+\.\d+\.\d+", r"curl\b", r"wget\b", + r"invoke-webrequest", r"beacon", + ]), + ("T1573", "Encrypted Channel", "command-and-control", [ + r"ssl\b", r"tls\b", r"encrypted.*tunnel", r"stunnel", + ]), + ("T1105", "Ingress Tool Transfer", "command-and-control", [ + r"certutil.*-urlcache", r"bitsadmin.*transfer", + r"downloadfile", r"invoke-webrequest.*-outfile", + ]), + ("T1219", "Remote Access Software", "command-and-control", [ + r"teamviewer", r"anydesk", r"logmein", r"vnc", + ]), + + # Exfiltration + ("T1048", "Exfiltration Over Alternative Protocol", "exfiltration", [ + r"dns.*tunnel", r"exfil", r"icmp.*tunnel", + ]), + ("T1041", "Exfiltration Over C2 Channel", "exfiltration", [ + r"upload.*c2", r"exfil.*http", + ]), + ("T1567", "Exfiltration Over Web Service", "exfiltration", [ + r"mega\.nz", r"dropbox", r"pastebin", r"transfer\.sh", + ]), + + # Impact + ("T1486", "Data Encrypted for Impact", "impact", [ + r"ransomware", r"encrypt.*files", r"\.locked\b", r"ransom", + ]), + ("T1489", "Service Stop", "impact", [ + r"sc\s+stop", r"net\s+stop", r"stop-service", + ]), + ("T1529", "System Shutdown/Reboot", "impact", [ + r"shutdown\s+/[rs]", r"restart-computer", + ]), +] + +# Tactic display names and kill-chain order +TACTIC_ORDER = [ + "initial-access", "execution", "persistence", "privilege-escalation", + "defense-evasion", "credential-access", "discovery", "lateral-movement", + "collection", "command-and-control", "exfiltration", "impact", +] +TACTIC_NAMES = { + "initial-access": "Initial Access", + "execution": "Execution", + "persistence": "Persistence", + "privilege-escalation": "Privilege Escalation", + "defense-evasion": "Defense Evasion", + "credential-access": "Credential Access", + "discovery": "Discovery", + "lateral-movement": "Lateral Movement", + "collection": "Collection", + "command-and-control": "Command and Control", + "exfiltration": "Exfiltration", + "impact": "Impact", +} + + +# ── Row fetcher ─────────────────────────────────────────────────────── + +async def _fetch_rows( + db: AsyncSession, + dataset_id: str | None = None, + hunt_id: str | None = None, + limit: int = 5000, +) -> list[dict[str, Any]]: + q = select(DatasetRow).join(Dataset) + if dataset_id: + q = q.where(DatasetRow.dataset_id == dataset_id) + elif hunt_id: + q = q.where(Dataset.hunt_id == hunt_id) + q = q.limit(limit) + result = await db.execute(q) + return [r.data for r in result.scalars().all()] + + +# ── Main functions ──────────────────────────────────────────────────── + +async def map_to_attack( + db: AsyncSession, + dataset_id: str | None = None, + hunt_id: str | None = None, +) -> dict[str, Any]: + """ + Map dataset rows to MITRE ATT&CK techniques. + Returns a matrix-style structure + evidence list. + """ + rows = await _fetch_rows(db, dataset_id, hunt_id) + if not rows: + return {"tactics": [], "techniques": [], "evidence": [], "coverage": {}, "total_rows": 0} + + # Flatten all string values per row for matching + row_texts: list[str] = [] + for row in rows: + parts = [] + for v in row.values(): + if v is not None: + parts.append(str(v).lower()) + row_texts.append(" ".join(parts)) + + # Match techniques + technique_hits: dict[str, list[dict]] = defaultdict(list) # tech_id -> evidence rows + technique_meta: dict[str, tuple[str, str]] = {} # tech_id -> (name, tactic) + row_techniques: list[set[str]] = [set() for _ in rows] + + for tech_id, tech_name, tactic, patterns in TECHNIQUE_PATTERNS: + compiled = [re.compile(p, re.IGNORECASE) for p in patterns] + technique_meta[tech_id] = (tech_name, tactic) + for i, text in enumerate(row_texts): + for pat in compiled: + if pat.search(text): + row_techniques[i].add(tech_id) + if len(technique_hits[tech_id]) < 10: # limit evidence + # find matching field + matched_field = "" + matched_value = "" + for k, v in rows[i].items(): + if v and pat.search(str(v).lower()): + matched_field = k + matched_value = str(v)[:200] + break + technique_hits[tech_id].append({ + "row_index": i, + "field": matched_field, + "value": matched_value, + "pattern": pat.pattern, + }) + break # one pattern match per technique per row is enough + + # Build tactic → technique structure + tactic_techniques: dict[str, list[dict]] = defaultdict(list) + for tech_id, evidence_list in technique_hits.items(): + name, tactic = technique_meta[tech_id] + tactic_techniques[tactic].append({ + "id": tech_id, + "name": name, + "count": len(evidence_list), + "evidence": evidence_list[:5], + }) + + # Build ordered tactics list + tactics = [] + for tactic_key in TACTIC_ORDER: + techs = tactic_techniques.get(tactic_key, []) + tactics.append({ + "id": tactic_key, + "name": TACTIC_NAMES.get(tactic_key, tactic_key), + "techniques": sorted(techs, key=lambda t: -t["count"]), + "total_hits": sum(t["count"] for t in techs), + }) + + # Coverage stats + covered_tactics = sum(1 for t in tactics if t["total_hits"] > 0) + total_technique_hits = sum(t["total_hits"] for t in tactics) + + return { + "tactics": tactics, + "coverage": { + "tactics_covered": covered_tactics, + "tactics_total": len(TACTIC_ORDER), + "techniques_matched": len(technique_hits), + "total_evidence": total_technique_hits, + }, + "total_rows": len(rows), + } + + +async def build_knowledge_graph( + db: AsyncSession, + dataset_id: str | None = None, + hunt_id: str | None = None, +) -> dict[str, Any]: + """ + Build a knowledge graph connecting entities (hosts, users, processes, IPs) + to MITRE techniques and tactics. + Returns Cytoscape-compatible nodes + edges. + """ + rows = await _fetch_rows(db, dataset_id, hunt_id) + if not rows: + return {"nodes": [], "edges": [], "stats": {}} + + # Extract entities + entities: dict[str, set[str]] = defaultdict(set) # type -> set of values + row_entity_map: list[list[tuple[str, str]]] = [] # per-row list of (type, value) + + # Field name patterns for entity extraction + HOST_FIELDS = re.compile(r"hostname|computer|host|machine", re.I) + USER_FIELDS = re.compile(r"user|account|logon.*name|subject.*name", re.I) + IP_FIELDS = re.compile(r"src.*ip|dst.*ip|ip.*addr|source.*ip|dest.*ip|remote.*addr", re.I) + PROC_FIELDS = re.compile(r"process.*name|image|parent.*image|executable|command", re.I) + + for row in rows: + row_ents: list[tuple[str, str]] = [] + for k, v in row.items(): + if not v or str(v).strip() in ('', '-', 'N/A', 'None'): + continue + val = str(v).strip() + if HOST_FIELDS.search(k): + entities["host"].add(val) + row_ents.append(("host", val)) + elif USER_FIELDS.search(k): + entities["user"].add(val) + row_ents.append(("user", val)) + elif IP_FIELDS.search(k): + entities["ip"].add(val) + row_ents.append(("ip", val)) + elif PROC_FIELDS.search(k): + # Clean process name + pname = val.split("\\")[-1].split("/")[-1][:60] + entities["process"].add(pname) + row_ents.append(("process", pname)) + row_entity_map.append(row_ents) + + # Map rows to techniques + row_texts = [" ".join(str(v).lower() for v in row.values() if v) for row in rows] + row_techniques: list[set[str]] = [set() for _ in rows] + tech_meta: dict[str, tuple[str, str]] = {} + + for tech_id, tech_name, tactic, patterns in TECHNIQUE_PATTERNS: + compiled = [re.compile(p, re.I) for p in patterns] + tech_meta[tech_id] = (tech_name, tactic) + for i, text in enumerate(row_texts): + for pat in compiled: + if pat.search(text): + row_techniques[i].add(tech_id) + break + + # Build graph + nodes: list[dict] = [] + edges: list[dict] = [] + node_ids: set[str] = set() + edge_counter: Counter = Counter() + + # Entity nodes + TYPE_COLORS = { + "host": "#3b82f6", + "user": "#10b981", + "ip": "#8b5cf6", + "process": "#f59e0b", + "technique": "#ef4444", + "tactic": "#6366f1", + } + TYPE_SHAPES = { + "host": "roundrectangle", + "user": "ellipse", + "ip": "diamond", + "process": "hexagon", + "technique": "tag", + "tactic": "round-rectangle", + } + + for ent_type, values in entities.items(): + for val in list(values)[:50]: # limit nodes + nid = f"{ent_type}:{val}" + if nid not in node_ids: + node_ids.add(nid) + nodes.append({ + "data": { + "id": nid, + "label": val[:40], + "type": ent_type, + "color": TYPE_COLORS.get(ent_type, "#666"), + "shape": TYPE_SHAPES.get(ent_type, "ellipse"), + }, + }) + + # Technique nodes + seen_techniques: set[str] = set() + for tech_set in row_techniques: + seen_techniques.update(tech_set) + + for tech_id in seen_techniques: + name, tactic = tech_meta.get(tech_id, (tech_id, "unknown")) + nid = f"technique:{tech_id}" + if nid not in node_ids: + node_ids.add(nid) + nodes.append({ + "data": { + "id": nid, + "label": f"{tech_id}\n{name}", + "type": "technique", + "color": TYPE_COLORS["technique"], + "shape": TYPE_SHAPES["technique"], + "tactic": tactic, + }, + }) + + # Edges: entity → technique (based on co-occurrence in rows) + for i, row_ents in enumerate(row_entity_map): + for ent_type, ent_val in row_ents: + for tech_id in row_techniques[i]: + src = f"{ent_type}:{ent_val}" + tgt = f"technique:{tech_id}" + if src in node_ids and tgt in node_ids: + edge_key = (src, tgt) + edge_counter[edge_key] += 1 + + # Edges: entity → entity (based on co-occurrence) + for row_ents in row_entity_map: + for j in range(len(row_ents)): + for k in range(j + 1, len(row_ents)): + src = f"{row_ents[j][0]}:{row_ents[j][1]}" + tgt = f"{row_ents[k][0]}:{row_ents[k][1]}" + if src in node_ids and tgt in node_ids and src != tgt: + edge_counter[(src, tgt)] += 1 + + # Build edge list (filter low-weight edges) + for (src, tgt), weight in edge_counter.most_common(500): + if weight < 1: + continue + edges.append({ + "data": { + "source": src, + "target": tgt, + "weight": weight, + "label": str(weight) if weight > 2 else "", + }, + }) + + return { + "nodes": nodes, + "edges": edges, + "stats": { + "total_nodes": len(nodes), + "total_edges": len(edges), + "entity_counts": {t: len(v) for t, v in entities.items()}, + "techniques_found": len(seen_techniques), + }, + } diff --git a/backend/app/services/network_inventory.py b/backend/app/services/network_inventory.py new file mode 100644 index 0000000..5349b60 --- /dev/null +++ b/backend/app/services/network_inventory.py @@ -0,0 +1,252 @@ +"""Network Picture — deduplicated host inventory built from dataset rows. + +Scans all datasets in a hunt, extracts host-identifying fields from +normalized data, and groups by hostname (or src_ip fallback) to produce +a clean one-row-per-host inventory. Uses sets for deduplication — +if an IP appears 900 times, it shows once. +""" + +import logging +from datetime import datetime +from typing import Any, Sequence + +from sqlalchemy import select +from sqlalchemy.ext.asyncio import AsyncSession + +from app.db.models import Dataset, DatasetRow + +logger = logging.getLogger(__name__) + +# Canonical column names we extract per row +_HOST_KEYS = ("hostname",) +_IP_KEYS = ("src_ip", "dst_ip", "ip_address") +_USER_KEYS = ("username",) +_OS_KEYS = ("os",) +_MAC_KEYS = ("mac_address",) +_PORT_SRC_KEYS = ("src_port",) +_PORT_DST_KEYS = ("dst_port",) +_PROTO_KEYS = ("protocol",) +_STATE_KEYS = ("connection_state",) +_TS_KEYS = ("timestamp",) + +# Junk values to skip +_JUNK = frozenset({"", "-", "0.0.0.0", "::", "0", "127.0.0.1", "::1", "localhost", "unknown", "n/a", "none", "null"}) + +ROW_BATCH = 1000 # rows fetched per DB query +MAX_HOSTS = 1000 # hard cap on returned hosts + + +def _clean(val: Any) -> str: + """Normalise a cell value to a clean string or empty.""" + s = (val if isinstance(val, str) else str(val) if val is not None else "").strip() + return "" if s.lower() in _JUNK else s + + +def _try_parse_ts(val: str) -> datetime | None: + """Best-effort timestamp parse (subset of common formats).""" + for fmt in ( + "%Y-%m-%dT%H:%M:%S.%fZ", + "%Y-%m-%dT%H:%M:%SZ", + "%Y-%m-%dT%H:%M:%S.%f", + "%Y-%m-%dT%H:%M:%S", + "%Y-%m-%d %H:%M:%S.%f", + "%Y-%m-%d %H:%M:%S", + ): + try: + return datetime.strptime(val.strip(), fmt) + except ValueError: + continue + return None + + +class _HostBucket: + """Mutable accumulator for a single host.""" + + __slots__ = ( + "hostname", "ips", "users", "os_versions", "mac_addresses", + "protocols", "open_ports", "remote_targets", "datasets", + "connection_count", "first_seen", "last_seen", + ) + + def __init__(self, hostname: str): + self.hostname = hostname + self.ips: set[str] = set() + self.users: set[str] = set() + self.os_versions: set[str] = set() + self.mac_addresses: set[str] = set() + self.protocols: set[str] = set() + self.open_ports: set[str] = set() + self.remote_targets: set[str] = set() + self.datasets: set[str] = set() + self.connection_count: int = 0 + self.first_seen: datetime | None = None + self.last_seen: datetime | None = None + + def ingest(self, row: dict[str, Any], ds_name: str) -> None: + """Merge one normalised row into this bucket.""" + self.connection_count += 1 + self.datasets.add(ds_name) + + for k in _IP_KEYS: + v = _clean(row.get(k)) + if v: + self.ips.add(v) + + for k in _USER_KEYS: + v = _clean(row.get(k)) + if v: + self.users.add(v) + + for k in _OS_KEYS: + v = _clean(row.get(k)) + if v: + self.os_versions.add(v) + + for k in _MAC_KEYS: + v = _clean(row.get(k)) + if v: + self.mac_addresses.add(v) + + for k in _PROTO_KEYS: + v = _clean(row.get(k)) + if v: + self.protocols.add(v.upper()) + + # Open ports = local (src) ports + for k in _PORT_SRC_KEYS: + v = _clean(row.get(k)) + if v and v != "0": + self.open_ports.add(v) + + # Remote targets = dst IPs + dst = _clean(row.get("dst_ip")) + if dst: + self.remote_targets.add(dst) + + # Timestamps + for k in _TS_KEYS: + v = _clean(row.get(k)) + if v: + ts = _try_parse_ts(v) + if ts: + if self.first_seen is None or ts < self.first_seen: + self.first_seen = ts + if self.last_seen is None or ts > self.last_seen: + self.last_seen = ts + + def to_dict(self) -> dict[str, Any]: + return { + "hostname": self.hostname, + "ips": sorted(self.ips), + "users": sorted(self.users), + "os": sorted(self.os_versions), + "mac_addresses": sorted(self.mac_addresses), + "protocols": sorted(self.protocols), + "open_ports": sorted(self.open_ports, key=lambda p: int(p) if p.isdigit() else 0), + "remote_targets": sorted(self.remote_targets), + "datasets": sorted(self.datasets), + "connection_count": self.connection_count, + "first_seen": self.first_seen.isoformat() if self.first_seen else None, + "last_seen": self.last_seen.isoformat() if self.last_seen else None, + } + + +async def build_network_picture( + db: AsyncSession, + hunt_id: str, +) -> dict[str, Any]: + """Build a deduplicated host inventory for all datasets in a hunt. + + Returns: + { + "hosts": [ {hostname, ips[], users[], os[], ...}, ... ], + "summary": { total_hosts, total_connections, total_unique_ips, datasets_scanned } + } + """ + # 1. Get all datasets in this hunt + ds_result = await db.execute( + select(Dataset) + .where(Dataset.hunt_id == hunt_id) + .order_by(Dataset.created_at) + ) + ds_list: Sequence[Dataset] = ds_result.scalars().all() + + if not ds_list: + return { + "hosts": [], + "summary": { + "total_hosts": 0, + "total_connections": 0, + "total_unique_ips": 0, + "datasets_scanned": 0, + }, + } + + # 2. Stream rows and aggregate into host buckets + buckets: dict[str, _HostBucket] = {} # key = uppercase hostname or IP + + for ds in ds_list: + ds_name = ds.name or ds.filename + offset = 0 + while True: + stmt = ( + select(DatasetRow) + .where(DatasetRow.dataset_id == ds.id) + .order_by(DatasetRow.row_index) + .limit(ROW_BATCH) + .offset(offset) + ) + result = await db.execute(stmt) + rows: Sequence[DatasetRow] = result.scalars().all() + if not rows: + break + + for dr in rows: + norm = dr.normalized_data or dr.data or {} + + # Determine grouping key: hostname preferred, else src_ip/ip_address + host_val = "" + for k in _HOST_KEYS: + host_val = _clean(norm.get(k)) + if host_val: + break + if not host_val: + for k in ("src_ip", "ip_address"): + host_val = _clean(norm.get(k)) + if host_val: + break + if not host_val: + # Row has no host identifier — skip + continue + + bucket_key = host_val.upper() + if bucket_key not in buckets: + buckets[bucket_key] = _HostBucket(host_val) + + buckets[bucket_key].ingest(norm, ds_name) + + offset += ROW_BATCH + + # 3. Convert to sorted list (by connection count descending) + hosts_raw = sorted(buckets.values(), key=lambda b: b.connection_count, reverse=True) + if len(hosts_raw) > MAX_HOSTS: + hosts_raw = hosts_raw[:MAX_HOSTS] + + hosts = [b.to_dict() for b in hosts_raw] + + # 4. Summary stats + all_ips: set[str] = set() + total_conns = 0 + for b in hosts_raw: + all_ips.update(b.ips) + total_conns += b.connection_count + + return { + "hosts": hosts, + "summary": { + "total_hosts": len(hosts), + "total_connections": total_conns, + "total_unique_ips": len(all_ips), + "datasets_scanned": len(ds_list), + }, + } diff --git a/backend/app/services/normalizer.py b/backend/app/services/normalizer.py index 4c5455f..1780cba 100644 --- a/backend/app/services/normalizer.py +++ b/backend/app/services/normalizer.py @@ -23,12 +23,12 @@ COLUMN_MAPPINGS: list[tuple[str, str]] = [ # Operating system (r"^(os|operating_?system|os_?version|os_?name|platform|os_?type)$", "os"), # Source / destination IPs - (r"^(source_?ip|src_?ip|srcaddr|local_?address|sourceaddress)$", "src_ip"), - (r"^(dest_?ip|dst_?ip|dstaddr|remote_?address|destinationaddress|destaddress)$", "dst_ip"), + (r"^(source_?ip|src_?ip|srcaddr|local_?address|sourceaddress|sourceip|laddr\.?ip)$", "src_ip"), + (r"^(dest_?ip|dst_?ip|dstaddr|remote_?address|destinationaddress|destaddress|destination_?ip|destinationip|raddr\.?ip)$", "dst_ip"), (r"^(ip_?address|ipaddress|ip)$", "ip_address"), # Ports - (r"^(source_?port|src_?port|localport)$", "src_port"), - (r"^(dest_?port|dst_?port|remoteport|destinationport)$", "dst_port"), + (r"^(source_?port|src_?port|localport|laddr\.?port)$", "src_port"), + (r"^(dest_?port|dst_?port|remoteport|destinationport|raddr\.?port)$", "dst_port"), # Process info (r"^(process_?name|name|image|exe|executable|binary)$", "process_name"), (r"^(pid|process_?id)$", "pid"), @@ -51,6 +51,10 @@ COLUMN_MAPPINGS: list[tuple[str, str]] = [ (r"^(protocol|proto)$", "protocol"), (r"^(domain|dns_?name|query_?name|queriedname)$", "domain"), (r"^(url|uri|request_?url)$", "url"), + # MAC address + (r"^(mac|mac_?address|physical_?address|mac_?addr|hw_?addr|ethernet)$", "mac_address"), + # Connection state (netstat) + (r"^(state|status|tcp_?state|conn_?state)$", "connection_state"), # Event info (r"^(event_?id|eventid|eid)$", "event_id"), (r"^(event_?type|eventtype|category|action)$", "event_type"), @@ -120,13 +124,27 @@ def detect_ioc_columns( "domain": "domain", } + # Canonical names that should NEVER be treated as IOCs even if values + # match a pattern (e.g. process_name "svchost.exe" matching domain regex). + _non_ioc_canonicals = frozenset({ + "process_name", "file_name", "file_path", "command_line", + "parent_command_line", "description", "event_type", "registry_key", + "registry_value", "severity", "os", + "title", "netmask", "gateway", "connection_state", + }) + for col in columns: + canonical = column_mapping.get(col, "") + + # Skip columns whose canonical meaning is obviously not an IOC + if canonical in _non_ioc_canonicals: + continue + col_type = column_types.get(col) if col_type in ioc_type_map: ioc_columns[col] = ioc_type_map[col_type] # Also check canonical name - canonical = column_mapping.get(col, "") if canonical in ("src_ip", "dst_ip", "ip_address"): ioc_columns[col] = "ip" elif canonical == "hash_md5": @@ -139,6 +157,8 @@ def detect_ioc_columns( ioc_columns[col] = "domain" elif canonical == "url": ioc_columns[col] = "url" + elif canonical == "hostname": + ioc_columns[col] = "hostname" return ioc_columns diff --git a/backend/app/services/playbook.py b/backend/app/services/playbook.py new file mode 100644 index 0000000..09612ed --- /dev/null +++ b/backend/app/services/playbook.py @@ -0,0 +1,269 @@ +"""Investigation Notebook & Playbook Engine for ThreatHunt. + +Notebooks: Analyst-facing, cell-based documents (markdown + code cells) + stored as JSON in the database. Each cell can contain free-form + markdown notes *or* a structured query/command that the backend + evaluates against datasets. + +Playbooks: Pre-defined, step-by-step investigation workflows. Each step + defines an action (query, analyze, enrich, tag) and expected + outcomes. Analysts can run through playbooks interactively or + trigger them automatically on new alerts. +""" + +from __future__ import annotations + +import json +import logging +import re +from dataclasses import dataclass, field +from datetime import datetime, timezone +from typing import Any, Optional + +logger = logging.getLogger(__name__) + + +# ── Notebook helpers ────────────────────────────────────────────────── + + +@dataclass +class NotebookCell: + id: str + cell_type: str # markdown | query | code + source: str + output: Optional[str] = None + metadata: dict = field(default_factory=dict) + + +def validate_notebook_cells(cells: list[dict]) -> list[dict]: + """Ensure each cell has required keys.""" + cleaned: list[dict] = [] + for i, c in enumerate(cells): + cleaned.append({ + "id": c.get("id", f"cell-{i}"), + "cell_type": c.get("cell_type", "markdown"), + "source": c.get("source", ""), + "output": c.get("output"), + "metadata": c.get("metadata", {}), + }) + return cleaned + + +# ── Built-in Playbook Templates ────────────────────────────────────── + + +BUILT_IN_PLAYBOOKS: list[dict[str, Any]] = [ + { + "name": "Suspicious Process Investigation", + "description": "Step-by-step investigation of a potentially malicious process execution.", + "category": "incident_response", + "tags": ["process", "malware", "T1059"], + "steps": [ + { + "order": 1, + "title": "Identify the suspicious process", + "description": "Search for the process name/PID across all datasets. Note the command line, parent, and user context.", + "action": "search", + "action_config": {"fields": ["process_name", "command_line", "parent_process_name", "username"]}, + "expected_outcome": "Process details, parent chain, and execution context identified.", + }, + { + "order": 2, + "title": "Build process tree", + "description": "View the full parent→child process tree to understand the execution chain.", + "action": "process_tree", + "action_config": {}, + "expected_outcome": "Complete process lineage showing how the suspicious process was spawned.", + }, + { + "order": 3, + "title": "Check network connections", + "description": "Search for network events associated with the same host and timeframe.", + "action": "search", + "action_config": {"fields": ["src_ip", "dst_ip", "dst_port", "protocol"]}, + "expected_outcome": "Network connections revealing potential C2 or data exfiltration.", + }, + { + "order": 4, + "title": "Run analyzers", + "description": "Execute the suspicious_commands and entropy analyzers against the dataset.", + "action": "analyze", + "action_config": {"analyzers": ["suspicious_commands", "entropy"]}, + "expected_outcome": "Automated detection of known-bad patterns.", + }, + { + "order": 5, + "title": "Map to MITRE ATT&CK", + "description": "Check which MITRE techniques the process behavior maps to.", + "action": "mitre_map", + "action_config": {}, + "expected_outcome": "MITRE technique mappings for the suspicious activity.", + }, + { + "order": 6, + "title": "Document findings & create case", + "description": "Summarize investigation findings, annotate key evidence, and create a case if warranted.", + "action": "create_case", + "action_config": {}, + "expected_outcome": "Investigation documented with annotations and optionally escalated.", + }, + ], + }, + { + "name": "Lateral Movement Hunt", + "description": "Systematic hunt for lateral movement indicators across the environment.", + "category": "threat_hunting", + "tags": ["lateral_movement", "T1021", "T1047"], + "steps": [ + { + "order": 1, + "title": "Search for remote access tools", + "description": "Look for PsExec, WMI, WinRM, RDP, and SSH usage across datasets.", + "action": "search", + "action_config": {"query": "psexec|wmic|winrm|rdp|ssh"}, + "expected_outcome": "Identify all remote access tool usage.", + }, + { + "order": 2, + "title": "Analyze authentication events", + "description": "Run the auth anomaly analyzer to find brute force, unusual logon types.", + "action": "analyze", + "action_config": {"analyzers": ["auth_anomaly"]}, + "expected_outcome": "Authentication anomalies detected.", + }, + { + "order": 3, + "title": "Check network anomalies", + "description": "Run network anomaly analyzer for beaconing and suspicious connections.", + "action": "analyze", + "action_config": {"analyzers": ["network_anomaly"]}, + "expected_outcome": "Beaconing or unusual network patterns identified.", + }, + { + "order": 4, + "title": "Build knowledge graph", + "description": "Visualize entity relationships to identify pivot paths.", + "action": "knowledge_graph", + "action_config": {}, + "expected_outcome": "Entity relationship graph showing lateral movement paths.", + }, + { + "order": 5, + "title": "Document and escalate", + "description": "Create annotations for key findings and escalate to case if needed.", + "action": "create_case", + "action_config": {"tags": ["lateral_movement"]}, + "expected_outcome": "Findings documented and case created.", + }, + ], + }, + { + "name": "Data Exfiltration Check", + "description": "Investigate potential data exfiltration activity.", + "category": "incident_response", + "tags": ["exfiltration", "T1048", "T1567"], + "steps": [ + { + "order": 1, + "title": "Identify large transfers", + "description": "Search for network events with unusually high byte counts.", + "action": "analyze", + "action_config": {"analyzers": ["network_anomaly"], "config": {"large_transfer_threshold": 5000000}}, + "expected_outcome": "Large data transfers identified.", + }, + { + "order": 2, + "title": "Check DNS anomalies", + "description": "Look for DNS tunneling or unusual DNS query patterns.", + "action": "search", + "action_config": {"fields": ["dns_query", "query_length"]}, + "expected_outcome": "Suspicious DNS activity identified.", + }, + { + "order": 3, + "title": "Timeline analysis", + "description": "Examine the timeline for data staging and exfiltration windows.", + "action": "timeline", + "action_config": {}, + "expected_outcome": "Time windows of suspicious activity identified.", + }, + { + "order": 4, + "title": "Correlate with process activity", + "description": "Match network exfiltration with process execution times.", + "action": "search", + "action_config": {"fields": ["process_name", "dst_ip", "bytes_sent"]}, + "expected_outcome": "Process responsible for data transfer identified.", + }, + { + "order": 5, + "title": "MITRE mapping & documentation", + "description": "Map findings to MITRE exfiltration techniques and document.", + "action": "mitre_map", + "action_config": {}, + "expected_outcome": "Complete exfiltration investigation documented.", + }, + ], + }, + { + "name": "Ransomware Triage", + "description": "Rapid triage of potential ransomware activity.", + "category": "incident_response", + "tags": ["ransomware", "T1486", "T1490"], + "steps": [ + { + "order": 1, + "title": "Search for ransomware indicators", + "description": "Look for shadow copy deletion, boot config changes, encryption activity.", + "action": "search", + "action_config": {"query": "vssadmin|bcdedit|cipher|.encrypted|.locked|ransom"}, + "expected_outcome": "Ransomware indicators identified.", + }, + { + "order": 2, + "title": "Run all analyzers", + "description": "Execute all analyzers to get comprehensive threat picture.", + "action": "analyze", + "action_config": {}, + "expected_outcome": "Full automated analysis of ransomware indicators.", + }, + { + "order": 3, + "title": "Check persistence mechanisms", + "description": "Look for persistence that may indicate pre-ransomware staging.", + "action": "analyze", + "action_config": {"analyzers": ["persistence"]}, + "expected_outcome": "Persistence mechanisms identified.", + }, + { + "order": 4, + "title": "LLM deep analysis", + "description": "Run deep LLM analysis for comprehensive ransomware assessment.", + "action": "llm_analyze", + "action_config": {"mode": "deep", "focus": "ransomware"}, + "expected_outcome": "AI-powered ransomware analysis with recommendations.", + }, + { + "order": 5, + "title": "Create critical case", + "description": "Immediately create a critical-severity case for the ransomware incident.", + "action": "create_case", + "action_config": {"severity": "critical", "tags": ["ransomware"]}, + "expected_outcome": "Critical case created for incident response.", + }, + ], + }, +] + + +def get_builtin_playbooks() -> list[dict]: + """Return list of all built-in playbook templates.""" + return BUILT_IN_PLAYBOOKS + + +def get_playbook_template(name: str) -> dict | None: + """Get a specific built-in playbook by name.""" + for pb in BUILT_IN_PLAYBOOKS: + if pb["name"] == name: + return pb + return None diff --git a/backend/app/services/process_tree.py b/backend/app/services/process_tree.py new file mode 100644 index 0000000..d66695a --- /dev/null +++ b/backend/app/services/process_tree.py @@ -0,0 +1,447 @@ +"""Process tree and storyline graph builder. + +Extracts parent→child process relationships from dataset rows and builds +hierarchical trees. Also builds attack-storyline graphs connecting events +by host → process → network activity → file activity chains. +""" + +import logging +from collections import defaultdict +from typing import Any, Sequence + +from sqlalchemy import select +from sqlalchemy.ext.asyncio import AsyncSession +from sqlalchemy.orm import selectinload + +from app.db.models import Dataset, DatasetRow + +logger = logging.getLogger(__name__) + +# ── Helpers ─────────────────────────────────────────────────────────── + +_JUNK = frozenset({"", "N/A", "n/a", "-", "—", "null", "None", "none", "unknown"}) + + +def _clean(val: Any) -> str | None: + """Return cleaned string or None for junk values.""" + if val is None: + return None + s = str(val).strip() + return None if s in _JUNK else s + + +# ── Process Tree ────────────────────────────────────────────────────── + + +class ProcessNode: + """A single process in the tree.""" + + __slots__ = ( + "pid", "ppid", "name", "command_line", "username", "hostname", + "timestamp", "dataset_name", "row_index", "children", "extra", + ) + + def __init__(self, **kw: Any): + self.pid: str = kw.get("pid", "") + self.ppid: str = kw.get("ppid", "") + self.name: str = kw.get("name", "") + self.command_line: str = kw.get("command_line", "") + self.username: str = kw.get("username", "") + self.hostname: str = kw.get("hostname", "") + self.timestamp: str = kw.get("timestamp", "") + self.dataset_name: str = kw.get("dataset_name", "") + self.row_index: int = kw.get("row_index", -1) + self.children: list["ProcessNode"] = [] + self.extra: dict = kw.get("extra", {}) + + def to_dict(self) -> dict: + return { + "pid": self.pid, + "ppid": self.ppid, + "name": self.name, + "command_line": self.command_line, + "username": self.username, + "hostname": self.hostname, + "timestamp": self.timestamp, + "dataset_name": self.dataset_name, + "row_index": self.row_index, + "children": [c.to_dict() for c in self.children], + "extra": self.extra, + } + + +async def build_process_tree( + db: AsyncSession, + dataset_id: str | None = None, + hunt_id: str | None = None, + hostname_filter: str | None = None, +) -> list[dict]: + """Build process trees from dataset rows. + + Returns a list of root-level process nodes (forest). + """ + rows = await _fetch_rows(db, dataset_id=dataset_id, hunt_id=hunt_id) + if not rows: + return [] + + # Group processes by (hostname, pid) → node + nodes_by_key: dict[tuple[str, str], ProcessNode] = {} + nodes_list: list[ProcessNode] = [] + + for row_obj in rows: + data = row_obj.normalized_data or row_obj.data + pid = _clean(data.get("pid")) + if not pid: + continue + + ppid = _clean(data.get("ppid")) or "" + hostname = _clean(data.get("hostname")) or "unknown" + + if hostname_filter and hostname.lower() != hostname_filter.lower(): + continue + + node = ProcessNode( + pid=pid, + ppid=ppid, + name=_clean(data.get("process_name")) or _clean(data.get("name")) or "", + command_line=_clean(data.get("command_line")) or "", + username=_clean(data.get("username")) or "", + hostname=hostname, + timestamp=_clean(data.get("timestamp")) or "", + dataset_name=row_obj.dataset.name if row_obj.dataset else "", + row_index=row_obj.row_index, + extra={ + k: str(v) + for k, v in data.items() + if k not in {"pid", "ppid", "process_name", "name", "command_line", + "username", "hostname", "timestamp"} + and v is not None and str(v).strip() not in _JUNK + }, + ) + + key = (hostname, pid) + # Keep the first occurrence (earlier in data) or overwrite if deeper info + if key not in nodes_by_key: + nodes_by_key[key] = node + nodes_list.append(node) + + # Link parent → child + roots: list[ProcessNode] = [] + for node in nodes_list: + parent_key = (node.hostname, node.ppid) + parent = nodes_by_key.get(parent_key) + if parent and parent is not node: + parent.children.append(node) + else: + roots.append(node) + + return [r.to_dict() for r in roots] + + +# ── Storyline / Attack Graph ───────────────────────────────────────── + + +async def build_storyline( + db: AsyncSession, + dataset_id: str | None = None, + hunt_id: str | None = None, + hostname_filter: str | None = None, +) -> dict: + """Build a CrowdStrike-style storyline graph. + + Nodes represent events (process start, network connection, file write, etc.) + Edges represent causal / temporal relationships. + + Returns a Cytoscape-compatible elements dict {nodes: [...], edges: [...]}. + """ + rows = await _fetch_rows(db, dataset_id=dataset_id, hunt_id=hunt_id) + if not rows: + return {"nodes": [], "edges": [], "summary": {}} + + nodes: list[dict] = [] + edges: list[dict] = [] + seen_ids: set[str] = set() + host_events: dict[str, list[dict]] = defaultdict(list) + + for row_obj in rows: + data = row_obj.normalized_data or row_obj.data + hostname = _clean(data.get("hostname")) or "unknown" + + if hostname_filter and hostname.lower() != hostname_filter.lower(): + continue + + event_type = _classify_event(data) + node_id = f"{row_obj.dataset_id}_{row_obj.row_index}" + if node_id in seen_ids: + continue + seen_ids.add(node_id) + + label = _build_label(data, event_type) + severity = _estimate_severity(data, event_type) + + node = { + "data": { + "id": node_id, + "label": label, + "event_type": event_type, + "hostname": hostname, + "timestamp": _clean(data.get("timestamp")) or "", + "pid": _clean(data.get("pid")) or "", + "ppid": _clean(data.get("ppid")) or "", + "process_name": _clean(data.get("process_name")) or "", + "command_line": _clean(data.get("command_line")) or "", + "username": _clean(data.get("username")) or "", + "src_ip": _clean(data.get("src_ip")) or "", + "dst_ip": _clean(data.get("dst_ip")) or "", + "dst_port": _clean(data.get("dst_port")) or "", + "file_path": _clean(data.get("file_path")) or "", + "severity": severity, + "dataset_id": row_obj.dataset_id, + "row_index": row_obj.row_index, + }, + } + nodes.append(node) + host_events[hostname].append(node["data"]) + + # Build edges: parent→child (by pid/ppid) and temporal sequence per host + pid_lookup: dict[tuple[str, str], str] = {} # (host, pid) → node_id + for node in nodes: + d = node["data"] + if d["pid"]: + pid_lookup[(d["hostname"], d["pid"])] = d["id"] + + for node in nodes: + d = node["data"] + if d["ppid"]: + parent_id = pid_lookup.get((d["hostname"], d["ppid"])) + if parent_id and parent_id != d["id"]: + edges.append({ + "data": { + "id": f"e_{parent_id}_{d['id']}", + "source": parent_id, + "target": d["id"], + "relationship": "spawned", + } + }) + + # Temporal edges within each host (sorted by timestamp) + for hostname, events in host_events.items(): + sorted_events = sorted(events, key=lambda e: e.get("timestamp", "")) + for i in range(len(sorted_events) - 1): + src = sorted_events[i] + tgt = sorted_events[i + 1] + edge_id = f"t_{src['id']}_{tgt['id']}" + # Avoid duplicate edges + if not any(e["data"]["id"] == edge_id for e in edges): + edges.append({ + "data": { + "id": edge_id, + "source": src["id"], + "target": tgt["id"], + "relationship": "temporal", + } + }) + + # Summary stats + type_counts: dict[str, int] = defaultdict(int) + for n in nodes: + type_counts[n["data"]["event_type"]] += 1 + + summary = { + "total_events": len(nodes), + "total_edges": len(edges), + "hosts": list(host_events.keys()), + "event_types": dict(type_counts), + } + + return {"nodes": nodes, "edges": edges, "summary": summary} + + +# ── Risk scoring for dashboard ──────────────────────────────────────── + +async def compute_risk_scores( + db: AsyncSession, + hunt_id: str | None = None, +) -> dict: + """Compute per-host risk scores from anomaly signals in datasets. + + Returns {hosts: [{hostname, score, signals, ...}], overall_score, ...} + """ + rows = await _fetch_rows(db, hunt_id=hunt_id) + if not rows: + return {"hosts": [], "overall_score": 0, "total_events": 0, + "severity_breakdown": {}} + + host_signals: dict[str, dict] = defaultdict( + lambda: {"hostname": "", "score": 0, "signals": [], + "event_count": 0, "process_count": 0, + "network_count": 0, "file_count": 0} + ) + + severity_counts = {"critical": 0, "high": 0, "medium": 0, "low": 0, "info": 0} + + for row_obj in rows: + data = row_obj.normalized_data or row_obj.data + hostname = _clean(data.get("hostname")) or "unknown" + entry = host_signals[hostname] + entry["hostname"] = hostname + entry["event_count"] += 1 + + event_type = _classify_event(data) + severity = _estimate_severity(data, event_type) + severity_counts[severity] = severity_counts.get(severity, 0) + 1 + + # Count event types + if event_type == "process": + entry["process_count"] += 1 + elif event_type == "network": + entry["network_count"] += 1 + elif event_type == "file": + entry["file_count"] += 1 + + # Risk signals + cmd = (_clean(data.get("command_line")) or "").lower() + proc = (_clean(data.get("process_name")) or "").lower() + + # Detect suspicious patterns + sus_patterns = [ + ("powershell -enc", 8, "Encoded PowerShell"), + ("invoke-expression", 7, "PowerShell IEX"), + ("invoke-webrequest", 6, "PowerShell WebRequest"), + ("certutil -urlcache", 8, "Certutil download"), + ("bitsadmin /transfer", 7, "BITS transfer"), + ("regsvr32 /s /n /u", 8, "Regsvr32 squiblydoo"), + ("mshta ", 7, "MSHTA execution"), + ("wmic process", 6, "WMIC process enum"), + ("net user", 5, "User enumeration"), + ("whoami", 4, "Whoami recon"), + ("mimikatz", 10, "Mimikatz detected"), + ("procdump", 7, "Process dumping"), + ("psexec", 7, "PsExec lateral movement"), + ] + + for pattern, score_add, signal_name in sus_patterns: + if pattern in cmd or pattern in proc: + entry["score"] += score_add + if signal_name not in entry["signals"]: + entry["signals"].append(signal_name) + + # External connections score + dst_ip = _clean(data.get("dst_ip")) or "" + if dst_ip and not dst_ip.startswith(("10.", "192.168.", "172.")): + entry["score"] += 1 + if "External connections" not in entry["signals"]: + entry["signals"].append("External connections") + + # Normalize scores (0-100) + max_score = max((h["score"] for h in host_signals.values()), default=1) + if max_score > 0: + for entry in host_signals.values(): + entry["score"] = min(round((entry["score"] / max_score) * 100), 100) + + hosts = sorted(host_signals.values(), key=lambda h: h["score"], reverse=True) + overall = round(sum(h["score"] for h in hosts) / max(len(hosts), 1)) + + return { + "hosts": hosts, + "overall_score": overall, + "total_events": sum(h["event_count"] for h in hosts), + "severity_breakdown": severity_counts, + } + + +# ── Internal helpers ────────────────────────────────────────────────── + + +async def _fetch_rows( + db: AsyncSession, + dataset_id: str | None = None, + hunt_id: str | None = None, + limit: int = 50_000, +) -> Sequence[DatasetRow]: + """Fetch dataset rows, optionally filtered by dataset or hunt.""" + stmt = ( + select(DatasetRow) + .join(Dataset) + .options(selectinload(DatasetRow.dataset)) + ) + + if dataset_id: + stmt = stmt.where(DatasetRow.dataset_id == dataset_id) + elif hunt_id: + stmt = stmt.where(Dataset.hunt_id == hunt_id) + else: + # No filter — limit to prevent OOM + pass + + stmt = stmt.order_by(DatasetRow.row_index).limit(limit) + result = await db.execute(stmt) + return result.scalars().all() + + +def _classify_event(data: dict) -> str: + """Classify a row as process / network / file / registry / other.""" + if _clean(data.get("pid")) or _clean(data.get("process_name")): + if _clean(data.get("dst_ip")) or _clean(data.get("dst_port")): + return "network" + if _clean(data.get("file_path")): + return "file" + return "process" + if _clean(data.get("dst_ip")) or _clean(data.get("src_ip")): + return "network" + if _clean(data.get("file_path")): + return "file" + if _clean(data.get("registry_key")): + return "registry" + return "other" + + +def _build_label(data: dict, event_type: str) -> str: + """Build a concise node label for storyline display.""" + name = _clean(data.get("process_name")) or "" + pid = _clean(data.get("pid")) or "" + dst = _clean(data.get("dst_ip")) or "" + port = _clean(data.get("dst_port")) or "" + fpath = _clean(data.get("file_path")) or "" + + if event_type == "process": + return f"{name} (PID {pid})" if pid else name or "process" + elif event_type == "network": + target = f"{dst}:{port}" if dst and port else dst or port + return f"{name} → {target}" if name else target or "network" + elif event_type == "file": + fname = fpath.split("\\")[-1].split("/")[-1] if fpath else "" + return f"{name} → {fname}" if name else fname or "file" + elif event_type == "registry": + return _clean(data.get("registry_key")) or "registry" + return name or "event" + + +def _estimate_severity(data: dict, event_type: str) -> str: + """Rough heuristic severity estimate.""" + cmd = (_clean(data.get("command_line")) or "").lower() + proc = (_clean(data.get("process_name")) or "").lower() + + # Critical indicators + critical_kw = ["mimikatz", "cobalt", "meterpreter", "empire", "bloodhound"] + if any(k in cmd or k in proc for k in critical_kw): + return "critical" + + # High indicators + high_kw = ["powershell -enc", "certutil -urlcache", "regsvr32", "mshta", + "bitsadmin", "psexec", "procdump"] + if any(k in cmd for k in high_kw): + return "high" + + # Medium indicators + medium_kw = ["invoke-", "wmic", "net user", "net group", "schtasks", + "reg add", "sc create"] + if any(k in cmd for k in medium_kw): + return "medium" + + # Low: recon + low_kw = ["whoami", "ipconfig", "systeminfo", "tasklist", "netstat"] + if any(k in cmd for k in low_kw): + return "low" + + return "info" diff --git a/backend/app/services/timeline.py b/backend/app/services/timeline.py new file mode 100644 index 0000000..b435f3d --- /dev/null +++ b/backend/app/services/timeline.py @@ -0,0 +1,254 @@ +"""Timeline and field-statistics service. + +Provides temporal histogram bins and per-field distribution stats +for dataset rows — used by the TimelineScrubber and QueryBar components. +""" + +import logging +from collections import Counter, defaultdict +from datetime import datetime +from typing import Any, Sequence + +from sqlalchemy import select +from sqlalchemy.ext.asyncio import AsyncSession + +from app.db.models import Dataset, DatasetRow + +logger = logging.getLogger(__name__) + + +# ── Timeline bins ───────────────────────────────────────────────────── + + +async def build_timeline_bins( + db: AsyncSession, + dataset_id: str | None = None, + hunt_id: str | None = None, + bins: int = 60, +) -> dict: + """Create histogram bins of events over time. + + Returns {bins: [{start, end, count, events_by_type}], total, range}. + """ + rows = await _fetch_rows(db, dataset_id=dataset_id, hunt_id=hunt_id) + if not rows: + return {"bins": [], "total": 0, "range": None} + + # Extract timestamps + events: list[dict] = [] + for r in rows: + data = r.normalized_data or r.data + ts_str = data.get("timestamp", "") + if not ts_str: + continue + ts = _parse_ts(str(ts_str)) + if ts: + events.append({ + "timestamp": ts, + "event_type": _classify_type(data), + "hostname": data.get("hostname", ""), + }) + + if not events: + return {"bins": [], "total": len(rows), "range": None} + + events.sort(key=lambda e: e["timestamp"]) + ts_min = events[0]["timestamp"] + ts_max = events[-1]["timestamp"] + + if ts_min == ts_max: + return { + "bins": [{"start": ts_min.isoformat(), "end": ts_max.isoformat(), + "count": len(events), "events_by_type": {}}], + "total": len(events), + "range": {"start": ts_min.isoformat(), "end": ts_max.isoformat()}, + } + + delta = (ts_max - ts_min) / bins + result_bins: list[dict] = [] + + for i in range(bins): + bin_start = ts_min + delta * i + bin_end = ts_min + delta * (i + 1) + bin_events = [e for e in events + if bin_start <= e["timestamp"] < bin_end + or (i == bins - 1 and e["timestamp"] == ts_max)] + type_counts: dict[str, int] = Counter(e["event_type"] for e in bin_events) + result_bins.append({ + "start": bin_start.isoformat(), + "end": bin_end.isoformat(), + "count": len(bin_events), + "events_by_type": dict(type_counts), + }) + + return { + "bins": result_bins, + "total": len(events), + "range": {"start": ts_min.isoformat(), "end": ts_max.isoformat()}, + } + + +# ── Field stats ─────────────────────────────────────────────────────── + + +async def compute_field_stats( + db: AsyncSession, + dataset_id: str | None = None, + hunt_id: str | None = None, + fields: list[str] | None = None, + top_n: int = 20, +) -> dict: + """Compute per-field value distributions. + + Returns {fields: {field_name: {total, unique, top: [{value, count}]}}} + """ + rows = await _fetch_rows(db, dataset_id=dataset_id, hunt_id=hunt_id) + if not rows: + return {"fields": {}, "total_rows": 0} + + # Determine which fields to analyze + sample_data = rows[0].normalized_data or rows[0].data + all_fields = list(sample_data.keys()) + target_fields = fields if fields else all_fields[:30] + + stats: dict[str, dict] = {} + for field in target_fields: + values = [] + for r in rows: + data = r.normalized_data or r.data + v = data.get(field) + if v is not None and str(v).strip() not in ("", "N/A", "n/a", "-", "None"): + values.append(str(v)) + + counter = Counter(values) + top = [{"value": v, "count": c} for v, c in counter.most_common(top_n)] + stats[field] = { + "total": len(values), + "unique": len(counter), + "top": top, + } + + return { + "fields": stats, + "total_rows": len(rows), + "available_fields": all_fields, + } + + +# ── Row search with filters ────────────────────────────────────────── + + +async def search_rows( + db: AsyncSession, + dataset_id: str | None = None, + hunt_id: str | None = None, + query: str = "", + filters: dict[str, str] | None = None, + time_start: str | None = None, + time_end: str | None = None, + limit: int = 500, + offset: int = 0, +) -> dict: + """Search/filter dataset rows. + + Supports: + - Free-text search across all fields + - Field-specific filters {field: value} + - Time range filters + """ + rows = await _fetch_rows(db, dataset_id=dataset_id, hunt_id=hunt_id, limit=50000) + if not rows: + return {"rows": [], "total": 0, "offset": offset, "limit": limit} + + results: list[dict] = [] + ts_start = _parse_ts(time_start) if time_start else None + ts_end = _parse_ts(time_end) if time_end else None + + for r in rows: + data = r.normalized_data or r.data + + # Time filter + if ts_start or ts_end: + ts = _parse_ts(str(data.get("timestamp", ""))) + if ts: + if ts_start and ts < ts_start: + continue + if ts_end and ts > ts_end: + continue + + # Field filters + if filters: + match = True + for field, value in filters.items(): + field_val = str(data.get(field, "")).lower() + if value.lower() not in field_val: + match = False + break + if not match: + continue + + # Free-text search + if query: + q = query.lower() + found = any(q in str(v).lower() for v in data.values()) + if not found: + continue + + results.append(data) + + total = len(results) + paged = results[offset:offset + limit] + + return {"rows": paged, "total": total, "offset": offset, "limit": limit} + + +# ── Internal helpers ────────────────────────────────────────────────── + + +async def _fetch_rows( + db: AsyncSession, + dataset_id: str | None = None, + hunt_id: str | None = None, + limit: int = 50_000, +) -> Sequence[DatasetRow]: + stmt = select(DatasetRow).join(Dataset) + if dataset_id: + stmt = stmt.where(DatasetRow.dataset_id == dataset_id) + elif hunt_id: + stmt = stmt.where(Dataset.hunt_id == hunt_id) + stmt = stmt.order_by(DatasetRow.row_index).limit(limit) + result = await db.execute(stmt) + return result.scalars().all() + + +def _parse_ts(ts_str: str | None) -> datetime | None: + """Best-effort timestamp parsing.""" + if not ts_str: + return None + for fmt in ( + "%Y-%m-%dT%H:%M:%S.%fZ", + "%Y-%m-%dT%H:%M:%SZ", + "%Y-%m-%dT%H:%M:%S.%f", + "%Y-%m-%dT%H:%M:%S", + "%Y-%m-%d %H:%M:%S.%f", + "%Y-%m-%d %H:%M:%S", + "%m/%d/%Y %H:%M:%S", + "%m/%d/%Y %I:%M:%S %p", + ): + try: + return datetime.strptime(ts_str.strip(), fmt) + except (ValueError, AttributeError): + continue + return None + + +def _classify_type(data: dict) -> str: + if data.get("pid") or data.get("process_name"): + if data.get("dst_ip") or data.get("dst_port"): + return "network" + return "process" + if data.get("dst_ip") or data.get("src_ip"): + return "network" + if data.get("file_path"): + return "file" + return "other" diff --git a/backend/tests/generate_test_csvs.py b/backend/tests/generate_test_csvs.py new file mode 100644 index 0000000..eaa09ce --- /dev/null +++ b/backend/tests/generate_test_csvs.py @@ -0,0 +1,589 @@ +#!/usr/bin/env python3 +"""Generate 12 realistic Velociraptor-style CSV test files. + +Mock network: 75 hosts, 10 users, 3 subnets. +Sprinkles AUP-triggering keywords across DNS, URL, and process data. +""" + +import csv +import os +import random +from datetime import datetime, timedelta +from pathlib import Path + +random.seed(42) + +OUT = Path(__file__).parent / "test_csvs" +OUT.mkdir(exist_ok=True) + +# ── Shared network inventory ────────────────────────────────────────── + +SUBNETS = ["10.10.1", "10.10.2", "10.10.3"] +DEPARTMENTS = ["IT", "HR", "Finance", "Sales", "Engineering", "Legal", "Marketing", "Exec"] +OS_LIST = ["Windows 10 Enterprise", "Windows 11 Enterprise", "Windows Server 2022", "Windows Server 2019"] +DOMAIN = "acme.local" + +HOSTS = [] +for i in range(1, 76): + subnet = SUBNETS[i % 3] + ip = f"{subnet}.{100 + i}" + dept = DEPARTMENTS[i % len(DEPARTMENTS)] + prefix = {"IT": "IT-WS", "HR": "HR-WS", "Finance": "FIN-WS", "Sales": "SLS-WS", + "Engineering": "ENG-WS", "Legal": "LEG-WS", "Marketing": "MKT-WS", "Exec": "EXEC-WS"} + hostname = f"{prefix.get(dept, 'WS')}-{i:03d}" + os_ver = OS_LIST[i % len(OS_LIST)] + mac = f"00:1A:2B:{i:02X}:{(i*3)%256:02X}:{(i*7)%256:02X}" + HOSTS.append({"hostname": hostname, "ip": ip, "os": os_ver, "mac": mac, "dept": dept}) + +SERVERS = [ + {"hostname": "DC-01", "ip": "10.10.1.10", "os": "Windows Server 2022", "mac": "00:1A:2B:AA:01:01"}, + {"hostname": "DC-02", "ip": "10.10.2.10", "os": "Windows Server 2022", "mac": "00:1A:2B:AA:02:02"}, + {"hostname": "FILE-01", "ip": "10.10.1.11", "os": "Windows Server 2019", "mac": "00:1A:2B:AA:03:03"}, + {"hostname": "EXCH-01", "ip": "10.10.1.12", "os": "Windows Server 2022", "mac": "00:1A:2B:AA:04:04"}, + {"hostname": "WEB-01", "ip": "10.10.3.10", "os": "Windows Server 2022", "mac": "00:1A:2B:AA:05:05"}, + {"hostname": "SQL-01", "ip": "10.10.2.11", "os": "Windows Server 2019", "mac": "00:1A:2B:AA:06:06"}, + {"hostname": "PROXY-01", "ip": "10.10.1.13", "os": "Windows Server 2022", "mac": "00:1A:2B:AA:07:07"}, +] +ALL_HOSTS = HOSTS + SERVERS + +USERS = [ + "jsmith", "agarcia", "bwilson", "cjohnson", "dlee", + "emartinez", "fthompson", "gwhite", "hbrown", "idavis", + "admin", "svc_backup", "svc_sql", "svc_web", +] + +# Base time range: 2-week window +BASE_TIME = datetime(2026, 2, 10, 8, 0, 0) +END_TIME = datetime(2026, 2, 20, 18, 0, 0) + +def rand_ts(): + delta = (END_TIME - BASE_TIME).total_seconds() + return BASE_TIME + timedelta(seconds=random.uniform(0, delta)) + +def ts_str(dt=None): + return (dt or rand_ts()).strftime("%Y-%m-%dT%H:%M:%S.%f")[:-3] + "Z" + +def rand_host(): + return random.choice(ALL_HOSTS) + +def rand_user(): + return random.choice(USERS) + +def rand_ext_ip(): + return f"{random.randint(1,223)}.{random.randint(0,255)}.{random.randint(0,255)}.{random.randint(1,254)}" + +# AUP trigger domains/URLs (will be sprinkled into DNS and proxy logs) +AUP_DOMAINS = [ + "www.bet365.com", "pokerstars.com", "draftkings.com", # Gambling + "store.steampowered.com", "steamcommunity.com", "discord.gg", # Gaming + "www.netflix.com", "hulu.com", "open.spotify.com", # Streaming + "thepiratebay.org", "1337x.to", "fitgirl-repacks.site", # Piracy + "www.pornhub.com", "onlyfans.com", "xvideos.com", # Adult + "www.facebook.com", "www.tiktok.com", "www.reddit.com", # Social Media + "www.indeed.com", "www.glassdoor.com", "www.linkedin.com/jobs", # Job Search + "www.amazon.com", "www.ebay.com", "www.shein.com", # Shopping +] + +AUP_PROCESSES = [ + "utorrent.exe", "qbittorrent.exe", "steam.exe", "discord.exe", + "spotify.exe", "epicgameslauncher.exe", +] + +LEGIT_DOMAINS = [ + "login.microsoftonline.com", "outlook.office365.com", "teams.microsoft.com", + "graph.microsoft.com", "update.microsoft.com", "windowsupdate.com", + "acme.sharepoint.com", "acme.local", "dc-01.acme.local", "dc-02.acme.local", + "file-01.acme.local", "exch-01.acme.local", "github.com", "stackoverflow.com", + "cdn.jsdelivr.net", "pypi.org", "npmjs.com", "google.com", "googleapis.com", + "cloudflare.com", "aws.amazon.com", "akamai.net", "time.windows.com", +] + +LEGIT_PROCESSES = [ + "svchost.exe", "explorer.exe", "chrome.exe", "msedge.exe", "outlook.exe", + "teams.exe", "code.exe", "powershell.exe", "cmd.exe", "notepad.exe", + "taskhostw.exe", "RuntimeBroker.exe", "SearchHost.exe", "lsass.exe", + "csrss.exe", "winlogon.exe", "dwm.exe", "System", "smss.exe", + "services.exe", "spoolsv.exe", "MsMpEng.exe", "OneDrive.exe", +] + +STATES = ["ESTABLISHED", "LISTEN", "TIME_WAIT", "CLOSE_WAIT", "SYN_SENT"] +PROTOCOLS = ["TCP", "UDP", "TCP", "TCP", "TCP"] + +def write_csv(filename, headers, rows): + path = OUT / filename + with open(path, "w", newline="", encoding="utf-8") as f: + w = csv.DictWriter(f, fieldnames=headers) + w.writeheader() + w.writerows(rows) + print(f" {filename}: {len(rows)} rows") + +# ═══════════════════════════════════════════════════════════════════════ +# 1. Netstat connections (Velociraptor: Windows.Network.Netstat) +# ═══════════════════════════════════════════════════════════════════════ + +def gen_netstat(): + rows = [] + for host in ALL_HOSTS: + n_conns = random.randint(8, 40) + for _ in range(n_conns): + proc = random.choice(LEGIT_PROCESSES + (AUP_PROCESSES if random.random() < 0.08 else [])) + state = random.choice(STATES) + proto = random.choice(PROTOCOLS) + local_port = random.choice([80, 443, 445, 135, 139, 3389, 5985, 8080, 53, 88, 389, 636, + random.randint(49152, 65535)]) + if state == "LISTEN": + remote_ip = "0.0.0.0" + remote_port = 0 + else: + remote_ip = random.choice([rand_ext_ip(), random.choice(ALL_HOSTS)["ip"]]) + remote_port = random.choice([80, 443, 8080, 3389, 445, 53, 88, 389, 636, + random.randint(1024, 65535)]) + rows.append({ + "Hostname": host["hostname"], + "Timestamp": ts_str(), + "Pid": random.randint(100, 65000), + "Name": proc, + "Status": state, + "Protocol": proto, + "Laddr.IP": host["ip"], + "Laddr.Port": local_port, + "Raddr.IP": remote_ip, + "Raddr.Port": remote_port, + "Username": rand_user(), + }) + return rows + +print("Generating Velociraptor test CSVs...") +rows = gen_netstat() +write_csv("01_netstat_connections.csv", + ["Hostname", "Timestamp", "Pid", "Name", "Status", "Protocol", + "Laddr.IP", "Laddr.Port", "Raddr.IP", "Raddr.Port", "Username"], rows) + +# ═══════════════════════════════════════════════════════════════════════ +# 2. DNS queries (Velociraptor: Windows.Network.DNS) +# ═══════════════════════════════════════════════════════════════════════ + +def gen_dns(): + rows = [] + for host in ALL_HOSTS: + n_queries = random.randint(15, 60) + for _ in range(n_queries): + if random.random() < 0.12: + domain = random.choice(AUP_DOMAINS) + else: + domain = random.choice(LEGIT_DOMAINS) + rows.append({ + "Hostname": host["hostname"], + "EventTime": ts_str(), + "QueryName": domain, + "QueryType": random.choice(["A", "AAAA", "CNAME", "MX", "TXT", "A", "A"]), + "ResponseCode": random.choice(["NOERROR", "NOERROR", "NOERROR", "NXDOMAIN", "SERVFAIL"]), + "SourceIP": host["ip"], + "AnswerIP": rand_ext_ip() if random.random() > 0.2 else "", + }) + return rows + +rows = gen_dns() +write_csv("02_dns_queries.csv", + ["Hostname", "EventTime", "QueryName", "QueryType", "ResponseCode", "SourceIP", "AnswerIP"], rows) + +# ═══════════════════════════════════════════════════════════════════════ +# 3. Process listing (Velociraptor: Windows.System.Pslist) +# ═══════════════════════════════════════════════════════════════════════ + +def gen_pslist(): + rows = [] + for host in ALL_HOSTS: + user = rand_user() + for proc in LEGIT_PROCESSES: + pid = random.randint(100, 65000) + ppid = random.randint(1, 20) if proc in ("svchost.exe", "csrss.exe", "lsass.exe") else random.randint(100, 60000) + rows.append({ + "ComputerName": host["hostname"], + "CreateTime": ts_str(), + "Pid": pid, + "PPid": ppid, + "Name": proc, + "CommandLine": f"C:\\Windows\\System32\\{proc}" if proc != "System" else "System", + "Username": f"ACME\\{user}" if proc not in ("System", "smss.exe", "csrss.exe") else "NT AUTHORITY\\SYSTEM", + "MemoryUsage": random.randint(1024, 500000), + }) + # Sprinkle AUP processes on ~15% of hosts + if random.random() < 0.15: + aup_proc = random.choice(AUP_PROCESSES) + rows.append({ + "ComputerName": host["hostname"], + "CreateTime": ts_str(), + "Pid": random.randint(10000, 65000), + "PPid": random.randint(100, 60000), + "Name": aup_proc, + "CommandLine": f"C:\\Users\\{user}\\AppData\\Local\\{aup_proc.replace('.exe', '')}\\{aup_proc}", + "Username": f"ACME\\{user}", + "MemoryUsage": random.randint(50000, 400000), + }) + return rows + +rows = gen_pslist() +write_csv("03_process_listing.csv", + ["ComputerName", "CreateTime", "Pid", "PPid", "Name", "CommandLine", "Username", "MemoryUsage"], rows) + +# ═══════════════════════════════════════════════════════════════════════ +# 4. Network interfaces (Velociraptor: Windows.Network.Interfaces) +# ═══════════════════════════════════════════════════════════════════════ + +def gen_interfaces(): + rows = [] + for host in ALL_HOSTS: + h = host + rows.append({ + "Hostname": h["hostname"], + "Timestamp": ts_str(), + "Name": "Ethernet0", + "MacAddress": h.get("mac", f"00:1A:2B:{random.randint(0,255):02X}:{random.randint(0,255):02X}:{random.randint(0,255):02X}"), + "IP": h["ip"], + "Netmask": "255.255.255.0", + "Gateway": h["ip"].rsplit(".", 1)[0] + ".1", + "DNSServer": "10.10.1.10", + "DHCPEnabled": random.choice(["True", "False"]), + "Status": "Up", + }) + # Some hosts have a secondary NIC + if random.random() < 0.15: + rows.append({ + "Hostname": h["hostname"], + "Timestamp": ts_str(), + "Name": "WiFi", + "MacAddress": f"00:1A:2B:{random.randint(0,255):02X}:{random.randint(0,255):02X}:{random.randint(0,255):02X}", + "IP": f"192.168.1.{random.randint(100,254)}", + "Netmask": "255.255.255.0", + "Gateway": "192.168.1.1", + "DNSServer": "192.168.1.1", + "DHCPEnabled": "True", + "Status": "Up", + }) + return rows + +rows = gen_interfaces() +write_csv("04_network_interfaces.csv", + ["Hostname", "Timestamp", "Name", "MacAddress", "IP", "Netmask", "Gateway", "DNSServer", "DHCPEnabled", "Status"], rows) + +# ═══════════════════════════════════════════════════════════════════════ +# 5. Logged-in users (Velociraptor: Windows.Sys.Users) +# ═══════════════════════════════════════════════════════════════════════ + +def gen_logged_users(): + rows = [] + for host in ALL_HOSTS: + n_users = random.randint(1, 3) + used = set() + for _ in range(n_users): + u = rand_user() + while u in used: + u = rand_user() + used.add(u) + logon_ts = rand_ts() + rows.append({ + "ComputerName": host["hostname"], + "SourceIP": host["ip"], + "User": f"ACME\\{u}", + "LogonType": random.choice([2, 3, 10, 10, 2]), # 2=Interactive, 3=Network, 10=RDP + "LogonTime": ts_str(logon_ts), + "LogoffTime": ts_str(logon_ts + timedelta(hours=random.uniform(0.5, 10))) if random.random() > 0.3 else "", + "OS": host.get("os", "Windows 10 Enterprise"), + }) + return rows + +rows = gen_logged_users() +write_csv("05_logged_in_users.csv", + ["ComputerName", "SourceIP", "User", "LogonType", "LogonTime", "LogoffTime", "OS"], rows) + +# ═══════════════════════════════════════════════════════════════════════ +# 6. Scheduled tasks (Velociraptor: Windows.System.TaskScheduler) +# ═══════════════════════════════════════════════════════════════════════ + +SCHED_TASKS = [ + ("\\Microsoft\\Windows\\UpdateOrchestrator\\Schedule Scan", "C:\\Windows\\System32\\usoclient.exe StartScan"), + ("\\Microsoft\\Windows\\Defrag\\ScheduledDefrag", "C:\\Windows\\System32\\defrag.exe -c -h -o"), + ("\\Microsoft\\Windows\\WindowsUpdate\\Automatic App Update", "C:\\Windows\\System32\\UsoClient.exe"), + ("\\ACME\\Backup", "C:\\Tools\\backup.ps1"), + ("\\ACME\\Inventory", "C:\\Tools\\inventory.exe --scan"), +] + +def gen_sched_tasks(): + rows = [] + for host in ALL_HOSTS: + for task_name, cmd in SCHED_TASKS: + rows.append({ + "Hostname": host["hostname"], + "IP": host["ip"], + "TaskName": task_name, + "CommandLine": cmd, + "Enabled": random.choice(["True", "True", "True", "False"]), + "LastRunTime": ts_str(), + "NextRunTime": ts_str(), + "Username": "NT AUTHORITY\\SYSTEM" if "Microsoft" in task_name else f"ACME\\svc_backup", + }) + return rows + +rows = gen_sched_tasks() +write_csv("06_scheduled_tasks.csv", + ["Hostname", "IP", "TaskName", "CommandLine", "Enabled", "LastRunTime", "NextRunTime", "Username"], rows) + +# ═══════════════════════════════════════════════════════════════════════ +# 7. Browser history (Velociraptor: Windows.Application.Chrome.History) +# ═══════════════════════════════════════════════════════════════════════ + +def gen_browser_history(): + rows = [] + for host in HOSTS: # only workstations + user = rand_user() + n_entries = random.randint(10, 35) + for _ in range(n_entries): + if random.random() < 0.15: + domain = random.choice(AUP_DOMAINS) + url = f"https://{domain}/{random.choice(['', 'home', 'watch', 'play', 'search?q=free+movies', 'category/popular'])}" + title_map = { + "bet365": "Bet365 - Sports Betting", + "pokerstars": "PokerStars - Online Poker", + "netflix": "Netflix - Watch TV Shows", + "steam": "Steam Store", + "piratebay": "The Pirate Bay", + "pornhub": "Pornhub", + "facebook": "Facebook - Log In", + "tiktok": "TikTok - Make Your Day", + "indeed": "Indeed - Job Search", + "amazon": "Amazon.com - Shopping", + } + title = next((v for k, v in title_map.items() if k in domain), domain) + else: + domain = random.choice(LEGIT_DOMAINS) + url = f"https://{domain}/{random.choice(['', 'docs', 'api', 'search', 'dashboard', 'inbox'])}" + title = domain + rows.append({ + "ComputerName": host["hostname"], + "SourceAddress": host["ip"], + "User": user, + "URL": url, + "Title": title, + "VisitTime": ts_str(), + "VisitCount": random.randint(1, 20), + "Browser": random.choice(["Chrome", "Edge", "Chrome", "Chrome"]), + }) + return rows + +rows = gen_browser_history() +write_csv("07_browser_history.csv", + ["ComputerName", "SourceAddress", "User", "URL", "Title", "VisitTime", "VisitCount", "Browser"], rows) + +# ═══════════════════════════════════════════════════════════════════════ +# 8. Sysmon network connections (Sysmon Event ID 3) +# ═══════════════════════════════════════════════════════════════════════ + +def gen_sysmon_network(): + rows = [] + for host in ALL_HOSTS: + n_events = random.randint(10, 50) + user = rand_user() + for _ in range(n_events): + proc = random.choice(LEGIT_PROCESSES + (["chrome.exe", "msedge.exe"] * 3)) + dst_ip = random.choice([rand_ext_ip(), random.choice(ALL_HOSTS)["ip"]]) + rows.append({ + "Hostname": host["hostname"], + "EventTime": ts_str(), + "EventID": 3, + "Image": f"C:\\Windows\\System32\\{proc}" if proc not in ("chrome.exe", "msedge.exe") else f"C:\\Program Files\\{proc}", + "User": f"ACME\\{user}", + "Protocol": random.choice(["tcp", "udp"]), + "SourceIp": host["ip"], + "SourcePort": random.randint(49152, 65535), + "DestinationIp": dst_ip, + "DestinationPort": random.choice([80, 443, 53, 445, 389, 3389, 8080]), + "DestinationHostname": random.choice(LEGIT_DOMAINS + AUP_DOMAINS[:3]) if random.random() < 0.1 else "", + }) + return rows + +rows = gen_sysmon_network() +write_csv("08_sysmon_network.csv", + ["Hostname", "EventTime", "EventID", "Image", "User", "Protocol", + "SourceIp", "SourcePort", "DestinationIp", "DestinationPort", "DestinationHostname"], rows) + +# ═══════════════════════════════════════════════════════════════════════ +# 9. Autoruns (Velociraptor: Windows.Sys.AutoRuns) +# ═══════════════════════════════════════════════════════════════════════ + +AUTORUN_ENTRIES = [ + ("MicrosoftEdgeAutoLaunch", "C:\\Program Files\\Microsoft\\Edge\\msedge.exe --no-startup-window"), + ("SecurityHealth", "C:\\Windows\\System32\\SecurityHealthSystray.exe"), + ("OneDrive", "C:\\Users\\{user}\\AppData\\Local\\Microsoft\\OneDrive\\OneDrive.exe /background"), + ("WindowsDefender", "C:\\ProgramData\\Microsoft\\Windows Defender\\MsMpEng.exe"), +] + +AUP_AUTORUNS = [ + ("Steam", "C:\\Program Files (x86)\\Steam\\steam.exe -silent"), + ("Discord", "C:\\Users\\{user}\\AppData\\Local\\Discord\\Update.exe --processStart Discord.exe"), + ("Spotify", "C:\\Users\\{user}\\AppData\\Roaming\\Spotify\\Spotify.exe /minimized"), + ("uTorrent", "C:\\Users\\{user}\\AppData\\Roaming\\uTorrent\\uTorrent.exe /minimized"), +] + +def gen_autoruns(): + rows = [] + for host in ALL_HOSTS: + user = rand_user() + for name, cmd in AUTORUN_ENTRIES: + rows.append({ + "Hostname": host["hostname"], + "IP": host["ip"], + "EntryName": name, + "EntryPath": cmd.replace("{user}", user), + "Category": "Logon", + "Enabled": "True", + "Signer": "Microsoft Corporation" if "Microsoft" in cmd or "Windows" in cmd else "(Not Signed)", + "MD5": f"{random.randint(0, 2**128):032x}", + "Timestamp": ts_str(), + }) + # ~20% of workstations have AUP autoruns + if host in HOSTS and random.random() < 0.20: + entry = random.choice(AUP_AUTORUNS) + rows.append({ + "Hostname": host["hostname"], + "IP": host["ip"], + "EntryName": entry[0], + "EntryPath": entry[1].replace("{user}", user), + "Category": "Logon", + "Enabled": "True", + "Signer": "(Not Signed)", + "MD5": f"{random.randint(0, 2**128):032x}", + "Timestamp": ts_str(), + }) + return rows + +rows = gen_autoruns() +write_csv("09_autoruns.csv", + ["Hostname", "IP", "EntryName", "EntryPath", "Category", "Enabled", "Signer", "MD5", "Timestamp"], rows) + +# ═══════════════════════════════════════════════════════════════════════ +# 10. Windows Event Logs — Logon events (Event IDs 4624/4625) +# ═══════════════════════════════════════════════════════════════════════ + +def gen_logon_events(): + rows = [] + for host in ALL_HOSTS: + n_events = random.randint(8, 30) + for _ in range(n_events): + event_id = random.choice([4624, 4624, 4624, 4624, 4625]) + logon_type = random.choice([2, 3, 7, 10, 3, 3]) + user = rand_user() + src_ip = random.choice([host["ip"], random.choice(ALL_HOSTS)["ip"], "127.0.0.1"]) + rows.append({ + "ComputerName": host["hostname"], + "System.TimeCreated": ts_str(), + "EventID": event_id, + "LogonType": logon_type, + "SubjectUserName": user, + "SubjectUserSid": f"S-1-5-21-{random.randint(1000000,9999999)}-{random.randint(1000,9999)}", + "SourceAddress": src_ip, + "SourcePort": random.randint(1024, 65535), + "Status": "0x0" if event_id == 4624 else "0xC000006D", + "FailureReason": "" if event_id == 4624 else "Unknown user name or bad password", + }) + return rows + +rows = gen_logon_events() +write_csv("10_logon_events.csv", + ["ComputerName", "System.TimeCreated", "EventID", "LogonType", + "SubjectUserName", "SubjectUserSid", "SourceAddress", "SourcePort", + "Status", "FailureReason"], rows) + +# ═══════════════════════════════════════════════════════════════════════ +# 11. Proxy / web filter logs +# ═══════════════════════════════════════════════════════════════════════ + +def gen_proxy_logs(): + rows = [] + for host in HOSTS: # workstations only + n_entries = random.randint(15, 50) + user = rand_user() + for _ in range(n_entries): + if random.random() < 0.10: + dom = random.choice(AUP_DOMAINS) + url = f"https://{dom}/" + action = random.choice(["BLOCKED", "ALLOWED", "ALLOWED"]) + category = random.choice(["Gambling", "Gaming", "Streaming", "Adult", "Social Media", "Shopping", "Piracy"]) + else: + dom = random.choice(LEGIT_DOMAINS) + url = f"https://{dom}/api/v1/resource" + action = "ALLOWED" + category = random.choice(["Business", "Technology", "Cloud Services", "Productivity"]) + rows.append({ + "Timestamp": ts_str(), + "Hostname": host["hostname"], + "SourceIP": host["ip"], + "Username": f"ACME\\{user}", + "URL": url, + "Domain": dom, + "Action": action, + "Category": category, + "Method": random.choice(["GET", "POST", "GET", "GET"]), + "ResponseCode": random.choice([200, 200, 200, 301, 403, 404]) if action == "ALLOWED" else 403, + "BytesSent": random.randint(100, 50000), + "BytesReceived": random.randint(500, 500000), + }) + return rows + +rows = gen_proxy_logs() +write_csv("11_proxy_logs.csv", + ["Timestamp", "Hostname", "SourceIP", "Username", "URL", "Domain", + "Action", "Category", "Method", "ResponseCode", "BytesSent", "BytesReceived"], rows) + +# ═══════════════════════════════════════════════════════════════════════ +# 12. File listing — suspicious downloads (Velociraptor: Windows.Search.FileFinder) +# ═══════════════════════════════════════════════════════════════════════ + +DOWNLOAD_FILES = [ + ("Q1_Budget_2026.xlsx", 245000, "a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6"), + ("meeting_notes.docx", 89000, "b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7"), + ("vpn_config.ovpn", 1200, "c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8"), + ("project_plan.pptx", 1500000, "d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9"), + ("setup.exe", 45000000, "e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0"), + ("crack_photoshop.exe", 12000000, "f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1"), # AUP + ("keygen_v2.exe", 500000, "a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2"), # AUP + ("steam_installer.exe", 3500000, "b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3"), # AUP + ("free_movie_2026.torrent", 45000, "c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4"), # AUP + ("salary_comparison.pdf", 320000, "d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5"), +] + +def gen_file_listing(): + rows = [] + for host in HOSTS: + user = rand_user() + n_files = random.randint(3, 8) + selected = random.sample(DOWNLOAD_FILES, min(n_files, len(DOWNLOAD_FILES))) + for fname, size, md5 in selected: + rows.append({ + "Hostname": host["hostname"], + "SourceIP": host["ip"], + "FullPath": f"C:\\Users\\{user}\\Downloads\\{fname}", + "FileName": fname, + "Size": size, + "MD5": md5, + "SHA256": f"{random.randint(0, 2**256):064x}", + "MTime": ts_str(), + "CTime": ts_str(), + "Username": f"ACME\\{user}", + "OS": host.get("os", "Windows 10 Enterprise"), + }) + return rows + +rows = gen_file_listing() +write_csv("12_file_listing.csv", + ["Hostname", "SourceIP", "FullPath", "FileName", "Size", "MD5", "SHA256", + "MTime", "CTime", "Username", "OS"], rows) + +# ═══════════════════════════════════════════════════════════════════════ +# Summary +# ═══════════════════════════════════════════════════════════════════════ + +total = sum(len(list((OUT / f).open())) - 1 for f in os.listdir(OUT) if f.endswith(".csv")) +print(f"\nDone! 12 CSV files in {OUT}") +print(f"Network: {len(ALL_HOSTS)} hosts, {len(USERS)} users, {len(SUBNETS)} subnets") +print(f"AUP triggers in: DNS, browser history, proxy logs, autoruns, file listing, process list, sysmon") diff --git a/backend/tests/test_csvs/01_netstat_connections.csv b/backend/tests/test_csvs/01_netstat_connections.csv new file mode 100644 index 0000000..5771b57 --- /dev/null +++ b/backend/tests/test_csvs/01_netstat_connections.csv @@ -0,0 +1,2013 @@ +Hostname,Timestamp,Pid,Name,Status,Protocol,Laddr.IP,Laddr.Port,Raddr.IP,Raddr.Port,Username +HR-WS-001,2026-02-11T09:37:25.658Z,48640,cmd.exe,LISTEN,UDP,10.10.2.101,636,0.0.0.0,0,hbrown +HR-WS-001,2026-02-16T11:18:59.115Z,53146,lsass.exe,ESTABLISHED,TCP,10.10.2.101,135,10.10.2.170,389,svc_web +HR-WS-001,2026-02-11T22:52:11.549Z,62831,steam.exe,LISTEN,TCP,10.10.2.101,139,0.0.0.0,0,svc_sql +HR-WS-001,2026-02-11T03:42:00.178Z,19313,chrome.exe,CLOSE_WAIT,TCP,10.10.2.101,3389,155.135.22.187,88,svc_web +HR-WS-001,2026-02-14T07:01:53.602Z,29814,RuntimeBroker.exe,SYN_SENT,UDP,10.10.2.101,80,170.116.148.253,443,admin +HR-WS-001,2026-02-13T03:29:13.044Z,60746,teams.exe,TIME_WAIT,TCP,10.10.2.101,389,69.36.87.137,88,admin +HR-WS-001,2026-02-19T11:05:30.863Z,20722,powershell.exe,TIME_WAIT,TCP,10.10.2.101,80,207.161.205.69,60867,cjohnson +HR-WS-001,2026-02-20T17:19:53.200Z,9165,SearchHost.exe,CLOSE_WAIT,UDP,10.10.2.101,445,10.10.1.175,3389,hbrown +HR-WS-001,2026-02-20T10:46:10.539Z,56512,explorer.exe,ESTABLISHED,UDP,10.10.2.101,54394,10.10.2.149,445,jsmith +HR-WS-001,2026-02-18T06:29:25.979Z,33371,msedge.exe,SYN_SENT,TCP,10.10.2.101,443,10.10.2.101,636,agarcia +HR-WS-001,2026-02-20T00:16:28.754Z,57687,notepad.exe,SYN_SENT,TCP,10.10.2.101,445,10.10.1.142,443,svc_web +HR-WS-001,2026-02-20T04:42:43.811Z,10921,powershell.exe,ESTABLISHED,UDP,10.10.2.101,443,188.248.35.251,389,dlee +HR-WS-001,2026-02-12T16:10:27.603Z,22256,services.exe,CLOSE_WAIT,UDP,10.10.2.101,636,10.10.2.167,3389,jsmith +HR-WS-001,2026-02-12T19:30:04.170Z,43942,powershell.exe,SYN_SENT,UDP,10.10.2.101,443,10.10.3.105,636,gwhite +HR-WS-001,2026-02-14T00:34:27.809Z,27041,outlook.exe,SYN_SENT,TCP,10.10.2.101,135,201.242.208.49,88,gwhite +FIN-WS-002,2026-02-12T05:52:19.232Z,30418,spoolsv.exe,ESTABLISHED,TCP,10.10.3.102,636,10.10.2.125,88,cjohnson +FIN-WS-002,2026-02-15T08:20:22.576Z,56765,chrome.exe,CLOSE_WAIT,TCP,10.10.3.102,80,167.7.47.238,389,fthompson +FIN-WS-002,2026-02-13T10:10:37.042Z,63585,teams.exe,CLOSE_WAIT,TCP,10.10.3.102,139,10.10.1.172,3389,jsmith +FIN-WS-002,2026-02-11T01:07:49.199Z,4553,System,ESTABLISHED,TCP,10.10.3.102,80,150.244.80.15,8080,admin +FIN-WS-002,2026-02-12T11:03:53.279Z,47036,SearchHost.exe,ESTABLISHED,TCP,10.10.3.102,88,10.10.1.175,445,emartinez +FIN-WS-002,2026-02-20T00:15:16.498Z,61424,SearchHost.exe,LISTEN,TCP,10.10.3.102,3389,0.0.0.0,0,agarcia +FIN-WS-002,2026-02-14T04:22:54.379Z,10438,services.exe,SYN_SENT,TCP,10.10.3.102,53,55.135.67.239,3389,gwhite +FIN-WS-002,2026-02-18T01:36:15.015Z,10287,OneDrive.exe,TIME_WAIT,TCP,10.10.3.102,389,10.10.1.118,443,dlee +FIN-WS-002,2026-02-10T19:01:18.085Z,21959,code.exe,TIME_WAIT,UDP,10.10.3.102,53,10.10.1.13,445,svc_sql +FIN-WS-002,2026-02-10T10:25:02.729Z,5031,cmd.exe,LISTEN,TCP,10.10.3.102,53,0.0.0.0,0,svc_backup +FIN-WS-002,2026-02-17T06:44:00.069Z,23278,System,ESTABLISHED,TCP,10.10.3.102,5985,10.10.1.106,3389,svc_sql +SLS-WS-003,2026-02-10T14:11:47.725Z,48371,outlook.exe,LISTEN,UDP,10.10.1.103,5985,0.0.0.0,0,emartinez +SLS-WS-003,2026-02-17T15:19:10.369Z,25170,lsass.exe,LISTEN,TCP,10.10.1.103,54368,0.0.0.0,0,svc_web +SLS-WS-003,2026-02-13T12:17:51.780Z,52223,winlogon.exe,LISTEN,UDP,10.10.1.103,3389,0.0.0.0,0,svc_web +SLS-WS-003,2026-02-19T08:05:17.647Z,63466,svchost.exe,LISTEN,TCP,10.10.1.103,139,0.0.0.0,0,svc_sql +SLS-WS-003,2026-02-14T20:38:27.382Z,47845,spoolsv.exe,SYN_SENT,TCP,10.10.1.103,80,30.133.91.149,8128,svc_sql +SLS-WS-003,2026-02-17T11:42:51.432Z,61721,services.exe,SYN_SENT,TCP,10.10.1.103,88,49.130.22.182,636,svc_backup +SLS-WS-003,2026-02-13T17:32:44.614Z,45792,code.exe,TIME_WAIT,TCP,10.10.1.103,389,10.10.1.139,88,dlee +SLS-WS-003,2026-02-14T19:28:19.334Z,38109,code.exe,CLOSE_WAIT,TCP,10.10.1.103,88,10.10.2.101,3389,idavis +SLS-WS-003,2026-02-17T08:11:56.103Z,14822,csrss.exe,CLOSE_WAIT,TCP,10.10.1.103,53,10.10.1.166,3389,svc_sql +SLS-WS-003,2026-02-15T11:35:39.452Z,16089,svchost.exe,ESTABLISHED,UDP,10.10.1.103,88,218.37.233.107,88,bwilson +SLS-WS-003,2026-02-18T16:21:14.941Z,43850,svchost.exe,ESTABLISHED,TCP,10.10.1.103,445,206.237.25.143,8080,hbrown +SLS-WS-003,2026-02-18T07:27:12.315Z,34263,services.exe,TIME_WAIT,TCP,10.10.1.103,53,115.81.243.116,445,gwhite +SLS-WS-003,2026-02-12T17:48:55.331Z,45578,cmd.exe,CLOSE_WAIT,TCP,10.10.1.103,135,70.171.163.229,8080,bwilson +SLS-WS-003,2026-02-20T04:30:55.830Z,1380,chrome.exe,CLOSE_WAIT,TCP,10.10.1.103,53,10.10.1.154,60323,svc_web +SLS-WS-003,2026-02-13T04:14:01.780Z,31927,smss.exe,CLOSE_WAIT,TCP,10.10.1.103,3389,77.199.214.138,3389,jsmith +SLS-WS-003,2026-02-11T17:55:29.538Z,30357,MsMpEng.exe,CLOSE_WAIT,UDP,10.10.1.103,445,160.13.201.152,88,bwilson +SLS-WS-003,2026-02-15T05:34:36.152Z,49188,SearchHost.exe,TIME_WAIT,UDP,10.10.1.103,3389,10.10.1.154,443,hbrown +SLS-WS-003,2026-02-10T15:45:26.998Z,16305,RuntimeBroker.exe,LISTEN,TCP,10.10.1.103,50471,0.0.0.0,0,cjohnson +SLS-WS-003,2026-02-17T07:21:52.960Z,37060,services.exe,LISTEN,UDP,10.10.1.103,8080,0.0.0.0,0,cjohnson +SLS-WS-003,2026-02-16T07:56:57.055Z,59608,cmd.exe,TIME_WAIT,UDP,10.10.1.103,52905,210.83.159.28,445,fthompson +SLS-WS-003,2026-02-17T14:17:53.702Z,19864,OneDrive.exe,LISTEN,TCP,10.10.1.103,443,0.0.0.0,0,svc_web +SLS-WS-003,2026-02-18T21:34:57.826Z,7016,msedge.exe,SYN_SENT,TCP,10.10.1.103,53,110.189.35.130,88,fthompson +SLS-WS-003,2026-02-18T23:40:57.917Z,5779,spoolsv.exe,CLOSE_WAIT,UDP,10.10.1.103,445,10.10.3.156,3389,dlee +SLS-WS-003,2026-02-13T21:05:04.958Z,57792,powershell.exe,CLOSE_WAIT,TCP,10.10.1.103,3389,8.253.166.47,445,idavis +SLS-WS-003,2026-02-15T00:02:37.094Z,1230,cmd.exe,SYN_SENT,TCP,10.10.1.103,443,10.10.2.131,389,agarcia +SLS-WS-003,2026-02-16T02:22:05.659Z,22628,SearchHost.exe,LISTEN,TCP,10.10.1.103,8080,0.0.0.0,0,fthompson +SLS-WS-003,2026-02-20T05:43:09.804Z,45330,System,TIME_WAIT,TCP,10.10.1.103,139,10.10.2.125,636,bwilson +SLS-WS-003,2026-02-17T17:00:16.637Z,8395,winlogon.exe,TIME_WAIT,TCP,10.10.1.103,443,214.99.151.59,80,dlee +SLS-WS-003,2026-02-14T22:07:01.918Z,12182,explorer.exe,SYN_SENT,TCP,10.10.1.103,389,10.10.3.102,389,jsmith +SLS-WS-003,2026-02-11T13:36:46.405Z,50198,winlogon.exe,ESTABLISHED,TCP,10.10.1.103,8080,10.10.2.173,3389,fthompson +SLS-WS-003,2026-02-19T19:07:33.939Z,19587,services.exe,LISTEN,TCP,10.10.1.103,8080,0.0.0.0,0,svc_web +SLS-WS-003,2026-02-11T23:15:51.384Z,11491,lsass.exe,TIME_WAIT,TCP,10.10.1.103,88,10.10.2.128,443,hbrown +SLS-WS-003,2026-02-19T22:58:39.940Z,51731,svchost.exe,CLOSE_WAIT,TCP,10.10.1.103,139,10.10.2.137,3389,svc_sql +SLS-WS-003,2026-02-12T16:12:08.505Z,9864,MsMpEng.exe,LISTEN,TCP,10.10.1.103,53,0.0.0.0,0,dlee +ENG-WS-004,2026-02-15T11:26:55.697Z,5371,teams.exe,TIME_WAIT,TCP,10.10.2.104,8080,10.10.2.152,636,idavis +ENG-WS-004,2026-02-15T05:37:30.740Z,42797,lsass.exe,TIME_WAIT,TCP,10.10.2.104,80,24.117.10.196,8080,gwhite +ENG-WS-004,2026-02-13T18:27:03.297Z,45560,teams.exe,SYN_SENT,TCP,10.10.2.104,443,121.178.209.86,8080,gwhite +ENG-WS-004,2026-02-15T03:29:38.710Z,3652,SearchHost.exe,SYN_SENT,TCP,10.10.2.104,443,81.129.165.30,636,cjohnson +ENG-WS-004,2026-02-18T15:49:42.359Z,46616,services.exe,CLOSE_WAIT,TCP,10.10.2.104,135,69.67.147.113,2915,bwilson +ENG-WS-004,2026-02-15T15:13:04.813Z,18019,svchost.exe,SYN_SENT,TCP,10.10.2.104,135,216.58.236.243,445,fthompson +ENG-WS-004,2026-02-12T07:39:09.333Z,39380,winlogon.exe,LISTEN,TCP,10.10.2.104,5985,0.0.0.0,0,hbrown +ENG-WS-004,2026-02-14T23:38:12.653Z,31841,outlook.exe,ESTABLISHED,TCP,10.10.2.104,3389,10.10.1.139,8080,emartinez +ENG-WS-004,2026-02-17T16:18:25.092Z,53276,System,CLOSE_WAIT,TCP,10.10.2.104,135,179.122.196.60,389,fthompson +ENG-WS-004,2026-02-15T13:34:22.035Z,38778,MsMpEng.exe,LISTEN,TCP,10.10.2.104,445,0.0.0.0,0,emartinez +ENG-WS-004,2026-02-13T20:38:25.110Z,45497,csrss.exe,ESTABLISHED,TCP,10.10.2.104,80,185.73.209.223,445,fthompson +ENG-WS-004,2026-02-20T17:21:23.330Z,49040,taskhostw.exe,SYN_SENT,TCP,10.10.2.104,389,184.249.18.159,445,agarcia +ENG-WS-004,2026-02-14T19:40:18.109Z,16103,msedge.exe,ESTABLISHED,TCP,10.10.2.104,636,10.10.3.108,53,hbrown +ENG-WS-004,2026-02-16T16:22:22.608Z,25170,MsMpEng.exe,LISTEN,UDP,10.10.2.104,443,0.0.0.0,0,idavis +ENG-WS-004,2026-02-17T09:24:09.797Z,10453,winlogon.exe,SYN_SENT,UDP,10.10.2.104,8080,10.10.3.102,445,agarcia +ENG-WS-004,2026-02-14T07:20:27.867Z,23624,RuntimeBroker.exe,SYN_SENT,TCP,10.10.2.104,636,10.10.3.150,3389,idavis +ENG-WS-004,2026-02-12T14:45:04.085Z,12560,OneDrive.exe,TIME_WAIT,TCP,10.10.2.104,139,3.25.254.214,53,idavis +LEG-WS-005,2026-02-18T13:09:09.435Z,2286,MsMpEng.exe,LISTEN,TCP,10.10.3.105,139,0.0.0.0,0,idavis +LEG-WS-005,2026-02-19T20:22:18.277Z,54525,outlook.exe,ESTABLISHED,TCP,10.10.3.105,636,10.10.2.170,636,bwilson +LEG-WS-005,2026-02-10T11:28:46.789Z,35264,winlogon.exe,TIME_WAIT,TCP,10.10.3.105,8080,10.10.1.151,88,agarcia +LEG-WS-005,2026-02-12T15:20:30.480Z,4242,MsMpEng.exe,TIME_WAIT,TCP,10.10.3.105,389,10.10.2.104,61006,admin +LEG-WS-005,2026-02-11T17:54:57.643Z,29829,OneDrive.exe,TIME_WAIT,TCP,10.10.3.105,445,12.19.155.127,636,emartinez +LEG-WS-005,2026-02-12T14:19:02.716Z,29243,OneDrive.exe,SYN_SENT,TCP,10.10.3.105,5985,10.10.3.153,53,cjohnson +LEG-WS-005,2026-02-17T00:25:34.020Z,39234,msedge.exe,TIME_WAIT,TCP,10.10.3.105,80,10.10.2.116,3389,jsmith +LEG-WS-005,2026-02-18T23:27:16.053Z,36420,taskhostw.exe,LISTEN,UDP,10.10.3.105,443,0.0.0.0,0,cjohnson +LEG-WS-005,2026-02-11T16:57:02.906Z,23577,powershell.exe,TIME_WAIT,UDP,10.10.3.105,139,220.74.66.139,80,svc_sql +LEG-WS-005,2026-02-18T10:30:15.335Z,33735,smss.exe,TIME_WAIT,TCP,10.10.3.105,139,14.64.215.135,389,idavis +LEG-WS-005,2026-02-18T11:48:24.296Z,56918,dwm.exe,LISTEN,TCP,10.10.3.105,636,0.0.0.0,0,admin +LEG-WS-005,2026-02-13T16:31:40.637Z,9821,csrss.exe,ESTABLISHED,TCP,10.10.3.105,5985,110.55.251.183,443,agarcia +LEG-WS-005,2026-02-19T05:11:53.463Z,42758,services.exe,SYN_SENT,TCP,10.10.3.105,5985,10.10.1.11,443,svc_sql +LEG-WS-005,2026-02-17T06:16:37.076Z,24630,code.exe,CLOSE_WAIT,TCP,10.10.3.105,5985,10.10.2.113,53,bwilson +LEG-WS-005,2026-02-16T04:25:15.043Z,44009,winlogon.exe,ESTABLISHED,TCP,10.10.3.105,443,111.49.190.208,636,agarcia +LEG-WS-005,2026-02-12T16:03:40.382Z,7192,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.3.105,88,80.180.53.148,389,emartinez +LEG-WS-005,2026-02-19T22:23:03.768Z,23104,RuntimeBroker.exe,ESTABLISHED,TCP,10.10.3.105,56562,10.10.1.124,445,jsmith +LEG-WS-005,2026-02-15T01:24:41.211Z,10415,outlook.exe,SYN_SENT,TCP,10.10.3.105,445,190.15.46.192,88,emartinez +LEG-WS-005,2026-02-15T09:24:55.534Z,29069,taskhostw.exe,SYN_SENT,TCP,10.10.3.105,80,10.10.3.111,88,fthompson +LEG-WS-005,2026-02-10T09:55:18.377Z,19853,dwm.exe,ESTABLISHED,TCP,10.10.3.105,443,10.10.3.129,80,cjohnson +LEG-WS-005,2026-02-19T00:20:18.782Z,52935,cmd.exe,TIME_WAIT,TCP,10.10.3.105,80,128.220.89.34,636,emartinez +LEG-WS-005,2026-02-14T13:15:29.076Z,63420,spotify.exe,ESTABLISHED,TCP,10.10.3.105,8080,10.10.2.152,443,emartinez +LEG-WS-005,2026-02-14T10:56:30.027Z,20434,services.exe,CLOSE_WAIT,TCP,10.10.3.105,5985,10.10.1.10,443,svc_backup +LEG-WS-005,2026-02-15T15:29:16.856Z,59470,taskhostw.exe,LISTEN,TCP,10.10.3.105,53,0.0.0.0,0,svc_sql +MKT-WS-006,2026-02-12T23:59:31.399Z,11470,spoolsv.exe,LISTEN,UDP,10.10.1.106,445,0.0.0.0,0,idavis +MKT-WS-006,2026-02-11T01:04:17.632Z,29080,spoolsv.exe,ESTABLISHED,UDP,10.10.1.106,8080,10.10.2.11,389,admin +MKT-WS-006,2026-02-11T03:10:57.901Z,56739,cmd.exe,SYN_SENT,TCP,10.10.1.106,53,19.158.236.116,445,svc_web +MKT-WS-006,2026-02-15T06:54:26.125Z,9986,services.exe,SYN_SENT,TCP,10.10.1.106,88,142.21.230.233,22095,jsmith +MKT-WS-006,2026-02-19T21:29:03.110Z,25489,taskhostw.exe,ESTABLISHED,TCP,10.10.1.106,80,64.224.224.135,53,fthompson +MKT-WS-006,2026-02-16T09:41:05.563Z,9368,MsMpEng.exe,SYN_SENT,TCP,10.10.1.106,443,85.48.197.73,443,emartinez +MKT-WS-006,2026-02-15T15:07:19.637Z,1294,spoolsv.exe,CLOSE_WAIT,UDP,10.10.1.106,139,144.192.168.209,88,emartinez +MKT-WS-006,2026-02-19T11:05:53.495Z,40603,code.exe,TIME_WAIT,TCP,10.10.1.106,135,36.79.39.76,53,bwilson +MKT-WS-006,2026-02-14T21:25:06.064Z,27026,outlook.exe,LISTEN,UDP,10.10.1.106,636,0.0.0.0,0,emartinez +MKT-WS-006,2026-02-19T17:59:36.904Z,12815,powershell.exe,CLOSE_WAIT,TCP,10.10.1.106,58488,10.10.2.131,389,emartinez +MKT-WS-006,2026-02-10T21:02:41.822Z,31595,smss.exe,CLOSE_WAIT,TCP,10.10.1.106,58385,98.214.82.210,445,svc_web +MKT-WS-006,2026-02-11T06:55:42.212Z,59770,msedge.exe,SYN_SENT,TCP,10.10.1.106,443,196.82.139.116,88,cjohnson +MKT-WS-006,2026-02-13T15:40:16.387Z,6593,RuntimeBroker.exe,ESTABLISHED,TCP,10.10.1.106,5985,10.10.3.111,80,svc_web +MKT-WS-006,2026-02-19T21:20:56.554Z,31062,taskhostw.exe,LISTEN,UDP,10.10.1.106,139,0.0.0.0,0,svc_backup +MKT-WS-006,2026-02-12T19:24:36.203Z,8085,OneDrive.exe,CLOSE_WAIT,TCP,10.10.1.106,443,10.10.3.120,445,jsmith +MKT-WS-006,2026-02-13T08:49:04.788Z,202,spoolsv.exe,SYN_SENT,TCP,10.10.1.106,443,215.255.8.162,8080,idavis +MKT-WS-006,2026-02-20T13:15:35.480Z,16723,smss.exe,CLOSE_WAIT,UDP,10.10.1.106,53,93.34.10.100,88,svc_backup +MKT-WS-006,2026-02-18T19:22:37.979Z,11574,steam.exe,ESTABLISHED,TCP,10.10.1.106,636,10.10.1.106,53,svc_web +MKT-WS-006,2026-02-19T13:26:51.347Z,20782,csrss.exe,CLOSE_WAIT,UDP,10.10.1.106,443,184.234.18.76,3389,dlee +MKT-WS-006,2026-02-18T15:50:08.170Z,28736,System,CLOSE_WAIT,TCP,10.10.1.106,50351,10.10.2.107,443,fthompson +MKT-WS-006,2026-02-16T14:36:47.968Z,53992,SearchHost.exe,TIME_WAIT,UDP,10.10.1.106,636,10.10.3.111,88,bwilson +MKT-WS-006,2026-02-13T23:53:12.285Z,2875,taskhostw.exe,ESTABLISHED,TCP,10.10.1.106,389,76.156.228.155,389,svc_backup +MKT-WS-006,2026-02-18T16:16:26.378Z,44625,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.106,389,10.10.1.13,636,bwilson +MKT-WS-006,2026-02-17T09:45:55.851Z,62282,outlook.exe,SYN_SENT,TCP,10.10.1.106,445,18.120.187.93,8080,emartinez +MKT-WS-006,2026-02-15T12:45:39.564Z,25461,chrome.exe,SYN_SENT,UDP,10.10.1.106,5985,81.142.127.246,8080,hbrown +MKT-WS-006,2026-02-20T17:18:56.163Z,53217,cmd.exe,CLOSE_WAIT,UDP,10.10.1.106,636,10.10.2.110,389,admin +MKT-WS-006,2026-02-18T14:00:59.106Z,15614,taskhostw.exe,TIME_WAIT,TCP,10.10.1.106,139,218.80.89.204,3389,svc_sql +MKT-WS-006,2026-02-15T19:25:26.089Z,50507,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.106,8080,10.10.2.140,389,fthompson +MKT-WS-006,2026-02-15T04:27:29.879Z,34005,chrome.exe,LISTEN,TCP,10.10.1.106,8080,0.0.0.0,0,emartinez +MKT-WS-006,2026-02-13T16:39:54.676Z,46586,System,SYN_SENT,UDP,10.10.1.106,5985,10.10.3.120,8080,cjohnson +EXEC-WS-007,2026-02-16T11:57:07.600Z,38153,dwm.exe,TIME_WAIT,TCP,10.10.2.107,135,163.140.64.161,8080,bwilson +EXEC-WS-007,2026-02-15T12:30:34.254Z,41201,services.exe,SYN_SENT,TCP,10.10.2.107,80,10.10.1.127,80,hbrown +EXEC-WS-007,2026-02-12T11:00:20.712Z,39858,notepad.exe,CLOSE_WAIT,UDP,10.10.2.107,139,10.10.1.157,389,bwilson +EXEC-WS-007,2026-02-15T00:23:56.410Z,9332,OneDrive.exe,TIME_WAIT,TCP,10.10.2.107,445,10.10.2.131,445,agarcia +EXEC-WS-007,2026-02-15T12:41:23.737Z,20320,SearchHost.exe,SYN_SENT,TCP,10.10.2.107,445,10.10.1.121,389,gwhite +EXEC-WS-007,2026-02-13T07:26:13.543Z,635,SearchHost.exe,SYN_SENT,TCP,10.10.2.107,135,10.10.2.137,389,svc_web +EXEC-WS-007,2026-02-13T08:09:01.527Z,25419,outlook.exe,TIME_WAIT,TCP,10.10.2.107,3389,12.205.26.146,636,hbrown +EXEC-WS-007,2026-02-12T09:45:52.093Z,33465,System,TIME_WAIT,TCP,10.10.2.107,445,10.10.3.144,8080,fthompson +EXEC-WS-007,2026-02-13T15:37:57.028Z,25852,explorer.exe,ESTABLISHED,UDP,10.10.2.107,60065,122.233.76.156,22517,idavis +EXEC-WS-007,2026-02-20T12:58:28.228Z,38353,notepad.exe,SYN_SENT,TCP,10.10.2.107,636,10.10.1.103,443,dlee +EXEC-WS-007,2026-02-18T09:39:05.516Z,25016,OneDrive.exe,ESTABLISHED,TCP,10.10.2.107,139,168.116.26.150,35380,bwilson +EXEC-WS-007,2026-02-14T14:35:39.668Z,50888,powershell.exe,ESTABLISHED,TCP,10.10.2.107,135,10.10.3.120,3389,idavis +EXEC-WS-007,2026-02-13T17:15:44.580Z,43499,explorer.exe,LISTEN,TCP,10.10.2.107,53,0.0.0.0,0,gwhite +EXEC-WS-007,2026-02-14T00:34:18.289Z,50693,taskhostw.exe,LISTEN,TCP,10.10.2.107,53,0.0.0.0,0,svc_web +EXEC-WS-007,2026-02-17T12:33:35.920Z,32147,spoolsv.exe,TIME_WAIT,TCP,10.10.2.107,135,10.10.1.139,3389,emartinez +EXEC-WS-007,2026-02-13T07:54:27.307Z,46901,System,TIME_WAIT,TCP,10.10.2.107,88,174.194.202.210,80,agarcia +EXEC-WS-007,2026-02-17T07:27:30.568Z,34902,csrss.exe,TIME_WAIT,TCP,10.10.2.107,135,212.138.139.36,80,cjohnson +EXEC-WS-007,2026-02-15T07:21:43.668Z,13171,explorer.exe,ESTABLISHED,TCP,10.10.2.107,636,121.51.70.2,389,svc_sql +EXEC-WS-007,2026-02-20T01:28:50.349Z,2481,taskhostw.exe,TIME_WAIT,TCP,10.10.2.107,389,10.10.3.123,8080,svc_web +EXEC-WS-007,2026-02-13T10:35:52.989Z,39603,winlogon.exe,LISTEN,TCP,10.10.2.107,80,0.0.0.0,0,agarcia +EXEC-WS-007,2026-02-17T02:04:16.804Z,47194,taskhostw.exe,TIME_WAIT,TCP,10.10.2.107,445,10.10.1.115,389,bwilson +EXEC-WS-007,2026-02-12T06:11:43.080Z,9315,taskhostw.exe,TIME_WAIT,TCP,10.10.2.107,445,157.207.218.132,443,gwhite +EXEC-WS-007,2026-02-17T13:11:31.731Z,4171,powershell.exe,ESTABLISHED,TCP,10.10.2.107,135,115.136.168.78,53,admin +EXEC-WS-007,2026-02-11T13:21:14.171Z,60139,notepad.exe,LISTEN,TCP,10.10.2.107,636,0.0.0.0,0,dlee +EXEC-WS-007,2026-02-15T01:44:40.805Z,64904,powershell.exe,LISTEN,UDP,10.10.2.107,445,0.0.0.0,0,idavis +EXEC-WS-007,2026-02-11T12:03:07.912Z,54414,OneDrive.exe,SYN_SENT,TCP,10.10.2.107,56308,64.41.228.136,61136,hbrown +EXEC-WS-007,2026-02-14T23:22:14.422Z,3746,code.exe,SYN_SENT,TCP,10.10.2.107,445,10.10.1.127,636,gwhite +EXEC-WS-007,2026-02-16T08:34:40.138Z,3068,lsass.exe,CLOSE_WAIT,TCP,10.10.2.107,53,119.157.11.102,3389,fthompson +EXEC-WS-007,2026-02-15T00:08:03.419Z,60204,chrome.exe,SYN_SENT,TCP,10.10.2.107,8080,10.10.1.118,88,fthompson +EXEC-WS-007,2026-02-20T12:37:21.614Z,30443,MsMpEng.exe,SYN_SENT,UDP,10.10.2.107,443,46.201.65.187,80,admin +IT-WS-008,2026-02-13T04:54:44.755Z,61534,powershell.exe,LISTEN,TCP,10.10.3.108,445,0.0.0.0,0,svc_backup +IT-WS-008,2026-02-12T21:11:00.736Z,2999,explorer.exe,CLOSE_WAIT,TCP,10.10.3.108,135,10.10.3.105,80,fthompson +IT-WS-008,2026-02-20T16:22:15.097Z,15446,System,LISTEN,TCP,10.10.3.108,53,0.0.0.0,0,svc_web +IT-WS-008,2026-02-20T05:07:48.229Z,57752,smss.exe,TIME_WAIT,TCP,10.10.3.108,135,10.10.1.139,636,svc_backup +IT-WS-008,2026-02-14T06:06:54.169Z,49541,spoolsv.exe,CLOSE_WAIT,TCP,10.10.3.108,80,10.10.1.154,445,hbrown +IT-WS-008,2026-02-12T23:44:56.081Z,21744,powershell.exe,TIME_WAIT,UDP,10.10.3.108,80,144.211.213.143,3389,admin +IT-WS-008,2026-02-17T21:04:34.715Z,36724,csrss.exe,TIME_WAIT,TCP,10.10.3.108,80,69.193.20.224,53757,cjohnson +IT-WS-008,2026-02-16T02:01:11.363Z,50924,taskhostw.exe,TIME_WAIT,TCP,10.10.3.108,135,190.60.245.235,3389,dlee +IT-WS-008,2026-02-14T04:40:34.429Z,27227,System,TIME_WAIT,TCP,10.10.3.108,3389,10.10.2.161,3389,jsmith +IT-WS-008,2026-02-20T01:41:22.425Z,38054,powershell.exe,LISTEN,TCP,10.10.3.108,53,0.0.0.0,0,svc_backup +IT-WS-008,2026-02-16T06:26:50.561Z,16204,outlook.exe,LISTEN,TCP,10.10.3.108,5985,0.0.0.0,0,gwhite +IT-WS-008,2026-02-15T10:04:44.689Z,60189,MsMpEng.exe,TIME_WAIT,TCP,10.10.3.108,636,165.251.235.44,636,hbrown +IT-WS-008,2026-02-10T10:17:07.315Z,33243,explorer.exe,SYN_SENT,TCP,10.10.3.108,389,13.3.211.36,8080,gwhite +IT-WS-008,2026-02-10T12:17:08.337Z,53391,services.exe,SYN_SENT,TCP,10.10.3.108,80,10.10.3.168,445,svc_backup +IT-WS-008,2026-02-15T02:44:57.970Z,16038,teams.exe,ESTABLISHED,TCP,10.10.3.108,135,50.129.181.69,88,svc_backup +IT-WS-008,2026-02-11T04:40:17.510Z,55499,MsMpEng.exe,ESTABLISHED,TCP,10.10.3.108,5985,98.193.243.15,8080,fthompson +IT-WS-008,2026-02-16T04:52:38.877Z,2256,taskhostw.exe,SYN_SENT,TCP,10.10.3.108,135,10.10.2.110,636,bwilson +IT-WS-008,2026-02-17T09:15:31.469Z,35526,taskhostw.exe,ESTABLISHED,UDP,10.10.3.108,53876,211.203.39.77,88,emartinez +IT-WS-008,2026-02-20T06:42:52.557Z,26098,outlook.exe,ESTABLISHED,TCP,10.10.3.108,80,10.10.2.110,40684,svc_sql +IT-WS-008,2026-02-13T09:50:41.532Z,16251,spoolsv.exe,TIME_WAIT,TCP,10.10.3.108,135,10.10.1.175,6640,svc_backup +IT-WS-008,2026-02-14T09:24:19.777Z,23738,cmd.exe,LISTEN,TCP,10.10.3.108,636,0.0.0.0,0,agarcia +IT-WS-008,2026-02-11T06:24:16.957Z,36421,notepad.exe,CLOSE_WAIT,TCP,10.10.3.108,443,10.10.2.158,80,agarcia +IT-WS-008,2026-02-12T02:22:31.570Z,17723,taskhostw.exe,CLOSE_WAIT,TCP,10.10.3.108,5985,100.43.124.147,88,dlee +IT-WS-008,2026-02-17T20:13:29.507Z,32592,outlook.exe,ESTABLISHED,UDP,10.10.3.108,139,10.10.2.110,3389,idavis +IT-WS-008,2026-02-18T19:52:07.923Z,56428,csrss.exe,ESTABLISHED,UDP,10.10.3.108,80,10.10.2.143,88,admin +IT-WS-008,2026-02-20T09:56:26.776Z,51347,outlook.exe,TIME_WAIT,TCP,10.10.3.108,8080,10.10.3.141,389,cjohnson +IT-WS-008,2026-02-18T23:49:13.627Z,4632,cmd.exe,CLOSE_WAIT,TCP,10.10.3.108,88,52.92.13.244,445,svc_web +IT-WS-008,2026-02-15T07:48:31.229Z,26367,lsass.exe,CLOSE_WAIT,UDP,10.10.3.108,135,65.78.216.203,30454,hbrown +IT-WS-008,2026-02-10T19:04:27.024Z,64561,OneDrive.exe,CLOSE_WAIT,TCP,10.10.3.108,50356,10.10.3.132,11925,admin +IT-WS-008,2026-02-14T09:47:00.751Z,50716,SearchHost.exe,TIME_WAIT,TCP,10.10.3.108,80,26.132.113.131,53,admin +IT-WS-008,2026-02-11T10:08:14.422Z,27361,dwm.exe,LISTEN,TCP,10.10.3.108,8080,0.0.0.0,0,agarcia +IT-WS-008,2026-02-13T15:43:38.526Z,19778,outlook.exe,TIME_WAIT,TCP,10.10.3.108,8080,201.105.247.90,389,jsmith +IT-WS-008,2026-02-14T18:35:32.445Z,30381,msedge.exe,ESTABLISHED,TCP,10.10.3.108,389,205.84.124.133,636,cjohnson +IT-WS-008,2026-02-10T15:17:53.046Z,40346,spoolsv.exe,LISTEN,UDP,10.10.3.108,5985,0.0.0.0,0,cjohnson +IT-WS-008,2026-02-12T09:16:06.847Z,7568,lsass.exe,CLOSE_WAIT,TCP,10.10.3.108,135,72.32.52.205,53,dlee +HR-WS-009,2026-02-19T21:40:14.321Z,38777,spoolsv.exe,TIME_WAIT,TCP,10.10.1.109,88,101.58.178.91,445,agarcia +HR-WS-009,2026-02-16T07:42:05.440Z,27824,taskhostw.exe,ESTABLISHED,UDP,10.10.1.109,443,10.10.3.150,8080,bwilson +HR-WS-009,2026-02-13T08:12:31.296Z,12361,System,LISTEN,TCP,10.10.1.109,8080,0.0.0.0,0,emartinez +HR-WS-009,2026-02-14T15:54:27.391Z,55143,services.exe,ESTABLISHED,TCP,10.10.1.109,8080,10.10.1.172,389,gwhite +HR-WS-009,2026-02-16T05:24:45.415Z,50729,chrome.exe,SYN_SENT,TCP,10.10.1.109,139,9.140.115.138,389,svc_sql +HR-WS-009,2026-02-17T23:59:49.827Z,42939,dwm.exe,ESTABLISHED,TCP,10.10.1.109,139,199.187.21.195,443,svc_sql +HR-WS-009,2026-02-16T22:11:33.567Z,10977,explorer.exe,CLOSE_WAIT,TCP,10.10.1.109,443,10.10.1.10,57453,idavis +HR-WS-009,2026-02-13T06:16:16.516Z,35408,code.exe,LISTEN,TCP,10.10.1.109,53,0.0.0.0,0,bwilson +HR-WS-009,2026-02-17T15:21:23.874Z,8796,OneDrive.exe,TIME_WAIT,TCP,10.10.1.109,53,174.48.69.247,8080,cjohnson +HR-WS-009,2026-02-16T08:21:22.976Z,17710,taskhostw.exe,LISTEN,TCP,10.10.1.109,445,0.0.0.0,0,admin +HR-WS-009,2026-02-19T09:13:36.986Z,55619,csrss.exe,ESTABLISHED,TCP,10.10.1.109,53,10.10.1.163,80,svc_backup +HR-WS-009,2026-02-16T08:29:00.276Z,37202,csrss.exe,TIME_WAIT,TCP,10.10.1.109,135,10.10.1.142,636,svc_web +HR-WS-009,2026-02-20T15:57:34.414Z,28136,taskhostw.exe,ESTABLISHED,TCP,10.10.1.109,389,10.10.1.121,80,cjohnson +HR-WS-009,2026-02-16T20:24:03.846Z,47678,outlook.exe,TIME_WAIT,UDP,10.10.1.109,443,168.184.128.22,88,svc_backup +HR-WS-009,2026-02-17T13:53:57.396Z,53650,lsass.exe,ESTABLISHED,TCP,10.10.1.109,135,10.10.3.129,80,agarcia +HR-WS-009,2026-02-14T07:46:02.933Z,47991,lsass.exe,LISTEN,TCP,10.10.1.109,135,0.0.0.0,0,svc_sql +HR-WS-009,2026-02-14T22:01:29.478Z,47445,taskhostw.exe,TIME_WAIT,TCP,10.10.1.109,5985,199.68.73.18,8080,cjohnson +HR-WS-009,2026-02-13T14:37:33.301Z,9263,outlook.exe,CLOSE_WAIT,TCP,10.10.1.109,135,10.10.2.116,88,cjohnson +HR-WS-009,2026-02-20T03:19:11.320Z,1857,chrome.exe,LISTEN,TCP,10.10.1.109,58488,0.0.0.0,0,svc_web +HR-WS-009,2026-02-14T09:56:15.914Z,42447,notepad.exe,LISTEN,TCP,10.10.1.109,636,0.0.0.0,0,jsmith +HR-WS-009,2026-02-19T07:12:12.603Z,37349,powershell.exe,CLOSE_WAIT,TCP,10.10.1.109,135,10.10.3.147,88,fthompson +HR-WS-009,2026-02-16T10:50:27.147Z,1003,MsMpEng.exe,LISTEN,TCP,10.10.1.109,80,0.0.0.0,0,dlee +HR-WS-009,2026-02-15T22:24:49.822Z,10106,explorer.exe,CLOSE_WAIT,TCP,10.10.1.109,389,183.212.216.180,636,dlee +HR-WS-009,2026-02-11T05:33:11.518Z,28574,chrome.exe,SYN_SENT,UDP,10.10.1.109,53,84.200.33.80,3389,agarcia +HR-WS-009,2026-02-18T11:44:48.391Z,47336,services.exe,ESTABLISHED,TCP,10.10.1.109,443,10.10.2.164,636,dlee +HR-WS-009,2026-02-16T20:52:59.549Z,32615,outlook.exe,TIME_WAIT,TCP,10.10.1.109,3389,10.10.1.109,47706,gwhite +HR-WS-009,2026-02-10T08:38:31.655Z,56375,explorer.exe,CLOSE_WAIT,TCP,10.10.1.109,3389,41.130.52.229,636,svc_web +HR-WS-009,2026-02-13T03:48:52.162Z,5204,explorer.exe,CLOSE_WAIT,TCP,10.10.1.109,445,46.18.214.58,53,idavis +HR-WS-009,2026-02-13T17:49:30.829Z,36347,dwm.exe,ESTABLISHED,UDP,10.10.1.109,56465,10.10.1.160,445,gwhite +HR-WS-009,2026-02-17T23:06:57.003Z,35919,code.exe,TIME_WAIT,TCP,10.10.1.109,636,10.10.1.10,3389,svc_sql +HR-WS-009,2026-02-19T04:15:05.389Z,47758,outlook.exe,ESTABLISHED,TCP,10.10.1.109,135,139.177.4.244,88,dlee +HR-WS-009,2026-02-20T11:08:23.312Z,9430,dwm.exe,LISTEN,TCP,10.10.1.109,80,0.0.0.0,0,svc_backup +HR-WS-009,2026-02-19T15:53:40.146Z,30145,explorer.exe,LISTEN,TCP,10.10.1.109,636,0.0.0.0,0,svc_backup +HR-WS-009,2026-02-19T04:43:42.335Z,60789,msedge.exe,SYN_SENT,UDP,10.10.1.109,443,152.31.222.170,445,svc_sql +HR-WS-009,2026-02-12T01:05:37.482Z,30643,taskhostw.exe,TIME_WAIT,TCP,10.10.1.109,135,20.103.69.200,443,emartinez +HR-WS-009,2026-02-10T18:04:56.827Z,54883,System,TIME_WAIT,UDP,10.10.1.109,139,10.10.1.121,55182,svc_web +HR-WS-009,2026-02-10T20:14:15.555Z,19684,chrome.exe,LISTEN,TCP,10.10.1.109,53,0.0.0.0,0,dlee +HR-WS-009,2026-02-10T23:25:02.266Z,51280,teams.exe,ESTABLISHED,TCP,10.10.1.109,53,192.127.48.119,80,cjohnson +HR-WS-009,2026-02-11T14:37:54.893Z,61853,SearchHost.exe,TIME_WAIT,TCP,10.10.1.109,443,6.33.101.232,53,gwhite +FIN-WS-010,2026-02-14T23:30:10.287Z,9840,smss.exe,CLOSE_WAIT,TCP,10.10.2.110,80,98.218.88.91,445,jsmith +FIN-WS-010,2026-02-19T12:41:40.716Z,31493,services.exe,LISTEN,TCP,10.10.2.110,5985,0.0.0.0,0,jsmith +FIN-WS-010,2026-02-19T13:09:47.264Z,34559,SearchHost.exe,LISTEN,TCP,10.10.2.110,389,0.0.0.0,0,cjohnson +FIN-WS-010,2026-02-12T04:57:14.286Z,20997,System,ESTABLISHED,TCP,10.10.2.110,8080,10.10.2.173,445,idavis +FIN-WS-010,2026-02-18T20:04:16.645Z,60213,cmd.exe,ESTABLISHED,TCP,10.10.2.110,60864,150.119.81.26,636,svc_backup +FIN-WS-010,2026-02-20T04:53:22.861Z,37036,powershell.exe,SYN_SENT,TCP,10.10.2.110,445,46.121.162.207,53,bwilson +FIN-WS-010,2026-02-15T07:29:50.089Z,21840,code.exe,CLOSE_WAIT,TCP,10.10.2.110,445,126.19.46.15,636,idavis +FIN-WS-010,2026-02-14T05:23:51.702Z,61829,outlook.exe,TIME_WAIT,UDP,10.10.2.110,80,10.10.1.115,443,admin +FIN-WS-010,2026-02-17T13:23:24.358Z,60972,msedge.exe,TIME_WAIT,TCP,10.10.2.110,445,41.223.249.167,636,idavis +FIN-WS-010,2026-02-10T16:05:44.468Z,39578,powershell.exe,SYN_SENT,UDP,10.10.2.110,139,10.10.2.101,56779,emartinez +FIN-WS-010,2026-02-11T19:09:39.031Z,48946,services.exe,LISTEN,TCP,10.10.2.110,8080,0.0.0.0,0,agarcia +SLS-WS-011,2026-02-10T10:50:56.058Z,13841,taskhostw.exe,LISTEN,TCP,10.10.3.111,8080,0.0.0.0,0,cjohnson +SLS-WS-011,2026-02-13T23:48:28.052Z,24698,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.3.111,80,10.10.2.122,88,agarcia +SLS-WS-011,2026-02-18T15:47:55.109Z,2289,smss.exe,LISTEN,UDP,10.10.3.111,443,0.0.0.0,0,dlee +SLS-WS-011,2026-02-19T15:18:23.555Z,46270,cmd.exe,ESTABLISHED,TCP,10.10.3.111,445,10.10.1.112,39954,jsmith +SLS-WS-011,2026-02-10T21:23:20.168Z,21798,spoolsv.exe,LISTEN,TCP,10.10.3.111,445,0.0.0.0,0,cjohnson +SLS-WS-011,2026-02-19T01:57:49.054Z,10165,lsass.exe,SYN_SENT,TCP,10.10.3.111,389,10.10.2.107,636,jsmith +SLS-WS-011,2026-02-15T06:23:33.586Z,7669,lsass.exe,ESTABLISHED,TCP,10.10.3.111,135,10.10.1.13,443,dlee +SLS-WS-011,2026-02-10T19:09:15.232Z,28918,winlogon.exe,CLOSE_WAIT,TCP,10.10.3.111,389,10.10.2.149,389,gwhite +SLS-WS-011,2026-02-12T16:52:41.482Z,4096,cmd.exe,SYN_SENT,TCP,10.10.3.111,54104,10.10.1.145,64640,svc_web +SLS-WS-011,2026-02-19T17:06:49.555Z,52558,dwm.exe,CLOSE_WAIT,TCP,10.10.3.111,88,61.243.153.21,33929,idavis +SLS-WS-011,2026-02-20T05:15:55.334Z,11055,services.exe,LISTEN,TCP,10.10.3.111,445,0.0.0.0,0,cjohnson +SLS-WS-011,2026-02-11T05:45:24.696Z,36561,outlook.exe,ESTABLISHED,TCP,10.10.3.111,389,10.10.2.10,443,fthompson +SLS-WS-011,2026-02-16T09:40:09.378Z,63331,cmd.exe,SYN_SENT,TCP,10.10.3.111,49557,180.214.57.107,38156,agarcia +SLS-WS-011,2026-02-13T04:51:12.727Z,9527,smss.exe,ESTABLISHED,TCP,10.10.3.111,5985,10.10.1.11,8080,idavis +SLS-WS-011,2026-02-10T13:03:29.599Z,53668,OneDrive.exe,CLOSE_WAIT,TCP,10.10.3.111,3389,10.10.2.161,53,svc_sql +SLS-WS-011,2026-02-12T12:50:51.451Z,54099,cmd.exe,CLOSE_WAIT,TCP,10.10.3.111,445,77.226.164.69,389,fthompson +SLS-WS-011,2026-02-19T10:47:42.500Z,13254,dwm.exe,TIME_WAIT,TCP,10.10.3.111,443,80.206.69.200,3389,svc_web +SLS-WS-011,2026-02-17T10:17:36.924Z,15955,explorer.exe,CLOSE_WAIT,TCP,10.10.3.111,636,10.10.1.160,443,emartinez +SLS-WS-011,2026-02-12T00:52:42.253Z,58721,csrss.exe,LISTEN,TCP,10.10.3.111,3389,0.0.0.0,0,dlee +SLS-WS-011,2026-02-13T03:16:15.221Z,26937,OneDrive.exe,ESTABLISHED,TCP,10.10.3.111,5985,13.83.109.220,3389,hbrown +SLS-WS-011,2026-02-14T17:57:06.120Z,24772,qbittorrent.exe,ESTABLISHED,TCP,10.10.3.111,389,10.10.1.11,445,svc_web +SLS-WS-011,2026-02-15T18:09:34.108Z,40968,cmd.exe,LISTEN,TCP,10.10.3.111,389,0.0.0.0,0,fthompson +SLS-WS-011,2026-02-19T07:22:22.440Z,17214,svchost.exe,SYN_SENT,TCP,10.10.3.111,139,10.10.3.144,53,admin +ENG-WS-012,2026-02-13T15:53:47.164Z,9270,dwm.exe,LISTEN,TCP,10.10.1.112,389,0.0.0.0,0,svc_backup +ENG-WS-012,2026-02-15T14:49:43.370Z,55505,winlogon.exe,TIME_WAIT,TCP,10.10.1.112,5985,10.10.3.129,53,bwilson +ENG-WS-012,2026-02-11T15:59:09.725Z,17051,System,LISTEN,TCP,10.10.1.112,8080,0.0.0.0,0,svc_backup +ENG-WS-012,2026-02-13T09:30:46.009Z,55885,teams.exe,TIME_WAIT,TCP,10.10.1.112,3389,10.10.2.143,18100,agarcia +ENG-WS-012,2026-02-11T18:20:28.733Z,13226,spoolsv.exe,SYN_SENT,TCP,10.10.1.112,8080,10.10.1.139,8080,emartinez +ENG-WS-012,2026-02-10T09:10:42.151Z,18025,smss.exe,CLOSE_WAIT,UDP,10.10.1.112,636,47.41.249.86,80,cjohnson +ENG-WS-012,2026-02-20T09:19:55.056Z,25221,teams.exe,SYN_SENT,UDP,10.10.1.112,65194,10.10.3.156,88,jsmith +ENG-WS-012,2026-02-13T14:01:23.034Z,6831,code.exe,TIME_WAIT,TCP,10.10.1.112,59710,214.97.9.174,53,fthompson +ENG-WS-012,2026-02-20T05:06:57.037Z,29979,notepad.exe,LISTEN,TCP,10.10.1.112,139,0.0.0.0,0,svc_backup +ENG-WS-012,2026-02-17T21:47:31.945Z,8698,dwm.exe,TIME_WAIT,TCP,10.10.1.112,3389,126.183.96.43,3389,cjohnson +ENG-WS-012,2026-02-16T19:47:01.299Z,39023,smss.exe,SYN_SENT,UDP,10.10.1.112,3389,10.10.1.13,636,jsmith +ENG-WS-012,2026-02-12T11:22:25.424Z,45040,spoolsv.exe,ESTABLISHED,TCP,10.10.1.112,5985,10.10.1.133,8080,admin +ENG-WS-012,2026-02-18T12:11:24.059Z,32719,lsass.exe,ESTABLISHED,TCP,10.10.1.112,88,156.70.214.213,443,cjohnson +ENG-WS-012,2026-02-17T12:03:03.523Z,31600,cmd.exe,SYN_SENT,UDP,10.10.1.112,636,10.10.3.171,3389,emartinez +ENG-WS-012,2026-02-13T02:01:52.520Z,3382,svchost.exe,ESTABLISHED,TCP,10.10.1.112,445,24.38.51.232,445,agarcia +ENG-WS-012,2026-02-17T05:50:19.524Z,11274,explorer.exe,TIME_WAIT,TCP,10.10.1.112,5985,190.59.48.218,8080,emartinez +ENG-WS-012,2026-02-13T03:57:29.781Z,25378,csrss.exe,SYN_SENT,TCP,10.10.1.112,3389,10.10.2.152,389,svc_backup +ENG-WS-012,2026-02-17T21:36:10.000Z,64428,lsass.exe,LISTEN,TCP,10.10.1.112,636,0.0.0.0,0,svc_web +ENG-WS-012,2026-02-11T12:14:03.731Z,27053,lsass.exe,SYN_SENT,TCP,10.10.1.112,445,157.194.183.157,389,gwhite +ENG-WS-012,2026-02-11T21:09:49.007Z,54261,cmd.exe,TIME_WAIT,TCP,10.10.1.112,389,10.10.3.132,88,hbrown +ENG-WS-012,2026-02-13T16:09:30.433Z,21785,services.exe,ESTABLISHED,TCP,10.10.1.112,53,218.240.253.223,389,dlee +ENG-WS-012,2026-02-14T23:46:01.307Z,7879,powershell.exe,SYN_SENT,TCP,10.10.1.112,135,10.10.3.174,389,gwhite +ENG-WS-012,2026-02-16T04:34:59.314Z,42999,svchost.exe,ESTABLISHED,TCP,10.10.1.112,80,10.10.1.11,636,admin +ENG-WS-012,2026-02-10T08:32:57.253Z,23374,taskhostw.exe,TIME_WAIT,TCP,10.10.1.112,8080,85.242.186.184,3389,svc_web +ENG-WS-012,2026-02-16T16:42:46.589Z,12390,notepad.exe,SYN_SENT,TCP,10.10.1.112,636,10.10.1.118,445,agarcia +ENG-WS-012,2026-02-13T20:29:00.193Z,49720,SearchHost.exe,LISTEN,TCP,10.10.1.112,636,0.0.0.0,0,fthompson +ENG-WS-012,2026-02-19T01:42:14.499Z,31749,spoolsv.exe,SYN_SENT,TCP,10.10.1.112,8080,169.68.255.2,88,hbrown +LEG-WS-013,2026-02-16T14:08:11.419Z,57948,teams.exe,LISTEN,TCP,10.10.2.113,389,0.0.0.0,0,emartinez +LEG-WS-013,2026-02-17T15:00:12.856Z,49148,SearchHost.exe,CLOSE_WAIT,TCP,10.10.2.113,139,102.175.150.116,28073,hbrown +LEG-WS-013,2026-02-17T13:34:40.776Z,21227,OneDrive.exe,SYN_SENT,TCP,10.10.2.113,135,54.148.176.236,636,svc_backup +LEG-WS-013,2026-02-11T20:19:54.040Z,44025,RuntimeBroker.exe,SYN_SENT,TCP,10.10.2.113,389,192.146.216.207,88,jsmith +LEG-WS-013,2026-02-11T09:37:12.005Z,56987,teams.exe,TIME_WAIT,TCP,10.10.2.113,80,177.151.104.193,389,admin +LEG-WS-013,2026-02-20T09:27:29.892Z,3625,powershell.exe,SYN_SENT,TCP,10.10.2.113,53,10.10.2.149,53,jsmith +LEG-WS-013,2026-02-20T13:51:47.991Z,4980,code.exe,SYN_SENT,TCP,10.10.2.113,389,10.10.2.125,8080,bwilson +LEG-WS-013,2026-02-15T04:34:58.204Z,61539,dwm.exe,ESTABLISHED,TCP,10.10.2.113,5985,10.10.1.175,53,bwilson +LEG-WS-013,2026-02-15T18:09:05.658Z,51628,taskhostw.exe,SYN_SENT,TCP,10.10.2.113,8080,203.183.37.201,8080,hbrown +LEG-WS-013,2026-02-15T20:37:29.006Z,36887,System,SYN_SENT,TCP,10.10.2.113,3389,10.10.3.147,15340,svc_web +LEG-WS-013,2026-02-14T08:28:08.341Z,35504,spoolsv.exe,ESTABLISHED,TCP,10.10.2.113,8080,10.10.1.142,443,svc_backup +LEG-WS-013,2026-02-12T01:50:55.328Z,62770,dwm.exe,TIME_WAIT,TCP,10.10.2.113,8080,12.151.98.83,443,svc_sql +LEG-WS-013,2026-02-10T13:56:17.651Z,47080,svchost.exe,ESTABLISHED,UDP,10.10.2.113,389,109.53.105.138,8080,emartinez +LEG-WS-013,2026-02-14T20:15:22.531Z,1206,chrome.exe,ESTABLISHED,UDP,10.10.2.113,53,10.10.3.150,88,fthompson +LEG-WS-013,2026-02-16T15:38:29.257Z,18549,System,ESTABLISHED,TCP,10.10.2.113,51224,191.23.37.92,445,svc_sql +LEG-WS-013,2026-02-13T10:30:50.852Z,58228,SearchHost.exe,CLOSE_WAIT,TCP,10.10.2.113,445,10.10.1.151,8080,svc_sql +LEG-WS-013,2026-02-18T03:04:26.928Z,59314,spoolsv.exe,TIME_WAIT,TCP,10.10.2.113,443,11.2.201.138,3389,svc_backup +LEG-WS-013,2026-02-15T03:18:58.683Z,36122,lsass.exe,SYN_SENT,UDP,10.10.2.113,445,57.129.99.30,636,agarcia +LEG-WS-013,2026-02-16T18:52:44.199Z,59090,chrome.exe,TIME_WAIT,TCP,10.10.2.113,636,149.249.169.92,445,cjohnson +MKT-WS-014,2026-02-12T21:32:37.624Z,14617,taskhostw.exe,SYN_SENT,TCP,10.10.3.114,88,146.186.161.246,53,svc_backup +MKT-WS-014,2026-02-15T09:44:34.244Z,7232,lsass.exe,TIME_WAIT,TCP,10.10.3.114,389,10.10.2.158,445,bwilson +MKT-WS-014,2026-02-16T08:43:30.708Z,50510,chrome.exe,TIME_WAIT,UDP,10.10.3.114,139,188.39.38.229,54281,idavis +MKT-WS-014,2026-02-15T13:16:50.854Z,6034,explorer.exe,SYN_SENT,TCP,10.10.3.114,389,10.10.3.129,389,fthompson +MKT-WS-014,2026-02-15T16:32:03.012Z,29343,svchost.exe,LISTEN,TCP,10.10.3.114,54586,0.0.0.0,0,bwilson +MKT-WS-014,2026-02-12T14:42:17.205Z,32058,smss.exe,LISTEN,TCP,10.10.3.114,80,0.0.0.0,0,cjohnson +MKT-WS-014,2026-02-19T18:55:53.483Z,23774,RuntimeBroker.exe,LISTEN,TCP,10.10.3.114,53,0.0.0.0,0,fthompson +MKT-WS-014,2026-02-14T03:19:27.100Z,42917,csrss.exe,ESTABLISHED,TCP,10.10.3.114,443,181.140.134.149,88,svc_web +MKT-WS-014,2026-02-14T21:58:28.830Z,15172,cmd.exe,CLOSE_WAIT,UDP,10.10.3.114,3389,210.176.249.203,8080,agarcia +MKT-WS-014,2026-02-14T02:33:20.649Z,47109,cmd.exe,LISTEN,UDP,10.10.3.114,445,0.0.0.0,0,svc_web +MKT-WS-014,2026-02-10T13:36:41.434Z,2927,powershell.exe,CLOSE_WAIT,TCP,10.10.3.114,8080,173.245.245.54,88,bwilson +MKT-WS-014,2026-02-11T20:42:58.590Z,11001,teams.exe,LISTEN,TCP,10.10.3.114,88,0.0.0.0,0,dlee +MKT-WS-014,2026-02-12T02:38:30.105Z,54518,dwm.exe,CLOSE_WAIT,TCP,10.10.3.114,636,10.10.2.158,389,fthompson +MKT-WS-014,2026-02-17T21:02:48.118Z,22557,smss.exe,LISTEN,TCP,10.10.3.114,445,0.0.0.0,0,gwhite +MKT-WS-014,2026-02-11T11:08:33.102Z,13361,chrome.exe,LISTEN,TCP,10.10.3.114,445,0.0.0.0,0,hbrown +MKT-WS-014,2026-02-15T22:49:17.387Z,178,dwm.exe,CLOSE_WAIT,UDP,10.10.3.114,445,122.19.60.24,60136,svc_sql +MKT-WS-014,2026-02-18T17:09:18.935Z,59597,lsass.exe,SYN_SENT,TCP,10.10.3.114,80,10.10.3.162,23995,svc_sql +MKT-WS-014,2026-02-10T09:22:02.508Z,48835,smss.exe,ESTABLISHED,TCP,10.10.3.114,139,10.10.2.10,3389,svc_sql +MKT-WS-014,2026-02-17T02:53:38.341Z,16722,dwm.exe,ESTABLISHED,TCP,10.10.3.114,5985,168.105.161.105,88,dlee +MKT-WS-014,2026-02-16T03:46:24.446Z,31803,lsass.exe,SYN_SENT,TCP,10.10.3.114,389,10.10.1.172,53,dlee +MKT-WS-014,2026-02-14T12:08:24.815Z,22279,smss.exe,TIME_WAIT,TCP,10.10.3.114,389,31.117.228.201,636,svc_sql +MKT-WS-014,2026-02-13T01:46:22.798Z,24403,OneDrive.exe,ESTABLISHED,UDP,10.10.3.114,389,10.10.2.10,443,agarcia +MKT-WS-014,2026-02-19T04:38:30.872Z,61098,SearchHost.exe,CLOSE_WAIT,TCP,10.10.3.114,636,10.10.2.164,3389,svc_sql +MKT-WS-014,2026-02-18T10:55:05.591Z,23242,code.exe,ESTABLISHED,TCP,10.10.3.114,88,44.18.184.62,445,admin +MKT-WS-014,2026-02-17T15:54:19.731Z,60339,smss.exe,LISTEN,TCP,10.10.3.114,636,0.0.0.0,0,agarcia +MKT-WS-014,2026-02-14T13:47:01.163Z,7077,System,SYN_SENT,TCP,10.10.3.114,139,58.99.232.239,8080,hbrown +MKT-WS-014,2026-02-18T05:22:05.956Z,63095,notepad.exe,TIME_WAIT,TCP,10.10.3.114,53,10.10.2.149,3389,svc_sql +MKT-WS-014,2026-02-14T15:06:23.374Z,23240,csrss.exe,SYN_SENT,TCP,10.10.3.114,443,67.34.195.163,53,hbrown +EXEC-WS-015,2026-02-17T08:25:28.125Z,53909,cmd.exe,LISTEN,TCP,10.10.1.115,5985,0.0.0.0,0,emartinez +EXEC-WS-015,2026-02-12T18:42:55.234Z,15963,teams.exe,CLOSE_WAIT,TCP,10.10.1.115,135,10.10.2.125,3389,svc_web +EXEC-WS-015,2026-02-18T10:44:04.632Z,7956,powershell.exe,LISTEN,UDP,10.10.1.115,445,0.0.0.0,0,agarcia +EXEC-WS-015,2026-02-19T09:11:31.952Z,32265,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.1.115,49369,10.10.3.10,33290,bwilson +EXEC-WS-015,2026-02-10T16:08:26.382Z,22859,dwm.exe,TIME_WAIT,TCP,10.10.1.115,56429,10.10.2.155,636,fthompson +EXEC-WS-015,2026-02-13T17:21:32.579Z,40259,teams.exe,CLOSE_WAIT,TCP,10.10.1.115,3389,10.10.1.127,443,svc_web +EXEC-WS-015,2026-02-17T15:10:41.364Z,24499,System,TIME_WAIT,UDP,10.10.1.115,8080,10.10.2.164,88,emartinez +EXEC-WS-015,2026-02-19T06:04:37.864Z,12949,cmd.exe,CLOSE_WAIT,UDP,10.10.1.115,88,176.117.51.185,88,bwilson +IT-WS-016,2026-02-20T16:53:25.593Z,55765,svchost.exe,LISTEN,TCP,10.10.2.116,445,0.0.0.0,0,admin +IT-WS-016,2026-02-15T07:08:05.481Z,41378,taskhostw.exe,CLOSE_WAIT,TCP,10.10.2.116,53,220.24.203.26,445,agarcia +IT-WS-016,2026-02-12T09:44:22.299Z,37841,taskhostw.exe,TIME_WAIT,TCP,10.10.2.116,53,143.131.176.6,24033,admin +IT-WS-016,2026-02-15T03:56:16.872Z,62791,teams.exe,TIME_WAIT,TCP,10.10.2.116,389,10.10.3.111,445,bwilson +IT-WS-016,2026-02-17T17:36:30.136Z,39774,spoolsv.exe,TIME_WAIT,TCP,10.10.2.116,443,10.10.3.141,445,admin +IT-WS-016,2026-02-12T12:38:34.342Z,26120,csrss.exe,TIME_WAIT,TCP,10.10.2.116,5985,10.10.2.131,443,agarcia +IT-WS-016,2026-02-13T13:20:33.588Z,16313,winlogon.exe,SYN_SENT,TCP,10.10.2.116,50015,102.42.53.68,88,svc_backup +IT-WS-016,2026-02-10T16:47:19.482Z,23485,spoolsv.exe,LISTEN,UDP,10.10.2.116,80,0.0.0.0,0,svc_web +IT-WS-016,2026-02-14T20:44:39.634Z,42029,winlogon.exe,CLOSE_WAIT,TCP,10.10.2.116,53,10.10.2.10,42380,admin +IT-WS-016,2026-02-10T10:38:20.236Z,34396,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.2.116,56594,10.10.3.153,445,svc_web +IT-WS-016,2026-02-16T13:15:03.377Z,52316,outlook.exe,TIME_WAIT,TCP,10.10.2.116,53,10.10.3.102,445,jsmith +IT-WS-016,2026-02-14T17:33:35.444Z,15799,code.exe,CLOSE_WAIT,TCP,10.10.2.116,5985,64.83.199.213,443,hbrown +IT-WS-016,2026-02-16T18:25:56.472Z,17934,services.exe,TIME_WAIT,TCP,10.10.2.116,5985,49.35.93.35,389,svc_backup +IT-WS-016,2026-02-17T18:47:56.347Z,47751,code.exe,TIME_WAIT,TCP,10.10.2.116,80,10.10.3.114,8080,jsmith +IT-WS-016,2026-02-19T02:53:11.669Z,62466,outlook.exe,ESTABLISHED,TCP,10.10.2.116,3389,108.159.255.96,443,bwilson +IT-WS-016,2026-02-14T08:11:58.109Z,63995,qbittorrent.exe,CLOSE_WAIT,TCP,10.10.2.116,445,50.128.195.213,3389,gwhite +IT-WS-016,2026-02-17T06:30:07.095Z,13760,explorer.exe,LISTEN,TCP,10.10.2.116,53,0.0.0.0,0,gwhite +HR-WS-017,2026-02-19T13:52:47.618Z,56700,notepad.exe,TIME_WAIT,UDP,10.10.3.117,636,10.10.1.13,53,admin +HR-WS-017,2026-02-12T01:50:24.320Z,18194,msedge.exe,LISTEN,TCP,10.10.3.117,80,0.0.0.0,0,idavis +HR-WS-017,2026-02-11T06:51:01.397Z,40643,powershell.exe,ESTABLISHED,TCP,10.10.3.117,636,153.79.190.198,389,emartinez +HR-WS-017,2026-02-18T13:08:25.643Z,49690,spoolsv.exe,ESTABLISHED,TCP,10.10.3.117,389,10.10.1.130,636,emartinez +HR-WS-017,2026-02-17T21:05:59.242Z,16529,csrss.exe,LISTEN,TCP,10.10.3.117,3389,0.0.0.0,0,jsmith +HR-WS-017,2026-02-19T20:37:06.601Z,36441,csrss.exe,SYN_SENT,TCP,10.10.3.117,135,10.10.1.160,57887,bwilson +HR-WS-017,2026-02-19T12:43:59.135Z,40714,outlook.exe,CLOSE_WAIT,TCP,10.10.3.117,53,10.10.1.13,8080,svc_web +HR-WS-017,2026-02-20T09:47:26.841Z,53777,services.exe,LISTEN,TCP,10.10.3.117,389,0.0.0.0,0,fthompson +HR-WS-017,2026-02-17T04:43:21.927Z,2968,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.3.117,88,73.165.209.165,636,svc_web +HR-WS-017,2026-02-17T15:19:42.619Z,16873,teams.exe,ESTABLISHED,UDP,10.10.3.117,8080,10.10.3.150,35484,jsmith +HR-WS-017,2026-02-18T01:52:09.696Z,58455,services.exe,ESTABLISHED,TCP,10.10.3.117,389,126.40.239.206,636,fthompson +HR-WS-017,2026-02-15T20:54:54.946Z,12516,OneDrive.exe,ESTABLISHED,TCP,10.10.3.117,53,11.36.155.20,3389,cjohnson +HR-WS-017,2026-02-16T01:29:28.919Z,33175,powershell.exe,SYN_SENT,UDP,10.10.3.117,636,28.183.234.180,8080,emartinez +HR-WS-017,2026-02-16T16:06:12.033Z,37006,System,SYN_SENT,TCP,10.10.3.117,3389,10.10.1.13,53,hbrown +HR-WS-017,2026-02-20T16:21:10.808Z,19881,System,TIME_WAIT,TCP,10.10.3.117,8080,102.0.17.252,8080,jsmith +HR-WS-017,2026-02-18T21:29:05.930Z,45301,powershell.exe,LISTEN,TCP,10.10.3.117,49863,0.0.0.0,0,svc_web +HR-WS-017,2026-02-12T22:27:51.215Z,16893,System,SYN_SENT,TCP,10.10.3.117,443,10.10.1.118,25081,svc_sql +HR-WS-017,2026-02-10T17:20:34.436Z,53075,smss.exe,CLOSE_WAIT,TCP,10.10.3.117,636,20.166.247.45,445,idavis +HR-WS-017,2026-02-10T21:31:55.153Z,34465,explorer.exe,TIME_WAIT,TCP,10.10.3.117,5985,223.61.116.192,88,jsmith +HR-WS-017,2026-02-10T20:37:47.832Z,48044,smss.exe,LISTEN,TCP,10.10.3.117,445,0.0.0.0,0,fthompson +HR-WS-017,2026-02-16T06:51:36.531Z,3331,services.exe,SYN_SENT,TCP,10.10.3.117,135,10.10.3.117,389,hbrown +HR-WS-017,2026-02-17T03:03:43.595Z,12951,chrome.exe,CLOSE_WAIT,TCP,10.10.3.117,63389,179.66.69.124,88,hbrown +HR-WS-017,2026-02-18T10:11:34.708Z,21295,dwm.exe,LISTEN,UDP,10.10.3.117,139,0.0.0.0,0,admin +HR-WS-017,2026-02-12T02:18:49.737Z,23019,chrome.exe,ESTABLISHED,TCP,10.10.3.117,3389,90.97.164.89,445,idavis +HR-WS-017,2026-02-11T12:05:34.566Z,3674,csrss.exe,SYN_SENT,UDP,10.10.3.117,80,210.119.102.176,443,cjohnson +HR-WS-017,2026-02-18T01:00:11.686Z,13985,outlook.exe,TIME_WAIT,TCP,10.10.3.117,636,206.56.156.116,3389,cjohnson +HR-WS-017,2026-02-10T23:01:39.044Z,13252,cmd.exe,SYN_SENT,TCP,10.10.3.117,636,179.9.192.150,8080,svc_sql +HR-WS-017,2026-02-12T17:47:31.758Z,25049,cmd.exe,ESTABLISHED,TCP,10.10.3.117,443,100.138.184.222,88,hbrown +HR-WS-017,2026-02-14T10:20:59.836Z,10389,msedge.exe,TIME_WAIT,TCP,10.10.3.117,445,10.10.3.132,389,jsmith +HR-WS-017,2026-02-20T05:16:44.776Z,14883,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.3.117,53,71.31.131.225,636,bwilson +HR-WS-017,2026-02-20T08:09:05.124Z,40237,SearchHost.exe,LISTEN,TCP,10.10.3.117,53,0.0.0.0,0,svc_web +HR-WS-017,2026-02-16T09:15:27.630Z,44929,powershell.exe,CLOSE_WAIT,UDP,10.10.3.117,5985,80.168.229.139,8080,svc_sql +FIN-WS-018,2026-02-19T01:52:50.258Z,9636,notepad.exe,SYN_SENT,UDP,10.10.1.118,63244,38.80.162.18,53,svc_backup +FIN-WS-018,2026-02-10T14:32:58.399Z,64715,taskhostw.exe,CLOSE_WAIT,TCP,10.10.1.118,8080,191.140.77.200,8080,idavis +FIN-WS-018,2026-02-19T03:32:04.412Z,30820,services.exe,SYN_SENT,TCP,10.10.1.118,88,10.10.3.111,636,svc_backup +FIN-WS-018,2026-02-20T05:32:58.238Z,14685,teams.exe,CLOSE_WAIT,TCP,10.10.1.118,445,42.98.115.9,445,svc_backup +FIN-WS-018,2026-02-19T08:46:56.102Z,32208,code.exe,LISTEN,TCP,10.10.1.118,8080,0.0.0.0,0,svc_backup +FIN-WS-018,2026-02-10T18:27:23.647Z,48290,csrss.exe,LISTEN,TCP,10.10.1.118,62418,0.0.0.0,0,svc_web +FIN-WS-018,2026-02-14T10:54:10.076Z,48280,taskhostw.exe,CLOSE_WAIT,TCP,10.10.1.118,53,28.231.233.212,636,jsmith +FIN-WS-018,2026-02-19T21:45:29.537Z,45316,dwm.exe,ESTABLISHED,UDP,10.10.1.118,8080,10.10.2.122,20319,hbrown +FIN-WS-018,2026-02-15T01:25:12.662Z,58860,csrss.exe,CLOSE_WAIT,TCP,10.10.1.118,445,10.10.1.142,8080,svc_backup +FIN-WS-018,2026-02-11T05:19:35.889Z,46452,csrss.exe,ESTABLISHED,TCP,10.10.1.118,636,10.10.1.115,53,fthompson +FIN-WS-018,2026-02-12T04:43:00.088Z,46764,dwm.exe,SYN_SENT,UDP,10.10.1.118,53,98.22.87.234,8080,jsmith +FIN-WS-018,2026-02-19T05:51:09.950Z,35718,notepad.exe,CLOSE_WAIT,TCP,10.10.1.118,443,34.103.1.160,389,svc_sql +FIN-WS-018,2026-02-10T09:38:35.720Z,57913,epicgameslauncher.exe,CLOSE_WAIT,UDP,10.10.1.118,88,169.243.232.105,40425,hbrown +FIN-WS-018,2026-02-19T01:30:12.992Z,19658,spoolsv.exe,SYN_SENT,UDP,10.10.1.118,445,38.28.178.10,44736,emartinez +FIN-WS-018,2026-02-11T07:16:53.659Z,19714,explorer.exe,ESTABLISHED,TCP,10.10.1.118,445,10.10.3.159,80,emartinez +FIN-WS-018,2026-02-15T19:09:41.588Z,45701,SearchHost.exe,ESTABLISHED,TCP,10.10.1.118,139,10.10.1.136,88,cjohnson +FIN-WS-018,2026-02-20T16:45:21.902Z,23290,msedge.exe,SYN_SENT,TCP,10.10.1.118,8080,10.10.3.141,35456,bwilson +FIN-WS-018,2026-02-15T04:13:17.070Z,52314,winlogon.exe,SYN_SENT,TCP,10.10.1.118,65290,47.119.148.251,80,agarcia +FIN-WS-018,2026-02-12T23:36:15.769Z,4545,code.exe,SYN_SENT,TCP,10.10.1.118,80,86.179.108.3,445,dlee +FIN-WS-018,2026-02-12T08:30:14.021Z,54745,System,TIME_WAIT,TCP,10.10.1.118,389,86.174.202.186,8080,emartinez +SLS-WS-019,2026-02-15T03:09:16.142Z,56803,explorer.exe,LISTEN,TCP,10.10.2.119,389,0.0.0.0,0,hbrown +SLS-WS-019,2026-02-11T00:33:11.737Z,9884,csrss.exe,CLOSE_WAIT,TCP,10.10.2.119,88,10.10.3.174,53,dlee +SLS-WS-019,2026-02-17T17:27:36.013Z,17892,taskhostw.exe,CLOSE_WAIT,TCP,10.10.2.119,88,10.10.1.115,53,fthompson +SLS-WS-019,2026-02-19T20:20:18.461Z,29183,powershell.exe,TIME_WAIT,TCP,10.10.2.119,135,135.154.89.29,3389,hbrown +SLS-WS-019,2026-02-15T02:50:31.569Z,46871,winlogon.exe,SYN_SENT,UDP,10.10.2.119,3389,124.158.167.37,80,svc_web +SLS-WS-019,2026-02-16T23:42:45.766Z,13852,svchost.exe,TIME_WAIT,TCP,10.10.2.119,3389,120.23.52.134,445,emartinez +SLS-WS-019,2026-02-20T07:34:28.249Z,36775,notepad.exe,TIME_WAIT,TCP,10.10.2.119,59609,10.10.1.121,80,hbrown +SLS-WS-019,2026-02-15T23:08:39.391Z,3424,System,TIME_WAIT,TCP,10.10.2.119,139,10.10.2.110,53,bwilson +SLS-WS-019,2026-02-13T14:06:36.586Z,53671,epicgameslauncher.exe,ESTABLISHED,TCP,10.10.2.119,80,10.10.2.10,53,cjohnson +SLS-WS-019,2026-02-15T05:38:11.287Z,62191,MsMpEng.exe,SYN_SENT,TCP,10.10.2.119,88,10.10.3.159,389,cjohnson +SLS-WS-019,2026-02-11T12:13:18.351Z,31468,services.exe,TIME_WAIT,TCP,10.10.2.119,445,180.169.166.117,389,gwhite +SLS-WS-019,2026-02-15T21:11:11.009Z,26367,notepad.exe,TIME_WAIT,TCP,10.10.2.119,53,27.207.54.84,445,idavis +SLS-WS-019,2026-02-14T07:57:14.812Z,22429,services.exe,LISTEN,TCP,10.10.2.119,8080,0.0.0.0,0,cjohnson +SLS-WS-019,2026-02-16T13:01:07.944Z,21423,smss.exe,CLOSE_WAIT,TCP,10.10.2.119,53,10.10.2.110,8516,hbrown +SLS-WS-019,2026-02-16T13:33:53.263Z,45025,csrss.exe,LISTEN,TCP,10.10.2.119,443,0.0.0.0,0,svc_web +SLS-WS-019,2026-02-13T08:52:32.928Z,40442,SearchHost.exe,TIME_WAIT,TCP,10.10.2.119,443,56.71.0.194,636,idavis +SLS-WS-019,2026-02-19T05:07:34.661Z,4190,code.exe,TIME_WAIT,TCP,10.10.2.119,5985,10.10.3.102,8080,emartinez +SLS-WS-019,2026-02-17T17:56:36.286Z,26709,explorer.exe,ESTABLISHED,TCP,10.10.2.119,443,10.10.3.156,53,fthompson +SLS-WS-019,2026-02-16T02:51:19.420Z,55368,code.exe,LISTEN,TCP,10.10.2.119,135,0.0.0.0,0,emartinez +SLS-WS-019,2026-02-11T05:09:57.099Z,42190,outlook.exe,TIME_WAIT,UDP,10.10.2.119,80,10.10.1.163,8080,svc_sql +SLS-WS-019,2026-02-16T15:08:35.931Z,37975,csrss.exe,SYN_SENT,TCP,10.10.2.119,8080,131.217.230.99,88,gwhite +SLS-WS-019,2026-02-11T12:17:27.932Z,31657,powershell.exe,SYN_SENT,TCP,10.10.2.119,53,10.10.3.105,53,svc_backup +SLS-WS-019,2026-02-18T15:31:28.416Z,20579,dwm.exe,TIME_WAIT,TCP,10.10.2.119,53,157.45.125.121,636,idavis +SLS-WS-019,2026-02-10T16:49:53.616Z,60580,taskhostw.exe,SYN_SENT,TCP,10.10.2.119,8080,10.10.2.146,8080,idavis +SLS-WS-019,2026-02-11T04:37:39.150Z,33234,smss.exe,TIME_WAIT,TCP,10.10.2.119,88,44.26.149.208,389,agarcia +SLS-WS-019,2026-02-18T00:44:30.510Z,43298,cmd.exe,TIME_WAIT,UDP,10.10.2.119,139,220.131.7.190,60670,gwhite +SLS-WS-019,2026-02-19T01:24:12.797Z,49432,teams.exe,TIME_WAIT,UDP,10.10.2.119,445,205.16.175.252,8080,fthompson +SLS-WS-019,2026-02-15T04:00:13.435Z,31310,powershell.exe,CLOSE_WAIT,UDP,10.10.2.119,88,188.176.27.165,8080,dlee +SLS-WS-019,2026-02-13T01:39:22.636Z,34863,System,LISTEN,TCP,10.10.2.119,8080,0.0.0.0,0,svc_web +SLS-WS-019,2026-02-16T16:37:17.011Z,42833,notepad.exe,CLOSE_WAIT,TCP,10.10.2.119,53,10.10.1.169,88,svc_web +SLS-WS-019,2026-02-17T09:25:46.344Z,11891,cmd.exe,TIME_WAIT,TCP,10.10.2.119,389,150.200.236.198,53,emartinez +SLS-WS-019,2026-02-10T16:30:37.586Z,40692,MsMpEng.exe,ESTABLISHED,TCP,10.10.2.119,5985,10.10.3.129,3389,agarcia +SLS-WS-019,2026-02-20T07:26:55.803Z,5761,services.exe,LISTEN,TCP,10.10.2.119,636,0.0.0.0,0,svc_web +SLS-WS-019,2026-02-18T08:20:23.216Z,45465,SearchHost.exe,SYN_SENT,UDP,10.10.2.119,636,10.10.2.110,445,admin +SLS-WS-019,2026-02-12T04:28:56.537Z,4648,taskhostw.exe,TIME_WAIT,UDP,10.10.2.119,139,199.31.195.100,445,gwhite +SLS-WS-019,2026-02-19T20:09:08.300Z,46984,code.exe,SYN_SENT,TCP,10.10.2.119,389,126.55.73.139,443,dlee +SLS-WS-019,2026-02-17T06:09:05.252Z,17561,chrome.exe,ESTABLISHED,TCP,10.10.2.119,57363,115.9.254.39,80,bwilson +SLS-WS-019,2026-02-11T14:18:03.285Z,35181,SearchHost.exe,SYN_SENT,TCP,10.10.2.119,8080,112.206.35.139,389,emartinez +ENG-WS-020,2026-02-12T04:09:16.474Z,2677,SearchHost.exe,ESTABLISHED,TCP,10.10.3.120,53,10.10.3.159,3389,fthompson +ENG-WS-020,2026-02-12T19:37:16.618Z,25578,notepad.exe,CLOSE_WAIT,TCP,10.10.3.120,8080,22.224.97.36,2686,agarcia +ENG-WS-020,2026-02-18T17:46:33.335Z,43833,spoolsv.exe,TIME_WAIT,TCP,10.10.3.120,80,10.10.1.106,3389,hbrown +ENG-WS-020,2026-02-10T19:27:01.524Z,46060,MsMpEng.exe,SYN_SENT,UDP,10.10.3.120,443,10.10.1.103,60476,admin +ENG-WS-020,2026-02-18T15:47:37.700Z,14555,teams.exe,ESTABLISHED,TCP,10.10.3.120,8080,157.87.32.210,33604,agarcia +ENG-WS-020,2026-02-13T19:52:33.354Z,8013,lsass.exe,TIME_WAIT,TCP,10.10.3.120,443,176.70.164.215,8080,dlee +ENG-WS-020,2026-02-12T20:54:40.148Z,38241,lsass.exe,LISTEN,TCP,10.10.3.120,8080,0.0.0.0,0,jsmith +ENG-WS-020,2026-02-19T13:43:43.627Z,27377,spoolsv.exe,SYN_SENT,TCP,10.10.3.120,80,125.41.3.2,47340,svc_backup +ENG-WS-020,2026-02-13T03:44:14.772Z,29618,winlogon.exe,LISTEN,UDP,10.10.3.120,389,0.0.0.0,0,fthompson +ENG-WS-020,2026-02-12T07:58:32.575Z,64758,teams.exe,SYN_SENT,TCP,10.10.3.120,636,128.45.154.90,3389,hbrown +ENG-WS-020,2026-02-17T11:18:39.378Z,63576,services.exe,TIME_WAIT,TCP,10.10.3.120,8080,198.106.141.14,8080,gwhite +ENG-WS-020,2026-02-18T01:06:15.196Z,60711,teams.exe,ESTABLISHED,TCP,10.10.3.120,139,10.10.1.12,443,hbrown +ENG-WS-020,2026-02-13T17:31:59.002Z,6526,svchost.exe,CLOSE_WAIT,TCP,10.10.3.120,443,10.10.3.126,443,cjohnson +ENG-WS-020,2026-02-15T01:44:51.785Z,25484,code.exe,CLOSE_WAIT,UDP,10.10.3.120,8080,150.248.27.228,15190,emartinez +ENG-WS-020,2026-02-15T02:38:41.032Z,11319,code.exe,TIME_WAIT,TCP,10.10.3.120,3389,33.16.30.72,389,svc_sql +ENG-WS-020,2026-02-16T11:53:42.784Z,54952,notepad.exe,SYN_SENT,UDP,10.10.3.120,88,10.10.2.167,3389,gwhite +ENG-WS-020,2026-02-16T08:52:00.327Z,58546,lsass.exe,LISTEN,UDP,10.10.3.120,5985,0.0.0.0,0,idavis +ENG-WS-020,2026-02-15T01:06:37.231Z,15862,smss.exe,ESTABLISHED,TCP,10.10.3.120,80,10.10.1.151,443,agarcia +ENG-WS-020,2026-02-19T06:28:49.900Z,49074,svchost.exe,CLOSE_WAIT,UDP,10.10.3.120,3389,10.10.3.162,389,idavis +ENG-WS-020,2026-02-14T08:13:11.341Z,45369,csrss.exe,CLOSE_WAIT,UDP,10.10.3.120,445,203.189.237.181,443,emartinez +ENG-WS-020,2026-02-11T11:44:29.889Z,24059,notepad.exe,CLOSE_WAIT,TCP,10.10.3.120,55939,10.10.3.108,80,gwhite +ENG-WS-020,2026-02-17T02:15:34.560Z,48424,RuntimeBroker.exe,TIME_WAIT,UDP,10.10.3.120,53,182.104.70.252,443,svc_sql +ENG-WS-020,2026-02-19T16:28:59.734Z,33101,OneDrive.exe,LISTEN,UDP,10.10.3.120,3389,0.0.0.0,0,admin +ENG-WS-020,2026-02-14T04:02:11.266Z,44225,explorer.exe,ESTABLISHED,TCP,10.10.3.120,8080,10.10.1.169,30644,svc_backup +ENG-WS-020,2026-02-14T09:40:14.252Z,11818,chrome.exe,LISTEN,TCP,10.10.3.120,443,0.0.0.0,0,dlee +ENG-WS-020,2026-02-20T10:23:37.144Z,35583,chrome.exe,ESTABLISHED,UDP,10.10.3.120,443,179.75.254.39,88,bwilson +ENG-WS-020,2026-02-13T21:41:53.230Z,42439,lsass.exe,CLOSE_WAIT,TCP,10.10.3.120,135,10.10.2.167,28004,svc_sql +ENG-WS-020,2026-02-20T10:40:51.643Z,50546,smss.exe,SYN_SENT,TCP,10.10.3.120,8080,78.67.156.44,53,svc_web +ENG-WS-020,2026-02-11T13:13:45.601Z,20850,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.3.120,88,42.146.93.250,3389,idavis +LEG-WS-021,2026-02-13T15:14:09.388Z,22634,RuntimeBroker.exe,LISTEN,UDP,10.10.1.121,389,0.0.0.0,0,bwilson +LEG-WS-021,2026-02-19T22:06:30.578Z,26613,System,LISTEN,TCP,10.10.1.121,443,0.0.0.0,0,gwhite +LEG-WS-021,2026-02-17T22:08:09.408Z,60543,csrss.exe,TIME_WAIT,UDP,10.10.1.121,636,140.169.151.122,53425,gwhite +LEG-WS-021,2026-02-11T07:07:13.018Z,3706,msedge.exe,CLOSE_WAIT,TCP,10.10.1.121,389,142.59.157.7,53,idavis +LEG-WS-021,2026-02-13T15:26:22.030Z,39754,smss.exe,SYN_SENT,UDP,10.10.1.121,135,10.10.1.112,389,hbrown +LEG-WS-021,2026-02-13T23:50:19.530Z,64162,MsMpEng.exe,TIME_WAIT,TCP,10.10.1.121,636,219.218.189.99,53,gwhite +LEG-WS-021,2026-02-14T22:37:33.927Z,10834,chrome.exe,LISTEN,TCP,10.10.1.121,62770,0.0.0.0,0,svc_sql +LEG-WS-021,2026-02-18T05:01:42.648Z,5896,lsass.exe,CLOSE_WAIT,UDP,10.10.1.121,445,10.10.3.168,5356,jsmith +LEG-WS-021,2026-02-10T18:33:29.622Z,54249,cmd.exe,CLOSE_WAIT,UDP,10.10.1.121,636,10.10.2.149,389,dlee +LEG-WS-021,2026-02-14T16:17:21.094Z,32336,notepad.exe,CLOSE_WAIT,TCP,10.10.1.121,135,10.10.1.139,445,svc_backup +LEG-WS-021,2026-02-20T11:33:52.873Z,53726,svchost.exe,ESTABLISHED,TCP,10.10.1.121,443,10.10.3.156,389,agarcia +LEG-WS-021,2026-02-13T04:10:03.318Z,27593,smss.exe,ESTABLISHED,TCP,10.10.1.121,88,10.10.1.118,80,admin +LEG-WS-021,2026-02-16T13:41:26.239Z,11053,RuntimeBroker.exe,ESTABLISHED,TCP,10.10.1.121,53,164.39.99.197,443,hbrown +LEG-WS-021,2026-02-14T14:59:55.054Z,60452,taskhostw.exe,TIME_WAIT,TCP,10.10.1.121,443,10.10.1.118,389,bwilson +LEG-WS-021,2026-02-19T22:51:08.777Z,31525,outlook.exe,SYN_SENT,UDP,10.10.1.121,55326,144.58.213.118,8080,emartinez +LEG-WS-021,2026-02-17T17:28:25.394Z,1984,RuntimeBroker.exe,LISTEN,TCP,10.10.1.121,445,0.0.0.0,0,svc_backup +MKT-WS-022,2026-02-12T12:27:36.905Z,64397,OneDrive.exe,LISTEN,UDP,10.10.2.122,445,0.0.0.0,0,agarcia +MKT-WS-022,2026-02-19T19:07:56.368Z,2936,msedge.exe,ESTABLISHED,TCP,10.10.2.122,65020,111.21.100.28,443,agarcia +MKT-WS-022,2026-02-20T05:11:52.444Z,22895,svchost.exe,ESTABLISHED,TCP,10.10.2.122,88,52.94.179.8,445,emartinez +MKT-WS-022,2026-02-10T09:04:56.035Z,47636,dwm.exe,SYN_SENT,UDP,10.10.2.122,443,10.10.2.125,636,agarcia +MKT-WS-022,2026-02-15T16:33:45.902Z,26811,dwm.exe,CLOSE_WAIT,TCP,10.10.2.122,8080,10.10.2.146,3389,agarcia +MKT-WS-022,2026-02-15T11:25:41.518Z,25317,taskhostw.exe,ESTABLISHED,TCP,10.10.2.122,53,35.253.184.181,53,dlee +MKT-WS-022,2026-02-12T04:49:27.555Z,44281,notepad.exe,CLOSE_WAIT,UDP,10.10.2.122,139,10.10.1.109,53,gwhite +MKT-WS-022,2026-02-11T00:10:39.370Z,64011,SearchHost.exe,CLOSE_WAIT,TCP,10.10.2.122,443,37.202.205.178,8080,cjohnson +MKT-WS-022,2026-02-14T01:01:27.576Z,43791,services.exe,CLOSE_WAIT,TCP,10.10.2.122,5985,10.10.1.175,88,idavis +MKT-WS-022,2026-02-10T15:25:51.166Z,48452,winlogon.exe,SYN_SENT,TCP,10.10.2.122,53981,10.10.1.163,8080,jsmith +MKT-WS-022,2026-02-17T05:16:12.543Z,34175,winlogon.exe,ESTABLISHED,UDP,10.10.2.122,88,174.167.78.78,443,svc_sql +MKT-WS-022,2026-02-15T14:11:55.280Z,35649,csrss.exe,LISTEN,TCP,10.10.2.122,8080,0.0.0.0,0,emartinez +MKT-WS-022,2026-02-10T16:12:53.816Z,36581,System,SYN_SENT,TCP,10.10.2.122,5985,10.10.2.149,80,admin +MKT-WS-022,2026-02-13T14:06:53.707Z,25598,notepad.exe,LISTEN,TCP,10.10.2.122,445,0.0.0.0,0,gwhite +MKT-WS-022,2026-02-16T18:14:05.708Z,23218,smss.exe,CLOSE_WAIT,TCP,10.10.2.122,8080,10.10.2.134,88,svc_sql +EXEC-WS-023,2026-02-14T14:58:56.642Z,3799,svchost.exe,SYN_SENT,TCP,10.10.3.123,3389,10.10.2.113,53,admin +EXEC-WS-023,2026-02-10T17:20:39.859Z,43207,powershell.exe,TIME_WAIT,TCP,10.10.3.123,636,17.156.58.87,53,svc_web +EXEC-WS-023,2026-02-11T08:25:53.105Z,32105,dwm.exe,CLOSE_WAIT,TCP,10.10.3.123,636,10.10.3.174,22154,agarcia +EXEC-WS-023,2026-02-19T02:05:42.439Z,35216,code.exe,TIME_WAIT,TCP,10.10.3.123,445,158.153.186.249,443,cjohnson +EXEC-WS-023,2026-02-18T16:17:47.104Z,31247,explorer.exe,TIME_WAIT,TCP,10.10.3.123,62325,10.10.3.144,5432,fthompson +EXEC-WS-023,2026-02-15T01:18:25.744Z,50132,chrome.exe,TIME_WAIT,TCP,10.10.3.123,5985,10.10.2.152,636,hbrown +EXEC-WS-023,2026-02-17T21:39:13.561Z,4024,svchost.exe,SYN_SENT,UDP,10.10.3.123,135,10.10.1.13,62276,hbrown +EXEC-WS-023,2026-02-17T11:19:35.973Z,19778,csrss.exe,LISTEN,UDP,10.10.3.123,636,0.0.0.0,0,svc_web +EXEC-WS-023,2026-02-11T12:23:22.718Z,12677,taskhostw.exe,ESTABLISHED,UDP,10.10.3.123,139,211.146.82.66,3389,jsmith +EXEC-WS-023,2026-02-18T13:25:02.856Z,18304,notepad.exe,CLOSE_WAIT,TCP,10.10.3.123,5985,166.18.103.41,445,admin +EXEC-WS-023,2026-02-19T16:11:35.919Z,44118,spoolsv.exe,ESTABLISHED,TCP,10.10.3.123,80,221.42.160.155,88,admin +EXEC-WS-023,2026-02-17T23:37:12.366Z,61240,SearchHost.exe,LISTEN,UDP,10.10.3.123,88,0.0.0.0,0,agarcia +EXEC-WS-023,2026-02-20T01:52:30.086Z,14387,smss.exe,SYN_SENT,TCP,10.10.3.123,443,10.10.1.175,3389,bwilson +EXEC-WS-023,2026-02-14T17:56:43.184Z,44843,code.exe,TIME_WAIT,TCP,10.10.3.123,139,221.28.251.137,636,cjohnson +EXEC-WS-023,2026-02-13T13:19:01.651Z,62915,outlook.exe,TIME_WAIT,TCP,10.10.3.123,139,10.10.2.131,88,svc_backup +EXEC-WS-023,2026-02-13T10:21:20.612Z,56422,MsMpEng.exe,ESTABLISHED,TCP,10.10.3.123,8080,10.10.1.133,3389,bwilson +EXEC-WS-023,2026-02-19T11:11:25.104Z,53855,spoolsv.exe,TIME_WAIT,TCP,10.10.3.123,139,10.10.3.153,88,agarcia +EXEC-WS-023,2026-02-16T21:32:20.707Z,51940,OneDrive.exe,TIME_WAIT,TCP,10.10.3.123,3389,108.167.232.178,8080,admin +EXEC-WS-023,2026-02-11T04:33:28.846Z,10443,SearchHost.exe,LISTEN,TCP,10.10.3.123,88,0.0.0.0,0,cjohnson +EXEC-WS-023,2026-02-20T02:51:16.399Z,29688,spoolsv.exe,LISTEN,TCP,10.10.3.123,62597,0.0.0.0,0,gwhite +EXEC-WS-023,2026-02-20T04:11:21.439Z,58056,outlook.exe,TIME_WAIT,UDP,10.10.3.123,59886,73.101.43.107,88,idavis +EXEC-WS-023,2026-02-14T19:13:33.031Z,17149,svchost.exe,SYN_SENT,TCP,10.10.3.123,443,119.101.134.180,27306,bwilson +EXEC-WS-023,2026-02-17T19:38:45.081Z,28618,RuntimeBroker.exe,LISTEN,TCP,10.10.3.123,80,0.0.0.0,0,svc_sql +EXEC-WS-023,2026-02-19T06:05:03.954Z,39427,csrss.exe,CLOSE_WAIT,TCP,10.10.3.123,636,10.10.2.164,88,cjohnson +EXEC-WS-023,2026-02-18T14:06:57.181Z,1985,notepad.exe,LISTEN,TCP,10.10.3.123,5985,0.0.0.0,0,dlee +EXEC-WS-023,2026-02-20T11:35:59.259Z,26154,powershell.exe,SYN_SENT,TCP,10.10.3.123,3389,150.234.43.3,53,admin +IT-WS-024,2026-02-20T17:11:05.493Z,61659,OneDrive.exe,CLOSE_WAIT,TCP,10.10.1.124,443,10.10.2.131,53,admin +IT-WS-024,2026-02-10T18:16:52.490Z,11855,services.exe,ESTABLISHED,TCP,10.10.1.124,53,10.10.1.151,636,dlee +IT-WS-024,2026-02-15T12:48:09.555Z,63890,winlogon.exe,TIME_WAIT,TCP,10.10.1.124,443,10.10.1.115,8080,svc_web +IT-WS-024,2026-02-18T06:55:07.872Z,10013,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.1.124,88,10.10.2.122,389,hbrown +IT-WS-024,2026-02-14T21:06:26.879Z,58766,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.1.124,445,10.10.2.161,389,gwhite +IT-WS-024,2026-02-12T05:09:49.467Z,11129,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.124,8080,29.75.63.90,445,svc_backup +IT-WS-024,2026-02-17T09:13:37.664Z,58254,cmd.exe,SYN_SENT,TCP,10.10.1.124,88,2.92.213.236,389,emartinez +IT-WS-024,2026-02-15T01:30:49.963Z,62700,MsMpEng.exe,ESTABLISHED,TCP,10.10.1.124,88,10.10.3.111,389,dlee +IT-WS-024,2026-02-18T01:56:59.993Z,35958,svchost.exe,TIME_WAIT,TCP,10.10.1.124,3389,10.10.2.107,80,idavis +IT-WS-024,2026-02-13T07:14:02.300Z,49419,SearchHost.exe,TIME_WAIT,UDP,10.10.1.124,57018,222.204.45.6,88,admin +IT-WS-024,2026-02-15T10:24:20.732Z,58126,notepad.exe,CLOSE_WAIT,TCP,10.10.1.124,389,10.10.2.113,3389,fthompson +IT-WS-024,2026-02-15T16:20:07.313Z,63884,smss.exe,SYN_SENT,TCP,10.10.1.124,52108,10.10.2.11,80,gwhite +IT-WS-024,2026-02-15T05:03:17.254Z,5289,spoolsv.exe,LISTEN,TCP,10.10.1.124,139,0.0.0.0,0,svc_sql +IT-WS-024,2026-02-14T18:55:58.626Z,37359,outlook.exe,LISTEN,TCP,10.10.1.124,53,0.0.0.0,0,jsmith +IT-WS-024,2026-02-10T12:04:01.824Z,48630,explorer.exe,SYN_SENT,TCP,10.10.1.124,5985,25.237.129.91,636,admin +IT-WS-024,2026-02-13T21:20:00.941Z,60269,teams.exe,CLOSE_WAIT,TCP,10.10.1.124,5985,10.10.3.159,445,svc_web +IT-WS-024,2026-02-11T10:34:57.592Z,35120,code.exe,LISTEN,TCP,10.10.1.124,389,0.0.0.0,0,jsmith +IT-WS-024,2026-02-18T17:09:36.661Z,5843,msedge.exe,ESTABLISHED,UDP,10.10.1.124,8080,10.10.3.10,88,bwilson +IT-WS-024,2026-02-12T07:43:43.007Z,19820,code.exe,ESTABLISHED,TCP,10.10.1.124,80,10.10.2.131,636,svc_sql +IT-WS-024,2026-02-12T10:20:04.578Z,37418,winlogon.exe,CLOSE_WAIT,TCP,10.10.1.124,445,10.10.1.103,3389,svc_web +IT-WS-024,2026-02-14T11:55:12.335Z,33743,explorer.exe,TIME_WAIT,TCP,10.10.1.124,389,10.10.2.164,389,idavis +HR-WS-025,2026-02-16T19:40:27.020Z,42448,explorer.exe,SYN_SENT,TCP,10.10.2.125,88,10.10.1.154,389,emartinez +HR-WS-025,2026-02-19T22:26:02.037Z,56031,lsass.exe,ESTABLISHED,UDP,10.10.2.125,636,50.240.176.113,53,svc_web +HR-WS-025,2026-02-19T00:16:12.671Z,44212,csrss.exe,LISTEN,TCP,10.10.2.125,5985,0.0.0.0,0,admin +HR-WS-025,2026-02-17T12:40:27.794Z,5748,winlogon.exe,LISTEN,TCP,10.10.2.125,139,0.0.0.0,0,admin +HR-WS-025,2026-02-18T14:22:14.210Z,61904,teams.exe,LISTEN,UDP,10.10.2.125,443,0.0.0.0,0,gwhite +HR-WS-025,2026-02-13T20:26:01.279Z,7569,code.exe,SYN_SENT,TCP,10.10.2.125,3389,67.182.81.45,443,idavis +HR-WS-025,2026-02-18T12:13:17.223Z,50521,System,LISTEN,TCP,10.10.2.125,3389,0.0.0.0,0,jsmith +HR-WS-025,2026-02-16T16:24:50.263Z,56355,System,TIME_WAIT,UDP,10.10.2.125,636,13.224.234.247,52250,agarcia +HR-WS-025,2026-02-15T12:35:51.900Z,57148,explorer.exe,SYN_SENT,TCP,10.10.2.125,389,10.10.3.138,636,agarcia +HR-WS-025,2026-02-12T02:48:55.615Z,17533,RuntimeBroker.exe,TIME_WAIT,UDP,10.10.2.125,135,10.10.2.161,636,emartinez +HR-WS-025,2026-02-19T16:30:58.731Z,62479,lsass.exe,TIME_WAIT,UDP,10.10.2.125,54119,10.10.2.155,88,svc_web +HR-WS-025,2026-02-14T20:31:05.051Z,25873,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.125,445,10.10.3.144,8080,svc_sql +HR-WS-025,2026-02-20T13:00:42.367Z,52467,spoolsv.exe,LISTEN,TCP,10.10.2.125,389,0.0.0.0,0,admin +HR-WS-025,2026-02-14T23:32:50.145Z,13543,notepad.exe,CLOSE_WAIT,TCP,10.10.2.125,636,191.160.176.3,88,hbrown +HR-WS-025,2026-02-15T18:07:02.732Z,35541,services.exe,CLOSE_WAIT,TCP,10.10.2.125,62406,10.10.1.169,8080,dlee +HR-WS-025,2026-02-17T21:37:38.321Z,64781,dwm.exe,SYN_SENT,TCP,10.10.2.125,60316,10.10.2.170,445,hbrown +HR-WS-025,2026-02-20T13:44:15.506Z,52881,explorer.exe,TIME_WAIT,TCP,10.10.2.125,443,13.63.229.77,53,svc_backup +HR-WS-025,2026-02-15T17:06:46.642Z,12719,smss.exe,SYN_SENT,TCP,10.10.2.125,3389,77.145.71.183,53,svc_web +HR-WS-025,2026-02-11T03:31:05.423Z,44456,csrss.exe,ESTABLISHED,UDP,10.10.2.125,5985,10.10.3.117,389,hbrown +HR-WS-025,2026-02-11T20:05:11.563Z,8431,System,SYN_SENT,TCP,10.10.2.125,88,10.10.1.163,8080,gwhite +HR-WS-025,2026-02-16T14:24:00.192Z,26879,outlook.exe,SYN_SENT,TCP,10.10.2.125,636,10.10.1.121,443,agarcia +HR-WS-025,2026-02-11T19:32:05.825Z,38741,smss.exe,TIME_WAIT,TCP,10.10.2.125,443,10.10.3.138,8080,fthompson +HR-WS-025,2026-02-14T16:23:37.638Z,37656,epicgameslauncher.exe,TIME_WAIT,TCP,10.10.2.125,445,10.10.3.171,80,dlee +HR-WS-025,2026-02-11T06:19:43.482Z,41044,taskhostw.exe,CLOSE_WAIT,TCP,10.10.2.125,53503,36.235.230.171,53,admin +HR-WS-025,2026-02-10T19:27:17.742Z,44038,SearchHost.exe,LISTEN,TCP,10.10.2.125,53,0.0.0.0,0,gwhite +HR-WS-025,2026-02-15T23:27:30.896Z,49751,spoolsv.exe,ESTABLISHED,UDP,10.10.2.125,88,162.158.63.165,13634,jsmith +HR-WS-025,2026-02-17T04:33:48.972Z,34955,dwm.exe,LISTEN,TCP,10.10.2.125,443,0.0.0.0,0,bwilson +HR-WS-025,2026-02-18T17:43:48.921Z,39870,cmd.exe,LISTEN,UDP,10.10.2.125,443,0.0.0.0,0,emartinez +HR-WS-025,2026-02-11T06:45:22.576Z,64311,explorer.exe,CLOSE_WAIT,TCP,10.10.2.125,5985,10.10.3.168,445,agarcia +HR-WS-025,2026-02-11T06:24:25.707Z,20206,notepad.exe,LISTEN,UDP,10.10.2.125,57526,0.0.0.0,0,fthompson +HR-WS-025,2026-02-19T15:15:09.918Z,17003,explorer.exe,SYN_SENT,TCP,10.10.2.125,80,10.10.2.113,88,fthompson +HR-WS-025,2026-02-13T03:19:18.774Z,20962,msedge.exe,ESTABLISHED,UDP,10.10.2.125,57003,10.10.3.165,443,gwhite +HR-WS-025,2026-02-17T02:53:15.818Z,8329,chrome.exe,CLOSE_WAIT,TCP,10.10.2.125,389,60.9.137.142,636,dlee +HR-WS-025,2026-02-15T00:56:07.801Z,165,csrss.exe,ESTABLISHED,TCP,10.10.2.125,55818,10.10.3.132,636,svc_web +HR-WS-025,2026-02-16T10:17:23.249Z,33544,services.exe,TIME_WAIT,UDP,10.10.2.125,80,10.10.2.149,3389,dlee +HR-WS-025,2026-02-12T12:42:45.158Z,33183,utorrent.exe,SYN_SENT,TCP,10.10.2.125,139,10.10.1.118,88,svc_sql +HR-WS-025,2026-02-17T01:36:38.962Z,234,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.125,139,10.10.3.159,8080,idavis +HR-WS-025,2026-02-14T10:11:51.973Z,5418,svchost.exe,LISTEN,TCP,10.10.2.125,65174,0.0.0.0,0,svc_sql +HR-WS-025,2026-02-19T01:47:11.213Z,53306,spoolsv.exe,ESTABLISHED,TCP,10.10.2.125,389,10.10.2.149,8080,svc_backup +FIN-WS-026,2026-02-18T01:47:10.000Z,49803,RuntimeBroker.exe,LISTEN,TCP,10.10.3.126,135,0.0.0.0,0,dlee +FIN-WS-026,2026-02-15T11:12:34.087Z,46240,OneDrive.exe,TIME_WAIT,UDP,10.10.3.126,88,10.10.2.164,445,svc_backup +FIN-WS-026,2026-02-16T06:16:32.008Z,32475,svchost.exe,LISTEN,TCP,10.10.3.126,139,0.0.0.0,0,bwilson +FIN-WS-026,2026-02-17T22:13:28.979Z,18078,MsMpEng.exe,SYN_SENT,TCP,10.10.3.126,443,151.65.33.33,636,cjohnson +FIN-WS-026,2026-02-14T20:08:13.354Z,26765,svchost.exe,SYN_SENT,TCP,10.10.3.126,389,144.232.1.241,53,dlee +FIN-WS-026,2026-02-13T15:03:37.768Z,25780,dwm.exe,CLOSE_WAIT,TCP,10.10.3.126,53,10.10.1.136,389,cjohnson +FIN-WS-026,2026-02-10T14:58:05.477Z,28408,smss.exe,ESTABLISHED,UDP,10.10.3.126,443,64.100.84.85,443,svc_sql +FIN-WS-026,2026-02-20T03:53:12.819Z,50939,steam.exe,TIME_WAIT,TCP,10.10.3.126,443,10.10.2.107,3389,idavis +SLS-WS-027,2026-02-10T21:41:49.947Z,40125,spoolsv.exe,CLOSE_WAIT,TCP,10.10.1.127,443,16.17.193.81,389,admin +SLS-WS-027,2026-02-18T12:52:07.327Z,40994,msedge.exe,ESTABLISHED,TCP,10.10.1.127,139,10.10.3.10,16301,jsmith +SLS-WS-027,2026-02-10T11:04:19.724Z,46846,csrss.exe,CLOSE_WAIT,TCP,10.10.1.127,3389,167.13.232.133,443,agarcia +SLS-WS-027,2026-02-10T23:07:22.064Z,20525,code.exe,SYN_SENT,UDP,10.10.1.127,3389,108.246.227.48,80,idavis +SLS-WS-027,2026-02-17T04:25:09.125Z,9576,spoolsv.exe,TIME_WAIT,TCP,10.10.1.127,445,121.158.175.75,34950,jsmith +SLS-WS-027,2026-02-16T13:56:26.072Z,21801,System,ESTABLISHED,TCP,10.10.1.127,135,10.10.2.125,389,svc_web +SLS-WS-027,2026-02-16T23:41:30.345Z,45530,taskhostw.exe,SYN_SENT,TCP,10.10.1.127,3389,10.10.1.106,80,cjohnson +SLS-WS-027,2026-02-18T01:01:13.248Z,13555,code.exe,LISTEN,TCP,10.10.1.127,60015,0.0.0.0,0,fthompson +SLS-WS-027,2026-02-19T20:10:37.888Z,23687,svchost.exe,TIME_WAIT,TCP,10.10.1.127,3389,8.58.72.75,42399,jsmith +SLS-WS-027,2026-02-19T13:20:44.006Z,47209,code.exe,LISTEN,TCP,10.10.1.127,135,0.0.0.0,0,bwilson +SLS-WS-027,2026-02-12T04:01:09.681Z,17256,System,LISTEN,UDP,10.10.1.127,80,0.0.0.0,0,agarcia +SLS-WS-027,2026-02-20T02:01:42.693Z,20093,MsMpEng.exe,LISTEN,TCP,10.10.1.127,3389,0.0.0.0,0,gwhite +SLS-WS-027,2026-02-11T00:20:39.767Z,9565,RuntimeBroker.exe,LISTEN,TCP,10.10.1.127,636,0.0.0.0,0,bwilson +SLS-WS-027,2026-02-13T09:32:44.471Z,9836,code.exe,SYN_SENT,TCP,10.10.1.127,3389,154.219.125.236,636,emartinez +SLS-WS-027,2026-02-14T09:01:44.259Z,57930,spoolsv.exe,TIME_WAIT,UDP,10.10.1.127,135,187.41.240.203,636,admin +SLS-WS-027,2026-02-14T12:14:11.463Z,60470,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.1.127,445,10.10.2.164,18609,svc_sql +SLS-WS-027,2026-02-19T07:47:31.437Z,26045,explorer.exe,LISTEN,UDP,10.10.1.127,8080,0.0.0.0,0,cjohnson +SLS-WS-027,2026-02-13T23:53:37.456Z,38370,SearchHost.exe,SYN_SENT,UDP,10.10.1.127,139,10.10.3.111,636,jsmith +SLS-WS-027,2026-02-10T14:10:46.376Z,29046,services.exe,TIME_WAIT,TCP,10.10.1.127,8080,10.10.2.164,88,cjohnson +SLS-WS-027,2026-02-14T02:03:33.201Z,35884,chrome.exe,TIME_WAIT,TCP,10.10.1.127,53,132.40.141.238,443,cjohnson +SLS-WS-027,2026-02-19T20:05:44.277Z,659,MsMpEng.exe,TIME_WAIT,TCP,10.10.1.127,636,209.140.97.181,636,svc_sql +SLS-WS-027,2026-02-15T16:57:22.815Z,51609,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.1.127,8080,168.76.203.59,3389,hbrown +SLS-WS-027,2026-02-16T08:22:37.603Z,8511,csrss.exe,TIME_WAIT,TCP,10.10.1.127,135,110.213.107.113,8080,dlee +SLS-WS-027,2026-02-10T13:48:35.856Z,51569,svchost.exe,CLOSE_WAIT,TCP,10.10.1.127,135,10.10.1.169,22393,jsmith +SLS-WS-027,2026-02-13T18:12:37.226Z,63141,outlook.exe,TIME_WAIT,TCP,10.10.1.127,5985,53.200.32.137,443,gwhite +SLS-WS-027,2026-02-12T09:44:58.861Z,59825,notepad.exe,ESTABLISHED,UDP,10.10.1.127,389,10.10.1.11,8080,fthompson +SLS-WS-027,2026-02-20T15:23:55.611Z,8563,powershell.exe,TIME_WAIT,TCP,10.10.1.127,8080,10.10.1.142,8080,hbrown +SLS-WS-027,2026-02-15T13:37:07.519Z,44981,chrome.exe,CLOSE_WAIT,UDP,10.10.1.127,135,10.10.1.11,3389,gwhite +SLS-WS-027,2026-02-16T15:12:43.739Z,16276,svchost.exe,LISTEN,TCP,10.10.1.127,5985,0.0.0.0,0,hbrown +SLS-WS-027,2026-02-14T09:46:21.331Z,54064,smss.exe,CLOSE_WAIT,TCP,10.10.1.127,88,10.10.3.159,445,svc_sql +SLS-WS-027,2026-02-14T08:09:58.497Z,43293,lsass.exe,LISTEN,UDP,10.10.1.127,8080,0.0.0.0,0,bwilson +SLS-WS-027,2026-02-11T14:18:27.562Z,24265,msedge.exe,CLOSE_WAIT,TCP,10.10.1.127,445,10.10.2.128,636,agarcia +SLS-WS-027,2026-02-14T07:17:20.011Z,48987,dwm.exe,TIME_WAIT,TCP,10.10.1.127,445,65.106.22.119,389,fthompson +SLS-WS-027,2026-02-11T04:38:13.766Z,43158,SearchHost.exe,ESTABLISHED,TCP,10.10.1.127,443,10.10.1.160,443,cjohnson +SLS-WS-027,2026-02-12T02:38:50.186Z,1283,csrss.exe,LISTEN,TCP,10.10.1.127,445,0.0.0.0,0,idavis +SLS-WS-027,2026-02-17T18:36:11.045Z,58603,notepad.exe,ESTABLISHED,TCP,10.10.1.127,445,10.10.1.157,3389,admin +ENG-WS-028,2026-02-18T07:46:42.814Z,60971,explorer.exe,SYN_SENT,TCP,10.10.2.128,636,79.227.26.154,88,cjohnson +ENG-WS-028,2026-02-10T14:59:09.752Z,1054,powershell.exe,LISTEN,TCP,10.10.2.128,5985,0.0.0.0,0,emartinez +ENG-WS-028,2026-02-13T16:40:11.618Z,41177,MsMpEng.exe,ESTABLISHED,UDP,10.10.2.128,52317,214.85.85.12,53,cjohnson +ENG-WS-028,2026-02-10T10:59:43.240Z,14043,System,CLOSE_WAIT,TCP,10.10.2.128,135,55.54.182.83,53,gwhite +ENG-WS-028,2026-02-17T18:07:57.997Z,51956,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.128,80,10.10.2.10,443,svc_web +ENG-WS-028,2026-02-11T00:52:42.134Z,1256,cmd.exe,ESTABLISHED,TCP,10.10.2.128,389,10.10.3.123,389,idavis +ENG-WS-028,2026-02-18T00:28:41.955Z,49726,csrss.exe,CLOSE_WAIT,TCP,10.10.2.128,53,151.6.119.6,3389,cjohnson +ENG-WS-028,2026-02-12T10:30:10.608Z,24725,explorer.exe,LISTEN,TCP,10.10.2.128,139,0.0.0.0,0,cjohnson +ENG-WS-028,2026-02-12T17:15:09.019Z,48129,powershell.exe,SYN_SENT,TCP,10.10.2.128,445,10.10.1.154,80,emartinez +ENG-WS-028,2026-02-11T00:09:15.192Z,32320,code.exe,SYN_SENT,TCP,10.10.2.128,57289,176.113.195.134,80,agarcia +ENG-WS-028,2026-02-12T03:25:08.242Z,36069,explorer.exe,LISTEN,UDP,10.10.2.128,443,0.0.0.0,0,svc_web +ENG-WS-028,2026-02-17T21:14:50.194Z,20512,code.exe,LISTEN,TCP,10.10.2.128,5985,0.0.0.0,0,bwilson +ENG-WS-028,2026-02-14T11:33:40.025Z,11094,powershell.exe,CLOSE_WAIT,UDP,10.10.2.128,139,74.229.103.70,53,gwhite +ENG-WS-028,2026-02-11T22:11:58.838Z,47721,dwm.exe,SYN_SENT,TCP,10.10.2.128,54259,10.10.3.111,636,bwilson +ENG-WS-028,2026-02-19T21:01:58.743Z,373,csrss.exe,TIME_WAIT,TCP,10.10.2.128,5985,10.10.1.118,8080,jsmith +ENG-WS-028,2026-02-20T16:07:05.222Z,8257,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.2.128,5985,191.191.196.126,80,fthompson +ENG-WS-028,2026-02-19T20:16:17.395Z,47433,teams.exe,LISTEN,TCP,10.10.2.128,57516,0.0.0.0,0,emartinez +ENG-WS-028,2026-02-17T14:22:04.280Z,42392,winlogon.exe,TIME_WAIT,TCP,10.10.2.128,5985,10.10.3.105,80,bwilson +ENG-WS-028,2026-02-16T08:35:07.616Z,43524,csrss.exe,LISTEN,TCP,10.10.2.128,88,0.0.0.0,0,svc_web +ENG-WS-028,2026-02-12T23:13:04.111Z,19906,msedge.exe,ESTABLISHED,TCP,10.10.2.128,636,151.41.96.225,88,hbrown +ENG-WS-028,2026-02-13T03:15:19.204Z,13831,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.2.128,636,10.10.3.174,8080,svc_backup +LEG-WS-029,2026-02-11T01:27:37.345Z,45733,svchost.exe,LISTEN,TCP,10.10.3.129,443,0.0.0.0,0,fthompson +LEG-WS-029,2026-02-15T00:39:54.705Z,53470,spoolsv.exe,TIME_WAIT,TCP,10.10.3.129,445,96.95.68.51,443,cjohnson +LEG-WS-029,2026-02-14T22:10:57.404Z,59932,explorer.exe,LISTEN,UDP,10.10.3.129,5985,0.0.0.0,0,idavis +LEG-WS-029,2026-02-14T06:25:55.683Z,18237,spoolsv.exe,LISTEN,TCP,10.10.3.129,443,0.0.0.0,0,agarcia +LEG-WS-029,2026-02-18T06:08:00.234Z,723,smss.exe,LISTEN,TCP,10.10.3.129,389,0.0.0.0,0,jsmith +LEG-WS-029,2026-02-15T06:18:28.604Z,22187,svchost.exe,SYN_SENT,TCP,10.10.3.129,135,10.10.2.167,389,idavis +LEG-WS-029,2026-02-18T17:34:03.184Z,302,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.3.129,3389,10.10.3.108,53,gwhite +LEG-WS-029,2026-02-13T05:52:00.777Z,45927,SearchHost.exe,LISTEN,TCP,10.10.3.129,53,0.0.0.0,0,svc_sql +LEG-WS-029,2026-02-19T10:21:31.042Z,63643,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.3.129,53,10.10.1.13,53,svc_sql +LEG-WS-029,2026-02-13T09:27:56.675Z,12884,MsMpEng.exe,CLOSE_WAIT,UDP,10.10.3.129,5985,190.41.178.110,88,svc_backup +LEG-WS-029,2026-02-20T06:45:46.099Z,31699,dwm.exe,SYN_SENT,TCP,10.10.3.129,445,10.10.3.171,389,admin +LEG-WS-029,2026-02-14T20:43:24.066Z,47008,powershell.exe,LISTEN,UDP,10.10.3.129,443,0.0.0.0,0,jsmith +LEG-WS-029,2026-02-19T09:59:06.546Z,61165,taskhostw.exe,CLOSE_WAIT,TCP,10.10.3.129,636,10.10.1.118,53,idavis +LEG-WS-029,2026-02-13T08:44:38.852Z,7399,services.exe,ESTABLISHED,TCP,10.10.3.129,636,191.195.223.207,443,agarcia +LEG-WS-029,2026-02-19T05:19:57.278Z,62625,smss.exe,LISTEN,TCP,10.10.3.129,445,0.0.0.0,0,fthompson +LEG-WS-029,2026-02-10T10:17:49.669Z,55960,svchost.exe,TIME_WAIT,TCP,10.10.3.129,5985,109.163.186.205,88,gwhite +LEG-WS-029,2026-02-16T14:21:58.872Z,9659,notepad.exe,LISTEN,TCP,10.10.3.129,445,0.0.0.0,0,svc_backup +LEG-WS-029,2026-02-15T11:45:22.972Z,46246,OneDrive.exe,ESTABLISHED,TCP,10.10.3.129,139,10.10.3.174,3389,fthompson +LEG-WS-029,2026-02-13T10:46:31.599Z,53512,steam.exe,TIME_WAIT,UDP,10.10.3.129,636,10.10.3.123,88,admin +LEG-WS-029,2026-02-17T21:41:19.140Z,18605,teams.exe,ESTABLISHED,TCP,10.10.3.129,3389,10.10.1.151,636,svc_backup +LEG-WS-029,2026-02-13T08:46:13.412Z,9591,OneDrive.exe,SYN_SENT,TCP,10.10.3.129,445,83.27.155.118,389,cjohnson +LEG-WS-029,2026-02-11T08:00:42.958Z,63942,code.exe,ESTABLISHED,TCP,10.10.3.129,389,202.75.192.244,80,gwhite +LEG-WS-029,2026-02-15T10:09:23.304Z,45187,explorer.exe,ESTABLISHED,TCP,10.10.3.129,88,112.76.206.63,88,idavis +LEG-WS-029,2026-02-11T14:30:46.406Z,42135,spoolsv.exe,CLOSE_WAIT,TCP,10.10.3.129,389,98.140.227.95,443,admin +LEG-WS-029,2026-02-11T15:18:32.793Z,21414,powershell.exe,ESTABLISHED,TCP,10.10.3.129,139,10.10.3.162,20577,agarcia +LEG-WS-029,2026-02-16T03:00:54.147Z,35254,System,LISTEN,TCP,10.10.3.129,5985,0.0.0.0,0,svc_sql +LEG-WS-029,2026-02-14T23:48:29.590Z,20697,winlogon.exe,ESTABLISHED,TCP,10.10.3.129,53218,193.106.60.47,636,agarcia +LEG-WS-029,2026-02-13T00:11:24.435Z,49453,smss.exe,LISTEN,UDP,10.10.3.129,53,0.0.0.0,0,jsmith +LEG-WS-029,2026-02-19T18:09:17.561Z,19328,msedge.exe,SYN_SENT,TCP,10.10.3.129,53,44.216.0.64,636,admin +LEG-WS-029,2026-02-11T19:25:00.597Z,56204,outlook.exe,SYN_SENT,TCP,10.10.3.129,53,91.107.50.170,3389,svc_web +LEG-WS-029,2026-02-12T23:44:30.633Z,25120,outlook.exe,SYN_SENT,TCP,10.10.3.129,88,10.10.3.10,636,admin +LEG-WS-029,2026-02-17T18:36:40.471Z,37038,SearchHost.exe,CLOSE_WAIT,TCP,10.10.3.129,389,10.10.2.11,3389,admin +LEG-WS-029,2026-02-11T15:09:19.101Z,7308,dwm.exe,SYN_SENT,UDP,10.10.3.129,445,81.222.194.7,445,admin +MKT-WS-030,2026-02-14T06:39:29.116Z,6981,spoolsv.exe,ESTABLISHED,TCP,10.10.1.130,60080,70.74.115.71,3389,svc_sql +MKT-WS-030,2026-02-12T02:41:12.674Z,62130,teams.exe,SYN_SENT,TCP,10.10.1.130,443,136.178.144.142,80,svc_sql +MKT-WS-030,2026-02-11T19:40:03.128Z,37295,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.130,8080,152.65.132.3,8080,svc_backup +MKT-WS-030,2026-02-13T04:57:20.676Z,28134,spoolsv.exe,TIME_WAIT,UDP,10.10.1.130,636,10.10.2.146,445,hbrown +MKT-WS-030,2026-02-20T04:13:00.253Z,10920,powershell.exe,TIME_WAIT,TCP,10.10.1.130,5985,198.160.46.163,3389,idavis +MKT-WS-030,2026-02-16T18:04:17.946Z,59795,utorrent.exe,TIME_WAIT,TCP,10.10.1.130,65301,3.217.69.123,80,svc_web +MKT-WS-030,2026-02-14T03:45:45.843Z,8837,OneDrive.exe,CLOSE_WAIT,TCP,10.10.1.130,135,190.21.229.247,443,hbrown +MKT-WS-030,2026-02-15T08:46:52.214Z,17450,explorer.exe,CLOSE_WAIT,TCP,10.10.1.130,445,96.57.173.234,445,cjohnson +MKT-WS-030,2026-02-10T09:28:21.993Z,30269,spoolsv.exe,SYN_SENT,TCP,10.10.1.130,139,10.10.3.10,53,emartinez +MKT-WS-030,2026-02-15T16:34:46.739Z,10173,msedge.exe,ESTABLISHED,TCP,10.10.1.130,5985,91.4.51.111,636,fthompson +MKT-WS-030,2026-02-15T22:06:24.646Z,17760,winlogon.exe,ESTABLISHED,UDP,10.10.1.130,135,10.10.3.147,8080,agarcia +MKT-WS-030,2026-02-10T18:03:50.676Z,25956,MsMpEng.exe,CLOSE_WAIT,UDP,10.10.1.130,3389,192.222.2.92,445,fthompson +MKT-WS-030,2026-02-20T13:43:55.832Z,7885,explorer.exe,LISTEN,UDP,10.10.1.130,389,0.0.0.0,0,fthompson +MKT-WS-030,2026-02-17T21:29:55.100Z,48720,winlogon.exe,LISTEN,TCP,10.10.1.130,53,0.0.0.0,0,svc_web +MKT-WS-030,2026-02-14T19:24:58.546Z,39230,outlook.exe,ESTABLISHED,TCP,10.10.1.130,445,40.176.6.197,53,svc_backup +MKT-WS-030,2026-02-18T07:40:54.844Z,56734,winlogon.exe,TIME_WAIT,TCP,10.10.1.130,443,195.219.126.159,445,dlee +MKT-WS-030,2026-02-11T17:04:26.231Z,2614,powershell.exe,CLOSE_WAIT,UDP,10.10.1.130,636,201.52.92.49,443,dlee +MKT-WS-030,2026-02-12T15:26:37.712Z,28023,outlook.exe,CLOSE_WAIT,TCP,10.10.1.130,443,10.10.3.168,3389,gwhite +MKT-WS-030,2026-02-12T05:26:16.461Z,135,lsass.exe,ESTABLISHED,TCP,10.10.1.130,139,94.143.179.183,80,jsmith +MKT-WS-030,2026-02-19T19:07:13.777Z,6703,taskhostw.exe,LISTEN,TCP,10.10.1.130,139,0.0.0.0,0,fthompson +MKT-WS-030,2026-02-15T20:12:55.857Z,24452,winlogon.exe,TIME_WAIT,TCP,10.10.1.130,443,10.10.3.147,49712,cjohnson +MKT-WS-030,2026-02-19T23:22:30.575Z,5007,code.exe,SYN_SENT,TCP,10.10.1.130,443,34.61.21.151,389,hbrown +MKT-WS-030,2026-02-15T00:07:13.998Z,47110,notepad.exe,CLOSE_WAIT,UDP,10.10.1.130,80,10.10.1.133,53,agarcia +MKT-WS-030,2026-02-18T01:10:43.677Z,26150,chrome.exe,CLOSE_WAIT,TCP,10.10.1.130,445,154.140.66.75,3389,gwhite +MKT-WS-030,2026-02-10T08:54:00.491Z,37579,dwm.exe,ESTABLISHED,UDP,10.10.1.130,63496,10.10.1.11,8080,cjohnson +MKT-WS-030,2026-02-10T19:24:11.219Z,15711,svchost.exe,SYN_SENT,TCP,10.10.1.130,139,219.112.151.182,3389,dlee +MKT-WS-030,2026-02-16T22:10:14.591Z,63815,outlook.exe,TIME_WAIT,UDP,10.10.1.130,58013,14.127.107.137,53,emartinez +MKT-WS-030,2026-02-12T14:49:11.633Z,63357,OneDrive.exe,SYN_SENT,TCP,10.10.1.130,5985,157.150.166.253,53,dlee +MKT-WS-030,2026-02-12T15:09:35.133Z,17715,svchost.exe,SYN_SENT,TCP,10.10.1.130,636,191.195.131.223,389,cjohnson +MKT-WS-030,2026-02-17T21:34:17.511Z,24259,SearchHost.exe,LISTEN,TCP,10.10.1.130,636,0.0.0.0,0,bwilson +MKT-WS-030,2026-02-10T13:15:42.573Z,10777,chrome.exe,CLOSE_WAIT,UDP,10.10.1.130,445,209.90.96.146,445,bwilson +MKT-WS-030,2026-02-11T18:19:22.165Z,49281,MsMpEng.exe,SYN_SENT,UDP,10.10.1.130,445,19.218.125.117,636,svc_sql +MKT-WS-030,2026-02-20T02:38:58.552Z,39397,msedge.exe,CLOSE_WAIT,TCP,10.10.1.130,443,212.6.22.34,8080,jsmith +MKT-WS-030,2026-02-13T12:50:46.493Z,31485,svchost.exe,ESTABLISHED,TCP,10.10.1.130,636,10.10.2.173,8080,bwilson +EXEC-WS-031,2026-02-11T19:27:31.523Z,59879,OneDrive.exe,TIME_WAIT,TCP,10.10.2.131,80,212.22.52.140,88,cjohnson +EXEC-WS-031,2026-02-12T16:07:50.211Z,62782,lsass.exe,CLOSE_WAIT,UDP,10.10.2.131,389,10.10.1.115,443,dlee +EXEC-WS-031,2026-02-17T09:51:29.980Z,9944,services.exe,TIME_WAIT,TCP,10.10.2.131,443,10.10.3.168,8080,admin +EXEC-WS-031,2026-02-18T10:26:45.635Z,9706,services.exe,TIME_WAIT,TCP,10.10.2.131,139,128.188.135.208,8080,emartinez +EXEC-WS-031,2026-02-14T00:09:07.881Z,32488,csrss.exe,CLOSE_WAIT,TCP,10.10.2.131,88,110.142.74.24,88,fthompson +EXEC-WS-031,2026-02-15T11:09:01.265Z,35241,lsass.exe,SYN_SENT,TCP,10.10.2.131,53681,10.10.3.171,636,svc_web +EXEC-WS-031,2026-02-15T06:28:53.715Z,8855,chrome.exe,SYN_SENT,TCP,10.10.2.131,636,23.120.185.1,636,agarcia +EXEC-WS-031,2026-02-11T13:18:32.228Z,45698,RuntimeBroker.exe,TIME_WAIT,UDP,10.10.2.131,8080,37.215.124.54,8080,svc_backup +EXEC-WS-031,2026-02-14T03:18:39.796Z,5276,svchost.exe,CLOSE_WAIT,TCP,10.10.2.131,636,28.37.244.215,8080,cjohnson +EXEC-WS-031,2026-02-13T07:41:32.163Z,10316,smss.exe,CLOSE_WAIT,UDP,10.10.2.131,8080,10.10.3.153,80,jsmith +EXEC-WS-031,2026-02-14T17:55:03.235Z,10376,explorer.exe,SYN_SENT,UDP,10.10.2.131,80,10.10.2.134,3389,dlee +EXEC-WS-031,2026-02-15T07:21:14.637Z,42875,dwm.exe,CLOSE_WAIT,UDP,10.10.2.131,5985,159.28.112.101,389,admin +EXEC-WS-031,2026-02-14T18:03:19.700Z,17789,SearchHost.exe,LISTEN,TCP,10.10.2.131,389,0.0.0.0,0,agarcia +EXEC-WS-031,2026-02-12T06:56:09.428Z,13320,RuntimeBroker.exe,SYN_SENT,TCP,10.10.2.131,135,73.83.54.17,445,admin +EXEC-WS-031,2026-02-10T10:07:10.857Z,23473,powershell.exe,TIME_WAIT,TCP,10.10.2.131,88,203.247.23.13,445,svc_sql +EXEC-WS-031,2026-02-11T09:15:02.594Z,53019,SearchHost.exe,SYN_SENT,UDP,10.10.2.131,59456,10.10.2.113,636,svc_sql +EXEC-WS-031,2026-02-19T13:06:01.861Z,53018,smss.exe,CLOSE_WAIT,TCP,10.10.2.131,139,42.77.237.21,3389,admin +EXEC-WS-031,2026-02-18T12:20:16.672Z,22318,OneDrive.exe,LISTEN,TCP,10.10.2.131,8080,0.0.0.0,0,dlee +EXEC-WS-031,2026-02-11T19:39:20.269Z,57146,lsass.exe,ESTABLISHED,TCP,10.10.2.131,135,10.10.2.11,80,dlee +EXEC-WS-031,2026-02-11T01:47:00.528Z,46673,chrome.exe,CLOSE_WAIT,TCP,10.10.2.131,3389,10.10.1.136,443,svc_sql +EXEC-WS-031,2026-02-19T21:17:06.104Z,8553,winlogon.exe,TIME_WAIT,TCP,10.10.2.131,443,10.10.2.137,27830,gwhite +EXEC-WS-031,2026-02-17T14:56:10.766Z,36852,services.exe,TIME_WAIT,TCP,10.10.2.131,389,106.230.134.225,3389,jsmith +EXEC-WS-031,2026-02-15T05:07:19.828Z,35169,msedge.exe,TIME_WAIT,TCP,10.10.2.131,88,103.37.114.100,389,svc_web +IT-WS-032,2026-02-11T12:34:53.790Z,29891,teams.exe,ESTABLISHED,TCP,10.10.3.132,135,10.10.3.144,389,jsmith +IT-WS-032,2026-02-10T15:49:50.928Z,39492,winlogon.exe,LISTEN,UDP,10.10.3.132,88,0.0.0.0,0,svc_sql +IT-WS-032,2026-02-11T01:18:53.144Z,26646,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.3.132,80,55.11.216.70,8080,agarcia +IT-WS-032,2026-02-12T01:07:59.953Z,22990,OneDrive.exe,CLOSE_WAIT,TCP,10.10.3.132,389,10.10.2.155,445,fthompson +IT-WS-032,2026-02-16T06:34:45.182Z,54037,System,LISTEN,TCP,10.10.3.132,636,0.0.0.0,0,jsmith +IT-WS-032,2026-02-17T06:00:56.645Z,54069,services.exe,LISTEN,TCP,10.10.3.132,3389,0.0.0.0,0,svc_backup +IT-WS-032,2026-02-20T15:03:34.745Z,61921,taskhostw.exe,ESTABLISHED,UDP,10.10.3.132,445,10.10.3.153,80,svc_web +IT-WS-032,2026-02-12T14:02:03.556Z,13847,spoolsv.exe,CLOSE_WAIT,TCP,10.10.3.132,80,56.96.215.179,88,cjohnson +IT-WS-032,2026-02-13T23:55:56.080Z,54375,smss.exe,ESTABLISHED,TCP,10.10.3.132,80,10.10.2.164,88,hbrown +IT-WS-032,2026-02-16T22:31:36.510Z,46112,taskhostw.exe,ESTABLISHED,UDP,10.10.3.132,5985,10.10.3.156,88,idavis +IT-WS-032,2026-02-15T13:50:25.368Z,52913,msedge.exe,ESTABLISHED,TCP,10.10.3.132,389,5.210.53.128,389,jsmith +IT-WS-032,2026-02-14T07:16:11.847Z,12916,lsass.exe,LISTEN,UDP,10.10.3.132,53,0.0.0.0,0,svc_web +IT-WS-032,2026-02-13T02:54:08.226Z,43267,msedge.exe,TIME_WAIT,TCP,10.10.3.132,389,181.202.3.241,445,dlee +IT-WS-032,2026-02-10T11:52:57.058Z,10151,lsass.exe,LISTEN,TCP,10.10.3.132,80,0.0.0.0,0,svc_sql +IT-WS-032,2026-02-18T23:08:14.909Z,52616,dwm.exe,SYN_SENT,TCP,10.10.3.132,445,147.220.123.143,88,idavis +IT-WS-032,2026-02-16T21:51:36.961Z,51498,spoolsv.exe,CLOSE_WAIT,UDP,10.10.3.132,3389,133.81.223.60,443,fthompson +IT-WS-032,2026-02-11T22:15:43.751Z,40607,spoolsv.exe,TIME_WAIT,TCP,10.10.3.132,3389,53.47.47.7,42239,svc_backup +IT-WS-032,2026-02-17T03:07:50.447Z,14632,chrome.exe,SYN_SENT,TCP,10.10.3.132,636,10.10.2.11,3389,dlee +IT-WS-032,2026-02-19T23:47:59.122Z,8140,powershell.exe,CLOSE_WAIT,TCP,10.10.3.132,139,22.73.11.164,389,agarcia +IT-WS-032,2026-02-19T03:09:21.251Z,59915,cmd.exe,LISTEN,TCP,10.10.3.132,8080,0.0.0.0,0,svc_web +IT-WS-032,2026-02-16T22:23:16.618Z,29648,msedge.exe,CLOSE_WAIT,TCP,10.10.3.132,443,10.10.1.154,53,svc_sql +IT-WS-032,2026-02-18T01:25:27.146Z,60824,notepad.exe,ESTABLISHED,UDP,10.10.3.132,443,88.177.247.158,636,agarcia +IT-WS-032,2026-02-12T14:56:25.000Z,47793,svchost.exe,SYN_SENT,TCP,10.10.3.132,135,222.186.58.231,8080,svc_backup +IT-WS-032,2026-02-19T22:35:13.288Z,16490,cmd.exe,TIME_WAIT,TCP,10.10.3.132,443,10.10.2.164,88,bwilson +IT-WS-032,2026-02-14T17:56:03.589Z,49060,OneDrive.exe,TIME_WAIT,TCP,10.10.3.132,88,10.10.1.127,389,dlee +IT-WS-032,2026-02-19T14:21:44.717Z,62889,services.exe,ESTABLISHED,TCP,10.10.3.132,5985,52.180.191.230,8080,hbrown +IT-WS-032,2026-02-14T01:26:10.065Z,4860,lsass.exe,TIME_WAIT,TCP,10.10.3.132,5985,10.10.1.142,8080,cjohnson +IT-WS-032,2026-02-13T15:38:50.227Z,814,RuntimeBroker.exe,LISTEN,TCP,10.10.3.132,80,0.0.0.0,0,svc_backup +IT-WS-032,2026-02-13T05:30:43.621Z,39939,csrss.exe,SYN_SENT,TCP,10.10.3.132,53,17.197.145.155,636,svc_sql +IT-WS-032,2026-02-20T15:33:53.744Z,27706,chrome.exe,SYN_SENT,TCP,10.10.3.132,3389,10.10.2.107,80,agarcia +IT-WS-032,2026-02-13T07:05:29.236Z,55257,teams.exe,SYN_SENT,TCP,10.10.3.132,135,148.10.145.5,389,fthompson +IT-WS-032,2026-02-18T04:25:23.051Z,26336,System,SYN_SENT,TCP,10.10.3.132,389,10.10.1.154,53,agarcia +IT-WS-032,2026-02-11T09:41:09.249Z,14781,taskhostw.exe,CLOSE_WAIT,TCP,10.10.3.132,5985,10.10.2.116,62477,jsmith +IT-WS-032,2026-02-13T00:55:18.921Z,51542,outlook.exe,ESTABLISHED,TCP,10.10.3.132,135,44.45.97.186,80,jsmith +IT-WS-032,2026-02-11T13:58:31.277Z,21027,notepad.exe,ESTABLISHED,TCP,10.10.3.132,636,157.194.138.179,389,svc_web +IT-WS-032,2026-02-12T16:27:27.466Z,17389,smss.exe,CLOSE_WAIT,TCP,10.10.3.132,53,10.10.1.163,389,svc_sql +IT-WS-032,2026-02-17T07:37:29.058Z,30780,chrome.exe,TIME_WAIT,TCP,10.10.3.132,389,166.105.39.20,80,svc_web +HR-WS-033,2026-02-12T14:41:46.347Z,23931,msedge.exe,TIME_WAIT,UDP,10.10.1.133,59420,80.232.78.218,8080,fthompson +HR-WS-033,2026-02-19T11:02:56.612Z,48926,services.exe,SYN_SENT,UDP,10.10.1.133,135,18.142.216.43,389,agarcia +HR-WS-033,2026-02-17T05:28:16.953Z,29764,csrss.exe,LISTEN,TCP,10.10.1.133,8080,0.0.0.0,0,emartinez +HR-WS-033,2026-02-14T04:26:42.607Z,3320,System,ESTABLISHED,TCP,10.10.1.133,135,39.203.220.131,445,admin +HR-WS-033,2026-02-12T04:09:40.594Z,18183,lsass.exe,LISTEN,TCP,10.10.1.133,5985,0.0.0.0,0,hbrown +HR-WS-033,2026-02-12T19:41:30.419Z,34973,dwm.exe,CLOSE_WAIT,TCP,10.10.1.133,389,64.56.112.30,445,agarcia +HR-WS-033,2026-02-17T16:27:48.012Z,18972,services.exe,CLOSE_WAIT,TCP,10.10.1.133,443,57.137.253.53,445,svc_backup +HR-WS-033,2026-02-19T16:58:02.299Z,9395,teams.exe,SYN_SENT,TCP,10.10.1.133,636,79.122.87.81,53,jsmith +HR-WS-033,2026-02-15T10:04:36.606Z,16320,lsass.exe,TIME_WAIT,TCP,10.10.1.133,139,10.10.2.146,80,gwhite +HR-WS-033,2026-02-15T01:09:14.717Z,48256,svchost.exe,SYN_SENT,TCP,10.10.1.133,53,129.85.75.199,53,emartinez +HR-WS-033,2026-02-17T11:26:45.741Z,47824,cmd.exe,CLOSE_WAIT,TCP,10.10.1.133,8080,10.10.2.143,445,admin +HR-WS-033,2026-02-10T15:43:34.207Z,37952,lsass.exe,LISTEN,UDP,10.10.1.133,8080,0.0.0.0,0,svc_backup +HR-WS-033,2026-02-12T03:44:17.023Z,59759,lsass.exe,TIME_WAIT,UDP,10.10.1.133,135,10.10.2.11,636,admin +HR-WS-033,2026-02-11T14:44:25.137Z,52222,taskhostw.exe,CLOSE_WAIT,TCP,10.10.1.133,139,10.10.2.167,55692,gwhite +HR-WS-033,2026-02-17T06:04:48.288Z,19999,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.1.133,8080,10.10.3.120,636,gwhite +HR-WS-033,2026-02-17T05:03:47.983Z,142,notepad.exe,ESTABLISHED,TCP,10.10.1.133,135,73.63.27.126,53,jsmith +HR-WS-033,2026-02-13T08:42:01.823Z,2206,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.1.133,443,10.10.3.126,443,gwhite +HR-WS-033,2026-02-18T17:05:42.224Z,9221,powershell.exe,CLOSE_WAIT,TCP,10.10.1.133,443,10.10.2.173,53,admin +HR-WS-033,2026-02-13T12:14:56.486Z,19586,cmd.exe,LISTEN,TCP,10.10.1.133,139,0.0.0.0,0,idavis +HR-WS-033,2026-02-15T13:57:13.656Z,45002,csrss.exe,SYN_SENT,UDP,10.10.1.133,61471,10.10.3.168,53,svc_backup +HR-WS-033,2026-02-16T17:48:07.695Z,19917,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.1.133,5985,119.14.13.246,8080,svc_sql +HR-WS-033,2026-02-15T03:03:18.677Z,3661,dwm.exe,TIME_WAIT,UDP,10.10.1.133,80,10.10.2.101,636,agarcia +HR-WS-033,2026-02-17T08:36:11.699Z,48554,discord.exe,ESTABLISHED,TCP,10.10.1.133,139,145.246.169.222,49551,svc_backup +HR-WS-033,2026-02-16T19:54:57.530Z,13253,code.exe,SYN_SENT,UDP,10.10.1.133,445,58.79.154.161,389,agarcia +HR-WS-033,2026-02-19T23:30:39.998Z,19755,outlook.exe,SYN_SENT,TCP,10.10.1.133,135,10.10.3.165,80,fthompson +HR-WS-033,2026-02-17T10:19:48.402Z,56415,teams.exe,LISTEN,TCP,10.10.1.133,88,0.0.0.0,0,admin +HR-WS-033,2026-02-18T20:38:15.090Z,43187,lsass.exe,LISTEN,TCP,10.10.1.133,445,0.0.0.0,0,cjohnson +HR-WS-033,2026-02-14T09:47:50.298Z,45821,OneDrive.exe,SYN_SENT,UDP,10.10.1.133,8080,10.10.1.10,445,svc_sql +HR-WS-033,2026-02-14T23:07:11.445Z,59613,lsass.exe,CLOSE_WAIT,UDP,10.10.1.133,139,10.10.1.175,3257,emartinez +HR-WS-033,2026-02-12T03:37:27.191Z,10022,csrss.exe,CLOSE_WAIT,TCP,10.10.1.133,445,10.10.3.168,443,emartinez +HR-WS-033,2026-02-16T15:27:37.618Z,11921,smss.exe,TIME_WAIT,TCP,10.10.1.133,139,10.10.3.162,389,idavis +HR-WS-033,2026-02-12T17:55:33.879Z,43698,dwm.exe,SYN_SENT,TCP,10.10.1.133,636,83.178.206.18,8080,agarcia +FIN-WS-034,2026-02-11T12:37:06.404Z,55596,winlogon.exe,TIME_WAIT,UDP,10.10.2.134,443,45.196.215.237,445,svc_backup +FIN-WS-034,2026-02-15T10:46:32.717Z,44589,qbittorrent.exe,TIME_WAIT,TCP,10.10.2.134,445,83.55.230.97,445,dlee +FIN-WS-034,2026-02-14T01:53:24.901Z,26840,teams.exe,CLOSE_WAIT,TCP,10.10.2.134,443,150.12.49.53,80,idavis +FIN-WS-034,2026-02-19T05:21:19.439Z,52633,chrome.exe,TIME_WAIT,UDP,10.10.2.134,135,10.10.2.146,636,agarcia +FIN-WS-034,2026-02-15T23:08:04.220Z,1577,spoolsv.exe,CLOSE_WAIT,TCP,10.10.2.134,445,201.152.51.31,4397,cjohnson +FIN-WS-034,2026-02-20T00:57:08.144Z,32871,notepad.exe,TIME_WAIT,TCP,10.10.2.134,443,41.147.38.137,636,dlee +FIN-WS-034,2026-02-19T14:00:25.228Z,3992,explorer.exe,SYN_SENT,TCP,10.10.2.134,139,10.10.1.154,53,bwilson +FIN-WS-034,2026-02-20T00:20:27.227Z,58264,taskhostw.exe,ESTABLISHED,UDP,10.10.2.134,443,10.10.2.110,40224,hbrown +FIN-WS-034,2026-02-10T13:21:38.935Z,3727,outlook.exe,TIME_WAIT,TCP,10.10.2.134,80,10.10.3.162,3389,jsmith +FIN-WS-034,2026-02-14T19:25:46.783Z,28072,code.exe,SYN_SENT,TCP,10.10.2.134,389,10.10.3.150,8080,hbrown +FIN-WS-034,2026-02-16T11:09:15.726Z,14984,csrss.exe,ESTABLISHED,TCP,10.10.2.134,3389,50.175.223.236,443,fthompson +FIN-WS-034,2026-02-10T18:55:47.485Z,23015,System,SYN_SENT,TCP,10.10.2.134,636,10.10.3.117,445,idavis +FIN-WS-034,2026-02-19T16:24:36.157Z,56379,powershell.exe,TIME_WAIT,UDP,10.10.2.134,8080,169.62.39.20,53,cjohnson +FIN-WS-034,2026-02-19T17:06:22.839Z,46335,notepad.exe,TIME_WAIT,TCP,10.10.2.134,389,63.136.163.179,53,idavis +FIN-WS-034,2026-02-18T01:28:37.792Z,13912,chrome.exe,LISTEN,UDP,10.10.2.134,139,0.0.0.0,0,agarcia +FIN-WS-034,2026-02-16T11:03:36.141Z,19787,outlook.exe,ESTABLISHED,UDP,10.10.2.134,389,196.232.58.6,445,svc_web +FIN-WS-034,2026-02-12T06:06:24.117Z,28351,explorer.exe,TIME_WAIT,TCP,10.10.2.134,8080,5.195.196.114,88,hbrown +FIN-WS-034,2026-02-13T21:14:09.946Z,54445,notepad.exe,ESTABLISHED,TCP,10.10.2.134,80,156.172.134.208,80,idavis +FIN-WS-034,2026-02-15T04:49:59.225Z,60698,lsass.exe,ESTABLISHED,TCP,10.10.2.134,636,10.10.3.174,88,cjohnson +FIN-WS-034,2026-02-14T02:25:25.380Z,43303,svchost.exe,TIME_WAIT,TCP,10.10.2.134,135,198.151.172.147,445,dlee +FIN-WS-034,2026-02-14T21:58:38.351Z,30668,services.exe,ESTABLISHED,TCP,10.10.2.134,88,10.10.3.123,80,jsmith +FIN-WS-034,2026-02-14T22:06:35.564Z,17008,winlogon.exe,SYN_SENT,UDP,10.10.2.134,80,10.10.1.12,443,svc_sql +FIN-WS-034,2026-02-19T07:08:33.249Z,38103,cmd.exe,CLOSE_WAIT,UDP,10.10.2.134,389,45.75.25.60,636,emartinez +FIN-WS-034,2026-02-10T12:01:46.356Z,55473,OneDrive.exe,LISTEN,TCP,10.10.2.134,139,0.0.0.0,0,svc_web +FIN-WS-034,2026-02-13T17:26:50.141Z,24437,System,ESTABLISHED,TCP,10.10.2.134,3389,28.39.227.29,3389,svc_web +FIN-WS-034,2026-02-16T19:28:44.731Z,10606,lsass.exe,ESTABLISHED,TCP,10.10.2.134,445,10.10.3.153,445,emartinez +FIN-WS-034,2026-02-10T16:08:59.575Z,47696,outlook.exe,SYN_SENT,TCP,10.10.2.134,88,10.10.2.128,55466,bwilson +FIN-WS-034,2026-02-17T04:47:57.983Z,34200,spoolsv.exe,ESTABLISHED,TCP,10.10.2.134,88,129.214.62.217,389,gwhite +FIN-WS-034,2026-02-14T23:15:06.737Z,62857,code.exe,SYN_SENT,TCP,10.10.2.134,3389,63.185.118.117,3389,fthompson +FIN-WS-034,2026-02-19T23:25:45.253Z,16152,RuntimeBroker.exe,SYN_SENT,TCP,10.10.2.134,3389,168.247.117.115,8080,svc_sql +FIN-WS-034,2026-02-20T13:48:42.975Z,37849,MsMpEng.exe,SYN_SENT,UDP,10.10.2.134,57680,10.10.3.111,636,gwhite +FIN-WS-034,2026-02-11T14:11:49.961Z,17360,code.exe,LISTEN,TCP,10.10.2.134,445,0.0.0.0,0,svc_sql +FIN-WS-034,2026-02-14T00:35:30.994Z,26466,winlogon.exe,ESTABLISHED,UDP,10.10.2.134,5985,10.10.1.166,88,svc_backup +FIN-WS-034,2026-02-16T21:42:28.797Z,48642,OneDrive.exe,TIME_WAIT,TCP,10.10.2.134,3389,10.10.2.146,88,svc_web +FIN-WS-034,2026-02-19T15:53:59.254Z,38999,winlogon.exe,LISTEN,UDP,10.10.2.134,445,0.0.0.0,0,idavis +FIN-WS-034,2026-02-16T05:01:58.204Z,58905,spoolsv.exe,CLOSE_WAIT,TCP,10.10.2.134,8080,10.10.1.139,80,hbrown +FIN-WS-034,2026-02-16T07:47:04.040Z,40435,lsass.exe,TIME_WAIT,TCP,10.10.2.134,3389,10.10.1.127,445,emartinez +FIN-WS-034,2026-02-15T09:39:32.152Z,14756,notepad.exe,LISTEN,TCP,10.10.2.134,139,0.0.0.0,0,bwilson +FIN-WS-034,2026-02-19T17:38:07.172Z,63005,cmd.exe,SYN_SENT,TCP,10.10.2.134,389,72.72.49.53,2816,hbrown +SLS-WS-035,2026-02-17T19:03:45.818Z,60339,discord.exe,ESTABLISHED,TCP,10.10.3.135,139,10.10.3.117,443,svc_web +SLS-WS-035,2026-02-13T17:46:44.144Z,33330,lsass.exe,CLOSE_WAIT,TCP,10.10.3.135,445,72.59.181.206,443,emartinez +SLS-WS-035,2026-02-12T21:28:42.357Z,38526,spoolsv.exe,SYN_SENT,TCP,10.10.3.135,80,111.51.162.49,80,fthompson +SLS-WS-035,2026-02-15T09:07:36.454Z,12362,powershell.exe,LISTEN,TCP,10.10.3.135,445,0.0.0.0,0,svc_backup +SLS-WS-035,2026-02-14T20:34:46.903Z,32257,outlook.exe,LISTEN,TCP,10.10.3.135,80,0.0.0.0,0,hbrown +SLS-WS-035,2026-02-13T01:46:06.432Z,25022,OneDrive.exe,LISTEN,TCP,10.10.3.135,636,0.0.0.0,0,admin +SLS-WS-035,2026-02-16T13:27:37.896Z,35713,spoolsv.exe,TIME_WAIT,TCP,10.10.3.135,139,10.10.1.163,88,gwhite +SLS-WS-035,2026-02-17T05:09:11.573Z,22878,powershell.exe,ESTABLISHED,TCP,10.10.3.135,8080,10.10.3.123,53,svc_backup +SLS-WS-035,2026-02-10T23:12:02.935Z,50680,outlook.exe,CLOSE_WAIT,TCP,10.10.3.135,389,61.14.148.69,88,emartinez +SLS-WS-035,2026-02-13T13:07:39.584Z,26957,taskhostw.exe,CLOSE_WAIT,TCP,10.10.3.135,5985,103.133.27.69,80,cjohnson +SLS-WS-035,2026-02-18T16:36:11.590Z,6014,teams.exe,SYN_SENT,UDP,10.10.3.135,88,157.168.66.155,80,svc_sql +SLS-WS-035,2026-02-13T08:32:48.735Z,10677,RuntimeBroker.exe,SYN_SENT,TCP,10.10.3.135,53,10.10.1.121,3389,emartinez +SLS-WS-035,2026-02-13T06:46:20.749Z,1688,code.exe,SYN_SENT,UDP,10.10.3.135,80,10.10.1.151,8080,cjohnson +SLS-WS-035,2026-02-11T14:54:38.547Z,51483,OneDrive.exe,LISTEN,TCP,10.10.3.135,636,0.0.0.0,0,fthompson +SLS-WS-035,2026-02-18T14:09:18.005Z,12832,outlook.exe,TIME_WAIT,TCP,10.10.3.135,443,130.212.10.4,7286,svc_web +SLS-WS-035,2026-02-14T19:23:01.113Z,14665,notepad.exe,TIME_WAIT,TCP,10.10.3.135,139,10.10.2.134,445,fthompson +SLS-WS-035,2026-02-16T08:28:11.539Z,1731,winlogon.exe,TIME_WAIT,TCP,10.10.3.135,5985,5.254.201.244,3389,fthompson +SLS-WS-035,2026-02-12T02:18:50.141Z,56777,csrss.exe,TIME_WAIT,TCP,10.10.3.135,389,80.170.73.208,636,gwhite +SLS-WS-035,2026-02-17T20:45:29.172Z,37235,chrome.exe,LISTEN,TCP,10.10.3.135,53,0.0.0.0,0,svc_sql +SLS-WS-035,2026-02-13T03:02:10.406Z,13811,winlogon.exe,TIME_WAIT,TCP,10.10.3.135,636,10.10.2.173,80,svc_sql +ENG-WS-036,2026-02-15T08:44:56.700Z,36459,taskhostw.exe,LISTEN,TCP,10.10.1.136,636,0.0.0.0,0,svc_web +ENG-WS-036,2026-02-19T09:26:14.255Z,7549,chrome.exe,ESTABLISHED,TCP,10.10.1.136,5985,33.6.82.134,389,jsmith +ENG-WS-036,2026-02-18T03:14:54.089Z,35953,winlogon.exe,LISTEN,TCP,10.10.1.136,445,0.0.0.0,0,fthompson +ENG-WS-036,2026-02-15T18:48:46.116Z,13499,notepad.exe,ESTABLISHED,TCP,10.10.1.136,636,174.138.165.158,445,svc_sql +ENG-WS-036,2026-02-10T10:27:19.067Z,27382,OneDrive.exe,TIME_WAIT,TCP,10.10.1.136,8080,119.107.169.238,389,bwilson +ENG-WS-036,2026-02-16T12:36:49.014Z,4475,chrome.exe,ESTABLISHED,TCP,10.10.1.136,135,178.48.234.85,389,emartinez +ENG-WS-036,2026-02-16T04:16:41.066Z,42147,powershell.exe,TIME_WAIT,TCP,10.10.1.136,139,10.10.3.10,445,admin +ENG-WS-036,2026-02-12T04:34:52.734Z,37040,smss.exe,LISTEN,TCP,10.10.1.136,139,0.0.0.0,0,agarcia +ENG-WS-036,2026-02-20T15:16:18.503Z,6085,dwm.exe,SYN_SENT,TCP,10.10.1.136,88,198.141.242.54,3389,svc_sql +ENG-WS-036,2026-02-11T03:26:48.685Z,63659,outlook.exe,LISTEN,TCP,10.10.1.136,3389,0.0.0.0,0,jsmith +ENG-WS-036,2026-02-17T16:33:40.132Z,23364,csrss.exe,CLOSE_WAIT,TCP,10.10.1.136,139,10.10.1.151,88,dlee +ENG-WS-036,2026-02-17T11:20:30.826Z,36662,taskhostw.exe,SYN_SENT,TCP,10.10.1.136,445,10.10.3.156,445,fthompson +ENG-WS-036,2026-02-12T04:45:05.040Z,49096,teams.exe,ESTABLISHED,TCP,10.10.1.136,64424,172.177.217.55,53,jsmith +ENG-WS-036,2026-02-16T15:41:36.972Z,2297,RuntimeBroker.exe,SYN_SENT,UDP,10.10.1.136,88,10.10.1.148,80,admin +ENG-WS-036,2026-02-15T06:21:43.574Z,57439,winlogon.exe,CLOSE_WAIT,TCP,10.10.1.136,139,10.10.2.161,8080,admin +ENG-WS-036,2026-02-10T22:00:43.194Z,41877,msedge.exe,ESTABLISHED,TCP,10.10.1.136,88,183.78.90.223,443,svc_backup +ENG-WS-036,2026-02-17T20:32:01.982Z,24102,msedge.exe,SYN_SENT,TCP,10.10.1.136,389,158.8.170.215,60381,hbrown +ENG-WS-036,2026-02-16T16:07:56.122Z,45235,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.1.136,443,10.10.3.123,445,hbrown +ENG-WS-036,2026-02-11T06:02:25.758Z,60262,spoolsv.exe,ESTABLISHED,TCP,10.10.1.136,53,90.60.174.120,389,agarcia +ENG-WS-036,2026-02-12T02:20:02.256Z,784,chrome.exe,LISTEN,TCP,10.10.1.136,49810,0.0.0.0,0,cjohnson +ENG-WS-036,2026-02-12T04:30:03.632Z,9302,csrss.exe,ESTABLISHED,UDP,10.10.1.136,389,10.10.2.107,445,idavis +ENG-WS-036,2026-02-20T12:49:10.388Z,17097,powershell.exe,LISTEN,TCP,10.10.1.136,445,0.0.0.0,0,svc_backup +ENG-WS-036,2026-02-16T06:10:40.174Z,46118,chrome.exe,CLOSE_WAIT,TCP,10.10.1.136,3389,10.10.1.175,636,fthompson +ENG-WS-036,2026-02-13T01:12:41.323Z,60518,MsMpEng.exe,TIME_WAIT,UDP,10.10.1.136,636,10.10.1.127,389,agarcia +ENG-WS-036,2026-02-16T10:42:18.685Z,24497,spoolsv.exe,LISTEN,TCP,10.10.1.136,8080,0.0.0.0,0,idavis +ENG-WS-036,2026-02-12T06:46:40.366Z,23562,smss.exe,ESTABLISHED,TCP,10.10.1.136,389,10.10.2.161,443,dlee +ENG-WS-036,2026-02-16T18:09:11.093Z,39000,System,LISTEN,TCP,10.10.1.136,63537,0.0.0.0,0,idavis +ENG-WS-036,2026-02-18T06:47:35.691Z,59139,SearchHost.exe,CLOSE_WAIT,UDP,10.10.1.136,636,10.10.2.152,3389,hbrown +ENG-WS-036,2026-02-18T03:57:45.082Z,8612,lsass.exe,TIME_WAIT,TCP,10.10.1.136,88,8.83.85.237,63381,admin +ENG-WS-036,2026-02-12T10:06:05.882Z,11376,explorer.exe,ESTABLISHED,TCP,10.10.1.136,53787,89.234.202.43,8080,dlee +ENG-WS-036,2026-02-17T21:02:00.948Z,10201,teams.exe,LISTEN,UDP,10.10.1.136,443,0.0.0.0,0,admin +ENG-WS-036,2026-02-18T23:50:12.292Z,46383,RuntimeBroker.exe,ESTABLISHED,TCP,10.10.1.136,3389,10.10.2.128,88,cjohnson +ENG-WS-036,2026-02-15T21:31:43.656Z,22832,msedge.exe,CLOSE_WAIT,UDP,10.10.1.136,59583,10.10.2.137,88,gwhite +ENG-WS-036,2026-02-18T03:55:16.014Z,60038,smss.exe,ESTABLISHED,UDP,10.10.1.136,54989,61.188.185.88,41038,agarcia +ENG-WS-036,2026-02-13T07:14:27.711Z,25450,outlook.exe,CLOSE_WAIT,UDP,10.10.1.136,135,78.222.47.87,8080,admin +ENG-WS-036,2026-02-17T03:58:01.743Z,26607,explorer.exe,TIME_WAIT,TCP,10.10.1.136,445,10.10.3.111,443,svc_sql +ENG-WS-036,2026-02-13T11:44:19.061Z,17050,teams.exe,TIME_WAIT,UDP,10.10.1.136,389,10.10.2.152,80,svc_backup +ENG-WS-036,2026-02-19T09:34:42.867Z,5343,services.exe,CLOSE_WAIT,TCP,10.10.1.136,61368,10.10.3.123,88,bwilson +ENG-WS-036,2026-02-19T08:58:27.045Z,30262,OneDrive.exe,SYN_SENT,TCP,10.10.1.136,53,10.10.1.160,443,emartinez +LEG-WS-037,2026-02-14T16:15:54.210Z,29379,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.137,3389,173.151.12.139,53,emartinez +LEG-WS-037,2026-02-16T22:13:48.020Z,28352,explorer.exe,SYN_SENT,TCP,10.10.2.137,636,10.202.127.45,8080,dlee +LEG-WS-037,2026-02-20T13:03:59.838Z,5261,csrss.exe,SYN_SENT,UDP,10.10.2.137,80,20.167.190.10,636,emartinez +LEG-WS-037,2026-02-16T06:43:25.610Z,19970,notepad.exe,CLOSE_WAIT,TCP,10.10.2.137,445,192.131.40.215,3389,idavis +LEG-WS-037,2026-02-16T15:09:20.311Z,59721,powershell.exe,ESTABLISHED,TCP,10.10.2.137,135,10.10.1.124,80,bwilson +LEG-WS-037,2026-02-11T08:17:12.927Z,14834,cmd.exe,ESTABLISHED,TCP,10.10.2.137,80,10.10.3.135,53,jsmith +LEG-WS-037,2026-02-15T06:54:02.598Z,36646,powershell.exe,ESTABLISHED,TCP,10.10.2.137,636,10.10.2.10,88,jsmith +LEG-WS-037,2026-02-10T16:03:59.858Z,55955,taskhostw.exe,TIME_WAIT,TCP,10.10.2.137,8080,10.10.2.122,88,idavis +LEG-WS-037,2026-02-10T15:23:28.111Z,41051,spoolsv.exe,CLOSE_WAIT,TCP,10.10.2.137,443,10.10.3.141,389,idavis +LEG-WS-037,2026-02-11T16:55:27.650Z,39888,RuntimeBroker.exe,SYN_SENT,TCP,10.10.2.137,62763,10.10.2.131,636,svc_web +LEG-WS-037,2026-02-13T08:20:14.078Z,56781,SearchHost.exe,LISTEN,UDP,10.10.2.137,88,0.0.0.0,0,bwilson +MKT-WS-038,2026-02-18T08:37:29.704Z,41405,RuntimeBroker.exe,LISTEN,TCP,10.10.3.138,3389,0.0.0.0,0,agarcia +MKT-WS-038,2026-02-11T23:14:31.022Z,57335,MsMpEng.exe,TIME_WAIT,TCP,10.10.3.138,135,10.10.1.160,389,bwilson +MKT-WS-038,2026-02-16T23:06:15.187Z,40658,svchost.exe,SYN_SENT,TCP,10.10.3.138,389,10.10.1.154,3389,cjohnson +MKT-WS-038,2026-02-20T05:57:41.472Z,1588,services.exe,SYN_SENT,TCP,10.10.3.138,80,10.10.2.11,443,svc_backup +MKT-WS-038,2026-02-13T09:14:43.724Z,58718,spoolsv.exe,CLOSE_WAIT,TCP,10.10.3.138,445,118.188.122.45,8080,jsmith +MKT-WS-038,2026-02-12T21:12:57.108Z,47420,csrss.exe,CLOSE_WAIT,UDP,10.10.3.138,135,10.10.1.115,8080,agarcia +MKT-WS-038,2026-02-17T01:46:20.405Z,35107,explorer.exe,CLOSE_WAIT,TCP,10.10.3.138,5985,19.213.133.227,47934,svc_backup +MKT-WS-038,2026-02-11T09:54:20.710Z,55613,winlogon.exe,ESTABLISHED,TCP,10.10.3.138,636,10.10.1.166,443,dlee +MKT-WS-038,2026-02-11T08:16:53.133Z,42176,smss.exe,ESTABLISHED,UDP,10.10.3.138,5985,10.10.3.132,445,svc_backup +MKT-WS-038,2026-02-16T12:36:25.316Z,49994,epicgameslauncher.exe,CLOSE_WAIT,UDP,10.10.3.138,3389,10.10.2.158,445,bwilson +MKT-WS-038,2026-02-17T08:19:10.842Z,10221,notepad.exe,ESTABLISHED,UDP,10.10.3.138,88,10.10.1.121,389,svc_backup +MKT-WS-038,2026-02-13T00:19:35.184Z,15036,outlook.exe,LISTEN,TCP,10.10.3.138,5985,0.0.0.0,0,jsmith +MKT-WS-038,2026-02-16T10:47:01.883Z,32939,smss.exe,TIME_WAIT,UDP,10.10.3.138,139,10.10.2.122,8080,emartinez +MKT-WS-038,2026-02-12T11:36:26.333Z,9936,SearchHost.exe,CLOSE_WAIT,UDP,10.10.3.138,445,10.10.1.109,445,dlee +MKT-WS-038,2026-02-16T06:21:07.192Z,41953,msedge.exe,LISTEN,TCP,10.10.3.138,8080,0.0.0.0,0,jsmith +MKT-WS-038,2026-02-10T16:12:36.477Z,41151,dwm.exe,LISTEN,UDP,10.10.3.138,389,0.0.0.0,0,agarcia +MKT-WS-038,2026-02-12T17:05:05.937Z,47114,dwm.exe,ESTABLISHED,TCP,10.10.3.138,51755,15.228.126.63,3389,gwhite +MKT-WS-038,2026-02-12T16:53:47.623Z,38482,services.exe,TIME_WAIT,TCP,10.10.3.138,443,10.10.3.117,3389,svc_sql +MKT-WS-038,2026-02-12T09:20:56.617Z,35644,csrss.exe,ESTABLISHED,TCP,10.10.3.138,3389,10.10.1.115,389,idavis +MKT-WS-038,2026-02-18T04:38:24.225Z,39510,winlogon.exe,TIME_WAIT,TCP,10.10.3.138,88,10.10.2.125,445,dlee +MKT-WS-038,2026-02-17T09:27:38.298Z,33068,teams.exe,TIME_WAIT,TCP,10.10.3.138,53,73.153.135.223,445,dlee +MKT-WS-038,2026-02-19T15:20:30.480Z,33493,msedge.exe,LISTEN,TCP,10.10.3.138,3389,0.0.0.0,0,gwhite +MKT-WS-038,2026-02-18T06:42:47.383Z,14073,teams.exe,ESTABLISHED,TCP,10.10.3.138,443,221.226.175.164,443,dlee +MKT-WS-038,2026-02-18T12:27:10.014Z,55960,taskhostw.exe,SYN_SENT,TCP,10.10.3.138,389,77.107.79.83,88,bwilson +MKT-WS-038,2026-02-14T04:41:52.017Z,20169,teams.exe,TIME_WAIT,TCP,10.10.3.138,389,10.10.2.134,445,emartinez +MKT-WS-038,2026-02-14T00:24:10.762Z,52880,taskhostw.exe,CLOSE_WAIT,TCP,10.10.3.138,88,101.213.2.196,88,bwilson +MKT-WS-038,2026-02-18T13:43:47.972Z,21444,cmd.exe,ESTABLISHED,UDP,10.10.3.138,389,184.131.150.214,88,hbrown +MKT-WS-038,2026-02-11T10:42:31.118Z,16034,code.exe,LISTEN,TCP,10.10.3.138,139,0.0.0.0,0,bwilson +MKT-WS-038,2026-02-10T22:01:43.109Z,22558,winlogon.exe,SYN_SENT,TCP,10.10.3.138,50659,10.10.1.136,443,dlee +MKT-WS-038,2026-02-16T11:27:07.485Z,37723,csrss.exe,TIME_WAIT,TCP,10.10.3.138,445,192.37.166.251,8080,cjohnson +MKT-WS-038,2026-02-15T20:45:24.731Z,19198,csrss.exe,LISTEN,TCP,10.10.3.138,53,0.0.0.0,0,svc_backup +MKT-WS-038,2026-02-13T19:15:10.888Z,44511,qbittorrent.exe,ESTABLISHED,TCP,10.10.3.138,60988,115.109.94.83,53,svc_backup +MKT-WS-038,2026-02-10T23:04:17.721Z,64957,services.exe,ESTABLISHED,UDP,10.10.3.138,389,106.218.202.207,636,hbrown +EXEC-WS-039,2026-02-16T05:19:36.125Z,63946,lsass.exe,ESTABLISHED,TCP,10.10.1.139,59869,138.251.144.148,443,hbrown +EXEC-WS-039,2026-02-19T22:37:27.192Z,40079,System,LISTEN,TCP,10.10.1.139,88,0.0.0.0,0,admin +EXEC-WS-039,2026-02-18T11:16:41.623Z,48561,chrome.exe,CLOSE_WAIT,TCP,10.10.1.139,8080,10.10.1.124,636,svc_web +EXEC-WS-039,2026-02-13T00:42:47.655Z,14707,svchost.exe,CLOSE_WAIT,TCP,10.10.1.139,80,10.10.3.129,8080,idavis +EXEC-WS-039,2026-02-11T09:13:26.843Z,35058,taskhostw.exe,SYN_SENT,TCP,10.10.1.139,55716,211.181.78.49,8080,idavis +EXEC-WS-039,2026-02-13T17:51:54.943Z,20765,explorer.exe,LISTEN,TCP,10.10.1.139,443,0.0.0.0,0,cjohnson +EXEC-WS-039,2026-02-10T14:21:21.498Z,56954,code.exe,TIME_WAIT,UDP,10.10.1.139,139,10.10.1.118,88,svc_backup +EXEC-WS-039,2026-02-15T14:40:32.998Z,37999,code.exe,CLOSE_WAIT,TCP,10.10.1.139,8080,103.101.105.198,8080,svc_backup +EXEC-WS-039,2026-02-16T15:12:43.568Z,49231,teams.exe,LISTEN,TCP,10.10.1.139,636,0.0.0.0,0,emartinez +EXEC-WS-039,2026-02-14T12:04:37.513Z,56296,code.exe,ESTABLISHED,TCP,10.10.1.139,8080,10.10.2.101,88,agarcia +EXEC-WS-039,2026-02-17T22:24:26.200Z,58907,notepad.exe,ESTABLISHED,TCP,10.10.1.139,135,180.43.199.225,445,emartinez +EXEC-WS-039,2026-02-15T17:39:19.817Z,9289,spotify.exe,LISTEN,UDP,10.10.1.139,445,0.0.0.0,0,svc_backup +EXEC-WS-039,2026-02-12T03:39:33.732Z,34086,explorer.exe,ESTABLISHED,TCP,10.10.1.139,636,170.150.190.159,8080,bwilson +EXEC-WS-039,2026-02-12T00:35:36.342Z,32707,MsMpEng.exe,LISTEN,TCP,10.10.1.139,52736,0.0.0.0,0,cjohnson +EXEC-WS-039,2026-02-19T20:23:39.240Z,3147,spoolsv.exe,TIME_WAIT,TCP,10.10.1.139,80,201.13.169.8,8080,hbrown +EXEC-WS-039,2026-02-15T04:06:29.987Z,27302,services.exe,SYN_SENT,UDP,10.10.1.139,443,4.178.114.24,389,svc_web +EXEC-WS-039,2026-02-15T07:03:39.122Z,59052,csrss.exe,LISTEN,TCP,10.10.1.139,139,0.0.0.0,0,dlee +EXEC-WS-039,2026-02-12T16:23:16.656Z,5486,MsMpEng.exe,SYN_SENT,TCP,10.10.1.139,8080,127.100.64.57,8080,svc_backup +EXEC-WS-039,2026-02-17T07:05:20.727Z,34173,SearchHost.exe,TIME_WAIT,TCP,10.10.1.139,135,10.10.1.139,389,hbrown +EXEC-WS-039,2026-02-17T05:18:01.645Z,38069,cmd.exe,LISTEN,TCP,10.10.1.139,3389,0.0.0.0,0,svc_backup +EXEC-WS-039,2026-02-10T10:55:41.259Z,31608,explorer.exe,CLOSE_WAIT,TCP,10.10.1.139,445,4.73.17.214,53,gwhite +EXEC-WS-039,2026-02-12T23:49:15.981Z,52986,code.exe,SYN_SENT,TCP,10.10.1.139,135,10.10.1.136,8080,svc_web +EXEC-WS-039,2026-02-20T09:11:18.194Z,8372,System,CLOSE_WAIT,TCP,10.10.1.139,60370,10.10.3.147,80,agarcia +EXEC-WS-039,2026-02-12T05:39:11.139Z,53841,csrss.exe,ESTABLISHED,TCP,10.10.1.139,445,89.157.231.112,636,hbrown +EXEC-WS-039,2026-02-18T02:08:56.218Z,34544,MsMpEng.exe,LISTEN,TCP,10.10.1.139,636,0.0.0.0,0,idavis +EXEC-WS-039,2026-02-11T09:02:04.265Z,10955,smss.exe,SYN_SENT,TCP,10.10.1.139,50691,137.185.117.178,8080,admin +EXEC-WS-039,2026-02-13T05:36:19.241Z,62952,services.exe,LISTEN,UDP,10.10.1.139,135,0.0.0.0,0,fthompson +EXEC-WS-039,2026-02-16T12:29:46.438Z,4478,dwm.exe,CLOSE_WAIT,TCP,10.10.1.139,3389,10.10.1.133,14704,jsmith +EXEC-WS-039,2026-02-20T11:01:25.510Z,64092,outlook.exe,LISTEN,TCP,10.10.1.139,54403,0.0.0.0,0,cjohnson +EXEC-WS-039,2026-02-11T14:52:04.279Z,48574,teams.exe,CLOSE_WAIT,TCP,10.10.1.139,135,214.179.36.58,88,idavis +EXEC-WS-039,2026-02-13T04:52:03.269Z,21561,outlook.exe,LISTEN,TCP,10.10.1.139,389,0.0.0.0,0,jsmith +IT-WS-040,2026-02-19T12:03:24.192Z,49530,dwm.exe,ESTABLISHED,TCP,10.10.2.140,135,10.10.2.116,443,svc_backup +IT-WS-040,2026-02-12T16:09:30.073Z,6853,cmd.exe,ESTABLISHED,TCP,10.10.2.140,443,10.10.2.122,445,agarcia +IT-WS-040,2026-02-19T02:34:52.499Z,48101,services.exe,SYN_SENT,TCP,10.10.2.140,389,127.221.215.15,445,dlee +IT-WS-040,2026-02-12T20:41:09.797Z,32538,spoolsv.exe,SYN_SENT,TCP,10.10.2.140,389,215.128.182.22,389,cjohnson +IT-WS-040,2026-02-16T07:54:22.972Z,7798,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.140,53,156.192.195.11,443,svc_sql +IT-WS-040,2026-02-10T17:19:08.613Z,26228,smss.exe,SYN_SENT,TCP,10.10.2.140,636,10.10.1.157,636,svc_web +IT-WS-040,2026-02-19T04:21:27.075Z,16714,lsass.exe,ESTABLISHED,UDP,10.10.2.140,80,162.168.50.75,389,emartinez +IT-WS-040,2026-02-12T12:20:42.916Z,50615,RuntimeBroker.exe,TIME_WAIT,UDP,10.10.2.140,8080,10.10.1.13,8080,svc_web +IT-WS-040,2026-02-11T09:19:28.350Z,47413,taskhostw.exe,CLOSE_WAIT,TCP,10.10.2.140,8080,220.45.170.91,445,agarcia +IT-WS-040,2026-02-19T15:56:42.207Z,49564,taskhostw.exe,SYN_SENT,TCP,10.10.2.140,55253,10.10.1.163,389,bwilson +IT-WS-040,2026-02-11T06:38:07.995Z,39288,taskhostw.exe,ESTABLISHED,TCP,10.10.2.140,88,80.151.91.102,443,admin +IT-WS-040,2026-02-11T17:15:29.055Z,25347,cmd.exe,LISTEN,TCP,10.10.2.140,5985,0.0.0.0,0,agarcia +IT-WS-040,2026-02-10T14:35:23.270Z,14810,notepad.exe,SYN_SENT,TCP,10.10.2.140,3389,58.226.20.63,445,svc_web +IT-WS-040,2026-02-18T18:52:52.791Z,9627,powershell.exe,LISTEN,UDP,10.10.2.140,389,0.0.0.0,0,jsmith +IT-WS-040,2026-02-19T14:09:03.726Z,64268,svchost.exe,SYN_SENT,TCP,10.10.2.140,5985,10.10.2.167,42131,fthompson +HR-WS-041,2026-02-18T14:53:21.370Z,38042,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.3.141,3389,10.10.1.118,3389,bwilson +HR-WS-041,2026-02-16T07:33:53.237Z,3586,dwm.exe,CLOSE_WAIT,TCP,10.10.3.141,443,207.116.178.184,445,gwhite +HR-WS-041,2026-02-10T23:56:39.150Z,23326,winlogon.exe,SYN_SENT,TCP,10.10.3.141,445,10.10.1.145,8080,agarcia +HR-WS-041,2026-02-13T13:27:22.747Z,45792,cmd.exe,SYN_SENT,TCP,10.10.3.141,636,10.10.1.118,389,admin +HR-WS-041,2026-02-16T10:51:42.906Z,50865,powershell.exe,SYN_SENT,TCP,10.10.3.141,445,197.161.3.249,53,agarcia +HR-WS-041,2026-02-11T07:32:25.285Z,26547,dwm.exe,CLOSE_WAIT,UDP,10.10.3.141,135,154.91.92.8,443,idavis +HR-WS-041,2026-02-17T16:48:56.656Z,57710,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.3.141,636,10.10.2.113,8080,dlee +HR-WS-041,2026-02-10T23:13:30.800Z,36611,teams.exe,TIME_WAIT,TCP,10.10.3.141,135,10.10.2.113,2360,jsmith +HR-WS-041,2026-02-13T17:42:53.696Z,20171,msedge.exe,LISTEN,TCP,10.10.3.141,80,0.0.0.0,0,jsmith +HR-WS-041,2026-02-16T13:55:46.474Z,37716,smss.exe,SYN_SENT,TCP,10.10.3.141,445,10.10.2.128,8080,bwilson +HR-WS-041,2026-02-10T15:35:07.500Z,2641,OneDrive.exe,LISTEN,TCP,10.10.3.141,8080,0.0.0.0,0,hbrown +HR-WS-041,2026-02-11T22:48:47.358Z,40286,msedge.exe,TIME_WAIT,TCP,10.10.3.141,3389,10.10.2.113,13682,emartinez +HR-WS-041,2026-02-12T07:05:06.166Z,26595,MsMpEng.exe,SYN_SENT,TCP,10.10.3.141,443,172.33.173.64,389,jsmith +HR-WS-041,2026-02-11T17:52:08.101Z,50138,winlogon.exe,SYN_SENT,TCP,10.10.3.141,389,168.164.201.194,53,cjohnson +HR-WS-041,2026-02-16T16:24:56.912Z,20147,spoolsv.exe,CLOSE_WAIT,TCP,10.10.3.141,5985,10.10.3.114,389,gwhite +HR-WS-041,2026-02-10T19:48:06.794Z,19953,notepad.exe,ESTABLISHED,TCP,10.10.3.141,135,23.157.88.165,80,fthompson +HR-WS-041,2026-02-17T18:06:09.521Z,4881,System,ESTABLISHED,TCP,10.10.3.141,53,95.22.109.26,3389,svc_backup +HR-WS-041,2026-02-17T04:53:54.772Z,60081,code.exe,SYN_SENT,TCP,10.10.3.141,80,98.105.59.237,3389,svc_web +HR-WS-041,2026-02-17T10:05:56.147Z,46641,teams.exe,CLOSE_WAIT,UDP,10.10.3.141,5985,10.10.3.132,88,svc_web +HR-WS-041,2026-02-10T10:33:24.660Z,54072,notepad.exe,LISTEN,TCP,10.10.3.141,636,0.0.0.0,0,fthompson +HR-WS-041,2026-02-11T01:37:51.919Z,7596,code.exe,CLOSE_WAIT,TCP,10.10.3.141,389,178.202.21.179,3389,agarcia +HR-WS-041,2026-02-13T01:22:29.270Z,49972,winlogon.exe,ESTABLISHED,UDP,10.10.3.141,445,10.10.1.169,19682,agarcia +HR-WS-041,2026-02-19T00:16:25.260Z,12189,code.exe,ESTABLISHED,TCP,10.10.3.141,135,33.18.240.123,80,agarcia +HR-WS-041,2026-02-18T00:35:11.698Z,29068,chrome.exe,LISTEN,TCP,10.10.3.141,8080,0.0.0.0,0,idavis +FIN-WS-042,2026-02-16T06:12:01.215Z,62266,dwm.exe,LISTEN,UDP,10.10.1.142,80,0.0.0.0,0,bwilson +FIN-WS-042,2026-02-19T17:23:26.533Z,3798,cmd.exe,LISTEN,TCP,10.10.1.142,135,0.0.0.0,0,fthompson +FIN-WS-042,2026-02-11T01:20:44.594Z,16207,notepad.exe,SYN_SENT,TCP,10.10.1.142,445,161.99.171.169,389,idavis +FIN-WS-042,2026-02-11T11:50:29.220Z,4368,System,LISTEN,UDP,10.10.1.142,80,0.0.0.0,0,fthompson +FIN-WS-042,2026-02-16T04:40:40.490Z,53427,svchost.exe,SYN_SENT,UDP,10.10.1.142,3389,10.73.53.176,80,fthompson +FIN-WS-042,2026-02-17T02:12:56.365Z,59790,msedge.exe,LISTEN,TCP,10.10.1.142,80,0.0.0.0,0,gwhite +FIN-WS-042,2026-02-15T07:46:56.174Z,58989,spoolsv.exe,CLOSE_WAIT,TCP,10.10.1.142,8080,10.10.1.133,389,bwilson +FIN-WS-042,2026-02-17T22:44:40.681Z,63213,RuntimeBroker.exe,LISTEN,UDP,10.10.1.142,389,0.0.0.0,0,fthompson +FIN-WS-042,2026-02-19T02:02:01.813Z,23230,teams.exe,TIME_WAIT,TCP,10.10.1.142,63299,77.73.21.118,8080,cjohnson +FIN-WS-042,2026-02-12T11:28:43.572Z,14318,lsass.exe,CLOSE_WAIT,TCP,10.10.1.142,8080,10.10.1.142,636,svc_backup +SLS-WS-043,2026-02-15T05:33:29.205Z,35674,MsMpEng.exe,SYN_SENT,TCP,10.10.2.143,53,221.209.191.165,8080,admin +SLS-WS-043,2026-02-10T13:57:31.856Z,13630,services.exe,CLOSE_WAIT,TCP,10.10.2.143,135,10.10.2.167,389,fthompson +SLS-WS-043,2026-02-18T06:39:18.242Z,31995,teams.exe,TIME_WAIT,TCP,10.10.2.143,389,10.10.3.141,8080,emartinez +SLS-WS-043,2026-02-13T14:19:24.493Z,59200,services.exe,SYN_SENT,TCP,10.10.2.143,52332,10.10.2.107,443,emartinez +SLS-WS-043,2026-02-16T19:48:28.517Z,20776,outlook.exe,LISTEN,TCP,10.10.2.143,3389,0.0.0.0,0,idavis +SLS-WS-043,2026-02-15T21:04:34.662Z,40620,csrss.exe,CLOSE_WAIT,TCP,10.10.2.143,139,78.51.81.231,443,fthompson +SLS-WS-043,2026-02-15T06:12:11.778Z,31352,System,CLOSE_WAIT,TCP,10.10.2.143,443,170.75.227.25,88,bwilson +SLS-WS-043,2026-02-11T01:13:20.992Z,8943,smss.exe,TIME_WAIT,TCP,10.10.2.143,8080,6.251.176.227,53,idavis +SLS-WS-043,2026-02-13T16:10:28.725Z,46722,SearchHost.exe,LISTEN,TCP,10.10.2.143,389,0.0.0.0,0,svc_sql +SLS-WS-043,2026-02-20T13:30:32.753Z,59362,chrome.exe,TIME_WAIT,TCP,10.10.2.143,80,160.213.86.94,445,jsmith +SLS-WS-043,2026-02-13T19:13:46.977Z,2156,teams.exe,ESTABLISHED,UDP,10.10.2.143,139,10.10.3.135,443,bwilson +SLS-WS-043,2026-02-17T14:12:50.482Z,22096,services.exe,ESTABLISHED,TCP,10.10.2.143,139,98.102.240.98,445,emartinez +SLS-WS-043,2026-02-19T21:41:38.503Z,5657,lsass.exe,CLOSE_WAIT,TCP,10.10.2.143,3389,10.10.2.137,389,svc_sql +SLS-WS-043,2026-02-16T06:58:37.926Z,15628,taskhostw.exe,SYN_SENT,TCP,10.10.2.143,49905,10.10.3.123,8080,svc_sql +SLS-WS-043,2026-02-10T22:02:29.774Z,9190,chrome.exe,ESTABLISHED,TCP,10.10.2.143,88,19.79.235.162,443,cjohnson +SLS-WS-043,2026-02-14T20:14:32.430Z,45031,chrome.exe,LISTEN,TCP,10.10.2.143,80,0.0.0.0,0,cjohnson +SLS-WS-043,2026-02-15T05:18:09.409Z,48043,OneDrive.exe,ESTABLISHED,TCP,10.10.2.143,389,10.10.3.126,8080,admin +SLS-WS-043,2026-02-17T15:43:01.285Z,5066,explorer.exe,CLOSE_WAIT,UDP,10.10.2.143,443,46.101.134.37,443,cjohnson +SLS-WS-043,2026-02-19T01:00:36.363Z,19545,taskhostw.exe,LISTEN,UDP,10.10.2.143,389,0.0.0.0,0,idavis +SLS-WS-043,2026-02-11T00:09:48.003Z,4214,spoolsv.exe,TIME_WAIT,UDP,10.10.2.143,139,10.10.2.101,8080,gwhite +ENG-WS-044,2026-02-17T14:31:08.379Z,39782,explorer.exe,SYN_SENT,TCP,10.10.3.144,389,10.10.1.112,53,admin +ENG-WS-044,2026-02-20T17:46:27.684Z,12570,smss.exe,TIME_WAIT,TCP,10.10.3.144,3389,10.10.1.139,636,cjohnson +ENG-WS-044,2026-02-18T00:27:53.275Z,25368,explorer.exe,TIME_WAIT,TCP,10.10.3.144,8080,10.10.1.160,8080,fthompson +ENG-WS-044,2026-02-12T14:14:54.408Z,1174,outlook.exe,TIME_WAIT,TCP,10.10.3.144,5985,94.7.222.203,8080,fthompson +ENG-WS-044,2026-02-15T09:38:01.294Z,47530,cmd.exe,TIME_WAIT,UDP,10.10.3.144,8080,10.10.3.171,3389,gwhite +ENG-WS-044,2026-02-20T03:50:04.189Z,52766,teams.exe,CLOSE_WAIT,TCP,10.10.3.144,443,18.165.244.156,636,cjohnson +ENG-WS-044,2026-02-18T17:46:51.856Z,56729,svchost.exe,TIME_WAIT,UDP,10.10.3.144,389,10.10.3.117,53,bwilson +ENG-WS-044,2026-02-16T22:28:04.285Z,59202,winlogon.exe,ESTABLISHED,TCP,10.10.3.144,3389,107.126.107.242,53,gwhite +ENG-WS-044,2026-02-16T16:20:48.404Z,53401,System,TIME_WAIT,TCP,10.10.3.144,636,50.65.164.201,47430,svc_web +ENG-WS-044,2026-02-15T03:40:20.336Z,59110,smss.exe,CLOSE_WAIT,TCP,10.10.3.144,53,25.196.75.160,389,svc_backup +ENG-WS-044,2026-02-13T17:48:12.940Z,54156,csrss.exe,CLOSE_WAIT,UDP,10.10.3.144,636,37.186.30.122,80,idavis +ENG-WS-044,2026-02-17T23:52:25.392Z,12875,outlook.exe,TIME_WAIT,TCP,10.10.3.144,3389,155.102.96.246,80,hbrown +ENG-WS-044,2026-02-18T20:38:47.881Z,815,notepad.exe,LISTEN,TCP,10.10.3.144,636,0.0.0.0,0,dlee +ENG-WS-044,2026-02-16T02:48:57.926Z,39018,outlook.exe,TIME_WAIT,TCP,10.10.3.144,389,165.215.40.95,88,gwhite +ENG-WS-044,2026-02-11T14:58:43.448Z,56968,msedge.exe,TIME_WAIT,TCP,10.10.3.144,135,181.232.145.42,80,emartinez +ENG-WS-044,2026-02-10T14:21:58.735Z,28559,RuntimeBroker.exe,LISTEN,TCP,10.10.3.144,53,0.0.0.0,0,admin +ENG-WS-044,2026-02-15T12:10:08.948Z,60848,teams.exe,TIME_WAIT,TCP,10.10.3.144,389,73.165.20.227,8080,agarcia +ENG-WS-044,2026-02-15T11:06:50.131Z,35824,msedge.exe,SYN_SENT,UDP,10.10.3.144,443,10.10.3.111,443,jsmith +ENG-WS-044,2026-02-17T01:11:22.721Z,36648,spoolsv.exe,CLOSE_WAIT,UDP,10.10.3.144,135,115.81.59.196,80,jsmith +ENG-WS-044,2026-02-12T14:45:00.813Z,15347,discord.exe,LISTEN,TCP,10.10.3.144,80,0.0.0.0,0,bwilson +ENG-WS-044,2026-02-16T01:30:27.973Z,2729,outlook.exe,SYN_SENT,TCP,10.10.3.144,5985,10.10.3.138,88,cjohnson +ENG-WS-044,2026-02-13T23:20:43.380Z,5383,code.exe,LISTEN,TCP,10.10.3.144,80,0.0.0.0,0,idavis +ENG-WS-044,2026-02-15T22:03:26.984Z,60078,dwm.exe,LISTEN,TCP,10.10.3.144,445,0.0.0.0,0,admin +ENG-WS-044,2026-02-13T17:45:52.275Z,17161,notepad.exe,TIME_WAIT,TCP,10.10.3.144,53,10.10.1.11,3389,fthompson +ENG-WS-044,2026-02-18T01:42:12.067Z,57393,notepad.exe,CLOSE_WAIT,TCP,10.10.3.144,88,167.207.104.48,443,cjohnson +ENG-WS-044,2026-02-13T13:28:31.408Z,14283,smss.exe,TIME_WAIT,UDP,10.10.3.144,3389,119.27.117.146,80,svc_web +ENG-WS-044,2026-02-13T17:50:22.913Z,64602,taskhostw.exe,LISTEN,TCP,10.10.3.144,636,0.0.0.0,0,fthompson +ENG-WS-044,2026-02-16T18:49:09.066Z,56275,teams.exe,CLOSE_WAIT,TCP,10.10.3.144,58502,171.127.39.158,80,jsmith +ENG-WS-044,2026-02-20T10:44:06.178Z,48717,svchost.exe,TIME_WAIT,TCP,10.10.3.144,636,146.81.49.14,3389,emartinez +ENG-WS-044,2026-02-19T12:04:21.510Z,61182,lsass.exe,ESTABLISHED,TCP,10.10.3.144,443,78.72.134.117,80,gwhite +LEG-WS-045,2026-02-10T13:38:23.052Z,37011,chrome.exe,LISTEN,TCP,10.10.1.145,139,0.0.0.0,0,gwhite +LEG-WS-045,2026-02-17T09:30:17.339Z,2059,OneDrive.exe,LISTEN,UDP,10.10.1.145,5985,0.0.0.0,0,jsmith +LEG-WS-045,2026-02-10T14:06:11.587Z,17923,csrss.exe,CLOSE_WAIT,UDP,10.10.1.145,88,10.10.2.137,445,svc_web +LEG-WS-045,2026-02-11T06:06:14.399Z,24171,OneDrive.exe,CLOSE_WAIT,TCP,10.10.1.145,88,214.222.250.203,53,gwhite +LEG-WS-045,2026-02-16T01:45:21.654Z,9648,System,LISTEN,TCP,10.10.1.145,636,0.0.0.0,0,emartinez +LEG-WS-045,2026-02-11T05:36:41.003Z,16693,RuntimeBroker.exe,CLOSE_WAIT,UDP,10.10.1.145,3389,10.10.2.164,88,bwilson +LEG-WS-045,2026-02-11T18:52:49.170Z,53594,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.1.145,80,88.74.174.139,56801,svc_sql +LEG-WS-045,2026-02-17T06:09:33.245Z,10893,OneDrive.exe,CLOSE_WAIT,TCP,10.10.1.145,443,10.10.2.101,636,svc_backup +LEG-WS-045,2026-02-18T03:27:23.683Z,45175,OneDrive.exe,TIME_WAIT,TCP,10.10.1.145,3389,188.191.202.134,53,svc_sql +LEG-WS-045,2026-02-13T11:42:51.845Z,13813,powershell.exe,CLOSE_WAIT,UDP,10.10.1.145,636,10.10.2.110,88,hbrown +LEG-WS-045,2026-02-20T05:45:11.391Z,27750,code.exe,ESTABLISHED,TCP,10.10.1.145,139,31.106.95.212,389,emartinez +LEG-WS-045,2026-02-16T12:20:02.568Z,44606,svchost.exe,SYN_SENT,TCP,10.10.1.145,5985,10.10.3.10,42653,gwhite +LEG-WS-045,2026-02-16T19:03:28.551Z,23106,winlogon.exe,TIME_WAIT,TCP,10.10.1.145,139,180.242.196.193,28726,admin +LEG-WS-045,2026-02-15T01:40:17.577Z,49189,svchost.exe,CLOSE_WAIT,TCP,10.10.1.145,65124,23.243.129.140,443,emartinez +LEG-WS-045,2026-02-16T12:21:26.158Z,44352,winlogon.exe,ESTABLISHED,TCP,10.10.1.145,53,199.231.110.158,8080,svc_sql +LEG-WS-045,2026-02-15T10:46:29.101Z,59230,dwm.exe,CLOSE_WAIT,TCP,10.10.1.145,8080,71.198.24.65,636,gwhite +LEG-WS-045,2026-02-14T08:49:33.310Z,48893,teams.exe,ESTABLISHED,TCP,10.10.1.145,5985,10.10.3.162,80,svc_sql +LEG-WS-045,2026-02-11T18:48:04.776Z,48619,teams.exe,CLOSE_WAIT,TCP,10.10.1.145,445,58.174.252.59,8080,idavis +LEG-WS-045,2026-02-16T03:19:13.403Z,27772,csrss.exe,CLOSE_WAIT,TCP,10.10.1.145,80,182.188.54.108,88,agarcia +MKT-WS-046,2026-02-17T06:09:36.854Z,29335,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.146,53,63.70.61.7,8080,admin +MKT-WS-046,2026-02-11T20:50:48.508Z,8830,RuntimeBroker.exe,SYN_SENT,TCP,10.10.2.146,443,203.94.211.30,3389,svc_backup +MKT-WS-046,2026-02-19T07:08:47.117Z,52609,svchost.exe,TIME_WAIT,TCP,10.10.2.146,443,10.10.1.118,3389,cjohnson +MKT-WS-046,2026-02-15T07:25:19.558Z,64971,winlogon.exe,CLOSE_WAIT,TCP,10.10.2.146,443,45.198.36.38,443,agarcia +MKT-WS-046,2026-02-17T07:54:50.382Z,61099,powershell.exe,CLOSE_WAIT,TCP,10.10.2.146,139,10.10.1.142,3389,emartinez +MKT-WS-046,2026-02-20T05:20:49.115Z,33493,services.exe,LISTEN,UDP,10.10.2.146,88,0.0.0.0,0,fthompson +MKT-WS-046,2026-02-18T09:16:29.252Z,28460,spoolsv.exe,LISTEN,UDP,10.10.2.146,8080,0.0.0.0,0,idavis +MKT-WS-046,2026-02-13T11:52:27.199Z,35180,chrome.exe,SYN_SENT,TCP,10.10.2.146,53921,10.10.1.151,53,idavis +MKT-WS-046,2026-02-15T21:11:05.202Z,40494,notepad.exe,CLOSE_WAIT,TCP,10.10.2.146,5985,10.10.1.112,53,admin +MKT-WS-046,2026-02-13T23:07:41.894Z,20176,spoolsv.exe,TIME_WAIT,TCP,10.10.2.146,88,132.116.160.238,3389,cjohnson +MKT-WS-046,2026-02-17T18:09:18.933Z,36335,dwm.exe,CLOSE_WAIT,TCP,10.10.2.146,88,109.96.71.206,53,emartinez +MKT-WS-046,2026-02-14T05:44:58.761Z,25765,csrss.exe,SYN_SENT,TCP,10.10.2.146,443,10.10.2.10,389,gwhite +EXEC-WS-047,2026-02-12T07:13:55.279Z,61318,csrss.exe,SYN_SENT,TCP,10.10.3.147,139,10.10.2.149,443,dlee +EXEC-WS-047,2026-02-16T12:49:04.596Z,31319,csrss.exe,SYN_SENT,TCP,10.10.3.147,53,10.10.2.107,389,fthompson +EXEC-WS-047,2026-02-18T06:01:51.979Z,3671,msedge.exe,LISTEN,UDP,10.10.3.147,3389,0.0.0.0,0,jsmith +EXEC-WS-047,2026-02-13T20:24:05.304Z,41018,cmd.exe,ESTABLISHED,TCP,10.10.3.147,445,201.49.216.53,443,svc_backup +EXEC-WS-047,2026-02-16T14:54:55.165Z,49365,lsass.exe,LISTEN,UDP,10.10.3.147,88,0.0.0.0,0,dlee +EXEC-WS-047,2026-02-16T10:01:48.006Z,50061,RuntimeBroker.exe,LISTEN,UDP,10.10.3.147,53,0.0.0.0,0,cjohnson +EXEC-WS-047,2026-02-11T06:47:39.975Z,48626,SearchHost.exe,LISTEN,TCP,10.10.3.147,445,0.0.0.0,0,idavis +EXEC-WS-047,2026-02-19T21:24:22.979Z,18415,cmd.exe,CLOSE_WAIT,TCP,10.10.3.147,135,217.208.113.62,8080,agarcia +EXEC-WS-047,2026-02-14T22:37:54.800Z,48541,MsMpEng.exe,TIME_WAIT,TCP,10.10.3.147,8080,10.10.3.111,389,fthompson +EXEC-WS-047,2026-02-15T12:45:28.935Z,40446,SearchHost.exe,ESTABLISHED,TCP,10.10.3.147,135,10.10.3.168,80,fthompson +EXEC-WS-047,2026-02-11T03:20:21.258Z,54949,services.exe,LISTEN,TCP,10.10.3.147,636,0.0.0.0,0,svc_backup +EXEC-WS-047,2026-02-19T11:25:57.510Z,63057,teams.exe,CLOSE_WAIT,UDP,10.10.3.147,3389,91.207.140.64,25891,jsmith +EXEC-WS-047,2026-02-18T16:01:30.575Z,25584,smss.exe,LISTEN,TCP,10.10.3.147,636,0.0.0.0,0,idavis +EXEC-WS-047,2026-02-14T03:38:55.278Z,17130,SearchHost.exe,ESTABLISHED,TCP,10.10.3.147,636,10.10.1.133,445,gwhite +EXEC-WS-047,2026-02-11T07:05:39.102Z,45668,powershell.exe,SYN_SENT,TCP,10.10.3.147,80,98.186.24.195,8080,hbrown +EXEC-WS-047,2026-02-12T01:39:25.917Z,4476,chrome.exe,SYN_SENT,TCP,10.10.3.147,445,76.72.223.72,445,cjohnson +EXEC-WS-047,2026-02-16T14:39:30.904Z,5149,services.exe,ESTABLISHED,TCP,10.10.3.147,139,141.240.216.230,3389,agarcia +EXEC-WS-047,2026-02-15T03:38:03.415Z,49963,cmd.exe,LISTEN,TCP,10.10.3.147,53219,0.0.0.0,0,emartinez +EXEC-WS-047,2026-02-19T15:42:34.366Z,25908,outlook.exe,SYN_SENT,UDP,10.10.3.147,57201,3.166.87.197,636,bwilson +EXEC-WS-047,2026-02-19T00:34:11.927Z,37708,winlogon.exe,LISTEN,UDP,10.10.3.147,88,0.0.0.0,0,svc_sql +EXEC-WS-047,2026-02-15T03:11:35.434Z,52452,powershell.exe,CLOSE_WAIT,UDP,10.10.3.147,636,64.82.21.18,445,gwhite +EXEC-WS-047,2026-02-19T06:28:54.150Z,8373,SearchHost.exe,SYN_SENT,TCP,10.10.3.147,53,10.10.1.133,636,svc_sql +EXEC-WS-047,2026-02-15T09:48:19.433Z,49272,chrome.exe,SYN_SENT,TCP,10.10.3.147,443,10.10.1.139,53,jsmith +EXEC-WS-047,2026-02-18T14:26:24.472Z,26075,spoolsv.exe,LISTEN,TCP,10.10.3.147,389,0.0.0.0,0,cjohnson +EXEC-WS-047,2026-02-20T07:54:16.524Z,16180,powershell.exe,CLOSE_WAIT,TCP,10.10.3.147,5985,10.10.1.127,88,bwilson +IT-WS-048,2026-02-11T00:56:20.091Z,21822,explorer.exe,TIME_WAIT,TCP,10.10.1.148,389,10.10.1.166,389,cjohnson +IT-WS-048,2026-02-18T02:05:03.941Z,36904,dwm.exe,LISTEN,TCP,10.10.1.148,445,0.0.0.0,0,dlee +IT-WS-048,2026-02-15T00:05:22.792Z,21991,dwm.exe,LISTEN,TCP,10.10.1.148,80,0.0.0.0,0,svc_sql +IT-WS-048,2026-02-10T17:02:20.329Z,51172,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.148,3389,10.10.1.163,636,hbrown +IT-WS-048,2026-02-14T07:58:20.582Z,25947,smss.exe,SYN_SENT,TCP,10.10.1.148,5985,85.225.136.37,7131,cjohnson +IT-WS-048,2026-02-12T23:47:13.093Z,60135,notepad.exe,ESTABLISHED,UDP,10.10.1.148,5985,10.10.3.120,36875,cjohnson +IT-WS-048,2026-02-15T08:39:58.118Z,4431,chrome.exe,LISTEN,TCP,10.10.1.148,636,0.0.0.0,0,cjohnson +IT-WS-048,2026-02-16T00:58:52.823Z,59169,teams.exe,CLOSE_WAIT,TCP,10.10.1.148,389,10.10.2.161,636,svc_web +IT-WS-048,2026-02-13T18:02:18.262Z,33447,spoolsv.exe,TIME_WAIT,TCP,10.10.1.148,389,10.10.1.103,445,dlee +IT-WS-048,2026-02-19T12:11:11.540Z,16401,SearchHost.exe,ESTABLISHED,TCP,10.10.1.148,58993,221.131.54.211,3389,gwhite +IT-WS-048,2026-02-12T00:36:40.927Z,31634,msedge.exe,SYN_SENT,TCP,10.10.1.148,5985,10.10.2.143,3389,admin +IT-WS-048,2026-02-11T13:33:23.763Z,15545,taskhostw.exe,ESTABLISHED,TCP,10.10.1.148,5985,10.10.2.104,53,gwhite +IT-WS-048,2026-02-16T13:29:43.946Z,38992,winlogon.exe,CLOSE_WAIT,TCP,10.10.1.148,5985,111.120.146.63,8080,fthompson +IT-WS-048,2026-02-15T05:48:07.327Z,2242,msedge.exe,ESTABLISHED,TCP,10.10.1.148,445,139.219.252.230,80,bwilson +HR-WS-049,2026-02-10T08:03:11.803Z,60560,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.2.149,80,43.158.169.26,3613,cjohnson +HR-WS-049,2026-02-11T23:20:54.637Z,50960,SearchHost.exe,CLOSE_WAIT,TCP,10.10.2.149,88,10.10.1.109,445,svc_backup +HR-WS-049,2026-02-13T12:35:58.883Z,42927,winlogon.exe,SYN_SENT,UDP,10.10.2.149,80,10.10.2.161,636,svc_backup +HR-WS-049,2026-02-12T20:10:13.151Z,9846,lsass.exe,LISTEN,TCP,10.10.2.149,135,0.0.0.0,0,svc_backup +HR-WS-049,2026-02-17T11:55:53.226Z,38063,chrome.exe,ESTABLISHED,TCP,10.10.2.149,445,10.10.2.110,53,cjohnson +HR-WS-049,2026-02-11T00:30:49.815Z,2156,lsass.exe,CLOSE_WAIT,TCP,10.10.2.149,636,10.10.1.121,53,svc_web +HR-WS-049,2026-02-17T04:36:04.333Z,62887,cmd.exe,CLOSE_WAIT,UDP,10.10.2.149,8080,10.10.1.118,88,svc_sql +HR-WS-049,2026-02-14T15:57:00.930Z,32009,OneDrive.exe,LISTEN,TCP,10.10.2.149,139,0.0.0.0,0,emartinez +HR-WS-049,2026-02-19T18:49:36.206Z,47337,outlook.exe,LISTEN,TCP,10.10.2.149,139,0.0.0.0,0,bwilson +HR-WS-049,2026-02-13T19:07:46.127Z,43266,svchost.exe,TIME_WAIT,TCP,10.10.2.149,3389,1.53.247.198,8080,svc_web +HR-WS-049,2026-02-16T00:46:50.862Z,35410,dwm.exe,TIME_WAIT,TCP,10.10.2.149,53,10.10.1.106,64210,svc_sql +HR-WS-049,2026-02-16T06:58:27.884Z,60595,notepad.exe,TIME_WAIT,TCP,10.10.2.149,88,10.10.1.154,60930,emartinez +HR-WS-049,2026-02-10T09:04:16.517Z,15122,powershell.exe,CLOSE_WAIT,TCP,10.10.2.149,389,10.10.1.175,445,jsmith +HR-WS-049,2026-02-10T19:56:27.381Z,5087,csrss.exe,LISTEN,TCP,10.10.2.149,5985,0.0.0.0,0,svc_sql +HR-WS-049,2026-02-13T07:53:21.424Z,7693,System,SYN_SENT,TCP,10.10.2.149,53,223.156.26.128,636,svc_web +HR-WS-049,2026-02-20T04:38:40.702Z,1455,SearchHost.exe,SYN_SENT,TCP,10.10.2.149,53,168.102.7.176,3389,agarcia +HR-WS-049,2026-02-12T00:27:55.324Z,28047,cmd.exe,LISTEN,TCP,10.10.2.149,5985,0.0.0.0,0,cjohnson +HR-WS-049,2026-02-20T06:23:46.976Z,4424,RuntimeBroker.exe,ESTABLISHED,TCP,10.10.2.149,53,178.35.39.252,80,svc_sql +HR-WS-049,2026-02-11T14:21:35.139Z,50300,cmd.exe,LISTEN,TCP,10.10.2.149,3389,0.0.0.0,0,svc_web +HR-WS-049,2026-02-18T17:39:01.708Z,35837,csrss.exe,SYN_SENT,TCP,10.10.2.149,389,10.10.1.112,88,dlee +HR-WS-049,2026-02-19T05:22:35.602Z,52048,services.exe,ESTABLISHED,TCP,10.10.2.149,445,10.10.2.11,53,svc_sql +HR-WS-049,2026-02-14T08:49:08.041Z,42208,dwm.exe,CLOSE_WAIT,UDP,10.10.2.149,135,10.10.1.130,389,emartinez +HR-WS-049,2026-02-20T10:23:45.356Z,56592,explorer.exe,ESTABLISHED,TCP,10.10.2.149,80,10.10.1.148,80,gwhite +HR-WS-049,2026-02-18T18:42:26.373Z,51620,msedge.exe,SYN_SENT,TCP,10.10.2.149,88,10.10.3.171,8872,svc_web +HR-WS-049,2026-02-18T19:55:24.016Z,10129,powershell.exe,TIME_WAIT,TCP,10.10.2.149,139,10.54.28.241,445,dlee +HR-WS-049,2026-02-13T17:56:18.458Z,46748,lsass.exe,ESTABLISHED,TCP,10.10.2.149,443,128.157.153.105,445,agarcia +FIN-WS-050,2026-02-16T09:33:25.377Z,5266,services.exe,SYN_SENT,TCP,10.10.3.150,443,25.135.170.82,3389,cjohnson +FIN-WS-050,2026-02-11T07:14:30.730Z,21940,notepad.exe,SYN_SENT,TCP,10.10.3.150,51762,183.152.152.26,88,dlee +FIN-WS-050,2026-02-13T02:04:14.025Z,38822,outlook.exe,ESTABLISHED,TCP,10.10.3.150,443,10.10.3.147,443,hbrown +FIN-WS-050,2026-02-12T19:38:47.883Z,26832,powershell.exe,ESTABLISHED,TCP,10.10.3.150,445,167.53.8.121,636,jsmith +FIN-WS-050,2026-02-13T09:10:35.675Z,9026,cmd.exe,SYN_SENT,UDP,10.10.3.150,53,10.10.1.12,636,fthompson +FIN-WS-050,2026-02-14T13:23:10.467Z,12628,lsass.exe,SYN_SENT,TCP,10.10.3.150,135,10.10.1.11,443,svc_backup +FIN-WS-050,2026-02-17T11:01:01.351Z,8813,outlook.exe,SYN_SENT,UDP,10.10.3.150,389,64.67.20.60,443,cjohnson +FIN-WS-050,2026-02-11T20:44:48.799Z,42564,msedge.exe,SYN_SENT,TCP,10.10.3.150,636,29.7.211.28,8080,svc_sql +FIN-WS-050,2026-02-14T00:17:40.370Z,57113,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.3.150,389,133.140.227.170,88,admin +FIN-WS-050,2026-02-14T21:21:45.737Z,16622,MsMpEng.exe,LISTEN,TCP,10.10.3.150,139,0.0.0.0,0,jsmith +FIN-WS-050,2026-02-12T04:15:54.070Z,50500,teams.exe,ESTABLISHED,TCP,10.10.3.150,53,75.104.211.29,445,jsmith +FIN-WS-050,2026-02-13T03:24:35.543Z,31580,dwm.exe,ESTABLISHED,TCP,10.10.3.150,3389,10.10.1.136,88,cjohnson +FIN-WS-050,2026-02-13T03:57:10.899Z,43241,outlook.exe,ESTABLISHED,UDP,10.10.3.150,5985,10.10.1.148,443,hbrown +FIN-WS-050,2026-02-20T12:21:46.571Z,320,SearchHost.exe,ESTABLISHED,TCP,10.10.3.150,135,73.129.125.194,389,bwilson +FIN-WS-050,2026-02-16T10:32:53.120Z,41312,taskhostw.exe,SYN_SENT,TCP,10.10.3.150,80,10.10.2.140,445,fthompson +FIN-WS-050,2026-02-14T01:13:12.588Z,49837,services.exe,SYN_SENT,TCP,10.10.3.150,443,10.10.3.132,53,cjohnson +SLS-WS-051,2026-02-15T21:44:42.642Z,48505,lsass.exe,SYN_SENT,TCP,10.10.1.151,443,145.70.118.106,88,agarcia +SLS-WS-051,2026-02-14T14:17:04.363Z,18477,System,CLOSE_WAIT,UDP,10.10.1.151,636,10.10.3.105,1790,admin +SLS-WS-051,2026-02-16T16:56:36.632Z,6228,csrss.exe,LISTEN,TCP,10.10.1.151,135,0.0.0.0,0,svc_sql +SLS-WS-051,2026-02-18T14:55:50.057Z,58261,services.exe,SYN_SENT,UDP,10.10.1.151,8080,10.10.2.101,3389,emartinez +SLS-WS-051,2026-02-20T13:10:34.410Z,37567,dwm.exe,SYN_SENT,UDP,10.10.1.151,80,110.178.182.193,443,jsmith +SLS-WS-051,2026-02-10T19:18:03.751Z,11856,code.exe,LISTEN,UDP,10.10.1.151,636,0.0.0.0,0,cjohnson +SLS-WS-051,2026-02-17T05:24:55.143Z,14886,code.exe,LISTEN,TCP,10.10.1.151,80,0.0.0.0,0,idavis +SLS-WS-051,2026-02-14T19:57:20.272Z,45183,msedge.exe,LISTEN,TCP,10.10.1.151,389,0.0.0.0,0,agarcia +SLS-WS-051,2026-02-12T12:56:46.657Z,10175,teams.exe,CLOSE_WAIT,TCP,10.10.1.151,445,96.17.89.176,8080,fthompson +SLS-WS-051,2026-02-11T23:20:57.441Z,39046,powershell.exe,LISTEN,TCP,10.10.1.151,8080,0.0.0.0,0,hbrown +SLS-WS-051,2026-02-12T09:04:02.684Z,19468,code.exe,CLOSE_WAIT,TCP,10.10.1.151,88,215.227.142.81,80,fthompson +SLS-WS-051,2026-02-14T10:39:06.346Z,42675,csrss.exe,ESTABLISHED,TCP,10.10.1.151,52931,178.64.27.59,389,idavis +SLS-WS-051,2026-02-16T02:04:09.574Z,22324,outlook.exe,ESTABLISHED,TCP,10.10.1.151,53,60.64.123.233,636,hbrown +SLS-WS-051,2026-02-17T14:41:37.967Z,5957,cmd.exe,TIME_WAIT,TCP,10.10.1.151,445,12.218.251.218,3389,hbrown +SLS-WS-051,2026-02-18T07:22:11.500Z,51221,csrss.exe,ESTABLISHED,TCP,10.10.1.151,636,10.10.1.136,80,jsmith +SLS-WS-051,2026-02-14T21:44:41.152Z,58708,OneDrive.exe,ESTABLISHED,TCP,10.10.1.151,3389,10.10.2.125,443,hbrown +SLS-WS-051,2026-02-13T01:12:03.659Z,5673,explorer.exe,SYN_SENT,TCP,10.10.1.151,3389,10.10.3.165,445,hbrown +SLS-WS-051,2026-02-15T05:13:06.948Z,33336,services.exe,SYN_SENT,TCP,10.10.1.151,139,126.39.77.45,88,fthompson +SLS-WS-051,2026-02-17T20:58:29.304Z,18127,explorer.exe,SYN_SENT,TCP,10.10.1.151,389,10.10.1.13,53,hbrown +SLS-WS-051,2026-02-14T03:33:09.577Z,53942,SearchHost.exe,SYN_SENT,TCP,10.10.1.151,5985,10.10.1.142,80,bwilson +SLS-WS-051,2026-02-16T03:33:56.136Z,40607,SearchHost.exe,ESTABLISHED,TCP,10.10.1.151,389,10.10.2.131,40483,emartinez +SLS-WS-051,2026-02-12T23:12:13.606Z,34740,svchost.exe,SYN_SENT,TCP,10.10.1.151,445,17.31.137.206,88,agarcia +SLS-WS-051,2026-02-15T20:04:49.170Z,4305,dwm.exe,ESTABLISHED,TCP,10.10.1.151,389,46.242.255.226,3389,fthompson +SLS-WS-051,2026-02-11T23:38:53.578Z,16006,outlook.exe,ESTABLISHED,UDP,10.10.1.151,88,10.10.3.174,445,fthompson +SLS-WS-051,2026-02-13T08:54:22.788Z,64470,outlook.exe,TIME_WAIT,TCP,10.10.1.151,135,27.158.128.22,88,admin +SLS-WS-051,2026-02-20T07:48:16.583Z,59831,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.1.151,445,104.117.188.88,3389,svc_backup +SLS-WS-051,2026-02-17T22:41:42.065Z,24241,chrome.exe,CLOSE_WAIT,TCP,10.10.1.151,5985,203.143.148.132,3389,cjohnson +SLS-WS-051,2026-02-17T11:42:24.710Z,3869,dwm.exe,SYN_SENT,UDP,10.10.1.151,3389,10.10.3.108,445,svc_web +SLS-WS-051,2026-02-18T23:07:53.019Z,16989,code.exe,LISTEN,UDP,10.10.1.151,135,0.0.0.0,0,idavis +ENG-WS-052,2026-02-17T20:18:46.552Z,51701,msedge.exe,CLOSE_WAIT,UDP,10.10.2.152,53785,10.10.2.10,389,agarcia +ENG-WS-052,2026-02-17T09:41:44.667Z,32381,services.exe,LISTEN,UDP,10.10.2.152,389,0.0.0.0,0,cjohnson +ENG-WS-052,2026-02-20T15:51:19.760Z,6346,spoolsv.exe,TIME_WAIT,UDP,10.10.2.152,5985,10.10.3.111,53,gwhite +ENG-WS-052,2026-02-11T12:00:13.163Z,8482,lsass.exe,SYN_SENT,TCP,10.10.2.152,80,48.106.13.208,88,svc_web +ENG-WS-052,2026-02-16T23:12:30.091Z,32694,svchost.exe,LISTEN,TCP,10.10.2.152,8080,0.0.0.0,0,dlee +ENG-WS-052,2026-02-11T03:03:46.747Z,39663,services.exe,ESTABLISHED,TCP,10.10.2.152,88,10.10.1.12,80,agarcia +ENG-WS-052,2026-02-16T10:38:21.375Z,49679,dwm.exe,SYN_SENT,TCP,10.10.2.152,53,10.10.3.168,80,fthompson +ENG-WS-052,2026-02-12T20:02:08.147Z,18123,teams.exe,LISTEN,TCP,10.10.2.152,443,0.0.0.0,0,emartinez +ENG-WS-052,2026-02-18T23:23:44.766Z,41419,chrome.exe,ESTABLISHED,TCP,10.10.2.152,636,10.10.1.169,80,jsmith +ENG-WS-052,2026-02-14T20:50:34.124Z,51921,taskhostw.exe,LISTEN,TCP,10.10.2.152,5985,0.0.0.0,0,svc_backup +ENG-WS-052,2026-02-14T02:19:49.890Z,26172,OneDrive.exe,ESTABLISHED,TCP,10.10.2.152,5985,200.9.21.242,3389,idavis +ENG-WS-052,2026-02-14T00:56:55.805Z,53668,svchost.exe,CLOSE_WAIT,UDP,10.10.2.152,443,83.108.51.244,53,fthompson +ENG-WS-052,2026-02-20T13:58:47.889Z,54586,teams.exe,CLOSE_WAIT,TCP,10.10.2.152,8080,161.248.217.196,3389,dlee +ENG-WS-052,2026-02-18T00:09:52.306Z,34742,explorer.exe,ESTABLISHED,UDP,10.10.2.152,53,2.229.99.88,636,bwilson +ENG-WS-052,2026-02-11T09:37:07.265Z,24385,code.exe,LISTEN,TCP,10.10.2.152,80,0.0.0.0,0,gwhite +ENG-WS-052,2026-02-17T18:39:47.492Z,29794,svchost.exe,SYN_SENT,TCP,10.10.2.152,88,149.33.148.74,80,dlee +ENG-WS-052,2026-02-13T09:53:12.764Z,35179,teams.exe,CLOSE_WAIT,TCP,10.10.2.152,62938,10.10.3.171,636,svc_sql +ENG-WS-052,2026-02-18T14:04:28.699Z,56253,SearchHost.exe,SYN_SENT,UDP,10.10.2.152,3389,10.10.3.165,38345,cjohnson +ENG-WS-052,2026-02-17T14:55:09.828Z,64982,code.exe,ESTABLISHED,UDP,10.10.2.152,139,200.72.220.104,27750,hbrown +ENG-WS-052,2026-02-15T17:59:54.401Z,14543,SearchHost.exe,ESTABLISHED,TCP,10.10.2.152,80,10.10.2.128,3389,emartinez +ENG-WS-052,2026-02-19T13:49:14.447Z,7820,services.exe,TIME_WAIT,UDP,10.10.2.152,389,10.10.2.101,88,bwilson +ENG-WS-052,2026-02-11T07:22:27.654Z,36185,smss.exe,SYN_SENT,TCP,10.10.2.152,80,141.75.207.152,445,fthompson +ENG-WS-052,2026-02-13T14:25:25.214Z,22175,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.2.152,80,144.246.218.26,636,svc_sql +ENG-WS-052,2026-02-15T07:36:15.594Z,14762,code.exe,TIME_WAIT,TCP,10.10.2.152,135,151.159.139.161,8080,jsmith +ENG-WS-052,2026-02-17T07:04:43.542Z,53466,spotify.exe,SYN_SENT,TCP,10.10.2.152,5985,17.28.59.214,443,idavis +ENG-WS-052,2026-02-10T21:34:51.181Z,26824,svchost.exe,ESTABLISHED,TCP,10.10.2.152,53,15.142.41.76,53,svc_sql +ENG-WS-052,2026-02-13T03:31:49.356Z,58801,spoolsv.exe,SYN_SENT,UDP,10.10.2.152,389,106.73.25.187,445,gwhite +ENG-WS-052,2026-02-16T13:04:40.808Z,22680,services.exe,TIME_WAIT,TCP,10.10.2.152,80,10.10.2.152,8080,jsmith +LEG-WS-053,2026-02-12T09:36:35.324Z,29844,winlogon.exe,CLOSE_WAIT,TCP,10.10.3.153,445,10.10.1.151,3389,cjohnson +LEG-WS-053,2026-02-12T11:13:45.338Z,59024,outlook.exe,TIME_WAIT,TCP,10.10.3.153,135,89.205.55.120,80,bwilson +LEG-WS-053,2026-02-15T11:56:13.275Z,37680,chrome.exe,SYN_SENT,UDP,10.10.3.153,5985,10.10.1.166,389,emartinez +LEG-WS-053,2026-02-16T00:17:49.914Z,20225,code.exe,LISTEN,TCP,10.10.3.153,389,0.0.0.0,0,dlee +LEG-WS-053,2026-02-13T07:11:24.561Z,3566,teams.exe,SYN_SENT,TCP,10.10.3.153,445,222.202.150.131,445,cjohnson +LEG-WS-053,2026-02-12T02:34:46.373Z,12332,MsMpEng.exe,TIME_WAIT,TCP,10.10.3.153,8080,10.10.1.160,636,agarcia +LEG-WS-053,2026-02-13T21:02:03.798Z,54478,teams.exe,ESTABLISHED,TCP,10.10.3.153,443,161.99.133.133,636,gwhite +LEG-WS-053,2026-02-14T14:06:22.650Z,22282,MsMpEng.exe,SYN_SENT,TCP,10.10.3.153,56815,110.118.124.225,53,cjohnson +LEG-WS-053,2026-02-12T18:59:14.926Z,26647,csrss.exe,ESTABLISHED,TCP,10.10.3.153,5985,10.10.3.108,389,hbrown +LEG-WS-053,2026-02-13T17:58:21.542Z,10534,outlook.exe,ESTABLISHED,TCP,10.10.3.153,5985,139.73.43.169,53,agarcia +LEG-WS-053,2026-02-15T18:42:33.711Z,50568,MsMpEng.exe,TIME_WAIT,TCP,10.10.3.153,53,115.53.135.104,443,bwilson +LEG-WS-053,2026-02-18T04:44:26.713Z,62679,smss.exe,LISTEN,TCP,10.10.3.153,8080,0.0.0.0,0,jsmith +LEG-WS-053,2026-02-19T04:43:05.213Z,52422,System,TIME_WAIT,UDP,10.10.3.153,88,156.147.8.244,80,jsmith +MKT-WS-054,2026-02-15T16:03:05.071Z,41355,System,CLOSE_WAIT,TCP,10.10.1.154,53,10.10.1.11,56476,agarcia +MKT-WS-054,2026-02-14T12:24:47.997Z,25691,notepad.exe,TIME_WAIT,TCP,10.10.1.154,64155,193.18.225.24,636,gwhite +MKT-WS-054,2026-02-14T07:06:43.465Z,5211,MsMpEng.exe,LISTEN,TCP,10.10.1.154,139,0.0.0.0,0,idavis +MKT-WS-054,2026-02-13T16:01:44.650Z,37901,spoolsv.exe,CLOSE_WAIT,TCP,10.10.1.154,5985,139.76.223.130,8080,cjohnson +MKT-WS-054,2026-02-17T05:53:33.101Z,56971,explorer.exe,SYN_SENT,TCP,10.10.1.154,5985,10.10.2.107,80,emartinez +MKT-WS-054,2026-02-12T03:58:36.487Z,49020,SearchHost.exe,CLOSE_WAIT,TCP,10.10.1.154,389,117.19.15.173,636,emartinez +MKT-WS-054,2026-02-16T22:29:14.116Z,8822,cmd.exe,TIME_WAIT,UDP,10.10.1.154,8080,10.10.2.146,3389,admin +MKT-WS-054,2026-02-12T06:39:01.612Z,50005,smss.exe,TIME_WAIT,TCP,10.10.1.154,135,10.10.2.122,53,emartinez +MKT-WS-054,2026-02-20T10:09:25.194Z,11362,winlogon.exe,LISTEN,TCP,10.10.1.154,445,0.0.0.0,0,fthompson +MKT-WS-054,2026-02-12T15:53:18.290Z,61676,powershell.exe,LISTEN,TCP,10.10.1.154,443,0.0.0.0,0,hbrown +MKT-WS-054,2026-02-13T16:06:37.274Z,32066,OneDrive.exe,CLOSE_WAIT,TCP,10.10.1.154,80,10.10.3.150,2048,svc_sql +MKT-WS-054,2026-02-16T21:01:54.975Z,7962,cmd.exe,LISTEN,TCP,10.10.1.154,139,0.0.0.0,0,admin +MKT-WS-054,2026-02-13T03:17:00.404Z,2570,smss.exe,ESTABLISHED,TCP,10.10.1.154,88,10.10.2.167,3389,agarcia +MKT-WS-054,2026-02-17T22:13:59.224Z,24093,code.exe,CLOSE_WAIT,TCP,10.10.1.154,3389,76.232.55.84,3389,idavis +MKT-WS-054,2026-02-13T02:26:18.981Z,55583,lsass.exe,CLOSE_WAIT,TCP,10.10.1.154,135,205.218.229.218,2076,bwilson +MKT-WS-054,2026-02-15T18:55:48.898Z,36897,spoolsv.exe,ESTABLISHED,TCP,10.10.1.154,80,199.181.90.117,46642,jsmith +MKT-WS-054,2026-02-16T03:21:05.929Z,59927,outlook.exe,CLOSE_WAIT,TCP,10.10.1.154,3389,34.120.178.103,53,svc_sql +MKT-WS-054,2026-02-17T16:31:31.485Z,33537,lsass.exe,ESTABLISHED,TCP,10.10.1.154,62767,194.230.226.72,389,emartinez +MKT-WS-054,2026-02-11T16:13:27.157Z,62883,MsMpEng.exe,TIME_WAIT,TCP,10.10.1.154,636,10.10.3.141,636,idavis +MKT-WS-054,2026-02-16T10:34:58.194Z,57667,chrome.exe,CLOSE_WAIT,TCP,10.10.1.154,445,10.10.3.120,3389,cjohnson +MKT-WS-054,2026-02-11T01:18:38.318Z,465,powershell.exe,LISTEN,TCP,10.10.1.154,3389,0.0.0.0,0,emartinez +MKT-WS-054,2026-02-15T19:11:52.704Z,25204,explorer.exe,SYN_SENT,UDP,10.10.1.154,53,10.10.1.139,636,fthompson +EXEC-WS-055,2026-02-18T13:12:24.881Z,47244,OneDrive.exe,LISTEN,TCP,10.10.2.155,389,0.0.0.0,0,dlee +EXEC-WS-055,2026-02-18T17:20:46.285Z,11429,outlook.exe,ESTABLISHED,UDP,10.10.2.155,53,190.85.188.74,3389,svc_backup +EXEC-WS-055,2026-02-12T10:02:42.984Z,9485,msedge.exe,LISTEN,UDP,10.10.2.155,445,0.0.0.0,0,svc_web +EXEC-WS-055,2026-02-12T00:02:15.717Z,47125,spoolsv.exe,TIME_WAIT,TCP,10.10.2.155,80,10.10.3.132,389,hbrown +EXEC-WS-055,2026-02-13T16:12:43.975Z,49044,svchost.exe,SYN_SENT,UDP,10.10.2.155,5985,10.10.1.124,389,emartinez +EXEC-WS-055,2026-02-14T07:36:11.504Z,43201,cmd.exe,CLOSE_WAIT,UDP,10.10.2.155,445,221.16.166.37,389,hbrown +EXEC-WS-055,2026-02-12T09:34:49.070Z,51690,msedge.exe,CLOSE_WAIT,TCP,10.10.2.155,636,10.10.1.109,3389,svc_backup +EXEC-WS-055,2026-02-19T12:23:22.839Z,62709,smss.exe,SYN_SENT,UDP,10.10.2.155,3389,47.88.79.148,88,agarcia +EXEC-WS-055,2026-02-17T15:37:03.225Z,16124,taskhostw.exe,SYN_SENT,TCP,10.10.2.155,135,10.10.2.122,53,svc_sql +EXEC-WS-055,2026-02-14T16:28:07.855Z,32153,System,LISTEN,TCP,10.10.2.155,139,0.0.0.0,0,svc_backup +EXEC-WS-055,2026-02-12T21:47:01.773Z,1381,winlogon.exe,LISTEN,UDP,10.10.2.155,139,0.0.0.0,0,idavis +EXEC-WS-055,2026-02-12T00:31:20.614Z,21799,cmd.exe,SYN_SENT,TCP,10.10.2.155,445,115.224.1.48,443,cjohnson +EXEC-WS-055,2026-02-20T04:27:03.860Z,34109,services.exe,CLOSE_WAIT,TCP,10.10.2.155,636,29.109.251.182,636,cjohnson +EXEC-WS-055,2026-02-15T10:14:10.886Z,53238,svchost.exe,ESTABLISHED,UDP,10.10.2.155,5985,187.27.96.45,636,admin +EXEC-WS-055,2026-02-16T23:21:24.419Z,25943,dwm.exe,SYN_SENT,TCP,10.10.2.155,3389,10.10.1.166,3389,jsmith +EXEC-WS-055,2026-02-12T19:04:18.605Z,25518,explorer.exe,LISTEN,TCP,10.10.2.155,139,0.0.0.0,0,admin +EXEC-WS-055,2026-02-17T00:43:40.502Z,11075,smss.exe,SYN_SENT,TCP,10.10.2.155,8080,18.177.83.245,8080,svc_sql +EXEC-WS-055,2026-02-18T21:48:44.253Z,59846,smss.exe,TIME_WAIT,TCP,10.10.2.155,139,51.244.141.168,4739,jsmith +EXEC-WS-055,2026-02-11T12:53:23.634Z,10415,winlogon.exe,ESTABLISHED,UDP,10.10.2.155,443,156.58.74.102,8080,agarcia +EXEC-WS-055,2026-02-14T07:38:43.850Z,6948,OneDrive.exe,CLOSE_WAIT,TCP,10.10.2.155,64440,170.71.27.30,443,bwilson +EXEC-WS-055,2026-02-18T02:41:35.782Z,14130,explorer.exe,ESTABLISHED,TCP,10.10.2.155,8080,35.175.224.239,61676,jsmith +EXEC-WS-055,2026-02-12T04:02:03.448Z,6004,code.exe,CLOSE_WAIT,TCP,10.10.2.155,135,138.6.91.117,445,dlee +EXEC-WS-055,2026-02-14T05:53:39.243Z,1221,System,CLOSE_WAIT,TCP,10.10.2.155,3389,221.4.167.252,445,svc_web +EXEC-WS-055,2026-02-15T12:08:22.255Z,1219,code.exe,TIME_WAIT,TCP,10.10.2.155,61620,10.10.2.173,9425,svc_sql +EXEC-WS-055,2026-02-12T13:00:11.349Z,1872,csrss.exe,ESTABLISHED,UDP,10.10.2.155,135,10.10.3.147,8080,dlee +EXEC-WS-055,2026-02-15T11:42:51.380Z,4052,outlook.exe,ESTABLISHED,UDP,10.10.2.155,80,10.10.1.121,636,bwilson +EXEC-WS-055,2026-02-15T20:45:42.480Z,62041,explorer.exe,CLOSE_WAIT,TCP,10.10.2.155,5985,221.11.211.59,445,agarcia +EXEC-WS-055,2026-02-17T17:34:58.549Z,18807,cmd.exe,LISTEN,TCP,10.10.2.155,636,0.0.0.0,0,jsmith +EXEC-WS-055,2026-02-16T11:31:50.608Z,51111,msedge.exe,ESTABLISHED,TCP,10.10.2.155,5985,128.231.188.109,389,emartinez +EXEC-WS-055,2026-02-19T02:23:40.863Z,9069,lsass.exe,LISTEN,UDP,10.10.2.155,8080,0.0.0.0,0,svc_web +EXEC-WS-055,2026-02-10T14:39:40.871Z,59833,csrss.exe,CLOSE_WAIT,TCP,10.10.2.155,80,143.30.60.205,3389,svc_backup +EXEC-WS-055,2026-02-13T05:02:32.992Z,61914,System,LISTEN,TCP,10.10.2.155,5985,0.0.0.0,0,agarcia +EXEC-WS-055,2026-02-20T11:33:01.050Z,46257,lsass.exe,SYN_SENT,TCP,10.10.2.155,53,25.187.229.28,443,jsmith +EXEC-WS-055,2026-02-18T19:14:57.438Z,18956,code.exe,SYN_SENT,TCP,10.10.2.155,8080,10.10.1.130,80,emartinez +EXEC-WS-055,2026-02-14T20:46:26.484Z,22967,cmd.exe,CLOSE_WAIT,TCP,10.10.2.155,55689,103.89.58.181,2166,hbrown +EXEC-WS-055,2026-02-13T19:26:26.436Z,44077,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.155,636,110.129.254.8,80,svc_sql +EXEC-WS-055,2026-02-11T03:44:00.071Z,38448,code.exe,SYN_SENT,TCP,10.10.2.155,54282,10.10.1.151,8080,agarcia +EXEC-WS-055,2026-02-16T20:42:33.880Z,1734,outlook.exe,CLOSE_WAIT,TCP,10.10.2.155,80,10.10.2.113,53,svc_sql +EXEC-WS-055,2026-02-15T23:58:10.188Z,61800,msedge.exe,ESTABLISHED,TCP,10.10.2.155,389,10.10.1.103,3389,hbrown +IT-WS-056,2026-02-16T16:12:44.294Z,2583,smss.exe,TIME_WAIT,TCP,10.10.3.156,3389,64.33.162.201,17769,svc_sql +IT-WS-056,2026-02-14T21:45:15.611Z,7982,spoolsv.exe,SYN_SENT,TCP,10.10.3.156,62095,156.252.114.166,31383,svc_web +IT-WS-056,2026-02-15T09:15:19.254Z,37522,services.exe,SYN_SENT,TCP,10.10.3.156,5985,10.10.1.163,80,dlee +IT-WS-056,2026-02-12T01:17:08.456Z,28332,teams.exe,TIME_WAIT,TCP,10.10.3.156,135,189.148.58.157,445,svc_web +IT-WS-056,2026-02-10T20:44:42.715Z,30295,MsMpEng.exe,LISTEN,TCP,10.10.3.156,8080,0.0.0.0,0,svc_web +IT-WS-056,2026-02-20T03:55:42.740Z,52475,teams.exe,ESTABLISHED,TCP,10.10.3.156,80,10.10.2.11,636,agarcia +IT-WS-056,2026-02-10T15:38:02.207Z,53862,MsMpEng.exe,SYN_SENT,TCP,10.10.3.156,445,10.10.1.103,636,svc_web +IT-WS-056,2026-02-20T11:07:47.240Z,24597,System,CLOSE_WAIT,TCP,10.10.3.156,53,36.82.61.116,389,gwhite +IT-WS-056,2026-02-15T23:01:25.481Z,27545,System,LISTEN,TCP,10.10.3.156,139,0.0.0.0,0,gwhite +IT-WS-056,2026-02-20T01:32:13.803Z,33582,MsMpEng.exe,ESTABLISHED,UDP,10.10.3.156,5985,145.43.153.153,443,gwhite +IT-WS-056,2026-02-13T02:47:01.019Z,38690,smss.exe,TIME_WAIT,UDP,10.10.3.156,53,10.10.1.151,80,emartinez +IT-WS-056,2026-02-13T07:01:45.718Z,58673,msedge.exe,TIME_WAIT,TCP,10.10.3.156,443,91.218.22.127,389,svc_sql +HR-WS-057,2026-02-19T23:33:24.386Z,46106,SearchHost.exe,TIME_WAIT,TCP,10.10.1.157,88,205.203.93.75,59008,admin +HR-WS-057,2026-02-14T22:59:11.785Z,10123,services.exe,CLOSE_WAIT,TCP,10.10.1.157,636,10.10.2.158,443,hbrown +HR-WS-057,2026-02-18T06:00:44.296Z,54201,SearchHost.exe,LISTEN,UDP,10.10.1.157,88,0.0.0.0,0,admin +HR-WS-057,2026-02-19T12:05:00.848Z,9108,System,SYN_SENT,UDP,10.10.1.157,53,147.113.136.137,80,dlee +HR-WS-057,2026-02-16T10:37:28.145Z,49690,outlook.exe,SYN_SENT,TCP,10.10.1.157,5985,6.32.45.77,443,svc_backup +HR-WS-057,2026-02-13T21:25:56.114Z,64391,MsMpEng.exe,SYN_SENT,UDP,10.10.1.157,636,10.10.2.161,80,cjohnson +HR-WS-057,2026-02-13T01:32:44.462Z,40488,cmd.exe,TIME_WAIT,TCP,10.10.1.157,5985,10.10.1.136,8080,agarcia +HR-WS-057,2026-02-19T16:08:38.133Z,61137,spoolsv.exe,ESTABLISHED,UDP,10.10.1.157,139,10.10.1.109,389,svc_backup +HR-WS-057,2026-02-15T23:15:37.638Z,59577,dwm.exe,LISTEN,TCP,10.10.1.157,53,0.0.0.0,0,svc_backup +HR-WS-057,2026-02-19T01:56:01.168Z,40899,SearchHost.exe,CLOSE_WAIT,TCP,10.10.1.157,443,70.40.226.70,3389,bwilson +HR-WS-057,2026-02-14T07:17:26.175Z,20570,spoolsv.exe,CLOSE_WAIT,TCP,10.10.1.157,88,10.10.3.10,636,svc_backup +HR-WS-057,2026-02-17T09:52:50.740Z,3939,chrome.exe,TIME_WAIT,TCP,10.10.1.157,3389,206.25.56.32,48365,svc_web +HR-WS-057,2026-02-12T16:46:02.304Z,39159,winlogon.exe,TIME_WAIT,UDP,10.10.1.157,636,12.179.58.19,80,hbrown +HR-WS-057,2026-02-16T13:52:24.462Z,24937,System,CLOSE_WAIT,UDP,10.10.1.157,3389,10.10.1.166,53,gwhite +HR-WS-057,2026-02-20T17:39:36.009Z,44822,svchost.exe,SYN_SENT,TCP,10.10.1.157,59019,10.10.2.107,88,svc_web +HR-WS-057,2026-02-18T21:02:52.236Z,61139,System,SYN_SENT,TCP,10.10.1.157,8080,10.10.3.156,80,dlee +HR-WS-057,2026-02-18T17:18:58.163Z,1993,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.1.157,53,8.230.157.197,636,fthompson +HR-WS-057,2026-02-16T22:09:21.609Z,39660,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.1.157,61645,34.94.214.87,88,idavis +HR-WS-057,2026-02-17T13:29:14.666Z,31160,explorer.exe,ESTABLISHED,TCP,10.10.1.157,445,10.10.1.124,389,dlee +HR-WS-057,2026-02-18T19:49:16.959Z,16562,taskhostw.exe,SYN_SENT,TCP,10.10.1.157,80,27.40.90.72,636,hbrown +HR-WS-057,2026-02-20T15:54:33.269Z,8478,spoolsv.exe,CLOSE_WAIT,TCP,10.10.1.157,49352,10.10.1.10,389,cjohnson +HR-WS-057,2026-02-19T05:11:07.614Z,41950,teams.exe,SYN_SENT,TCP,10.10.1.157,8080,10.10.1.118,445,svc_sql +FIN-WS-058,2026-02-13T22:25:47.307Z,38683,utorrent.exe,ESTABLISHED,UDP,10.10.2.158,135,10.10.3.162,88,svc_backup +FIN-WS-058,2026-02-11T14:51:05.311Z,36635,System,ESTABLISHED,TCP,10.10.2.158,389,44.188.135.243,8080,svc_backup +FIN-WS-058,2026-02-13T07:18:06.253Z,30719,dwm.exe,TIME_WAIT,TCP,10.10.2.158,61014,10.10.2.155,53,emartinez +FIN-WS-058,2026-02-17T23:21:35.848Z,64540,code.exe,ESTABLISHED,TCP,10.10.2.158,135,10.10.1.169,45730,agarcia +FIN-WS-058,2026-02-17T00:22:44.096Z,48744,SearchHost.exe,LISTEN,UDP,10.10.2.158,389,0.0.0.0,0,bwilson +FIN-WS-058,2026-02-12T02:25:44.359Z,4869,svchost.exe,LISTEN,TCP,10.10.2.158,389,0.0.0.0,0,gwhite +FIN-WS-058,2026-02-10T16:18:00.126Z,40003,svchost.exe,SYN_SENT,TCP,10.10.2.158,88,10.10.1.106,3389,svc_sql +FIN-WS-058,2026-02-19T06:27:34.626Z,56672,taskhostw.exe,SYN_SENT,TCP,10.10.2.158,139,10.10.1.130,80,svc_backup +FIN-WS-058,2026-02-12T23:31:32.344Z,60182,msedge.exe,SYN_SENT,TCP,10.10.2.158,8080,10.10.2.155,445,admin +FIN-WS-058,2026-02-11T10:47:17.819Z,42160,cmd.exe,TIME_WAIT,TCP,10.10.2.158,53,54.185.33.122,636,admin +FIN-WS-058,2026-02-16T05:58:28.684Z,27991,MsMpEng.exe,TIME_WAIT,UDP,10.10.2.158,445,10.10.1.169,53708,idavis +FIN-WS-058,2026-02-12T23:26:53.804Z,15340,outlook.exe,SYN_SENT,TCP,10.10.2.158,3389,10.10.1.136,8080,jsmith +FIN-WS-058,2026-02-12T00:41:00.632Z,15531,services.exe,SYN_SENT,TCP,10.10.2.158,445,69.67.104.213,389,cjohnson +FIN-WS-058,2026-02-14T09:58:27.454Z,53637,msedge.exe,LISTEN,TCP,10.10.2.158,80,0.0.0.0,0,bwilson +FIN-WS-058,2026-02-16T08:31:06.658Z,60663,smss.exe,LISTEN,UDP,10.10.2.158,636,0.0.0.0,0,cjohnson +FIN-WS-058,2026-02-14T06:51:02.180Z,3069,msedge.exe,ESTABLISHED,TCP,10.10.2.158,445,10.10.1.109,88,jsmith +FIN-WS-058,2026-02-14T07:55:44.306Z,6190,spoolsv.exe,SYN_SENT,TCP,10.10.2.158,636,10.10.3.111,53,dlee +FIN-WS-058,2026-02-17T02:28:08.078Z,42118,utorrent.exe,LISTEN,TCP,10.10.2.158,3389,0.0.0.0,0,agarcia +FIN-WS-058,2026-02-13T15:05:53.004Z,44420,explorer.exe,CLOSE_WAIT,TCP,10.10.2.158,62951,10.10.2.140,57801,svc_sql +FIN-WS-058,2026-02-14T13:04:09.933Z,12052,svchost.exe,LISTEN,TCP,10.10.2.158,64128,0.0.0.0,0,jsmith +FIN-WS-058,2026-02-14T17:31:13.620Z,6131,cmd.exe,TIME_WAIT,TCP,10.10.2.158,8080,10.10.1.106,88,agarcia +FIN-WS-058,2026-02-15T23:24:48.459Z,6691,spoolsv.exe,CLOSE_WAIT,TCP,10.10.2.158,443,182.46.115.253,389,fthompson +FIN-WS-058,2026-02-16T01:03:31.286Z,19380,smss.exe,TIME_WAIT,TCP,10.10.2.158,80,134.7.188.198,88,hbrown +FIN-WS-058,2026-02-15T18:00:35.112Z,41733,System,SYN_SENT,TCP,10.10.2.158,445,10.10.1.130,636,idavis +FIN-WS-058,2026-02-16T06:20:14.725Z,58872,dwm.exe,CLOSE_WAIT,TCP,10.10.2.158,3389,10.10.3.147,443,fthompson +FIN-WS-058,2026-02-11T17:10:30.944Z,57848,services.exe,LISTEN,UDP,10.10.2.158,443,0.0.0.0,0,svc_backup +FIN-WS-058,2026-02-20T03:11:10.657Z,51477,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.2.158,5985,10.10.2.101,8080,gwhite +FIN-WS-058,2026-02-16T14:31:50.861Z,51484,dwm.exe,TIME_WAIT,TCP,10.10.2.158,8080,10.10.1.118,88,agarcia +FIN-WS-058,2026-02-16T14:47:22.686Z,31395,MsMpEng.exe,SYN_SENT,UDP,10.10.2.158,443,156.206.70.112,8080,emartinez +FIN-WS-058,2026-02-13T22:39:10.300Z,19344,chrome.exe,CLOSE_WAIT,TCP,10.10.2.158,636,188.187.136.235,636,emartinez +FIN-WS-058,2026-02-17T17:34:35.957Z,1283,explorer.exe,TIME_WAIT,TCP,10.10.2.158,80,10.10.3.147,80,svc_backup +FIN-WS-058,2026-02-20T15:58:11.524Z,33071,spoolsv.exe,CLOSE_WAIT,UDP,10.10.2.158,5985,71.27.235.44,389,bwilson +FIN-WS-058,2026-02-11T18:03:44.748Z,27604,services.exe,TIME_WAIT,TCP,10.10.2.158,80,10.10.2.134,443,agarcia +FIN-WS-058,2026-02-16T16:36:16.569Z,55401,System,TIME_WAIT,TCP,10.10.2.158,443,10.10.1.115,80,gwhite +FIN-WS-058,2026-02-11T18:02:27.851Z,2973,msedge.exe,ESTABLISHED,TCP,10.10.2.158,5985,21.22.185.59,54816,jsmith +SLS-WS-059,2026-02-17T14:46:54.157Z,14976,lsass.exe,SYN_SENT,TCP,10.10.3.159,80,10.10.3.165,53,svc_sql +SLS-WS-059,2026-02-18T07:29:51.996Z,27193,smss.exe,SYN_SENT,TCP,10.10.3.159,88,10.10.3.117,389,svc_web +SLS-WS-059,2026-02-10T19:21:03.542Z,23155,services.exe,SYN_SENT,UDP,10.10.3.159,135,207.159.42.55,53,svc_sql +SLS-WS-059,2026-02-18T06:59:06.796Z,54092,services.exe,CLOSE_WAIT,UDP,10.10.3.159,443,10.10.3.147,636,cjohnson +SLS-WS-059,2026-02-16T00:59:18.320Z,64962,outlook.exe,CLOSE_WAIT,TCP,10.10.3.159,5985,10.10.2.155,13722,svc_backup +SLS-WS-059,2026-02-14T13:28:22.973Z,9137,notepad.exe,SYN_SENT,TCP,10.10.3.159,53,10.10.1.130,445,hbrown +SLS-WS-059,2026-02-14T03:03:19.871Z,26122,taskhostw.exe,ESTABLISHED,TCP,10.10.3.159,139,10.10.2.158,443,bwilson +SLS-WS-059,2026-02-17T06:31:14.170Z,39427,teams.exe,ESTABLISHED,TCP,10.10.3.159,53,10.10.2.164,80,agarcia +SLS-WS-059,2026-02-17T16:02:23.641Z,29275,msedge.exe,ESTABLISHED,TCP,10.10.3.159,64313,130.198.48.154,445,admin +SLS-WS-059,2026-02-17T19:16:18.083Z,24410,MsMpEng.exe,LISTEN,UDP,10.10.3.159,5985,0.0.0.0,0,cjohnson +SLS-WS-059,2026-02-10T10:38:38.108Z,56456,cmd.exe,ESTABLISHED,UDP,10.10.3.159,443,10.10.3.141,80,fthompson +SLS-WS-059,2026-02-13T20:56:45.858Z,28808,OneDrive.exe,ESTABLISHED,TCP,10.10.3.159,443,10.10.1.145,29869,dlee +SLS-WS-059,2026-02-17T17:04:27.290Z,38758,discord.exe,CLOSE_WAIT,TCP,10.10.3.159,636,49.66.237.153,53,admin +SLS-WS-059,2026-02-20T13:38:30.454Z,18964,svchost.exe,LISTEN,TCP,10.10.3.159,80,0.0.0.0,0,admin +SLS-WS-059,2026-02-15T14:37:14.056Z,45891,notepad.exe,ESTABLISHED,UDP,10.10.3.159,80,72.178.64.241,80,svc_sql +SLS-WS-059,2026-02-19T19:19:32.308Z,45059,chrome.exe,SYN_SENT,TCP,10.10.3.159,135,10.10.2.170,3389,idavis +SLS-WS-059,2026-02-14T11:26:45.116Z,28180,explorer.exe,TIME_WAIT,TCP,10.10.3.159,80,16.208.249.146,80,svc_web +SLS-WS-059,2026-02-17T19:09:50.801Z,62779,chrome.exe,SYN_SENT,TCP,10.10.3.159,8080,10.10.3.165,8080,cjohnson +SLS-WS-059,2026-02-13T19:32:36.850Z,627,smss.exe,TIME_WAIT,TCP,10.10.3.159,135,10.10.3.159,8080,cjohnson +SLS-WS-059,2026-02-15T02:50:40.656Z,16796,RuntimeBroker.exe,ESTABLISHED,TCP,10.10.3.159,135,98.160.130.34,443,bwilson +SLS-WS-059,2026-02-18T13:19:09.142Z,20266,spoolsv.exe,LISTEN,TCP,10.10.3.159,135,0.0.0.0,0,emartinez +SLS-WS-059,2026-02-12T20:44:38.147Z,10026,chrome.exe,ESTABLISHED,TCP,10.10.3.159,389,10.10.2.101,445,agarcia +SLS-WS-059,2026-02-16T03:07:15.195Z,64457,SearchHost.exe,CLOSE_WAIT,UDP,10.10.3.159,88,10.10.3.159,50453,hbrown +SLS-WS-059,2026-02-18T00:14:11.982Z,50632,smss.exe,LISTEN,TCP,10.10.3.159,88,0.0.0.0,0,fthompson +SLS-WS-059,2026-02-15T18:09:54.676Z,5194,SearchHost.exe,ESTABLISHED,UDP,10.10.3.159,5985,10.10.2.119,53,dlee +SLS-WS-059,2026-02-10T09:31:47.280Z,12489,csrss.exe,ESTABLISHED,TCP,10.10.3.159,80,114.58.46.206,636,fthompson +SLS-WS-059,2026-02-14T20:26:01.364Z,50746,teams.exe,ESTABLISHED,TCP,10.10.3.159,443,10.10.2.101,443,agarcia +SLS-WS-059,2026-02-14T07:25:47.774Z,33966,code.exe,SYN_SENT,TCP,10.10.3.159,53,10.10.1.160,443,jsmith +SLS-WS-059,2026-02-16T00:52:20.008Z,24704,taskhostw.exe,LISTEN,TCP,10.10.3.159,443,0.0.0.0,0,idavis +SLS-WS-059,2026-02-20T16:51:26.037Z,9150,dwm.exe,SYN_SENT,TCP,10.10.3.159,54800,131.141.169.247,443,bwilson +SLS-WS-059,2026-02-16T01:47:59.856Z,40407,winlogon.exe,LISTEN,TCP,10.10.3.159,445,0.0.0.0,0,dlee +SLS-WS-059,2026-02-12T22:59:25.819Z,18281,spoolsv.exe,LISTEN,UDP,10.10.3.159,80,0.0.0.0,0,dlee +SLS-WS-059,2026-02-14T17:21:54.163Z,62587,cmd.exe,LISTEN,UDP,10.10.3.159,443,0.0.0.0,0,emartinez +SLS-WS-059,2026-02-16T20:49:32.500Z,954,OneDrive.exe,LISTEN,TCP,10.10.3.159,636,0.0.0.0,0,bwilson +SLS-WS-059,2026-02-17T13:51:47.339Z,6865,code.exe,ESTABLISHED,TCP,10.10.3.159,135,10.10.1.157,8080,cjohnson +SLS-WS-059,2026-02-13T22:06:30.913Z,52073,code.exe,ESTABLISHED,UDP,10.10.3.159,5985,86.24.208.65,80,idavis +SLS-WS-059,2026-02-20T15:40:01.511Z,5975,csrss.exe,CLOSE_WAIT,TCP,10.10.3.159,5985,150.49.114.34,8080,fthompson +ENG-WS-060,2026-02-18T21:17:40.165Z,4483,SearchHost.exe,SYN_SENT,TCP,10.10.1.160,88,10.10.2.104,636,idavis +ENG-WS-060,2026-02-19T09:09:30.930Z,61630,teams.exe,LISTEN,TCP,10.10.1.160,51811,0.0.0.0,0,agarcia +ENG-WS-060,2026-02-14T07:47:28.241Z,46003,svchost.exe,SYN_SENT,TCP,10.10.1.160,5985,10.10.1.151,80,fthompson +ENG-WS-060,2026-02-14T22:14:37.743Z,28377,chrome.exe,SYN_SENT,TCP,10.10.1.160,3389,10.10.2.137,80,fthompson +ENG-WS-060,2026-02-12T07:26:35.466Z,55576,MsMpEng.exe,TIME_WAIT,TCP,10.10.1.160,636,10.10.1.139,389,bwilson +ENG-WS-060,2026-02-17T13:51:23.705Z,17568,lsass.exe,ESTABLISHED,TCP,10.10.1.160,445,10.10.1.118,636,admin +ENG-WS-060,2026-02-17T21:05:19.399Z,59569,MsMpEng.exe,SYN_SENT,TCP,10.10.1.160,53,10.10.3.10,3389,svc_web +ENG-WS-060,2026-02-20T04:48:31.230Z,63939,MsMpEng.exe,SYN_SENT,TCP,10.10.1.160,139,57.102.173.207,445,bwilson +ENG-WS-060,2026-02-17T16:36:05.248Z,24075,MsMpEng.exe,ESTABLISHED,TCP,10.10.1.160,135,63.133.103.244,443,svc_web +ENG-WS-060,2026-02-18T15:00:59.430Z,26404,winlogon.exe,CLOSE_WAIT,TCP,10.10.1.160,636,10.10.3.150,53,idavis +ENG-WS-060,2026-02-18T10:13:48.672Z,25154,cmd.exe,TIME_WAIT,UDP,10.10.1.160,135,10.10.3.135,26364,svc_sql +ENG-WS-060,2026-02-19T23:19:23.731Z,61497,code.exe,TIME_WAIT,UDP,10.10.1.160,445,88.146.189.6,53,idavis +LEG-WS-061,2026-02-18T12:37:54.641Z,24427,taskhostw.exe,LISTEN,TCP,10.10.2.161,3389,0.0.0.0,0,idavis +LEG-WS-061,2026-02-20T14:49:29.217Z,17512,notepad.exe,CLOSE_WAIT,UDP,10.10.2.161,135,10.10.2.131,51940,bwilson +LEG-WS-061,2026-02-19T13:31:57.804Z,14091,notepad.exe,ESTABLISHED,TCP,10.10.2.161,135,10.10.1.115,53,svc_backup +LEG-WS-061,2026-02-15T11:55:14.176Z,34888,csrss.exe,SYN_SENT,TCP,10.10.2.161,389,198.234.115.27,443,svc_web +LEG-WS-061,2026-02-17T22:28:20.517Z,29370,teams.exe,LISTEN,TCP,10.10.2.161,3389,0.0.0.0,0,agarcia +LEG-WS-061,2026-02-19T03:02:07.379Z,42730,System,TIME_WAIT,TCP,10.10.2.161,135,10.10.3.165,445,admin +LEG-WS-061,2026-02-15T03:41:59.181Z,8754,msedge.exe,CLOSE_WAIT,UDP,10.10.2.161,389,209.12.210.204,389,idavis +LEG-WS-061,2026-02-18T19:49:21.983Z,53424,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.161,135,120.1.57.72,53,gwhite +LEG-WS-061,2026-02-17T22:22:19.402Z,4406,chrome.exe,ESTABLISHED,TCP,10.10.2.161,389,10.10.3.120,8080,dlee +LEG-WS-061,2026-02-16T15:03:13.786Z,14957,csrss.exe,LISTEN,TCP,10.10.2.161,80,0.0.0.0,0,idavis +LEG-WS-061,2026-02-20T16:21:49.139Z,59635,msedge.exe,LISTEN,TCP,10.10.2.161,8080,0.0.0.0,0,jsmith +LEG-WS-061,2026-02-18T12:01:23.728Z,22642,code.exe,CLOSE_WAIT,TCP,10.10.2.161,3389,182.78.200.46,389,bwilson +LEG-WS-061,2026-02-16T14:50:50.770Z,11523,services.exe,TIME_WAIT,UDP,10.10.2.161,445,44.77.226.59,636,jsmith +LEG-WS-061,2026-02-12T16:39:33.455Z,28072,winlogon.exe,LISTEN,TCP,10.10.2.161,445,0.0.0.0,0,agarcia +LEG-WS-061,2026-02-18T12:58:40.977Z,8016,explorer.exe,CLOSE_WAIT,TCP,10.10.2.161,80,10.10.1.124,389,svc_sql +LEG-WS-061,2026-02-10T11:32:23.520Z,8271,teams.exe,LISTEN,TCP,10.10.2.161,443,0.0.0.0,0,bwilson +LEG-WS-061,2026-02-15T07:37:08.732Z,21354,RuntimeBroker.exe,SYN_SENT,UDP,10.10.2.161,636,10.10.2.134,88,gwhite +LEG-WS-061,2026-02-20T13:37:04.454Z,9382,outlook.exe,LISTEN,UDP,10.10.2.161,636,0.0.0.0,0,bwilson +LEG-WS-061,2026-02-14T13:15:24.637Z,24808,dwm.exe,ESTABLISHED,TCP,10.10.2.161,139,40.177.78.184,53,bwilson +LEG-WS-061,2026-02-11T00:40:02.188Z,42551,services.exe,TIME_WAIT,UDP,10.10.2.161,389,10.10.1.13,3389,agarcia +LEG-WS-061,2026-02-20T05:26:40.106Z,50704,cmd.exe,CLOSE_WAIT,TCP,10.10.2.161,443,212.120.3.125,636,agarcia +LEG-WS-061,2026-02-18T09:41:31.519Z,11537,taskhostw.exe,LISTEN,TCP,10.10.2.161,135,0.0.0.0,0,fthompson +LEG-WS-061,2026-02-18T13:41:18.742Z,3051,dwm.exe,TIME_WAIT,TCP,10.10.2.161,88,10.10.1.109,445,emartinez +LEG-WS-061,2026-02-13T03:54:17.267Z,37427,smss.exe,ESTABLISHED,UDP,10.10.2.161,3389,10.10.2.110,88,admin +LEG-WS-061,2026-02-18T18:48:03.126Z,1290,SearchHost.exe,SYN_SENT,UDP,10.10.2.161,8080,141.254.183.207,80,dlee +LEG-WS-061,2026-02-18T03:58:27.988Z,28280,teams.exe,ESTABLISHED,TCP,10.10.2.161,443,35.45.76.79,3389,idavis +LEG-WS-061,2026-02-12T17:49:51.783Z,52390,System,SYN_SENT,TCP,10.10.2.161,80,10.10.2.122,389,idavis +MKT-WS-062,2026-02-19T17:01:38.301Z,45862,spoolsv.exe,CLOSE_WAIT,TCP,10.10.3.162,3389,179.243.215.91,62674,svc_backup +MKT-WS-062,2026-02-11T15:10:20.293Z,3093,msedge.exe,SYN_SENT,TCP,10.10.3.162,3389,10.10.1.166,3389,bwilson +MKT-WS-062,2026-02-15T07:59:04.146Z,46693,chrome.exe,TIME_WAIT,TCP,10.10.3.162,8080,10.10.2.173,445,jsmith +MKT-WS-062,2026-02-19T22:50:21.518Z,58087,lsass.exe,SYN_SENT,TCP,10.10.3.162,139,10.10.1.139,389,agarcia +MKT-WS-062,2026-02-13T14:41:01.252Z,14556,code.exe,CLOSE_WAIT,TCP,10.10.3.162,636,10.10.1.103,53,gwhite +MKT-WS-062,2026-02-17T13:59:10.893Z,14697,smss.exe,CLOSE_WAIT,TCP,10.10.3.162,88,10.10.1.115,10025,emartinez +MKT-WS-062,2026-02-15T03:40:05.287Z,44298,OneDrive.exe,TIME_WAIT,TCP,10.10.3.162,636,3.91.188.90,8080,cjohnson +MKT-WS-062,2026-02-12T22:00:12.309Z,63825,powershell.exe,ESTABLISHED,TCP,10.10.3.162,53,10.10.2.137,88,emartinez +MKT-WS-062,2026-02-11T02:14:54.539Z,58865,notepad.exe,LISTEN,TCP,10.10.3.162,57586,0.0.0.0,0,dlee +MKT-WS-062,2026-02-16T07:43:47.924Z,17771,SearchHost.exe,SYN_SENT,TCP,10.10.3.162,57166,10.10.1.175,3389,fthompson +MKT-WS-062,2026-02-20T15:04:54.454Z,43944,dwm.exe,SYN_SENT,UDP,10.10.3.162,135,10.10.1.11,3389,svc_web +MKT-WS-062,2026-02-17T12:49:04.752Z,7646,dwm.exe,SYN_SENT,TCP,10.10.3.162,135,10.10.3.174,80,svc_web +MKT-WS-062,2026-02-18T16:05:17.621Z,8744,explorer.exe,CLOSE_WAIT,TCP,10.10.3.162,53,10.10.3.153,389,svc_web +MKT-WS-062,2026-02-13T05:32:03.899Z,28466,explorer.exe,LISTEN,TCP,10.10.3.162,139,0.0.0.0,0,svc_web +MKT-WS-062,2026-02-10T21:39:06.912Z,1894,chrome.exe,LISTEN,TCP,10.10.3.162,88,0.0.0.0,0,bwilson +MKT-WS-062,2026-02-14T09:54:05.692Z,21777,RuntimeBroker.exe,ESTABLISHED,UDP,10.10.3.162,135,10.10.1.151,35677,idavis +MKT-WS-062,2026-02-17T13:56:26.661Z,26088,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.3.162,63250,10.10.3.147,445,fthompson +MKT-WS-062,2026-02-19T13:15:16.206Z,19539,chrome.exe,LISTEN,TCP,10.10.3.162,80,0.0.0.0,0,bwilson +MKT-WS-062,2026-02-12T08:43:32.522Z,30083,lsass.exe,LISTEN,UDP,10.10.3.162,135,0.0.0.0,0,dlee +EXEC-WS-063,2026-02-18T13:52:02.756Z,64887,code.exe,ESTABLISHED,TCP,10.10.1.163,135,170.230.212.130,636,admin +EXEC-WS-063,2026-02-18T04:18:56.915Z,62966,OneDrive.exe,LISTEN,TCP,10.10.1.163,5985,0.0.0.0,0,jsmith +EXEC-WS-063,2026-02-10T22:36:40.815Z,15067,spoolsv.exe,ESTABLISHED,TCP,10.10.1.163,139,10.10.3.105,53,hbrown +EXEC-WS-063,2026-02-17T22:27:29.443Z,49507,RuntimeBroker.exe,ESTABLISHED,UDP,10.10.1.163,53,157.143.216.101,53,svc_sql +EXEC-WS-063,2026-02-18T14:18:07.070Z,710,code.exe,LISTEN,TCP,10.10.1.163,88,0.0.0.0,0,bwilson +EXEC-WS-063,2026-02-15T05:06:41.424Z,4538,taskhostw.exe,CLOSE_WAIT,TCP,10.10.1.163,135,53.5.117.6,88,svc_backup +EXEC-WS-063,2026-02-12T22:16:51.114Z,49146,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.1.163,80,10.10.3.162,53,jsmith +EXEC-WS-063,2026-02-12T14:11:46.339Z,47072,spoolsv.exe,TIME_WAIT,UDP,10.10.1.163,443,45.118.132.209,80,svc_sql +EXEC-WS-063,2026-02-13T09:10:06.671Z,57842,outlook.exe,SYN_SENT,TCP,10.10.1.163,443,205.8.46.117,8080,emartinez +EXEC-WS-063,2026-02-14T15:28:47.974Z,40882,discord.exe,CLOSE_WAIT,TCP,10.10.1.163,636,10.10.1.13,445,svc_sql +EXEC-WS-063,2026-02-19T10:03:08.861Z,4300,teams.exe,TIME_WAIT,TCP,10.10.1.163,3389,164.116.225.40,636,bwilson +EXEC-WS-063,2026-02-15T09:22:01.007Z,41204,services.exe,ESTABLISHED,TCP,10.10.1.163,5985,101.144.130.235,3389,cjohnson +EXEC-WS-063,2026-02-11T05:29:17.409Z,3189,chrome.exe,LISTEN,TCP,10.10.1.163,443,0.0.0.0,0,agarcia +EXEC-WS-063,2026-02-19T07:44:18.476Z,31867,dwm.exe,ESTABLISHED,UDP,10.10.1.163,636,10.10.2.110,80,dlee +EXEC-WS-063,2026-02-11T09:53:32.104Z,63776,spoolsv.exe,LISTEN,TCP,10.10.1.163,3389,0.0.0.0,0,idavis +EXEC-WS-063,2026-02-20T04:20:11.802Z,49149,OneDrive.exe,TIME_WAIT,UDP,10.10.1.163,636,196.56.252.27,389,dlee +EXEC-WS-063,2026-02-17T09:46:54.483Z,44998,System,CLOSE_WAIT,UDP,10.10.1.163,80,10.10.1.115,88,svc_sql +EXEC-WS-063,2026-02-19T11:18:08.180Z,54725,spoolsv.exe,CLOSE_WAIT,UDP,10.10.1.163,636,10.10.3.138,389,jsmith +EXEC-WS-063,2026-02-16T17:27:44.700Z,24841,dwm.exe,CLOSE_WAIT,TCP,10.10.1.163,80,70.237.10.206,53,svc_sql +IT-WS-064,2026-02-16T22:39:54.753Z,13810,chrome.exe,SYN_SENT,TCP,10.10.2.164,55360,175.229.254.66,88,bwilson +IT-WS-064,2026-02-16T05:48:34.854Z,1249,services.exe,TIME_WAIT,TCP,10.10.2.164,139,48.231.254.122,53,fthompson +IT-WS-064,2026-02-13T07:27:33.778Z,4775,SearchHost.exe,TIME_WAIT,TCP,10.10.2.164,445,208.68.14.168,10913,emartinez +IT-WS-064,2026-02-13T15:26:11.501Z,49740,lsass.exe,LISTEN,TCP,10.10.2.164,88,0.0.0.0,0,admin +IT-WS-064,2026-02-17T07:05:37.558Z,53339,SearchHost.exe,LISTEN,TCP,10.10.2.164,8080,0.0.0.0,0,bwilson +IT-WS-064,2026-02-13T20:54:38.192Z,12848,teams.exe,SYN_SENT,TCP,10.10.2.164,80,111.193.38.86,636,cjohnson +IT-WS-064,2026-02-11T07:35:25.093Z,54418,powershell.exe,SYN_SENT,TCP,10.10.2.164,139,147.114.80.17,8080,bwilson +IT-WS-064,2026-02-19T15:24:26.548Z,6914,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.2.164,636,10.10.1.154,445,svc_sql +IT-WS-064,2026-02-12T04:24:55.227Z,60921,dwm.exe,TIME_WAIT,TCP,10.10.2.164,5985,80.156.68.215,88,hbrown +IT-WS-064,2026-02-18T03:14:00.897Z,50895,winlogon.exe,CLOSE_WAIT,TCP,10.10.2.164,135,10.10.3.150,88,svc_backup +IT-WS-064,2026-02-12T05:04:23.339Z,40110,lsass.exe,LISTEN,UDP,10.10.2.164,389,0.0.0.0,0,bwilson +IT-WS-064,2026-02-12T05:45:19.558Z,20130,lsass.exe,LISTEN,UDP,10.10.2.164,135,0.0.0.0,0,svc_backup +IT-WS-064,2026-02-12T14:14:22.347Z,63839,notepad.exe,LISTEN,TCP,10.10.2.164,53,0.0.0.0,0,agarcia +IT-WS-064,2026-02-11T08:08:01.568Z,10643,winlogon.exe,SYN_SENT,TCP,10.10.2.164,443,10.10.3.153,636,hbrown +IT-WS-064,2026-02-13T22:57:31.972Z,12991,msedge.exe,SYN_SENT,TCP,10.10.2.164,135,111.216.209.6,80,svc_backup +IT-WS-064,2026-02-19T10:14:31.357Z,352,taskhostw.exe,LISTEN,TCP,10.10.2.164,135,0.0.0.0,0,emartinez +IT-WS-064,2026-02-19T16:47:10.018Z,36133,taskhostw.exe,LISTEN,TCP,10.10.2.164,53,0.0.0.0,0,svc_backup +IT-WS-064,2026-02-12T01:00:12.689Z,30075,RuntimeBroker.exe,SYN_SENT,UDP,10.10.2.164,62846,10.10.2.158,88,svc_sql +IT-WS-064,2026-02-16T16:21:12.408Z,25355,powershell.exe,LISTEN,UDP,10.10.2.164,53,0.0.0.0,0,admin +IT-WS-064,2026-02-11T04:49:31.607Z,22134,code.exe,LISTEN,TCP,10.10.2.164,636,0.0.0.0,0,admin +IT-WS-064,2026-02-10T08:12:18.432Z,4974,spoolsv.exe,SYN_SENT,TCP,10.10.2.164,5985,10.10.3.171,443,cjohnson +IT-WS-064,2026-02-16T16:11:36.418Z,6597,dwm.exe,LISTEN,UDP,10.10.2.164,636,0.0.0.0,0,admin +IT-WS-064,2026-02-18T00:17:35.809Z,47831,dwm.exe,LISTEN,TCP,10.10.2.164,8080,0.0.0.0,0,svc_web +IT-WS-064,2026-02-18T22:22:49.601Z,11047,winlogon.exe,TIME_WAIT,TCP,10.10.2.164,8080,10.10.1.106,53,jsmith +IT-WS-064,2026-02-11T13:11:40.995Z,60276,System,SYN_SENT,TCP,10.10.2.164,135,10.10.1.11,88,hbrown +IT-WS-064,2026-02-20T15:40:08.177Z,53964,RuntimeBroker.exe,SYN_SENT,TCP,10.10.2.164,53,178.153.179.170,80,svc_backup +IT-WS-064,2026-02-12T11:02:06.015Z,40518,SearchHost.exe,CLOSE_WAIT,TCP,10.10.2.164,53,99.87.181.148,389,hbrown +IT-WS-064,2026-02-16T08:49:58.418Z,39934,teams.exe,TIME_WAIT,TCP,10.10.2.164,88,10.10.1.157,8080,jsmith +IT-WS-064,2026-02-16T04:36:32.278Z,36357,spoolsv.exe,CLOSE_WAIT,UDP,10.10.2.164,5985,10.10.1.157,80,svc_sql +IT-WS-064,2026-02-18T16:29:44.393Z,55607,notepad.exe,CLOSE_WAIT,TCP,10.10.2.164,389,159.145.207.71,53631,dlee +IT-WS-064,2026-02-20T03:55:51.502Z,22602,csrss.exe,LISTEN,TCP,10.10.2.164,53,0.0.0.0,0,cjohnson +IT-WS-064,2026-02-12T01:39:58.761Z,42043,smss.exe,SYN_SENT,TCP,10.10.2.164,5985,75.14.135.75,52950,hbrown +IT-WS-064,2026-02-13T08:28:10.186Z,39541,svchost.exe,TIME_WAIT,UDP,10.10.2.164,80,42.204.71.247,88,jsmith +IT-WS-064,2026-02-15T18:01:15.112Z,50574,System,LISTEN,TCP,10.10.2.164,3389,0.0.0.0,0,cjohnson +IT-WS-064,2026-02-18T00:13:24.010Z,17264,epicgameslauncher.exe,SYN_SENT,TCP,10.10.2.164,389,206.21.168.124,41581,svc_web +IT-WS-064,2026-02-12T13:12:48.658Z,44642,msedge.exe,SYN_SENT,TCP,10.10.2.164,135,4.76.228.202,80,emartinez +IT-WS-064,2026-02-18T07:48:48.706Z,12655,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.2.164,389,53.8.183.100,445,svc_web +IT-WS-064,2026-02-19T11:32:48.184Z,52767,System,TIME_WAIT,TCP,10.10.2.164,88,10.10.2.116,88,jsmith +IT-WS-064,2026-02-11T14:43:07.719Z,15233,spoolsv.exe,LISTEN,TCP,10.10.2.164,636,0.0.0.0,0,dlee +IT-WS-064,2026-02-12T01:12:31.219Z,61703,notepad.exe,TIME_WAIT,UDP,10.10.2.164,5985,10.10.2.155,53,jsmith +HR-WS-065,2026-02-12T06:03:33.121Z,56140,outlook.exe,ESTABLISHED,TCP,10.10.3.165,88,10.10.3.141,8080,bwilson +HR-WS-065,2026-02-15T08:06:00.284Z,25580,svchost.exe,TIME_WAIT,UDP,10.10.3.165,389,10.10.2.104,445,dlee +HR-WS-065,2026-02-15T10:16:29.021Z,5463,MsMpEng.exe,TIME_WAIT,TCP,10.10.3.165,88,112.167.87.25,80,bwilson +HR-WS-065,2026-02-18T23:13:29.524Z,59047,RuntimeBroker.exe,LISTEN,TCP,10.10.3.165,636,0.0.0.0,0,idavis +HR-WS-065,2026-02-12T06:12:31.387Z,6090,utorrent.exe,LISTEN,TCP,10.10.3.165,389,0.0.0.0,0,svc_web +HR-WS-065,2026-02-16T02:55:16.547Z,46785,OneDrive.exe,CLOSE_WAIT,UDP,10.10.3.165,389,119.253.80.109,53,admin +HR-WS-065,2026-02-17T10:19:01.064Z,22793,taskhostw.exe,LISTEN,UDP,10.10.3.165,445,0.0.0.0,0,bwilson +HR-WS-065,2026-02-13T19:59:49.420Z,3522,taskhostw.exe,ESTABLISHED,TCP,10.10.3.165,53,10.10.3.111,80,hbrown +HR-WS-065,2026-02-16T23:39:25.716Z,23471,explorer.exe,TIME_WAIT,TCP,10.10.3.165,139,115.232.157.69,53,svc_sql +HR-WS-065,2026-02-15T02:51:56.098Z,17136,csrss.exe,SYN_SENT,TCP,10.10.3.165,52826,10.10.1.175,47051,dlee +HR-WS-065,2026-02-15T10:04:57.351Z,35116,services.exe,LISTEN,TCP,10.10.3.165,135,0.0.0.0,0,jsmith +HR-WS-065,2026-02-15T16:14:41.868Z,33263,msedge.exe,SYN_SENT,UDP,10.10.3.165,443,202.35.102.62,80,hbrown +HR-WS-065,2026-02-17T11:04:04.088Z,20642,System,ESTABLISHED,TCP,10.10.3.165,8080,10.10.2.137,53,bwilson +HR-WS-065,2026-02-16T05:07:52.553Z,7137,OneDrive.exe,TIME_WAIT,TCP,10.10.3.165,389,55.167.115.124,636,emartinez +HR-WS-065,2026-02-15T12:08:27.621Z,48283,winlogon.exe,LISTEN,TCP,10.10.3.165,5985,0.0.0.0,0,gwhite +HR-WS-065,2026-02-20T01:02:08.193Z,64779,SearchHost.exe,LISTEN,TCP,10.10.3.165,88,0.0.0.0,0,dlee +HR-WS-065,2026-02-16T21:16:34.486Z,28281,SearchHost.exe,LISTEN,TCP,10.10.3.165,5985,0.0.0.0,0,dlee +HR-WS-065,2026-02-16T08:21:35.498Z,34918,taskhostw.exe,ESTABLISHED,TCP,10.10.3.165,636,10.10.2.10,3389,cjohnson +HR-WS-065,2026-02-14T09:27:56.198Z,48342,MsMpEng.exe,TIME_WAIT,UDP,10.10.3.165,636,22.209.148.232,445,hbrown +HR-WS-065,2026-02-13T23:07:56.530Z,34172,notepad.exe,SYN_SENT,TCP,10.10.3.165,88,10.10.1.148,22558,bwilson +HR-WS-065,2026-02-13T10:48:35.755Z,35518,msedge.exe,SYN_SENT,TCP,10.10.3.165,445,19.225.236.188,8080,cjohnson +HR-WS-065,2026-02-18T14:42:04.530Z,13607,csrss.exe,ESTABLISHED,TCP,10.10.3.165,3389,193.153.134.237,445,fthompson +HR-WS-065,2026-02-19T04:13:49.152Z,7576,teams.exe,SYN_SENT,TCP,10.10.3.165,443,10.10.3.168,88,svc_sql +HR-WS-065,2026-02-14T23:19:25.401Z,37920,powershell.exe,SYN_SENT,TCP,10.10.3.165,139,87.5.11.189,443,jsmith +HR-WS-065,2026-02-15T22:36:54.938Z,1454,outlook.exe,SYN_SENT,TCP,10.10.3.165,88,10.10.2.11,636,svc_sql +HR-WS-065,2026-02-11T03:57:18.200Z,16393,svchost.exe,TIME_WAIT,UDP,10.10.3.165,389,102.10.62.32,52618,svc_web +HR-WS-065,2026-02-10T22:46:03.727Z,34907,smss.exe,CLOSE_WAIT,TCP,10.10.3.165,389,10.10.3.132,3793,emartinez +HR-WS-065,2026-02-11T01:25:10.917Z,22595,msedge.exe,SYN_SENT,TCP,10.10.3.165,139,10.10.2.128,88,svc_backup +HR-WS-065,2026-02-14T12:14:08.908Z,16178,dwm.exe,CLOSE_WAIT,UDP,10.10.3.165,61574,10.10.2.128,34424,cjohnson +HR-WS-065,2026-02-11T05:29:13.396Z,22009,services.exe,ESTABLISHED,TCP,10.10.3.165,53,10.10.1.13,3389,svc_web +HR-WS-065,2026-02-12T06:29:03.653Z,22822,SearchHost.exe,LISTEN,TCP,10.10.3.165,88,0.0.0.0,0,svc_sql +HR-WS-065,2026-02-12T05:25:39.691Z,1946,msedge.exe,CLOSE_WAIT,TCP,10.10.3.165,5985,174.21.68.215,389,svc_web +FIN-WS-066,2026-02-13T00:06:22.273Z,53642,lsass.exe,CLOSE_WAIT,TCP,10.10.1.166,3389,10.10.3.111,445,svc_backup +FIN-WS-066,2026-02-10T18:42:48.328Z,24564,chrome.exe,ESTABLISHED,TCP,10.10.1.166,3389,10.10.1.13,445,agarcia +FIN-WS-066,2026-02-14T17:33:18.610Z,61286,MsMpEng.exe,SYN_SENT,TCP,10.10.1.166,445,10.10.2.119,3389,svc_web +FIN-WS-066,2026-02-16T07:46:59.433Z,3042,msedge.exe,TIME_WAIT,TCP,10.10.1.166,8080,30.117.162.204,88,fthompson +FIN-WS-066,2026-02-11T11:58:17.246Z,46428,cmd.exe,SYN_SENT,TCP,10.10.1.166,445,10.10.3.135,53,cjohnson +FIN-WS-066,2026-02-18T17:30:39.688Z,63005,taskhostw.exe,SYN_SENT,TCP,10.10.1.166,8080,32.232.136.228,88,hbrown +FIN-WS-066,2026-02-14T22:47:48.718Z,49082,msedge.exe,CLOSE_WAIT,TCP,10.10.1.166,135,79.106.33.130,389,emartinez +FIN-WS-066,2026-02-18T06:14:42.843Z,29558,powershell.exe,LISTEN,UDP,10.10.1.166,139,0.0.0.0,0,jsmith +FIN-WS-066,2026-02-19T20:17:09.882Z,61840,msedge.exe,LISTEN,TCP,10.10.1.166,88,0.0.0.0,0,emartinez +FIN-WS-066,2026-02-19T22:57:26.729Z,4544,spoolsv.exe,CLOSE_WAIT,TCP,10.10.1.166,53,33.202.68.90,80,admin +FIN-WS-066,2026-02-11T00:34:16.278Z,3809,powershell.exe,ESTABLISHED,TCP,10.10.1.166,636,168.182.230.119,445,svc_backup +FIN-WS-066,2026-02-15T08:40:49.066Z,40478,OneDrive.exe,SYN_SENT,TCP,10.10.1.166,88,56.81.138.96,4923,dlee +FIN-WS-066,2026-02-20T06:01:46.211Z,1945,spoolsv.exe,LISTEN,UDP,10.10.1.166,53,0.0.0.0,0,idavis +FIN-WS-066,2026-02-19T02:29:43.714Z,52099,System,CLOSE_WAIT,UDP,10.10.1.166,139,10.10.3.123,389,bwilson +FIN-WS-066,2026-02-14T19:54:19.041Z,45158,svchost.exe,TIME_WAIT,UDP,10.10.1.166,5985,10.10.2.125,636,fthompson +FIN-WS-066,2026-02-13T19:48:19.052Z,52032,winlogon.exe,ESTABLISHED,UDP,10.10.1.166,8080,178.86.28.240,3107,cjohnson +FIN-WS-066,2026-02-14T14:19:03.143Z,35732,lsass.exe,LISTEN,TCP,10.10.1.166,135,0.0.0.0,0,idavis +FIN-WS-066,2026-02-20T09:25:27.164Z,1803,taskhostw.exe,CLOSE_WAIT,TCP,10.10.1.166,80,10.10.1.118,63631,svc_sql +SLS-WS-067,2026-02-16T05:35:34.464Z,48809,csrss.exe,ESTABLISHED,UDP,10.10.2.167,389,116.87.82.24,88,hbrown +SLS-WS-067,2026-02-20T17:41:54.251Z,7371,chrome.exe,CLOSE_WAIT,TCP,10.10.2.167,445,10.10.1.136,443,idavis +SLS-WS-067,2026-02-13T09:17:02.185Z,51645,chrome.exe,CLOSE_WAIT,TCP,10.10.2.167,139,79.125.208.14,445,bwilson +SLS-WS-067,2026-02-11T19:28:44.466Z,48109,outlook.exe,ESTABLISHED,TCP,10.10.2.167,445,10.10.1.10,443,admin +SLS-WS-067,2026-02-14T17:09:59.633Z,41093,smss.exe,TIME_WAIT,TCP,10.10.2.167,63769,216.242.92.97,8080,emartinez +SLS-WS-067,2026-02-17T02:53:11.109Z,39597,powershell.exe,LISTEN,TCP,10.10.2.167,443,0.0.0.0,0,svc_web +SLS-WS-067,2026-02-11T10:34:30.570Z,43839,System,ESTABLISHED,UDP,10.10.2.167,3389,212.183.179.29,443,agarcia +SLS-WS-067,2026-02-16T03:00:02.337Z,51949,System,SYN_SENT,TCP,10.10.2.167,54746,10.10.1.11,389,hbrown +SLS-WS-067,2026-02-19T18:57:49.141Z,32881,outlook.exe,LISTEN,TCP,10.10.2.167,80,0.0.0.0,0,hbrown +SLS-WS-067,2026-02-19T03:35:33.698Z,8660,csrss.exe,TIME_WAIT,TCP,10.10.2.167,8080,10.10.3.105,20132,agarcia +SLS-WS-067,2026-02-13T03:15:13.965Z,28742,explorer.exe,ESTABLISHED,TCP,10.10.2.167,5985,156.65.101.202,636,dlee +SLS-WS-067,2026-02-12T02:02:35.284Z,11011,explorer.exe,SYN_SENT,UDP,10.10.2.167,135,147.210.163.71,80,cjohnson +SLS-WS-067,2026-02-10T08:22:21.083Z,13740,winlogon.exe,LISTEN,TCP,10.10.2.167,3389,0.0.0.0,0,svc_sql +SLS-WS-067,2026-02-10T08:50:22.819Z,34250,explorer.exe,ESTABLISHED,TCP,10.10.2.167,135,204.149.206.117,80,idavis +SLS-WS-067,2026-02-18T21:05:59.981Z,9200,smss.exe,ESTABLISHED,TCP,10.10.2.167,443,10.10.1.112,8080,admin +SLS-WS-067,2026-02-20T15:14:52.777Z,62421,csrss.exe,SYN_SENT,TCP,10.10.2.167,636,10.10.2.170,636,agarcia +SLS-WS-067,2026-02-12T22:15:37.055Z,7881,System,CLOSE_WAIT,TCP,10.10.2.167,5985,10.10.2.10,3389,agarcia +SLS-WS-067,2026-02-13T18:25:53.479Z,9374,powershell.exe,CLOSE_WAIT,TCP,10.10.2.167,53,10.10.1.11,445,svc_sql +SLS-WS-067,2026-02-13T00:56:36.812Z,55665,notepad.exe,LISTEN,TCP,10.10.2.167,389,0.0.0.0,0,admin +SLS-WS-067,2026-02-14T15:13:05.649Z,2064,RuntimeBroker.exe,LISTEN,TCP,10.10.2.167,139,0.0.0.0,0,gwhite +SLS-WS-067,2026-02-11T07:52:21.477Z,36179,smss.exe,SYN_SENT,TCP,10.10.2.167,139,149.139.207.111,80,bwilson +SLS-WS-067,2026-02-20T10:02:11.383Z,9883,spoolsv.exe,ESTABLISHED,UDP,10.10.2.167,636,10.10.3.129,445,fthompson +SLS-WS-067,2026-02-14T14:53:47.249Z,10570,dwm.exe,TIME_WAIT,TCP,10.10.2.167,8080,10.10.1.130,3389,cjohnson +SLS-WS-067,2026-02-17T11:39:16.773Z,61590,csrss.exe,ESTABLISHED,TCP,10.10.2.167,443,41.48.71.142,443,agarcia +SLS-WS-067,2026-02-12T03:13:23.737Z,3729,spoolsv.exe,TIME_WAIT,TCP,10.10.2.167,139,171.203.58.227,31475,dlee +SLS-WS-067,2026-02-12T10:07:33.450Z,59349,svchost.exe,ESTABLISHED,TCP,10.10.2.167,53,63.73.234.23,8080,bwilson +SLS-WS-067,2026-02-17T23:51:25.683Z,28622,spoolsv.exe,CLOSE_WAIT,TCP,10.10.2.167,443,10.10.1.169,389,svc_sql +SLS-WS-067,2026-02-14T07:42:17.417Z,63433,cmd.exe,TIME_WAIT,TCP,10.10.2.167,139,10.10.1.157,445,jsmith +SLS-WS-067,2026-02-16T03:35:00.841Z,27746,chrome.exe,TIME_WAIT,UDP,10.10.2.167,3389,10.10.3.120,53,agarcia +SLS-WS-067,2026-02-20T14:42:59.069Z,33483,lsass.exe,SYN_SENT,UDP,10.10.2.167,3389,194.51.64.212,389,fthompson +SLS-WS-067,2026-02-19T05:04:31.112Z,29066,OneDrive.exe,CLOSE_WAIT,TCP,10.10.2.167,445,10.10.2.110,88,hbrown +SLS-WS-067,2026-02-10T17:07:29.485Z,63995,cmd.exe,SYN_SENT,TCP,10.10.2.167,8080,213.41.81.149,80,agarcia +SLS-WS-067,2026-02-13T12:48:34.705Z,27577,notepad.exe,SYN_SENT,TCP,10.10.2.167,139,38.64.120.81,80,svc_backup +SLS-WS-067,2026-02-13T20:04:10.579Z,41859,System,LISTEN,TCP,10.10.2.167,443,0.0.0.0,0,fthompson +SLS-WS-067,2026-02-17T00:42:16.282Z,5863,services.exe,TIME_WAIT,UDP,10.10.2.167,139,10.10.2.152,445,svc_sql +SLS-WS-067,2026-02-12T18:22:31.554Z,14868,MsMpEng.exe,SYN_SENT,TCP,10.10.2.167,53,141.41.75.119,88,emartinez +SLS-WS-067,2026-02-19T08:32:34.209Z,1298,notepad.exe,SYN_SENT,TCP,10.10.2.167,636,10.10.1.103,445,emartinez +ENG-WS-068,2026-02-13T13:45:01.876Z,43125,explorer.exe,LISTEN,TCP,10.10.3.168,3389,0.0.0.0,0,svc_backup +ENG-WS-068,2026-02-14T12:21:43.720Z,20478,teams.exe,LISTEN,TCP,10.10.3.168,636,0.0.0.0,0,idavis +ENG-WS-068,2026-02-20T17:52:32.263Z,13314,dwm.exe,CLOSE_WAIT,TCP,10.10.3.168,8080,37.51.197.14,80,agarcia +ENG-WS-068,2026-02-18T19:19:22.247Z,15874,System,SYN_SENT,TCP,10.10.3.168,443,23.141.16.241,389,agarcia +ENG-WS-068,2026-02-18T06:08:23.656Z,61697,winlogon.exe,ESTABLISHED,TCP,10.10.3.168,64442,10.10.3.114,8080,emartinez +ENG-WS-068,2026-02-19T22:18:58.049Z,41301,services.exe,ESTABLISHED,TCP,10.10.3.168,443,10.10.3.168,53,agarcia +ENG-WS-068,2026-02-15T05:55:06.469Z,51178,csrss.exe,TIME_WAIT,UDP,10.10.3.168,53,10.10.2.122,80,gwhite +ENG-WS-068,2026-02-11T10:26:45.259Z,1901,explorer.exe,LISTEN,TCP,10.10.3.168,5985,0.0.0.0,0,hbrown +ENG-WS-068,2026-02-15T09:17:28.193Z,54986,msedge.exe,SYN_SENT,TCP,10.10.3.168,445,52.196.128.124,3389,cjohnson +ENG-WS-068,2026-02-15T04:22:49.878Z,63688,epicgameslauncher.exe,CLOSE_WAIT,TCP,10.10.3.168,80,10.10.3.171,53,hbrown +ENG-WS-068,2026-02-14T09:40:32.764Z,2593,teams.exe,TIME_WAIT,TCP,10.10.3.168,55514,197.69.109.225,443,svc_sql +ENG-WS-068,2026-02-11T00:34:23.898Z,40715,services.exe,CLOSE_WAIT,TCP,10.10.3.168,8080,10.10.3.150,53,svc_backup +ENG-WS-068,2026-02-10T09:06:10.638Z,60900,smss.exe,TIME_WAIT,UDP,10.10.3.168,3389,15.59.208.230,443,jsmith +ENG-WS-068,2026-02-13T08:08:22.557Z,56151,RuntimeBroker.exe,ESTABLISHED,TCP,10.10.3.168,57607,41.144.108.180,8080,dlee +LEG-WS-069,2026-02-14T04:04:30.862Z,4770,svchost.exe,ESTABLISHED,TCP,10.10.1.169,636,109.38.7.81,443,fthompson +LEG-WS-069,2026-02-16T01:29:15.553Z,6225,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.169,5985,10.10.1.12,445,jsmith +LEG-WS-069,2026-02-13T16:00:51.568Z,16273,msedge.exe,TIME_WAIT,TCP,10.10.1.169,139,10.10.1.175,443,hbrown +LEG-WS-069,2026-02-19T18:54:06.635Z,21695,msedge.exe,LISTEN,TCP,10.10.1.169,8080,0.0.0.0,0,svc_sql +LEG-WS-069,2026-02-18T06:36:24.507Z,53321,powershell.exe,SYN_SENT,TCP,10.10.1.169,53,10.10.3.120,80,idavis +LEG-WS-069,2026-02-15T05:08:27.436Z,2503,powershell.exe,CLOSE_WAIT,TCP,10.10.1.169,139,10.10.1.148,389,emartinez +LEG-WS-069,2026-02-15T20:53:22.776Z,42122,msedge.exe,ESTABLISHED,TCP,10.10.1.169,80,10.10.3.150,389,svc_sql +LEG-WS-069,2026-02-13T10:07:36.165Z,4877,MsMpEng.exe,ESTABLISHED,UDP,10.10.1.169,8080,82.157.116.136,389,svc_web +LEG-WS-069,2026-02-19T15:22:32.651Z,12285,taskhostw.exe,CLOSE_WAIT,UDP,10.10.1.169,80,10.10.1.151,8080,hbrown +LEG-WS-069,2026-02-20T04:23:55.859Z,56439,notepad.exe,ESTABLISHED,TCP,10.10.1.169,5985,65.69.5.115,389,svc_web +LEG-WS-069,2026-02-14T16:23:32.061Z,9167,taskhostw.exe,LISTEN,TCP,10.10.1.169,8080,0.0.0.0,0,emartinez +LEG-WS-069,2026-02-12T04:05:28.415Z,45576,code.exe,SYN_SENT,TCP,10.10.1.169,88,10.10.2.134,3389,emartinez +LEG-WS-069,2026-02-20T07:14:53.785Z,21554,powershell.exe,TIME_WAIT,TCP,10.10.1.169,60517,10.10.3.174,443,idavis +LEG-WS-069,2026-02-19T12:27:32.293Z,32855,lsass.exe,TIME_WAIT,TCP,10.10.1.169,135,10.10.3.108,33804,svc_backup +LEG-WS-069,2026-02-17T16:06:57.333Z,1910,cmd.exe,LISTEN,TCP,10.10.1.169,88,0.0.0.0,0,cjohnson +LEG-WS-069,2026-02-12T03:51:37.077Z,42270,dwm.exe,TIME_WAIT,UDP,10.10.1.169,8080,54.206.66.117,8080,bwilson +LEG-WS-069,2026-02-10T22:18:05.550Z,19402,msedge.exe,ESTABLISHED,TCP,10.10.1.169,389,126.218.61.248,8080,bwilson +LEG-WS-069,2026-02-19T00:53:11.129Z,62710,System,TIME_WAIT,TCP,10.10.1.169,139,215.206.119.9,443,idavis +LEG-WS-069,2026-02-18T02:43:09.624Z,63085,smss.exe,LISTEN,UDP,10.10.1.169,445,0.0.0.0,0,idavis +LEG-WS-069,2026-02-10T14:19:05.956Z,4782,svchost.exe,ESTABLISHED,TCP,10.10.1.169,389,102.137.253.213,636,gwhite +LEG-WS-069,2026-02-14T23:24:43.400Z,51121,svchost.exe,LISTEN,TCP,10.10.1.169,135,0.0.0.0,0,jsmith +LEG-WS-069,2026-02-14T06:11:01.606Z,14771,MsMpEng.exe,ESTABLISHED,TCP,10.10.1.169,88,51.106.94.106,445,svc_web +LEG-WS-069,2026-02-14T22:54:01.135Z,64252,csrss.exe,LISTEN,TCP,10.10.1.169,58282,0.0.0.0,0,cjohnson +LEG-WS-069,2026-02-18T20:24:21.293Z,36147,svchost.exe,SYN_SENT,UDP,10.10.1.169,636,10.10.1.121,41379,emartinez +LEG-WS-069,2026-02-15T03:30:15.599Z,10454,services.exe,LISTEN,TCP,10.10.1.169,445,0.0.0.0,0,svc_sql +LEG-WS-069,2026-02-18T23:36:40.656Z,47189,System,ESTABLISHED,UDP,10.10.1.169,5985,10.10.2.173,8080,fthompson +LEG-WS-069,2026-02-18T03:13:46.711Z,38529,spoolsv.exe,TIME_WAIT,UDP,10.10.1.169,445,10.10.1.127,18376,emartinez +LEG-WS-069,2026-02-19T03:37:18.775Z,1522,utorrent.exe,ESTABLISHED,TCP,10.10.1.169,139,10.10.2.164,88,bwilson +LEG-WS-069,2026-02-19T12:31:45.040Z,15710,svchost.exe,ESTABLISHED,TCP,10.10.1.169,88,10.10.2.110,445,idavis +LEG-WS-069,2026-02-10T09:38:24.487Z,11095,cmd.exe,SYN_SENT,TCP,10.10.1.169,88,58.88.80.90,8080,cjohnson +LEG-WS-069,2026-02-19T05:22:36.310Z,3991,explorer.exe,LISTEN,TCP,10.10.1.169,3389,0.0.0.0,0,agarcia +LEG-WS-069,2026-02-16T19:56:43.467Z,49583,powershell.exe,TIME_WAIT,TCP,10.10.1.169,59918,10.10.2.152,3389,svc_sql +LEG-WS-069,2026-02-18T02:39:18.963Z,35382,teams.exe,TIME_WAIT,UDP,10.10.1.169,445,152.218.67.2,23753,admin +LEG-WS-069,2026-02-16T14:17:09.135Z,8875,outlook.exe,TIME_WAIT,TCP,10.10.1.169,445,10.10.2.143,21540,jsmith +LEG-WS-069,2026-02-19T18:36:12.997Z,25261,powershell.exe,CLOSE_WAIT,TCP,10.10.1.169,443,10.10.1.148,443,bwilson +LEG-WS-069,2026-02-11T08:58:07.103Z,24504,cmd.exe,ESTABLISHED,TCP,10.10.1.169,8080,10.10.1.151,3389,cjohnson +LEG-WS-069,2026-02-19T14:35:20.609Z,28000,outlook.exe,CLOSE_WAIT,TCP,10.10.1.169,3389,39.204.128.99,80,agarcia +LEG-WS-069,2026-02-12T01:33:13.808Z,7039,powershell.exe,ESTABLISHED,TCP,10.10.1.169,389,10.10.1.118,3389,agarcia +LEG-WS-069,2026-02-13T10:52:41.424Z,43759,powershell.exe,TIME_WAIT,TCP,10.10.1.169,3389,25.138.107.185,443,svc_web +LEG-WS-069,2026-02-19T06:59:32.588Z,10148,spotify.exe,CLOSE_WAIT,TCP,10.10.1.169,389,10.10.3.117,445,agarcia +MKT-WS-070,2026-02-14T19:51:19.852Z,41652,OneDrive.exe,TIME_WAIT,TCP,10.10.2.170,88,10.10.2.170,80,fthompson +MKT-WS-070,2026-02-16T11:23:31.002Z,36681,code.exe,LISTEN,UDP,10.10.2.170,88,0.0.0.0,0,fthompson +MKT-WS-070,2026-02-18T12:24:09.130Z,23645,RuntimeBroker.exe,SYN_SENT,TCP,10.10.2.170,3389,10.10.3.108,636,svc_backup +MKT-WS-070,2026-02-13T02:31:52.939Z,31705,code.exe,SYN_SENT,UDP,10.10.2.170,636,112.244.69.104,636,bwilson +MKT-WS-070,2026-02-11T23:45:21.581Z,12130,teams.exe,TIME_WAIT,TCP,10.10.2.170,56253,10.10.1.175,636,svc_web +MKT-WS-070,2026-02-14T14:47:50.239Z,38699,msedge.exe,SYN_SENT,UDP,10.10.2.170,636,10.10.1.139,636,svc_sql +MKT-WS-070,2026-02-18T13:00:54.907Z,39781,teams.exe,ESTABLISHED,TCP,10.10.2.170,54707,42.125.140.23,80,svc_backup +MKT-WS-070,2026-02-14T14:28:38.406Z,116,SearchHost.exe,LISTEN,TCP,10.10.2.170,445,0.0.0.0,0,dlee +MKT-WS-070,2026-02-16T17:37:50.909Z,3370,taskhostw.exe,ESTABLISHED,TCP,10.10.2.170,5985,50.94.34.123,3389,svc_backup +MKT-WS-070,2026-02-12T10:11:52.977Z,40679,smss.exe,LISTEN,UDP,10.10.2.170,61300,0.0.0.0,0,bwilson +MKT-WS-070,2026-02-20T00:56:27.810Z,9508,notepad.exe,CLOSE_WAIT,TCP,10.10.2.170,88,10.10.1.106,80,gwhite +MKT-WS-070,2026-02-12T14:35:49.773Z,34553,explorer.exe,TIME_WAIT,TCP,10.10.2.170,5985,29.214.28.122,445,svc_backup +MKT-WS-070,2026-02-17T04:45:31.304Z,56289,svchost.exe,ESTABLISHED,TCP,10.10.2.170,135,119.88.102.70,88,cjohnson +MKT-WS-070,2026-02-17T00:43:42.711Z,52041,code.exe,LISTEN,TCP,10.10.2.170,80,0.0.0.0,0,idavis +MKT-WS-070,2026-02-15T02:56:30.025Z,30503,OneDrive.exe,ESTABLISHED,TCP,10.10.2.170,445,10.10.1.136,3389,gwhite +MKT-WS-070,2026-02-12T05:00:54.674Z,63976,SearchHost.exe,SYN_SENT,TCP,10.10.2.170,5985,10.10.1.127,445,jsmith +MKT-WS-070,2026-02-17T14:19:59.896Z,2798,lsass.exe,ESTABLISHED,TCP,10.10.2.170,3389,26.225.10.23,445,bwilson +MKT-WS-070,2026-02-18T11:13:34.315Z,52275,powershell.exe,CLOSE_WAIT,TCP,10.10.2.170,57888,10.10.3.129,88,cjohnson +MKT-WS-070,2026-02-14T06:37:30.293Z,49977,SearchHost.exe,SYN_SENT,TCP,10.10.2.170,88,10.10.3.138,3389,bwilson +MKT-WS-070,2026-02-12T16:47:02.866Z,57404,smss.exe,ESTABLISHED,TCP,10.10.2.170,445,51.222.136.17,53,emartinez +MKT-WS-070,2026-02-16T09:23:15.945Z,14542,taskhostw.exe,CLOSE_WAIT,TCP,10.10.2.170,443,101.142.120.83,80,gwhite +MKT-WS-070,2026-02-13T01:28:51.627Z,14011,cmd.exe,CLOSE_WAIT,TCP,10.10.2.170,8080,10.10.3.129,636,gwhite +MKT-WS-070,2026-02-18T04:45:16.526Z,26585,utorrent.exe,CLOSE_WAIT,TCP,10.10.2.170,389,10.10.1.154,88,hbrown +MKT-WS-070,2026-02-16T08:12:58.206Z,7308,chrome.exe,TIME_WAIT,TCP,10.10.2.170,53,10.10.2.158,8080,jsmith +MKT-WS-070,2026-02-10T16:18:59.577Z,59044,notepad.exe,TIME_WAIT,TCP,10.10.2.170,389,10.10.2.131,88,jsmith +MKT-WS-070,2026-02-17T06:28:04.714Z,1558,powershell.exe,CLOSE_WAIT,TCP,10.10.2.170,88,10.10.1.151,389,svc_web +MKT-WS-070,2026-02-16T17:34:37.528Z,50634,OneDrive.exe,ESTABLISHED,TCP,10.10.2.170,445,10.10.2.161,443,hbrown +MKT-WS-070,2026-02-12T11:05:15.298Z,44647,spoolsv.exe,SYN_SENT,TCP,10.10.2.170,135,129.168.23.100,88,svc_web +MKT-WS-070,2026-02-11T18:44:59.025Z,7829,dwm.exe,SYN_SENT,TCP,10.10.2.170,5985,10.10.1.103,8080,svc_backup +MKT-WS-070,2026-02-19T01:44:02.307Z,50073,cmd.exe,SYN_SENT,TCP,10.10.2.170,53,10.10.3.153,8080,agarcia +MKT-WS-070,2026-02-16T04:27:47.056Z,27538,teams.exe,SYN_SENT,TCP,10.10.2.170,135,208.90.41.173,443,svc_backup +MKT-WS-070,2026-02-18T00:23:03.960Z,60527,code.exe,LISTEN,TCP,10.10.2.170,8080,0.0.0.0,0,jsmith +MKT-WS-070,2026-02-17T08:38:34.629Z,15658,notepad.exe,SYN_SENT,TCP,10.10.2.170,5985,151.149.80.8,443,emartinez +MKT-WS-070,2026-02-13T20:59:40.723Z,35398,spoolsv.exe,SYN_SENT,TCP,10.10.2.170,139,92.214.230.7,5186,gwhite +MKT-WS-070,2026-02-15T04:28:37.572Z,35409,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.2.170,139,60.142.125.208,443,agarcia +MKT-WS-070,2026-02-17T02:37:22.246Z,16654,dwm.exe,ESTABLISHED,TCP,10.10.2.170,389,70.113.58.88,88,svc_sql +MKT-WS-070,2026-02-10T08:22:05.428Z,61669,MsMpEng.exe,LISTEN,TCP,10.10.2.170,3389,0.0.0.0,0,gwhite +MKT-WS-070,2026-02-16T21:16:33.485Z,2160,msedge.exe,CLOSE_WAIT,TCP,10.10.2.170,5985,162.152.21.115,636,hbrown +MKT-WS-070,2026-02-19T02:36:42.576Z,21481,chrome.exe,CLOSE_WAIT,UDP,10.10.2.170,445,10.10.3.123,445,svc_sql +MKT-WS-070,2026-02-14T16:44:13.534Z,243,MsMpEng.exe,ESTABLISHED,TCP,10.10.2.170,53,10.10.1.160,443,fthompson +EXEC-WS-071,2026-02-12T20:01:36.967Z,7967,SearchHost.exe,ESTABLISHED,UDP,10.10.3.171,5985,101.67.7.143,80,gwhite +EXEC-WS-071,2026-02-19T17:20:19.450Z,17438,qbittorrent.exe,LISTEN,TCP,10.10.3.171,389,0.0.0.0,0,dlee +EXEC-WS-071,2026-02-17T23:56:46.230Z,19448,taskhostw.exe,SYN_SENT,TCP,10.10.3.171,389,65.171.248.231,80,svc_sql +EXEC-WS-071,2026-02-19T11:13:34.752Z,14186,MsMpEng.exe,LISTEN,TCP,10.10.3.171,389,0.0.0.0,0,fthompson +EXEC-WS-071,2026-02-14T13:16:02.146Z,53601,smss.exe,ESTABLISHED,UDP,10.10.3.171,8080,10.10.3.171,389,svc_backup +EXEC-WS-071,2026-02-10T18:30:25.774Z,23356,services.exe,CLOSE_WAIT,TCP,10.10.3.171,445,194.150.124.97,445,cjohnson +EXEC-WS-071,2026-02-19T10:25:33.563Z,54302,lsass.exe,TIME_WAIT,TCP,10.10.3.171,636,137.225.188.200,3389,svc_backup +EXEC-WS-071,2026-02-14T14:46:42.486Z,13048,dwm.exe,SYN_SENT,UDP,10.10.3.171,3389,10.10.2.167,88,bwilson +EXEC-WS-071,2026-02-13T13:36:10.747Z,53616,explorer.exe,CLOSE_WAIT,TCP,10.10.3.171,88,199.208.145.150,25457,gwhite +EXEC-WS-071,2026-02-12T06:29:55.729Z,34469,MsMpEng.exe,LISTEN,UDP,10.10.3.171,139,0.0.0.0,0,fthompson +EXEC-WS-071,2026-02-19T15:08:06.290Z,24804,lsass.exe,SYN_SENT,TCP,10.10.3.171,80,10.10.3.159,3389,idavis +EXEC-WS-071,2026-02-13T16:09:14.639Z,36331,services.exe,LISTEN,TCP,10.10.3.171,135,0.0.0.0,0,svc_backup +EXEC-WS-071,2026-02-12T21:45:53.150Z,34518,SearchHost.exe,SYN_SENT,TCP,10.10.3.171,636,127.230.95.96,443,bwilson +EXEC-WS-071,2026-02-14T12:36:45.840Z,2022,spotify.exe,TIME_WAIT,TCP,10.10.3.171,443,84.102.97.250,8080,jsmith +EXEC-WS-071,2026-02-17T22:46:20.270Z,37063,notepad.exe,TIME_WAIT,TCP,10.10.3.171,5985,38.34.156.190,445,agarcia +IT-WS-072,2026-02-11T22:04:35.169Z,41752,svchost.exe,LISTEN,TCP,10.10.1.172,3389,0.0.0.0,0,svc_web +IT-WS-072,2026-02-13T18:22:35.868Z,63645,outlook.exe,ESTABLISHED,TCP,10.10.1.172,389,10.10.1.118,80,svc_backup +IT-WS-072,2026-02-20T03:36:08.461Z,6804,explorer.exe,SYN_SENT,UDP,10.10.1.172,3389,10.10.1.163,29080,idavis +IT-WS-072,2026-02-11T05:17:37.556Z,43280,System,SYN_SENT,TCP,10.10.1.172,88,212.17.189.103,80,emartinez +IT-WS-072,2026-02-19T04:23:36.699Z,540,svchost.exe,CLOSE_WAIT,TCP,10.10.1.172,5985,26.220.170.251,445,dlee +IT-WS-072,2026-02-13T14:56:13.687Z,26622,notepad.exe,CLOSE_WAIT,TCP,10.10.1.172,636,42.162.115.247,32622,agarcia +IT-WS-072,2026-02-11T05:32:24.893Z,37822,winlogon.exe,CLOSE_WAIT,TCP,10.10.1.172,389,44.37.254.254,88,svc_sql +IT-WS-072,2026-02-12T09:34:08.361Z,31837,explorer.exe,LISTEN,TCP,10.10.1.172,88,0.0.0.0,0,cjohnson +IT-WS-072,2026-02-13T09:28:50.891Z,20449,explorer.exe,LISTEN,TCP,10.10.1.172,55176,0.0.0.0,0,dlee +IT-WS-072,2026-02-18T09:37:00.179Z,20757,notepad.exe,SYN_SENT,TCP,10.10.1.172,49154,10.10.1.157,8080,agarcia +IT-WS-072,2026-02-17T13:46:08.867Z,63080,svchost.exe,CLOSE_WAIT,TCP,10.10.1.172,443,10.10.3.105,389,admin +IT-WS-072,2026-02-16T03:35:09.953Z,23300,System,SYN_SENT,TCP,10.10.1.172,139,91.196.98.249,443,hbrown +IT-WS-072,2026-02-12T22:13:08.724Z,43773,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.172,3389,10.10.3.10,53,agarcia +IT-WS-072,2026-02-11T13:18:26.700Z,18207,explorer.exe,CLOSE_WAIT,TCP,10.10.1.172,80,10.10.3.102,445,jsmith +IT-WS-072,2026-02-18T07:47:42.156Z,48492,powershell.exe,SYN_SENT,TCP,10.10.1.172,445,10.10.2.149,8080,svc_backup +IT-WS-072,2026-02-13T16:25:26.352Z,39951,dwm.exe,TIME_WAIT,TCP,10.10.1.172,389,72.10.227.137,88,svc_backup +IT-WS-072,2026-02-20T01:08:06.530Z,39742,SearchHost.exe,TIME_WAIT,TCP,10.10.1.172,135,185.121.175.185,80,gwhite +IT-WS-072,2026-02-16T13:08:42.777Z,2788,svchost.exe,SYN_SENT,TCP,10.10.1.172,50902,10.10.3.165,80,admin +IT-WS-072,2026-02-11T08:03:43.658Z,35300,services.exe,SYN_SENT,TCP,10.10.1.172,135,10.10.2.119,443,dlee +IT-WS-072,2026-02-10T16:05:13.697Z,29907,System,ESTABLISHED,TCP,10.10.1.172,54493,103.123.95.169,88,svc_sql +IT-WS-072,2026-02-16T14:09:17.725Z,30927,teams.exe,LISTEN,TCP,10.10.1.172,135,0.0.0.0,0,admin +HR-WS-073,2026-02-18T03:40:43.522Z,19057,cmd.exe,TIME_WAIT,TCP,10.10.2.173,8080,186.29.70.236,389,fthompson +HR-WS-073,2026-02-12T04:57:01.782Z,21511,services.exe,SYN_SENT,TCP,10.10.2.173,88,10.10.3.150,88,svc_backup +HR-WS-073,2026-02-14T05:29:33.266Z,53377,SearchHost.exe,ESTABLISHED,TCP,10.10.2.173,80,10.10.1.169,8080,hbrown +HR-WS-073,2026-02-13T18:39:39.690Z,53354,svchost.exe,LISTEN,TCP,10.10.2.173,80,0.0.0.0,0,jsmith +HR-WS-073,2026-02-13T02:29:43.700Z,625,explorer.exe,CLOSE_WAIT,TCP,10.10.2.173,5985,213.4.189.12,88,idavis +HR-WS-073,2026-02-11T17:48:50.051Z,39966,msedge.exe,ESTABLISHED,UDP,10.10.2.173,88,31.84.30.207,53,dlee +HR-WS-073,2026-02-15T04:52:21.811Z,39254,OneDrive.exe,LISTEN,TCP,10.10.2.173,88,0.0.0.0,0,emartinez +HR-WS-073,2026-02-20T01:36:40.281Z,43457,msedge.exe,SYN_SENT,UDP,10.10.2.173,80,10.10.1.160,389,emartinez +FIN-WS-074,2026-02-11T15:05:20.150Z,1167,spoolsv.exe,SYN_SENT,UDP,10.10.3.174,3389,74.144.146.237,443,admin +FIN-WS-074,2026-02-11T23:13:30.236Z,11101,OneDrive.exe,SYN_SENT,TCP,10.10.3.174,3389,10.10.2.137,88,idavis +FIN-WS-074,2026-02-15T11:45:37.408Z,20737,RuntimeBroker.exe,LISTEN,TCP,10.10.3.174,88,0.0.0.0,0,svc_backup +FIN-WS-074,2026-02-14T16:59:59.169Z,9244,svchost.exe,LISTEN,TCP,10.10.3.174,52512,0.0.0.0,0,dlee +FIN-WS-074,2026-02-14T00:19:47.518Z,4221,svchost.exe,CLOSE_WAIT,TCP,10.10.3.174,8080,222.78.215.231,3389,emartinez +FIN-WS-074,2026-02-18T18:14:26.976Z,20811,svchost.exe,ESTABLISHED,TCP,10.10.3.174,389,2.34.225.59,389,fthompson +FIN-WS-074,2026-02-13T17:35:57.531Z,29089,dwm.exe,CLOSE_WAIT,TCP,10.10.3.174,3389,34.91.130.78,17099,idavis +FIN-WS-074,2026-02-11T14:46:37.418Z,61282,OneDrive.exe,CLOSE_WAIT,TCP,10.10.3.174,135,10.10.2.107,389,svc_backup +FIN-WS-074,2026-02-19T13:17:37.236Z,36389,spoolsv.exe,SYN_SENT,TCP,10.10.3.174,5985,10.10.2.128,88,cjohnson +FIN-WS-074,2026-02-10T20:17:38.425Z,12272,taskhostw.exe,SYN_SENT,TCP,10.10.3.174,389,10.10.2.101,389,cjohnson +FIN-WS-074,2026-02-16T14:52:02.993Z,28443,OneDrive.exe,CLOSE_WAIT,TCP,10.10.3.174,53,68.125.3.207,80,gwhite +FIN-WS-074,2026-02-18T12:32:00.581Z,8833,code.exe,LISTEN,TCP,10.10.3.174,135,0.0.0.0,0,cjohnson +FIN-WS-074,2026-02-14T06:00:55.856Z,56425,SearchHost.exe,TIME_WAIT,TCP,10.10.3.174,445,10.10.1.121,389,idavis +FIN-WS-074,2026-02-16T19:29:14.517Z,46572,cmd.exe,LISTEN,TCP,10.10.3.174,135,0.0.0.0,0,bwilson +FIN-WS-074,2026-02-11T00:18:52.796Z,40525,System,TIME_WAIT,UDP,10.10.3.174,445,10.10.2.113,80,cjohnson +FIN-WS-074,2026-02-10T10:16:23.512Z,44183,teams.exe,SYN_SENT,TCP,10.10.3.174,445,55.152.253.169,59315,gwhite +FIN-WS-074,2026-02-17T12:25:53.567Z,40885,taskhostw.exe,ESTABLISHED,TCP,10.10.3.174,636,10.10.1.157,29625,agarcia +FIN-WS-074,2026-02-12T06:04:34.549Z,49800,powershell.exe,ESTABLISHED,TCP,10.10.3.174,636,214.201.145.253,8080,fthompson +FIN-WS-074,2026-02-15T04:42:55.915Z,13453,outlook.exe,LISTEN,TCP,10.10.3.174,8080,0.0.0.0,0,agarcia +FIN-WS-074,2026-02-14T02:22:35.601Z,15700,dwm.exe,ESTABLISHED,TCP,10.10.3.174,139,187.244.14.237,636,fthompson +FIN-WS-074,2026-02-17T00:04:41.863Z,51944,taskhostw.exe,SYN_SENT,TCP,10.10.3.174,88,129.155.69.162,80,svc_backup +FIN-WS-074,2026-02-17T08:50:57.754Z,57020,explorer.exe,LISTEN,TCP,10.10.3.174,80,0.0.0.0,0,fthompson +FIN-WS-074,2026-02-10T11:26:54.060Z,2722,RuntimeBroker.exe,SYN_SENT,UDP,10.10.3.174,8080,10.10.2.101,8080,cjohnson +FIN-WS-074,2026-02-16T12:45:11.347Z,42415,code.exe,SYN_SENT,TCP,10.10.3.174,62375,10.10.3.174,53,idavis +SLS-WS-075,2026-02-18T01:01:23.543Z,58344,code.exe,SYN_SENT,TCP,10.10.1.175,636,10.10.2.10,3277,emartinez +SLS-WS-075,2026-02-20T11:50:23.700Z,16959,svchost.exe,TIME_WAIT,TCP,10.10.1.175,445,211.213.223.76,3389,fthompson +SLS-WS-075,2026-02-19T08:45:21.549Z,6937,msedge.exe,LISTEN,TCP,10.10.1.175,389,0.0.0.0,0,emartinez +SLS-WS-075,2026-02-11T18:22:03.602Z,12755,System,TIME_WAIT,UDP,10.10.1.175,80,10.10.2.158,8080,svc_web +SLS-WS-075,2026-02-18T09:35:16.118Z,34595,dwm.exe,TIME_WAIT,TCP,10.10.1.175,445,10.10.1.160,636,bwilson +SLS-WS-075,2026-02-13T18:27:25.004Z,35925,outlook.exe,LISTEN,TCP,10.10.1.175,80,0.0.0.0,0,svc_web +SLS-WS-075,2026-02-18T02:53:54.062Z,37780,SearchHost.exe,SYN_SENT,TCP,10.10.1.175,636,10.10.1.148,389,idavis +SLS-WS-075,2026-02-12T20:21:37.687Z,342,cmd.exe,CLOSE_WAIT,TCP,10.10.1.175,53,110.227.137.146,636,svc_web +SLS-WS-075,2026-02-11T13:49:57.178Z,55111,csrss.exe,LISTEN,UDP,10.10.1.175,62094,0.0.0.0,0,hbrown +SLS-WS-075,2026-02-14T12:11:38.473Z,585,epicgameslauncher.exe,LISTEN,TCP,10.10.1.175,5985,0.0.0.0,0,agarcia +SLS-WS-075,2026-02-14T00:00:58.558Z,63411,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.1.175,139,10.10.1.142,389,bwilson +SLS-WS-075,2026-02-14T01:21:11.983Z,27279,lsass.exe,TIME_WAIT,TCP,10.10.1.175,80,99.228.172.134,80,fthompson +SLS-WS-075,2026-02-10T09:14:04.448Z,52638,taskhostw.exe,ESTABLISHED,UDP,10.10.1.175,139,10.10.1.166,445,svc_web +SLS-WS-075,2026-02-15T01:09:31.766Z,62905,code.exe,SYN_SENT,TCP,10.10.1.175,80,132.119.162.211,443,cjohnson +SLS-WS-075,2026-02-15T23:08:21.609Z,48326,explorer.exe,SYN_SENT,TCP,10.10.1.175,445,10.10.1.106,80,hbrown +SLS-WS-075,2026-02-19T09:00:05.913Z,60346,services.exe,TIME_WAIT,TCP,10.10.1.175,139,10.10.1.109,389,svc_web +SLS-WS-075,2026-02-16T02:48:34.806Z,7277,winlogon.exe,LISTEN,TCP,10.10.1.175,445,0.0.0.0,0,cjohnson +SLS-WS-075,2026-02-13T10:47:19.611Z,33486,services.exe,TIME_WAIT,TCP,10.10.1.175,139,10.10.2.146,389,jsmith +SLS-WS-075,2026-02-10T12:42:34.671Z,22171,winlogon.exe,LISTEN,TCP,10.10.1.175,389,0.0.0.0,0,idavis +SLS-WS-075,2026-02-14T00:26:36.810Z,34863,System,ESTABLISHED,UDP,10.10.1.175,80,44.128.138.38,443,idavis +SLS-WS-075,2026-02-11T08:05:32.135Z,48865,outlook.exe,TIME_WAIT,TCP,10.10.1.175,88,216.8.239.49,3389,gwhite +DC-01,2026-02-20T16:21:26.834Z,45105,System,CLOSE_WAIT,TCP,10.10.1.10,88,10.10.1.166,445,hbrown +DC-01,2026-02-17T01:40:32.555Z,14503,code.exe,ESTABLISHED,TCP,10.10.1.10,88,10.10.3.174,3389,bwilson +DC-01,2026-02-12T12:26:48.270Z,55760,lsass.exe,ESTABLISHED,TCP,10.10.1.10,636,10.10.1.154,636,gwhite +DC-01,2026-02-15T13:09:47.458Z,19426,svchost.exe,CLOSE_WAIT,TCP,10.10.1.10,88,55.44.190.24,636,svc_sql +DC-01,2026-02-17T21:13:59.444Z,14522,SearchHost.exe,TIME_WAIT,TCP,10.10.1.10,5985,160.11.215.238,389,admin +DC-01,2026-02-13T15:05:22.567Z,17973,csrss.exe,SYN_SENT,TCP,10.10.1.10,445,44.116.241.174,88,svc_web +DC-01,2026-02-14T17:10:47.342Z,20675,System,CLOSE_WAIT,TCP,10.10.1.10,58345,120.228.165.181,389,emartinez +DC-01,2026-02-13T16:06:05.038Z,39587,dwm.exe,ESTABLISHED,TCP,10.10.1.10,8080,10.10.1.109,443,jsmith +DC-01,2026-02-15T19:16:51.263Z,56542,notepad.exe,TIME_WAIT,TCP,10.10.1.10,445,10.10.1.166,3389,bwilson +DC-01,2026-02-18T00:33:24.973Z,35960,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.1.10,445,61.204.55.47,53,svc_sql +DC-01,2026-02-14T09:00:21.573Z,49935,outlook.exe,SYN_SENT,TCP,10.10.1.10,389,10.10.2.104,88,svc_web +DC-01,2026-02-16T15:40:25.844Z,15236,explorer.exe,ESTABLISHED,TCP,10.10.1.10,88,34.112.246.200,636,cjohnson +DC-01,2026-02-13T17:58:33.268Z,33591,OneDrive.exe,SYN_SENT,TCP,10.10.1.10,88,117.23.124.183,389,idavis +DC-01,2026-02-17T12:37:45.303Z,969,dwm.exe,LISTEN,UDP,10.10.1.10,3389,0.0.0.0,0,svc_sql +DC-01,2026-02-14T01:22:08.759Z,42286,powershell.exe,ESTABLISHED,UDP,10.10.1.10,443,10.10.1.106,80,agarcia +DC-01,2026-02-15T22:20:55.421Z,6959,services.exe,SYN_SENT,UDP,10.10.1.10,636,10.10.2.140,636,agarcia +DC-01,2026-02-20T15:37:12.155Z,7560,notepad.exe,CLOSE_WAIT,TCP,10.10.1.10,52507,40.116.165.218,636,emartinez +DC-01,2026-02-12T18:01:48.688Z,63900,SearchHost.exe,SYN_SENT,TCP,10.10.1.10,636,10.224.230.159,8080,dlee +DC-01,2026-02-18T20:51:02.497Z,27838,spoolsv.exe,TIME_WAIT,TCP,10.10.1.10,53,10.10.2.161,3389,svc_backup +DC-01,2026-02-14T00:46:00.511Z,62025,notepad.exe,ESTABLISHED,TCP,10.10.1.10,135,35.163.245.56,443,gwhite +DC-01,2026-02-14T21:47:44.021Z,6945,OneDrive.exe,LISTEN,TCP,10.10.1.10,389,0.0.0.0,0,hbrown +DC-01,2026-02-18T23:27:59.728Z,21820,System,LISTEN,TCP,10.10.1.10,88,0.0.0.0,0,hbrown +DC-01,2026-02-16T20:42:25.922Z,16765,OneDrive.exe,TIME_WAIT,UDP,10.10.1.10,135,45.153.46.97,53,hbrown +DC-01,2026-02-17T21:47:19.889Z,22734,lsass.exe,CLOSE_WAIT,TCP,10.10.1.10,135,10.10.2.161,8080,svc_backup +DC-01,2026-02-10T11:16:55.137Z,10688,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.10,389,10.10.1.109,53,bwilson +DC-01,2026-02-14T08:39:03.574Z,58385,MsMpEng.exe,ESTABLISHED,TCP,10.10.1.10,389,10.10.1.139,389,jsmith +DC-01,2026-02-13T08:09:13.970Z,41841,cmd.exe,SYN_SENT,UDP,10.10.1.10,65105,116.147.13.189,88,cjohnson +DC-01,2026-02-10T15:23:33.136Z,47679,svchost.exe,LISTEN,TCP,10.10.1.10,636,0.0.0.0,0,admin +DC-01,2026-02-14T06:16:40.421Z,30225,OneDrive.exe,LISTEN,TCP,10.10.1.10,5985,0.0.0.0,0,agarcia +DC-01,2026-02-18T18:49:36.955Z,60505,SearchHost.exe,CLOSE_WAIT,TCP,10.10.1.10,443,1.71.160.192,8080,jsmith +DC-01,2026-02-16T11:05:44.787Z,2696,outlook.exe,LISTEN,UDP,10.10.1.10,88,0.0.0.0,0,agarcia +DC-01,2026-02-13T17:50:58.048Z,41758,code.exe,CLOSE_WAIT,TCP,10.10.1.10,5985,10.10.2.161,443,dlee +DC-01,2026-02-19T04:51:59.563Z,59604,SearchHost.exe,ESTABLISHED,TCP,10.10.1.10,80,158.84.108.63,445,emartinez +DC-01,2026-02-16T01:23:46.924Z,16243,notepad.exe,LISTEN,TCP,10.10.1.10,443,0.0.0.0,0,gwhite +DC-01,2026-02-19T18:08:56.311Z,25094,SearchHost.exe,LISTEN,TCP,10.10.1.10,636,0.0.0.0,0,idavis +DC-01,2026-02-10T19:14:43.077Z,14277,RuntimeBroker.exe,SYN_SENT,UDP,10.10.1.10,8080,176.224.192.218,20595,svc_web +DC-01,2026-02-19T23:20:23.637Z,16865,System,TIME_WAIT,TCP,10.10.1.10,636,10.10.1.127,445,hbrown +DC-02,2026-02-19T23:17:16.296Z,18187,teams.exe,SYN_SENT,TCP,10.10.2.10,88,1.153.240.194,445,fthompson +DC-02,2026-02-15T02:29:49.593Z,33985,OneDrive.exe,ESTABLISHED,TCP,10.10.2.10,139,149.101.76.92,18110,gwhite +DC-02,2026-02-10T10:01:09.505Z,1015,taskhostw.exe,LISTEN,TCP,10.10.2.10,636,0.0.0.0,0,idavis +DC-02,2026-02-10T22:56:37.086Z,47488,powershell.exe,CLOSE_WAIT,TCP,10.10.2.10,5985,10.10.3.168,80,svc_backup +DC-02,2026-02-15T08:20:42.976Z,27137,powershell.exe,ESTABLISHED,TCP,10.10.2.10,88,10.10.1.109,88,bwilson +DC-02,2026-02-11T16:13:06.525Z,49971,svchost.exe,CLOSE_WAIT,TCP,10.10.2.10,53,10.10.2.152,445,gwhite +DC-02,2026-02-12T04:48:05.269Z,48796,lsass.exe,SYN_SENT,TCP,10.10.2.10,5985,10.10.2.110,445,cjohnson +DC-02,2026-02-19T20:52:41.197Z,9150,explorer.exe,ESTABLISHED,UDP,10.10.2.10,80,48.221.171.251,53,bwilson +DC-02,2026-02-13T15:56:22.652Z,38689,msedge.exe,ESTABLISHED,TCP,10.10.2.10,80,10.10.3.114,445,idavis +DC-02,2026-02-20T15:48:12.420Z,15311,msedge.exe,CLOSE_WAIT,TCP,10.10.2.10,135,10.10.1.118,80,svc_web +DC-02,2026-02-14T06:26:42.649Z,43027,outlook.exe,LISTEN,UDP,10.10.2.10,3389,0.0.0.0,0,jsmith +DC-02,2026-02-11T09:15:25.874Z,15030,MsMpEng.exe,SYN_SENT,TCP,10.10.2.10,443,195.106.131.137,15679,admin +DC-02,2026-02-17T09:49:07.420Z,21940,teams.exe,SYN_SENT,TCP,10.10.2.10,52977,10.10.2.10,88,bwilson +DC-02,2026-02-15T15:59:58.945Z,28241,teams.exe,SYN_SENT,TCP,10.10.2.10,58930,206.152.226.110,18306,cjohnson +DC-02,2026-02-16T01:32:11.818Z,41065,explorer.exe,SYN_SENT,TCP,10.10.2.10,5985,10.10.3.132,44400,emartinez +DC-02,2026-02-11T07:01:43.642Z,45212,winlogon.exe,LISTEN,TCP,10.10.2.10,62415,0.0.0.0,0,bwilson +DC-02,2026-02-14T16:07:20.200Z,6996,SearchHost.exe,TIME_WAIT,TCP,10.10.2.10,139,125.199.80.95,88,dlee +DC-02,2026-02-17T14:29:32.274Z,10536,RuntimeBroker.exe,LISTEN,UDP,10.10.2.10,88,0.0.0.0,0,dlee +DC-02,2026-02-16T01:51:39.848Z,22322,cmd.exe,CLOSE_WAIT,TCP,10.10.2.10,389,10.10.1.175,9365,svc_backup +DC-02,2026-02-11T21:41:01.091Z,6867,notepad.exe,LISTEN,TCP,10.10.2.10,88,0.0.0.0,0,emartinez +DC-02,2026-02-13T18:07:51.255Z,49191,teams.exe,CLOSE_WAIT,TCP,10.10.2.10,636,10.10.2.128,636,fthompson +DC-02,2026-02-18T04:00:45.680Z,49836,smss.exe,ESTABLISHED,TCP,10.10.2.10,5985,188.75.151.145,41388,hbrown +DC-02,2026-02-11T06:05:46.044Z,16146,chrome.exe,CLOSE_WAIT,TCP,10.10.2.10,135,173.42.51.101,389,jsmith +DC-02,2026-02-14T17:54:11.058Z,31686,code.exe,CLOSE_WAIT,UDP,10.10.2.10,80,10.10.2.113,36171,hbrown +DC-02,2026-02-16T12:02:17.931Z,19619,svchost.exe,SYN_SENT,UDP,10.10.2.10,636,10.10.2.116,3389,svc_sql +DC-02,2026-02-18T03:09:58.729Z,54583,SearchHost.exe,LISTEN,TCP,10.10.2.10,445,0.0.0.0,0,admin +DC-02,2026-02-14T10:51:10.448Z,37629,OneDrive.exe,TIME_WAIT,TCP,10.10.2.10,135,10.10.1.118,3389,dlee +DC-02,2026-02-15T00:52:28.047Z,44155,MsMpEng.exe,ESTABLISHED,TCP,10.10.2.10,389,106.196.149.146,88,jsmith +DC-02,2026-02-16T14:01:14.111Z,2253,System,LISTEN,UDP,10.10.2.10,135,0.0.0.0,0,agarcia +DC-02,2026-02-14T12:20:16.895Z,47182,msedge.exe,LISTEN,TCP,10.10.2.10,443,0.0.0.0,0,cjohnson +DC-02,2026-02-19T00:18:27.683Z,43143,cmd.exe,SYN_SENT,TCP,10.10.2.10,135,58.118.139.249,88,svc_sql +DC-02,2026-02-15T11:24:21.424Z,14289,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.10,139,12.135.45.187,88,jsmith +DC-02,2026-02-17T04:02:21.468Z,60570,cmd.exe,SYN_SENT,TCP,10.10.2.10,5985,3.144.42.198,445,bwilson +FILE-01,2026-02-11T20:05:41.514Z,62672,System,CLOSE_WAIT,TCP,10.10.1.11,5985,140.16.37.225,445,svc_web +FILE-01,2026-02-10T23:20:45.068Z,31429,cmd.exe,SYN_SENT,TCP,10.10.1.11,53,67.79.30.54,88,idavis +FILE-01,2026-02-18T13:40:44.121Z,7702,msedge.exe,CLOSE_WAIT,TCP,10.10.1.11,135,10.10.1.142,443,cjohnson +FILE-01,2026-02-16T02:54:40.864Z,43039,OneDrive.exe,ESTABLISHED,TCP,10.10.1.11,80,35.155.237.172,636,agarcia +FILE-01,2026-02-13T10:46:06.556Z,9059,msedge.exe,LISTEN,TCP,10.10.1.11,389,0.0.0.0,0,gwhite +FILE-01,2026-02-11T01:56:12.835Z,36414,chrome.exe,SYN_SENT,UDP,10.10.1.11,8080,10.10.3.138,13313,svc_sql +FILE-01,2026-02-13T06:59:22.999Z,3238,explorer.exe,CLOSE_WAIT,TCP,10.10.1.11,389,98.62.146.44,53,agarcia +FILE-01,2026-02-18T19:32:13.880Z,22194,chrome.exe,TIME_WAIT,UDP,10.10.1.11,80,10.10.1.109,445,bwilson +FILE-01,2026-02-16T13:18:09.619Z,40311,teams.exe,CLOSE_WAIT,TCP,10.10.1.11,80,10.10.1.109,636,dlee +FILE-01,2026-02-14T20:10:17.303Z,22897,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.1.11,53,146.113.29.8,53,admin +EXCH-01,2026-02-14T13:16:24.251Z,1796,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.12,445,10.10.3.150,53,dlee +EXCH-01,2026-02-15T15:18:39.619Z,62734,svchost.exe,CLOSE_WAIT,TCP,10.10.1.12,443,76.140.56.215,88,fthompson +EXCH-01,2026-02-16T13:52:34.553Z,44160,cmd.exe,ESTABLISHED,TCP,10.10.1.12,63736,10.10.1.13,636,dlee +EXCH-01,2026-02-19T09:32:43.463Z,43327,msedge.exe,CLOSE_WAIT,UDP,10.10.1.12,80,121.208.86.50,53,bwilson +EXCH-01,2026-02-19T08:34:55.376Z,34572,outlook.exe,SYN_SENT,UDP,10.10.1.12,445,10.10.1.169,53,cjohnson +EXCH-01,2026-02-18T16:38:00.392Z,15053,services.exe,SYN_SENT,TCP,10.10.1.12,80,10.10.3.171,30670,emartinez +EXCH-01,2026-02-16T12:00:43.808Z,60624,msedge.exe,ESTABLISHED,UDP,10.10.1.12,389,8.160.99.82,636,svc_web +EXCH-01,2026-02-10T12:17:54.259Z,4870,lsass.exe,TIME_WAIT,TCP,10.10.1.12,8080,143.20.237.135,636,jsmith +EXCH-01,2026-02-13T07:58:40.088Z,36516,msedge.exe,SYN_SENT,TCP,10.10.1.12,135,78.39.170.224,445,fthompson +EXCH-01,2026-02-11T05:15:02.204Z,33519,notepad.exe,LISTEN,TCP,10.10.1.12,445,0.0.0.0,0,admin +EXCH-01,2026-02-18T05:00:07.865Z,32718,services.exe,LISTEN,TCP,10.10.1.12,135,0.0.0.0,0,hbrown +EXCH-01,2026-02-11T20:28:38.070Z,14643,svchost.exe,LISTEN,TCP,10.10.1.12,389,0.0.0.0,0,svc_web +EXCH-01,2026-02-19T20:44:29.914Z,51496,OneDrive.exe,CLOSE_WAIT,TCP,10.10.1.12,636,10.10.2.143,53,emartinez +EXCH-01,2026-02-14T01:49:17.495Z,10141,notepad.exe,ESTABLISHED,TCP,10.10.1.12,445,148.0.214.155,445,hbrown +EXCH-01,2026-02-15T01:05:12.394Z,18015,System,CLOSE_WAIT,TCP,10.10.1.12,443,10.10.1.154,3389,emartinez +EXCH-01,2026-02-11T01:16:40.905Z,38618,explorer.exe,ESTABLISHED,TCP,10.10.1.12,445,10.10.3.129,636,hbrown +EXCH-01,2026-02-15T07:43:39.567Z,26214,RuntimeBroker.exe,LISTEN,TCP,10.10.1.12,135,0.0.0.0,0,idavis +EXCH-01,2026-02-15T20:52:33.385Z,44357,spoolsv.exe,SYN_SENT,TCP,10.10.1.12,139,10.10.1.124,80,bwilson +EXCH-01,2026-02-13T12:57:12.790Z,47295,outlook.exe,TIME_WAIT,UDP,10.10.1.12,139,10.10.3.111,8080,emartinez +EXCH-01,2026-02-19T00:31:26.718Z,37003,SearchHost.exe,SYN_SENT,TCP,10.10.1.12,53,87.161.234.73,8080,svc_sql +EXCH-01,2026-02-13T08:46:44.991Z,11980,teams.exe,TIME_WAIT,UDP,10.10.1.12,8080,10.10.2.119,45303,cjohnson +EXCH-01,2026-02-19T18:12:18.940Z,45330,taskhostw.exe,SYN_SENT,UDP,10.10.1.12,135,10.10.1.118,8080,idavis +EXCH-01,2026-02-20T05:49:10.631Z,39437,csrss.exe,LISTEN,TCP,10.10.1.12,139,0.0.0.0,0,bwilson +EXCH-01,2026-02-14T07:36:44.762Z,13857,svchost.exe,TIME_WAIT,TCP,10.10.1.12,8080,139.90.61.92,88,gwhite +EXCH-01,2026-02-13T11:31:03.318Z,51233,svchost.exe,CLOSE_WAIT,UDP,10.10.1.12,3389,193.16.110.32,80,svc_web +EXCH-01,2026-02-17T07:51:21.987Z,3294,teams.exe,LISTEN,TCP,10.10.1.12,443,0.0.0.0,0,agarcia +EXCH-01,2026-02-12T16:25:23.631Z,39696,spoolsv.exe,LISTEN,UDP,10.10.1.12,88,0.0.0.0,0,gwhite +EXCH-01,2026-02-14T06:08:35.634Z,47151,explorer.exe,ESTABLISHED,TCP,10.10.1.12,445,182.174.220.26,53,admin +EXCH-01,2026-02-13T07:24:49.202Z,51194,winlogon.exe,ESTABLISHED,TCP,10.10.1.12,3389,154.158.1.187,80,emartinez +EXCH-01,2026-02-17T02:43:20.608Z,30818,code.exe,LISTEN,UDP,10.10.1.12,5985,0.0.0.0,0,gwhite +EXCH-01,2026-02-16T17:44:04.871Z,62030,System,ESTABLISHED,TCP,10.10.1.12,5985,10.10.3.132,443,svc_sql +EXCH-01,2026-02-13T22:09:00.765Z,43277,MsMpEng.exe,SYN_SENT,TCP,10.10.1.12,389,10.10.1.154,80,gwhite +EXCH-01,2026-02-14T13:41:41.512Z,4961,lsass.exe,ESTABLISHED,UDP,10.10.1.12,50020,10.10.1.142,80,svc_sql +WEB-01,2026-02-12T11:07:27.994Z,16226,powershell.exe,ESTABLISHED,TCP,10.10.3.10,8080,10.10.2.11,88,bwilson +WEB-01,2026-02-14T03:54:30.849Z,14561,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.3.10,88,10.10.1.13,636,gwhite +WEB-01,2026-02-10T13:23:36.102Z,1995,notepad.exe,LISTEN,TCP,10.10.3.10,135,0.0.0.0,0,svc_backup +WEB-01,2026-02-17T15:45:35.109Z,4893,taskhostw.exe,LISTEN,TCP,10.10.3.10,135,0.0.0.0,0,cjohnson +WEB-01,2026-02-17T04:46:39.810Z,13318,lsass.exe,TIME_WAIT,TCP,10.10.3.10,5985,10.10.3.162,389,svc_sql +WEB-01,2026-02-18T19:37:52.603Z,52779,lsass.exe,TIME_WAIT,TCP,10.10.3.10,3389,10.10.2.113,80,emartinez +WEB-01,2026-02-13T14:58:50.409Z,22737,lsass.exe,CLOSE_WAIT,TCP,10.10.3.10,5985,10.10.2.119,445,cjohnson +WEB-01,2026-02-15T15:49:38.354Z,38679,powershell.exe,CLOSE_WAIT,TCP,10.10.3.10,3389,10.10.3.153,389,fthompson +WEB-01,2026-02-16T08:38:55.015Z,63715,cmd.exe,SYN_SENT,TCP,10.10.3.10,443,10.10.1.118,88,idavis +WEB-01,2026-02-17T17:44:25.740Z,11852,SearchHost.exe,SYN_SENT,TCP,10.10.3.10,445,10.10.3.117,88,idavis +WEB-01,2026-02-16T07:52:55.223Z,19836,taskhostw.exe,ESTABLISHED,TCP,10.10.3.10,88,200.110.131.176,8080,fthompson +SQL-01,2026-02-15T03:22:02.172Z,64585,teams.exe,LISTEN,UDP,10.10.2.11,8080,0.0.0.0,0,svc_web +SQL-01,2026-02-15T02:44:19.920Z,13443,OneDrive.exe,ESTABLISHED,TCP,10.10.2.11,8080,10.10.1.115,80,cjohnson +SQL-01,2026-02-16T02:52:30.514Z,55207,dwm.exe,LISTEN,TCP,10.10.2.11,8080,0.0.0.0,0,bwilson +SQL-01,2026-02-10T10:56:15.644Z,13019,code.exe,CLOSE_WAIT,UDP,10.10.2.11,88,10.10.1.151,389,fthompson +SQL-01,2026-02-10T09:05:09.863Z,4514,MsMpEng.exe,LISTEN,TCP,10.10.2.11,135,0.0.0.0,0,bwilson +SQL-01,2026-02-14T17:42:53.647Z,29680,outlook.exe,ESTABLISHED,TCP,10.10.2.11,53,69.64.198.210,3389,admin +SQL-01,2026-02-16T15:38:50.639Z,18845,svchost.exe,SYN_SENT,UDP,10.10.2.11,8080,10.10.3.102,445,fthompson +SQL-01,2026-02-13T05:58:58.562Z,46970,services.exe,LISTEN,TCP,10.10.2.11,5985,0.0.0.0,0,svc_web +SQL-01,2026-02-14T04:23:52.063Z,56930,spotify.exe,LISTEN,UDP,10.10.2.11,88,0.0.0.0,0,agarcia +SQL-01,2026-02-17T18:50:55.682Z,58726,code.exe,TIME_WAIT,TCP,10.10.2.11,443,10.10.1.115,636,svc_backup +SQL-01,2026-02-13T23:08:33.858Z,25328,System,ESTABLISHED,UDP,10.10.2.11,139,10.10.3.108,443,hbrown +SQL-01,2026-02-16T22:34:34.866Z,6852,MsMpEng.exe,LISTEN,TCP,10.10.2.11,53,0.0.0.0,0,dlee +SQL-01,2026-02-15T17:04:47.662Z,20924,code.exe,CLOSE_WAIT,TCP,10.10.2.11,3389,91.25.100.11,88,fthompson +SQL-01,2026-02-15T19:46:43.748Z,36718,msedge.exe,CLOSE_WAIT,TCP,10.10.2.11,80,24.19.79.228,27552,admin +SQL-01,2026-02-16T06:11:15.199Z,30903,winlogon.exe,ESTABLISHED,TCP,10.10.2.11,443,10.10.2.167,443,svc_web +SQL-01,2026-02-19T08:12:33.768Z,21912,csrss.exe,TIME_WAIT,TCP,10.10.2.11,389,51.81.211.17,53,hbrown +SQL-01,2026-02-20T05:57:49.793Z,64809,code.exe,TIME_WAIT,TCP,10.10.2.11,88,10.10.3.120,53,cjohnson +SQL-01,2026-02-10T18:49:42.917Z,44750,smss.exe,SYN_SENT,UDP,10.10.2.11,445,10.10.1.160,636,emartinez +SQL-01,2026-02-13T21:14:35.149Z,10427,cmd.exe,CLOSE_WAIT,TCP,10.10.2.11,88,223.106.2.209,636,svc_web +SQL-01,2026-02-19T10:41:49.030Z,24388,winlogon.exe,CLOSE_WAIT,TCP,10.10.2.11,139,82.35.189.208,8080,dlee +SQL-01,2026-02-16T02:53:32.897Z,46959,powershell.exe,ESTABLISHED,TCP,10.10.2.11,135,10.10.3.102,3389,svc_web +SQL-01,2026-02-11T16:04:04.500Z,48104,winlogon.exe,CLOSE_WAIT,TCP,10.10.2.11,636,10.10.3.165,53,gwhite +SQL-01,2026-02-14T22:38:46.840Z,5535,SearchHost.exe,LISTEN,TCP,10.10.2.11,80,0.0.0.0,0,bwilson +SQL-01,2026-02-13T09:48:02.952Z,19122,discord.exe,LISTEN,TCP,10.10.2.11,135,0.0.0.0,0,gwhite +SQL-01,2026-02-17T09:27:50.147Z,38278,MsMpEng.exe,ESTABLISHED,TCP,10.10.2.11,636,10.10.3.10,443,admin +SQL-01,2026-02-16T15:48:50.091Z,47510,SearchHost.exe,TIME_WAIT,TCP,10.10.2.11,3389,10.10.3.159,80,admin +SQL-01,2026-02-10T12:21:58.862Z,46853,powershell.exe,LISTEN,TCP,10.10.2.11,80,0.0.0.0,0,emartinez +SQL-01,2026-02-18T11:04:58.192Z,41003,notepad.exe,LISTEN,TCP,10.10.2.11,135,0.0.0.0,0,cjohnson +SQL-01,2026-02-13T00:35:35.453Z,64592,teams.exe,LISTEN,TCP,10.10.2.11,51640,0.0.0.0,0,idavis +SQL-01,2026-02-11T12:34:20.456Z,59598,csrss.exe,ESTABLISHED,TCP,10.10.2.11,8080,10.10.1.115,33322,emartinez +SQL-01,2026-02-13T23:09:44.153Z,37574,OneDrive.exe,ESTABLISHED,TCP,10.10.2.11,5985,182.77.214.3,88,svc_backup +PROXY-01,2026-02-19T15:36:27.808Z,39429,csrss.exe,TIME_WAIT,TCP,10.10.1.13,53,219.104.112.82,389,bwilson +PROXY-01,2026-02-17T09:41:40.802Z,15832,smss.exe,CLOSE_WAIT,TCP,10.10.1.13,139,10.10.1.13,445,svc_sql +PROXY-01,2026-02-15T22:40:53.444Z,17392,code.exe,ESTABLISHED,TCP,10.10.1.13,389,105.216.186.38,88,svc_web +PROXY-01,2026-02-11T05:35:24.625Z,43782,teams.exe,CLOSE_WAIT,UDP,10.10.1.13,80,10.10.2.170,80,svc_backup +PROXY-01,2026-02-14T12:09:39.952Z,42809,svchost.exe,TIME_WAIT,TCP,10.10.1.13,53,10.10.2.119,443,cjohnson +PROXY-01,2026-02-19T03:15:14.172Z,59709,spoolsv.exe,LISTEN,UDP,10.10.1.13,5985,0.0.0.0,0,cjohnson +PROXY-01,2026-02-10T22:12:57.981Z,2571,OneDrive.exe,LISTEN,TCP,10.10.1.13,80,0.0.0.0,0,idavis +PROXY-01,2026-02-20T09:47:38.874Z,11469,discord.exe,SYN_SENT,TCP,10.10.1.13,443,10.10.2.101,636,hbrown +PROXY-01,2026-02-17T16:34:09.406Z,41607,powershell.exe,TIME_WAIT,TCP,10.10.1.13,3389,140.92.25.160,445,gwhite +PROXY-01,2026-02-15T21:26:50.630Z,42219,chrome.exe,LISTEN,TCP,10.10.1.13,445,0.0.0.0,0,jsmith +PROXY-01,2026-02-11T00:41:41.842Z,56005,chrome.exe,LISTEN,UDP,10.10.1.13,53,0.0.0.0,0,svc_web +PROXY-01,2026-02-17T10:13:12.589Z,62154,notepad.exe,CLOSE_WAIT,TCP,10.10.1.13,80,89.112.37.213,53,cjohnson +PROXY-01,2026-02-20T14:51:31.888Z,49055,powershell.exe,ESTABLISHED,TCP,10.10.1.13,8080,52.229.148.251,37573,dlee +PROXY-01,2026-02-14T18:47:06.718Z,45325,lsass.exe,SYN_SENT,UDP,10.10.1.13,5985,10.10.3.114,389,svc_web +PROXY-01,2026-02-19T18:30:46.858Z,43797,winlogon.exe,CLOSE_WAIT,TCP,10.10.1.13,389,10.10.2.131,636,emartinez +PROXY-01,2026-02-18T23:42:02.268Z,33843,utorrent.exe,CLOSE_WAIT,UDP,10.10.1.13,5985,10.10.3.156,636,jsmith +PROXY-01,2026-02-20T05:24:02.118Z,64948,OneDrive.exe,LISTEN,TCP,10.10.1.13,443,0.0.0.0,0,svc_web +PROXY-01,2026-02-13T21:20:58.560Z,31335,teams.exe,SYN_SENT,TCP,10.10.1.13,8080,75.123.162.145,53,gwhite +PROXY-01,2026-02-10T14:09:33.066Z,2021,lsass.exe,TIME_WAIT,TCP,10.10.1.13,5985,10.10.1.172,636,agarcia +PROXY-01,2026-02-20T06:20:57.646Z,9214,notepad.exe,ESTABLISHED,TCP,10.10.1.13,52735,100.168.247.142,443,idavis +PROXY-01,2026-02-10T17:50:40.021Z,57315,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.1.13,53,10.10.1.115,88,admin diff --git a/backend/tests/test_csvs/02_dns_queries.csv b/backend/tests/test_csvs/02_dns_queries.csv new file mode 100644 index 0000000..a023b78 --- /dev/null +++ b/backend/tests/test_csvs/02_dns_queries.csv @@ -0,0 +1,2965 @@ +Hostname,EventTime,QueryName,QueryType,ResponseCode,SourceIP,AnswerIP +HR-WS-001,2026-02-17T19:35:59.388Z,login.microsoftonline.com,AAAA,NOERROR,10.10.2.101,181.92.228.144 +HR-WS-001,2026-02-13T23:23:42.692Z,pypi.org,MX,NOERROR,10.10.2.101,165.8.72.151 +HR-WS-001,2026-02-11T09:25:07.823Z,graph.microsoft.com,AAAA,NOERROR,10.10.2.101,17.200.18.127 +HR-WS-001,2026-02-18T04:33:31.780Z,googleapis.com,A,NXDOMAIN,10.10.2.101,154.176.76.47 +HR-WS-001,2026-02-14T14:01:06.878Z,acme.sharepoint.com,AAAA,NOERROR,10.10.2.101,5.196.86.227 +HR-WS-001,2026-02-16T23:44:04.786Z,www.facebook.com,A,NOERROR,10.10.2.101,202.88.197.167 +HR-WS-001,2026-02-13T00:53:26.133Z,update.microsoft.com,A,SERVFAIL,10.10.2.101,62.240.147.7 +HR-WS-001,2026-02-15T11:42:16.328Z,file-01.acme.local,A,NOERROR,10.10.2.101,196.141.156.101 +HR-WS-001,2026-02-14T03:52:10.734Z,cloudflare.com,MX,NXDOMAIN,10.10.2.101,185.194.252.202 +HR-WS-001,2026-02-13T11:58:55.995Z,aws.amazon.com,CNAME,NOERROR,10.10.2.101,186.33.143.98 +HR-WS-001,2026-02-20T11:47:44.813Z,google.com,A,NXDOMAIN,10.10.2.101,132.101.137.130 +HR-WS-001,2026-02-16T04:23:27.905Z,dc-02.acme.local,A,NOERROR,10.10.2.101,91.219.81.219 +HR-WS-001,2026-02-12T13:57:30.883Z,pypi.org,MX,NOERROR,10.10.2.101,62.78.15.221 +HR-WS-001,2026-02-15T06:11:26.040Z,cdn.jsdelivr.net,TXT,NXDOMAIN,10.10.2.101, +HR-WS-001,2026-02-13T08:40:54.922Z,cloudflare.com,AAAA,NXDOMAIN,10.10.2.101,157.111.128.77 +HR-WS-001,2026-02-20T17:12:15.163Z,stackoverflow.com,A,NOERROR,10.10.2.101,9.182.12.196 +HR-WS-001,2026-02-13T15:46:54.540Z,dc-02.acme.local,A,NOERROR,10.10.2.101,9.89.137.103 +HR-WS-001,2026-02-10T20:47:02.961Z,login.microsoftonline.com,AAAA,NOERROR,10.10.2.101, +HR-WS-001,2026-02-18T05:37:18.516Z,cloudflare.com,TXT,NOERROR,10.10.2.101,115.116.250.233 +HR-WS-001,2026-02-13T14:40:59.050Z,googleapis.com,A,NOERROR,10.10.2.101,176.2.123.144 +HR-WS-001,2026-02-14T17:25:39.114Z,teams.microsoft.com,CNAME,SERVFAIL,10.10.2.101,29.181.19.174 +HR-WS-001,2026-02-16T23:00:23.194Z,time.windows.com,CNAME,NOERROR,10.10.2.101, +HR-WS-001,2026-02-11T07:33:11.944Z,google.com,AAAA,NOERROR,10.10.2.101,17.71.237.153 +HR-WS-001,2026-02-17T11:39:58.107Z,akamai.net,A,NOERROR,10.10.2.101,193.251.169.49 +HR-WS-001,2026-02-17T21:13:15.092Z,www.shein.com,A,NOERROR,10.10.2.101, +HR-WS-001,2026-02-10T15:17:53.244Z,googleapis.com,A,NOERROR,10.10.2.101,48.235.135.39 +HR-WS-001,2026-02-14T07:04:33.754Z,akamai.net,AAAA,NOERROR,10.10.2.101, +HR-WS-001,2026-02-15T11:58:39.165Z,fitgirl-repacks.site,TXT,NOERROR,10.10.2.101,174.179.178.75 +HR-WS-001,2026-02-13T00:53:09.657Z,teams.microsoft.com,A,NXDOMAIN,10.10.2.101,205.41.118.83 +HR-WS-001,2026-02-17T06:23:25.990Z,www.facebook.com,CNAME,NOERROR,10.10.2.101,81.112.232.179 +HR-WS-001,2026-02-11T17:55:41.210Z,onlyfans.com,AAAA,SERVFAIL,10.10.2.101,107.233.102.64 +HR-WS-001,2026-02-11T07:52:01.514Z,github.com,A,NOERROR,10.10.2.101,171.162.243.96 +HR-WS-001,2026-02-18T06:15:45.493Z,windowsupdate.com,CNAME,NOERROR,10.10.2.101, +HR-WS-001,2026-02-13T00:23:04.711Z,npmjs.com,A,SERVFAIL,10.10.2.101,168.226.200.41 +HR-WS-001,2026-02-20T01:13:38.385Z,www.glassdoor.com,MX,SERVFAIL,10.10.2.101,155.220.123.6 +HR-WS-001,2026-02-19T22:44:12.442Z,acme.local,TXT,NOERROR,10.10.2.101,112.252.30.80 +HR-WS-001,2026-02-13T18:28:57.125Z,time.windows.com,TXT,SERVFAIL,10.10.2.101,211.64.214.113 +HR-WS-001,2026-02-20T04:54:38.557Z,graph.microsoft.com,A,NOERROR,10.10.2.101,59.19.157.129 +FIN-WS-002,2026-02-17T04:23:33.622Z,teams.microsoft.com,A,NOERROR,10.10.3.102, +FIN-WS-002,2026-02-14T12:11:04.075Z,acme.local,CNAME,NOERROR,10.10.3.102,38.89.121.28 +FIN-WS-002,2026-02-15T05:50:42.588Z,update.microsoft.com,A,NOERROR,10.10.3.102,120.94.32.29 +FIN-WS-002,2026-02-16T11:37:03.068Z,dc-02.acme.local,A,NOERROR,10.10.3.102,50.43.103.166 +FIN-WS-002,2026-02-19T12:43:59.166Z,stackoverflow.com,CNAME,NOERROR,10.10.3.102,22.19.80.171 +FIN-WS-002,2026-02-15T08:54:39.715Z,pypi.org,A,NOERROR,10.10.3.102,105.75.58.243 +FIN-WS-002,2026-02-16T15:14:20.978Z,cdn.jsdelivr.net,MX,NOERROR,10.10.3.102,116.109.82.131 +FIN-WS-002,2026-02-11T19:18:49.127Z,onlyfans.com,TXT,NOERROR,10.10.3.102,188.250.117.210 +FIN-WS-002,2026-02-11T08:29:15.202Z,windowsupdate.com,TXT,NOERROR,10.10.3.102,20.164.226.56 +FIN-WS-002,2026-02-18T10:30:12.640Z,stackoverflow.com,A,NOERROR,10.10.3.102,145.231.249.1 +FIN-WS-002,2026-02-13T22:33:51.387Z,dc-02.acme.local,TXT,SERVFAIL,10.10.3.102,21.191.100.15 +FIN-WS-002,2026-02-10T20:46:46.596Z,file-01.acme.local,A,NOERROR,10.10.3.102, +FIN-WS-002,2026-02-18T01:36:01.130Z,github.com,TXT,NOERROR,10.10.3.102,143.17.109.191 +FIN-WS-002,2026-02-13T22:33:18.101Z,aws.amazon.com,A,NOERROR,10.10.3.102,129.204.231.195 +FIN-WS-002,2026-02-17T02:08:36.613Z,acme.local,A,NOERROR,10.10.3.102, +FIN-WS-002,2026-02-13T04:17:08.254Z,acme.sharepoint.com,A,NXDOMAIN,10.10.3.102,77.35.74.62 +FIN-WS-002,2026-02-15T14:14:49.757Z,google.com,A,NOERROR,10.10.3.102,213.67.228.45 +FIN-WS-002,2026-02-11T09:01:55.820Z,1337x.to,AAAA,NOERROR,10.10.3.102,26.158.81.39 +FIN-WS-002,2026-02-15T21:51:15.476Z,hulu.com,TXT,NOERROR,10.10.3.102,61.88.16.198 +FIN-WS-002,2026-02-17T11:17:07.190Z,acme.sharepoint.com,A,NXDOMAIN,10.10.3.102,186.210.113.107 +FIN-WS-002,2026-02-15T22:22:03.927Z,acme.local,A,NOERROR,10.10.3.102,180.245.125.189 +FIN-WS-002,2026-02-15T04:27:50.968Z,login.microsoftonline.com,TXT,SERVFAIL,10.10.3.102,166.248.219.124 +FIN-WS-002,2026-02-10T13:47:01.286Z,outlook.office365.com,AAAA,NOERROR,10.10.3.102,184.51.25.248 +FIN-WS-002,2026-02-15T02:11:16.809Z,login.microsoftonline.com,MX,NOERROR,10.10.3.102,94.14.164.27 +FIN-WS-002,2026-02-10T09:36:17.783Z,cdn.jsdelivr.net,CNAME,NOERROR,10.10.3.102,200.41.135.205 +FIN-WS-002,2026-02-13T00:53:07.540Z,exch-01.acme.local,CNAME,NXDOMAIN,10.10.3.102,37.202.176.87 +FIN-WS-002,2026-02-16T14:00:35.836Z,graph.microsoft.com,MX,NXDOMAIN,10.10.3.102,61.224.228.188 +FIN-WS-002,2026-02-17T12:01:28.726Z,graph.microsoft.com,A,SERVFAIL,10.10.3.102,193.72.217.62 +FIN-WS-002,2026-02-11T10:38:16.577Z,github.com,A,NXDOMAIN,10.10.3.102,98.225.112.241 +FIN-WS-002,2026-02-15T11:36:16.988Z,fitgirl-repacks.site,MX,NOERROR,10.10.3.102, +FIN-WS-002,2026-02-15T07:27:24.631Z,npmjs.com,CNAME,NOERROR,10.10.3.102, +FIN-WS-002,2026-02-17T03:49:09.083Z,akamai.net,A,NOERROR,10.10.3.102,18.154.152.202 +FIN-WS-002,2026-02-12T03:58:37.879Z,github.com,MX,NOERROR,10.10.3.102,1.151.56.19 +FIN-WS-002,2026-02-18T10:47:01.758Z,stackoverflow.com,A,NOERROR,10.10.3.102, +FIN-WS-002,2026-02-12T06:23:31.943Z,exch-01.acme.local,TXT,NOERROR,10.10.3.102, +FIN-WS-002,2026-02-18T00:16:49.768Z,google.com,AAAA,NXDOMAIN,10.10.3.102,7.128.198.81 +FIN-WS-002,2026-02-14T08:52:29.262Z,googleapis.com,TXT,NXDOMAIN,10.10.3.102,56.193.118.1 +SLS-WS-003,2026-02-15T09:36:19.216Z,acme.local,TXT,NOERROR,10.10.1.103,59.40.176.148 +SLS-WS-003,2026-02-18T10:51:57.920Z,update.microsoft.com,A,SERVFAIL,10.10.1.103, +SLS-WS-003,2026-02-20T01:45:37.962Z,pypi.org,MX,NOERROR,10.10.1.103,72.32.22.233 +SLS-WS-003,2026-02-18T01:42:24.116Z,github.com,A,NOERROR,10.10.1.103,21.231.87.33 +SLS-WS-003,2026-02-15T07:57:12.815Z,dc-01.acme.local,TXT,NOERROR,10.10.1.103, +SLS-WS-003,2026-02-17T14:07:50.975Z,cdn.jsdelivr.net,A,NXDOMAIN,10.10.1.103,218.245.171.174 +SLS-WS-003,2026-02-17T22:16:28.500Z,cloudflare.com,A,SERVFAIL,10.10.1.103,214.244.145.149 +SLS-WS-003,2026-02-16T14:04:00.696Z,cloudflare.com,CNAME,NOERROR,10.10.1.103,35.54.251.32 +SLS-WS-003,2026-02-19T05:25:00.576Z,www.reddit.com,A,NOERROR,10.10.1.103,92.48.52.241 +SLS-WS-003,2026-02-14T20:10:01.703Z,login.microsoftonline.com,MX,NOERROR,10.10.1.103,176.160.208.221 +SLS-WS-003,2026-02-12T10:01:44.634Z,stackoverflow.com,A,NOERROR,10.10.1.103,94.180.229.210 +SLS-WS-003,2026-02-11T09:50:20.171Z,stackoverflow.com,TXT,NOERROR,10.10.1.103,56.249.36.23 +SLS-WS-003,2026-02-15T19:23:20.155Z,acme.sharepoint.com,A,SERVFAIL,10.10.1.103,150.27.200.136 +SLS-WS-003,2026-02-17T14:25:29.451Z,windowsupdate.com,A,NOERROR,10.10.1.103,4.255.39.110 +SLS-WS-003,2026-02-12T07:07:52.618Z,exch-01.acme.local,A,NOERROR,10.10.1.103, +SLS-WS-003,2026-02-12T08:37:02.958Z,time.windows.com,A,NOERROR,10.10.1.103, +ENG-WS-004,2026-02-13T02:56:24.789Z,file-01.acme.local,A,NOERROR,10.10.2.104,155.28.124.122 +ENG-WS-004,2026-02-14T01:18:51.433Z,cloudflare.com,CNAME,NOERROR,10.10.2.104,86.115.174.178 +ENG-WS-004,2026-02-17T10:01:14.233Z,acme.local,TXT,SERVFAIL,10.10.2.104,32.78.246.218 +ENG-WS-004,2026-02-16T14:56:20.976Z,acme.sharepoint.com,AAAA,NOERROR,10.10.2.104,199.175.54.113 +ENG-WS-004,2026-02-19T00:24:24.170Z,teams.microsoft.com,A,NOERROR,10.10.2.104,18.130.252.223 +ENG-WS-004,2026-02-19T18:09:03.280Z,windowsupdate.com,A,NOERROR,10.10.2.104,104.19.62.179 +ENG-WS-004,2026-02-16T06:51:43.490Z,acme.local,CNAME,NOERROR,10.10.2.104,212.106.128.82 +ENG-WS-004,2026-02-14T09:24:10.617Z,file-01.acme.local,A,NOERROR,10.10.2.104,3.240.204.134 +ENG-WS-004,2026-02-18T09:47:33.065Z,file-01.acme.local,TXT,NOERROR,10.10.2.104,110.156.185.226 +ENG-WS-004,2026-02-15T04:12:12.513Z,google.com,A,NOERROR,10.10.2.104,9.90.55.118 +ENG-WS-004,2026-02-13T18:09:19.836Z,acme.sharepoint.com,A,NOERROR,10.10.2.104,131.32.34.225 +ENG-WS-004,2026-02-15T05:37:01.683Z,cloudflare.com,MX,NXDOMAIN,10.10.2.104, +ENG-WS-004,2026-02-15T07:42:19.616Z,graph.microsoft.com,AAAA,NOERROR,10.10.2.104,181.92.156.34 +ENG-WS-004,2026-02-12T02:41:02.404Z,aws.amazon.com,A,NOERROR,10.10.2.104, +ENG-WS-004,2026-02-18T18:41:22.562Z,acme.local,A,NXDOMAIN,10.10.2.104,63.94.120.112 +ENG-WS-004,2026-02-11T07:32:10.096Z,login.microsoftonline.com,TXT,NOERROR,10.10.2.104,80.148.137.44 +ENG-WS-004,2026-02-19T10:09:13.641Z,google.com,CNAME,NOERROR,10.10.2.104,172.15.80.178 +ENG-WS-004,2026-02-10T09:49:50.581Z,exch-01.acme.local,TXT,NOERROR,10.10.2.104,90.46.60.172 +ENG-WS-004,2026-02-17T04:20:33.008Z,stackoverflow.com,CNAME,NXDOMAIN,10.10.2.104,3.145.52.80 +ENG-WS-004,2026-02-16T19:14:57.448Z,acme.sharepoint.com,TXT,NOERROR,10.10.2.104,120.19.163.80 +ENG-WS-004,2026-02-13T11:01:13.736Z,update.microsoft.com,CNAME,NOERROR,10.10.2.104,160.28.91.99 +ENG-WS-004,2026-02-19T17:27:16.098Z,akamai.net,A,NOERROR,10.10.2.104, +ENG-WS-004,2026-02-13T15:52:52.480Z,github.com,CNAME,NOERROR,10.10.2.104,152.89.18.163 +ENG-WS-004,2026-02-15T08:04:16.412Z,acme.local,A,NXDOMAIN,10.10.2.104,170.216.88.199 +ENG-WS-004,2026-02-12T18:25:54.878Z,exch-01.acme.local,TXT,NXDOMAIN,10.10.2.104, +ENG-WS-004,2026-02-16T20:16:41.258Z,teams.microsoft.com,TXT,NOERROR,10.10.2.104,5.118.156.33 +ENG-WS-004,2026-02-19T06:39:55.574Z,aws.amazon.com,CNAME,NOERROR,10.10.2.104,173.90.96.70 +ENG-WS-004,2026-02-18T17:29:18.080Z,acme.sharepoint.com,A,SERVFAIL,10.10.2.104,59.121.131.54 +ENG-WS-004,2026-02-20T02:46:03.765Z,graph.microsoft.com,A,SERVFAIL,10.10.2.104,157.130.19.130 +ENG-WS-004,2026-02-18T18:59:01.844Z,exch-01.acme.local,AAAA,NOERROR,10.10.2.104,144.90.196.242 +ENG-WS-004,2026-02-16T02:37:16.563Z,update.microsoft.com,CNAME,NOERROR,10.10.2.104,53.174.11.148 +ENG-WS-004,2026-02-20T11:31:13.094Z,windowsupdate.com,A,SERVFAIL,10.10.2.104,134.191.139.226 +ENG-WS-004,2026-02-19T02:52:55.199Z,pypi.org,A,NOERROR,10.10.2.104,110.216.145.84 +ENG-WS-004,2026-02-11T08:01:53.517Z,cloudflare.com,A,NXDOMAIN,10.10.2.104,12.132.234.32 +ENG-WS-004,2026-02-12T10:21:08.238Z,npmjs.com,A,SERVFAIL,10.10.2.104,88.140.69.141 +ENG-WS-004,2026-02-12T13:03:59.880Z,cdn.jsdelivr.net,CNAME,NOERROR,10.10.2.104,157.205.193.133 +ENG-WS-004,2026-02-15T00:29:36.490Z,stackoverflow.com,TXT,SERVFAIL,10.10.2.104,117.8.209.180 +ENG-WS-004,2026-02-19T05:20:17.284Z,www.ebay.com,A,NOERROR,10.10.2.104,222.221.26.22 +ENG-WS-004,2026-02-14T22:04:43.258Z,cloudflare.com,A,NOERROR,10.10.2.104, +ENG-WS-004,2026-02-13T01:10:38.965Z,npmjs.com,A,NXDOMAIN,10.10.2.104, +ENG-WS-004,2026-02-14T16:42:28.196Z,exch-01.acme.local,A,NOERROR,10.10.2.104, +ENG-WS-004,2026-02-17T21:59:34.193Z,google.com,MX,NOERROR,10.10.2.104,99.251.149.67 +ENG-WS-004,2026-02-12T05:10:31.788Z,akamai.net,CNAME,NOERROR,10.10.2.104,95.222.167.5 +ENG-WS-004,2026-02-13T17:03:04.622Z,dc-01.acme.local,A,NOERROR,10.10.2.104,105.117.248.88 +ENG-WS-004,2026-02-18T22:12:21.609Z,update.microsoft.com,A,NOERROR,10.10.2.104,204.222.36.121 +ENG-WS-004,2026-02-16T10:57:24.640Z,google.com,CNAME,NXDOMAIN,10.10.2.104, +ENG-WS-004,2026-02-13T18:36:34.565Z,update.microsoft.com,A,NOERROR,10.10.2.104,181.251.219.191 +ENG-WS-004,2026-02-19T10:38:09.942Z,github.com,CNAME,SERVFAIL,10.10.2.104,19.210.127.133 +ENG-WS-004,2026-02-12T21:07:24.429Z,googleapis.com,A,NXDOMAIN,10.10.2.104,223.26.197.51 +ENG-WS-004,2026-02-12T15:11:01.237Z,exch-01.acme.local,A,NOERROR,10.10.2.104, +ENG-WS-004,2026-02-14T21:49:07.453Z,steamcommunity.com,TXT,NXDOMAIN,10.10.2.104,22.106.0.195 +ENG-WS-004,2026-02-19T06:54:48.946Z,npmjs.com,AAAA,NXDOMAIN,10.10.2.104,135.192.243.13 +ENG-WS-004,2026-02-13T17:53:13.113Z,github.com,AAAA,NOERROR,10.10.2.104,192.216.110.65 +ENG-WS-004,2026-02-12T12:49:16.358Z,dc-02.acme.local,TXT,NOERROR,10.10.2.104,200.193.125.60 +LEG-WS-005,2026-02-20T08:45:03.574Z,akamai.net,AAAA,NOERROR,10.10.3.105,174.215.45.123 +LEG-WS-005,2026-02-15T00:07:23.883Z,outlook.office365.com,AAAA,NOERROR,10.10.3.105,78.143.182.119 +LEG-WS-005,2026-02-12T03:15:53.400Z,stackoverflow.com,MX,NOERROR,10.10.3.105,101.227.160.179 +LEG-WS-005,2026-02-19T17:25:55.960Z,www.glassdoor.com,TXT,SERVFAIL,10.10.3.105,127.135.253.248 +LEG-WS-005,2026-02-16T17:19:08.158Z,exch-01.acme.local,A,NOERROR,10.10.3.105,74.171.70.151 +LEG-WS-005,2026-02-14T23:31:52.612Z,acme.sharepoint.com,MX,NOERROR,10.10.3.105,223.14.122.122 +LEG-WS-005,2026-02-16T03:23:35.386Z,stackoverflow.com,CNAME,NOERROR,10.10.3.105,39.11.245.108 +LEG-WS-005,2026-02-13T13:01:52.843Z,teams.microsoft.com,MX,NOERROR,10.10.3.105, +LEG-WS-005,2026-02-18T04:35:42.997Z,1337x.to,A,NOERROR,10.10.3.105,54.30.29.202 +LEG-WS-005,2026-02-10T19:37:40.167Z,www.ebay.com,A,NOERROR,10.10.3.105,204.209.190.102 +LEG-WS-005,2026-02-11T21:30:13.619Z,npmjs.com,A,NOERROR,10.10.3.105,88.125.170.168 +LEG-WS-005,2026-02-12T21:30:01.624Z,exch-01.acme.local,AAAA,NOERROR,10.10.3.105,34.210.220.252 +LEG-WS-005,2026-02-19T20:51:19.450Z,www.amazon.com,A,NOERROR,10.10.3.105,10.133.238.8 +LEG-WS-005,2026-02-18T00:12:56.259Z,googleapis.com,A,NOERROR,10.10.3.105,209.157.185.212 +LEG-WS-005,2026-02-16T14:00:06.335Z,teams.microsoft.com,A,SERVFAIL,10.10.3.105,152.204.160.21 +LEG-WS-005,2026-02-17T10:42:42.554Z,store.steampowered.com,CNAME,SERVFAIL,10.10.3.105,115.141.205.110 +LEG-WS-005,2026-02-13T12:36:11.390Z,www.shein.com,MX,NXDOMAIN,10.10.3.105,131.209.249.172 +LEG-WS-005,2026-02-15T03:23:22.445Z,www.shein.com,TXT,NXDOMAIN,10.10.3.105,167.196.75.182 +LEG-WS-005,2026-02-17T18:00:13.315Z,exch-01.acme.local,CNAME,NXDOMAIN,10.10.3.105,154.191.8.135 +LEG-WS-005,2026-02-13T05:03:23.745Z,teams.microsoft.com,AAAA,NOERROR,10.10.3.105,1.92.95.128 +LEG-WS-005,2026-02-19T05:50:28.862Z,dc-02.acme.local,CNAME,NOERROR,10.10.3.105,175.123.216.45 +MKT-WS-006,2026-02-14T00:38:17.994Z,pokerstars.com,AAAA,NOERROR,10.10.1.106,97.16.157.125 +MKT-WS-006,2026-02-12T13:18:12.626Z,acme.local,TXT,NOERROR,10.10.1.106,188.173.85.67 +MKT-WS-006,2026-02-18T22:54:12.428Z,dc-02.acme.local,A,NOERROR,10.10.1.106,68.144.52.5 +MKT-WS-006,2026-02-12T01:37:15.108Z,akamai.net,A,NOERROR,10.10.1.106,124.115.182.254 +MKT-WS-006,2026-02-17T10:29:22.738Z,www.shein.com,A,NXDOMAIN,10.10.1.106,222.254.245.78 +MKT-WS-006,2026-02-20T10:20:37.064Z,draftkings.com,CNAME,NOERROR,10.10.1.106,49.4.72.91 +MKT-WS-006,2026-02-13T02:53:02.170Z,acme.sharepoint.com,MX,NOERROR,10.10.1.106,21.178.107.244 +MKT-WS-006,2026-02-18T09:57:18.179Z,npmjs.com,CNAME,NOERROR,10.10.1.106,126.167.175.225 +MKT-WS-006,2026-02-10T22:28:17.261Z,cloudflare.com,TXT,SERVFAIL,10.10.1.106,174.38.87.249 +MKT-WS-006,2026-02-13T18:34:22.870Z,github.com,A,SERVFAIL,10.10.1.106,222.56.192.118 +MKT-WS-006,2026-02-12T04:27:13.070Z,cloudflare.com,TXT,NOERROR,10.10.1.106,25.112.159.137 +MKT-WS-006,2026-02-11T06:55:29.871Z,googleapis.com,A,NOERROR,10.10.1.106,51.33.132.222 +MKT-WS-006,2026-02-11T15:47:01.747Z,dc-01.acme.local,TXT,NOERROR,10.10.1.106,41.52.189.148 +MKT-WS-006,2026-02-20T12:31:07.422Z,acme.local,A,NOERROR,10.10.1.106,189.52.88.17 +MKT-WS-006,2026-02-15T06:02:43.710Z,update.microsoft.com,AAAA,NOERROR,10.10.1.106, +MKT-WS-006,2026-02-14T12:23:39.665Z,www.shein.com,AAAA,NOERROR,10.10.1.106, +MKT-WS-006,2026-02-14T02:36:38.889Z,exch-01.acme.local,A,NOERROR,10.10.1.106,83.114.19.49 +MKT-WS-006,2026-02-13T10:12:29.305Z,thepiratebay.org,MX,NXDOMAIN,10.10.1.106,172.51.24.158 +MKT-WS-006,2026-02-14T02:08:26.304Z,stackoverflow.com,TXT,NOERROR,10.10.1.106,81.163.233.105 +MKT-WS-006,2026-02-14T20:02:23.020Z,time.windows.com,A,NOERROR,10.10.1.106,78.61.94.153 +MKT-WS-006,2026-02-14T13:39:08.688Z,update.microsoft.com,TXT,SERVFAIL,10.10.1.106,40.28.213.79 +MKT-WS-006,2026-02-19T21:20:24.903Z,cloudflare.com,A,NOERROR,10.10.1.106, +MKT-WS-006,2026-02-18T03:03:11.743Z,time.windows.com,A,NXDOMAIN,10.10.1.106,24.8.30.230 +MKT-WS-006,2026-02-17T21:40:39.156Z,time.windows.com,A,NOERROR,10.10.1.106, +EXEC-WS-007,2026-02-14T13:07:28.059Z,graph.microsoft.com,AAAA,NXDOMAIN,10.10.2.107,33.77.42.163 +EXEC-WS-007,2026-02-19T23:58:03.599Z,exch-01.acme.local,MX,NOERROR,10.10.2.107,98.195.74.8 +EXEC-WS-007,2026-02-13T03:44:51.056Z,aws.amazon.com,TXT,NOERROR,10.10.2.107,3.176.117.36 +EXEC-WS-007,2026-02-16T22:20:17.165Z,aws.amazon.com,A,NOERROR,10.10.2.107,195.67.233.13 +EXEC-WS-007,2026-02-11T20:26:30.531Z,windowsupdate.com,A,NXDOMAIN,10.10.2.107,69.173.252.189 +EXEC-WS-007,2026-02-16T03:07:30.991Z,acme.sharepoint.com,A,NOERROR,10.10.2.107,23.151.171.48 +EXEC-WS-007,2026-02-13T18:47:44.404Z,outlook.office365.com,TXT,NOERROR,10.10.2.107,38.204.8.207 +EXEC-WS-007,2026-02-16T02:06:16.268Z,dc-02.acme.local,AAAA,NOERROR,10.10.2.107,108.183.153.227 +EXEC-WS-007,2026-02-20T06:39:17.411Z,cdn.jsdelivr.net,MX,SERVFAIL,10.10.2.107,11.11.131.223 +EXEC-WS-007,2026-02-20T11:00:47.120Z,www.tiktok.com,TXT,SERVFAIL,10.10.2.107,101.132.104.10 +EXEC-WS-007,2026-02-13T18:18:26.014Z,www.pornhub.com,A,NOERROR,10.10.2.107,35.112.251.136 +EXEC-WS-007,2026-02-14T22:41:57.758Z,npmjs.com,MX,NOERROR,10.10.2.107,158.121.37.53 +EXEC-WS-007,2026-02-14T16:10:21.419Z,outlook.office365.com,AAAA,NOERROR,10.10.2.107,6.45.50.205 +EXEC-WS-007,2026-02-16T03:00:11.316Z,acme.sharepoint.com,A,NOERROR,10.10.2.107,151.141.228.232 +EXEC-WS-007,2026-02-16T17:50:58.814Z,googleapis.com,AAAA,SERVFAIL,10.10.2.107, +EXEC-WS-007,2026-02-19T06:12:34.101Z,dc-01.acme.local,TXT,SERVFAIL,10.10.2.107,196.165.125.144 +EXEC-WS-007,2026-02-16T06:23:04.031Z,time.windows.com,CNAME,NOERROR,10.10.2.107,193.62.132.118 +EXEC-WS-007,2026-02-20T07:15:29.857Z,outlook.office365.com,AAAA,NOERROR,10.10.2.107,144.122.183.226 +EXEC-WS-007,2026-02-14T14:12:35.447Z,www.shein.com,AAAA,NOERROR,10.10.2.107,85.113.64.169 +EXEC-WS-007,2026-02-10T09:57:23.881Z,pypi.org,TXT,NOERROR,10.10.2.107,195.206.211.214 +EXEC-WS-007,2026-02-17T12:11:29.903Z,github.com,AAAA,SERVFAIL,10.10.2.107,95.95.81.135 +EXEC-WS-007,2026-02-15T22:07:49.203Z,time.windows.com,A,NOERROR,10.10.2.107,40.125.191.54 +EXEC-WS-007,2026-02-15T16:33:35.301Z,www.tiktok.com,MX,SERVFAIL,10.10.2.107,175.216.248.233 +EXEC-WS-007,2026-02-15T13:35:43.641Z,pypi.org,TXT,NXDOMAIN,10.10.2.107,206.112.245.250 +EXEC-WS-007,2026-02-16T07:37:58.904Z,dc-01.acme.local,A,SERVFAIL,10.10.2.107,38.40.118.92 +EXEC-WS-007,2026-02-20T02:24:25.452Z,teams.microsoft.com,CNAME,NOERROR,10.10.2.107,182.168.81.237 +EXEC-WS-007,2026-02-15T10:08:10.240Z,cloudflare.com,TXT,NXDOMAIN,10.10.2.107,23.32.149.249 +EXEC-WS-007,2026-02-19T13:49:50.323Z,akamai.net,AAAA,NXDOMAIN,10.10.2.107,195.61.60.203 +EXEC-WS-007,2026-02-14T18:06:00.707Z,pypi.org,CNAME,NOERROR,10.10.2.107,105.182.162.19 +EXEC-WS-007,2026-02-14T20:57:27.260Z,aws.amazon.com,A,SERVFAIL,10.10.2.107,136.218.121.240 +EXEC-WS-007,2026-02-16T05:25:52.076Z,outlook.office365.com,AAAA,NOERROR,10.10.2.107,210.94.31.214 +IT-WS-008,2026-02-19T01:16:51.249Z,acme.sharepoint.com,A,NOERROR,10.10.3.108,167.79.88.237 +IT-WS-008,2026-02-15T19:04:52.969Z,update.microsoft.com,A,SERVFAIL,10.10.3.108,56.156.85.123 +IT-WS-008,2026-02-10T20:12:17.886Z,google.com,A,SERVFAIL,10.10.3.108,112.25.42.206 +IT-WS-008,2026-02-20T10:42:25.465Z,npmjs.com,CNAME,NOERROR,10.10.3.108,51.153.2.19 +IT-WS-008,2026-02-19T09:37:00.301Z,file-01.acme.local,MX,NOERROR,10.10.3.108,135.204.204.253 +IT-WS-008,2026-02-20T00:08:09.494Z,graph.microsoft.com,CNAME,NOERROR,10.10.3.108,5.176.125.150 +IT-WS-008,2026-02-10T18:13:32.618Z,github.com,MX,NXDOMAIN,10.10.3.108,192.206.70.127 +IT-WS-008,2026-02-13T19:11:22.153Z,aws.amazon.com,AAAA,NXDOMAIN,10.10.3.108,219.153.32.28 +IT-WS-008,2026-02-17T17:38:57.612Z,update.microsoft.com,A,NOERROR,10.10.3.108,190.78.186.189 +IT-WS-008,2026-02-19T11:52:11.037Z,draftkings.com,CNAME,NOERROR,10.10.3.108,218.111.125.221 +IT-WS-008,2026-02-15T01:29:49.866Z,www.facebook.com,A,NOERROR,10.10.3.108,23.81.197.47 +IT-WS-008,2026-02-20T03:35:53.735Z,acme.sharepoint.com,CNAME,NXDOMAIN,10.10.3.108,132.136.147.192 +IT-WS-008,2026-02-16T04:17:40.799Z,cdn.jsdelivr.net,A,NOERROR,10.10.3.108,213.175.42.171 +IT-WS-008,2026-02-17T14:14:30.617Z,googleapis.com,A,SERVFAIL,10.10.3.108,117.247.191.95 +IT-WS-008,2026-02-17T09:23:47.562Z,www.indeed.com,CNAME,NOERROR,10.10.3.108, +IT-WS-008,2026-02-13T20:45:47.893Z,windowsupdate.com,A,NOERROR,10.10.3.108,71.91.125.133 +IT-WS-008,2026-02-17T05:44:27.229Z,file-01.acme.local,MX,NOERROR,10.10.3.108,112.179.194.200 +IT-WS-008,2026-02-15T08:21:07.917Z,outlook.office365.com,CNAME,NOERROR,10.10.3.108,157.134.107.164 +IT-WS-008,2026-02-20T13:59:51.459Z,acme.local,MX,SERVFAIL,10.10.3.108,127.52.172.221 +IT-WS-008,2026-02-12T03:40:49.203Z,googleapis.com,AAAA,NOERROR,10.10.3.108,69.27.249.104 +IT-WS-008,2026-02-12T20:14:51.878Z,time.windows.com,A,NOERROR,10.10.3.108,93.237.238.32 +IT-WS-008,2026-02-10T19:56:04.811Z,akamai.net,A,NOERROR,10.10.3.108,119.232.117.197 +HR-WS-009,2026-02-12T20:05:52.743Z,dc-01.acme.local,A,NOERROR,10.10.1.109,124.68.88.91 +HR-WS-009,2026-02-20T08:28:51.839Z,cdn.jsdelivr.net,CNAME,NXDOMAIN,10.10.1.109,58.175.138.166 +HR-WS-009,2026-02-15T09:56:58.193Z,aws.amazon.com,A,NXDOMAIN,10.10.1.109,167.191.239.55 +HR-WS-009,2026-02-11T21:54:43.784Z,file-01.acme.local,A,NOERROR,10.10.1.109,96.178.9.214 +HR-WS-009,2026-02-18T12:26:20.721Z,googleapis.com,A,NOERROR,10.10.1.109,154.154.249.93 +HR-WS-009,2026-02-17T03:24:18.999Z,graph.microsoft.com,MX,NOERROR,10.10.1.109, +HR-WS-009,2026-02-18T09:21:11.185Z,npmjs.com,CNAME,NOERROR,10.10.1.109,106.85.122.55 +HR-WS-009,2026-02-18T12:46:28.821Z,aws.amazon.com,A,NOERROR,10.10.1.109,77.9.238.27 +HR-WS-009,2026-02-20T17:16:22.170Z,googleapis.com,MX,NOERROR,10.10.1.109,127.250.125.250 +HR-WS-009,2026-02-13T23:19:29.526Z,google.com,CNAME,SERVFAIL,10.10.1.109,11.110.255.241 +HR-WS-009,2026-02-18T07:38:44.899Z,time.windows.com,A,NOERROR,10.10.1.109,49.198.51.5 +HR-WS-009,2026-02-16T17:56:37.213Z,fitgirl-repacks.site,A,NOERROR,10.10.1.109,113.18.196.118 +HR-WS-009,2026-02-13T03:25:39.289Z,aws.amazon.com,A,NXDOMAIN,10.10.1.109,180.91.160.81 +HR-WS-009,2026-02-19T17:57:58.855Z,github.com,AAAA,NOERROR,10.10.1.109,94.121.217.114 +HR-WS-009,2026-02-14T00:14:06.530Z,acme.local,AAAA,NXDOMAIN,10.10.1.109,62.188.182.181 +HR-WS-009,2026-02-10T19:22:07.897Z,stackoverflow.com,A,NXDOMAIN,10.10.1.109, +HR-WS-009,2026-02-13T03:31:21.567Z,acme.sharepoint.com,A,NOERROR,10.10.1.109,89.54.99.157 +HR-WS-009,2026-02-12T07:23:25.371Z,open.spotify.com,TXT,NXDOMAIN,10.10.1.109,80.84.252.163 +HR-WS-009,2026-02-12T16:40:39.887Z,cloudflare.com,MX,NOERROR,10.10.1.109,183.211.226.197 +HR-WS-009,2026-02-20T05:40:24.646Z,teams.microsoft.com,CNAME,SERVFAIL,10.10.1.109,51.5.26.235 +HR-WS-009,2026-02-18T17:08:53.444Z,acme.local,A,NXDOMAIN,10.10.1.109,144.78.199.212 +HR-WS-009,2026-02-20T11:34:38.485Z,discord.gg,CNAME,NOERROR,10.10.1.109,172.212.121.230 +HR-WS-009,2026-02-20T04:29:38.184Z,googleapis.com,A,NOERROR,10.10.1.109, +HR-WS-009,2026-02-14T09:35:06.197Z,npmjs.com,TXT,NOERROR,10.10.1.109, +HR-WS-009,2026-02-20T07:13:42.661Z,update.microsoft.com,A,NOERROR,10.10.1.109, +HR-WS-009,2026-02-13T16:34:04.198Z,windowsupdate.com,AAAA,NXDOMAIN,10.10.1.109, +HR-WS-009,2026-02-18T13:25:46.293Z,www.facebook.com,TXT,SERVFAIL,10.10.1.109,38.170.156.101 +HR-WS-009,2026-02-15T00:52:34.450Z,file-01.acme.local,CNAME,NOERROR,10.10.1.109,96.109.92.96 +HR-WS-009,2026-02-13T06:02:27.631Z,file-01.acme.local,A,NOERROR,10.10.1.109,205.175.43.55 +HR-WS-009,2026-02-12T06:53:42.215Z,cdn.jsdelivr.net,A,NOERROR,10.10.1.109, +HR-WS-009,2026-02-17T00:52:01.418Z,aws.amazon.com,A,SERVFAIL,10.10.1.109,215.219.154.200 +HR-WS-009,2026-02-19T07:29:19.806Z,open.spotify.com,A,NOERROR,10.10.1.109,35.84.14.243 +HR-WS-009,2026-02-15T18:33:24.794Z,www.amazon.com,AAAA,NOERROR,10.10.1.109,16.49.56.48 +FIN-WS-010,2026-02-19T19:51:16.449Z,acme.sharepoint.com,A,NOERROR,10.10.2.110, +FIN-WS-010,2026-02-19T22:02:00.837Z,github.com,MX,NXDOMAIN,10.10.2.110, +FIN-WS-010,2026-02-17T05:21:00.223Z,stackoverflow.com,MX,NXDOMAIN,10.10.2.110, +FIN-WS-010,2026-02-14T06:18:14.800Z,cdn.jsdelivr.net,A,SERVFAIL,10.10.2.110,124.215.247.177 +FIN-WS-010,2026-02-14T16:00:32.383Z,aws.amazon.com,A,NXDOMAIN,10.10.2.110, +FIN-WS-010,2026-02-19T03:23:19.919Z,npmjs.com,MX,SERVFAIL,10.10.2.110, +FIN-WS-010,2026-02-14T09:28:57.899Z,npmjs.com,TXT,NOERROR,10.10.2.110, +FIN-WS-010,2026-02-12T00:27:31.750Z,akamai.net,A,NOERROR,10.10.2.110,204.205.131.158 +FIN-WS-010,2026-02-11T11:17:49.430Z,dc-02.acme.local,TXT,NOERROR,10.10.2.110,83.118.10.100 +FIN-WS-010,2026-02-18T15:01:16.210Z,dc-01.acme.local,TXT,NOERROR,10.10.2.110,185.249.7.59 +FIN-WS-010,2026-02-18T19:35:15.656Z,file-01.acme.local,A,SERVFAIL,10.10.2.110,14.63.35.189 +FIN-WS-010,2026-02-16T07:28:01.354Z,google.com,AAAA,NXDOMAIN,10.10.2.110,37.200.237.245 +FIN-WS-010,2026-02-12T03:47:16.375Z,open.spotify.com,CNAME,NOERROR,10.10.2.110, +FIN-WS-010,2026-02-17T22:09:22.936Z,github.com,A,NOERROR,10.10.2.110,103.1.71.45 +FIN-WS-010,2026-02-17T23:44:33.465Z,www.indeed.com,A,NOERROR,10.10.2.110,131.233.187.203 +FIN-WS-010,2026-02-11T19:23:28.099Z,login.microsoftonline.com,A,SERVFAIL,10.10.2.110,198.188.118.194 +FIN-WS-010,2026-02-12T08:01:51.720Z,dc-02.acme.local,A,SERVFAIL,10.10.2.110,2.209.185.115 +FIN-WS-010,2026-02-19T04:49:14.733Z,file-01.acme.local,MX,NOERROR,10.10.2.110,65.193.111.198 +FIN-WS-010,2026-02-11T14:31:45.968Z,exch-01.acme.local,AAAA,NOERROR,10.10.2.110,207.45.77.234 +FIN-WS-010,2026-02-11T05:41:42.497Z,acme.sharepoint.com,CNAME,NOERROR,10.10.2.110,163.246.6.239 +FIN-WS-010,2026-02-15T01:26:56.212Z,cloudflare.com,MX,NXDOMAIN,10.10.2.110, +FIN-WS-010,2026-02-12T08:03:41.022Z,login.microsoftonline.com,CNAME,NXDOMAIN,10.10.2.110,15.155.37.34 +FIN-WS-010,2026-02-14T07:29:48.157Z,time.windows.com,CNAME,NOERROR,10.10.2.110,65.118.164.54 +FIN-WS-010,2026-02-16T03:39:14.010Z,github.com,A,SERVFAIL,10.10.2.110,214.206.234.119 +FIN-WS-010,2026-02-19T06:25:37.783Z,stackoverflow.com,A,NXDOMAIN,10.10.2.110,80.166.232.174 +FIN-WS-010,2026-02-19T02:41:22.689Z,acme.local,A,NXDOMAIN,10.10.2.110,12.116.115.46 +FIN-WS-010,2026-02-18T03:06:15.169Z,stackoverflow.com,A,NXDOMAIN,10.10.2.110,194.255.135.223 +FIN-WS-010,2026-02-13T11:32:55.206Z,login.microsoftonline.com,CNAME,SERVFAIL,10.10.2.110,151.155.224.186 +FIN-WS-010,2026-02-15T23:21:01.167Z,graph.microsoft.com,CNAME,NXDOMAIN,10.10.2.110, +FIN-WS-010,2026-02-12T00:32:58.142Z,dc-02.acme.local,A,NXDOMAIN,10.10.2.110,218.184.153.206 +FIN-WS-010,2026-02-11T10:17:47.555Z,graph.microsoft.com,A,NXDOMAIN,10.10.2.110,148.242.200.79 +FIN-WS-010,2026-02-13T08:28:57.005Z,exch-01.acme.local,A,NOERROR,10.10.2.110,119.76.233.39 +FIN-WS-010,2026-02-16T08:09:13.687Z,akamai.net,CNAME,SERVFAIL,10.10.2.110,175.12.104.149 +FIN-WS-010,2026-02-13T00:27:19.014Z,www.tiktok.com,A,NXDOMAIN,10.10.2.110,90.213.5.216 +FIN-WS-010,2026-02-17T22:13:42.490Z,googleapis.com,AAAA,NXDOMAIN,10.10.2.110, +FIN-WS-010,2026-02-18T11:26:48.988Z,stackoverflow.com,MX,NOERROR,10.10.2.110,221.226.225.228 +FIN-WS-010,2026-02-14T05:38:46.706Z,cloudflare.com,A,NOERROR,10.10.2.110,212.208.73.97 +FIN-WS-010,2026-02-16T11:18:53.609Z,cdn.jsdelivr.net,A,NXDOMAIN,10.10.2.110, +FIN-WS-010,2026-02-20T04:35:17.236Z,outlook.office365.com,A,NOERROR,10.10.2.110,32.66.214.45 +FIN-WS-010,2026-02-14T13:42:59.966Z,outlook.office365.com,A,NOERROR,10.10.2.110,42.118.98.176 +FIN-WS-010,2026-02-10T20:58:17.170Z,acme.local,AAAA,NOERROR,10.10.2.110,59.129.143.98 +FIN-WS-010,2026-02-18T19:35:55.809Z,www.pornhub.com,A,NXDOMAIN,10.10.2.110,67.116.1.103 +FIN-WS-010,2026-02-11T16:37:43.268Z,aws.amazon.com,CNAME,NXDOMAIN,10.10.2.110,101.165.71.154 +SLS-WS-011,2026-02-13T21:54:31.086Z,www.tiktok.com,MX,NOERROR,10.10.3.111, +SLS-WS-011,2026-02-12T23:27:07.564Z,dc-01.acme.local,A,SERVFAIL,10.10.3.111,137.245.174.63 +SLS-WS-011,2026-02-16T21:56:16.060Z,www.indeed.com,A,SERVFAIL,10.10.3.111,66.85.185.90 +SLS-WS-011,2026-02-15T20:21:06.555Z,update.microsoft.com,A,NOERROR,10.10.3.111,114.210.154.249 +SLS-WS-011,2026-02-18T16:10:42.949Z,file-01.acme.local,MX,SERVFAIL,10.10.3.111,109.228.203.8 +SLS-WS-011,2026-02-12T17:10:16.396Z,outlook.office365.com,TXT,NOERROR,10.10.3.111, +SLS-WS-011,2026-02-19T21:15:47.856Z,teams.microsoft.com,A,NOERROR,10.10.3.111,184.166.205.247 +SLS-WS-011,2026-02-20T05:51:18.468Z,acme.sharepoint.com,A,SERVFAIL,10.10.3.111,139.241.247.41 +SLS-WS-011,2026-02-15T12:15:56.724Z,npmjs.com,A,NOERROR,10.10.3.111,41.158.185.205 +SLS-WS-011,2026-02-18T20:21:30.733Z,googleapis.com,MX,SERVFAIL,10.10.3.111,77.58.218.3 +SLS-WS-011,2026-02-15T23:28:31.782Z,windowsupdate.com,TXT,NOERROR,10.10.3.111,5.165.40.180 +SLS-WS-011,2026-02-15T09:55:01.396Z,www.tiktok.com,CNAME,NOERROR,10.10.3.111, +SLS-WS-011,2026-02-11T23:48:09.806Z,www.amazon.com,A,NOERROR,10.10.3.111, +SLS-WS-011,2026-02-13T10:23:21.701Z,exch-01.acme.local,CNAME,NOERROR,10.10.3.111,136.255.70.169 +SLS-WS-011,2026-02-10T21:53:18.272Z,teams.microsoft.com,CNAME,NXDOMAIN,10.10.3.111,120.163.9.200 +SLS-WS-011,2026-02-14T13:26:18.403Z,discord.gg,A,SERVFAIL,10.10.3.111,71.87.26.59 +SLS-WS-011,2026-02-10T21:51:01.946Z,github.com,TXT,NOERROR,10.10.3.111,139.96.103.4 +SLS-WS-011,2026-02-15T14:55:19.750Z,exch-01.acme.local,MX,NOERROR,10.10.3.111,177.110.203.137 +SLS-WS-011,2026-02-14T18:33:40.195Z,login.microsoftonline.com,A,NOERROR,10.10.3.111,86.228.78.59 +SLS-WS-011,2026-02-11T02:52:09.573Z,pypi.org,A,SERVFAIL,10.10.3.111,181.51.235.2 +SLS-WS-011,2026-02-17T20:35:30.189Z,pokerstars.com,TXT,NXDOMAIN,10.10.3.111,217.247.67.8 +SLS-WS-011,2026-02-11T02:24:12.558Z,exch-01.acme.local,AAAA,NOERROR,10.10.3.111, +SLS-WS-011,2026-02-17T20:57:20.325Z,google.com,CNAME,NOERROR,10.10.3.111,181.76.230.216 +SLS-WS-011,2026-02-16T07:50:14.200Z,open.spotify.com,A,NOERROR,10.10.3.111,150.174.82.152 +SLS-WS-011,2026-02-15T21:52:53.614Z,file-01.acme.local,A,NOERROR,10.10.3.111,208.63.39.110 +SLS-WS-011,2026-02-17T01:28:52.000Z,cloudflare.com,A,NOERROR,10.10.3.111,5.238.171.213 +SLS-WS-011,2026-02-17T13:59:52.041Z,dc-02.acme.local,A,NOERROR,10.10.3.111,77.239.121.150 +SLS-WS-011,2026-02-11T16:34:17.443Z,github.com,TXT,NOERROR,10.10.3.111,140.121.35.46 +SLS-WS-011,2026-02-20T06:07:02.702Z,googleapis.com,A,NXDOMAIN,10.10.3.111,61.222.236.123 +SLS-WS-011,2026-02-13T10:16:00.282Z,dc-01.acme.local,A,NOERROR,10.10.3.111, +SLS-WS-011,2026-02-16T19:39:32.310Z,dc-02.acme.local,MX,SERVFAIL,10.10.3.111,155.192.185.122 +SLS-WS-011,2026-02-18T04:10:15.005Z,www.pornhub.com,A,NOERROR,10.10.3.111,133.22.80.158 +SLS-WS-011,2026-02-18T06:43:29.283Z,outlook.office365.com,AAAA,NOERROR,10.10.3.111,166.9.151.33 +SLS-WS-011,2026-02-19T08:02:09.593Z,googleapis.com,A,NOERROR,10.10.3.111,146.146.4.154 +ENG-WS-012,2026-02-15T08:43:56.301Z,exch-01.acme.local,MX,NXDOMAIN,10.10.1.112, +ENG-WS-012,2026-02-14T07:29:08.693Z,github.com,A,NOERROR,10.10.1.112, +ENG-WS-012,2026-02-19T22:42:38.467Z,update.microsoft.com,AAAA,NXDOMAIN,10.10.1.112,60.27.43.184 +ENG-WS-012,2026-02-20T11:38:08.161Z,aws.amazon.com,A,NOERROR,10.10.1.112, +ENG-WS-012,2026-02-11T12:24:44.000Z,time.windows.com,MX,NOERROR,10.10.1.112,102.159.33.67 +ENG-WS-012,2026-02-14T17:16:33.757Z,file-01.acme.local,A,NOERROR,10.10.1.112,163.33.136.33 +ENG-WS-012,2026-02-12T14:21:24.883Z,acme.local,CNAME,SERVFAIL,10.10.1.112,189.139.229.206 +ENG-WS-012,2026-02-16T07:48:07.707Z,windowsupdate.com,A,NOERROR,10.10.1.112,195.165.213.176 +ENG-WS-012,2026-02-15T08:19:29.539Z,time.windows.com,MX,NOERROR,10.10.1.112,64.10.86.43 +ENG-WS-012,2026-02-18T01:26:18.470Z,windowsupdate.com,MX,NOERROR,10.10.1.112,3.21.103.37 +ENG-WS-012,2026-02-16T07:39:44.420Z,login.microsoftonline.com,A,NOERROR,10.10.1.112,216.232.208.18 +ENG-WS-012,2026-02-13T13:56:27.731Z,aws.amazon.com,AAAA,NXDOMAIN,10.10.1.112,64.166.162.67 +ENG-WS-012,2026-02-17T18:35:58.726Z,outlook.office365.com,CNAME,NOERROR,10.10.1.112,32.205.252.154 +ENG-WS-012,2026-02-18T03:28:52.522Z,time.windows.com,A,NXDOMAIN,10.10.1.112,94.137.115.160 +ENG-WS-012,2026-02-17T10:58:38.907Z,acme.local,MX,SERVFAIL,10.10.1.112, +ENG-WS-012,2026-02-18T00:50:07.554Z,acme.sharepoint.com,A,SERVFAIL,10.10.1.112,203.177.89.132 +ENG-WS-012,2026-02-12T15:36:28.878Z,time.windows.com,MX,NOERROR,10.10.1.112,205.50.113.64 +ENG-WS-012,2026-02-12T18:06:39.108Z,www.facebook.com,CNAME,NOERROR,10.10.1.112,215.106.25.47 +ENG-WS-012,2026-02-13T13:33:23.542Z,stackoverflow.com,A,NOERROR,10.10.1.112, +LEG-WS-013,2026-02-16T22:23:06.933Z,login.microsoftonline.com,TXT,NOERROR,10.10.2.113, +LEG-WS-013,2026-02-10T21:44:28.250Z,windowsupdate.com,AAAA,NOERROR,10.10.2.113, +LEG-WS-013,2026-02-10T20:02:57.979Z,github.com,AAAA,NOERROR,10.10.2.113,210.14.249.182 +LEG-WS-013,2026-02-13T17:03:59.565Z,fitgirl-repacks.site,A,NXDOMAIN,10.10.2.113, +LEG-WS-013,2026-02-16T22:30:44.916Z,dc-01.acme.local,A,NOERROR,10.10.2.113,39.153.174.101 +LEG-WS-013,2026-02-16T12:25:58.139Z,teams.microsoft.com,AAAA,NOERROR,10.10.2.113,220.44.67.83 +LEG-WS-013,2026-02-20T03:20:42.272Z,outlook.office365.com,A,SERVFAIL,10.10.2.113, +LEG-WS-013,2026-02-18T21:34:25.985Z,hulu.com,A,NOERROR,10.10.2.113,90.114.158.157 +LEG-WS-013,2026-02-16T18:07:03.354Z,teams.microsoft.com,A,NXDOMAIN,10.10.2.113, +LEG-WS-013,2026-02-14T01:29:08.084Z,file-01.acme.local,A,NXDOMAIN,10.10.2.113,60.88.67.252 +LEG-WS-013,2026-02-10T12:21:44.486Z,acme.local,A,NXDOMAIN,10.10.2.113, +LEG-WS-013,2026-02-17T07:50:15.905Z,teams.microsoft.com,A,SERVFAIL,10.10.2.113,184.221.121.81 +LEG-WS-013,2026-02-15T02:33:01.290Z,login.microsoftonline.com,A,NOERROR,10.10.2.113, +LEG-WS-013,2026-02-16T15:46:42.062Z,file-01.acme.local,A,NXDOMAIN,10.10.2.113,92.215.228.118 +LEG-WS-013,2026-02-12T07:27:42.720Z,dc-02.acme.local,AAAA,NXDOMAIN,10.10.2.113, +LEG-WS-013,2026-02-18T02:17:26.618Z,outlook.office365.com,TXT,NOERROR,10.10.2.113, +LEG-WS-013,2026-02-18T07:19:21.447Z,thepiratebay.org,MX,NOERROR,10.10.2.113,188.110.76.125 +LEG-WS-013,2026-02-15T13:12:32.940Z,npmjs.com,A,SERVFAIL,10.10.2.113,10.143.200.169 +LEG-WS-013,2026-02-16T02:42:56.333Z,hulu.com,A,NXDOMAIN,10.10.2.113,122.180.45.136 +LEG-WS-013,2026-02-20T01:08:56.857Z,exch-01.acme.local,TXT,NOERROR,10.10.2.113,161.18.195.86 +LEG-WS-013,2026-02-15T22:04:32.542Z,google.com,AAAA,NXDOMAIN,10.10.2.113,135.17.6.123 +LEG-WS-013,2026-02-15T10:04:07.627Z,time.windows.com,A,NOERROR,10.10.2.113,142.57.148.115 +LEG-WS-013,2026-02-15T02:31:31.254Z,acme.sharepoint.com,CNAME,NXDOMAIN,10.10.2.113,120.114.14.246 +LEG-WS-013,2026-02-18T08:09:41.873Z,outlook.office365.com,TXT,NXDOMAIN,10.10.2.113,134.190.52.165 +LEG-WS-013,2026-02-16T15:53:28.383Z,dc-02.acme.local,AAAA,NXDOMAIN,10.10.2.113,21.133.198.124 +LEG-WS-013,2026-02-20T03:57:17.392Z,outlook.office365.com,MX,SERVFAIL,10.10.2.113,107.230.190.18 +LEG-WS-013,2026-02-18T06:42:55.331Z,file-01.acme.local,A,NOERROR,10.10.2.113,91.220.23.90 +LEG-WS-013,2026-02-18T21:15:24.124Z,exch-01.acme.local,AAAA,NOERROR,10.10.2.113,193.45.24.235 +LEG-WS-013,2026-02-12T12:22:38.164Z,cdn.jsdelivr.net,AAAA,NOERROR,10.10.2.113,35.178.177.110 +LEG-WS-013,2026-02-12T20:03:23.781Z,acme.sharepoint.com,MX,NXDOMAIN,10.10.2.113,62.9.102.26 +LEG-WS-013,2026-02-16T03:18:08.559Z,time.windows.com,A,SERVFAIL,10.10.2.113,215.212.55.96 +LEG-WS-013,2026-02-17T08:19:27.927Z,pypi.org,A,NOERROR,10.10.2.113, +LEG-WS-013,2026-02-20T06:29:02.713Z,update.microsoft.com,A,NOERROR,10.10.2.113,7.29.175.76 +LEG-WS-013,2026-02-15T14:49:12.743Z,outlook.office365.com,A,NOERROR,10.10.2.113,151.106.253.103 +LEG-WS-013,2026-02-15T18:06:25.553Z,acme.local,MX,NOERROR,10.10.2.113,25.200.109.4 +LEG-WS-013,2026-02-12T22:10:57.576Z,dc-02.acme.local,AAAA,NOERROR,10.10.2.113, +LEG-WS-013,2026-02-12T15:51:01.467Z,dc-02.acme.local,AAAA,SERVFAIL,10.10.2.113,58.9.251.178 +LEG-WS-013,2026-02-11T10:35:20.934Z,dc-01.acme.local,TXT,SERVFAIL,10.10.2.113,106.160.138.106 +LEG-WS-013,2026-02-15T15:59:46.185Z,update.microsoft.com,MX,NOERROR,10.10.2.113,134.193.80.38 +LEG-WS-013,2026-02-18T10:29:50.189Z,cdn.jsdelivr.net,A,NXDOMAIN,10.10.2.113, +LEG-WS-013,2026-02-10T17:20:19.485Z,acme.local,AAAA,NOERROR,10.10.2.113, +LEG-WS-013,2026-02-15T00:54:07.120Z,cdn.jsdelivr.net,A,NOERROR,10.10.2.113, +LEG-WS-013,2026-02-15T17:39:51.383Z,fitgirl-repacks.site,A,NOERROR,10.10.2.113,27.84.6.87 +LEG-WS-013,2026-02-14T19:50:20.800Z,www.pornhub.com,A,SERVFAIL,10.10.2.113,218.92.111.149 +LEG-WS-013,2026-02-16T02:19:52.734Z,npmjs.com,A,NOERROR,10.10.2.113,158.17.195.205 +MKT-WS-014,2026-02-11T19:08:01.560Z,file-01.acme.local,MX,SERVFAIL,10.10.3.114,142.144.155.78 +MKT-WS-014,2026-02-12T00:01:03.610Z,update.microsoft.com,CNAME,SERVFAIL,10.10.3.114, +MKT-WS-014,2026-02-12T07:50:53.559Z,github.com,A,NOERROR,10.10.3.114,61.236.39.77 +MKT-WS-014,2026-02-20T03:45:19.744Z,acme.local,A,NOERROR,10.10.3.114,9.78.194.174 +MKT-WS-014,2026-02-18T19:02:35.983Z,googleapis.com,CNAME,NOERROR,10.10.3.114,64.209.3.99 +MKT-WS-014,2026-02-15T01:33:00.079Z,open.spotify.com,A,NOERROR,10.10.3.114,146.63.52.209 +MKT-WS-014,2026-02-11T15:17:55.139Z,cloudflare.com,CNAME,NXDOMAIN,10.10.3.114,174.73.155.186 +MKT-WS-014,2026-02-16T02:03:10.402Z,google.com,A,NOERROR,10.10.3.114,12.112.134.21 +MKT-WS-014,2026-02-18T04:54:16.648Z,acme.sharepoint.com,TXT,NOERROR,10.10.3.114, +MKT-WS-014,2026-02-16T22:22:19.280Z,google.com,CNAME,NOERROR,10.10.3.114,88.43.118.41 +MKT-WS-014,2026-02-14T23:14:00.850Z,graph.microsoft.com,TXT,NOERROR,10.10.3.114,116.19.184.107 +MKT-WS-014,2026-02-13T04:43:21.432Z,www.shein.com,A,NXDOMAIN,10.10.3.114,76.234.108.18 +MKT-WS-014,2026-02-13T01:40:08.506Z,store.steampowered.com,A,NOERROR,10.10.3.114,100.139.161.122 +MKT-WS-014,2026-02-15T02:25:52.176Z,update.microsoft.com,A,NXDOMAIN,10.10.3.114,203.27.232.186 +MKT-WS-014,2026-02-12T13:41:55.104Z,acme.local,MX,NOERROR,10.10.3.114,161.230.1.155 +MKT-WS-014,2026-02-16T16:06:52.734Z,acme.local,A,NOERROR,10.10.3.114,158.147.45.48 +MKT-WS-014,2026-02-20T08:52:04.608Z,github.com,A,NOERROR,10.10.3.114,5.114.85.110 +MKT-WS-014,2026-02-13T23:38:53.608Z,cdn.jsdelivr.net,A,SERVFAIL,10.10.3.114, +MKT-WS-014,2026-02-12T20:21:32.297Z,github.com,A,NOERROR,10.10.3.114, +MKT-WS-014,2026-02-14T13:30:41.749Z,cloudflare.com,CNAME,NOERROR,10.10.3.114,25.84.164.58 +MKT-WS-014,2026-02-20T00:45:18.866Z,github.com,A,NOERROR,10.10.3.114,75.204.237.154 +MKT-WS-014,2026-02-14T06:38:33.921Z,google.com,A,SERVFAIL,10.10.3.114,152.139.129.133 +MKT-WS-014,2026-02-19T16:32:44.787Z,www.bet365.com,AAAA,NXDOMAIN,10.10.3.114,7.27.233.205 +MKT-WS-014,2026-02-14T23:07:44.204Z,teams.microsoft.com,A,NOERROR,10.10.3.114,81.158.101.208 +MKT-WS-014,2026-02-14T23:02:16.090Z,outlook.office365.com,A,NOERROR,10.10.3.114,19.226.54.147 +MKT-WS-014,2026-02-19T00:02:12.644Z,stackoverflow.com,A,NOERROR,10.10.3.114,44.47.137.74 +MKT-WS-014,2026-02-13T19:32:48.836Z,exch-01.acme.local,TXT,NXDOMAIN,10.10.3.114,59.118.119.171 +EXEC-WS-015,2026-02-16T05:09:40.169Z,akamai.net,MX,NOERROR,10.10.1.115,42.117.55.123 +EXEC-WS-015,2026-02-18T20:38:09.165Z,login.microsoftonline.com,A,NOERROR,10.10.1.115,1.28.159.159 +EXEC-WS-015,2026-02-16T09:54:06.330Z,googleapis.com,MX,NXDOMAIN,10.10.1.115,55.197.57.246 +EXEC-WS-015,2026-02-17T01:53:55.032Z,pypi.org,MX,NOERROR,10.10.1.115, +EXEC-WS-015,2026-02-19T09:15:47.888Z,googleapis.com,A,NXDOMAIN,10.10.1.115,40.139.253.184 +EXEC-WS-015,2026-02-18T14:11:41.861Z,acme.sharepoint.com,A,SERVFAIL,10.10.1.115,217.192.168.249 +EXEC-WS-015,2026-02-11T22:21:30.459Z,cloudflare.com,MX,NXDOMAIN,10.10.1.115,170.47.133.180 +EXEC-WS-015,2026-02-13T04:22:11.619Z,hulu.com,AAAA,NOERROR,10.10.1.115,124.199.225.240 +EXEC-WS-015,2026-02-14T03:19:22.163Z,www.bet365.com,TXT,NOERROR,10.10.1.115,59.163.236.156 +EXEC-WS-015,2026-02-11T14:21:31.638Z,time.windows.com,AAAA,NOERROR,10.10.1.115, +EXEC-WS-015,2026-02-16T03:19:23.004Z,googleapis.com,AAAA,NOERROR,10.10.1.115,101.154.205.54 +EXEC-WS-015,2026-02-17T13:29:25.489Z,google.com,MX,NOERROR,10.10.1.115, +EXEC-WS-015,2026-02-17T01:28:19.370Z,aws.amazon.com,CNAME,NXDOMAIN,10.10.1.115, +EXEC-WS-015,2026-02-17T19:20:12.566Z,cloudflare.com,CNAME,NOERROR,10.10.1.115,216.50.202.102 +EXEC-WS-015,2026-02-20T09:13:10.871Z,googleapis.com,CNAME,NOERROR,10.10.1.115, +EXEC-WS-015,2026-02-10T21:41:24.405Z,aws.amazon.com,A,SERVFAIL,10.10.1.115,100.27.3.13 +EXEC-WS-015,2026-02-17T06:48:20.107Z,graph.microsoft.com,A,NOERROR,10.10.1.115, +EXEC-WS-015,2026-02-14T15:49:10.336Z,teams.microsoft.com,A,SERVFAIL,10.10.1.115,144.132.129.248 +EXEC-WS-015,2026-02-16T20:41:59.494Z,cloudflare.com,A,NOERROR,10.10.1.115,219.118.0.13 +EXEC-WS-015,2026-02-15T15:59:54.410Z,google.com,A,NOERROR,10.10.1.115,78.192.26.196 +EXEC-WS-015,2026-02-18T20:58:46.726Z,time.windows.com,A,NXDOMAIN,10.10.1.115,51.111.37.16 +EXEC-WS-015,2026-02-15T20:18:22.775Z,dc-01.acme.local,MX,NXDOMAIN,10.10.1.115,63.211.185.249 +EXEC-WS-015,2026-02-11T01:33:06.558Z,stackoverflow.com,AAAA,NOERROR,10.10.1.115,198.69.71.6 +EXEC-WS-015,2026-02-15T19:34:02.356Z,teams.microsoft.com,MX,NOERROR,10.10.1.115, +EXEC-WS-015,2026-02-16T21:25:23.799Z,aws.amazon.com,A,NOERROR,10.10.1.115,40.97.211.68 +EXEC-WS-015,2026-02-16T20:56:52.240Z,time.windows.com,TXT,NOERROR,10.10.1.115,49.162.33.106 +EXEC-WS-015,2026-02-13T04:28:43.547Z,stackoverflow.com,A,NOERROR,10.10.1.115, +EXEC-WS-015,2026-02-11T00:55:47.826Z,akamai.net,TXT,NOERROR,10.10.1.115,88.71.76.227 +EXEC-WS-015,2026-02-18T17:15:38.941Z,github.com,A,NOERROR,10.10.1.115,155.123.236.150 +EXEC-WS-015,2026-02-16T05:55:03.420Z,cloudflare.com,A,NOERROR,10.10.1.115,81.94.212.195 +EXEC-WS-015,2026-02-17T10:56:54.723Z,dc-02.acme.local,CNAME,NOERROR,10.10.1.115,192.219.222.130 +EXEC-WS-015,2026-02-11T02:35:46.960Z,store.steampowered.com,A,NOERROR,10.10.1.115,110.131.12.155 +EXEC-WS-015,2026-02-13T16:07:07.112Z,login.microsoftonline.com,MX,NXDOMAIN,10.10.1.115, +EXEC-WS-015,2026-02-13T22:55:48.008Z,time.windows.com,A,NOERROR,10.10.1.115,100.85.246.136 +EXEC-WS-015,2026-02-10T21:01:57.435Z,cloudflare.com,CNAME,SERVFAIL,10.10.1.115, +EXEC-WS-015,2026-02-17T22:26:01.946Z,time.windows.com,MX,NOERROR,10.10.1.115,30.211.91.227 +EXEC-WS-015,2026-02-14T10:49:02.814Z,github.com,A,NOERROR,10.10.1.115, +EXEC-WS-015,2026-02-11T02:06:54.234Z,dc-02.acme.local,A,NOERROR,10.10.1.115, +EXEC-WS-015,2026-02-16T18:48:25.637Z,akamai.net,TXT,NXDOMAIN,10.10.1.115,59.233.100.155 +EXEC-WS-015,2026-02-19T05:10:43.430Z,pypi.org,CNAME,NOERROR,10.10.1.115, +EXEC-WS-015,2026-02-12T23:42:50.295Z,update.microsoft.com,MX,NOERROR,10.10.1.115,19.32.245.173 +EXEC-WS-015,2026-02-20T08:47:37.793Z,github.com,MX,NOERROR,10.10.1.115,136.217.75.247 +EXEC-WS-015,2026-02-15T03:45:14.791Z,aws.amazon.com,MX,NOERROR,10.10.1.115, +EXEC-WS-015,2026-02-13T08:54:57.280Z,google.com,A,NOERROR,10.10.1.115,8.7.21.93 +EXEC-WS-015,2026-02-10T16:01:06.038Z,acme.local,TXT,NOERROR,10.10.1.115,43.129.71.131 +EXEC-WS-015,2026-02-18T15:50:33.917Z,windowsupdate.com,A,NXDOMAIN,10.10.1.115,134.103.42.44 +EXEC-WS-015,2026-02-17T19:04:02.191Z,acme.local,CNAME,NOERROR,10.10.1.115,39.94.1.121 +EXEC-WS-015,2026-02-16T18:17:44.454Z,teams.microsoft.com,A,NOERROR,10.10.1.115,36.240.129.213 +EXEC-WS-015,2026-02-17T10:28:10.560Z,stackoverflow.com,AAAA,NXDOMAIN,10.10.1.115,111.107.202.84 +EXEC-WS-015,2026-02-17T22:50:32.034Z,www.glassdoor.com,CNAME,NOERROR,10.10.1.115,176.9.9.245 +EXEC-WS-015,2026-02-10T16:05:24.977Z,teams.microsoft.com,A,SERVFAIL,10.10.1.115,138.131.65.33 +EXEC-WS-015,2026-02-12T11:59:52.109Z,windowsupdate.com,A,NOERROR,10.10.1.115,3.231.68.34 +EXEC-WS-015,2026-02-11T22:23:06.662Z,outlook.office365.com,A,SERVFAIL,10.10.1.115,181.97.139.175 +EXEC-WS-015,2026-02-13T04:39:52.223Z,aws.amazon.com,MX,NOERROR,10.10.1.115,148.58.222.197 +EXEC-WS-015,2026-02-10T15:32:02.282Z,google.com,TXT,NOERROR,10.10.1.115,182.202.113.32 +EXEC-WS-015,2026-02-16T17:03:14.680Z,stackoverflow.com,A,SERVFAIL,10.10.1.115,174.156.4.64 +EXEC-WS-015,2026-02-12T23:33:35.236Z,login.microsoftonline.com,CNAME,NOERROR,10.10.1.115, +IT-WS-016,2026-02-14T09:44:27.341Z,stackoverflow.com,TXT,NXDOMAIN,10.10.2.116, +IT-WS-016,2026-02-13T08:32:14.879Z,dc-02.acme.local,A,NOERROR,10.10.2.116,26.168.48.126 +IT-WS-016,2026-02-16T09:01:36.148Z,update.microsoft.com,MX,NOERROR,10.10.2.116,151.66.151.25 +IT-WS-016,2026-02-13T15:27:46.019Z,www.bet365.com,A,SERVFAIL,10.10.2.116,105.212.50.188 +IT-WS-016,2026-02-11T14:32:32.138Z,acme.sharepoint.com,A,NOERROR,10.10.2.116,96.81.125.179 +IT-WS-016,2026-02-18T14:17:44.993Z,akamai.net,TXT,NOERROR,10.10.2.116,215.98.233.166 +IT-WS-016,2026-02-12T18:45:10.482Z,dc-02.acme.local,CNAME,NOERROR,10.10.2.116,218.156.254.104 +IT-WS-016,2026-02-18T02:32:16.824Z,file-01.acme.local,A,NOERROR,10.10.2.116,12.54.44.30 +IT-WS-016,2026-02-18T20:16:04.215Z,windowsupdate.com,CNAME,SERVFAIL,10.10.2.116,214.92.237.115 +IT-WS-016,2026-02-15T22:34:32.609Z,google.com,MX,NOERROR,10.10.2.116,114.141.9.249 +IT-WS-016,2026-02-19T19:07:08.355Z,dc-01.acme.local,CNAME,SERVFAIL,10.10.2.116,130.3.241.31 +IT-WS-016,2026-02-11T00:51:06.269Z,stackoverflow.com,A,NOERROR,10.10.2.116,34.91.112.95 +IT-WS-016,2026-02-20T07:54:21.866Z,file-01.acme.local,A,NOERROR,10.10.2.116,94.92.23.84 +IT-WS-016,2026-02-16T04:52:57.792Z,exch-01.acme.local,MX,NOERROR,10.10.2.116,154.45.54.175 +IT-WS-016,2026-02-20T15:21:35.106Z,cdn.jsdelivr.net,A,SERVFAIL,10.10.2.116,182.156.169.120 +IT-WS-016,2026-02-14T22:32:16.726Z,update.microsoft.com,CNAME,NOERROR,10.10.2.116,175.53.44.100 +HR-WS-017,2026-02-20T09:59:41.840Z,exch-01.acme.local,TXT,NXDOMAIN,10.10.3.117,10.55.178.169 +HR-WS-017,2026-02-12T05:23:00.660Z,windowsupdate.com,A,NOERROR,10.10.3.117,182.192.31.2 +HR-WS-017,2026-02-13T04:04:25.139Z,acme.sharepoint.com,MX,NOERROR,10.10.3.117, +HR-WS-017,2026-02-19T14:01:49.950Z,googleapis.com,TXT,SERVFAIL,10.10.3.117,2.253.143.100 +HR-WS-017,2026-02-18T02:55:30.972Z,graph.microsoft.com,A,SERVFAIL,10.10.3.117,164.245.64.120 +HR-WS-017,2026-02-17T13:58:58.515Z,1337x.to,A,NOERROR,10.10.3.117,174.248.180.226 +HR-WS-017,2026-02-14T03:22:25.608Z,npmjs.com,A,SERVFAIL,10.10.3.117,132.203.53.140 +HR-WS-017,2026-02-18T09:59:08.094Z,dc-01.acme.local,TXT,NXDOMAIN,10.10.3.117,63.26.4.166 +HR-WS-017,2026-02-15T12:06:37.312Z,hulu.com,CNAME,SERVFAIL,10.10.3.117,157.152.141.81 +HR-WS-017,2026-02-17T04:51:42.830Z,aws.amazon.com,A,NOERROR,10.10.3.117,218.22.231.104 +HR-WS-017,2026-02-18T01:57:15.606Z,windowsupdate.com,AAAA,NXDOMAIN,10.10.3.117,88.145.118.77 +HR-WS-017,2026-02-20T16:22:42.987Z,exch-01.acme.local,A,NXDOMAIN,10.10.3.117, +HR-WS-017,2026-02-12T22:22:17.086Z,dc-01.acme.local,TXT,SERVFAIL,10.10.3.117,157.168.27.119 +HR-WS-017,2026-02-18T11:42:14.424Z,time.windows.com,MX,NOERROR,10.10.3.117,81.230.114.237 +HR-WS-017,2026-02-14T16:09:35.748Z,file-01.acme.local,A,SERVFAIL,10.10.3.117, +FIN-WS-018,2026-02-20T15:44:44.281Z,acme.sharepoint.com,A,NOERROR,10.10.1.118,178.107.29.114 +FIN-WS-018,2026-02-18T17:35:33.297Z,graph.microsoft.com,A,NXDOMAIN,10.10.1.118,100.48.98.81 +FIN-WS-018,2026-02-16T20:36:16.282Z,aws.amazon.com,MX,SERVFAIL,10.10.1.118,100.80.76.49 +FIN-WS-018,2026-02-15T13:15:44.401Z,time.windows.com,CNAME,NOERROR,10.10.1.118,49.209.174.34 +FIN-WS-018,2026-02-17T10:31:46.116Z,file-01.acme.local,A,NOERROR,10.10.1.118,196.70.201.81 +FIN-WS-018,2026-02-12T19:28:23.595Z,cdn.jsdelivr.net,A,NOERROR,10.10.1.118,73.230.79.68 +FIN-WS-018,2026-02-12T07:05:37.108Z,outlook.office365.com,AAAA,NOERROR,10.10.1.118,125.38.149.109 +FIN-WS-018,2026-02-19T13:33:26.878Z,file-01.acme.local,TXT,NOERROR,10.10.1.118,81.188.176.178 +FIN-WS-018,2026-02-19T20:18:42.296Z,outlook.office365.com,AAAA,NOERROR,10.10.1.118, +FIN-WS-018,2026-02-11T02:24:38.613Z,open.spotify.com,MX,NOERROR,10.10.1.118,203.184.140.205 +FIN-WS-018,2026-02-11T11:47:21.365Z,github.com,AAAA,NOERROR,10.10.1.118,64.47.75.123 +FIN-WS-018,2026-02-19T02:41:04.996Z,login.microsoftonline.com,CNAME,NOERROR,10.10.1.118,104.52.78.44 +FIN-WS-018,2026-02-17T02:16:36.671Z,google.com,A,NOERROR,10.10.1.118,76.145.214.143 +FIN-WS-018,2026-02-17T07:47:57.002Z,acme.local,CNAME,NOERROR,10.10.1.118,208.174.170.14 +FIN-WS-018,2026-02-12T13:03:41.385Z,stackoverflow.com,CNAME,NXDOMAIN,10.10.1.118, +FIN-WS-018,2026-02-16T15:25:43.625Z,google.com,A,NOERROR,10.10.1.118,56.118.70.125 +FIN-WS-018,2026-02-16T08:08:22.521Z,acme.sharepoint.com,TXT,NOERROR,10.10.1.118,211.210.18.8 +FIN-WS-018,2026-02-18T01:27:27.245Z,time.windows.com,AAAA,NXDOMAIN,10.10.1.118,185.72.217.228 +FIN-WS-018,2026-02-12T05:56:07.532Z,login.microsoftonline.com,A,NOERROR,10.10.1.118, +FIN-WS-018,2026-02-20T05:13:27.802Z,exch-01.acme.local,A,NOERROR,10.10.1.118,118.19.221.165 +FIN-WS-018,2026-02-10T13:56:21.288Z,cdn.jsdelivr.net,A,NOERROR,10.10.1.118,174.55.88.10 +FIN-WS-018,2026-02-19T04:05:09.063Z,www.indeed.com,CNAME,NOERROR,10.10.1.118,118.223.243.229 +FIN-WS-018,2026-02-14T07:35:53.294Z,graph.microsoft.com,A,NOERROR,10.10.1.118,50.121.118.151 +FIN-WS-018,2026-02-18T01:09:29.351Z,teams.microsoft.com,AAAA,SERVFAIL,10.10.1.118,201.75.57.1 +FIN-WS-018,2026-02-10T14:13:21.470Z,acme.local,A,NOERROR,10.10.1.118, +FIN-WS-018,2026-02-19T16:25:43.961Z,outlook.office365.com,AAAA,NOERROR,10.10.1.118,168.237.227.192 +FIN-WS-018,2026-02-18T10:51:03.425Z,cdn.jsdelivr.net,CNAME,NOERROR,10.10.1.118,83.251.227.203 +FIN-WS-018,2026-02-20T01:22:59.102Z,google.com,A,NXDOMAIN,10.10.1.118, +FIN-WS-018,2026-02-15T17:38:17.802Z,akamai.net,A,NOERROR,10.10.1.118,43.215.27.231 +FIN-WS-018,2026-02-17T15:55:19.594Z,stackoverflow.com,CNAME,SERVFAIL,10.10.1.118,36.138.251.105 +FIN-WS-018,2026-02-14T16:14:20.371Z,www.indeed.com,A,NOERROR,10.10.1.118,213.135.225.40 +FIN-WS-018,2026-02-19T21:12:14.281Z,dc-01.acme.local,CNAME,NOERROR,10.10.1.118,56.231.238.178 +FIN-WS-018,2026-02-16T00:51:49.477Z,pypi.org,TXT,NOERROR,10.10.1.118, +FIN-WS-018,2026-02-17T14:46:07.274Z,www.ebay.com,CNAME,NXDOMAIN,10.10.1.118,120.234.27.112 +FIN-WS-018,2026-02-15T16:29:14.189Z,www.glassdoor.com,TXT,NXDOMAIN,10.10.1.118,40.156.79.103 +FIN-WS-018,2026-02-11T18:04:57.768Z,cloudflare.com,A,NOERROR,10.10.1.118,176.36.193.66 +FIN-WS-018,2026-02-10T08:19:38.826Z,www.bet365.com,AAAA,NXDOMAIN,10.10.1.118, +FIN-WS-018,2026-02-10T16:19:07.851Z,stackoverflow.com,MX,NXDOMAIN,10.10.1.118,3.103.38.177 +FIN-WS-018,2026-02-14T12:21:17.369Z,aws.amazon.com,CNAME,NXDOMAIN,10.10.1.118,148.188.32.37 +FIN-WS-018,2026-02-12T07:43:37.346Z,npmjs.com,A,NOERROR,10.10.1.118,68.68.184.61 +FIN-WS-018,2026-02-17T11:25:05.640Z,akamai.net,A,NXDOMAIN,10.10.1.118,22.43.133.143 +FIN-WS-018,2026-02-10T08:41:26.769Z,xvideos.com,A,NOERROR,10.10.1.118,178.204.248.224 +FIN-WS-018,2026-02-12T02:38:15.030Z,exch-01.acme.local,MX,NXDOMAIN,10.10.1.118,186.28.241.212 +FIN-WS-018,2026-02-12T16:31:19.974Z,dc-02.acme.local,MX,SERVFAIL,10.10.1.118,188.226.194.116 +FIN-WS-018,2026-02-19T20:00:10.704Z,aws.amazon.com,MX,NOERROR,10.10.1.118,84.34.46.9 +SLS-WS-019,2026-02-17T09:04:17.024Z,outlook.office365.com,A,NOERROR,10.10.2.119,189.185.14.186 +SLS-WS-019,2026-02-10T20:00:58.714Z,exch-01.acme.local,CNAME,NOERROR,10.10.2.119,42.117.89.9 +SLS-WS-019,2026-02-12T03:02:13.751Z,www.amazon.com,MX,NOERROR,10.10.2.119,203.242.137.166 +SLS-WS-019,2026-02-17T03:29:17.524Z,time.windows.com,A,NOERROR,10.10.2.119,223.216.164.153 +SLS-WS-019,2026-02-18T03:02:29.484Z,cdn.jsdelivr.net,CNAME,NOERROR,10.10.2.119,99.132.84.15 +SLS-WS-019,2026-02-13T07:03:12.102Z,github.com,CNAME,NOERROR,10.10.2.119,11.187.47.231 +SLS-WS-019,2026-02-12T19:35:19.915Z,acme.sharepoint.com,A,SERVFAIL,10.10.2.119,223.227.216.204 +SLS-WS-019,2026-02-18T08:51:41.744Z,googleapis.com,A,SERVFAIL,10.10.2.119,137.58.192.197 +SLS-WS-019,2026-02-13T16:03:27.572Z,npmjs.com,MX,NOERROR,10.10.2.119,118.154.23.205 +SLS-WS-019,2026-02-16T17:50:39.299Z,dc-02.acme.local,MX,SERVFAIL,10.10.2.119,71.139.17.132 +SLS-WS-019,2026-02-15T13:49:44.181Z,1337x.to,AAAA,NOERROR,10.10.2.119,173.182.227.66 +SLS-WS-019,2026-02-16T05:14:03.682Z,login.microsoftonline.com,TXT,SERVFAIL,10.10.2.119,47.132.191.196 +SLS-WS-019,2026-02-20T11:30:12.850Z,update.microsoft.com,A,SERVFAIL,10.10.2.119, +SLS-WS-019,2026-02-17T12:52:07.000Z,teams.microsoft.com,A,SERVFAIL,10.10.2.119,178.36.128.106 +SLS-WS-019,2026-02-16T16:25:19.263Z,npmjs.com,A,NOERROR,10.10.2.119,210.84.39.63 +SLS-WS-019,2026-02-14T15:00:44.894Z,googleapis.com,TXT,NOERROR,10.10.2.119, +SLS-WS-019,2026-02-12T09:38:23.668Z,time.windows.com,CNAME,SERVFAIL,10.10.2.119, +SLS-WS-019,2026-02-11T20:56:57.039Z,update.microsoft.com,A,NXDOMAIN,10.10.2.119,89.253.68.3 +SLS-WS-019,2026-02-13T10:07:36.036Z,file-01.acme.local,A,NOERROR,10.10.2.119,133.247.52.184 +SLS-WS-019,2026-02-19T05:27:58.650Z,teams.microsoft.com,A,NOERROR,10.10.2.119,175.130.143.115 +SLS-WS-019,2026-02-13T09:40:18.672Z,login.microsoftonline.com,TXT,NOERROR,10.10.2.119,27.246.129.175 +SLS-WS-019,2026-02-11T04:09:03.657Z,windowsupdate.com,MX,NOERROR,10.10.2.119,128.172.24.208 +SLS-WS-019,2026-02-16T19:22:25.285Z,update.microsoft.com,AAAA,NXDOMAIN,10.10.2.119,215.219.232.151 +SLS-WS-019,2026-02-15T03:15:21.761Z,npmjs.com,MX,NOERROR,10.10.2.119,85.132.231.195 +SLS-WS-019,2026-02-12T18:54:00.137Z,teams.microsoft.com,A,NOERROR,10.10.2.119,35.109.212.228 +SLS-WS-019,2026-02-13T18:04:23.930Z,time.windows.com,TXT,NXDOMAIN,10.10.2.119, +SLS-WS-019,2026-02-20T15:45:41.712Z,akamai.net,A,SERVFAIL,10.10.2.119,97.127.13.29 +SLS-WS-019,2026-02-19T02:22:20.188Z,dc-01.acme.local,TXT,NOERROR,10.10.2.119,123.124.216.185 +SLS-WS-019,2026-02-14T13:46:51.203Z,exch-01.acme.local,A,NOERROR,10.10.2.119,206.205.69.181 +SLS-WS-019,2026-02-19T08:57:10.236Z,acme.local,A,NXDOMAIN,10.10.2.119, +SLS-WS-019,2026-02-12T23:04:50.872Z,cloudflare.com,A,NOERROR,10.10.2.119,27.193.17.34 +SLS-WS-019,2026-02-16T22:54:59.075Z,cdn.jsdelivr.net,CNAME,NOERROR,10.10.2.119,55.225.90.207 +SLS-WS-019,2026-02-17T18:52:05.949Z,aws.amazon.com,MX,NOERROR,10.10.2.119,163.82.145.77 +SLS-WS-019,2026-02-14T16:35:32.827Z,exch-01.acme.local,A,NOERROR,10.10.2.119,27.66.39.54 +SLS-WS-019,2026-02-15T10:53:08.457Z,login.microsoftonline.com,A,NOERROR,10.10.2.119,125.24.202.107 +SLS-WS-019,2026-02-19T12:30:04.031Z,www.ebay.com,CNAME,SERVFAIL,10.10.2.119,85.205.192.60 +SLS-WS-019,2026-02-17T17:09:45.783Z,file-01.acme.local,CNAME,NOERROR,10.10.2.119,8.84.90.87 +SLS-WS-019,2026-02-19T20:43:03.180Z,windowsupdate.com,TXT,SERVFAIL,10.10.2.119,150.21.161.214 +SLS-WS-019,2026-02-14T09:31:41.948Z,dc-01.acme.local,A,SERVFAIL,10.10.2.119,80.89.80.178 +SLS-WS-019,2026-02-15T00:15:06.772Z,dc-02.acme.local,A,NOERROR,10.10.2.119, +SLS-WS-019,2026-02-12T15:03:17.361Z,akamai.net,A,NOERROR,10.10.2.119,139.235.46.203 +SLS-WS-019,2026-02-12T12:24:07.362Z,windowsupdate.com,AAAA,NOERROR,10.10.2.119,111.195.223.251 +SLS-WS-019,2026-02-20T00:22:00.688Z,cdn.jsdelivr.net,A,NXDOMAIN,10.10.2.119,35.218.173.48 +SLS-WS-019,2026-02-15T03:41:31.583Z,npmjs.com,MX,NOERROR,10.10.2.119,39.3.247.115 +SLS-WS-019,2026-02-14T21:24:28.372Z,dc-01.acme.local,A,NOERROR,10.10.2.119,171.116.113.69 +SLS-WS-019,2026-02-18T19:18:59.246Z,exch-01.acme.local,A,NOERROR,10.10.2.119,88.217.88.50 +SLS-WS-019,2026-02-19T06:41:40.553Z,update.microsoft.com,A,NXDOMAIN,10.10.2.119,183.18.28.66 +SLS-WS-019,2026-02-15T20:41:06.485Z,file-01.acme.local,A,SERVFAIL,10.10.2.119,16.64.236.57 +SLS-WS-019,2026-02-18T22:13:42.755Z,akamai.net,AAAA,SERVFAIL,10.10.2.119,208.229.11.80 +SLS-WS-019,2026-02-10T18:26:22.936Z,dc-01.acme.local,A,NOERROR,10.10.2.119,87.148.210.134 +SLS-WS-019,2026-02-17T10:58:59.846Z,time.windows.com,TXT,NXDOMAIN,10.10.2.119,118.19.150.27 +ENG-WS-020,2026-02-15T22:21:33.325Z,google.com,A,NOERROR,10.10.3.120,108.146.204.223 +ENG-WS-020,2026-02-15T19:54:39.087Z,acme.local,A,NOERROR,10.10.3.120,3.152.142.132 +ENG-WS-020,2026-02-18T02:31:55.110Z,dc-01.acme.local,MX,NXDOMAIN,10.10.3.120,54.95.91.160 +ENG-WS-020,2026-02-12T00:45:31.325Z,time.windows.com,TXT,SERVFAIL,10.10.3.120,137.238.224.8 +ENG-WS-020,2026-02-19T14:47:30.884Z,onlyfans.com,AAAA,SERVFAIL,10.10.3.120,81.142.81.108 +ENG-WS-020,2026-02-14T15:08:42.380Z,pypi.org,A,SERVFAIL,10.10.3.120,53.30.43.33 +ENG-WS-020,2026-02-12T16:20:50.035Z,outlook.office365.com,AAAA,SERVFAIL,10.10.3.120,178.60.123.185 +ENG-WS-020,2026-02-11T06:46:45.669Z,pypi.org,A,NXDOMAIN,10.10.3.120, +ENG-WS-020,2026-02-14T18:04:28.528Z,exch-01.acme.local,TXT,NOERROR,10.10.3.120,141.38.19.139 +ENG-WS-020,2026-02-14T03:29:37.787Z,graph.microsoft.com,AAAA,NOERROR,10.10.3.120,215.101.166.104 +ENG-WS-020,2026-02-16T22:58:19.153Z,update.microsoft.com,MX,NXDOMAIN,10.10.3.120, +ENG-WS-020,2026-02-20T17:29:46.030Z,teams.microsoft.com,MX,NOERROR,10.10.3.120,169.188.236.179 +ENG-WS-020,2026-02-19T16:29:36.547Z,akamai.net,CNAME,NXDOMAIN,10.10.3.120,88.189.188.7 +ENG-WS-020,2026-02-19T16:08:15.835Z,file-01.acme.local,AAAA,NXDOMAIN,10.10.3.120, +ENG-WS-020,2026-02-14T22:46:39.400Z,teams.microsoft.com,CNAME,SERVFAIL,10.10.3.120,215.146.38.144 +ENG-WS-020,2026-02-20T03:30:53.774Z,exch-01.acme.local,A,NOERROR,10.10.3.120, +ENG-WS-020,2026-02-11T19:51:10.960Z,exch-01.acme.local,A,NXDOMAIN,10.10.3.120,199.83.38.101 +ENG-WS-020,2026-02-19T10:24:59.591Z,graph.microsoft.com,TXT,NOERROR,10.10.3.120, +ENG-WS-020,2026-02-15T10:51:23.427Z,exch-01.acme.local,A,NOERROR,10.10.3.120,16.104.20.203 +ENG-WS-020,2026-02-15T06:23:45.855Z,update.microsoft.com,MX,SERVFAIL,10.10.3.120,119.103.13.132 +ENG-WS-020,2026-02-11T19:22:26.893Z,google.com,A,NOERROR,10.10.3.120,93.123.88.186 +LEG-WS-021,2026-02-19T11:30:47.996Z,dc-02.acme.local,CNAME,NOERROR,10.10.1.121,45.102.223.60 +LEG-WS-021,2026-02-16T07:58:07.065Z,login.microsoftonline.com,A,NOERROR,10.10.1.121,23.19.185.184 +LEG-WS-021,2026-02-14T00:23:43.718Z,windowsupdate.com,TXT,NOERROR,10.10.1.121,16.13.144.237 +LEG-WS-021,2026-02-19T20:16:28.342Z,cloudflare.com,A,NOERROR,10.10.1.121,168.121.78.84 +LEG-WS-021,2026-02-11T05:35:09.499Z,login.microsoftonline.com,TXT,NOERROR,10.10.1.121,201.58.104.205 +LEG-WS-021,2026-02-13T01:29:47.508Z,acme.local,TXT,NOERROR,10.10.1.121,52.109.221.178 +LEG-WS-021,2026-02-14T18:52:47.071Z,cdn.jsdelivr.net,MX,NOERROR,10.10.1.121, +LEG-WS-021,2026-02-11T12:59:37.082Z,update.microsoft.com,A,NOERROR,10.10.1.121, +LEG-WS-021,2026-02-19T12:42:46.029Z,teams.microsoft.com,A,NOERROR,10.10.1.121,58.20.47.75 +LEG-WS-021,2026-02-16T04:07:15.110Z,dc-02.acme.local,AAAA,SERVFAIL,10.10.1.121,155.25.35.149 +LEG-WS-021,2026-02-13T11:30:16.716Z,stackoverflow.com,CNAME,NOERROR,10.10.1.121, +LEG-WS-021,2026-02-17T09:01:30.346Z,graph.microsoft.com,A,SERVFAIL,10.10.1.121, +LEG-WS-021,2026-02-12T14:14:22.349Z,akamai.net,CNAME,NXDOMAIN,10.10.1.121,187.105.48.114 +LEG-WS-021,2026-02-18T06:05:37.805Z,acme.local,A,NXDOMAIN,10.10.1.121,77.35.247.22 +LEG-WS-021,2026-02-12T14:24:49.540Z,www.linkedin.com/jobs,TXT,SERVFAIL,10.10.1.121, +LEG-WS-021,2026-02-18T14:17:45.146Z,www.tiktok.com,MX,NOERROR,10.10.1.121, +LEG-WS-021,2026-02-11T12:00:13.060Z,login.microsoftonline.com,A,NOERROR,10.10.1.121,6.127.139.244 +LEG-WS-021,2026-02-14T03:58:11.856Z,googleapis.com,A,NXDOMAIN,10.10.1.121, +LEG-WS-021,2026-02-18T08:29:12.067Z,pypi.org,CNAME,NOERROR,10.10.1.121,127.232.177.193 +LEG-WS-021,2026-02-17T16:52:17.610Z,exch-01.acme.local,A,NXDOMAIN,10.10.1.121, +MKT-WS-022,2026-02-11T13:25:04.718Z,acme.sharepoint.com,A,NOERROR,10.10.2.122,165.39.47.167 +MKT-WS-022,2026-02-18T02:05:17.864Z,akamai.net,A,NOERROR,10.10.2.122,177.225.15.245 +MKT-WS-022,2026-02-16T17:00:46.360Z,googleapis.com,A,NOERROR,10.10.2.122, +MKT-WS-022,2026-02-10T13:40:38.922Z,cdn.jsdelivr.net,CNAME,SERVFAIL,10.10.2.122,104.203.203.176 +MKT-WS-022,2026-02-11T18:13:52.336Z,time.windows.com,A,NOERROR,10.10.2.122,119.30.14.127 +MKT-WS-022,2026-02-13T15:34:08.023Z,www.amazon.com,A,NOERROR,10.10.2.122,149.253.33.71 +MKT-WS-022,2026-02-14T17:12:50.574Z,google.com,AAAA,NOERROR,10.10.2.122,56.15.207.87 +MKT-WS-022,2026-02-13T09:17:17.328Z,pypi.org,A,SERVFAIL,10.10.2.122,142.98.87.63 +MKT-WS-022,2026-02-17T23:03:07.574Z,cloudflare.com,A,SERVFAIL,10.10.2.122,37.166.72.176 +MKT-WS-022,2026-02-18T01:40:25.069Z,file-01.acme.local,CNAME,NOERROR,10.10.2.122,29.108.58.229 +MKT-WS-022,2026-02-18T11:25:50.700Z,stackoverflow.com,AAAA,NOERROR,10.10.2.122,43.120.219.127 +MKT-WS-022,2026-02-16T00:57:03.716Z,acme.sharepoint.com,MX,NOERROR,10.10.2.122,145.98.74.244 +MKT-WS-022,2026-02-10T16:08:07.404Z,login.microsoftonline.com,A,NOERROR,10.10.2.122,113.186.159.106 +MKT-WS-022,2026-02-15T17:18:54.593Z,dc-01.acme.local,A,NXDOMAIN,10.10.2.122,69.50.201.60 +MKT-WS-022,2026-02-11T16:34:02.474Z,teams.microsoft.com,MX,NOERROR,10.10.2.122, +MKT-WS-022,2026-02-16T07:46:18.668Z,windowsupdate.com,MX,NXDOMAIN,10.10.2.122, +MKT-WS-022,2026-02-13T11:28:38.689Z,npmjs.com,TXT,NOERROR,10.10.2.122, +MKT-WS-022,2026-02-18T15:48:47.769Z,dc-01.acme.local,CNAME,NXDOMAIN,10.10.2.122, +MKT-WS-022,2026-02-17T17:50:05.346Z,thepiratebay.org,A,NXDOMAIN,10.10.2.122,19.212.195.31 +EXEC-WS-023,2026-02-19T06:56:12.891Z,login.microsoftonline.com,MX,NOERROR,10.10.3.123, +EXEC-WS-023,2026-02-18T03:07:44.157Z,github.com,A,NOERROR,10.10.3.123,182.138.194.249 +EXEC-WS-023,2026-02-12T03:51:44.948Z,dc-01.acme.local,MX,SERVFAIL,10.10.3.123,98.130.118.128 +EXEC-WS-023,2026-02-18T17:44:19.301Z,dc-01.acme.local,AAAA,NOERROR,10.10.3.123,174.139.161.72 +EXEC-WS-023,2026-02-14T00:32:35.085Z,googleapis.com,MX,NXDOMAIN,10.10.3.123, +EXEC-WS-023,2026-02-19T04:48:24.139Z,login.microsoftonline.com,A,SERVFAIL,10.10.3.123,165.70.77.128 +EXEC-WS-023,2026-02-20T10:10:06.694Z,acme.local,MX,SERVFAIL,10.10.3.123,69.64.50.167 +EXEC-WS-023,2026-02-18T01:56:10.156Z,cdn.jsdelivr.net,A,NOERROR,10.10.3.123,136.118.188.169 +EXEC-WS-023,2026-02-20T03:34:30.962Z,outlook.office365.com,CNAME,NXDOMAIN,10.10.3.123, +EXEC-WS-023,2026-02-13T00:39:33.980Z,acme.sharepoint.com,A,SERVFAIL,10.10.3.123,105.184.16.140 +EXEC-WS-023,2026-02-14T14:57:56.932Z,www.netflix.com,A,NOERROR,10.10.3.123,193.9.123.71 +EXEC-WS-023,2026-02-12T22:58:09.822Z,aws.amazon.com,CNAME,NOERROR,10.10.3.123,122.237.17.4 +EXEC-WS-023,2026-02-18T18:37:03.827Z,windowsupdate.com,TXT,NOERROR,10.10.3.123,148.171.63.79 +EXEC-WS-023,2026-02-20T06:39:49.843Z,cloudflare.com,CNAME,NOERROR,10.10.3.123,100.219.168.76 +EXEC-WS-023,2026-02-20T13:14:34.435Z,teams.microsoft.com,A,NXDOMAIN,10.10.3.123,179.181.222.34 +EXEC-WS-023,2026-02-15T13:07:20.774Z,windowsupdate.com,A,NOERROR,10.10.3.123,191.34.228.53 +EXEC-WS-023,2026-02-16T08:59:22.465Z,cdn.jsdelivr.net,A,NOERROR,10.10.3.123,82.94.119.81 +EXEC-WS-023,2026-02-17T17:53:58.920Z,stackoverflow.com,TXT,NOERROR,10.10.3.123,109.142.249.184 +EXEC-WS-023,2026-02-19T05:03:38.129Z,www.amazon.com,A,NOERROR,10.10.3.123,120.52.64.175 +EXEC-WS-023,2026-02-16T23:03:52.156Z,dc-02.acme.local,CNAME,NXDOMAIN,10.10.3.123,20.122.20.220 +EXEC-WS-023,2026-02-13T11:26:02.019Z,googleapis.com,CNAME,NOERROR,10.10.3.123,219.147.88.161 +IT-WS-024,2026-02-13T14:20:41.323Z,acme.local,CNAME,NOERROR,10.10.1.124,209.103.109.124 +IT-WS-024,2026-02-18T18:25:10.065Z,google.com,A,NOERROR,10.10.1.124,169.251.63.169 +IT-WS-024,2026-02-14T15:38:20.402Z,update.microsoft.com,CNAME,NXDOMAIN,10.10.1.124,117.241.49.212 +IT-WS-024,2026-02-16T04:05:30.866Z,www.tiktok.com,A,NOERROR,10.10.1.124,222.239.19.173 +IT-WS-024,2026-02-13T05:23:55.706Z,cloudflare.com,A,NOERROR,10.10.1.124,148.61.59.254 +IT-WS-024,2026-02-13T11:10:27.090Z,teams.microsoft.com,MX,NOERROR,10.10.1.124,183.41.52.150 +IT-WS-024,2026-02-10T23:05:15.575Z,acme.local,TXT,NXDOMAIN,10.10.1.124,78.88.154.224 +IT-WS-024,2026-02-20T07:54:17.393Z,acme.sharepoint.com,A,SERVFAIL,10.10.1.124,220.172.94.62 +IT-WS-024,2026-02-15T08:42:47.434Z,akamai.net,CNAME,SERVFAIL,10.10.1.124,187.253.234.2 +IT-WS-024,2026-02-16T04:07:38.639Z,www.reddit.com,A,NOERROR,10.10.1.124,45.171.48.41 +IT-WS-024,2026-02-17T21:46:06.408Z,www.linkedin.com/jobs,TXT,NOERROR,10.10.1.124,42.84.207.124 +IT-WS-024,2026-02-10T23:06:02.533Z,googleapis.com,MX,NXDOMAIN,10.10.1.124,5.75.220.93 +IT-WS-024,2026-02-16T01:19:42.425Z,acme.sharepoint.com,AAAA,SERVFAIL,10.10.1.124,93.235.32.105 +IT-WS-024,2026-02-15T20:24:05.883Z,akamai.net,A,NOERROR,10.10.1.124,49.241.4.213 +IT-WS-024,2026-02-19T02:41:42.678Z,googleapis.com,A,NXDOMAIN,10.10.1.124, +IT-WS-024,2026-02-18T10:10:40.867Z,npmjs.com,TXT,SERVFAIL,10.10.1.124,107.222.115.43 +IT-WS-024,2026-02-10T16:46:50.628Z,www.ebay.com,TXT,NOERROR,10.10.1.124,70.79.222.126 +IT-WS-024,2026-02-14T22:03:52.269Z,google.com,MX,NOERROR,10.10.1.124,89.30.243.205 +IT-WS-024,2026-02-18T19:01:06.687Z,dc-01.acme.local,MX,NOERROR,10.10.1.124,110.241.202.93 +IT-WS-024,2026-02-18T09:21:12.718Z,teams.microsoft.com,TXT,NOERROR,10.10.1.124,115.138.255.123 +IT-WS-024,2026-02-19T06:46:34.088Z,login.microsoftonline.com,A,NOERROR,10.10.1.124, +IT-WS-024,2026-02-18T04:41:56.439Z,update.microsoft.com,A,NOERROR,10.10.1.124,46.203.115.15 +IT-WS-024,2026-02-17T05:49:31.964Z,github.com,CNAME,NOERROR,10.10.1.124, +IT-WS-024,2026-02-12T15:40:12.506Z,cdn.jsdelivr.net,A,SERVFAIL,10.10.1.124,195.16.236.193 +IT-WS-024,2026-02-18T09:53:23.548Z,dc-01.acme.local,A,NXDOMAIN,10.10.1.124,23.221.175.38 +IT-WS-024,2026-02-15T04:14:45.877Z,dc-01.acme.local,A,NXDOMAIN,10.10.1.124,33.175.102.124 +IT-WS-024,2026-02-16T12:23:19.221Z,googleapis.com,A,NOERROR,10.10.1.124,92.107.204.186 +IT-WS-024,2026-02-16T14:07:11.226Z,stackoverflow.com,AAAA,NOERROR,10.10.1.124, +IT-WS-024,2026-02-20T16:13:38.469Z,acme.sharepoint.com,AAAA,NOERROR,10.10.1.124,91.204.81.198 +IT-WS-024,2026-02-12T17:43:10.044Z,npmjs.com,AAAA,NOERROR,10.10.1.124,46.95.172.193 +IT-WS-024,2026-02-10T16:50:10.544Z,graph.microsoft.com,A,NOERROR,10.10.1.124,212.27.3.140 +IT-WS-024,2026-02-11T19:38:37.433Z,dc-02.acme.local,AAAA,NOERROR,10.10.1.124,9.104.228.3 +IT-WS-024,2026-02-12T18:18:19.410Z,acme.sharepoint.com,A,NOERROR,10.10.1.124,162.107.143.94 +IT-WS-024,2026-02-11T15:58:14.382Z,teams.microsoft.com,A,NXDOMAIN,10.10.1.124,161.6.137.119 +IT-WS-024,2026-02-16T12:06:37.621Z,graph.microsoft.com,A,NOERROR,10.10.1.124,176.58.244.244 +IT-WS-024,2026-02-14T08:24:38.151Z,akamai.net,A,NXDOMAIN,10.10.1.124,217.182.157.78 +IT-WS-024,2026-02-11T20:01:11.509Z,time.windows.com,CNAME,NXDOMAIN,10.10.1.124,139.113.237.159 +IT-WS-024,2026-02-13T08:20:29.091Z,stackoverflow.com,CNAME,NOERROR,10.10.1.124,162.230.101.166 +IT-WS-024,2026-02-14T19:10:08.840Z,cloudflare.com,TXT,NOERROR,10.10.1.124,68.67.109.163 +IT-WS-024,2026-02-12T15:14:13.575Z,outlook.office365.com,MX,SERVFAIL,10.10.1.124,120.111.108.21 +IT-WS-024,2026-02-12T19:30:20.256Z,login.microsoftonline.com,A,SERVFAIL,10.10.1.124,194.215.176.205 +IT-WS-024,2026-02-17T10:14:01.802Z,teams.microsoft.com,A,NOERROR,10.10.1.124, +IT-WS-024,2026-02-14T20:36:01.386Z,onlyfans.com,A,SERVFAIL,10.10.1.124,172.18.206.166 +IT-WS-024,2026-02-15T11:33:11.065Z,dc-02.acme.local,MX,NOERROR,10.10.1.124,213.219.126.37 +IT-WS-024,2026-02-17T21:02:23.126Z,exch-01.acme.local,A,NOERROR,10.10.1.124,86.94.158.38 +IT-WS-024,2026-02-12T02:13:26.693Z,github.com,A,NOERROR,10.10.1.124,195.205.123.233 +IT-WS-024,2026-02-12T11:28:28.406Z,dc-02.acme.local,A,NXDOMAIN,10.10.1.124,155.131.172.235 +IT-WS-024,2026-02-12T10:15:56.348Z,login.microsoftonline.com,TXT,NOERROR,10.10.1.124,191.146.212.93 +IT-WS-024,2026-02-17T03:13:46.393Z,akamai.net,AAAA,NOERROR,10.10.1.124,132.251.111.9 +IT-WS-024,2026-02-19T05:02:35.191Z,www.shein.com,A,NOERROR,10.10.1.124,120.104.194.172 +IT-WS-024,2026-02-18T01:43:34.538Z,akamai.net,AAAA,NOERROR,10.10.1.124,169.236.104.185 +IT-WS-024,2026-02-12T02:30:10.669Z,windowsupdate.com,A,NOERROR,10.10.1.124,130.231.137.145 +IT-WS-024,2026-02-14T18:31:16.071Z,teams.microsoft.com,MX,NOERROR,10.10.1.124,149.63.17.155 +IT-WS-024,2026-02-15T17:50:57.562Z,www.reddit.com,MX,NOERROR,10.10.1.124,54.78.211.80 +IT-WS-024,2026-02-18T09:23:14.498Z,cdn.jsdelivr.net,TXT,SERVFAIL,10.10.1.124,51.240.182.158 +IT-WS-024,2026-02-11T06:50:29.142Z,dc-01.acme.local,MX,NOERROR,10.10.1.124,158.11.101.127 +IT-WS-024,2026-02-13T09:09:32.144Z,onlyfans.com,A,NOERROR,10.10.1.124,144.55.7.74 +IT-WS-024,2026-02-18T19:39:08.690Z,pypi.org,A,NOERROR,10.10.1.124,148.153.130.235 +IT-WS-024,2026-02-17T12:09:59.541Z,acme.sharepoint.com,AAAA,SERVFAIL,10.10.1.124,141.29.166.34 +IT-WS-024,2026-02-10T15:29:54.996Z,googleapis.com,CNAME,NXDOMAIN,10.10.1.124,23.97.226.139 +HR-WS-025,2026-02-11T06:38:33.804Z,cdn.jsdelivr.net,TXT,SERVFAIL,10.10.2.125,114.140.125.209 +HR-WS-025,2026-02-16T15:33:27.158Z,outlook.office365.com,MX,SERVFAIL,10.10.2.125,55.20.202.41 +HR-WS-025,2026-02-11T21:26:57.281Z,outlook.office365.com,A,SERVFAIL,10.10.2.125,166.199.143.101 +HR-WS-025,2026-02-12T01:20:59.604Z,aws.amazon.com,AAAA,NOERROR,10.10.2.125,60.183.128.136 +HR-WS-025,2026-02-12T04:12:03.699Z,file-01.acme.local,A,NOERROR,10.10.2.125,176.182.199.9 +HR-WS-025,2026-02-15T00:58:06.073Z,npmjs.com,A,SERVFAIL,10.10.2.125,54.169.158.108 +HR-WS-025,2026-02-14T18:47:29.916Z,github.com,CNAME,SERVFAIL,10.10.2.125,55.244.206.67 +HR-WS-025,2026-02-14T19:34:41.354Z,cdn.jsdelivr.net,TXT,NOERROR,10.10.2.125,21.218.41.48 +HR-WS-025,2026-02-10T19:04:11.758Z,file-01.acme.local,A,NOERROR,10.10.2.125,209.207.160.251 +HR-WS-025,2026-02-17T17:32:24.581Z,stackoverflow.com,A,NOERROR,10.10.2.125,164.22.21.202 +HR-WS-025,2026-02-13T14:27:50.375Z,graph.microsoft.com,TXT,NOERROR,10.10.2.125,96.67.212.183 +HR-WS-025,2026-02-10T08:19:02.514Z,github.com,A,NOERROR,10.10.2.125,81.0.13.43 +HR-WS-025,2026-02-12T08:15:20.587Z,pypi.org,TXT,NOERROR,10.10.2.125, +HR-WS-025,2026-02-11T01:08:41.922Z,login.microsoftonline.com,A,NOERROR,10.10.2.125,220.238.48.247 +HR-WS-025,2026-02-16T03:44:02.916Z,exch-01.acme.local,MX,NOERROR,10.10.2.125,156.59.97.234 +HR-WS-025,2026-02-10T17:02:43.840Z,exch-01.acme.local,CNAME,NOERROR,10.10.2.125, +HR-WS-025,2026-02-18T18:38:23.456Z,www.shein.com,AAAA,SERVFAIL,10.10.2.125,113.41.221.204 +HR-WS-025,2026-02-15T08:45:24.450Z,teams.microsoft.com,TXT,NOERROR,10.10.2.125,157.75.104.182 +HR-WS-025,2026-02-19T18:47:35.034Z,google.com,A,NOERROR,10.10.2.125, +HR-WS-025,2026-02-11T09:21:11.868Z,time.windows.com,MX,NOERROR,10.10.2.125, +HR-WS-025,2026-02-18T19:11:42.376Z,acme.sharepoint.com,A,NOERROR,10.10.2.125,91.83.69.11 +HR-WS-025,2026-02-10T18:20:13.716Z,dc-01.acme.local,A,NOERROR,10.10.2.125,174.37.241.127 +HR-WS-025,2026-02-13T23:11:20.905Z,google.com,AAAA,NXDOMAIN,10.10.2.125,2.198.204.28 +HR-WS-025,2026-02-19T18:16:43.872Z,discord.gg,A,NOERROR,10.10.2.125,167.117.30.100 +HR-WS-025,2026-02-20T03:47:53.267Z,exch-01.acme.local,MX,NOERROR,10.10.2.125,24.86.56.31 +HR-WS-025,2026-02-18T23:51:56.149Z,outlook.office365.com,A,SERVFAIL,10.10.2.125, +HR-WS-025,2026-02-19T07:52:11.643Z,update.microsoft.com,A,NOERROR,10.10.2.125,158.113.100.16 +HR-WS-025,2026-02-16T09:55:44.859Z,exch-01.acme.local,A,SERVFAIL,10.10.2.125,149.69.30.110 +HR-WS-025,2026-02-11T12:45:19.895Z,acme.local,CNAME,NOERROR,10.10.2.125,143.53.10.226 +HR-WS-025,2026-02-16T22:18:59.275Z,github.com,TXT,NXDOMAIN,10.10.2.125,13.147.183.8 +HR-WS-025,2026-02-11T00:16:31.971Z,teams.microsoft.com,A,NOERROR,10.10.2.125,203.216.3.133 +HR-WS-025,2026-02-18T09:59:36.652Z,dc-01.acme.local,A,SERVFAIL,10.10.2.125,65.130.208.215 +HR-WS-025,2026-02-17T15:22:02.318Z,www.reddit.com,A,SERVFAIL,10.10.2.125,27.131.19.206 +HR-WS-025,2026-02-13T04:17:37.624Z,acme.local,TXT,NOERROR,10.10.2.125,145.180.15.210 +FIN-WS-026,2026-02-18T18:53:19.530Z,www.amazon.com,A,NOERROR,10.10.3.126,129.17.211.212 +FIN-WS-026,2026-02-13T01:34:08.141Z,cdn.jsdelivr.net,MX,NXDOMAIN,10.10.3.126,57.178.20.125 +FIN-WS-026,2026-02-20T13:42:01.811Z,cloudflare.com,A,NOERROR,10.10.3.126, +FIN-WS-026,2026-02-13T08:35:20.292Z,login.microsoftonline.com,CNAME,NXDOMAIN,10.10.3.126,167.226.220.46 +FIN-WS-026,2026-02-17T08:37:14.632Z,acme.sharepoint.com,A,SERVFAIL,10.10.3.126,104.199.43.225 +FIN-WS-026,2026-02-12T08:48:45.983Z,exch-01.acme.local,A,NXDOMAIN,10.10.3.126,74.253.71.135 +FIN-WS-026,2026-02-11T14:51:56.506Z,github.com,CNAME,NXDOMAIN,10.10.3.126,82.7.68.248 +FIN-WS-026,2026-02-14T08:51:18.455Z,akamai.net,TXT,NXDOMAIN,10.10.3.126,22.61.199.100 +FIN-WS-026,2026-02-14T11:45:15.744Z,google.com,A,NOERROR,10.10.3.126,134.65.138.207 +FIN-WS-026,2026-02-16T12:37:26.423Z,google.com,A,NXDOMAIN,10.10.3.126,12.63.202.95 +FIN-WS-026,2026-02-18T02:30:10.369Z,pypi.org,A,NOERROR,10.10.3.126, +FIN-WS-026,2026-02-18T21:27:53.852Z,fitgirl-repacks.site,MX,NOERROR,10.10.3.126,184.75.165.38 +FIN-WS-026,2026-02-13T21:03:02.495Z,acme.sharepoint.com,CNAME,NXDOMAIN,10.10.3.126,1.164.158.154 +FIN-WS-026,2026-02-15T01:09:14.581Z,teams.microsoft.com,A,NOERROR,10.10.3.126,15.173.76.3 +FIN-WS-026,2026-02-13T18:36:52.154Z,acme.local,A,NOERROR,10.10.3.126, +FIN-WS-026,2026-02-14T04:52:00.173Z,open.spotify.com,MX,NOERROR,10.10.3.126,213.117.147.170 +FIN-WS-026,2026-02-11T15:43:07.838Z,update.microsoft.com,A,NOERROR,10.10.3.126, +FIN-WS-026,2026-02-19T22:20:21.123Z,steamcommunity.com,TXT,NOERROR,10.10.3.126,191.115.55.203 +FIN-WS-026,2026-02-17T00:10:07.713Z,time.windows.com,A,NOERROR,10.10.3.126,207.248.113.68 +FIN-WS-026,2026-02-17T10:13:42.531Z,acme.sharepoint.com,A,NXDOMAIN,10.10.3.126,124.77.155.12 +FIN-WS-026,2026-02-19T23:59:33.241Z,graph.microsoft.com,MX,SERVFAIL,10.10.3.126, +FIN-WS-026,2026-02-16T19:40:37.937Z,www.facebook.com,TXT,SERVFAIL,10.10.3.126, +FIN-WS-026,2026-02-20T08:01:42.709Z,www.bet365.com,A,SERVFAIL,10.10.3.126,221.159.83.250 +FIN-WS-026,2026-02-15T17:49:46.459Z,cdn.jsdelivr.net,TXT,NXDOMAIN,10.10.3.126,174.170.185.130 +FIN-WS-026,2026-02-18T10:04:31.701Z,dc-02.acme.local,A,NOERROR,10.10.3.126,107.109.153.129 +FIN-WS-026,2026-02-11T19:55:35.476Z,google.com,A,NXDOMAIN,10.10.3.126,39.161.159.76 +FIN-WS-026,2026-02-16T23:50:55.118Z,update.microsoft.com,AAAA,NOERROR,10.10.3.126, +FIN-WS-026,2026-02-17T09:53:26.999Z,npmjs.com,A,NOERROR,10.10.3.126,85.23.127.65 +FIN-WS-026,2026-02-16T02:30:17.034Z,acme.local,TXT,NOERROR,10.10.3.126,121.81.3.253 +FIN-WS-026,2026-02-15T06:12:13.603Z,github.com,MX,NXDOMAIN,10.10.3.126,137.65.253.77 +FIN-WS-026,2026-02-18T22:56:56.072Z,time.windows.com,MX,NOERROR,10.10.3.126,34.28.241.81 +FIN-WS-026,2026-02-19T02:30:03.519Z,akamai.net,AAAA,NXDOMAIN,10.10.3.126,155.97.52.96 +FIN-WS-026,2026-02-11T18:03:57.713Z,time.windows.com,AAAA,NOERROR,10.10.3.126,9.246.151.183 +FIN-WS-026,2026-02-13T00:13:52.131Z,teams.microsoft.com,CNAME,NOERROR,10.10.3.126, +FIN-WS-026,2026-02-18T17:19:02.460Z,login.microsoftonline.com,A,NOERROR,10.10.3.126,92.72.195.239 +FIN-WS-026,2026-02-15T03:20:24.733Z,time.windows.com,CNAME,NOERROR,10.10.3.126,153.245.49.208 +FIN-WS-026,2026-02-12T16:41:43.481Z,exch-01.acme.local,A,NOERROR,10.10.3.126,202.230.84.160 +FIN-WS-026,2026-02-15T04:51:02.856Z,cloudflare.com,A,NOERROR,10.10.3.126,192.105.154.58 +FIN-WS-026,2026-02-16T13:54:45.301Z,cloudflare.com,CNAME,SERVFAIL,10.10.3.126,209.211.35.188 +FIN-WS-026,2026-02-11T07:04:48.262Z,npmjs.com,MX,SERVFAIL,10.10.3.126,182.66.59.94 +SLS-WS-027,2026-02-16T15:45:03.998Z,pypi.org,AAAA,NXDOMAIN,10.10.1.127,57.65.251.232 +SLS-WS-027,2026-02-20T06:08:40.280Z,outlook.office365.com,AAAA,NOERROR,10.10.1.127, +SLS-WS-027,2026-02-19T09:44:09.336Z,acme.local,CNAME,NOERROR,10.10.1.127,113.7.148.116 +SLS-WS-027,2026-02-20T13:08:24.401Z,graph.microsoft.com,A,SERVFAIL,10.10.1.127,102.237.158.118 +SLS-WS-027,2026-02-12T23:57:34.487Z,pypi.org,MX,NOERROR,10.10.1.127,99.210.180.103 +SLS-WS-027,2026-02-20T09:44:41.221Z,www.amazon.com,MX,NOERROR,10.10.1.127, +SLS-WS-027,2026-02-11T14:02:11.592Z,update.microsoft.com,AAAA,SERVFAIL,10.10.1.127, +SLS-WS-027,2026-02-19T06:40:45.642Z,acme.sharepoint.com,TXT,NXDOMAIN,10.10.1.127,138.84.246.143 +SLS-WS-027,2026-02-11T17:24:56.969Z,cdn.jsdelivr.net,CNAME,NOERROR,10.10.1.127,51.5.153.185 +SLS-WS-027,2026-02-16T10:33:26.559Z,aws.amazon.com,A,NXDOMAIN,10.10.1.127,170.18.205.103 +SLS-WS-027,2026-02-10T16:06:55.390Z,github.com,CNAME,SERVFAIL,10.10.1.127,60.48.93.52 +SLS-WS-027,2026-02-12T11:23:45.577Z,dc-01.acme.local,CNAME,SERVFAIL,10.10.1.127,71.46.57.248 +SLS-WS-027,2026-02-20T13:21:42.242Z,dc-02.acme.local,A,NXDOMAIN,10.10.1.127,40.133.92.31 +SLS-WS-027,2026-02-18T03:20:25.331Z,www.pornhub.com,MX,SERVFAIL,10.10.1.127,122.9.157.144 +SLS-WS-027,2026-02-18T13:19:16.137Z,acme.local,CNAME,SERVFAIL,10.10.1.127, +SLS-WS-027,2026-02-16T08:50:45.782Z,file-01.acme.local,CNAME,SERVFAIL,10.10.1.127,182.190.132.43 +SLS-WS-027,2026-02-15T12:54:36.583Z,hulu.com,A,NOERROR,10.10.1.127,54.209.99.233 +SLS-WS-027,2026-02-16T08:03:00.507Z,file-01.acme.local,AAAA,NXDOMAIN,10.10.1.127,110.252.243.125 +SLS-WS-027,2026-02-14T02:13:12.034Z,acme.sharepoint.com,TXT,NXDOMAIN,10.10.1.127, +SLS-WS-027,2026-02-11T06:19:28.956Z,dc-02.acme.local,CNAME,SERVFAIL,10.10.1.127, +SLS-WS-027,2026-02-10T13:52:18.153Z,google.com,TXT,SERVFAIL,10.10.1.127,46.221.251.219 +SLS-WS-027,2026-02-16T15:57:05.052Z,acme.sharepoint.com,A,NXDOMAIN,10.10.1.127,30.186.14.9 +SLS-WS-027,2026-02-12T15:59:09.450Z,draftkings.com,A,NOERROR,10.10.1.127,1.157.144.47 +SLS-WS-027,2026-02-20T10:57:18.079Z,stackoverflow.com,MX,SERVFAIL,10.10.1.127, +SLS-WS-027,2026-02-16T14:55:37.990Z,www.indeed.com,A,NOERROR,10.10.1.127,135.201.49.205 +SLS-WS-027,2026-02-18T22:22:46.690Z,dc-01.acme.local,A,SERVFAIL,10.10.1.127, +SLS-WS-027,2026-02-16T14:41:48.065Z,akamai.net,A,NOERROR,10.10.1.127,124.114.13.98 +SLS-WS-027,2026-02-14T07:13:21.053Z,googleapis.com,A,NOERROR,10.10.1.127,47.18.201.31 +SLS-WS-027,2026-02-18T06:25:07.903Z,discord.gg,MX,NOERROR,10.10.1.127,58.88.29.94 +SLS-WS-027,2026-02-16T05:54:12.439Z,github.com,MX,NOERROR,10.10.1.127,93.240.53.171 +SLS-WS-027,2026-02-14T03:00:32.463Z,aws.amazon.com,A,NXDOMAIN,10.10.1.127,41.250.239.2 +SLS-WS-027,2026-02-13T19:54:38.535Z,www.amazon.com,A,SERVFAIL,10.10.1.127, +SLS-WS-027,2026-02-15T12:47:03.749Z,akamai.net,A,NOERROR,10.10.1.127,218.211.2.210 +SLS-WS-027,2026-02-15T14:59:38.793Z,stackoverflow.com,MX,SERVFAIL,10.10.1.127,138.215.32.9 +SLS-WS-027,2026-02-13T21:45:20.156Z,npmjs.com,TXT,NXDOMAIN,10.10.1.127,89.193.245.221 +SLS-WS-027,2026-02-13T09:20:08.698Z,googleapis.com,AAAA,NOERROR,10.10.1.127,106.140.139.227 +SLS-WS-027,2026-02-14T07:40:10.934Z,windowsupdate.com,AAAA,NXDOMAIN,10.10.1.127,127.217.179.153 +SLS-WS-027,2026-02-17T23:50:16.696Z,dc-01.acme.local,TXT,NXDOMAIN,10.10.1.127,100.197.132.210 +SLS-WS-027,2026-02-20T11:06:42.263Z,dc-01.acme.local,A,NOERROR,10.10.1.127,216.122.140.219 +SLS-WS-027,2026-02-19T07:53:00.933Z,dc-01.acme.local,A,NOERROR,10.10.1.127,34.129.12.199 +SLS-WS-027,2026-02-15T11:47:19.487Z,cdn.jsdelivr.net,TXT,NOERROR,10.10.1.127,70.203.161.225 +SLS-WS-027,2026-02-13T00:40:28.431Z,cloudflare.com,A,NOERROR,10.10.1.127,209.178.143.142 +SLS-WS-027,2026-02-18T09:12:47.024Z,outlook.office365.com,MX,SERVFAIL,10.10.1.127, +SLS-WS-027,2026-02-12T09:40:49.494Z,acme.sharepoint.com,TXT,NOERROR,10.10.1.127,149.96.95.185 +SLS-WS-027,2026-02-14T13:46:13.561Z,acme.local,MX,NOERROR,10.10.1.127,135.21.141.208 +SLS-WS-027,2026-02-12T15:21:09.867Z,pypi.org,AAAA,NOERROR,10.10.1.127,71.44.180.1 +SLS-WS-027,2026-02-12T14:36:21.064Z,github.com,A,NOERROR,10.10.1.127,81.52.23.206 +SLS-WS-027,2026-02-14T13:54:10.175Z,update.microsoft.com,TXT,NOERROR,10.10.1.127,116.221.105.52 +SLS-WS-027,2026-02-15T04:49:11.190Z,github.com,A,NXDOMAIN,10.10.1.127,202.201.221.191 +SLS-WS-027,2026-02-19T04:41:28.100Z,www.netflix.com,AAAA,NXDOMAIN,10.10.1.127, +SLS-WS-027,2026-02-15T06:38:03.335Z,cloudflare.com,A,NOERROR,10.10.1.127,201.27.145.210 +ENG-WS-028,2026-02-10T13:17:13.472Z,draftkings.com,A,NXDOMAIN,10.10.2.128,124.56.167.30 +ENG-WS-028,2026-02-13T01:35:33.732Z,npmjs.com,MX,NXDOMAIN,10.10.2.128,121.103.100.61 +ENG-WS-028,2026-02-14T18:46:44.580Z,login.microsoftonline.com,CNAME,NOERROR,10.10.2.128,83.228.190.70 +ENG-WS-028,2026-02-15T20:01:34.428Z,pypi.org,AAAA,NOERROR,10.10.2.128, +ENG-WS-028,2026-02-17T07:10:13.296Z,exch-01.acme.local,A,NOERROR,10.10.2.128,48.239.14.186 +ENG-WS-028,2026-02-15T05:35:34.070Z,npmjs.com,MX,NXDOMAIN,10.10.2.128, +ENG-WS-028,2026-02-15T23:26:16.358Z,www.ebay.com,A,NOERROR,10.10.2.128,62.204.48.221 +ENG-WS-028,2026-02-11T15:50:38.392Z,graph.microsoft.com,MX,NXDOMAIN,10.10.2.128,154.152.52.180 +ENG-WS-028,2026-02-19T19:18:24.023Z,acme.sharepoint.com,AAAA,NXDOMAIN,10.10.2.128,129.228.4.86 +ENG-WS-028,2026-02-18T10:37:31.305Z,npmjs.com,A,NXDOMAIN,10.10.2.128,195.22.207.217 +ENG-WS-028,2026-02-19T13:36:42.921Z,graph.microsoft.com,A,NXDOMAIN,10.10.2.128,127.18.232.136 +ENG-WS-028,2026-02-17T10:10:57.319Z,google.com,CNAME,NXDOMAIN,10.10.2.128,69.100.5.59 +ENG-WS-028,2026-02-15T03:36:36.121Z,exch-01.acme.local,MX,NOERROR,10.10.2.128,177.3.149.225 +ENG-WS-028,2026-02-15T07:48:07.972Z,update.microsoft.com,TXT,NOERROR,10.10.2.128,49.60.231.142 +ENG-WS-028,2026-02-12T21:12:52.316Z,npmjs.com,A,NXDOMAIN,10.10.2.128,66.125.42.110 +ENG-WS-028,2026-02-13T17:24:19.824Z,npmjs.com,TXT,SERVFAIL,10.10.2.128,67.136.21.142 +ENG-WS-028,2026-02-19T17:15:00.062Z,googleapis.com,A,SERVFAIL,10.10.2.128,52.95.17.119 +ENG-WS-028,2026-02-14T20:55:42.411Z,exch-01.acme.local,A,NOERROR,10.10.2.128, +ENG-WS-028,2026-02-11T15:02:58.128Z,outlook.office365.com,CNAME,NOERROR,10.10.2.128,167.19.66.156 +LEG-WS-029,2026-02-14T07:16:27.660Z,github.com,AAAA,NOERROR,10.10.3.129,211.84.125.92 +LEG-WS-029,2026-02-14T00:09:21.802Z,github.com,A,NOERROR,10.10.3.129, +LEG-WS-029,2026-02-11T13:20:05.501Z,googleapis.com,CNAME,NOERROR,10.10.3.129,216.30.92.175 +LEG-WS-029,2026-02-10T14:26:20.408Z,windowsupdate.com,AAAA,SERVFAIL,10.10.3.129,24.167.2.6 +LEG-WS-029,2026-02-11T03:35:47.472Z,acme.sharepoint.com,TXT,NOERROR,10.10.3.129,195.196.64.207 +LEG-WS-029,2026-02-15T20:05:10.951Z,dc-02.acme.local,A,NOERROR,10.10.3.129,15.177.152.136 +LEG-WS-029,2026-02-12T14:22:43.069Z,cdn.jsdelivr.net,TXT,NOERROR,10.10.3.129,212.248.228.227 +LEG-WS-029,2026-02-20T03:17:34.929Z,npmjs.com,AAAA,NOERROR,10.10.3.129,85.167.121.135 +LEG-WS-029,2026-02-19T06:30:19.167Z,exch-01.acme.local,TXT,NOERROR,10.10.3.129,221.96.70.112 +LEG-WS-029,2026-02-16T10:43:13.389Z,update.microsoft.com,A,NOERROR,10.10.3.129,48.185.186.166 +LEG-WS-029,2026-02-18T09:30:04.700Z,stackoverflow.com,A,SERVFAIL,10.10.3.129,21.172.173.152 +LEG-WS-029,2026-02-20T02:12:54.220Z,pokerstars.com,A,SERVFAIL,10.10.3.129,187.168.155.68 +LEG-WS-029,2026-02-14T08:55:12.551Z,cdn.jsdelivr.net,A,NOERROR,10.10.3.129, +LEG-WS-029,2026-02-15T16:07:28.879Z,dc-02.acme.local,CNAME,SERVFAIL,10.10.3.129,183.166.15.131 +LEG-WS-029,2026-02-12T23:49:36.895Z,aws.amazon.com,MX,NOERROR,10.10.3.129, +LEG-WS-029,2026-02-14T22:54:17.748Z,login.microsoftonline.com,A,NXDOMAIN,10.10.3.129,93.177.180.154 +LEG-WS-029,2026-02-14T04:04:00.567Z,acme.sharepoint.com,CNAME,SERVFAIL,10.10.3.129,220.31.68.170 +LEG-WS-029,2026-02-18T09:59:27.755Z,cdn.jsdelivr.net,CNAME,NXDOMAIN,10.10.3.129,116.254.252.70 +LEG-WS-029,2026-02-14T04:29:03.572Z,windowsupdate.com,A,NOERROR,10.10.3.129, +LEG-WS-029,2026-02-19T04:52:53.294Z,update.microsoft.com,A,SERVFAIL,10.10.3.129,64.247.240.158 +LEG-WS-029,2026-02-10T23:31:51.798Z,www.facebook.com,CNAME,NOERROR,10.10.3.129,154.145.158.146 +LEG-WS-029,2026-02-15T03:27:40.609Z,stackoverflow.com,CNAME,NOERROR,10.10.3.129,34.101.174.202 +LEG-WS-029,2026-02-11T13:21:11.572Z,pypi.org,CNAME,NOERROR,10.10.3.129,88.15.86.199 +LEG-WS-029,2026-02-13T01:52:36.653Z,cdn.jsdelivr.net,A,NOERROR,10.10.3.129,32.79.78.126 +LEG-WS-029,2026-02-14T11:19:30.717Z,pypi.org,AAAA,NOERROR,10.10.3.129,210.188.57.178 +LEG-WS-029,2026-02-11T09:48:17.072Z,dc-01.acme.local,A,NOERROR,10.10.3.129, +LEG-WS-029,2026-02-13T20:05:50.986Z,exch-01.acme.local,AAAA,NOERROR,10.10.3.129,160.172.186.237 +LEG-WS-029,2026-02-20T07:33:17.348Z,windowsupdate.com,MX,SERVFAIL,10.10.3.129,170.109.104.96 +LEG-WS-029,2026-02-15T08:54:48.919Z,akamai.net,A,NXDOMAIN,10.10.3.129,14.182.3.78 +LEG-WS-029,2026-02-11T06:54:52.029Z,googleapis.com,TXT,NXDOMAIN,10.10.3.129,14.150.102.21 +LEG-WS-029,2026-02-19T19:40:45.921Z,exch-01.acme.local,A,NXDOMAIN,10.10.3.129,197.81.47.161 +LEG-WS-029,2026-02-16T09:46:03.855Z,cdn.jsdelivr.net,AAAA,NXDOMAIN,10.10.3.129,12.124.35.172 +LEG-WS-029,2026-02-15T18:52:40.949Z,outlook.office365.com,TXT,SERVFAIL,10.10.3.129,166.12.45.9 +LEG-WS-029,2026-02-12T09:13:33.184Z,google.com,A,NOERROR,10.10.3.129, +LEG-WS-029,2026-02-10T18:55:39.424Z,windowsupdate.com,MX,NOERROR,10.10.3.129, +LEG-WS-029,2026-02-17T11:29:35.177Z,acme.sharepoint.com,A,NOERROR,10.10.3.129,147.221.124.128 +LEG-WS-029,2026-02-19T19:24:42.349Z,windowsupdate.com,A,NOERROR,10.10.3.129,163.229.86.242 +LEG-WS-029,2026-02-16T03:53:57.914Z,teams.microsoft.com,TXT,NOERROR,10.10.3.129,73.230.50.193 +LEG-WS-029,2026-02-14T20:04:09.223Z,cdn.jsdelivr.net,AAAA,NOERROR,10.10.3.129,206.69.4.140 +LEG-WS-029,2026-02-17T14:50:23.542Z,npmjs.com,AAAA,NOERROR,10.10.3.129, +LEG-WS-029,2026-02-13T09:01:31.818Z,stackoverflow.com,CNAME,NOERROR,10.10.3.129,106.157.140.218 +LEG-WS-029,2026-02-17T02:03:39.732Z,xvideos.com,AAAA,NOERROR,10.10.3.129,154.222.208.62 +LEG-WS-029,2026-02-13T17:48:55.581Z,aws.amazon.com,A,SERVFAIL,10.10.3.129,212.154.139.157 +LEG-WS-029,2026-02-14T09:02:33.328Z,dc-02.acme.local,MX,NOERROR,10.10.3.129,66.196.111.252 +LEG-WS-029,2026-02-17T15:47:04.350Z,cloudflare.com,AAAA,NOERROR,10.10.3.129,85.223.206.80 +LEG-WS-029,2026-02-16T17:45:45.024Z,acme.sharepoint.com,A,NOERROR,10.10.3.129,203.5.192.69 +LEG-WS-029,2026-02-14T09:09:00.860Z,googleapis.com,MX,SERVFAIL,10.10.3.129, +LEG-WS-029,2026-02-20T14:35:17.786Z,akamai.net,AAAA,NOERROR,10.10.3.129,203.74.124.171 +LEG-WS-029,2026-02-20T11:41:36.025Z,aws.amazon.com,A,NOERROR,10.10.3.129,144.251.70.48 +LEG-WS-029,2026-02-15T04:55:39.359Z,acme.local,AAAA,NXDOMAIN,10.10.3.129,199.138.27.252 +LEG-WS-029,2026-02-11T00:04:49.649Z,time.windows.com,TXT,NXDOMAIN,10.10.3.129,78.167.253.129 +LEG-WS-029,2026-02-18T12:48:21.228Z,dc-01.acme.local,CNAME,SERVFAIL,10.10.3.129,205.166.230.170 +LEG-WS-029,2026-02-19T21:00:49.821Z,akamai.net,CNAME,NXDOMAIN,10.10.3.129,144.1.27.227 +MKT-WS-030,2026-02-19T21:08:27.598Z,update.microsoft.com,A,NXDOMAIN,10.10.1.130,67.130.135.55 +MKT-WS-030,2026-02-12T01:24:07.937Z,acme.local,A,NOERROR,10.10.1.130,66.222.181.50 +MKT-WS-030,2026-02-12T04:23:34.435Z,dc-01.acme.local,A,NOERROR,10.10.1.130, +MKT-WS-030,2026-02-14T19:49:24.396Z,npmjs.com,CNAME,NXDOMAIN,10.10.1.130,222.188.70.13 +MKT-WS-030,2026-02-16T21:53:34.958Z,teams.microsoft.com,A,SERVFAIL,10.10.1.130,89.11.174.105 +MKT-WS-030,2026-02-12T18:51:29.189Z,graph.microsoft.com,CNAME,SERVFAIL,10.10.1.130,140.44.134.254 +MKT-WS-030,2026-02-19T00:14:20.100Z,windowsupdate.com,A,SERVFAIL,10.10.1.130,122.216.210.182 +MKT-WS-030,2026-02-19T05:33:07.585Z,windowsupdate.com,A,SERVFAIL,10.10.1.130,13.142.65.54 +MKT-WS-030,2026-02-10T08:23:27.451Z,graph.microsoft.com,A,SERVFAIL,10.10.1.130,20.251.22.10 +MKT-WS-030,2026-02-16T14:47:04.978Z,update.microsoft.com,TXT,NOERROR,10.10.1.130,215.151.208.93 +MKT-WS-030,2026-02-13T19:26:17.113Z,login.microsoftonline.com,AAAA,NXDOMAIN,10.10.1.130, +MKT-WS-030,2026-02-16T19:06:32.964Z,cloudflare.com,A,NOERROR,10.10.1.130,56.162.99.12 +MKT-WS-030,2026-02-16T20:52:40.045Z,login.microsoftonline.com,MX,NOERROR,10.10.1.130, +MKT-WS-030,2026-02-10T10:42:35.566Z,draftkings.com,A,NOERROR,10.10.1.130,36.55.205.141 +MKT-WS-030,2026-02-13T20:47:17.000Z,dc-02.acme.local,AAAA,NXDOMAIN,10.10.1.130, +MKT-WS-030,2026-02-20T09:36:23.975Z,acme.local,AAAA,NOERROR,10.10.1.130,22.64.227.73 +MKT-WS-030,2026-02-12T04:54:13.709Z,teams.microsoft.com,MX,NXDOMAIN,10.10.1.130,220.22.89.57 +MKT-WS-030,2026-02-19T18:04:55.360Z,teams.microsoft.com,CNAME,NOERROR,10.10.1.130,108.74.128.117 +MKT-WS-030,2026-02-11T21:26:52.032Z,file-01.acme.local,MX,NOERROR,10.10.1.130,173.123.207.162 +MKT-WS-030,2026-02-11T19:59:36.058Z,outlook.office365.com,A,NOERROR,10.10.1.130, +MKT-WS-030,2026-02-19T17:51:18.381Z,fitgirl-repacks.site,A,NXDOMAIN,10.10.1.130,11.218.1.82 +MKT-WS-030,2026-02-18T09:09:01.256Z,teams.microsoft.com,AAAA,NOERROR,10.10.1.130,24.196.232.223 +MKT-WS-030,2026-02-18T18:32:53.629Z,acme.sharepoint.com,AAAA,NOERROR,10.10.1.130,49.117.118.5 +MKT-WS-030,2026-02-13T04:09:39.011Z,exch-01.acme.local,CNAME,SERVFAIL,10.10.1.130,21.214.169.122 +MKT-WS-030,2026-02-16T09:25:13.510Z,cdn.jsdelivr.net,AAAA,NOERROR,10.10.1.130,181.116.16.38 +MKT-WS-030,2026-02-17T10:51:03.721Z,github.com,MX,SERVFAIL,10.10.1.130,161.169.56.147 +MKT-WS-030,2026-02-10T16:37:49.148Z,www.shein.com,A,NOERROR,10.10.1.130,79.16.161.26 +MKT-WS-030,2026-02-12T07:35:25.217Z,hulu.com,MX,NOERROR,10.10.1.130,58.213.103.196 +MKT-WS-030,2026-02-15T08:29:54.540Z,file-01.acme.local,A,NOERROR,10.10.1.130,50.238.27.1 +MKT-WS-030,2026-02-19T16:55:37.418Z,google.com,A,NXDOMAIN,10.10.1.130,68.119.230.238 +MKT-WS-030,2026-02-17T01:41:23.720Z,aws.amazon.com,A,NXDOMAIN,10.10.1.130, +MKT-WS-030,2026-02-14T22:12:32.518Z,dc-01.acme.local,A,NOERROR,10.10.1.130,180.86.114.221 +MKT-WS-030,2026-02-18T20:56:20.854Z,aws.amazon.com,A,NXDOMAIN,10.10.1.130, +MKT-WS-030,2026-02-14T05:31:40.818Z,google.com,TXT,NOERROR,10.10.1.130,155.227.191.10 +MKT-WS-030,2026-02-15T11:23:42.622Z,graph.microsoft.com,A,NOERROR,10.10.1.130,199.122.15.196 +MKT-WS-030,2026-02-17T11:24:28.123Z,outlook.office365.com,A,NOERROR,10.10.1.130,151.42.193.156 +MKT-WS-030,2026-02-12T21:50:13.851Z,acme.sharepoint.com,A,NOERROR,10.10.1.130,55.192.147.165 +EXEC-WS-031,2026-02-17T18:20:48.967Z,www.glassdoor.com,CNAME,NOERROR,10.10.2.131, +EXEC-WS-031,2026-02-18T16:21:30.023Z,time.windows.com,CNAME,NOERROR,10.10.2.131,190.171.103.239 +EXEC-WS-031,2026-02-10T13:21:48.831Z,cdn.jsdelivr.net,MX,NXDOMAIN,10.10.2.131,2.133.200.47 +EXEC-WS-031,2026-02-15T22:29:46.201Z,pypi.org,A,NOERROR,10.10.2.131,168.93.230.29 +EXEC-WS-031,2026-02-14T14:40:02.924Z,windowsupdate.com,A,NOERROR,10.10.2.131,213.196.33.32 +EXEC-WS-031,2026-02-19T07:11:06.876Z,npmjs.com,A,NOERROR,10.10.2.131, +EXEC-WS-031,2026-02-14T21:00:04.770Z,acme.local,A,SERVFAIL,10.10.2.131,151.142.1.209 +EXEC-WS-031,2026-02-15T04:50:18.036Z,aws.amazon.com,A,NOERROR,10.10.2.131,128.207.86.136 +EXEC-WS-031,2026-02-17T06:44:40.581Z,www.amazon.com,TXT,NXDOMAIN,10.10.2.131,126.253.25.22 +EXEC-WS-031,2026-02-15T04:02:11.296Z,googleapis.com,A,NXDOMAIN,10.10.2.131,26.53.171.110 +EXEC-WS-031,2026-02-19T19:11:24.388Z,cloudflare.com,CNAME,NXDOMAIN,10.10.2.131, +EXEC-WS-031,2026-02-16T22:56:05.918Z,acme.sharepoint.com,TXT,NOERROR,10.10.2.131,205.57.85.39 +EXEC-WS-031,2026-02-20T10:44:00.939Z,store.steampowered.com,CNAME,NXDOMAIN,10.10.2.131,187.235.144.188 +EXEC-WS-031,2026-02-16T16:27:10.297Z,akamai.net,CNAME,NOERROR,10.10.2.131, +EXEC-WS-031,2026-02-15T04:44:38.031Z,stackoverflow.com,CNAME,SERVFAIL,10.10.2.131,122.96.185.139 +EXEC-WS-031,2026-02-17T22:42:20.582Z,update.microsoft.com,MX,NXDOMAIN,10.10.2.131,116.144.255.116 +EXEC-WS-031,2026-02-19T07:49:44.761Z,exch-01.acme.local,TXT,SERVFAIL,10.10.2.131,86.157.110.138 +EXEC-WS-031,2026-02-16T15:06:09.419Z,github.com,TXT,NXDOMAIN,10.10.2.131,46.179.74.198 +EXEC-WS-031,2026-02-16T16:54:30.642Z,draftkings.com,A,NXDOMAIN,10.10.2.131,110.63.76.98 +EXEC-WS-031,2026-02-16T08:19:57.604Z,graph.microsoft.com,TXT,NXDOMAIN,10.10.2.131,148.96.107.95 +EXEC-WS-031,2026-02-12T13:13:18.770Z,outlook.office365.com,A,NOERROR,10.10.2.131,123.110.20.83 +EXEC-WS-031,2026-02-11T17:09:04.216Z,npmjs.com,A,NXDOMAIN,10.10.2.131,61.168.169.46 +EXEC-WS-031,2026-02-10T21:18:56.956Z,windowsupdate.com,TXT,NOERROR,10.10.2.131,126.129.245.130 +EXEC-WS-031,2026-02-16T03:37:57.472Z,windowsupdate.com,MX,SERVFAIL,10.10.2.131,151.100.148.191 +EXEC-WS-031,2026-02-12T17:41:22.442Z,cdn.jsdelivr.net,AAAA,NOERROR,10.10.2.131, +EXEC-WS-031,2026-02-17T01:11:50.206Z,cdn.jsdelivr.net,TXT,NXDOMAIN,10.10.2.131,3.125.141.176 +EXEC-WS-031,2026-02-14T05:22:49.502Z,cdn.jsdelivr.net,A,NOERROR,10.10.2.131,124.253.247.200 +EXEC-WS-031,2026-02-15T02:40:12.126Z,teams.microsoft.com,AAAA,NOERROR,10.10.2.131,172.154.108.78 +EXEC-WS-031,2026-02-13T23:26:07.951Z,acme.sharepoint.com,TXT,NOERROR,10.10.2.131, +EXEC-WS-031,2026-02-10T15:54:51.838Z,exch-01.acme.local,TXT,NOERROR,10.10.2.131,118.80.25.159 +EXEC-WS-031,2026-02-17T23:16:05.594Z,outlook.office365.com,AAAA,NXDOMAIN,10.10.2.131,219.191.230.165 +EXEC-WS-031,2026-02-12T06:36:47.973Z,stackoverflow.com,TXT,NOERROR,10.10.2.131, +EXEC-WS-031,2026-02-15T21:57:36.791Z,stackoverflow.com,A,NXDOMAIN,10.10.2.131,207.161.166.5 +EXEC-WS-031,2026-02-12T16:57:26.321Z,dc-01.acme.local,TXT,NOERROR,10.10.2.131,28.30.34.5 +EXEC-WS-031,2026-02-18T10:52:49.632Z,pypi.org,TXT,NXDOMAIN,10.10.2.131,50.178.142.216 +EXEC-WS-031,2026-02-19T22:12:20.270Z,graph.microsoft.com,A,NOERROR,10.10.2.131,205.36.212.157 +EXEC-WS-031,2026-02-17T00:22:31.097Z,cloudflare.com,AAAA,NOERROR,10.10.2.131,221.125.189.115 +EXEC-WS-031,2026-02-12T12:32:03.486Z,file-01.acme.local,CNAME,SERVFAIL,10.10.2.131,20.51.45.84 +EXEC-WS-031,2026-02-19T05:46:22.006Z,outlook.office365.com,CNAME,NXDOMAIN,10.10.2.131,14.47.210.74 +EXEC-WS-031,2026-02-12T00:20:34.392Z,akamai.net,AAAA,NOERROR,10.10.2.131,86.165.145.107 +EXEC-WS-031,2026-02-19T20:00:29.365Z,login.microsoftonline.com,A,NOERROR,10.10.2.131,65.199.86.37 +EXEC-WS-031,2026-02-13T07:07:21.707Z,googleapis.com,MX,NOERROR,10.10.2.131,64.151.117.71 +EXEC-WS-031,2026-02-19T21:34:53.840Z,outlook.office365.com,A,SERVFAIL,10.10.2.131,214.132.241.176 +EXEC-WS-031,2026-02-10T20:39:32.725Z,www.amazon.com,A,NOERROR,10.10.2.131,135.39.26.114 +EXEC-WS-031,2026-02-11T11:05:20.193Z,exch-01.acme.local,AAAA,NOERROR,10.10.2.131, +EXEC-WS-031,2026-02-18T01:03:11.472Z,teams.microsoft.com,A,NOERROR,10.10.2.131, +IT-WS-032,2026-02-14T11:50:24.021Z,1337x.to,MX,SERVFAIL,10.10.3.132, +IT-WS-032,2026-02-12T23:16:23.560Z,stackoverflow.com,A,NOERROR,10.10.3.132,86.138.62.50 +IT-WS-032,2026-02-14T20:41:15.490Z,acme.sharepoint.com,CNAME,NOERROR,10.10.3.132, +IT-WS-032,2026-02-18T16:01:51.811Z,cloudflare.com,A,NOERROR,10.10.3.132,179.163.59.113 +IT-WS-032,2026-02-17T06:44:44.461Z,graph.microsoft.com,A,NXDOMAIN,10.10.3.132,145.30.168.46 +IT-WS-032,2026-02-16T12:09:43.851Z,dc-02.acme.local,AAAA,NOERROR,10.10.3.132,221.59.52.167 +IT-WS-032,2026-02-16T09:43:27.145Z,googleapis.com,TXT,NOERROR,10.10.3.132,75.56.145.2 +IT-WS-032,2026-02-18T19:53:30.687Z,acme.sharepoint.com,CNAME,NXDOMAIN,10.10.3.132,149.97.61.73 +IT-WS-032,2026-02-13T16:21:42.689Z,stackoverflow.com,A,NOERROR,10.10.3.132,211.15.55.116 +IT-WS-032,2026-02-11T22:02:12.128Z,outlook.office365.com,TXT,SERVFAIL,10.10.3.132,180.157.223.159 +IT-WS-032,2026-02-20T08:05:20.682Z,npmjs.com,MX,NXDOMAIN,10.10.3.132,77.37.75.119 +IT-WS-032,2026-02-11T15:09:21.828Z,cloudflare.com,A,NXDOMAIN,10.10.3.132,172.167.52.234 +IT-WS-032,2026-02-17T13:27:43.826Z,dc-01.acme.local,TXT,NOERROR,10.10.3.132,81.97.76.185 +IT-WS-032,2026-02-10T14:21:32.773Z,www.linkedin.com/jobs,A,NOERROR,10.10.3.132, +IT-WS-032,2026-02-12T14:25:55.472Z,update.microsoft.com,CNAME,NXDOMAIN,10.10.3.132,137.87.120.75 +IT-WS-032,2026-02-20T01:31:17.554Z,dc-01.acme.local,A,NOERROR,10.10.3.132, +IT-WS-032,2026-02-14T10:38:02.417Z,dc-01.acme.local,MX,NXDOMAIN,10.10.3.132,162.124.80.3 +IT-WS-032,2026-02-12T21:43:27.323Z,file-01.acme.local,A,NOERROR,10.10.3.132, +IT-WS-032,2026-02-18T15:57:37.391Z,cdn.jsdelivr.net,A,NXDOMAIN,10.10.3.132,8.159.68.159 +IT-WS-032,2026-02-17T02:57:11.519Z,acme.sharepoint.com,A,SERVFAIL,10.10.3.132,127.218.202.233 +IT-WS-032,2026-02-20T10:50:06.983Z,outlook.office365.com,A,NXDOMAIN,10.10.3.132,35.38.20.115 +IT-WS-032,2026-02-18T14:22:22.537Z,windowsupdate.com,A,NOERROR,10.10.3.132, +IT-WS-032,2026-02-10T16:56:55.998Z,time.windows.com,A,NOERROR,10.10.3.132,5.252.74.73 +IT-WS-032,2026-02-13T22:09:58.782Z,update.microsoft.com,AAAA,NXDOMAIN,10.10.3.132,17.223.106.152 +IT-WS-032,2026-02-18T04:06:50.165Z,stackoverflow.com,A,NOERROR,10.10.3.132,82.94.112.143 +IT-WS-032,2026-02-12T02:18:53.538Z,google.com,TXT,SERVFAIL,10.10.3.132, +IT-WS-032,2026-02-20T10:33:41.714Z,acme.sharepoint.com,A,NOERROR,10.10.3.132,118.218.10.123 +IT-WS-032,2026-02-13T04:32:57.493Z,outlook.office365.com,A,NOERROR,10.10.3.132,117.118.40.134 +IT-WS-032,2026-02-16T08:42:11.930Z,exch-01.acme.local,A,NOERROR,10.10.3.132,175.95.41.167 +IT-WS-032,2026-02-13T14:06:55.290Z,acme.local,MX,NOERROR,10.10.3.132,209.240.1.127 +IT-WS-032,2026-02-17T20:48:12.832Z,login.microsoftonline.com,TXT,NOERROR,10.10.3.132,169.204.101.201 +IT-WS-032,2026-02-15T14:08:31.896Z,github.com,A,NXDOMAIN,10.10.3.132, +IT-WS-032,2026-02-20T01:35:27.538Z,www.reddit.com,A,NOERROR,10.10.3.132,92.37.131.142 +IT-WS-032,2026-02-13T05:28:33.581Z,exch-01.acme.local,AAAA,NOERROR,10.10.3.132,150.170.172.26 +IT-WS-032,2026-02-17T16:59:43.830Z,acme.sharepoint.com,A,NOERROR,10.10.3.132,90.150.49.149 +IT-WS-032,2026-02-17T12:11:28.063Z,akamai.net,A,NOERROR,10.10.3.132, +IT-WS-032,2026-02-13T21:39:22.399Z,dc-02.acme.local,A,NOERROR,10.10.3.132,207.219.117.103 +IT-WS-032,2026-02-10T10:27:14.780Z,cloudflare.com,A,NOERROR,10.10.3.132,65.33.251.61 +IT-WS-032,2026-02-11T19:10:00.119Z,update.microsoft.com,CNAME,NOERROR,10.10.3.132,180.249.238.223 +IT-WS-032,2026-02-20T16:15:42.209Z,outlook.office365.com,AAAA,NOERROR,10.10.3.132,212.57.71.133 +IT-WS-032,2026-02-19T13:42:38.688Z,draftkings.com,A,SERVFAIL,10.10.3.132,168.117.180.242 +IT-WS-032,2026-02-14T22:46:48.262Z,akamai.net,A,NOERROR,10.10.3.132,211.61.36.232 +IT-WS-032,2026-02-20T04:59:51.721Z,file-01.acme.local,MX,NOERROR,10.10.3.132,128.111.36.23 +IT-WS-032,2026-02-12T19:39:04.976Z,acme.sharepoint.com,A,NOERROR,10.10.3.132,129.206.82.250 +IT-WS-032,2026-02-17T23:00:02.962Z,stackoverflow.com,CNAME,SERVFAIL,10.10.3.132,173.13.13.61 +IT-WS-032,2026-02-11T07:52:52.305Z,google.com,A,NOERROR,10.10.3.132,107.152.190.184 +IT-WS-032,2026-02-19T21:25:25.742Z,pokerstars.com,AAAA,NOERROR,10.10.3.132,78.38.129.7 +IT-WS-032,2026-02-10T19:23:07.058Z,cdn.jsdelivr.net,TXT,NOERROR,10.10.3.132,17.217.240.137 +IT-WS-032,2026-02-12T07:53:24.041Z,aws.amazon.com,A,NOERROR,10.10.3.132,156.244.5.54 +IT-WS-032,2026-02-13T06:01:33.859Z,login.microsoftonline.com,A,NOERROR,10.10.3.132,66.109.104.79 +IT-WS-032,2026-02-10T18:50:48.929Z,graph.microsoft.com,CNAME,NOERROR,10.10.3.132,207.10.150.216 +IT-WS-032,2026-02-10T10:59:48.231Z,teams.microsoft.com,CNAME,NOERROR,10.10.3.132, +IT-WS-032,2026-02-13T19:29:22.260Z,exch-01.acme.local,A,NXDOMAIN,10.10.3.132,35.24.241.195 +IT-WS-032,2026-02-17T11:09:29.276Z,update.microsoft.com,AAAA,NOERROR,10.10.3.132,92.216.237.34 +IT-WS-032,2026-02-14T06:26:35.572Z,pypi.org,A,NOERROR,10.10.3.132,205.254.232.126 +HR-WS-033,2026-02-19T21:27:22.232Z,cdn.jsdelivr.net,A,NOERROR,10.10.1.133,123.237.39.33 +HR-WS-033,2026-02-15T22:15:40.314Z,cloudflare.com,TXT,SERVFAIL,10.10.1.133,117.82.21.72 +HR-WS-033,2026-02-10T17:42:31.371Z,acme.local,CNAME,NOERROR,10.10.1.133,82.174.209.238 +HR-WS-033,2026-02-17T01:18:00.393Z,teams.microsoft.com,A,NXDOMAIN,10.10.1.133,58.143.58.138 +HR-WS-033,2026-02-10T15:39:18.963Z,akamai.net,TXT,NXDOMAIN,10.10.1.133,187.20.126.161 +HR-WS-033,2026-02-13T22:57:32.374Z,graph.microsoft.com,MX,NOERROR,10.10.1.133,159.98.54.197 +HR-WS-033,2026-02-13T17:19:20.426Z,aws.amazon.com,A,NXDOMAIN,10.10.1.133,9.185.142.212 +HR-WS-033,2026-02-18T07:48:06.633Z,acme.sharepoint.com,TXT,NOERROR,10.10.1.133,173.161.128.8 +HR-WS-033,2026-02-15T17:08:25.902Z,acme.local,A,NXDOMAIN,10.10.1.133,3.71.27.190 +HR-WS-033,2026-02-11T02:40:33.087Z,aws.amazon.com,CNAME,NOERROR,10.10.1.133,169.142.95.15 +HR-WS-033,2026-02-14T01:45:37.231Z,exch-01.acme.local,A,NOERROR,10.10.1.133,194.112.163.69 +HR-WS-033,2026-02-15T00:32:38.030Z,outlook.office365.com,TXT,SERVFAIL,10.10.1.133,117.239.84.165 +HR-WS-033,2026-02-20T11:44:19.110Z,update.microsoft.com,A,NOERROR,10.10.1.133,9.19.233.200 +HR-WS-033,2026-02-10T10:17:13.965Z,akamai.net,CNAME,NOERROR,10.10.1.133,159.158.253.195 +HR-WS-033,2026-02-18T11:34:22.024Z,graph.microsoft.com,CNAME,NXDOMAIN,10.10.1.133, +HR-WS-033,2026-02-15T10:56:43.161Z,akamai.net,A,NOERROR,10.10.1.133,72.48.11.244 +HR-WS-033,2026-02-16T01:59:16.592Z,dc-02.acme.local,MX,NXDOMAIN,10.10.1.133, +HR-WS-033,2026-02-11T21:14:01.390Z,dc-01.acme.local,MX,NOERROR,10.10.1.133,77.254.30.179 +HR-WS-033,2026-02-14T15:36:25.273Z,google.com,A,NOERROR,10.10.1.133,31.237.238.200 +HR-WS-033,2026-02-11T23:15:27.157Z,hulu.com,MX,NOERROR,10.10.1.133,169.150.114.202 +HR-WS-033,2026-02-12T21:04:06.545Z,cdn.jsdelivr.net,CNAME,NXDOMAIN,10.10.1.133,198.247.131.154 +HR-WS-033,2026-02-10T22:57:37.702Z,akamai.net,AAAA,NOERROR,10.10.1.133,59.51.237.114 +HR-WS-033,2026-02-20T01:22:28.796Z,npmjs.com,TXT,NOERROR,10.10.1.133,216.82.145.120 +HR-WS-033,2026-02-11T14:18:10.778Z,www.tiktok.com,A,NOERROR,10.10.1.133, +HR-WS-033,2026-02-12T21:15:54.910Z,dc-02.acme.local,AAAA,NOERROR,10.10.1.133,92.194.190.25 +HR-WS-033,2026-02-12T01:30:46.004Z,graph.microsoft.com,CNAME,SERVFAIL,10.10.1.133, +HR-WS-033,2026-02-10T13:23:36.552Z,outlook.office365.com,CNAME,NOERROR,10.10.1.133,118.138.101.187 +HR-WS-033,2026-02-19T14:04:29.474Z,exch-01.acme.local,A,NXDOMAIN,10.10.1.133,209.169.107.98 +HR-WS-033,2026-02-19T10:50:05.293Z,teams.microsoft.com,A,NOERROR,10.10.1.133,19.172.132.28 +HR-WS-033,2026-02-16T11:58:05.368Z,graph.microsoft.com,A,NOERROR,10.10.1.133, +HR-WS-033,2026-02-12T21:57:41.927Z,store.steampowered.com,MX,SERVFAIL,10.10.1.133,201.16.184.224 +HR-WS-033,2026-02-20T12:26:33.722Z,teams.microsoft.com,CNAME,NOERROR,10.10.1.133, +HR-WS-033,2026-02-17T03:29:47.251Z,cdn.jsdelivr.net,AAAA,NOERROR,10.10.1.133,144.135.69.81 +HR-WS-033,2026-02-11T14:55:24.205Z,graph.microsoft.com,MX,NOERROR,10.10.1.133,81.159.138.189 +HR-WS-033,2026-02-11T05:19:04.018Z,time.windows.com,CNAME,NOERROR,10.10.1.133,113.162.78.103 +HR-WS-033,2026-02-16T20:12:59.430Z,aws.amazon.com,A,SERVFAIL,10.10.1.133, +HR-WS-033,2026-02-18T20:15:24.817Z,googleapis.com,A,NOERROR,10.10.1.133,47.98.68.50 +HR-WS-033,2026-02-16T12:17:25.687Z,exch-01.acme.local,A,NOERROR,10.10.1.133,178.105.170.225 +HR-WS-033,2026-02-15T17:28:04.409Z,npmjs.com,CNAME,NOERROR,10.10.1.133,127.161.23.224 +HR-WS-033,2026-02-15T15:07:12.239Z,akamai.net,TXT,NXDOMAIN,10.10.1.133,93.132.150.234 +HR-WS-033,2026-02-13T06:07:28.880Z,windowsupdate.com,A,NXDOMAIN,10.10.1.133,124.129.146.200 +HR-WS-033,2026-02-14T09:37:46.512Z,googleapis.com,A,SERVFAIL,10.10.1.133,79.218.144.207 +FIN-WS-034,2026-02-14T08:37:58.892Z,www.bet365.com,TXT,SERVFAIL,10.10.2.134,100.152.222.33 +FIN-WS-034,2026-02-15T02:22:07.018Z,akamai.net,A,NOERROR,10.10.2.134,128.236.116.202 +FIN-WS-034,2026-02-13T23:54:32.613Z,google.com,A,NOERROR,10.10.2.134,98.10.51.36 +FIN-WS-034,2026-02-10T14:05:21.583Z,dc-01.acme.local,AAAA,NOERROR,10.10.2.134,91.101.222.12 +FIN-WS-034,2026-02-10T23:06:41.914Z,onlyfans.com,A,SERVFAIL,10.10.2.134,209.113.72.216 +FIN-WS-034,2026-02-15T05:11:01.247Z,dc-01.acme.local,MX,SERVFAIL,10.10.2.134, +FIN-WS-034,2026-02-17T07:06:25.940Z,exch-01.acme.local,A,NOERROR,10.10.2.134,76.103.63.176 +FIN-WS-034,2026-02-12T14:24:05.957Z,outlook.office365.com,CNAME,NOERROR,10.10.2.134,60.152.126.173 +FIN-WS-034,2026-02-20T01:36:19.797Z,npmjs.com,CNAME,NOERROR,10.10.2.134,118.183.79.176 +FIN-WS-034,2026-02-11T06:42:04.835Z,stackoverflow.com,A,NXDOMAIN,10.10.2.134,68.212.134.87 +FIN-WS-034,2026-02-16T15:07:27.251Z,dc-02.acme.local,A,NOERROR,10.10.2.134,91.233.59.45 +FIN-WS-034,2026-02-17T21:24:43.033Z,acme.sharepoint.com,MX,NOERROR,10.10.2.134,221.73.224.187 +FIN-WS-034,2026-02-11T17:10:50.480Z,hulu.com,AAAA,NOERROR,10.10.2.134,42.109.106.101 +FIN-WS-034,2026-02-15T06:56:57.313Z,update.microsoft.com,A,NXDOMAIN,10.10.2.134,209.138.15.197 +FIN-WS-034,2026-02-13T05:32:28.449Z,outlook.office365.com,MX,NOERROR,10.10.2.134,26.41.83.142 +FIN-WS-034,2026-02-11T03:51:49.589Z,npmjs.com,A,NOERROR,10.10.2.134,35.67.82.10 +FIN-WS-034,2026-02-13T08:59:18.245Z,aws.amazon.com,A,NOERROR,10.10.2.134,44.69.226.200 +FIN-WS-034,2026-02-15T10:35:31.331Z,stackoverflow.com,A,NOERROR,10.10.2.134, +SLS-WS-035,2026-02-13T02:14:55.294Z,time.windows.com,A,NOERROR,10.10.3.135,117.99.68.184 +SLS-WS-035,2026-02-16T15:58:40.095Z,acme.sharepoint.com,A,SERVFAIL,10.10.3.135, +SLS-WS-035,2026-02-11T13:55:24.327Z,exch-01.acme.local,A,NOERROR,10.10.3.135,126.225.84.18 +SLS-WS-035,2026-02-16T20:39:36.323Z,aws.amazon.com,A,SERVFAIL,10.10.3.135,146.195.175.56 +SLS-WS-035,2026-02-14T02:17:52.982Z,teams.microsoft.com,CNAME,NXDOMAIN,10.10.3.135,7.182.92.2 +SLS-WS-035,2026-02-12T08:38:10.869Z,google.com,TXT,NXDOMAIN,10.10.3.135,171.185.26.122 +SLS-WS-035,2026-02-15T04:46:05.395Z,acme.local,A,NOERROR,10.10.3.135, +SLS-WS-035,2026-02-20T15:13:33.640Z,pypi.org,CNAME,NOERROR,10.10.3.135,133.174.26.229 +SLS-WS-035,2026-02-17T11:05:27.469Z,windowsupdate.com,MX,NOERROR,10.10.3.135,213.13.76.106 +SLS-WS-035,2026-02-10T08:03:52.833Z,login.microsoftonline.com,A,NXDOMAIN,10.10.3.135, +SLS-WS-035,2026-02-16T21:03:50.081Z,www.linkedin.com/jobs,A,NOERROR,10.10.3.135,32.142.177.47 +SLS-WS-035,2026-02-17T14:55:08.663Z,aws.amazon.com,TXT,NXDOMAIN,10.10.3.135,34.120.107.20 +SLS-WS-035,2026-02-19T18:43:59.687Z,cloudflare.com,TXT,SERVFAIL,10.10.3.135,90.58.235.93 +SLS-WS-035,2026-02-10T15:23:20.494Z,cloudflare.com,AAAA,NOERROR,10.10.3.135, +SLS-WS-035,2026-02-15T22:36:26.046Z,npmjs.com,A,NXDOMAIN,10.10.3.135,155.144.34.120 +SLS-WS-035,2026-02-20T06:41:09.253Z,windowsupdate.com,A,NOERROR,10.10.3.135, +SLS-WS-035,2026-02-10T19:46:11.395Z,login.microsoftonline.com,TXT,SERVFAIL,10.10.3.135,167.178.248.84 +SLS-WS-035,2026-02-13T20:31:15.959Z,google.com,A,SERVFAIL,10.10.3.135,193.49.155.86 +SLS-WS-035,2026-02-18T23:12:40.547Z,www.glassdoor.com,MX,NOERROR,10.10.3.135,101.211.149.174 +SLS-WS-035,2026-02-12T04:29:43.255Z,cdn.jsdelivr.net,MX,NOERROR,10.10.3.135, +SLS-WS-035,2026-02-18T07:47:34.852Z,dc-02.acme.local,AAAA,NOERROR,10.10.3.135,58.138.165.234 +SLS-WS-035,2026-02-13T00:48:45.301Z,www.ebay.com,MX,NOERROR,10.10.3.135, +SLS-WS-035,2026-02-17T05:35:59.136Z,dc-01.acme.local,CNAME,SERVFAIL,10.10.3.135,220.146.54.109 +SLS-WS-035,2026-02-18T04:02:21.201Z,time.windows.com,MX,NXDOMAIN,10.10.3.135,9.226.214.145 +SLS-WS-035,2026-02-19T16:35:34.277Z,time.windows.com,CNAME,SERVFAIL,10.10.3.135,70.38.44.14 +SLS-WS-035,2026-02-15T02:25:57.221Z,stackoverflow.com,AAAA,NXDOMAIN,10.10.3.135,24.229.120.168 +SLS-WS-035,2026-02-16T16:47:15.143Z,google.com,CNAME,NOERROR,10.10.3.135,14.37.81.72 +SLS-WS-035,2026-02-14T19:47:24.094Z,graph.microsoft.com,CNAME,NOERROR,10.10.3.135,153.75.132.252 +SLS-WS-035,2026-02-16T00:38:43.644Z,cdn.jsdelivr.net,CNAME,NXDOMAIN,10.10.3.135, +SLS-WS-035,2026-02-16T11:17:42.477Z,www.linkedin.com/jobs,MX,NOERROR,10.10.3.135, +SLS-WS-035,2026-02-14T05:19:02.913Z,cdn.jsdelivr.net,A,SERVFAIL,10.10.3.135, +SLS-WS-035,2026-02-19T17:41:29.903Z,time.windows.com,AAAA,NOERROR,10.10.3.135,199.112.81.121 +SLS-WS-035,2026-02-18T10:04:43.003Z,file-01.acme.local,A,NOERROR,10.10.3.135,124.94.37.40 +SLS-WS-035,2026-02-10T14:42:57.536Z,login.microsoftonline.com,A,NOERROR,10.10.3.135,130.178.58.95 +SLS-WS-035,2026-02-13T12:14:01.166Z,time.windows.com,CNAME,NXDOMAIN,10.10.3.135,2.0.170.235 +SLS-WS-035,2026-02-12T13:12:51.658Z,google.com,A,SERVFAIL,10.10.3.135, +SLS-WS-035,2026-02-12T10:32:46.168Z,login.microsoftonline.com,CNAME,NOERROR,10.10.3.135,63.207.173.168 +SLS-WS-035,2026-02-15T16:53:44.481Z,googleapis.com,MX,SERVFAIL,10.10.3.135,174.227.225.209 +SLS-WS-035,2026-02-18T16:19:01.324Z,pypi.org,MX,NOERROR,10.10.3.135, +SLS-WS-035,2026-02-11T08:49:41.844Z,github.com,CNAME,NOERROR,10.10.3.135,114.16.26.201 +SLS-WS-035,2026-02-11T03:50:10.379Z,googleapis.com,A,NXDOMAIN,10.10.3.135,73.100.198.144 +SLS-WS-035,2026-02-17T22:03:07.906Z,akamai.net,A,NXDOMAIN,10.10.3.135,180.234.223.48 +SLS-WS-035,2026-02-19T15:00:31.603Z,exch-01.acme.local,A,NXDOMAIN,10.10.3.135,214.3.166.66 +SLS-WS-035,2026-02-14T21:16:54.056Z,npmjs.com,A,SERVFAIL,10.10.3.135, +SLS-WS-035,2026-02-13T12:54:05.558Z,pypi.org,CNAME,NOERROR,10.10.3.135,93.119.32.65 +SLS-WS-035,2026-02-16T15:05:25.840Z,www.shein.com,TXT,NXDOMAIN,10.10.3.135, +SLS-WS-035,2026-02-17T11:30:44.445Z,dc-01.acme.local,AAAA,NOERROR,10.10.3.135,35.104.112.148 +SLS-WS-035,2026-02-19T16:15:48.218Z,npmjs.com,A,NOERROR,10.10.3.135, +SLS-WS-035,2026-02-10T11:34:28.665Z,login.microsoftonline.com,A,NOERROR,10.10.3.135,36.3.148.184 +SLS-WS-035,2026-02-13T00:38:30.740Z,npmjs.com,A,NOERROR,10.10.3.135,204.247.36.94 +SLS-WS-035,2026-02-13T02:28:46.711Z,akamai.net,A,NXDOMAIN,10.10.3.135,98.199.3.76 +SLS-WS-035,2026-02-16T11:16:26.850Z,google.com,AAAA,SERVFAIL,10.10.3.135, +SLS-WS-035,2026-02-18T20:41:53.442Z,www.amazon.com,CNAME,NOERROR,10.10.3.135,103.251.230.193 +SLS-WS-035,2026-02-18T20:06:19.421Z,exch-01.acme.local,A,NXDOMAIN,10.10.3.135,221.128.246.250 +ENG-WS-036,2026-02-11T15:25:50.040Z,fitgirl-repacks.site,TXT,NOERROR,10.10.1.136,36.223.159.85 +ENG-WS-036,2026-02-11T01:39:08.676Z,windowsupdate.com,CNAME,NOERROR,10.10.1.136,160.253.68.152 +ENG-WS-036,2026-02-20T17:01:01.308Z,pypi.org,MX,NOERROR,10.10.1.136,71.72.85.2 +ENG-WS-036,2026-02-17T14:57:28.421Z,akamai.net,CNAME,NOERROR,10.10.1.136,156.87.239.201 +ENG-WS-036,2026-02-15T19:32:47.876Z,aws.amazon.com,A,NOERROR,10.10.1.136, +ENG-WS-036,2026-02-11T18:55:23.366Z,pypi.org,MX,NXDOMAIN,10.10.1.136,10.125.83.205 +ENG-WS-036,2026-02-12T21:47:34.537Z,dc-01.acme.local,AAAA,NOERROR,10.10.1.136,49.122.123.211 +ENG-WS-036,2026-02-11T11:07:24.799Z,draftkings.com,A,SERVFAIL,10.10.1.136,6.205.181.65 +ENG-WS-036,2026-02-13T21:47:04.332Z,file-01.acme.local,MX,NOERROR,10.10.1.136,179.148.182.40 +ENG-WS-036,2026-02-13T21:54:02.526Z,graph.microsoft.com,CNAME,NOERROR,10.10.1.136,118.129.177.117 +ENG-WS-036,2026-02-12T12:46:48.835Z,npmjs.com,A,NXDOMAIN,10.10.1.136,140.102.233.183 +ENG-WS-036,2026-02-12T20:23:02.307Z,akamai.net,CNAME,NXDOMAIN,10.10.1.136,159.221.126.169 +ENG-WS-036,2026-02-17T18:00:43.374Z,google.com,TXT,NOERROR,10.10.1.136,191.223.128.18 +ENG-WS-036,2026-02-19T22:51:21.290Z,google.com,CNAME,NXDOMAIN,10.10.1.136,178.62.56.199 +ENG-WS-036,2026-02-11T16:13:38.174Z,stackoverflow.com,A,NXDOMAIN,10.10.1.136,79.240.215.181 +ENG-WS-036,2026-02-12T08:58:53.573Z,googleapis.com,A,SERVFAIL,10.10.1.136,111.185.59.125 +ENG-WS-036,2026-02-12T07:48:35.377Z,cdn.jsdelivr.net,MX,SERVFAIL,10.10.1.136,156.24.46.209 +ENG-WS-036,2026-02-17T03:44:41.044Z,update.microsoft.com,A,NXDOMAIN,10.10.1.136,156.29.160.220 +ENG-WS-036,2026-02-19T07:58:07.093Z,akamai.net,A,NOERROR,10.10.1.136, +ENG-WS-036,2026-02-11T23:42:40.896Z,cdn.jsdelivr.net,AAAA,NOERROR,10.10.1.136,206.187.38.147 +ENG-WS-036,2026-02-19T16:45:33.211Z,open.spotify.com,A,NXDOMAIN,10.10.1.136, +ENG-WS-036,2026-02-14T16:16:05.185Z,dc-01.acme.local,AAAA,NOERROR,10.10.1.136, +ENG-WS-036,2026-02-14T14:00:30.886Z,stackoverflow.com,A,NOERROR,10.10.1.136,174.180.18.134 +ENG-WS-036,2026-02-17T22:56:53.883Z,acme.sharepoint.com,MX,NOERROR,10.10.1.136,173.46.141.4 +ENG-WS-036,2026-02-15T11:37:44.395Z,aws.amazon.com,CNAME,SERVFAIL,10.10.1.136,215.145.33.173 +ENG-WS-036,2026-02-10T23:19:19.468Z,windowsupdate.com,CNAME,SERVFAIL,10.10.1.136,193.177.25.125 +ENG-WS-036,2026-02-18T05:59:30.198Z,login.microsoftonline.com,A,SERVFAIL,10.10.1.136,222.126.94.132 +ENG-WS-036,2026-02-16T23:54:45.926Z,www.indeed.com,TXT,SERVFAIL,10.10.1.136,7.71.135.70 +ENG-WS-036,2026-02-11T05:30:35.092Z,www.netflix.com,TXT,NOERROR,10.10.1.136,25.89.120.174 +ENG-WS-036,2026-02-12T20:22:53.540Z,time.windows.com,AAAA,NXDOMAIN,10.10.1.136,165.112.250.112 +ENG-WS-036,2026-02-14T22:12:32.420Z,dc-01.acme.local,A,NXDOMAIN,10.10.1.136, +ENG-WS-036,2026-02-13T20:23:17.911Z,acme.local,CNAME,SERVFAIL,10.10.1.136,74.239.49.47 +ENG-WS-036,2026-02-14T18:59:51.614Z,stackoverflow.com,CNAME,NOERROR,10.10.1.136,205.65.136.46 +ENG-WS-036,2026-02-19T00:04:01.891Z,outlook.office365.com,A,NOERROR,10.10.1.136, +ENG-WS-036,2026-02-19T13:10:32.027Z,acme.sharepoint.com,A,NOERROR,10.10.1.136,146.25.223.41 +ENG-WS-036,2026-02-20T11:06:29.577Z,google.com,A,NOERROR,10.10.1.136,74.228.242.49 +ENG-WS-036,2026-02-11T01:28:03.691Z,googleapis.com,AAAA,SERVFAIL,10.10.1.136,222.22.113.116 +ENG-WS-036,2026-02-16T14:07:42.763Z,time.windows.com,AAAA,NXDOMAIN,10.10.1.136,63.185.161.119 +ENG-WS-036,2026-02-20T05:14:01.497Z,teams.microsoft.com,A,NOERROR,10.10.1.136, +ENG-WS-036,2026-02-20T03:06:11.246Z,stackoverflow.com,AAAA,NOERROR,10.10.1.136, +LEG-WS-037,2026-02-17T20:24:40.086Z,aws.amazon.com,CNAME,SERVFAIL,10.10.2.137, +LEG-WS-037,2026-02-19T00:32:24.209Z,open.spotify.com,AAAA,NXDOMAIN,10.10.2.137,56.200.136.75 +LEG-WS-037,2026-02-18T03:11:13.832Z,windowsupdate.com,TXT,NXDOMAIN,10.10.2.137,65.75.80.177 +LEG-WS-037,2026-02-10T09:51:49.952Z,time.windows.com,A,NXDOMAIN,10.10.2.137,43.226.203.184 +LEG-WS-037,2026-02-11T23:18:09.505Z,file-01.acme.local,TXT,NOERROR,10.10.2.137,130.228.163.172 +LEG-WS-037,2026-02-16T14:23:46.325Z,outlook.office365.com,AAAA,NOERROR,10.10.2.137,96.111.20.4 +LEG-WS-037,2026-02-19T16:52:41.149Z,pokerstars.com,A,NXDOMAIN,10.10.2.137,36.175.217.166 +LEG-WS-037,2026-02-19T13:10:37.914Z,cdn.jsdelivr.net,CNAME,NXDOMAIN,10.10.2.137,106.61.245.43 +LEG-WS-037,2026-02-20T08:58:54.303Z,dc-02.acme.local,A,NOERROR,10.10.2.137,71.215.110.57 +LEG-WS-037,2026-02-18T21:00:40.852Z,dc-02.acme.local,CNAME,NXDOMAIN,10.10.2.137,136.145.33.86 +LEG-WS-037,2026-02-17T23:42:42.249Z,stackoverflow.com,CNAME,NOERROR,10.10.2.137,127.104.160.250 +LEG-WS-037,2026-02-18T20:24:23.184Z,teams.microsoft.com,TXT,NOERROR,10.10.2.137, +LEG-WS-037,2026-02-14T10:58:14.973Z,pypi.org,A,NXDOMAIN,10.10.2.137,210.184.209.84 +LEG-WS-037,2026-02-10T18:26:37.521Z,login.microsoftonline.com,A,NOERROR,10.10.2.137,115.161.78.47 +LEG-WS-037,2026-02-18T00:11:27.111Z,github.com,TXT,NOERROR,10.10.2.137,23.4.81.48 +LEG-WS-037,2026-02-13T17:31:00.924Z,update.microsoft.com,A,NOERROR,10.10.2.137,123.188.101.117 +LEG-WS-037,2026-02-15T09:10:05.609Z,acme.local,MX,NOERROR,10.10.2.137,73.73.219.79 +LEG-WS-037,2026-02-16T18:42:24.828Z,windowsupdate.com,MX,NOERROR,10.10.2.137,57.249.79.46 +LEG-WS-037,2026-02-11T14:27:53.776Z,update.microsoft.com,TXT,NOERROR,10.10.2.137,194.76.159.229 +LEG-WS-037,2026-02-16T15:31:39.737Z,acme.sharepoint.com,AAAA,SERVFAIL,10.10.2.137,9.44.156.146 +LEG-WS-037,2026-02-16T03:14:52.729Z,update.microsoft.com,A,NXDOMAIN,10.10.2.137,174.168.101.155 +LEG-WS-037,2026-02-15T04:57:33.945Z,www.reddit.com,AAAA,NOERROR,10.10.2.137,104.234.12.13 +LEG-WS-037,2026-02-15T14:26:41.877Z,cdn.jsdelivr.net,CNAME,NOERROR,10.10.2.137,101.193.158.177 +LEG-WS-037,2026-02-20T00:19:16.401Z,stackoverflow.com,A,NOERROR,10.10.2.137,145.158.107.133 +LEG-WS-037,2026-02-19T11:41:56.763Z,windowsupdate.com,A,NOERROR,10.10.2.137,5.167.171.149 +LEG-WS-037,2026-02-14T18:47:36.280Z,aws.amazon.com,TXT,NXDOMAIN,10.10.2.137,97.194.74.54 +LEG-WS-037,2026-02-13T17:50:54.979Z,update.microsoft.com,A,NOERROR,10.10.2.137,162.155.211.236 +LEG-WS-037,2026-02-16T15:26:04.639Z,time.windows.com,AAAA,NXDOMAIN,10.10.2.137,187.138.239.46 +LEG-WS-037,2026-02-17T09:59:03.433Z,akamai.net,CNAME,NOERROR,10.10.2.137,111.213.203.27 +LEG-WS-037,2026-02-20T02:20:06.984Z,store.steampowered.com,CNAME,SERVFAIL,10.10.2.137,99.44.24.251 +LEG-WS-037,2026-02-14T10:57:50.032Z,npmjs.com,TXT,SERVFAIL,10.10.2.137,190.241.86.70 +LEG-WS-037,2026-02-19T15:32:00.150Z,cloudflare.com,CNAME,NOERROR,10.10.2.137,175.184.42.134 +LEG-WS-037,2026-02-17T16:49:08.738Z,cloudflare.com,MX,NOERROR,10.10.2.137,77.139.24.218 +LEG-WS-037,2026-02-12T16:57:52.311Z,google.com,A,NOERROR,10.10.2.137,140.126.14.32 +LEG-WS-037,2026-02-13T02:57:49.653Z,acme.sharepoint.com,MX,SERVFAIL,10.10.2.137, +LEG-WS-037,2026-02-15T11:29:23.631Z,acme.sharepoint.com,MX,SERVFAIL,10.10.2.137,64.1.46.199 +LEG-WS-037,2026-02-11T23:59:08.672Z,windowsupdate.com,A,NOERROR,10.10.2.137, +LEG-WS-037,2026-02-18T07:05:43.960Z,npmjs.com,AAAA,NOERROR,10.10.2.137, +LEG-WS-037,2026-02-11T08:51:05.553Z,googleapis.com,AAAA,NOERROR,10.10.2.137, +LEG-WS-037,2026-02-16T23:17:23.759Z,github.com,A,NOERROR,10.10.2.137,75.2.90.21 +LEG-WS-037,2026-02-12T05:53:51.882Z,outlook.office365.com,A,SERVFAIL,10.10.2.137,110.247.95.9 +LEG-WS-037,2026-02-16T19:36:22.627Z,windowsupdate.com,TXT,NOERROR,10.10.2.137,63.50.233.125 +LEG-WS-037,2026-02-19T18:00:43.837Z,github.com,A,NOERROR,10.10.2.137, +LEG-WS-037,2026-02-17T04:02:22.492Z,store.steampowered.com,A,NOERROR,10.10.2.137,97.175.108.211 +LEG-WS-037,2026-02-19T04:29:02.389Z,dc-02.acme.local,TXT,NOERROR,10.10.2.137,56.246.58.96 +LEG-WS-037,2026-02-13T07:10:10.383Z,file-01.acme.local,MX,NOERROR,10.10.2.137,30.58.238.250 +LEG-WS-037,2026-02-17T12:29:15.309Z,time.windows.com,MX,NOERROR,10.10.2.137, +LEG-WS-037,2026-02-19T18:31:42.242Z,windowsupdate.com,A,NOERROR,10.10.2.137, +LEG-WS-037,2026-02-20T15:48:57.317Z,akamai.net,A,SERVFAIL,10.10.2.137, +LEG-WS-037,2026-02-13T06:45:28.998Z,acme.sharepoint.com,A,SERVFAIL,10.10.2.137,46.104.85.29 +LEG-WS-037,2026-02-10T11:09:16.969Z,akamai.net,CNAME,SERVFAIL,10.10.2.137,55.91.135.179 +LEG-WS-037,2026-02-11T18:42:29.122Z,hulu.com,A,NOERROR,10.10.2.137, +LEG-WS-037,2026-02-14T02:14:11.360Z,windowsupdate.com,A,NOERROR,10.10.2.137,23.112.57.26 +LEG-WS-037,2026-02-13T22:34:50.160Z,googleapis.com,CNAME,NOERROR,10.10.2.137,191.110.85.228 +LEG-WS-037,2026-02-10T14:38:35.085Z,akamai.net,A,NOERROR,10.10.2.137,130.56.57.206 +LEG-WS-037,2026-02-18T14:39:58.942Z,cdn.jsdelivr.net,A,SERVFAIL,10.10.2.137,35.3.91.82 +LEG-WS-037,2026-02-15T14:48:00.910Z,www.netflix.com,A,NOERROR,10.10.2.137,111.226.119.200 +LEG-WS-037,2026-02-10T18:11:56.287Z,discord.gg,TXT,NOERROR,10.10.2.137, +LEG-WS-037,2026-02-12T12:10:44.147Z,file-01.acme.local,A,NOERROR,10.10.2.137,173.6.184.203 +LEG-WS-037,2026-02-15T18:28:35.290Z,cloudflare.com,A,NOERROR,10.10.2.137, +MKT-WS-038,2026-02-18T14:50:28.990Z,1337x.to,A,SERVFAIL,10.10.3.138,82.83.149.106 +MKT-WS-038,2026-02-10T23:34:16.272Z,cdn.jsdelivr.net,A,NXDOMAIN,10.10.3.138,112.231.251.13 +MKT-WS-038,2026-02-17T03:45:45.804Z,google.com,AAAA,NOERROR,10.10.3.138,101.139.150.213 +MKT-WS-038,2026-02-12T18:04:23.395Z,www.tiktok.com,CNAME,NOERROR,10.10.3.138, +MKT-WS-038,2026-02-12T01:44:58.135Z,cdn.jsdelivr.net,A,SERVFAIL,10.10.3.138,63.70.95.145 +MKT-WS-038,2026-02-16T00:47:09.146Z,www.ebay.com,AAAA,NOERROR,10.10.3.138, +MKT-WS-038,2026-02-10T23:48:09.839Z,discord.gg,AAAA,NOERROR,10.10.3.138, +MKT-WS-038,2026-02-15T21:32:27.134Z,github.com,A,SERVFAIL,10.10.3.138,94.15.91.78 +MKT-WS-038,2026-02-11T00:03:14.362Z,1337x.to,A,NXDOMAIN,10.10.3.138,213.139.243.206 +MKT-WS-038,2026-02-15T03:13:19.453Z,draftkings.com,A,NXDOMAIN,10.10.3.138,91.225.223.234 +MKT-WS-038,2026-02-20T06:01:55.704Z,github.com,A,NOERROR,10.10.3.138, +MKT-WS-038,2026-02-18T23:21:53.003Z,dc-01.acme.local,MX,SERVFAIL,10.10.3.138, +MKT-WS-038,2026-02-17T11:11:05.993Z,google.com,AAAA,SERVFAIL,10.10.3.138,134.61.31.234 +MKT-WS-038,2026-02-18T21:14:11.480Z,dc-01.acme.local,CNAME,NXDOMAIN,10.10.3.138,178.205.237.113 +MKT-WS-038,2026-02-16T10:07:04.296Z,teams.microsoft.com,CNAME,NOERROR,10.10.3.138,103.14.49.124 +MKT-WS-038,2026-02-18T13:32:13.238Z,steamcommunity.com,MX,NXDOMAIN,10.10.3.138,20.247.238.195 +MKT-WS-038,2026-02-19T13:04:39.040Z,update.microsoft.com,A,NOERROR,10.10.3.138,65.179.117.79 +MKT-WS-038,2026-02-14T22:06:25.078Z,windowsupdate.com,A,NOERROR,10.10.3.138,49.76.30.159 +MKT-WS-038,2026-02-16T11:00:50.442Z,aws.amazon.com,A,NOERROR,10.10.3.138,135.242.120.93 +MKT-WS-038,2026-02-12T03:39:46.480Z,pypi.org,MX,NOERROR,10.10.3.138,49.110.173.180 +MKT-WS-038,2026-02-16T20:45:14.299Z,akamai.net,AAAA,NOERROR,10.10.3.138, +MKT-WS-038,2026-02-16T07:49:53.587Z,acme.local,MX,NXDOMAIN,10.10.3.138, +MKT-WS-038,2026-02-13T13:05:01.316Z,npmjs.com,MX,NOERROR,10.10.3.138,69.69.232.64 +MKT-WS-038,2026-02-13T15:46:25.612Z,acme.local,A,NXDOMAIN,10.10.3.138,89.67.122.155 +MKT-WS-038,2026-02-16T02:12:51.319Z,www.shein.com,A,NXDOMAIN,10.10.3.138,202.79.242.64 +MKT-WS-038,2026-02-18T23:36:32.313Z,acme.local,A,NOERROR,10.10.3.138,100.80.28.219 +MKT-WS-038,2026-02-12T08:36:28.511Z,onlyfans.com,CNAME,NOERROR,10.10.3.138, +MKT-WS-038,2026-02-11T06:57:59.578Z,update.microsoft.com,MX,NOERROR,10.10.3.138,177.175.90.249 +MKT-WS-038,2026-02-14T12:17:16.385Z,acme.sharepoint.com,A,SERVFAIL,10.10.3.138,47.111.99.94 +MKT-WS-038,2026-02-13T04:59:04.205Z,dc-02.acme.local,CNAME,NOERROR,10.10.3.138,31.156.104.70 +MKT-WS-038,2026-02-11T05:00:47.447Z,update.microsoft.com,A,NXDOMAIN,10.10.3.138,148.135.150.254 +MKT-WS-038,2026-02-17T00:23:10.513Z,pypi.org,AAAA,NOERROR,10.10.3.138,137.153.91.220 +MKT-WS-038,2026-02-14T06:38:28.869Z,dc-02.acme.local,TXT,NOERROR,10.10.3.138,20.82.56.32 +MKT-WS-038,2026-02-13T04:16:39.664Z,stackoverflow.com,MX,SERVFAIL,10.10.3.138, +MKT-WS-038,2026-02-13T08:04:06.042Z,github.com,TXT,SERVFAIL,10.10.3.138,114.88.129.113 +MKT-WS-038,2026-02-12T13:36:06.905Z,file-01.acme.local,TXT,SERVFAIL,10.10.3.138,127.191.60.93 +EXEC-WS-039,2026-02-15T04:10:45.946Z,outlook.office365.com,A,NOERROR,10.10.1.139,167.38.112.220 +EXEC-WS-039,2026-02-12T04:21:19.948Z,googleapis.com,A,NOERROR,10.10.1.139, +EXEC-WS-039,2026-02-12T02:52:44.664Z,google.com,CNAME,NOERROR,10.10.1.139,7.46.71.65 +EXEC-WS-039,2026-02-19T18:01:20.136Z,dc-02.acme.local,AAAA,NXDOMAIN,10.10.1.139,175.196.86.79 +EXEC-WS-039,2026-02-20T14:56:47.427Z,outlook.office365.com,A,NOERROR,10.10.1.139,162.212.6.109 +EXEC-WS-039,2026-02-14T09:18:50.823Z,googleapis.com,A,NOERROR,10.10.1.139,222.211.124.192 +EXEC-WS-039,2026-02-16T15:47:02.330Z,dc-02.acme.local,A,NOERROR,10.10.1.139,204.32.251.154 +EXEC-WS-039,2026-02-10T17:14:36.674Z,aws.amazon.com,CNAME,NOERROR,10.10.1.139,218.136.224.22 +EXEC-WS-039,2026-02-11T09:35:37.722Z,login.microsoftonline.com,AAAA,NOERROR,10.10.1.139, +EXEC-WS-039,2026-02-11T04:20:56.984Z,acme.sharepoint.com,A,NOERROR,10.10.1.139,195.26.95.234 +EXEC-WS-039,2026-02-16T03:28:49.657Z,windowsupdate.com,A,SERVFAIL,10.10.1.139,203.116.68.29 +EXEC-WS-039,2026-02-16T02:32:45.767Z,outlook.office365.com,A,NOERROR,10.10.1.139,158.151.72.96 +EXEC-WS-039,2026-02-16T18:37:09.485Z,xvideos.com,A,NXDOMAIN,10.10.1.139,209.231.133.42 +EXEC-WS-039,2026-02-17T01:49:58.174Z,pokerstars.com,CNAME,NOERROR,10.10.1.139,70.69.131.101 +EXEC-WS-039,2026-02-12T15:42:34.178Z,www.facebook.com,MX,NOERROR,10.10.1.139,217.216.34.184 +EXEC-WS-039,2026-02-14T04:03:12.658Z,googleapis.com,TXT,NOERROR,10.10.1.139,182.139.233.250 +EXEC-WS-039,2026-02-17T14:22:56.233Z,pypi.org,AAAA,NXDOMAIN,10.10.1.139,156.87.117.8 +EXEC-WS-039,2026-02-15T07:27:54.402Z,pypi.org,MX,SERVFAIL,10.10.1.139,218.106.199.114 +EXEC-WS-039,2026-02-13T13:58:14.673Z,pypi.org,A,NOERROR,10.10.1.139, +EXEC-WS-039,2026-02-13T04:08:54.864Z,cloudflare.com,A,SERVFAIL,10.10.1.139, +EXEC-WS-039,2026-02-18T20:19:37.133Z,open.spotify.com,AAAA,SERVFAIL,10.10.1.139, +EXEC-WS-039,2026-02-18T01:31:07.148Z,stackoverflow.com,A,NOERROR,10.10.1.139,197.209.196.109 +EXEC-WS-039,2026-02-14T16:47:09.411Z,cloudflare.com,CNAME,NOERROR,10.10.1.139,101.8.248.84 +EXEC-WS-039,2026-02-11T05:46:05.309Z,windowsupdate.com,A,SERVFAIL,10.10.1.139,100.84.70.98 +EXEC-WS-039,2026-02-13T07:25:41.024Z,aws.amazon.com,A,SERVFAIL,10.10.1.139, +EXEC-WS-039,2026-02-13T22:18:29.181Z,dc-01.acme.local,CNAME,NOERROR,10.10.1.139,202.119.164.104 +EXEC-WS-039,2026-02-11T23:22:09.813Z,file-01.acme.local,CNAME,NOERROR,10.10.1.139,117.169.19.211 +EXEC-WS-039,2026-02-19T22:17:13.273Z,stackoverflow.com,CNAME,NOERROR,10.10.1.139,58.248.129.144 +EXEC-WS-039,2026-02-17T21:51:18.376Z,exch-01.acme.local,A,NOERROR,10.10.1.139,44.87.169.241 +EXEC-WS-039,2026-02-18T23:21:44.784Z,google.com,MX,NXDOMAIN,10.10.1.139,217.26.42.169 +IT-WS-040,2026-02-19T05:01:30.121Z,windowsupdate.com,A,NXDOMAIN,10.10.2.140,163.89.140.145 +IT-WS-040,2026-02-13T17:56:19.791Z,stackoverflow.com,AAAA,NOERROR,10.10.2.140,102.254.130.174 +IT-WS-040,2026-02-16T18:08:24.527Z,googleapis.com,AAAA,NOERROR,10.10.2.140,171.173.137.10 +IT-WS-040,2026-02-16T04:04:03.582Z,outlook.office365.com,A,NOERROR,10.10.2.140,183.42.65.73 +IT-WS-040,2026-02-18T00:56:56.125Z,googleapis.com,MX,NOERROR,10.10.2.140,178.174.35.182 +IT-WS-040,2026-02-20T03:23:49.646Z,akamai.net,A,NXDOMAIN,10.10.2.140,64.170.82.158 +IT-WS-040,2026-02-13T14:04:23.627Z,teams.microsoft.com,A,NXDOMAIN,10.10.2.140,6.138.30.131 +IT-WS-040,2026-02-14T11:28:05.161Z,login.microsoftonline.com,AAAA,NOERROR,10.10.2.140,105.39.35.135 +IT-WS-040,2026-02-15T12:00:23.644Z,npmjs.com,MX,NOERROR,10.10.2.140,167.195.178.155 +IT-WS-040,2026-02-17T04:45:10.517Z,acme.sharepoint.com,A,SERVFAIL,10.10.2.140, +IT-WS-040,2026-02-11T00:29:21.043Z,www.glassdoor.com,A,NXDOMAIN,10.10.2.140, +IT-WS-040,2026-02-12T17:51:06.422Z,akamai.net,TXT,NOERROR,10.10.2.140,23.154.127.108 +IT-WS-040,2026-02-10T21:33:19.384Z,stackoverflow.com,AAAA,NOERROR,10.10.2.140,51.44.113.121 +IT-WS-040,2026-02-10T20:04:11.388Z,google.com,AAAA,NOERROR,10.10.2.140, +IT-WS-040,2026-02-15T09:22:50.597Z,stackoverflow.com,A,NXDOMAIN,10.10.2.140,118.237.232.62 +IT-WS-040,2026-02-18T07:18:40.209Z,file-01.acme.local,MX,NXDOMAIN,10.10.2.140,90.152.169.159 +IT-WS-040,2026-02-12T22:32:54.691Z,acme.sharepoint.com,TXT,NOERROR,10.10.2.140,207.128.103.92 +IT-WS-040,2026-02-11T10:58:10.809Z,graph.microsoft.com,A,NOERROR,10.10.2.140,53.161.190.53 +IT-WS-040,2026-02-15T22:20:20.602Z,outlook.office365.com,A,NOERROR,10.10.2.140, +IT-WS-040,2026-02-20T04:32:56.986Z,aws.amazon.com,A,NOERROR,10.10.2.140,191.35.159.250 +IT-WS-040,2026-02-13T20:05:25.057Z,file-01.acme.local,A,NOERROR,10.10.2.140,37.192.128.5 +IT-WS-040,2026-02-10T11:33:05.167Z,stackoverflow.com,MX,NOERROR,10.10.2.140,82.63.152.79 +IT-WS-040,2026-02-14T21:14:41.492Z,pypi.org,A,NXDOMAIN,10.10.2.140,144.125.130.170 +IT-WS-040,2026-02-19T11:41:15.243Z,time.windows.com,TXT,NXDOMAIN,10.10.2.140,45.144.27.112 +IT-WS-040,2026-02-19T21:33:24.021Z,pypi.org,CNAME,NOERROR,10.10.2.140,41.117.184.130 +IT-WS-040,2026-02-15T03:31:27.288Z,cdn.jsdelivr.net,A,NOERROR,10.10.2.140,47.135.43.152 +IT-WS-040,2026-02-16T11:22:01.879Z,time.windows.com,CNAME,SERVFAIL,10.10.2.140,22.196.170.160 +IT-WS-040,2026-02-17T15:05:51.845Z,time.windows.com,CNAME,NOERROR,10.10.2.140,101.150.152.111 +IT-WS-040,2026-02-11T20:05:41.675Z,file-01.acme.local,A,SERVFAIL,10.10.2.140, +IT-WS-040,2026-02-12T02:28:07.518Z,exch-01.acme.local,A,NOERROR,10.10.2.140,219.192.253.138 +IT-WS-040,2026-02-15T11:25:39.451Z,dc-01.acme.local,A,NOERROR,10.10.2.140,121.249.177.196 +IT-WS-040,2026-02-13T11:18:55.043Z,www.amazon.com,MX,NOERROR,10.10.2.140,158.116.216.126 +IT-WS-040,2026-02-20T06:15:49.745Z,aws.amazon.com,A,NOERROR,10.10.2.140,179.14.29.205 +IT-WS-040,2026-02-11T03:10:46.024Z,akamai.net,MX,NOERROR,10.10.2.140,127.123.138.180 +IT-WS-040,2026-02-17T08:13:48.729Z,outlook.office365.com,A,NXDOMAIN,10.10.2.140, +IT-WS-040,2026-02-18T02:37:54.465Z,login.microsoftonline.com,TXT,SERVFAIL,10.10.2.140, +IT-WS-040,2026-02-14T08:20:07.063Z,teams.microsoft.com,CNAME,NOERROR,10.10.2.140,216.90.249.89 +IT-WS-040,2026-02-17T19:23:21.938Z,windowsupdate.com,A,NOERROR,10.10.2.140,195.204.250.176 +IT-WS-040,2026-02-19T22:06:23.524Z,file-01.acme.local,CNAME,NOERROR,10.10.2.140,101.35.177.92 +IT-WS-040,2026-02-17T13:08:31.795Z,graph.microsoft.com,CNAME,NXDOMAIN,10.10.2.140,21.215.212.144 +IT-WS-040,2026-02-20T13:05:18.288Z,dc-02.acme.local,TXT,NOERROR,10.10.2.140,192.122.198.65 +IT-WS-040,2026-02-13T21:24:31.607Z,login.microsoftonline.com,CNAME,NOERROR,10.10.2.140, +IT-WS-040,2026-02-12T14:46:15.187Z,teams.microsoft.com,TXT,NOERROR,10.10.2.140,49.95.67.67 +IT-WS-040,2026-02-15T15:41:23.835Z,teams.microsoft.com,CNAME,NXDOMAIN,10.10.2.140,18.65.41.243 +IT-WS-040,2026-02-14T19:24:50.961Z,time.windows.com,TXT,NXDOMAIN,10.10.2.140,80.198.248.142 +IT-WS-040,2026-02-16T06:46:01.563Z,pypi.org,A,SERVFAIL,10.10.2.140,105.101.43.147 +HR-WS-041,2026-02-13T22:52:34.048Z,outlook.office365.com,MX,NOERROR,10.10.3.141,53.199.93.47 +HR-WS-041,2026-02-17T22:56:37.219Z,googleapis.com,MX,NOERROR,10.10.3.141, +HR-WS-041,2026-02-11T17:32:08.779Z,store.steampowered.com,CNAME,NXDOMAIN,10.10.3.141,184.5.56.125 +HR-WS-041,2026-02-18T04:17:11.216Z,graph.microsoft.com,A,SERVFAIL,10.10.3.141,221.217.124.120 +HR-WS-041,2026-02-10T12:14:41.361Z,aws.amazon.com,TXT,NOERROR,10.10.3.141,58.198.2.108 +HR-WS-041,2026-02-12T08:09:43.355Z,windowsupdate.com,MX,NOERROR,10.10.3.141,121.105.180.126 +HR-WS-041,2026-02-16T19:05:07.564Z,github.com,CNAME,NOERROR,10.10.3.141,134.158.33.1 +HR-WS-041,2026-02-19T01:31:26.339Z,login.microsoftonline.com,A,NOERROR,10.10.3.141,191.81.240.53 +HR-WS-041,2026-02-13T13:08:04.182Z,steamcommunity.com,TXT,NOERROR,10.10.3.141,78.195.105.192 +HR-WS-041,2026-02-17T10:52:39.613Z,update.microsoft.com,AAAA,NOERROR,10.10.3.141,21.59.77.4 +HR-WS-041,2026-02-10T08:49:35.291Z,google.com,A,NXDOMAIN,10.10.3.141,173.168.211.248 +HR-WS-041,2026-02-16T04:32:43.783Z,teams.microsoft.com,AAAA,NOERROR,10.10.3.141,25.83.40.120 +HR-WS-041,2026-02-10T15:30:18.017Z,cloudflare.com,AAAA,NXDOMAIN,10.10.3.141,101.117.200.167 +HR-WS-041,2026-02-13T11:55:46.666Z,cloudflare.com,AAAA,SERVFAIL,10.10.3.141, +HR-WS-041,2026-02-20T05:54:51.316Z,stackoverflow.com,CNAME,SERVFAIL,10.10.3.141,87.5.98.52 +HR-WS-041,2026-02-16T16:46:39.471Z,pypi.org,A,NOERROR,10.10.3.141,154.142.15.214 +HR-WS-041,2026-02-12T14:40:36.881Z,exch-01.acme.local,A,NOERROR,10.10.3.141,28.102.79.182 +HR-WS-041,2026-02-11T15:32:09.967Z,file-01.acme.local,A,NXDOMAIN,10.10.3.141,85.212.231.213 +HR-WS-041,2026-02-13T21:34:33.237Z,www.linkedin.com/jobs,A,NOERROR,10.10.3.141, +HR-WS-041,2026-02-16T02:51:44.021Z,cdn.jsdelivr.net,MX,NOERROR,10.10.3.141, +HR-WS-041,2026-02-13T18:26:26.455Z,github.com,CNAME,SERVFAIL,10.10.3.141,139.36.182.41 +HR-WS-041,2026-02-20T07:03:00.241Z,cloudflare.com,AAAA,SERVFAIL,10.10.3.141,44.2.37.84 +HR-WS-041,2026-02-15T04:42:04.512Z,googleapis.com,MX,NXDOMAIN,10.10.3.141,23.125.204.186 +HR-WS-041,2026-02-14T22:06:57.117Z,fitgirl-repacks.site,A,NOERROR,10.10.3.141, +HR-WS-041,2026-02-20T07:42:06.145Z,windowsupdate.com,A,NXDOMAIN,10.10.3.141, +HR-WS-041,2026-02-17T04:08:14.000Z,file-01.acme.local,A,SERVFAIL,10.10.3.141,7.67.156.144 +HR-WS-041,2026-02-18T10:40:26.456Z,googleapis.com,AAAA,NOERROR,10.10.3.141,82.234.245.214 +HR-WS-041,2026-02-19T07:51:37.095Z,stackoverflow.com,A,NOERROR,10.10.3.141,138.223.175.161 +HR-WS-041,2026-02-17T16:45:30.477Z,outlook.office365.com,TXT,NOERROR,10.10.3.141,153.177.204.191 +HR-WS-041,2026-02-11T19:24:42.363Z,acme.sharepoint.com,AAAA,SERVFAIL,10.10.3.141,190.186.96.99 +HR-WS-041,2026-02-16T08:47:36.099Z,graph.microsoft.com,CNAME,NOERROR,10.10.3.141, +HR-WS-041,2026-02-14T07:42:55.440Z,stackoverflow.com,TXT,NOERROR,10.10.3.141,105.17.252.137 +HR-WS-041,2026-02-11T17:57:10.933Z,xvideos.com,A,NOERROR,10.10.3.141, +HR-WS-041,2026-02-19T23:36:14.674Z,acme.local,A,NOERROR,10.10.3.141,141.51.34.41 +HR-WS-041,2026-02-16T18:27:04.915Z,www.indeed.com,MX,NXDOMAIN,10.10.3.141,57.226.83.242 +HR-WS-041,2026-02-14T22:56:58.441Z,www.linkedin.com/jobs,CNAME,NOERROR,10.10.3.141,97.185.215.124 +HR-WS-041,2026-02-11T09:09:36.411Z,www.linkedin.com/jobs,A,NOERROR,10.10.3.141,169.166.251.207 +HR-WS-041,2026-02-16T11:14:17.920Z,acme.sharepoint.com,MX,NXDOMAIN,10.10.3.141, +HR-WS-041,2026-02-12T10:18:24.124Z,cdn.jsdelivr.net,AAAA,NOERROR,10.10.3.141,186.2.174.70 +HR-WS-041,2026-02-17T03:27:02.192Z,google.com,MX,NOERROR,10.10.3.141,13.181.219.137 +HR-WS-041,2026-02-13T18:37:44.270Z,windowsupdate.com,A,NOERROR,10.10.3.141,206.90.216.215 +HR-WS-041,2026-02-13T15:03:32.928Z,update.microsoft.com,MX,SERVFAIL,10.10.3.141,176.16.167.133 +FIN-WS-042,2026-02-18T10:53:42.455Z,teams.microsoft.com,MX,NOERROR,10.10.1.142,156.239.6.11 +FIN-WS-042,2026-02-17T07:52:50.369Z,www.indeed.com,A,NXDOMAIN,10.10.1.142,130.163.131.101 +FIN-WS-042,2026-02-12T17:56:53.282Z,time.windows.com,CNAME,NXDOMAIN,10.10.1.142,217.205.118.210 +FIN-WS-042,2026-02-16T02:37:05.011Z,outlook.office365.com,CNAME,NOERROR,10.10.1.142,148.162.193.128 +FIN-WS-042,2026-02-11T19:51:46.415Z,hulu.com,AAAA,NOERROR,10.10.1.142,33.129.89.92 +FIN-WS-042,2026-02-11T05:38:47.894Z,graph.microsoft.com,TXT,NOERROR,10.10.1.142, +FIN-WS-042,2026-02-19T06:57:16.993Z,dc-02.acme.local,A,SERVFAIL,10.10.1.142,170.144.32.212 +FIN-WS-042,2026-02-15T00:07:12.656Z,googleapis.com,TXT,SERVFAIL,10.10.1.142, +FIN-WS-042,2026-02-12T21:43:32.283Z,update.microsoft.com,TXT,NXDOMAIN,10.10.1.142,120.199.220.10 +FIN-WS-042,2026-02-18T23:50:51.806Z,github.com,A,SERVFAIL,10.10.1.142,82.36.103.200 +FIN-WS-042,2026-02-10T12:10:25.611Z,dc-02.acme.local,AAAA,SERVFAIL,10.10.1.142,121.111.236.74 +FIN-WS-042,2026-02-17T03:07:08.821Z,time.windows.com,A,SERVFAIL,10.10.1.142, +FIN-WS-042,2026-02-12T00:16:11.953Z,acme.local,A,SERVFAIL,10.10.1.142,163.229.4.47 +FIN-WS-042,2026-02-12T20:35:20.264Z,github.com,AAAA,NOERROR,10.10.1.142,90.158.40.142 +FIN-WS-042,2026-02-12T15:48:56.661Z,acme.local,A,NOERROR,10.10.1.142, +FIN-WS-042,2026-02-10T22:07:12.349Z,stackoverflow.com,MX,NXDOMAIN,10.10.1.142,116.252.36.152 +FIN-WS-042,2026-02-18T11:33:31.502Z,time.windows.com,A,SERVFAIL,10.10.1.142,35.17.116.16 +FIN-WS-042,2026-02-20T10:31:51.048Z,npmjs.com,MX,NOERROR,10.10.1.142,70.17.183.129 +SLS-WS-043,2026-02-12T19:33:24.380Z,windowsupdate.com,A,NOERROR,10.10.2.143,4.193.224.126 +SLS-WS-043,2026-02-16T12:39:30.133Z,graph.microsoft.com,A,NOERROR,10.10.2.143,153.241.89.97 +SLS-WS-043,2026-02-11T00:02:09.916Z,cdn.jsdelivr.net,MX,NOERROR,10.10.2.143,107.244.132.179 +SLS-WS-043,2026-02-18T02:16:30.571Z,time.windows.com,CNAME,NOERROR,10.10.2.143,196.90.181.114 +SLS-WS-043,2026-02-17T09:28:50.532Z,dc-02.acme.local,A,SERVFAIL,10.10.2.143,220.165.71.185 +SLS-WS-043,2026-02-16T07:21:40.472Z,cloudflare.com,A,NOERROR,10.10.2.143,94.53.52.210 +SLS-WS-043,2026-02-14T20:11:42.550Z,www.shein.com,AAAA,NOERROR,10.10.2.143,89.38.163.118 +SLS-WS-043,2026-02-15T11:36:40.892Z,stackoverflow.com,A,NOERROR,10.10.2.143, +SLS-WS-043,2026-02-10T10:18:40.896Z,google.com,TXT,SERVFAIL,10.10.2.143,189.107.34.221 +SLS-WS-043,2026-02-14T20:28:46.121Z,dc-01.acme.local,A,NOERROR,10.10.2.143, +SLS-WS-043,2026-02-20T06:16:03.854Z,npmjs.com,A,NOERROR,10.10.2.143,77.176.192.52 +SLS-WS-043,2026-02-18T10:21:23.112Z,acme.sharepoint.com,TXT,NOERROR,10.10.2.143,160.184.70.72 +SLS-WS-043,2026-02-10T21:23:56.882Z,cdn.jsdelivr.net,A,NOERROR,10.10.2.143,87.240.68.104 +SLS-WS-043,2026-02-10T09:53:20.632Z,google.com,A,NOERROR,10.10.2.143,69.74.237.23 +SLS-WS-043,2026-02-15T19:20:01.262Z,akamai.net,A,NXDOMAIN,10.10.2.143,184.193.236.246 +SLS-WS-043,2026-02-14T16:29:29.982Z,pypi.org,A,NOERROR,10.10.2.143,56.240.12.54 +SLS-WS-043,2026-02-17T02:51:47.253Z,exch-01.acme.local,CNAME,NXDOMAIN,10.10.2.143,114.94.211.135 +SLS-WS-043,2026-02-19T21:30:06.000Z,www.netflix.com,A,SERVFAIL,10.10.2.143, +SLS-WS-043,2026-02-11T06:34:08.763Z,dc-01.acme.local,A,NOERROR,10.10.2.143,180.114.71.131 +SLS-WS-043,2026-02-19T08:45:36.295Z,login.microsoftonline.com,A,NXDOMAIN,10.10.2.143, +SLS-WS-043,2026-02-12T22:40:35.266Z,googleapis.com,A,NOERROR,10.10.2.143,93.140.174.95 +SLS-WS-043,2026-02-16T17:13:44.528Z,google.com,CNAME,SERVFAIL,10.10.2.143,62.43.133.197 +SLS-WS-043,2026-02-13T22:47:20.760Z,hulu.com,AAAA,NOERROR,10.10.2.143,41.77.220.122 +SLS-WS-043,2026-02-13T11:41:28.134Z,akamai.net,TXT,NOERROR,10.10.2.143,115.194.184.114 +SLS-WS-043,2026-02-16T10:03:11.976Z,www.tiktok.com,MX,NOERROR,10.10.2.143, +SLS-WS-043,2026-02-10T22:55:14.310Z,exch-01.acme.local,MX,NOERROR,10.10.2.143,105.160.197.75 +SLS-WS-043,2026-02-13T10:30:50.656Z,acme.sharepoint.com,MX,NOERROR,10.10.2.143,135.89.107.6 +SLS-WS-043,2026-02-16T00:05:37.444Z,exch-01.acme.local,AAAA,SERVFAIL,10.10.2.143,167.148.202.120 +SLS-WS-043,2026-02-12T13:22:01.578Z,akamai.net,AAAA,NOERROR,10.10.2.143,63.8.150.100 +SLS-WS-043,2026-02-11T23:25:27.646Z,www.facebook.com,MX,NOERROR,10.10.2.143,4.120.106.180 +SLS-WS-043,2026-02-16T16:09:58.584Z,dc-02.acme.local,TXT,NOERROR,10.10.2.143,171.255.144.147 +SLS-WS-043,2026-02-14T20:16:36.489Z,draftkings.com,AAAA,NOERROR,10.10.2.143,182.113.17.59 +SLS-WS-043,2026-02-17T18:19:56.651Z,outlook.office365.com,A,NOERROR,10.10.2.143,61.192.220.46 +SLS-WS-043,2026-02-15T19:02:25.360Z,update.microsoft.com,CNAME,NOERROR,10.10.2.143,75.1.169.117 +SLS-WS-043,2026-02-11T22:03:57.191Z,github.com,TXT,NOERROR,10.10.2.143, +SLS-WS-043,2026-02-10T08:27:29.548Z,aws.amazon.com,CNAME,SERVFAIL,10.10.2.143,10.195.212.192 +SLS-WS-043,2026-02-18T13:35:43.570Z,www.amazon.com,AAAA,NXDOMAIN,10.10.2.143,76.214.9.164 +SLS-WS-043,2026-02-16T17:07:14.853Z,open.spotify.com,CNAME,NOERROR,10.10.2.143,163.54.194.229 +SLS-WS-043,2026-02-13T05:21:50.648Z,dc-02.acme.local,A,NXDOMAIN,10.10.2.143,126.147.163.253 +SLS-WS-043,2026-02-19T04:05:32.992Z,acme.local,AAAA,NOERROR,10.10.2.143,15.90.140.40 +SLS-WS-043,2026-02-16T07:03:31.933Z,npmjs.com,CNAME,NOERROR,10.10.2.143,217.7.235.20 +SLS-WS-043,2026-02-19T23:15:04.248Z,aws.amazon.com,A,NXDOMAIN,10.10.2.143,158.191.12.44 +SLS-WS-043,2026-02-10T14:23:00.985Z,akamai.net,CNAME,NOERROR,10.10.2.143,112.227.48.65 +SLS-WS-043,2026-02-20T00:31:22.552Z,acme.local,A,NOERROR,10.10.2.143,128.41.130.117 +SLS-WS-043,2026-02-14T01:12:28.571Z,file-01.acme.local,A,NOERROR,10.10.2.143, +SLS-WS-043,2026-02-17T13:45:00.269Z,google.com,CNAME,SERVFAIL,10.10.2.143, +SLS-WS-043,2026-02-15T14:54:40.771Z,discord.gg,A,SERVFAIL,10.10.2.143, +SLS-WS-043,2026-02-10T19:53:22.795Z,windowsupdate.com,TXT,NOERROR,10.10.2.143, +SLS-WS-043,2026-02-16T00:53:08.925Z,github.com,A,NOERROR,10.10.2.143,111.85.171.248 +SLS-WS-043,2026-02-18T05:48:39.193Z,1337x.to,MX,NOERROR,10.10.2.143,35.142.32.60 +SLS-WS-043,2026-02-12T19:39:08.805Z,dc-02.acme.local,AAAA,NOERROR,10.10.2.143,190.86.249.65 +SLS-WS-043,2026-02-18T13:04:54.441Z,update.microsoft.com,AAAA,SERVFAIL,10.10.2.143,73.151.24.195 +SLS-WS-043,2026-02-19T01:56:48.649Z,akamai.net,MX,NXDOMAIN,10.10.2.143,54.136.79.216 +SLS-WS-043,2026-02-18T00:20:39.594Z,exch-01.acme.local,A,NOERROR,10.10.2.143,7.210.130.211 +ENG-WS-044,2026-02-17T03:50:24.596Z,stackoverflow.com,A,NOERROR,10.10.3.144,12.163.10.86 +ENG-WS-044,2026-02-20T02:20:18.455Z,dc-01.acme.local,TXT,NXDOMAIN,10.10.3.144,86.14.161.31 +ENG-WS-044,2026-02-15T04:39:22.004Z,acme.sharepoint.com,AAAA,NOERROR,10.10.3.144, +ENG-WS-044,2026-02-13T08:14:06.267Z,open.spotify.com,MX,SERVFAIL,10.10.3.144,146.54.36.121 +ENG-WS-044,2026-02-19T05:31:39.033Z,dc-01.acme.local,A,NOERROR,10.10.3.144,66.182.201.136 +ENG-WS-044,2026-02-17T11:57:05.276Z,npmjs.com,TXT,NXDOMAIN,10.10.3.144,125.106.245.76 +ENG-WS-044,2026-02-14T06:35:24.521Z,cloudflare.com,MX,NOERROR,10.10.3.144,57.201.193.187 +ENG-WS-044,2026-02-19T04:48:01.199Z,thepiratebay.org,A,NXDOMAIN,10.10.3.144,38.3.54.140 +ENG-WS-044,2026-02-15T17:11:22.206Z,onlyfans.com,AAAA,SERVFAIL,10.10.3.144,92.67.144.2 +ENG-WS-044,2026-02-12T21:45:59.980Z,googleapis.com,CNAME,NOERROR,10.10.3.144,36.202.168.124 +ENG-WS-044,2026-02-11T17:05:58.776Z,exch-01.acme.local,MX,NXDOMAIN,10.10.3.144,144.26.111.171 +ENG-WS-044,2026-02-12T09:04:28.715Z,stackoverflow.com,MX,SERVFAIL,10.10.3.144, +ENG-WS-044,2026-02-19T00:33:24.675Z,dc-01.acme.local,TXT,NOERROR,10.10.3.144,63.249.197.227 +ENG-WS-044,2026-02-18T23:29:27.690Z,cloudflare.com,TXT,NOERROR,10.10.3.144,57.5.107.245 +ENG-WS-044,2026-02-12T20:04:56.443Z,exch-01.acme.local,CNAME,NOERROR,10.10.3.144,218.203.21.134 +ENG-WS-044,2026-02-12T07:03:05.416Z,exch-01.acme.local,TXT,SERVFAIL,10.10.3.144,61.148.15.24 +ENG-WS-044,2026-02-18T18:25:12.010Z,www.glassdoor.com,MX,NOERROR,10.10.3.144,85.139.250.52 +ENG-WS-044,2026-02-15T00:22:55.133Z,aws.amazon.com,MX,NOERROR,10.10.3.144,151.20.213.118 +ENG-WS-044,2026-02-13T13:30:27.121Z,cloudflare.com,A,NXDOMAIN,10.10.3.144,87.245.230.60 +ENG-WS-044,2026-02-18T10:56:55.706Z,graph.microsoft.com,A,NOERROR,10.10.3.144,65.10.175.121 +ENG-WS-044,2026-02-15T23:21:31.294Z,github.com,A,SERVFAIL,10.10.3.144, +LEG-WS-045,2026-02-13T09:20:04.145Z,login.microsoftonline.com,A,NXDOMAIN,10.10.1.145,81.219.142.228 +LEG-WS-045,2026-02-19T05:52:18.355Z,pypi.org,AAAA,NOERROR,10.10.1.145,129.233.232.206 +LEG-WS-045,2026-02-14T18:05:09.005Z,www.shein.com,TXT,SERVFAIL,10.10.1.145, +LEG-WS-045,2026-02-12T05:15:34.342Z,cdn.jsdelivr.net,MX,NOERROR,10.10.1.145,18.60.16.68 +LEG-WS-045,2026-02-14T21:54:48.338Z,file-01.acme.local,TXT,NXDOMAIN,10.10.1.145,29.74.197.84 +LEG-WS-045,2026-02-11T23:57:11.698Z,time.windows.com,A,NOERROR,10.10.1.145,37.60.85.218 +LEG-WS-045,2026-02-16T19:56:53.441Z,google.com,A,SERVFAIL,10.10.1.145,167.84.132.148 +LEG-WS-045,2026-02-10T23:59:43.176Z,googleapis.com,MX,NOERROR,10.10.1.145,75.51.178.174 +LEG-WS-045,2026-02-19T10:55:01.031Z,file-01.acme.local,AAAA,NXDOMAIN,10.10.1.145,16.142.109.117 +LEG-WS-045,2026-02-11T14:59:40.763Z,acme.sharepoint.com,CNAME,NOERROR,10.10.1.145,127.11.252.211 +LEG-WS-045,2026-02-19T00:39:08.271Z,cloudflare.com,CNAME,SERVFAIL,10.10.1.145,217.48.138.192 +LEG-WS-045,2026-02-10T22:46:38.851Z,login.microsoftonline.com,A,NOERROR,10.10.1.145, +LEG-WS-045,2026-02-10T19:17:02.150Z,stackoverflow.com,AAAA,NOERROR,10.10.1.145, +LEG-WS-045,2026-02-14T23:07:59.689Z,outlook.office365.com,TXT,NXDOMAIN,10.10.1.145, +LEG-WS-045,2026-02-12T04:06:58.468Z,windowsupdate.com,TXT,SERVFAIL,10.10.1.145,85.156.78.117 +LEG-WS-045,2026-02-13T00:39:20.810Z,dc-01.acme.local,TXT,NXDOMAIN,10.10.1.145,190.76.191.30 +LEG-WS-045,2026-02-19T21:55:30.423Z,aws.amazon.com,MX,NOERROR,10.10.1.145,105.164.141.115 +LEG-WS-045,2026-02-15T15:10:56.223Z,exch-01.acme.local,A,NXDOMAIN,10.10.1.145,180.124.247.233 +MKT-WS-046,2026-02-13T16:39:13.056Z,time.windows.com,TXT,NOERROR,10.10.2.146,183.28.220.178 +MKT-WS-046,2026-02-11T14:05:34.969Z,cdn.jsdelivr.net,CNAME,NOERROR,10.10.2.146,1.54.243.75 +MKT-WS-046,2026-02-10T13:00:18.538Z,time.windows.com,A,NOERROR,10.10.2.146,204.30.23.76 +MKT-WS-046,2026-02-14T14:15:07.885Z,graph.microsoft.com,MX,NXDOMAIN,10.10.2.146,38.245.0.113 +MKT-WS-046,2026-02-19T12:20:11.827Z,steamcommunity.com,TXT,NXDOMAIN,10.10.2.146, +MKT-WS-046,2026-02-10T10:19:03.536Z,file-01.acme.local,A,NOERROR,10.10.2.146, +MKT-WS-046,2026-02-16T06:22:02.860Z,windowsupdate.com,TXT,NOERROR,10.10.2.146,54.51.249.233 +MKT-WS-046,2026-02-14T11:24:35.348Z,cdn.jsdelivr.net,A,NOERROR,10.10.2.146,113.17.73.189 +MKT-WS-046,2026-02-20T05:41:19.507Z,acme.local,MX,NOERROR,10.10.2.146,82.158.215.70 +MKT-WS-046,2026-02-13T19:51:57.113Z,update.microsoft.com,A,NOERROR,10.10.2.146,120.80.22.175 +MKT-WS-046,2026-02-10T13:21:38.255Z,cloudflare.com,A,NOERROR,10.10.2.146,204.179.16.170 +MKT-WS-046,2026-02-19T19:34:17.703Z,github.com,AAAA,NOERROR,10.10.2.146, +MKT-WS-046,2026-02-12T16:36:31.572Z,pypi.org,A,NOERROR,10.10.2.146, +MKT-WS-046,2026-02-18T19:53:03.538Z,outlook.office365.com,A,NXDOMAIN,10.10.2.146,112.207.165.74 +MKT-WS-046,2026-02-12T18:34:40.554Z,file-01.acme.local,A,NOERROR,10.10.2.146,161.58.210.251 +MKT-WS-046,2026-02-13T19:44:06.036Z,acme.local,A,NOERROR,10.10.2.146,129.222.37.120 +MKT-WS-046,2026-02-14T03:25:23.726Z,login.microsoftonline.com,A,NOERROR,10.10.2.146,133.16.170.116 +MKT-WS-046,2026-02-12T15:53:40.214Z,graph.microsoft.com,A,NXDOMAIN,10.10.2.146,194.197.151.92 +MKT-WS-046,2026-02-11T17:20:44.788Z,exch-01.acme.local,A,NOERROR,10.10.2.146, +EXEC-WS-047,2026-02-13T22:56:42.544Z,www.shein.com,CNAME,NXDOMAIN,10.10.3.147, +EXEC-WS-047,2026-02-16T19:43:25.025Z,windowsupdate.com,CNAME,NOERROR,10.10.3.147,137.252.136.75 +EXEC-WS-047,2026-02-13T21:55:05.543Z,www.netflix.com,A,SERVFAIL,10.10.3.147,218.222.88.239 +EXEC-WS-047,2026-02-14T11:17:11.566Z,google.com,AAAA,NXDOMAIN,10.10.3.147,111.12.17.99 +EXEC-WS-047,2026-02-17T06:22:40.865Z,file-01.acme.local,A,NOERROR,10.10.3.147, +EXEC-WS-047,2026-02-19T10:08:20.117Z,googleapis.com,MX,NOERROR,10.10.3.147, +EXEC-WS-047,2026-02-19T11:22:25.180Z,pypi.org,CNAME,SERVFAIL,10.10.3.147,18.88.232.206 +EXEC-WS-047,2026-02-18T17:48:31.233Z,dc-01.acme.local,CNAME,SERVFAIL,10.10.3.147,172.33.252.109 +EXEC-WS-047,2026-02-12T09:20:23.746Z,graph.microsoft.com,CNAME,NXDOMAIN,10.10.3.147,102.141.192.20 +EXEC-WS-047,2026-02-18T17:07:58.999Z,time.windows.com,MX,NOERROR,10.10.3.147,208.72.65.217 +EXEC-WS-047,2026-02-19T17:44:12.863Z,dc-01.acme.local,A,NXDOMAIN,10.10.3.147, +EXEC-WS-047,2026-02-20T13:03:22.383Z,graph.microsoft.com,A,NOERROR,10.10.3.147,177.55.85.150 +EXEC-WS-047,2026-02-16T17:51:21.194Z,teams.microsoft.com,TXT,NOERROR,10.10.3.147, +EXEC-WS-047,2026-02-19T11:55:49.537Z,cloudflare.com,A,NOERROR,10.10.3.147,197.154.61.208 +EXEC-WS-047,2026-02-15T16:49:53.783Z,github.com,MX,SERVFAIL,10.10.3.147,187.7.9.83 +EXEC-WS-047,2026-02-16T16:00:22.820Z,googleapis.com,A,NOERROR,10.10.3.147,131.21.61.69 +EXEC-WS-047,2026-02-13T06:39:17.687Z,www.netflix.com,A,NOERROR,10.10.3.147,9.57.24.87 +EXEC-WS-047,2026-02-12T15:20:20.513Z,time.windows.com,A,SERVFAIL,10.10.3.147,169.221.19.163 +EXEC-WS-047,2026-02-18T10:28:24.036Z,graph.microsoft.com,A,NOERROR,10.10.3.147,107.155.214.6 +EXEC-WS-047,2026-02-11T02:46:17.707Z,aws.amazon.com,CNAME,NXDOMAIN,10.10.3.147,213.216.132.37 +EXEC-WS-047,2026-02-17T16:24:47.446Z,update.microsoft.com,A,NOERROR,10.10.3.147,222.97.203.199 +EXEC-WS-047,2026-02-18T20:33:41.760Z,cdn.jsdelivr.net,CNAME,SERVFAIL,10.10.3.147,144.134.164.154 +EXEC-WS-047,2026-02-14T09:11:53.551Z,discord.gg,A,SERVFAIL,10.10.3.147, +EXEC-WS-047,2026-02-17T20:59:54.345Z,teams.microsoft.com,CNAME,NXDOMAIN,10.10.3.147,176.181.253.184 +EXEC-WS-047,2026-02-18T05:45:11.250Z,graph.microsoft.com,MX,NOERROR,10.10.3.147,221.49.108.6 +EXEC-WS-047,2026-02-16T19:54:19.520Z,googleapis.com,A,NOERROR,10.10.3.147,129.202.148.167 +EXEC-WS-047,2026-02-13T23:55:38.650Z,open.spotify.com,TXT,NXDOMAIN,10.10.3.147, +EXEC-WS-047,2026-02-19T11:22:36.993Z,googleapis.com,AAAA,NOERROR,10.10.3.147,217.115.11.121 +EXEC-WS-047,2026-02-19T15:20:11.006Z,dc-01.acme.local,TXT,NXDOMAIN,10.10.3.147,25.95.211.26 +EXEC-WS-047,2026-02-19T08:36:06.377Z,akamai.net,CNAME,NOERROR,10.10.3.147,83.203.60.130 +EXEC-WS-047,2026-02-13T16:43:40.819Z,time.windows.com,TXT,NOERROR,10.10.3.147,80.18.112.95 +EXEC-WS-047,2026-02-19T02:05:59.332Z,dc-01.acme.local,A,NXDOMAIN,10.10.3.147,91.63.88.4 +EXEC-WS-047,2026-02-14T05:13:20.871Z,github.com,TXT,NOERROR,10.10.3.147, +EXEC-WS-047,2026-02-14T15:41:48.159Z,cloudflare.com,AAAA,NXDOMAIN,10.10.3.147,42.71.122.107 +EXEC-WS-047,2026-02-18T17:33:00.434Z,teams.microsoft.com,MX,NOERROR,10.10.3.147,66.62.105.157 +EXEC-WS-047,2026-02-18T04:08:54.313Z,time.windows.com,CNAME,NOERROR,10.10.3.147,121.16.82.232 +EXEC-WS-047,2026-02-19T15:30:15.319Z,update.microsoft.com,A,NOERROR,10.10.3.147,128.41.13.108 +EXEC-WS-047,2026-02-14T02:42:49.199Z,dc-02.acme.local,A,NOERROR,10.10.3.147,170.146.136.117 +EXEC-WS-047,2026-02-17T06:44:11.395Z,exch-01.acme.local,CNAME,NOERROR,10.10.3.147,215.144.126.160 +EXEC-WS-047,2026-02-12T14:14:26.118Z,www.shein.com,AAAA,NOERROR,10.10.3.147,111.218.239.220 +EXEC-WS-047,2026-02-19T14:06:32.051Z,outlook.office365.com,MX,NXDOMAIN,10.10.3.147,66.240.246.166 +EXEC-WS-047,2026-02-17T18:06:27.381Z,outlook.office365.com,A,NOERROR,10.10.3.147,16.151.0.142 +EXEC-WS-047,2026-02-12T21:43:29.649Z,dc-01.acme.local,MX,SERVFAIL,10.10.3.147, +IT-WS-048,2026-02-16T00:33:51.467Z,aws.amazon.com,MX,NXDOMAIN,10.10.1.148,193.177.113.49 +IT-WS-048,2026-02-11T19:37:00.327Z,dc-02.acme.local,CNAME,NOERROR,10.10.1.148,158.66.68.68 +IT-WS-048,2026-02-15T07:13:23.844Z,pypi.org,A,NOERROR,10.10.1.148,65.185.228.173 +IT-WS-048,2026-02-20T16:46:51.263Z,windowsupdate.com,A,SERVFAIL,10.10.1.148,89.95.47.26 +IT-WS-048,2026-02-15T19:34:58.451Z,dc-02.acme.local,MX,NOERROR,10.10.1.148,97.97.117.150 +IT-WS-048,2026-02-18T07:27:55.980Z,time.windows.com,MX,SERVFAIL,10.10.1.148,77.90.8.195 +IT-WS-048,2026-02-13T07:20:25.807Z,akamai.net,CNAME,SERVFAIL,10.10.1.148,64.188.159.115 +IT-WS-048,2026-02-19T12:06:54.010Z,outlook.office365.com,TXT,NOERROR,10.10.1.148,46.174.123.34 +IT-WS-048,2026-02-11T21:33:12.098Z,outlook.office365.com,CNAME,NOERROR,10.10.1.148,219.214.242.152 +IT-WS-048,2026-02-18T02:31:57.392Z,stackoverflow.com,MX,NXDOMAIN,10.10.1.148,204.34.222.56 +IT-WS-048,2026-02-19T10:16:37.771Z,teams.microsoft.com,A,SERVFAIL,10.10.1.148,184.148.167.251 +IT-WS-048,2026-02-17T16:03:56.815Z,update.microsoft.com,A,NOERROR,10.10.1.148,86.224.88.59 +IT-WS-048,2026-02-20T08:18:29.849Z,file-01.acme.local,A,NOERROR,10.10.1.148,118.109.253.125 +IT-WS-048,2026-02-14T12:15:25.539Z,update.microsoft.com,AAAA,SERVFAIL,10.10.1.148,150.194.180.75 +IT-WS-048,2026-02-20T03:54:49.637Z,googleapis.com,MX,NXDOMAIN,10.10.1.148,182.245.78.208 +IT-WS-048,2026-02-10T13:04:52.746Z,update.microsoft.com,TXT,NOERROR,10.10.1.148, +HR-WS-049,2026-02-12T04:28:35.181Z,open.spotify.com,A,NXDOMAIN,10.10.2.149,153.29.202.47 +HR-WS-049,2026-02-15T10:06:38.409Z,file-01.acme.local,TXT,NOERROR,10.10.2.149, +HR-WS-049,2026-02-16T05:15:56.147Z,outlook.office365.com,MX,NXDOMAIN,10.10.2.149, +HR-WS-049,2026-02-20T15:43:21.967Z,akamai.net,A,SERVFAIL,10.10.2.149, +HR-WS-049,2026-02-20T03:01:03.877Z,aws.amazon.com,TXT,NXDOMAIN,10.10.2.149,70.80.89.124 +HR-WS-049,2026-02-13T09:14:58.367Z,aws.amazon.com,A,SERVFAIL,10.10.2.149,109.178.65.159 +HR-WS-049,2026-02-12T09:35:37.419Z,npmjs.com,A,NOERROR,10.10.2.149, +HR-WS-049,2026-02-11T22:49:19.664Z,cdn.jsdelivr.net,CNAME,NOERROR,10.10.2.149, +HR-WS-049,2026-02-12T11:25:04.754Z,dc-01.acme.local,AAAA,NOERROR,10.10.2.149,111.237.191.173 +HR-WS-049,2026-02-15T12:25:35.714Z,pypi.org,AAAA,NOERROR,10.10.2.149,202.66.198.205 +HR-WS-049,2026-02-15T21:00:29.212Z,file-01.acme.local,MX,NOERROR,10.10.2.149, +HR-WS-049,2026-02-13T10:53:20.842Z,login.microsoftonline.com,A,SERVFAIL,10.10.2.149,24.131.0.121 +HR-WS-049,2026-02-16T21:23:13.352Z,teams.microsoft.com,A,NOERROR,10.10.2.149,8.211.43.241 +HR-WS-049,2026-02-16T13:04:56.941Z,googleapis.com,MX,NOERROR,10.10.2.149,101.211.254.214 +HR-WS-049,2026-02-11T21:53:24.864Z,pypi.org,A,NOERROR,10.10.2.149,193.87.148.197 +HR-WS-049,2026-02-14T17:47:55.856Z,github.com,A,NOERROR,10.10.2.149,189.25.111.40 +FIN-WS-050,2026-02-20T00:33:31.719Z,github.com,A,SERVFAIL,10.10.3.150,37.185.166.137 +FIN-WS-050,2026-02-15T10:24:18.216Z,github.com,CNAME,NOERROR,10.10.3.150,144.47.28.170 +FIN-WS-050,2026-02-17T12:08:35.610Z,npmjs.com,A,SERVFAIL,10.10.3.150,119.197.137.243 +FIN-WS-050,2026-02-20T09:17:01.728Z,akamai.net,A,NOERROR,10.10.3.150,23.133.104.169 +FIN-WS-050,2026-02-11T10:49:45.050Z,acme.local,TXT,NXDOMAIN,10.10.3.150, +FIN-WS-050,2026-02-13T19:26:11.222Z,cdn.jsdelivr.net,A,NOERROR,10.10.3.150,149.19.163.17 +FIN-WS-050,2026-02-14T10:18:43.835Z,file-01.acme.local,MX,NOERROR,10.10.3.150,16.201.102.100 +FIN-WS-050,2026-02-18T14:08:07.977Z,graph.microsoft.com,A,NOERROR,10.10.3.150,100.132.28.115 +FIN-WS-050,2026-02-19T03:42:50.369Z,time.windows.com,A,NOERROR,10.10.3.150,129.55.46.53 +FIN-WS-050,2026-02-18T07:17:13.003Z,exch-01.acme.local,A,NOERROR,10.10.3.150,177.243.126.155 +FIN-WS-050,2026-02-15T08:40:57.610Z,windowsupdate.com,A,NOERROR,10.10.3.150,153.162.200.113 +FIN-WS-050,2026-02-10T23:17:50.252Z,time.windows.com,CNAME,NOERROR,10.10.3.150,150.18.242.23 +FIN-WS-050,2026-02-16T10:57:13.849Z,time.windows.com,TXT,NXDOMAIN,10.10.3.150,154.49.166.75 +FIN-WS-050,2026-02-20T11:29:18.491Z,windowsupdate.com,MX,NOERROR,10.10.3.150, +FIN-WS-050,2026-02-12T14:13:21.829Z,acme.local,A,NOERROR,10.10.3.150,33.200.99.121 +FIN-WS-050,2026-02-10T12:55:40.305Z,stackoverflow.com,A,NOERROR,10.10.3.150,140.147.38.93 +FIN-WS-050,2026-02-17T13:17:49.734Z,teams.microsoft.com,A,SERVFAIL,10.10.3.150,135.136.88.180 +FIN-WS-050,2026-02-10T23:46:51.887Z,exch-01.acme.local,TXT,NOERROR,10.10.3.150,193.43.242.112 +FIN-WS-050,2026-02-13T19:59:56.928Z,exch-01.acme.local,TXT,NOERROR,10.10.3.150, +FIN-WS-050,2026-02-19T12:43:38.938Z,exch-01.acme.local,A,SERVFAIL,10.10.3.150,126.13.223.50 +FIN-WS-050,2026-02-11T21:50:25.236Z,www.amazon.com,AAAA,SERVFAIL,10.10.3.150,183.90.114.205 +FIN-WS-050,2026-02-15T23:47:31.065Z,update.microsoft.com,MX,SERVFAIL,10.10.3.150,27.191.99.90 +FIN-WS-050,2026-02-17T02:13:46.473Z,cloudflare.com,CNAME,NXDOMAIN,10.10.3.150,106.158.255.69 +FIN-WS-050,2026-02-14T01:59:02.588Z,akamai.net,A,NXDOMAIN,10.10.3.150,134.125.52.195 +FIN-WS-050,2026-02-20T17:40:39.512Z,store.steampowered.com,CNAME,NOERROR,10.10.3.150,13.245.161.104 +FIN-WS-050,2026-02-18T03:32:30.961Z,exch-01.acme.local,A,NOERROR,10.10.3.150,167.6.163.136 +FIN-WS-050,2026-02-16T04:30:10.801Z,www.bet365.com,A,SERVFAIL,10.10.3.150,211.215.249.153 +FIN-WS-050,2026-02-12T23:24:34.846Z,dc-01.acme.local,MX,NOERROR,10.10.3.150,115.218.192.50 +FIN-WS-050,2026-02-13T09:55:09.482Z,aws.amazon.com,A,NOERROR,10.10.3.150,57.119.153.210 +FIN-WS-050,2026-02-18T01:56:17.852Z,dc-01.acme.local,MX,NOERROR,10.10.3.150, +FIN-WS-050,2026-02-11T23:03:15.279Z,update.microsoft.com,A,NXDOMAIN,10.10.3.150,44.58.38.89 +FIN-WS-050,2026-02-15T09:13:50.947Z,www.netflix.com,AAAA,SERVFAIL,10.10.3.150,128.125.147.253 +FIN-WS-050,2026-02-20T08:54:27.214Z,file-01.acme.local,A,SERVFAIL,10.10.3.150,82.1.129.122 +FIN-WS-050,2026-02-10T14:36:18.564Z,stackoverflow.com,MX,SERVFAIL,10.10.3.150,153.38.138.91 +FIN-WS-050,2026-02-15T00:43:27.154Z,pypi.org,MX,NXDOMAIN,10.10.3.150, +FIN-WS-050,2026-02-16T09:09:00.256Z,file-01.acme.local,TXT,SERVFAIL,10.10.3.150, +FIN-WS-050,2026-02-20T12:14:45.244Z,pypi.org,AAAA,NXDOMAIN,10.10.3.150,53.225.179.135 +SLS-WS-051,2026-02-18T02:52:37.174Z,npmjs.com,A,NOERROR,10.10.1.151,93.231.59.63 +SLS-WS-051,2026-02-16T17:01:06.693Z,www.linkedin.com/jobs,CNAME,NOERROR,10.10.1.151,203.199.33.236 +SLS-WS-051,2026-02-13T16:01:59.560Z,googleapis.com,CNAME,NXDOMAIN,10.10.1.151,123.247.142.61 +SLS-WS-051,2026-02-11T03:50:22.989Z,windowsupdate.com,AAAA,SERVFAIL,10.10.1.151,117.227.189.99 +SLS-WS-051,2026-02-18T12:21:44.861Z,teams.microsoft.com,TXT,NOERROR,10.10.1.151,194.240.170.96 +SLS-WS-051,2026-02-15T22:27:59.851Z,akamai.net,AAAA,NOERROR,10.10.1.151,209.20.14.236 +SLS-WS-051,2026-02-10T11:04:25.750Z,www.indeed.com,CNAME,NOERROR,10.10.1.151,113.117.194.83 +SLS-WS-051,2026-02-10T16:06:15.328Z,dc-02.acme.local,A,SERVFAIL,10.10.1.151, +SLS-WS-051,2026-02-19T23:23:22.490Z,dc-02.acme.local,CNAME,NXDOMAIN,10.10.1.151, +SLS-WS-051,2026-02-11T09:47:13.915Z,pypi.org,AAAA,NOERROR,10.10.1.151,64.28.208.87 +SLS-WS-051,2026-02-19T11:19:13.719Z,exch-01.acme.local,AAAA,NOERROR,10.10.1.151,121.160.10.147 +SLS-WS-051,2026-02-15T13:56:32.224Z,windowsupdate.com,A,NOERROR,10.10.1.151,1.250.250.196 +SLS-WS-051,2026-02-15T05:40:20.491Z,aws.amazon.com,A,SERVFAIL,10.10.1.151, +SLS-WS-051,2026-02-20T14:03:28.574Z,pypi.org,MX,NXDOMAIN,10.10.1.151,151.240.233.57 +SLS-WS-051,2026-02-17T21:11:01.547Z,npmjs.com,A,NXDOMAIN,10.10.1.151,106.13.255.169 +SLS-WS-051,2026-02-15T13:48:40.327Z,pypi.org,CNAME,NOERROR,10.10.1.151,203.28.149.72 +SLS-WS-051,2026-02-10T19:35:32.385Z,akamai.net,A,NOERROR,10.10.1.151,41.13.41.5 +SLS-WS-051,2026-02-12T17:49:50.540Z,cloudflare.com,AAAA,NOERROR,10.10.1.151,38.229.81.89 +SLS-WS-051,2026-02-10T11:55:29.704Z,acme.local,TXT,NOERROR,10.10.1.151,189.179.217.128 +SLS-WS-051,2026-02-14T22:31:09.043Z,cdn.jsdelivr.net,AAAA,SERVFAIL,10.10.1.151,198.226.84.72 +SLS-WS-051,2026-02-16T02:24:14.201Z,file-01.acme.local,A,SERVFAIL,10.10.1.151,217.235.17.252 +SLS-WS-051,2026-02-13T12:02:22.483Z,npmjs.com,MX,NOERROR,10.10.1.151,196.102.1.94 +SLS-WS-051,2026-02-13T20:40:58.492Z,github.com,A,NXDOMAIN,10.10.1.151, +SLS-WS-051,2026-02-20T04:23:20.824Z,cloudflare.com,A,NXDOMAIN,10.10.1.151,7.178.42.205 +SLS-WS-051,2026-02-14T14:11:11.394Z,outlook.office365.com,MX,NXDOMAIN,10.10.1.151, +SLS-WS-051,2026-02-11T10:41:21.503Z,google.com,MX,SERVFAIL,10.10.1.151,116.14.93.124 +SLS-WS-051,2026-02-20T02:13:02.795Z,npmjs.com,AAAA,NXDOMAIN,10.10.1.151,209.79.57.74 +SLS-WS-051,2026-02-12T02:39:44.175Z,googleapis.com,A,NOERROR,10.10.1.151,123.123.1.223 +SLS-WS-051,2026-02-12T08:03:14.519Z,time.windows.com,A,SERVFAIL,10.10.1.151,56.17.208.144 +SLS-WS-051,2026-02-12T11:02:49.753Z,npmjs.com,A,NXDOMAIN,10.10.1.151,196.63.216.114 +SLS-WS-051,2026-02-14T10:39:59.209Z,google.com,CNAME,NXDOMAIN,10.10.1.151, +SLS-WS-051,2026-02-14T04:50:54.097Z,pypi.org,CNAME,SERVFAIL,10.10.1.151,201.124.167.75 +SLS-WS-051,2026-02-13T15:36:46.277Z,www.bet365.com,A,NXDOMAIN,10.10.1.151,169.66.181.251 +SLS-WS-051,2026-02-12T04:42:31.955Z,pokerstars.com,A,SERVFAIL,10.10.1.151,189.33.13.161 +SLS-WS-051,2026-02-18T17:28:51.895Z,file-01.acme.local,TXT,NXDOMAIN,10.10.1.151, +SLS-WS-051,2026-02-13T08:59:24.964Z,npmjs.com,CNAME,NXDOMAIN,10.10.1.151,12.10.78.74 +SLS-WS-051,2026-02-18T14:14:33.834Z,login.microsoftonline.com,A,NOERROR,10.10.1.151, +SLS-WS-051,2026-02-16T08:57:48.229Z,dc-02.acme.local,A,NXDOMAIN,10.10.1.151,134.60.219.197 +SLS-WS-051,2026-02-11T05:29:51.475Z,graph.microsoft.com,A,NOERROR,10.10.1.151,112.45.118.166 +SLS-WS-051,2026-02-13T04:52:23.323Z,time.windows.com,A,NOERROR,10.10.1.151, +SLS-WS-051,2026-02-13T19:55:43.640Z,thepiratebay.org,CNAME,NOERROR,10.10.1.151,142.70.66.161 +SLS-WS-051,2026-02-19T10:32:06.342Z,github.com,TXT,SERVFAIL,10.10.1.151,167.196.158.156 +SLS-WS-051,2026-02-12T20:29:56.514Z,cloudflare.com,MX,NOERROR,10.10.1.151,219.20.115.202 +ENG-WS-052,2026-02-12T14:23:01.030Z,google.com,CNAME,NXDOMAIN,10.10.2.152, +ENG-WS-052,2026-02-13T17:18:06.703Z,exch-01.acme.local,TXT,NOERROR,10.10.2.152,135.113.120.90 +ENG-WS-052,2026-02-19T09:47:40.165Z,thepiratebay.org,A,NOERROR,10.10.2.152,166.208.205.180 +ENG-WS-052,2026-02-10T16:48:16.158Z,cloudflare.com,A,NOERROR,10.10.2.152,55.9.139.180 +ENG-WS-052,2026-02-19T08:56:41.978Z,google.com,TXT,NXDOMAIN,10.10.2.152,43.161.53.78 +ENG-WS-052,2026-02-14T06:07:11.704Z,www.indeed.com,A,NXDOMAIN,10.10.2.152, +ENG-WS-052,2026-02-12T12:41:21.081Z,cdn.jsdelivr.net,MX,NOERROR,10.10.2.152,129.59.203.249 +ENG-WS-052,2026-02-19T19:45:27.448Z,google.com,A,NOERROR,10.10.2.152,59.150.194.155 +ENG-WS-052,2026-02-16T01:22:44.306Z,discord.gg,CNAME,NOERROR,10.10.2.152, +ENG-WS-052,2026-02-19T23:52:12.167Z,dc-01.acme.local,MX,NOERROR,10.10.2.152,60.57.79.222 +ENG-WS-052,2026-02-11T11:00:04.496Z,stackoverflow.com,MX,NXDOMAIN,10.10.2.152,116.202.88.198 +ENG-WS-052,2026-02-14T00:39:49.812Z,googleapis.com,MX,SERVFAIL,10.10.2.152,126.143.186.10 +ENG-WS-052,2026-02-16T05:01:02.066Z,aws.amazon.com,TXT,SERVFAIL,10.10.2.152,31.238.118.167 +ENG-WS-052,2026-02-18T09:30:05.874Z,file-01.acme.local,A,NXDOMAIN,10.10.2.152, +ENG-WS-052,2026-02-20T02:27:20.502Z,github.com,A,NOERROR,10.10.2.152,198.129.229.23 +ENG-WS-052,2026-02-10T17:13:22.688Z,file-01.acme.local,CNAME,NOERROR,10.10.2.152,95.94.220.67 +ENG-WS-052,2026-02-17T10:32:48.430Z,exch-01.acme.local,TXT,NOERROR,10.10.2.152,203.212.146.187 +ENG-WS-052,2026-02-11T05:34:40.009Z,dc-01.acme.local,A,SERVFAIL,10.10.2.152,30.112.237.143 +ENG-WS-052,2026-02-15T14:29:43.310Z,www.glassdoor.com,A,NXDOMAIN,10.10.2.152, +ENG-WS-052,2026-02-18T17:59:36.959Z,google.com,MX,NOERROR,10.10.2.152,84.84.159.231 +ENG-WS-052,2026-02-17T07:31:45.643Z,pypi.org,A,NXDOMAIN,10.10.2.152,174.61.159.112 +ENG-WS-052,2026-02-10T08:51:01.760Z,dc-01.acme.local,AAAA,NXDOMAIN,10.10.2.152,49.180.97.73 +ENG-WS-052,2026-02-13T21:22:17.925Z,exch-01.acme.local,A,SERVFAIL,10.10.2.152, +ENG-WS-052,2026-02-17T19:58:05.201Z,stackoverflow.com,A,NOERROR,10.10.2.152,66.62.184.89 +ENG-WS-052,2026-02-16T07:54:35.548Z,www.bet365.com,CNAME,NOERROR,10.10.2.152,223.185.72.222 +ENG-WS-052,2026-02-14T03:56:51.926Z,login.microsoftonline.com,TXT,SERVFAIL,10.10.2.152,131.140.88.179 +ENG-WS-052,2026-02-15T05:42:11.739Z,discord.gg,AAAA,NXDOMAIN,10.10.2.152, +ENG-WS-052,2026-02-17T05:59:23.151Z,time.windows.com,A,SERVFAIL,10.10.2.152,136.53.127.39 +ENG-WS-052,2026-02-15T00:49:31.801Z,windowsupdate.com,AAAA,NOERROR,10.10.2.152,33.229.228.235 +ENG-WS-052,2026-02-13T08:51:18.363Z,cdn.jsdelivr.net,TXT,NOERROR,10.10.2.152,204.63.149.196 +ENG-WS-052,2026-02-17T00:02:28.713Z,cdn.jsdelivr.net,MX,NOERROR,10.10.2.152,39.148.137.156 +ENG-WS-052,2026-02-12T10:18:48.558Z,teams.microsoft.com,MX,NOERROR,10.10.2.152,127.80.206.105 +ENG-WS-052,2026-02-18T19:44:45.055Z,time.windows.com,A,NOERROR,10.10.2.152,167.216.224.166 +ENG-WS-052,2026-02-10T15:56:13.721Z,windowsupdate.com,A,NXDOMAIN,10.10.2.152, +ENG-WS-052,2026-02-19T10:34:25.778Z,acme.sharepoint.com,MX,NXDOMAIN,10.10.2.152,88.124.154.11 +ENG-WS-052,2026-02-17T10:08:49.565Z,google.com,AAAA,NOERROR,10.10.2.152, +ENG-WS-052,2026-02-20T03:20:57.067Z,akamai.net,A,NOERROR,10.10.2.152,27.203.206.72 +ENG-WS-052,2026-02-11T23:22:47.502Z,login.microsoftonline.com,MX,NOERROR,10.10.2.152,223.61.113.129 +ENG-WS-052,2026-02-18T00:24:02.727Z,time.windows.com,TXT,NOERROR,10.10.2.152,19.56.181.71 +ENG-WS-052,2026-02-19T15:31:24.720Z,akamai.net,TXT,NXDOMAIN,10.10.2.152,25.184.248.63 +ENG-WS-052,2026-02-19T07:03:49.618Z,teams.microsoft.com,TXT,NOERROR,10.10.2.152, +ENG-WS-052,2026-02-10T11:04:40.912Z,stackoverflow.com,MX,NOERROR,10.10.2.152,98.180.30.75 +ENG-WS-052,2026-02-14T14:35:58.178Z,update.microsoft.com,A,NOERROR,10.10.2.152,80.253.67.38 +ENG-WS-052,2026-02-11T10:11:28.891Z,file-01.acme.local,A,SERVFAIL,10.10.2.152,38.218.50.242 +ENG-WS-052,2026-02-13T20:20:15.727Z,acme.local,MX,NOERROR,10.10.2.152, +ENG-WS-052,2026-02-11T03:20:47.911Z,outlook.office365.com,A,NXDOMAIN,10.10.2.152,149.254.9.102 +ENG-WS-052,2026-02-19T13:04:07.359Z,cloudflare.com,A,NOERROR,10.10.2.152,157.244.181.48 +ENG-WS-052,2026-02-15T20:44:37.314Z,stackoverflow.com,MX,NOERROR,10.10.2.152, +ENG-WS-052,2026-02-16T02:05:10.393Z,stackoverflow.com,A,NXDOMAIN,10.10.2.152,208.83.58.75 +ENG-WS-052,2026-02-15T05:45:39.885Z,hulu.com,AAAA,NOERROR,10.10.2.152,117.42.143.194 +ENG-WS-052,2026-02-12T08:45:09.814Z,login.microsoftonline.com,A,SERVFAIL,10.10.2.152,40.13.26.88 +ENG-WS-052,2026-02-14T09:47:16.863Z,akamai.net,MX,NOERROR,10.10.2.152,162.90.145.127 +ENG-WS-052,2026-02-19T15:12:11.319Z,file-01.acme.local,MX,SERVFAIL,10.10.2.152,137.87.32.60 +ENG-WS-052,2026-02-15T21:14:14.496Z,acme.local,CNAME,NOERROR,10.10.2.152, +ENG-WS-052,2026-02-12T03:13:48.661Z,acme.sharepoint.com,TXT,NXDOMAIN,10.10.2.152,45.167.131.10 +ENG-WS-052,2026-02-17T07:41:29.945Z,www.indeed.com,A,NOERROR,10.10.2.152,217.151.250.198 +LEG-WS-053,2026-02-11T05:19:45.806Z,aws.amazon.com,TXT,NXDOMAIN,10.10.3.153,93.137.232.140 +LEG-WS-053,2026-02-18T19:29:51.712Z,www.facebook.com,A,SERVFAIL,10.10.3.153, +LEG-WS-053,2026-02-12T14:10:16.614Z,stackoverflow.com,MX,SERVFAIL,10.10.3.153,62.244.179.93 +LEG-WS-053,2026-02-14T03:22:34.345Z,aws.amazon.com,A,NOERROR,10.10.3.153,87.124.252.93 +LEG-WS-053,2026-02-15T12:57:01.343Z,www.shein.com,MX,NOERROR,10.10.3.153,14.96.59.114 +LEG-WS-053,2026-02-16T21:32:14.366Z,graph.microsoft.com,A,NOERROR,10.10.3.153,151.1.144.50 +LEG-WS-053,2026-02-18T17:32:46.404Z,graph.microsoft.com,CNAME,NXDOMAIN,10.10.3.153,68.9.59.13 +LEG-WS-053,2026-02-10T15:44:54.833Z,www.pornhub.com,TXT,NOERROR,10.10.3.153,54.167.95.2 +LEG-WS-053,2026-02-12T01:35:42.988Z,stackoverflow.com,AAAA,NXDOMAIN,10.10.3.153, +LEG-WS-053,2026-02-20T15:25:23.113Z,teams.microsoft.com,A,NOERROR,10.10.3.153, +LEG-WS-053,2026-02-12T17:46:32.502Z,acme.local,MX,NOERROR,10.10.3.153,141.79.97.27 +LEG-WS-053,2026-02-11T05:25:43.594Z,www.facebook.com,MX,NOERROR,10.10.3.153,150.151.162.120 +LEG-WS-053,2026-02-10T19:33:01.054Z,dc-01.acme.local,A,NOERROR,10.10.3.153,164.185.14.142 +LEG-WS-053,2026-02-10T10:54:13.131Z,www.ebay.com,A,NOERROR,10.10.3.153,113.119.183.41 +LEG-WS-053,2026-02-14T03:12:01.431Z,acme.local,CNAME,NOERROR,10.10.3.153,111.122.185.47 +LEG-WS-053,2026-02-17T03:02:24.137Z,acme.local,A,NOERROR,10.10.3.153,207.192.245.26 +LEG-WS-053,2026-02-13T17:38:00.064Z,onlyfans.com,MX,NOERROR,10.10.3.153, +LEG-WS-053,2026-02-14T03:34:59.203Z,acme.sharepoint.com,MX,NXDOMAIN,10.10.3.153,21.154.22.95 +LEG-WS-053,2026-02-13T20:16:57.908Z,pypi.org,AAAA,NOERROR,10.10.3.153,222.252.178.42 +LEG-WS-053,2026-02-13T14:58:37.612Z,graph.microsoft.com,MX,SERVFAIL,10.10.3.153,217.59.205.209 +LEG-WS-053,2026-02-11T08:39:30.372Z,acme.local,A,NOERROR,10.10.3.153,30.47.34.67 +LEG-WS-053,2026-02-11T13:00:08.587Z,dc-01.acme.local,CNAME,SERVFAIL,10.10.3.153,94.156.213.113 +LEG-WS-053,2026-02-20T01:48:29.598Z,akamai.net,MX,NOERROR,10.10.3.153,121.135.47.147 +LEG-WS-053,2026-02-17T10:35:53.869Z,login.microsoftonline.com,MX,SERVFAIL,10.10.3.153,82.27.180.122 +LEG-WS-053,2026-02-12T08:00:50.589Z,login.microsoftonline.com,A,NOERROR,10.10.3.153,204.46.252.104 +LEG-WS-053,2026-02-15T03:22:35.777Z,teams.microsoft.com,MX,NOERROR,10.10.3.153,10.58.53.173 +LEG-WS-053,2026-02-15T21:03:52.023Z,acme.sharepoint.com,A,NOERROR,10.10.3.153,134.44.232.42 +LEG-WS-053,2026-02-20T09:12:08.779Z,hulu.com,MX,SERVFAIL,10.10.3.153,215.216.132.4 +LEG-WS-053,2026-02-10T23:57:22.514Z,www.indeed.com,A,NOERROR,10.10.3.153,34.204.29.182 +LEG-WS-053,2026-02-16T02:14:19.808Z,cdn.jsdelivr.net,AAAA,NOERROR,10.10.3.153, +LEG-WS-053,2026-02-12T11:26:37.803Z,dc-01.acme.local,A,NOERROR,10.10.3.153,170.35.62.65 +LEG-WS-053,2026-02-13T15:16:33.274Z,pypi.org,CNAME,NXDOMAIN,10.10.3.153,37.140.74.33 +LEG-WS-053,2026-02-17T01:03:18.708Z,outlook.office365.com,CNAME,NOERROR,10.10.3.153,204.40.216.236 +LEG-WS-053,2026-02-10T21:42:12.738Z,github.com,TXT,SERVFAIL,10.10.3.153,26.173.76.61 +LEG-WS-053,2026-02-14T17:38:32.517Z,time.windows.com,CNAME,NOERROR,10.10.3.153, +LEG-WS-053,2026-02-14T18:10:19.279Z,dc-02.acme.local,CNAME,NOERROR,10.10.3.153,60.50.221.193 +LEG-WS-053,2026-02-18T14:07:39.500Z,googleapis.com,A,NXDOMAIN,10.10.3.153, +LEG-WS-053,2026-02-11T09:51:00.147Z,dc-02.acme.local,A,NOERROR,10.10.3.153,168.53.114.165 +MKT-WS-054,2026-02-18T01:42:27.046Z,stackoverflow.com,A,NOERROR,10.10.1.154,194.6.254.140 +MKT-WS-054,2026-02-10T19:22:41.701Z,akamai.net,MX,SERVFAIL,10.10.1.154,214.164.231.192 +MKT-WS-054,2026-02-16T03:21:25.321Z,graph.microsoft.com,A,SERVFAIL,10.10.1.154,4.140.54.179 +MKT-WS-054,2026-02-19T06:39:59.449Z,aws.amazon.com,CNAME,NOERROR,10.10.1.154,215.255.123.61 +MKT-WS-054,2026-02-14T04:46:47.475Z,acme.local,A,SERVFAIL,10.10.1.154,111.244.17.25 +MKT-WS-054,2026-02-18T08:56:28.590Z,npmjs.com,AAAA,NOERROR,10.10.1.154,20.247.163.13 +MKT-WS-054,2026-02-18T14:47:26.494Z,login.microsoftonline.com,AAAA,NXDOMAIN,10.10.1.154, +MKT-WS-054,2026-02-15T17:35:05.625Z,graph.microsoft.com,TXT,NXDOMAIN,10.10.1.154,179.229.137.165 +MKT-WS-054,2026-02-14T01:37:02.062Z,www.glassdoor.com,TXT,NOERROR,10.10.1.154,202.181.16.154 +MKT-WS-054,2026-02-11T22:17:25.007Z,googleapis.com,A,SERVFAIL,10.10.1.154,187.78.199.102 +MKT-WS-054,2026-02-20T04:34:53.618Z,github.com,A,SERVFAIL,10.10.1.154,45.147.39.110 +MKT-WS-054,2026-02-11T06:35:46.823Z,graph.microsoft.com,CNAME,NOERROR,10.10.1.154, +MKT-WS-054,2026-02-18T23:18:04.538Z,aws.amazon.com,A,NXDOMAIN,10.10.1.154, +MKT-WS-054,2026-02-19T14:59:05.655Z,aws.amazon.com,TXT,NOERROR,10.10.1.154,137.27.201.129 +MKT-WS-054,2026-02-18T06:32:04.477Z,teams.microsoft.com,AAAA,NOERROR,10.10.1.154,150.170.71.225 +MKT-WS-054,2026-02-12T12:25:00.553Z,windowsupdate.com,A,NOERROR,10.10.1.154,125.255.70.89 +MKT-WS-054,2026-02-17T17:06:39.437Z,www.ebay.com,AAAA,SERVFAIL,10.10.1.154,194.219.63.109 +MKT-WS-054,2026-02-17T14:49:33.540Z,cdn.jsdelivr.net,CNAME,NOERROR,10.10.1.154, +MKT-WS-054,2026-02-17T03:10:38.915Z,pypi.org,MX,NOERROR,10.10.1.154, +MKT-WS-054,2026-02-12T18:07:50.840Z,pypi.org,MX,NOERROR,10.10.1.154, +MKT-WS-054,2026-02-19T15:58:22.153Z,akamai.net,A,NOERROR,10.10.1.154, +MKT-WS-054,2026-02-14T21:49:18.336Z,outlook.office365.com,AAAA,NXDOMAIN,10.10.1.154,95.233.33.159 +MKT-WS-054,2026-02-11T19:52:06.593Z,dc-02.acme.local,A,NOERROR,10.10.1.154,35.168.115.244 +MKT-WS-054,2026-02-18T17:41:01.601Z,aws.amazon.com,A,SERVFAIL,10.10.1.154,177.251.253.156 +MKT-WS-054,2026-02-16T15:43:09.763Z,time.windows.com,MX,NOERROR,10.10.1.154,47.250.107.118 +MKT-WS-054,2026-02-11T21:14:25.914Z,cdn.jsdelivr.net,TXT,NOERROR,10.10.1.154,175.36.65.150 +MKT-WS-054,2026-02-13T16:09:17.591Z,acme.local,A,NOERROR,10.10.1.154,54.25.54.8 +MKT-WS-054,2026-02-14T05:14:20.118Z,acme.sharepoint.com,A,NOERROR,10.10.1.154, +MKT-WS-054,2026-02-13T05:43:47.472Z,googleapis.com,TXT,NOERROR,10.10.1.154,27.87.108.36 +MKT-WS-054,2026-02-12T05:20:23.886Z,update.microsoft.com,A,NOERROR,10.10.1.154,143.247.127.135 +MKT-WS-054,2026-02-19T07:01:35.793Z,time.windows.com,MX,NOERROR,10.10.1.154,194.155.106.150 +MKT-WS-054,2026-02-12T22:08:16.637Z,graph.microsoft.com,A,SERVFAIL,10.10.1.154,144.225.105.123 +MKT-WS-054,2026-02-12T16:17:52.031Z,graph.microsoft.com,A,NXDOMAIN,10.10.1.154,190.95.71.97 +MKT-WS-054,2026-02-10T09:37:51.346Z,npmjs.com,A,SERVFAIL,10.10.1.154,18.190.54.160 +MKT-WS-054,2026-02-19T02:36:45.050Z,cdn.jsdelivr.net,CNAME,NOERROR,10.10.1.154,140.126.1.51 +MKT-WS-054,2026-02-20T14:09:06.052Z,dc-01.acme.local,MX,NOERROR,10.10.1.154,25.114.106.115 +MKT-WS-054,2026-02-16T07:42:56.609Z,open.spotify.com,MX,NOERROR,10.10.1.154,94.160.157.8 +MKT-WS-054,2026-02-19T12:34:58.736Z,pypi.org,A,NOERROR,10.10.1.154,60.182.164.167 +MKT-WS-054,2026-02-11T16:32:31.780Z,npmjs.com,AAAA,NOERROR,10.10.1.154,26.63.14.171 +MKT-WS-054,2026-02-16T05:09:45.674Z,windowsupdate.com,A,NOERROR,10.10.1.154,83.29.69.187 +MKT-WS-054,2026-02-15T11:02:19.269Z,dc-01.acme.local,TXT,SERVFAIL,10.10.1.154,88.248.181.57 +MKT-WS-054,2026-02-14T18:32:31.743Z,exch-01.acme.local,CNAME,NOERROR,10.10.1.154,218.120.110.191 +MKT-WS-054,2026-02-14T07:19:53.045Z,www.bet365.com,MX,NXDOMAIN,10.10.1.154, +MKT-WS-054,2026-02-14T12:23:50.308Z,time.windows.com,A,NOERROR,10.10.1.154, +MKT-WS-054,2026-02-17T19:39:30.269Z,teams.microsoft.com,A,NOERROR,10.10.1.154,152.170.172.191 +MKT-WS-054,2026-02-12T21:13:32.614Z,cloudflare.com,AAAA,NOERROR,10.10.1.154,66.29.117.125 +MKT-WS-054,2026-02-20T11:07:56.909Z,teams.microsoft.com,A,NOERROR,10.10.1.154,162.108.14.107 +MKT-WS-054,2026-02-16T09:10:38.867Z,www.reddit.com,A,NOERROR,10.10.1.154,95.66.23.123 +MKT-WS-054,2026-02-14T09:47:18.392Z,graph.microsoft.com,A,NOERROR,10.10.1.154,178.152.65.77 +MKT-WS-054,2026-02-20T00:55:09.878Z,dc-01.acme.local,AAAA,NOERROR,10.10.1.154,203.164.31.197 +MKT-WS-054,2026-02-19T00:37:10.199Z,file-01.acme.local,TXT,SERVFAIL,10.10.1.154, +MKT-WS-054,2026-02-14T08:08:50.991Z,acme.local,MX,SERVFAIL,10.10.1.154,34.12.230.253 +MKT-WS-054,2026-02-16T19:20:58.485Z,outlook.office365.com,MX,SERVFAIL,10.10.1.154,155.11.119.81 +MKT-WS-054,2026-02-13T16:12:19.223Z,time.windows.com,TXT,NOERROR,10.10.1.154,193.212.134.72 +MKT-WS-054,2026-02-20T05:51:55.758Z,file-01.acme.local,MX,SERVFAIL,10.10.1.154,212.228.134.76 +MKT-WS-054,2026-02-20T10:25:59.614Z,outlook.office365.com,CNAME,NOERROR,10.10.1.154,163.185.43.250 +MKT-WS-054,2026-02-19T22:48:36.680Z,exch-01.acme.local,A,NOERROR,10.10.1.154,205.143.4.145 +MKT-WS-054,2026-02-11T13:15:38.942Z,outlook.office365.com,MX,NXDOMAIN,10.10.1.154,154.124.18.237 +EXEC-WS-055,2026-02-19T08:01:25.707Z,open.spotify.com,A,NOERROR,10.10.2.155,90.26.198.162 +EXEC-WS-055,2026-02-11T02:02:24.815Z,googleapis.com,CNAME,NOERROR,10.10.2.155,92.158.131.2 +EXEC-WS-055,2026-02-10T18:03:00.263Z,login.microsoftonline.com,CNAME,NOERROR,10.10.2.155, +EXEC-WS-055,2026-02-19T04:18:49.324Z,dc-01.acme.local,CNAME,SERVFAIL,10.10.2.155,136.108.151.188 +EXEC-WS-055,2026-02-13T23:45:06.153Z,cdn.jsdelivr.net,CNAME,NXDOMAIN,10.10.2.155, +EXEC-WS-055,2026-02-16T09:14:25.879Z,google.com,AAAA,NOERROR,10.10.2.155,35.161.227.109 +EXEC-WS-055,2026-02-15T20:35:09.856Z,www.netflix.com,A,NXDOMAIN,10.10.2.155,190.40.45.253 +EXEC-WS-055,2026-02-17T06:53:48.799Z,windowsupdate.com,A,NXDOMAIN,10.10.2.155,175.190.30.143 +EXEC-WS-055,2026-02-16T05:32:09.733Z,exch-01.acme.local,TXT,NOERROR,10.10.2.155,28.173.11.113 +EXEC-WS-055,2026-02-18T09:58:14.331Z,teams.microsoft.com,CNAME,NOERROR,10.10.2.155,176.140.246.244 +EXEC-WS-055,2026-02-14T08:49:11.283Z,akamai.net,AAAA,NOERROR,10.10.2.155,177.117.80.180 +EXEC-WS-055,2026-02-15T02:38:29.934Z,googleapis.com,MX,NOERROR,10.10.2.155, +EXEC-WS-055,2026-02-11T08:54:36.181Z,github.com,TXT,NOERROR,10.10.2.155,72.194.214.73 +EXEC-WS-055,2026-02-15T14:16:08.637Z,aws.amazon.com,A,NOERROR,10.10.2.155,79.43.116.48 +EXEC-WS-055,2026-02-19T08:42:10.108Z,teams.microsoft.com,A,NOERROR,10.10.2.155,162.65.139.242 +EXEC-WS-055,2026-02-13T05:45:41.075Z,akamai.net,MX,SERVFAIL,10.10.2.155,41.234.166.251 +IT-WS-056,2026-02-19T20:51:43.663Z,open.spotify.com,CNAME,SERVFAIL,10.10.3.156,148.156.10.228 +IT-WS-056,2026-02-13T13:23:02.492Z,www.amazon.com,CNAME,SERVFAIL,10.10.3.156,104.120.79.165 +IT-WS-056,2026-02-18T01:21:45.700Z,google.com,A,SERVFAIL,10.10.3.156,5.244.124.123 +IT-WS-056,2026-02-17T08:23:35.989Z,aws.amazon.com,MX,NXDOMAIN,10.10.3.156,219.240.105.116 +IT-WS-056,2026-02-12T22:03:28.305Z,file-01.acme.local,A,NOERROR,10.10.3.156,145.51.232.32 +IT-WS-056,2026-02-16T06:54:44.833Z,google.com,CNAME,NXDOMAIN,10.10.3.156,118.221.217.178 +IT-WS-056,2026-02-17T13:01:05.015Z,outlook.office365.com,A,SERVFAIL,10.10.3.156, +IT-WS-056,2026-02-12T00:55:13.653Z,exch-01.acme.local,A,NOERROR,10.10.3.156, +IT-WS-056,2026-02-16T16:48:12.638Z,aws.amazon.com,A,NXDOMAIN,10.10.3.156,149.254.7.136 +IT-WS-056,2026-02-18T04:00:22.311Z,stackoverflow.com,MX,NOERROR,10.10.3.156,7.191.223.188 +IT-WS-056,2026-02-17T03:01:46.691Z,googleapis.com,A,NXDOMAIN,10.10.3.156,170.155.142.201 +IT-WS-056,2026-02-19T21:10:31.861Z,pypi.org,A,NOERROR,10.10.3.156, +IT-WS-056,2026-02-20T04:09:36.116Z,cdn.jsdelivr.net,A,NOERROR,10.10.3.156,192.9.43.93 +IT-WS-056,2026-02-13T00:00:42.709Z,dc-02.acme.local,CNAME,NOERROR,10.10.3.156,201.164.234.208 +IT-WS-056,2026-02-14T09:21:38.427Z,exch-01.acme.local,A,NOERROR,10.10.3.156,69.137.182.87 +IT-WS-056,2026-02-17T07:16:33.526Z,time.windows.com,MX,NXDOMAIN,10.10.3.156,193.209.107.62 +IT-WS-056,2026-02-13T03:52:18.358Z,time.windows.com,AAAA,NOERROR,10.10.3.156,86.13.174.244 +IT-WS-056,2026-02-17T11:27:23.225Z,login.microsoftonline.com,AAAA,NXDOMAIN,10.10.3.156,121.66.73.122 +IT-WS-056,2026-02-17T08:03:46.279Z,file-01.acme.local,TXT,NXDOMAIN,10.10.3.156, +IT-WS-056,2026-02-20T15:44:39.882Z,googleapis.com,A,NOERROR,10.10.3.156,166.218.206.6 +IT-WS-056,2026-02-18T18:44:20.814Z,stackoverflow.com,TXT,NOERROR,10.10.3.156,48.237.222.175 +IT-WS-056,2026-02-15T23:14:21.653Z,dc-01.acme.local,A,SERVFAIL,10.10.3.156,206.146.100.178 +IT-WS-056,2026-02-20T08:07:35.020Z,outlook.office365.com,TXT,NXDOMAIN,10.10.3.156,111.181.114.123 +IT-WS-056,2026-02-17T10:11:26.870Z,cdn.jsdelivr.net,CNAME,NOERROR,10.10.3.156,28.215.147.145 +IT-WS-056,2026-02-11T11:55:26.648Z,googleapis.com,AAAA,NXDOMAIN,10.10.3.156,6.241.88.88 +IT-WS-056,2026-02-10T17:01:07.537Z,exch-01.acme.local,MX,SERVFAIL,10.10.3.156, +IT-WS-056,2026-02-15T20:32:26.155Z,pypi.org,MX,SERVFAIL,10.10.3.156,54.27.244.172 +IT-WS-056,2026-02-10T23:49:40.977Z,www.tiktok.com,AAAA,NOERROR,10.10.3.156,149.9.72.54 +IT-WS-056,2026-02-13T10:54:46.549Z,pypi.org,AAAA,NXDOMAIN,10.10.3.156,184.89.142.160 +IT-WS-056,2026-02-10T08:56:42.751Z,google.com,A,NXDOMAIN,10.10.3.156,164.180.60.31 +IT-WS-056,2026-02-16T07:05:26.749Z,windowsupdate.com,CNAME,NXDOMAIN,10.10.3.156,11.126.34.254 +IT-WS-056,2026-02-16T02:19:28.106Z,steamcommunity.com,TXT,NOERROR,10.10.3.156,92.178.49.251 +IT-WS-056,2026-02-10T14:52:25.147Z,steamcommunity.com,AAAA,NOERROR,10.10.3.156,192.30.188.155 +IT-WS-056,2026-02-17T09:59:38.531Z,stackoverflow.com,A,SERVFAIL,10.10.3.156,56.148.96.143 +IT-WS-056,2026-02-14T01:18:42.100Z,pypi.org,A,NOERROR,10.10.3.156,136.153.197.63 +IT-WS-056,2026-02-12T20:19:49.161Z,pypi.org,A,SERVFAIL,10.10.3.156,84.27.124.3 +IT-WS-056,2026-02-19T10:33:00.111Z,windowsupdate.com,MX,NOERROR,10.10.3.156,21.232.104.209 +IT-WS-056,2026-02-14T01:26:14.999Z,discord.gg,A,NOERROR,10.10.3.156,41.217.227.159 +IT-WS-056,2026-02-19T07:28:43.532Z,dc-01.acme.local,A,NOERROR,10.10.3.156,180.125.238.37 +IT-WS-056,2026-02-17T19:40:26.589Z,google.com,A,NXDOMAIN,10.10.3.156,62.137.40.206 +IT-WS-056,2026-02-20T09:52:50.690Z,npmjs.com,MX,NOERROR,10.10.3.156,123.131.254.202 +IT-WS-056,2026-02-11T04:51:58.542Z,cloudflare.com,CNAME,NOERROR,10.10.3.156,181.84.193.222 +IT-WS-056,2026-02-13T14:22:26.449Z,github.com,A,NOERROR,10.10.3.156, +IT-WS-056,2026-02-11T02:34:37.768Z,acme.local,TXT,NOERROR,10.10.3.156, +IT-WS-056,2026-02-11T03:22:23.708Z,dc-01.acme.local,A,NXDOMAIN,10.10.3.156,146.35.68.153 +IT-WS-056,2026-02-12T22:20:16.946Z,dc-01.acme.local,A,NOERROR,10.10.3.156,47.216.186.113 +IT-WS-056,2026-02-13T08:46:35.002Z,graph.microsoft.com,MX,NOERROR,10.10.3.156,82.15.40.150 +IT-WS-056,2026-02-19T17:39:35.618Z,acme.sharepoint.com,A,NOERROR,10.10.3.156, +IT-WS-056,2026-02-15T15:47:21.595Z,1337x.to,CNAME,NXDOMAIN,10.10.3.156,58.46.112.123 +IT-WS-056,2026-02-17T20:58:29.493Z,pokerstars.com,A,NOERROR,10.10.3.156,178.236.140.146 +IT-WS-056,2026-02-14T01:51:54.522Z,cdn.jsdelivr.net,A,NXDOMAIN,10.10.3.156,2.94.53.181 +HR-WS-057,2026-02-12T13:16:39.009Z,cdn.jsdelivr.net,AAAA,NOERROR,10.10.1.157,124.22.42.216 +HR-WS-057,2026-02-11T08:25:35.978Z,login.microsoftonline.com,CNAME,SERVFAIL,10.10.1.157, +HR-WS-057,2026-02-16T18:08:42.490Z,google.com,AAAA,NOERROR,10.10.1.157,174.133.7.252 +HR-WS-057,2026-02-12T12:10:44.481Z,draftkings.com,MX,NOERROR,10.10.1.157,178.218.206.14 +HR-WS-057,2026-02-13T14:16:23.101Z,aws.amazon.com,A,NOERROR,10.10.1.157,139.21.141.213 +HR-WS-057,2026-02-18T23:30:45.271Z,teams.microsoft.com,A,NOERROR,10.10.1.157,9.155.173.14 +HR-WS-057,2026-02-18T02:35:23.991Z,1337x.to,A,NOERROR,10.10.1.157,84.208.29.213 +HR-WS-057,2026-02-14T13:33:31.069Z,pypi.org,A,NOERROR,10.10.1.157,180.140.253.125 +HR-WS-057,2026-02-10T20:25:16.862Z,stackoverflow.com,CNAME,NOERROR,10.10.1.157,216.170.192.39 +HR-WS-057,2026-02-10T10:03:26.932Z,exch-01.acme.local,CNAME,NOERROR,10.10.1.157, +HR-WS-057,2026-02-18T05:16:49.608Z,dc-01.acme.local,MX,SERVFAIL,10.10.1.157,170.212.56.200 +HR-WS-057,2026-02-13T20:22:38.641Z,pypi.org,CNAME,NOERROR,10.10.1.157,41.255.255.28 +HR-WS-057,2026-02-16T04:26:21.228Z,dc-02.acme.local,A,NOERROR,10.10.1.157,95.10.38.146 +HR-WS-057,2026-02-14T00:31:48.865Z,file-01.acme.local,MX,NOERROR,10.10.1.157,103.251.195.218 +HR-WS-057,2026-02-13T01:39:47.876Z,outlook.office365.com,A,NOERROR,10.10.1.157, +HR-WS-057,2026-02-18T02:38:59.359Z,dc-01.acme.local,TXT,NOERROR,10.10.1.157,192.207.252.203 +HR-WS-057,2026-02-15T22:42:16.497Z,npmjs.com,A,NOERROR,10.10.1.157,17.168.63.59 +HR-WS-057,2026-02-17T04:28:53.497Z,npmjs.com,A,NOERROR,10.10.1.157,65.227.22.76 +HR-WS-057,2026-02-14T14:44:42.502Z,teams.microsoft.com,TXT,SERVFAIL,10.10.1.157, +HR-WS-057,2026-02-14T23:19:16.647Z,login.microsoftonline.com,MX,SERVFAIL,10.10.1.157, +HR-WS-057,2026-02-14T19:17:36.300Z,outlook.office365.com,A,NOERROR,10.10.1.157,93.241.78.172 +HR-WS-057,2026-02-18T03:03:34.295Z,cloudflare.com,A,NXDOMAIN,10.10.1.157,189.53.24.81 +HR-WS-057,2026-02-18T11:51:25.333Z,cdn.jsdelivr.net,CNAME,NOERROR,10.10.1.157, +HR-WS-057,2026-02-11T04:04:55.052Z,login.microsoftonline.com,A,NXDOMAIN,10.10.1.157,29.3.2.231 +HR-WS-057,2026-02-16T02:23:57.291Z,pypi.org,AAAA,SERVFAIL,10.10.1.157,95.185.233.112 +HR-WS-057,2026-02-14T18:58:24.803Z,www.linkedin.com/jobs,MX,NXDOMAIN,10.10.1.157,111.219.249.34 +HR-WS-057,2026-02-17T21:31:54.809Z,cloudflare.com,A,NOERROR,10.10.1.157,60.153.60.67 +HR-WS-057,2026-02-16T11:58:03.007Z,aws.amazon.com,AAAA,NOERROR,10.10.1.157,116.90.186.160 +HR-WS-057,2026-02-12T09:04:11.120Z,acme.local,A,NXDOMAIN,10.10.1.157,72.27.52.44 +HR-WS-057,2026-02-13T22:19:23.275Z,outlook.office365.com,TXT,NOERROR,10.10.1.157,177.238.200.152 +HR-WS-057,2026-02-20T15:14:26.699Z,google.com,TXT,NOERROR,10.10.1.157, +HR-WS-057,2026-02-13T21:33:37.854Z,windowsupdate.com,MX,NOERROR,10.10.1.157, +HR-WS-057,2026-02-18T01:44:49.325Z,graph.microsoft.com,A,SERVFAIL,10.10.1.157,39.183.251.211 +HR-WS-057,2026-02-19T04:28:32.322Z,teams.microsoft.com,A,NOERROR,10.10.1.157,189.203.123.118 +HR-WS-057,2026-02-19T23:46:10.250Z,fitgirl-repacks.site,TXT,NOERROR,10.10.1.157,160.54.162.32 +HR-WS-057,2026-02-18T04:19:09.344Z,github.com,MX,NXDOMAIN,10.10.1.157, +HR-WS-057,2026-02-15T23:25:18.805Z,exch-01.acme.local,MX,NOERROR,10.10.1.157,14.67.184.63 +HR-WS-057,2026-02-15T16:21:29.081Z,github.com,AAAA,NOERROR,10.10.1.157,159.75.91.84 +HR-WS-057,2026-02-10T19:30:00.531Z,exch-01.acme.local,TXT,NOERROR,10.10.1.157,69.9.224.144 +HR-WS-057,2026-02-18T20:50:42.517Z,cdn.jsdelivr.net,A,SERVFAIL,10.10.1.157,25.102.147.229 +HR-WS-057,2026-02-20T13:33:37.166Z,pokerstars.com,A,NOERROR,10.10.1.157,83.149.147.246 +HR-WS-057,2026-02-19T04:54:45.037Z,acme.local,A,SERVFAIL,10.10.1.157,7.2.141.111 +HR-WS-057,2026-02-18T18:58:55.809Z,www.ebay.com,A,NXDOMAIN,10.10.1.157, +HR-WS-057,2026-02-19T05:08:50.713Z,time.windows.com,A,NXDOMAIN,10.10.1.157,99.141.125.121 +HR-WS-057,2026-02-13T07:09:25.171Z,login.microsoftonline.com,MX,SERVFAIL,10.10.1.157,163.161.124.15 +HR-WS-057,2026-02-11T15:37:19.424Z,login.microsoftonline.com,A,SERVFAIL,10.10.1.157,41.233.217.68 +HR-WS-057,2026-02-10T09:05:44.749Z,acme.sharepoint.com,A,NOERROR,10.10.1.157,162.25.60.230 +HR-WS-057,2026-02-19T20:53:21.273Z,file-01.acme.local,CNAME,NOERROR,10.10.1.157,139.0.144.47 +HR-WS-057,2026-02-14T07:42:08.032Z,login.microsoftonline.com,TXT,NOERROR,10.10.1.157,201.1.227.42 +HR-WS-057,2026-02-12T05:56:45.935Z,acme.local,CNAME,NOERROR,10.10.1.157,93.37.163.216 +HR-WS-057,2026-02-11T13:15:59.692Z,outlook.office365.com,CNAME,NOERROR,10.10.1.157,21.47.224.142 +HR-WS-057,2026-02-18T06:11:32.356Z,akamai.net,A,NOERROR,10.10.1.157, +HR-WS-057,2026-02-20T13:50:47.361Z,acme.sharepoint.com,TXT,NOERROR,10.10.1.157,163.136.44.132 +HR-WS-057,2026-02-11T07:08:49.285Z,www.shein.com,CNAME,NOERROR,10.10.1.157, +HR-WS-057,2026-02-15T11:09:12.059Z,login.microsoftonline.com,A,NOERROR,10.10.1.157,189.191.34.85 +HR-WS-057,2026-02-19T20:32:59.590Z,cloudflare.com,AAAA,NOERROR,10.10.1.157,40.242.208.180 +HR-WS-057,2026-02-16T04:26:19.860Z,github.com,TXT,NOERROR,10.10.1.157,131.238.103.11 +HR-WS-057,2026-02-17T08:35:46.686Z,update.microsoft.com,AAAA,NOERROR,10.10.1.157,97.26.187.106 +HR-WS-057,2026-02-14T21:44:04.287Z,outlook.office365.com,AAAA,NOERROR,10.10.1.157,217.63.104.123 +FIN-WS-058,2026-02-16T17:54:44.978Z,dc-02.acme.local,AAAA,NOERROR,10.10.2.158,209.35.113.229 +FIN-WS-058,2026-02-13T07:47:28.131Z,googleapis.com,AAAA,NXDOMAIN,10.10.2.158,110.179.99.22 +FIN-WS-058,2026-02-17T13:14:45.331Z,file-01.acme.local,TXT,NOERROR,10.10.2.158,108.60.188.9 +FIN-WS-058,2026-02-13T15:54:13.116Z,googleapis.com,A,NOERROR,10.10.2.158,60.55.229.159 +FIN-WS-058,2026-02-19T11:21:06.805Z,pypi.org,A,NOERROR,10.10.2.158,173.23.65.51 +FIN-WS-058,2026-02-18T18:36:44.766Z,steamcommunity.com,AAAA,NOERROR,10.10.2.158,178.122.53.170 +FIN-WS-058,2026-02-18T08:07:44.652Z,login.microsoftonline.com,CNAME,NOERROR,10.10.2.158,183.78.253.5 +FIN-WS-058,2026-02-18T10:33:10.939Z,login.microsoftonline.com,AAAA,SERVFAIL,10.10.2.158,98.219.155.120 +FIN-WS-058,2026-02-17T03:04:45.450Z,www.facebook.com,MX,NOERROR,10.10.2.158,119.161.244.188 +FIN-WS-058,2026-02-20T06:05:27.319Z,stackoverflow.com,AAAA,NXDOMAIN,10.10.2.158,92.105.248.50 +FIN-WS-058,2026-02-18T09:39:26.442Z,google.com,AAAA,NOERROR,10.10.2.158, +FIN-WS-058,2026-02-15T03:05:54.676Z,googleapis.com,A,SERVFAIL,10.10.2.158,149.86.150.119 +FIN-WS-058,2026-02-17T11:51:20.004Z,aws.amazon.com,CNAME,NOERROR,10.10.2.158,102.70.53.1 +FIN-WS-058,2026-02-16T20:19:57.449Z,akamai.net,A,NXDOMAIN,10.10.2.158,104.235.89.130 +FIN-WS-058,2026-02-19T11:50:23.497Z,teams.microsoft.com,TXT,SERVFAIL,10.10.2.158,4.193.204.219 +FIN-WS-058,2026-02-19T19:01:05.603Z,akamai.net,A,NOERROR,10.10.2.158,13.159.83.95 +FIN-WS-058,2026-02-13T02:33:53.330Z,akamai.net,CNAME,SERVFAIL,10.10.2.158,109.38.230.153 +FIN-WS-058,2026-02-13T07:22:16.386Z,aws.amazon.com,A,SERVFAIL,10.10.2.158,117.226.4.56 +FIN-WS-058,2026-02-10T23:34:19.492Z,google.com,AAAA,NOERROR,10.10.2.158,2.177.132.66 +FIN-WS-058,2026-02-16T01:44:42.333Z,cdn.jsdelivr.net,A,NOERROR,10.10.2.158,137.126.98.66 +FIN-WS-058,2026-02-15T22:47:47.530Z,file-01.acme.local,A,NXDOMAIN,10.10.2.158,163.69.198.16 +FIN-WS-058,2026-02-11T01:33:39.831Z,acme.sharepoint.com,TXT,NOERROR,10.10.2.158,109.212.152.15 +FIN-WS-058,2026-02-16T15:27:36.473Z,aws.amazon.com,TXT,NXDOMAIN,10.10.2.158,78.113.12.136 +FIN-WS-058,2026-02-10T10:09:12.796Z,google.com,A,NOERROR,10.10.2.158,45.171.123.113 +FIN-WS-058,2026-02-17T23:44:17.545Z,onlyfans.com,A,SERVFAIL,10.10.2.158,6.147.41.86 +FIN-WS-058,2026-02-15T09:39:10.092Z,file-01.acme.local,A,NOERROR,10.10.2.158,188.225.102.183 +FIN-WS-058,2026-02-20T11:16:05.054Z,discord.gg,A,NXDOMAIN,10.10.2.158,100.70.138.124 +FIN-WS-058,2026-02-20T09:22:10.100Z,dc-01.acme.local,CNAME,NOERROR,10.10.2.158, +SLS-WS-059,2026-02-11T23:45:44.938Z,google.com,AAAA,NOERROR,10.10.3.159,222.244.209.112 +SLS-WS-059,2026-02-13T13:13:37.058Z,npmjs.com,A,NXDOMAIN,10.10.3.159,184.205.129.230 +SLS-WS-059,2026-02-13T19:00:47.748Z,store.steampowered.com,MX,NOERROR,10.10.3.159,99.71.59.154 +SLS-WS-059,2026-02-15T15:44:58.173Z,pypi.org,CNAME,NXDOMAIN,10.10.3.159,33.161.175.170 +SLS-WS-059,2026-02-13T01:45:55.587Z,update.microsoft.com,TXT,NXDOMAIN,10.10.3.159,45.91.28.119 +SLS-WS-059,2026-02-14T17:00:21.167Z,time.windows.com,TXT,NOERROR,10.10.3.159, +SLS-WS-059,2026-02-13T14:36:30.378Z,graph.microsoft.com,A,NOERROR,10.10.3.159, +SLS-WS-059,2026-02-17T19:19:02.732Z,cdn.jsdelivr.net,AAAA,SERVFAIL,10.10.3.159,138.111.121.158 +SLS-WS-059,2026-02-19T00:34:44.504Z,acme.sharepoint.com,A,SERVFAIL,10.10.3.159,36.79.183.166 +SLS-WS-059,2026-02-17T02:17:45.083Z,stackoverflow.com,A,NXDOMAIN,10.10.3.159, +SLS-WS-059,2026-02-20T13:44:20.789Z,stackoverflow.com,A,NOERROR,10.10.3.159,96.254.137.165 +SLS-WS-059,2026-02-19T20:28:44.106Z,google.com,AAAA,NXDOMAIN,10.10.3.159,21.156.82.106 +SLS-WS-059,2026-02-16T20:43:26.946Z,acme.local,A,NXDOMAIN,10.10.3.159, +SLS-WS-059,2026-02-18T21:28:50.336Z,update.microsoft.com,MX,NOERROR,10.10.3.159,163.18.222.20 +SLS-WS-059,2026-02-16T05:38:29.866Z,outlook.office365.com,A,NOERROR,10.10.3.159, +SLS-WS-059,2026-02-14T10:03:25.094Z,stackoverflow.com,A,SERVFAIL,10.10.3.159,80.173.159.240 +SLS-WS-059,2026-02-10T21:40:10.885Z,outlook.office365.com,MX,SERVFAIL,10.10.3.159,219.204.66.168 +SLS-WS-059,2026-02-17T21:47:40.912Z,pypi.org,A,NOERROR,10.10.3.159,2.161.92.211 +SLS-WS-059,2026-02-17T06:18:12.606Z,file-01.acme.local,TXT,SERVFAIL,10.10.3.159,118.101.28.128 +SLS-WS-059,2026-02-11T23:27:41.290Z,acme.sharepoint.com,MX,NXDOMAIN,10.10.3.159,199.204.54.12 +SLS-WS-059,2026-02-16T20:47:58.394Z,outlook.office365.com,A,NXDOMAIN,10.10.3.159,17.60.253.24 +SLS-WS-059,2026-02-10T08:13:56.431Z,dc-01.acme.local,AAAA,NOERROR,10.10.3.159, +ENG-WS-060,2026-02-11T20:55:25.457Z,windowsupdate.com,MX,NXDOMAIN,10.10.1.160,66.125.158.214 +ENG-WS-060,2026-02-18T06:41:47.485Z,dc-02.acme.local,MX,NOERROR,10.10.1.160, +ENG-WS-060,2026-02-19T20:38:06.284Z,akamai.net,A,NOERROR,10.10.1.160,73.255.251.173 +ENG-WS-060,2026-02-11T04:25:24.344Z,teams.microsoft.com,MX,NOERROR,10.10.1.160, +ENG-WS-060,2026-02-19T11:18:14.942Z,googleapis.com,AAAA,SERVFAIL,10.10.1.160,128.175.183.154 +ENG-WS-060,2026-02-15T11:23:09.375Z,google.com,CNAME,SERVFAIL,10.10.1.160,48.30.133.186 +ENG-WS-060,2026-02-19T12:24:03.395Z,fitgirl-repacks.site,AAAA,SERVFAIL,10.10.1.160,216.84.116.13 +ENG-WS-060,2026-02-14T11:50:29.633Z,graph.microsoft.com,CNAME,NOERROR,10.10.1.160, +ENG-WS-060,2026-02-20T09:32:58.579Z,aws.amazon.com,AAAA,SERVFAIL,10.10.1.160,118.142.150.165 +ENG-WS-060,2026-02-12T16:58:31.177Z,acme.local,A,NOERROR,10.10.1.160,80.176.233.135 +ENG-WS-060,2026-02-17T13:18:25.538Z,pypi.org,A,NOERROR,10.10.1.160,14.151.241.242 +ENG-WS-060,2026-02-16T23:04:21.331Z,dc-01.acme.local,A,NXDOMAIN,10.10.1.160,159.246.76.202 +ENG-WS-060,2026-02-12T12:46:20.345Z,npmjs.com,A,NOERROR,10.10.1.160, +ENG-WS-060,2026-02-15T00:40:14.038Z,stackoverflow.com,A,NOERROR,10.10.1.160, +ENG-WS-060,2026-02-16T03:45:32.731Z,cdn.jsdelivr.net,CNAME,NOERROR,10.10.1.160,43.126.33.98 +ENG-WS-060,2026-02-11T14:16:31.658Z,update.microsoft.com,TXT,NOERROR,10.10.1.160,130.178.240.249 +LEG-WS-061,2026-02-13T07:02:47.193Z,windowsupdate.com,TXT,NOERROR,10.10.2.161, +LEG-WS-061,2026-02-16T04:56:18.315Z,pypi.org,TXT,NOERROR,10.10.2.161,218.133.117.68 +LEG-WS-061,2026-02-19T15:03:34.073Z,exch-01.acme.local,CNAME,NOERROR,10.10.2.161,198.114.146.53 +LEG-WS-061,2026-02-10T21:58:06.468Z,dc-01.acme.local,A,NXDOMAIN,10.10.2.161,132.10.212.219 +LEG-WS-061,2026-02-20T02:59:50.682Z,teams.microsoft.com,AAAA,SERVFAIL,10.10.2.161,167.149.122.83 +LEG-WS-061,2026-02-18T03:22:46.265Z,google.com,A,NOERROR,10.10.2.161,159.10.241.54 +LEG-WS-061,2026-02-11T23:00:42.117Z,graph.microsoft.com,AAAA,NOERROR,10.10.2.161,204.36.93.101 +LEG-WS-061,2026-02-11T07:39:54.977Z,update.microsoft.com,A,SERVFAIL,10.10.2.161, +LEG-WS-061,2026-02-20T11:40:09.575Z,pypi.org,TXT,SERVFAIL,10.10.2.161,119.233.26.125 +LEG-WS-061,2026-02-14T22:59:13.629Z,www.bet365.com,TXT,NOERROR,10.10.2.161,185.10.205.239 +LEG-WS-061,2026-02-12T14:19:41.586Z,akamai.net,MX,NXDOMAIN,10.10.2.161, +LEG-WS-061,2026-02-19T10:22:50.635Z,akamai.net,AAAA,NOERROR,10.10.2.161,116.78.1.246 +LEG-WS-061,2026-02-15T19:19:08.277Z,cloudflare.com,CNAME,NXDOMAIN,10.10.2.161, +LEG-WS-061,2026-02-12T20:24:15.472Z,aws.amazon.com,TXT,SERVFAIL,10.10.2.161,170.168.83.180 +LEG-WS-061,2026-02-16T19:04:44.946Z,acme.sharepoint.com,TXT,NXDOMAIN,10.10.2.161,50.199.55.208 +LEG-WS-061,2026-02-13T05:16:39.648Z,exch-01.acme.local,A,SERVFAIL,10.10.2.161,58.185.231.250 +LEG-WS-061,2026-02-11T22:24:10.832Z,googleapis.com,AAAA,NXDOMAIN,10.10.2.161,191.9.51.108 +LEG-WS-061,2026-02-11T10:09:53.858Z,exch-01.acme.local,TXT,SERVFAIL,10.10.2.161,124.145.228.219 +MKT-WS-062,2026-02-20T07:26:07.544Z,pypi.org,CNAME,NOERROR,10.10.3.162,50.104.36.250 +MKT-WS-062,2026-02-20T03:11:42.460Z,googleapis.com,AAAA,NOERROR,10.10.3.162,55.152.253.85 +MKT-WS-062,2026-02-16T18:03:54.695Z,teams.microsoft.com,MX,NOERROR,10.10.3.162,98.184.25.37 +MKT-WS-062,2026-02-18T16:26:34.067Z,www.bet365.com,A,NOERROR,10.10.3.162, +MKT-WS-062,2026-02-17T05:43:40.606Z,dc-02.acme.local,A,SERVFAIL,10.10.3.162,210.237.28.197 +MKT-WS-062,2026-02-16T23:07:29.579Z,store.steampowered.com,CNAME,NOERROR,10.10.3.162,167.27.215.50 +MKT-WS-062,2026-02-10T08:41:56.785Z,www.ebay.com,AAAA,NXDOMAIN,10.10.3.162,99.106.87.187 +MKT-WS-062,2026-02-16T07:53:11.168Z,aws.amazon.com,A,NOERROR,10.10.3.162,128.146.197.199 +MKT-WS-062,2026-02-19T19:42:25.158Z,github.com,A,SERVFAIL,10.10.3.162,50.45.39.192 +MKT-WS-062,2026-02-17T07:05:00.340Z,windowsupdate.com,A,NOERROR,10.10.3.162,35.13.227.84 +MKT-WS-062,2026-02-17T23:13:32.603Z,acme.sharepoint.com,CNAME,NOERROR,10.10.3.162,156.137.58.152 +MKT-WS-062,2026-02-17T04:56:23.591Z,github.com,CNAME,SERVFAIL,10.10.3.162,195.196.90.163 +MKT-WS-062,2026-02-16T02:12:57.454Z,acme.sharepoint.com,A,SERVFAIL,10.10.3.162,184.72.252.115 +MKT-WS-062,2026-02-19T02:56:56.777Z,teams.microsoft.com,MX,NOERROR,10.10.3.162,106.169.2.166 +MKT-WS-062,2026-02-17T08:28:35.660Z,file-01.acme.local,TXT,NOERROR,10.10.3.162,166.60.15.241 +MKT-WS-062,2026-02-15T20:48:47.886Z,aws.amazon.com,MX,NOERROR,10.10.3.162,123.181.53.71 +MKT-WS-062,2026-02-14T15:33:45.728Z,exch-01.acme.local,A,SERVFAIL,10.10.3.162,104.235.192.204 +MKT-WS-062,2026-02-17T19:58:48.413Z,draftkings.com,A,NOERROR,10.10.3.162,1.41.0.253 +MKT-WS-062,2026-02-14T05:00:35.448Z,aws.amazon.com,MX,NXDOMAIN,10.10.3.162,119.189.214.217 +MKT-WS-062,2026-02-14T02:41:18.104Z,github.com,MX,NOERROR,10.10.3.162,151.244.245.250 +MKT-WS-062,2026-02-13T20:23:26.123Z,outlook.office365.com,MX,SERVFAIL,10.10.3.162,6.77.123.63 +MKT-WS-062,2026-02-19T14:48:00.366Z,thepiratebay.org,MX,NOERROR,10.10.3.162, +MKT-WS-062,2026-02-10T13:51:23.409Z,aws.amazon.com,MX,NOERROR,10.10.3.162,214.171.112.218 +MKT-WS-062,2026-02-12T14:55:55.152Z,cdn.jsdelivr.net,A,NOERROR,10.10.3.162,199.151.84.140 +MKT-WS-062,2026-02-17T17:20:07.437Z,pypi.org,A,NXDOMAIN,10.10.3.162, +MKT-WS-062,2026-02-18T16:46:17.388Z,googleapis.com,MX,NOERROR,10.10.3.162,15.245.57.220 +MKT-WS-062,2026-02-14T11:31:11.275Z,stackoverflow.com,MX,SERVFAIL,10.10.3.162, +MKT-WS-062,2026-02-10T22:25:11.535Z,cdn.jsdelivr.net,TXT,NOERROR,10.10.3.162,31.235.240.114 +MKT-WS-062,2026-02-12T10:40:58.596Z,akamai.net,TXT,SERVFAIL,10.10.3.162,106.226.16.146 +MKT-WS-062,2026-02-17T08:16:29.693Z,github.com,TXT,NXDOMAIN,10.10.3.162,108.35.76.39 +MKT-WS-062,2026-02-12T14:44:49.134Z,npmjs.com,TXT,NXDOMAIN,10.10.3.162,80.240.231.218 +MKT-WS-062,2026-02-19T18:34:50.643Z,npmjs.com,AAAA,NOERROR,10.10.3.162,117.178.206.253 +MKT-WS-062,2026-02-15T22:28:22.253Z,github.com,MX,NOERROR,10.10.3.162,65.95.119.4 +MKT-WS-062,2026-02-16T06:28:12.401Z,outlook.office365.com,MX,NOERROR,10.10.3.162,66.249.170.152 +MKT-WS-062,2026-02-11T12:54:54.606Z,login.microsoftonline.com,AAAA,NOERROR,10.10.3.162,220.77.44.17 +MKT-WS-062,2026-02-14T23:31:09.999Z,github.com,A,SERVFAIL,10.10.3.162,71.9.81.233 +MKT-WS-062,2026-02-18T04:05:04.949Z,dc-02.acme.local,MX,NOERROR,10.10.3.162,165.60.122.116 +MKT-WS-062,2026-02-10T21:59:02.954Z,1337x.to,CNAME,NOERROR,10.10.3.162,201.110.54.96 +MKT-WS-062,2026-02-16T23:40:17.221Z,stackoverflow.com,MX,SERVFAIL,10.10.3.162, +MKT-WS-062,2026-02-18T23:25:10.659Z,aws.amazon.com,A,NOERROR,10.10.3.162, +MKT-WS-062,2026-02-12T20:19:38.003Z,time.windows.com,A,SERVFAIL,10.10.3.162,7.141.225.153 +MKT-WS-062,2026-02-17T23:24:53.731Z,onlyfans.com,CNAME,SERVFAIL,10.10.3.162,198.177.33.85 +MKT-WS-062,2026-02-16T18:03:24.564Z,hulu.com,AAAA,NXDOMAIN,10.10.3.162,24.37.82.112 +MKT-WS-062,2026-02-16T13:07:53.095Z,google.com,A,SERVFAIL,10.10.3.162,110.25.216.212 +MKT-WS-062,2026-02-19T15:08:05.148Z,teams.microsoft.com,A,NOERROR,10.10.3.162,21.219.218.223 +MKT-WS-062,2026-02-11T09:42:23.831Z,graph.microsoft.com,A,NXDOMAIN,10.10.3.162,214.142.83.249 +MKT-WS-062,2026-02-10T20:32:17.678Z,www.facebook.com,A,NOERROR,10.10.3.162,191.176.78.72 +MKT-WS-062,2026-02-12T23:44:10.721Z,login.microsoftonline.com,A,NXDOMAIN,10.10.3.162,176.165.247.46 +MKT-WS-062,2026-02-10T16:22:13.620Z,login.microsoftonline.com,A,NOERROR,10.10.3.162, +EXEC-WS-063,2026-02-19T08:12:41.984Z,npmjs.com,A,NXDOMAIN,10.10.1.163,143.222.91.198 +EXEC-WS-063,2026-02-16T16:41:35.572Z,dc-02.acme.local,A,NXDOMAIN,10.10.1.163,166.51.138.151 +EXEC-WS-063,2026-02-19T07:57:40.535Z,exch-01.acme.local,AAAA,NOERROR,10.10.1.163,20.19.42.3 +EXEC-WS-063,2026-02-12T18:06:04.876Z,github.com,CNAME,SERVFAIL,10.10.1.163,38.226.248.179 +EXEC-WS-063,2026-02-15T20:52:33.412Z,outlook.office365.com,TXT,NOERROR,10.10.1.163,43.216.88.61 +EXEC-WS-063,2026-02-18T01:20:55.439Z,exch-01.acme.local,CNAME,NOERROR,10.10.1.163,66.93.46.62 +EXEC-WS-063,2026-02-11T13:17:50.192Z,login.microsoftonline.com,CNAME,NOERROR,10.10.1.163,155.141.51.173 +EXEC-WS-063,2026-02-12T12:40:48.952Z,graph.microsoft.com,TXT,NOERROR,10.10.1.163,207.127.80.232 +EXEC-WS-063,2026-02-14T02:24:14.286Z,pypi.org,TXT,NOERROR,10.10.1.163,63.60.236.82 +EXEC-WS-063,2026-02-11T21:24:48.122Z,file-01.acme.local,A,NOERROR,10.10.1.163, +EXEC-WS-063,2026-02-11T20:11:10.627Z,time.windows.com,A,NOERROR,10.10.1.163,205.247.221.84 +EXEC-WS-063,2026-02-16T01:55:37.064Z,windowsupdate.com,MX,NOERROR,10.10.1.163,96.9.6.108 +EXEC-WS-063,2026-02-13T17:25:26.350Z,time.windows.com,CNAME,SERVFAIL,10.10.1.163, +EXEC-WS-063,2026-02-12T02:40:21.942Z,npmjs.com,CNAME,NOERROR,10.10.1.163,174.81.194.48 +EXEC-WS-063,2026-02-15T18:23:30.525Z,exch-01.acme.local,A,NOERROR,10.10.1.163,223.231.11.197 +EXEC-WS-063,2026-02-16T21:30:32.863Z,windowsupdate.com,CNAME,SERVFAIL,10.10.1.163,186.111.194.5 +EXEC-WS-063,2026-02-14T00:00:54.182Z,exch-01.acme.local,AAAA,NOERROR,10.10.1.163,194.103.42.249 +EXEC-WS-063,2026-02-14T05:19:08.019Z,cdn.jsdelivr.net,A,NOERROR,10.10.1.163, +EXEC-WS-063,2026-02-16T22:58:39.546Z,update.microsoft.com,MX,NOERROR,10.10.1.163,56.153.48.213 +IT-WS-064,2026-02-15T07:11:59.411Z,cdn.jsdelivr.net,CNAME,NXDOMAIN,10.10.2.164,140.215.108.189 +IT-WS-064,2026-02-20T14:48:41.569Z,acme.local,TXT,SERVFAIL,10.10.2.164,3.15.170.64 +IT-WS-064,2026-02-20T01:45:27.344Z,google.com,TXT,NOERROR,10.10.2.164,181.76.114.253 +IT-WS-064,2026-02-14T09:35:11.604Z,cloudflare.com,A,NOERROR,10.10.2.164,192.186.99.195 +IT-WS-064,2026-02-13T03:27:26.297Z,github.com,CNAME,NOERROR,10.10.2.164, +IT-WS-064,2026-02-11T22:40:18.429Z,github.com,AAAA,NOERROR,10.10.2.164, +IT-WS-064,2026-02-12T11:22:41.430Z,akamai.net,CNAME,NXDOMAIN,10.10.2.164,174.137.67.151 +IT-WS-064,2026-02-11T14:30:21.513Z,github.com,TXT,NOERROR,10.10.2.164,144.192.22.235 +IT-WS-064,2026-02-16T12:09:19.232Z,googleapis.com,A,NOERROR,10.10.2.164,68.174.38.10 +IT-WS-064,2026-02-19T04:13:39.623Z,akamai.net,AAAA,SERVFAIL,10.10.2.164,158.72.36.98 +IT-WS-064,2026-02-15T17:04:27.002Z,googleapis.com,A,NXDOMAIN,10.10.2.164, +IT-WS-064,2026-02-15T14:42:43.075Z,pypi.org,A,NXDOMAIN,10.10.2.164,28.29.125.108 +IT-WS-064,2026-02-10T11:07:00.172Z,aws.amazon.com,MX,SERVFAIL,10.10.2.164,167.212.90.81 +IT-WS-064,2026-02-16T09:19:03.460Z,akamai.net,TXT,NOERROR,10.10.2.164, +IT-WS-064,2026-02-16T00:46:44.749Z,windowsupdate.com,TXT,SERVFAIL,10.10.2.164,204.0.196.196 +IT-WS-064,2026-02-11T06:56:25.918Z,draftkings.com,A,NXDOMAIN,10.10.2.164, +IT-WS-064,2026-02-19T20:31:18.203Z,windowsupdate.com,AAAA,NXDOMAIN,10.10.2.164, +IT-WS-064,2026-02-15T15:50:04.873Z,stackoverflow.com,TXT,NOERROR,10.10.2.164,170.146.133.201 +IT-WS-064,2026-02-18T16:33:16.478Z,acme.sharepoint.com,MX,NOERROR,10.10.2.164,216.101.88.111 +IT-WS-064,2026-02-17T17:42:37.091Z,time.windows.com,MX,NXDOMAIN,10.10.2.164,144.114.37.184 +IT-WS-064,2026-02-19T22:33:31.460Z,akamai.net,A,NOERROR,10.10.2.164,77.123.23.198 +IT-WS-064,2026-02-16T06:29:55.212Z,pypi.org,MX,NOERROR,10.10.2.164,97.133.90.31 +IT-WS-064,2026-02-18T05:48:38.032Z,google.com,A,NOERROR,10.10.2.164,218.241.142.119 +IT-WS-064,2026-02-17T18:21:00.682Z,teams.microsoft.com,A,NOERROR,10.10.2.164, +IT-WS-064,2026-02-14T01:12:04.554Z,github.com,A,NXDOMAIN,10.10.2.164,2.111.29.34 +IT-WS-064,2026-02-11T17:13:58.009Z,graph.microsoft.com,MX,SERVFAIL,10.10.2.164, +IT-WS-064,2026-02-13T13:06:18.036Z,login.microsoftonline.com,A,NOERROR,10.10.2.164,127.161.47.224 +IT-WS-064,2026-02-16T16:45:29.960Z,1337x.to,AAAA,NOERROR,10.10.2.164,7.133.59.98 +IT-WS-064,2026-02-12T01:51:58.057Z,cdn.jsdelivr.net,MX,NOERROR,10.10.2.164,146.52.4.148 +IT-WS-064,2026-02-20T01:32:47.484Z,graph.microsoft.com,A,NOERROR,10.10.2.164,169.92.165.17 +IT-WS-064,2026-02-12T02:28:27.385Z,aws.amazon.com,AAAA,SERVFAIL,10.10.2.164,20.110.229.245 +IT-WS-064,2026-02-19T04:38:34.533Z,www.bet365.com,A,SERVFAIL,10.10.2.164,24.159.2.20 +IT-WS-064,2026-02-14T09:02:30.399Z,dc-01.acme.local,MX,NOERROR,10.10.2.164,61.206.18.240 +HR-WS-065,2026-02-11T23:10:47.521Z,pypi.org,A,NOERROR,10.10.3.165,179.3.222.189 +HR-WS-065,2026-02-17T12:28:24.676Z,acme.sharepoint.com,CNAME,NOERROR,10.10.3.165,53.185.13.29 +HR-WS-065,2026-02-12T06:52:24.229Z,time.windows.com,AAAA,NOERROR,10.10.3.165,10.159.139.97 +HR-WS-065,2026-02-12T21:03:48.198Z,pypi.org,CNAME,NOERROR,10.10.3.165,87.51.105.57 +HR-WS-065,2026-02-16T11:55:13.871Z,login.microsoftonline.com,MX,NOERROR,10.10.3.165, +HR-WS-065,2026-02-19T00:43:34.793Z,googleapis.com,A,NOERROR,10.10.3.165,1.244.158.24 +HR-WS-065,2026-02-13T20:29:30.955Z,acme.sharepoint.com,A,NXDOMAIN,10.10.3.165,62.121.25.57 +HR-WS-065,2026-02-17T05:14:01.888Z,acme.local,TXT,NOERROR,10.10.3.165,52.113.51.151 +HR-WS-065,2026-02-10T12:51:29.610Z,npmjs.com,A,NOERROR,10.10.3.165,77.52.200.37 +HR-WS-065,2026-02-14T02:08:41.796Z,pypi.org,A,NOERROR,10.10.3.165,62.62.137.101 +HR-WS-065,2026-02-12T16:17:14.068Z,login.microsoftonline.com,CNAME,NOERROR,10.10.3.165,93.148.198.221 +HR-WS-065,2026-02-12T00:20:02.941Z,aws.amazon.com,A,SERVFAIL,10.10.3.165, +HR-WS-065,2026-02-10T13:18:50.883Z,cloudflare.com,AAAA,NOERROR,10.10.3.165, +HR-WS-065,2026-02-11T10:17:24.545Z,exch-01.acme.local,TXT,SERVFAIL,10.10.3.165,2.207.8.216 +HR-WS-065,2026-02-18T07:24:33.291Z,pypi.org,A,NXDOMAIN,10.10.3.165,31.82.199.209 +HR-WS-065,2026-02-16T22:29:57.886Z,pypi.org,A,NOERROR,10.10.3.165,25.200.81.170 +HR-WS-065,2026-02-19T18:52:09.208Z,aws.amazon.com,A,NOERROR,10.10.3.165,188.220.177.109 +HR-WS-065,2026-02-16T03:31:28.630Z,aws.amazon.com,A,NXDOMAIN,10.10.3.165,43.5.72.228 +HR-WS-065,2026-02-20T12:46:11.620Z,www.reddit.com,A,NOERROR,10.10.3.165,99.173.116.73 +HR-WS-065,2026-02-11T06:05:48.607Z,dc-02.acme.local,CNAME,NOERROR,10.10.3.165,182.240.58.176 +HR-WS-065,2026-02-20T02:24:55.894Z,cdn.jsdelivr.net,CNAME,NOERROR,10.10.3.165, +HR-WS-065,2026-02-14T04:03:02.621Z,googleapis.com,A,SERVFAIL,10.10.3.165,13.74.9.251 +HR-WS-065,2026-02-13T23:31:22.736Z,googleapis.com,MX,NOERROR,10.10.3.165,109.130.69.208 +HR-WS-065,2026-02-16T12:22:32.760Z,update.microsoft.com,AAAA,NXDOMAIN,10.10.3.165,10.12.81.67 +HR-WS-065,2026-02-15T18:22:45.040Z,aws.amazon.com,CNAME,NXDOMAIN,10.10.3.165,114.21.77.215 +HR-WS-065,2026-02-14T21:55:21.237Z,login.microsoftonline.com,A,NXDOMAIN,10.10.3.165, +HR-WS-065,2026-02-12T03:21:54.538Z,windowsupdate.com,AAAA,NOERROR,10.10.3.165,52.41.96.66 +HR-WS-065,2026-02-14T17:18:55.395Z,cdn.jsdelivr.net,AAAA,SERVFAIL,10.10.3.165, +HR-WS-065,2026-02-19T23:31:34.634Z,dc-02.acme.local,MX,NOERROR,10.10.3.165,9.49.198.64 +HR-WS-065,2026-02-16T17:30:53.336Z,cdn.jsdelivr.net,CNAME,SERVFAIL,10.10.3.165,43.58.228.49 +HR-WS-065,2026-02-18T04:47:08.284Z,acme.sharepoint.com,TXT,NXDOMAIN,10.10.3.165,27.13.83.206 +HR-WS-065,2026-02-17T05:14:23.211Z,aws.amazon.com,CNAME,NXDOMAIN,10.10.3.165,35.31.195.73 +HR-WS-065,2026-02-19T01:10:46.267Z,stackoverflow.com,MX,NXDOMAIN,10.10.3.165,143.182.195.44 +HR-WS-065,2026-02-16T02:46:12.535Z,outlook.office365.com,CNAME,NOERROR,10.10.3.165,20.156.126.204 +HR-WS-065,2026-02-16T09:05:14.209Z,googleapis.com,AAAA,NOERROR,10.10.3.165,4.87.221.31 +HR-WS-065,2026-02-13T22:05:16.186Z,www.tiktok.com,CNAME,NOERROR,10.10.3.165,136.78.165.175 +HR-WS-065,2026-02-12T21:31:43.426Z,login.microsoftonline.com,A,SERVFAIL,10.10.3.165,87.60.62.221 +HR-WS-065,2026-02-10T16:49:51.041Z,npmjs.com,CNAME,NOERROR,10.10.3.165,53.21.173.50 +HR-WS-065,2026-02-15T10:14:47.609Z,onlyfans.com,A,SERVFAIL,10.10.3.165,14.116.148.5 +HR-WS-065,2026-02-16T23:20:11.965Z,onlyfans.com,MX,NXDOMAIN,10.10.3.165,179.33.62.189 +HR-WS-065,2026-02-19T03:08:58.614Z,www.bet365.com,A,SERVFAIL,10.10.3.165,155.181.248.76 +HR-WS-065,2026-02-13T23:05:14.747Z,dc-02.acme.local,A,NOERROR,10.10.3.165, +HR-WS-065,2026-02-19T14:24:24.666Z,graph.microsoft.com,AAAA,SERVFAIL,10.10.3.165,112.241.106.142 +HR-WS-065,2026-02-11T13:06:41.662Z,acme.local,A,NOERROR,10.10.3.165,96.211.253.109 +FIN-WS-066,2026-02-16T20:13:58.558Z,cdn.jsdelivr.net,TXT,NXDOMAIN,10.10.1.166, +FIN-WS-066,2026-02-17T18:59:56.977Z,windowsupdate.com,AAAA,NOERROR,10.10.1.166,59.250.21.49 +FIN-WS-066,2026-02-16T17:56:59.625Z,aws.amazon.com,TXT,NOERROR,10.10.1.166,104.164.55.237 +FIN-WS-066,2026-02-17T11:18:25.145Z,teams.microsoft.com,CNAME,NOERROR,10.10.1.166, +FIN-WS-066,2026-02-17T02:58:09.588Z,npmjs.com,AAAA,NOERROR,10.10.1.166,200.227.196.208 +FIN-WS-066,2026-02-17T00:14:06.456Z,teams.microsoft.com,A,NXDOMAIN,10.10.1.166, +FIN-WS-066,2026-02-11T05:41:13.717Z,aws.amazon.com,A,NXDOMAIN,10.10.1.166,41.137.95.222 +FIN-WS-066,2026-02-14T22:21:32.924Z,acme.local,A,NOERROR,10.10.1.166,137.23.34.56 +FIN-WS-066,2026-02-20T16:49:29.869Z,npmjs.com,AAAA,NOERROR,10.10.1.166, +FIN-WS-066,2026-02-15T08:23:11.779Z,akamai.net,A,NXDOMAIN,10.10.1.166,37.211.63.17 +FIN-WS-066,2026-02-15T03:18:59.707Z,thepiratebay.org,AAAA,NOERROR,10.10.1.166,66.236.246.227 +FIN-WS-066,2026-02-17T23:14:47.244Z,acme.local,CNAME,NOERROR,10.10.1.166,83.178.213.223 +FIN-WS-066,2026-02-11T00:03:09.947Z,acme.sharepoint.com,A,NXDOMAIN,10.10.1.166,84.90.207.104 +FIN-WS-066,2026-02-17T21:32:17.473Z,aws.amazon.com,A,SERVFAIL,10.10.1.166,134.137.114.141 +FIN-WS-066,2026-02-13T10:33:11.869Z,graph.microsoft.com,A,NOERROR,10.10.1.166,189.53.207.96 +FIN-WS-066,2026-02-15T17:46:14.073Z,login.microsoftonline.com,A,NOERROR,10.10.1.166,131.19.66.73 +FIN-WS-066,2026-02-18T17:36:26.157Z,github.com,AAAA,SERVFAIL,10.10.1.166,44.221.33.120 +FIN-WS-066,2026-02-14T06:22:59.924Z,time.windows.com,A,SERVFAIL,10.10.1.166,196.222.103.21 +FIN-WS-066,2026-02-17T12:23:12.684Z,acme.sharepoint.com,TXT,NOERROR,10.10.1.166, +FIN-WS-066,2026-02-16T11:22:05.170Z,update.microsoft.com,AAAA,SERVFAIL,10.10.1.166,2.156.173.2 +FIN-WS-066,2026-02-18T10:03:28.085Z,login.microsoftonline.com,A,SERVFAIL,10.10.1.166,59.141.57.168 +FIN-WS-066,2026-02-15T10:31:14.891Z,thepiratebay.org,CNAME,SERVFAIL,10.10.1.166, +FIN-WS-066,2026-02-17T12:36:33.732Z,google.com,MX,SERVFAIL,10.10.1.166,53.119.243.167 +FIN-WS-066,2026-02-12T00:20:28.607Z,time.windows.com,MX,SERVFAIL,10.10.1.166, +FIN-WS-066,2026-02-19T16:31:05.764Z,fitgirl-repacks.site,A,SERVFAIL,10.10.1.166, +FIN-WS-066,2026-02-12T22:16:03.311Z,google.com,AAAA,NOERROR,10.10.1.166,125.32.208.14 +FIN-WS-066,2026-02-15T13:54:52.058Z,acme.local,A,NXDOMAIN,10.10.1.166,117.206.6.40 +FIN-WS-066,2026-02-16T13:27:43.084Z,dc-02.acme.local,A,NXDOMAIN,10.10.1.166, +FIN-WS-066,2026-02-12T22:43:07.862Z,akamai.net,TXT,NOERROR,10.10.1.166, +FIN-WS-066,2026-02-16T10:54:54.141Z,acme.local,MX,NXDOMAIN,10.10.1.166,45.124.227.157 +FIN-WS-066,2026-02-17T02:01:47.421Z,cloudflare.com,CNAME,SERVFAIL,10.10.1.166,194.29.79.248 +FIN-WS-066,2026-02-18T12:47:12.477Z,windowsupdate.com,A,SERVFAIL,10.10.1.166, +FIN-WS-066,2026-02-12T22:28:54.819Z,exch-01.acme.local,CNAME,NOERROR,10.10.1.166,108.76.124.243 +FIN-WS-066,2026-02-10T18:41:03.778Z,windowsupdate.com,AAAA,NOERROR,10.10.1.166,107.50.43.88 +FIN-WS-066,2026-02-18T23:51:48.961Z,akamai.net,A,NOERROR,10.10.1.166,14.199.255.142 +FIN-WS-066,2026-02-16T08:00:03.258Z,www.amazon.com,MX,NXDOMAIN,10.10.1.166, +FIN-WS-066,2026-02-20T13:54:22.294Z,www.ebay.com,A,NOERROR,10.10.1.166,1.130.150.113 +FIN-WS-066,2026-02-10T17:17:13.507Z,discord.gg,TXT,NOERROR,10.10.1.166,33.145.228.79 +FIN-WS-066,2026-02-12T06:27:17.537Z,github.com,A,NXDOMAIN,10.10.1.166,143.217.35.123 +FIN-WS-066,2026-02-18T15:26:26.117Z,update.microsoft.com,MX,NXDOMAIN,10.10.1.166, +FIN-WS-066,2026-02-16T16:48:18.597Z,acme.sharepoint.com,A,NOERROR,10.10.1.166,181.122.208.143 +FIN-WS-066,2026-02-10T20:18:33.280Z,googleapis.com,CNAME,NXDOMAIN,10.10.1.166,179.211.128.165 +FIN-WS-066,2026-02-14T13:09:59.479Z,stackoverflow.com,A,NOERROR,10.10.1.166,122.190.213.200 +FIN-WS-066,2026-02-13T04:05:22.893Z,www.tiktok.com,AAAA,NOERROR,10.10.1.166,124.253.185.145 +FIN-WS-066,2026-02-13T05:08:37.452Z,cloudflare.com,CNAME,SERVFAIL,10.10.1.166,19.98.225.75 +FIN-WS-066,2026-02-19T17:59:34.854Z,googleapis.com,AAAA,SERVFAIL,10.10.1.166,97.19.144.34 +FIN-WS-066,2026-02-10T09:05:11.956Z,file-01.acme.local,CNAME,NXDOMAIN,10.10.1.166,16.79.61.253 +FIN-WS-066,2026-02-12T03:15:52.381Z,npmjs.com,CNAME,SERVFAIL,10.10.1.166,19.203.55.186 +FIN-WS-066,2026-02-14T21:32:22.585Z,hulu.com,MX,NOERROR,10.10.1.166,151.149.1.58 +FIN-WS-066,2026-02-20T16:12:33.772Z,npmjs.com,A,NOERROR,10.10.1.166,126.130.46.161 +FIN-WS-066,2026-02-19T14:59:00.813Z,cloudflare.com,TXT,NOERROR,10.10.1.166,97.163.163.220 +FIN-WS-066,2026-02-14T15:18:03.336Z,npmjs.com,A,NOERROR,10.10.1.166,152.236.1.222 +FIN-WS-066,2026-02-12T11:44:40.412Z,npmjs.com,A,NOERROR,10.10.1.166,61.65.155.9 +SLS-WS-067,2026-02-16T11:00:47.597Z,exch-01.acme.local,AAAA,NOERROR,10.10.2.167,17.206.191.115 +SLS-WS-067,2026-02-15T06:41:40.500Z,file-01.acme.local,TXT,NXDOMAIN,10.10.2.167,39.36.5.176 +SLS-WS-067,2026-02-17T07:24:34.473Z,pypi.org,A,NOERROR,10.10.2.167,101.30.172.254 +SLS-WS-067,2026-02-15T18:50:33.834Z,acme.sharepoint.com,A,NOERROR,10.10.2.167, +SLS-WS-067,2026-02-18T10:42:10.202Z,login.microsoftonline.com,A,NXDOMAIN,10.10.2.167,212.59.208.225 +SLS-WS-067,2026-02-19T07:22:22.901Z,akamai.net,A,NOERROR,10.10.2.167, +SLS-WS-067,2026-02-14T13:28:07.497Z,www.pornhub.com,A,NOERROR,10.10.2.167,178.191.192.154 +SLS-WS-067,2026-02-11T06:51:02.623Z,googleapis.com,A,NOERROR,10.10.2.167,195.198.231.85 +SLS-WS-067,2026-02-13T01:42:51.528Z,exch-01.acme.local,A,NOERROR,10.10.2.167,49.137.92.107 +SLS-WS-067,2026-02-12T18:52:00.294Z,www.netflix.com,TXT,SERVFAIL,10.10.2.167, +SLS-WS-067,2026-02-17T16:06:26.788Z,cloudflare.com,MX,SERVFAIL,10.10.2.167,186.25.59.132 +SLS-WS-067,2026-02-15T17:22:55.530Z,file-01.acme.local,A,NOERROR,10.10.2.167, +SLS-WS-067,2026-02-14T16:45:32.481Z,acme.sharepoint.com,AAAA,NOERROR,10.10.2.167,67.170.53.36 +SLS-WS-067,2026-02-11T14:14:05.798Z,github.com,TXT,NOERROR,10.10.2.167,157.28.84.41 +SLS-WS-067,2026-02-12T12:04:19.144Z,cloudflare.com,A,SERVFAIL,10.10.2.167,75.150.110.242 +SLS-WS-067,2026-02-12T00:49:52.960Z,akamai.net,A,NOERROR,10.10.2.167,218.165.169.213 +SLS-WS-067,2026-02-16T13:08:30.391Z,cloudflare.com,A,NXDOMAIN,10.10.2.167, +SLS-WS-067,2026-02-15T09:16:42.152Z,google.com,AAAA,NOERROR,10.10.2.167,54.214.178.115 +SLS-WS-067,2026-02-14T22:30:54.401Z,acme.sharepoint.com,A,NOERROR,10.10.2.167, +SLS-WS-067,2026-02-11T08:45:39.241Z,dc-02.acme.local,MX,NXDOMAIN,10.10.2.167,98.249.184.206 +SLS-WS-067,2026-02-17T00:56:24.574Z,time.windows.com,A,NOERROR,10.10.2.167,34.138.196.123 +SLS-WS-067,2026-02-16T11:20:17.993Z,teams.microsoft.com,MX,NOERROR,10.10.2.167,116.60.67.8 +SLS-WS-067,2026-02-13T19:37:14.565Z,dc-02.acme.local,A,NOERROR,10.10.2.167,138.142.152.53 +SLS-WS-067,2026-02-11T18:33:42.508Z,npmjs.com,A,SERVFAIL,10.10.2.167,147.142.61.61 +SLS-WS-067,2026-02-15T09:43:33.939Z,github.com,A,SERVFAIL,10.10.2.167,216.200.4.133 +ENG-WS-068,2026-02-16T05:12:40.589Z,acme.local,A,NOERROR,10.10.3.168, +ENG-WS-068,2026-02-16T10:01:16.998Z,file-01.acme.local,A,SERVFAIL,10.10.3.168,14.144.149.67 +ENG-WS-068,2026-02-15T02:30:37.374Z,windowsupdate.com,MX,NOERROR,10.10.3.168,70.175.77.123 +ENG-WS-068,2026-02-10T23:13:41.137Z,teams.microsoft.com,CNAME,NOERROR,10.10.3.168,167.83.243.71 +ENG-WS-068,2026-02-13T15:24:05.207Z,cdn.jsdelivr.net,A,SERVFAIL,10.10.3.168,32.129.195.205 +ENG-WS-068,2026-02-16T00:32:04.472Z,xvideos.com,TXT,NOERROR,10.10.3.168,106.58.9.144 +ENG-WS-068,2026-02-15T21:44:06.583Z,exch-01.acme.local,MX,NXDOMAIN,10.10.3.168, +ENG-WS-068,2026-02-10T15:21:02.674Z,exch-01.acme.local,AAAA,SERVFAIL,10.10.3.168,160.110.88.253 +ENG-WS-068,2026-02-19T01:22:51.413Z,cdn.jsdelivr.net,MX,NOERROR,10.10.3.168,208.201.125.24 +ENG-WS-068,2026-02-18T10:25:36.111Z,pypi.org,A,SERVFAIL,10.10.3.168,105.208.225.189 +ENG-WS-068,2026-02-14T14:47:26.038Z,npmjs.com,MX,NOERROR,10.10.3.168,196.200.106.203 +ENG-WS-068,2026-02-10T10:35:15.613Z,acme.local,AAAA,NOERROR,10.10.3.168,105.66.155.176 +ENG-WS-068,2026-02-14T17:20:41.169Z,npmjs.com,A,SERVFAIL,10.10.3.168,102.187.141.146 +ENG-WS-068,2026-02-18T10:25:58.882Z,login.microsoftonline.com,AAAA,NXDOMAIN,10.10.3.168,206.127.131.248 +ENG-WS-068,2026-02-13T07:48:57.765Z,file-01.acme.local,AAAA,NOERROR,10.10.3.168,98.87.24.232 +ENG-WS-068,2026-02-19T03:57:39.396Z,outlook.office365.com,A,NOERROR,10.10.3.168,158.127.130.235 +ENG-WS-068,2026-02-10T10:17:16.607Z,google.com,A,SERVFAIL,10.10.3.168, +ENG-WS-068,2026-02-19T06:37:22.965Z,hulu.com,CNAME,NOERROR,10.10.3.168,91.204.218.159 +ENG-WS-068,2026-02-10T17:35:12.975Z,outlook.office365.com,A,SERVFAIL,10.10.3.168, +ENG-WS-068,2026-02-18T12:24:30.823Z,teams.microsoft.com,CNAME,NOERROR,10.10.3.168,4.139.62.238 +ENG-WS-068,2026-02-13T17:45:48.758Z,cdn.jsdelivr.net,A,NOERROR,10.10.3.168,38.236.216.133 +ENG-WS-068,2026-02-17T02:54:48.422Z,teams.microsoft.com,AAAA,NXDOMAIN,10.10.3.168,187.101.123.58 +ENG-WS-068,2026-02-14T20:58:20.540Z,file-01.acme.local,A,SERVFAIL,10.10.3.168,40.10.47.142 +ENG-WS-068,2026-02-14T23:56:12.704Z,file-01.acme.local,MX,NOERROR,10.10.3.168,212.89.186.14 +ENG-WS-068,2026-02-11T00:19:56.200Z,dc-02.acme.local,AAAA,NOERROR,10.10.3.168,17.249.125.172 +ENG-WS-068,2026-02-14T04:09:01.698Z,stackoverflow.com,AAAA,NOERROR,10.10.3.168,110.189.185.73 +ENG-WS-068,2026-02-11T15:52:07.016Z,teams.microsoft.com,A,NOERROR,10.10.3.168,195.143.210.117 +ENG-WS-068,2026-02-13T01:04:38.279Z,stackoverflow.com,A,NOERROR,10.10.3.168, +ENG-WS-068,2026-02-16T18:24:47.034Z,npmjs.com,A,SERVFAIL,10.10.3.168,30.153.107.212 +ENG-WS-068,2026-02-13T20:54:45.426Z,acme.sharepoint.com,A,NOERROR,10.10.3.168,88.220.64.213 +ENG-WS-068,2026-02-19T07:52:28.989Z,akamai.net,A,NOERROR,10.10.3.168,131.43.127.201 +ENG-WS-068,2026-02-13T06:55:52.916Z,npmjs.com,A,NXDOMAIN,10.10.3.168,217.37.125.190 +ENG-WS-068,2026-02-15T03:47:58.753Z,outlook.office365.com,CNAME,SERVFAIL,10.10.3.168, +ENG-WS-068,2026-02-10T12:36:50.560Z,file-01.acme.local,A,SERVFAIL,10.10.3.168,36.133.26.195 +ENG-WS-068,2026-02-18T08:12:38.181Z,file-01.acme.local,MX,NOERROR,10.10.3.168, +ENG-WS-068,2026-02-10T13:46:15.268Z,www.glassdoor.com,A,NXDOMAIN,10.10.3.168, +ENG-WS-068,2026-02-18T08:49:29.872Z,exch-01.acme.local,MX,NOERROR,10.10.3.168,40.168.122.203 +ENG-WS-068,2026-02-13T14:53:54.592Z,store.steampowered.com,CNAME,NXDOMAIN,10.10.3.168,196.128.138.229 +ENG-WS-068,2026-02-16T00:45:44.878Z,update.microsoft.com,A,NOERROR,10.10.3.168,5.31.84.200 +ENG-WS-068,2026-02-11T10:51:59.468Z,acme.sharepoint.com,CNAME,NOERROR,10.10.3.168,144.254.124.4 +ENG-WS-068,2026-02-17T11:08:06.299Z,file-01.acme.local,TXT,NOERROR,10.10.3.168,62.139.107.243 +ENG-WS-068,2026-02-11T23:45:52.666Z,cloudflare.com,MX,NOERROR,10.10.3.168, +ENG-WS-068,2026-02-18T08:14:35.182Z,exch-01.acme.local,CNAME,NOERROR,10.10.3.168,186.195.75.228 +ENG-WS-068,2026-02-15T12:27:23.149Z,cloudflare.com,MX,NOERROR,10.10.3.168,114.112.117.153 +ENG-WS-068,2026-02-18T09:13:11.924Z,googleapis.com,AAAA,NOERROR,10.10.3.168, +LEG-WS-069,2026-02-15T14:08:45.683Z,google.com,CNAME,NXDOMAIN,10.10.1.169,136.95.7.174 +LEG-WS-069,2026-02-15T08:34:27.210Z,file-01.acme.local,A,SERVFAIL,10.10.1.169,115.101.6.175 +LEG-WS-069,2026-02-16T14:37:39.149Z,google.com,MX,NOERROR,10.10.1.169,151.149.206.194 +LEG-WS-069,2026-02-17T22:48:37.653Z,time.windows.com,A,NXDOMAIN,10.10.1.169,88.214.80.172 +LEG-WS-069,2026-02-17T00:04:57.185Z,github.com,A,NOERROR,10.10.1.169,115.50.228.92 +LEG-WS-069,2026-02-10T21:21:49.145Z,file-01.acme.local,TXT,SERVFAIL,10.10.1.169,171.67.17.125 +LEG-WS-069,2026-02-19T18:33:53.637Z,akamai.net,A,NOERROR,10.10.1.169,150.24.236.252 +LEG-WS-069,2026-02-10T13:13:02.716Z,googleapis.com,MX,NOERROR,10.10.1.169,65.245.253.49 +LEG-WS-069,2026-02-11T21:15:40.875Z,outlook.office365.com,A,NOERROR,10.10.1.169,200.137.6.175 +LEG-WS-069,2026-02-11T09:18:37.567Z,aws.amazon.com,MX,NOERROR,10.10.1.169,168.0.61.18 +LEG-WS-069,2026-02-18T05:19:43.236Z,acme.sharepoint.com,MX,NOERROR,10.10.1.169,167.36.202.159 +LEG-WS-069,2026-02-19T23:57:10.414Z,dc-01.acme.local,MX,NOERROR,10.10.1.169,199.200.212.170 +LEG-WS-069,2026-02-11T00:34:13.327Z,pypi.org,A,NXDOMAIN,10.10.1.169,57.177.93.114 +LEG-WS-069,2026-02-11T17:47:40.306Z,exch-01.acme.local,A,NOERROR,10.10.1.169,28.98.5.167 +LEG-WS-069,2026-02-14T08:33:50.636Z,www.shein.com,A,SERVFAIL,10.10.1.169,24.169.81.254 +LEG-WS-069,2026-02-10T22:51:13.436Z,outlook.office365.com,MX,NOERROR,10.10.1.169, +LEG-WS-069,2026-02-17T17:50:07.784Z,github.com,CNAME,NOERROR,10.10.1.169,141.193.12.206 +LEG-WS-069,2026-02-19T06:19:54.102Z,google.com,AAAA,NOERROR,10.10.1.169,36.108.66.218 +LEG-WS-069,2026-02-19T01:11:38.495Z,github.com,CNAME,NOERROR,10.10.1.169,10.194.24.203 +LEG-WS-069,2026-02-15T01:33:19.096Z,stackoverflow.com,A,NOERROR,10.10.1.169,117.84.37.66 +LEG-WS-069,2026-02-10T17:50:19.489Z,graph.microsoft.com,MX,NOERROR,10.10.1.169,7.131.241.159 +LEG-WS-069,2026-02-17T19:59:54.681Z,google.com,A,NOERROR,10.10.1.169,117.31.176.197 +LEG-WS-069,2026-02-16T23:25:46.004Z,cdn.jsdelivr.net,A,NXDOMAIN,10.10.1.169,139.189.232.194 +LEG-WS-069,2026-02-10T13:19:19.447Z,googleapis.com,AAAA,NOERROR,10.10.1.169,119.163.143.197 +LEG-WS-069,2026-02-20T12:17:28.465Z,cloudflare.com,A,NOERROR,10.10.1.169,195.111.247.136 +LEG-WS-069,2026-02-19T05:16:34.617Z,time.windows.com,CNAME,NOERROR,10.10.1.169,12.2.147.81 +LEG-WS-069,2026-02-13T02:08:27.726Z,acme.sharepoint.com,AAAA,NOERROR,10.10.1.169,210.89.13.202 +LEG-WS-069,2026-02-10T08:32:10.258Z,outlook.office365.com,AAAA,NXDOMAIN,10.10.1.169,120.178.172.68 +LEG-WS-069,2026-02-18T19:06:35.153Z,acme.sharepoint.com,A,SERVFAIL,10.10.1.169,75.45.217.54 +LEG-WS-069,2026-02-11T04:10:01.551Z,file-01.acme.local,MX,NOERROR,10.10.1.169,163.103.26.50 +LEG-WS-069,2026-02-15T14:44:21.510Z,exch-01.acme.local,A,NXDOMAIN,10.10.1.169,45.198.115.176 +LEG-WS-069,2026-02-16T00:01:14.476Z,login.microsoftonline.com,A,NOERROR,10.10.1.169,216.6.219.226 +LEG-WS-069,2026-02-12T01:33:59.534Z,graph.microsoft.com,CNAME,SERVFAIL,10.10.1.169, +LEG-WS-069,2026-02-10T23:01:09.360Z,acme.local,CNAME,NXDOMAIN,10.10.1.169,33.47.51.35 +LEG-WS-069,2026-02-14T13:10:02.158Z,time.windows.com,A,NOERROR,10.10.1.169,25.232.212.231 +LEG-WS-069,2026-02-19T20:12:53.364Z,acme.local,AAAA,NOERROR,10.10.1.169,108.247.103.212 +LEG-WS-069,2026-02-11T02:10:22.363Z,graph.microsoft.com,MX,NOERROR,10.10.1.169,137.210.221.71 +LEG-WS-069,2026-02-11T09:12:44.875Z,dc-02.acme.local,MX,NOERROR,10.10.1.169,156.159.218.141 +LEG-WS-069,2026-02-16T22:56:56.915Z,acme.sharepoint.com,CNAME,NOERROR,10.10.1.169,82.235.227.237 +LEG-WS-069,2026-02-19T00:38:58.308Z,googleapis.com,A,NXDOMAIN,10.10.1.169,208.113.191.23 +LEG-WS-069,2026-02-10T16:30:05.944Z,github.com,A,NOERROR,10.10.1.169,167.127.245.190 +LEG-WS-069,2026-02-13T02:15:34.612Z,graph.microsoft.com,A,NOERROR,10.10.1.169,91.31.225.204 +LEG-WS-069,2026-02-13T23:47:12.267Z,teams.microsoft.com,A,NOERROR,10.10.1.169,98.113.72.58 +LEG-WS-069,2026-02-15T09:54:57.685Z,thepiratebay.org,MX,NOERROR,10.10.1.169,152.214.38.180 +LEG-WS-069,2026-02-20T09:07:30.999Z,www.linkedin.com/jobs,TXT,NOERROR,10.10.1.169,162.117.117.206 +LEG-WS-069,2026-02-11T06:54:23.479Z,dc-02.acme.local,AAAA,SERVFAIL,10.10.1.169,199.8.222.48 +LEG-WS-069,2026-02-11T05:46:20.459Z,npmjs.com,A,NXDOMAIN,10.10.1.169,170.98.13.249 +LEG-WS-069,2026-02-10T22:29:46.576Z,google.com,A,SERVFAIL,10.10.1.169,52.140.104.105 +LEG-WS-069,2026-02-15T19:51:43.849Z,stackoverflow.com,A,SERVFAIL,10.10.1.169,158.127.145.125 +LEG-WS-069,2026-02-13T01:08:50.097Z,time.windows.com,A,NXDOMAIN,10.10.1.169,37.48.251.191 +LEG-WS-069,2026-02-16T18:18:30.742Z,login.microsoftonline.com,CNAME,NXDOMAIN,10.10.1.169,155.102.71.101 +LEG-WS-069,2026-02-15T18:37:22.654Z,dc-02.acme.local,A,SERVFAIL,10.10.1.169,164.88.171.27 +LEG-WS-069,2026-02-16T04:02:15.679Z,windowsupdate.com,TXT,NOERROR,10.10.1.169,90.135.79.97 +LEG-WS-069,2026-02-19T18:26:41.172Z,pypi.org,AAAA,NOERROR,10.10.1.169,48.172.49.34 +LEG-WS-069,2026-02-19T19:53:02.477Z,google.com,MX,NXDOMAIN,10.10.1.169,2.131.53.160 +LEG-WS-069,2026-02-13T01:18:31.558Z,dc-01.acme.local,MX,NXDOMAIN,10.10.1.169,47.66.155.103 +LEG-WS-069,2026-02-15T17:00:39.563Z,github.com,CNAME,NOERROR,10.10.1.169,46.34.244.95 +LEG-WS-069,2026-02-12T21:53:03.129Z,store.steampowered.com,A,NOERROR,10.10.1.169,77.167.133.165 +MKT-WS-070,2026-02-19T00:30:09.167Z,www.linkedin.com/jobs,A,NOERROR,10.10.2.170,113.133.170.182 +MKT-WS-070,2026-02-15T09:10:26.530Z,outlook.office365.com,MX,NOERROR,10.10.2.170,133.152.58.58 +MKT-WS-070,2026-02-11T13:44:08.954Z,acme.local,MX,NXDOMAIN,10.10.2.170, +MKT-WS-070,2026-02-12T09:07:36.878Z,acme.local,TXT,NOERROR,10.10.2.170,164.65.131.93 +MKT-WS-070,2026-02-15T22:11:15.922Z,google.com,MX,NOERROR,10.10.2.170,94.127.158.28 +MKT-WS-070,2026-02-18T23:25:50.119Z,time.windows.com,CNAME,NXDOMAIN,10.10.2.170, +MKT-WS-070,2026-02-17T01:10:56.745Z,graph.microsoft.com,TXT,NOERROR,10.10.2.170, +MKT-WS-070,2026-02-18T09:58:08.121Z,www.amazon.com,A,NOERROR,10.10.2.170,170.40.86.213 +MKT-WS-070,2026-02-12T18:49:28.065Z,aws.amazon.com,A,NOERROR,10.10.2.170,73.4.50.35 +MKT-WS-070,2026-02-11T17:51:56.457Z,teams.microsoft.com,MX,NXDOMAIN,10.10.2.170,83.197.173.50 +MKT-WS-070,2026-02-10T09:07:25.266Z,cloudflare.com,TXT,NOERROR,10.10.2.170,73.138.249.146 +MKT-WS-070,2026-02-10T11:30:08.212Z,dc-01.acme.local,TXT,NOERROR,10.10.2.170,8.81.85.145 +MKT-WS-070,2026-02-13T01:21:22.280Z,github.com,A,SERVFAIL,10.10.2.170,100.166.151.9 +MKT-WS-070,2026-02-12T21:16:34.615Z,googleapis.com,MX,NOERROR,10.10.2.170,211.212.163.143 +MKT-WS-070,2026-02-15T19:10:11.191Z,update.microsoft.com,AAAA,NOERROR,10.10.2.170,99.163.214.46 +MKT-WS-070,2026-02-20T14:53:13.006Z,outlook.office365.com,TXT,NOERROR,10.10.2.170,140.13.61.221 +MKT-WS-070,2026-02-15T15:51:51.806Z,google.com,A,NOERROR,10.10.2.170, +MKT-WS-070,2026-02-15T02:00:58.160Z,acme.sharepoint.com,AAAA,SERVFAIL,10.10.2.170,222.245.82.202 +MKT-WS-070,2026-02-11T22:38:45.638Z,aws.amazon.com,A,NOERROR,10.10.2.170, +MKT-WS-070,2026-02-10T23:37:49.056Z,www.reddit.com,A,NXDOMAIN,10.10.2.170,44.85.104.224 +MKT-WS-070,2026-02-14T06:36:55.546Z,cdn.jsdelivr.net,A,NXDOMAIN,10.10.2.170, +MKT-WS-070,2026-02-13T23:05:57.307Z,teams.microsoft.com,A,NOERROR,10.10.2.170,144.30.228.1 +MKT-WS-070,2026-02-19T15:41:31.589Z,akamai.net,MX,NOERROR,10.10.2.170,43.157.79.170 +MKT-WS-070,2026-02-13T19:01:59.330Z,acme.sharepoint.com,A,NOERROR,10.10.2.170,43.199.102.144 +MKT-WS-070,2026-02-18T21:00:31.479Z,aws.amazon.com,MX,NOERROR,10.10.2.170,90.45.27.157 +MKT-WS-070,2026-02-20T03:02:11.333Z,acme.local,CNAME,NOERROR,10.10.2.170,130.178.233.217 +MKT-WS-070,2026-02-17T02:21:53.065Z,npmjs.com,CNAME,NXDOMAIN,10.10.2.170,166.49.222.21 +MKT-WS-070,2026-02-13T23:32:10.271Z,login.microsoftonline.com,TXT,NXDOMAIN,10.10.2.170,5.76.209.23 +MKT-WS-070,2026-02-16T14:21:46.281Z,googleapis.com,A,NOERROR,10.10.2.170,174.152.33.110 +MKT-WS-070,2026-02-16T20:48:15.541Z,file-01.acme.local,AAAA,NOERROR,10.10.2.170, +MKT-WS-070,2026-02-16T17:47:04.910Z,npmjs.com,A,NOERROR,10.10.2.170,218.134.41.208 +MKT-WS-070,2026-02-20T07:36:00.292Z,www.glassdoor.com,MX,NOERROR,10.10.2.170,87.154.247.70 +MKT-WS-070,2026-02-19T02:25:00.632Z,outlook.office365.com,TXT,NOERROR,10.10.2.170,142.203.177.189 +MKT-WS-070,2026-02-20T13:00:45.774Z,login.microsoftonline.com,MX,NOERROR,10.10.2.170,213.28.11.92 +MKT-WS-070,2026-02-11T04:05:00.215Z,login.microsoftonline.com,MX,NOERROR,10.10.2.170,196.164.228.83 +MKT-WS-070,2026-02-19T18:54:29.589Z,akamai.net,AAAA,NOERROR,10.10.2.170,210.191.215.129 +MKT-WS-070,2026-02-16T00:48:36.394Z,www.ebay.com,MX,SERVFAIL,10.10.2.170,1.53.173.178 +MKT-WS-070,2026-02-11T15:55:42.324Z,graph.microsoft.com,AAAA,NXDOMAIN,10.10.2.170,70.95.150.159 +MKT-WS-070,2026-02-13T07:21:38.906Z,akamai.net,MX,NOERROR,10.10.2.170, +MKT-WS-070,2026-02-11T13:01:20.286Z,exch-01.acme.local,A,NOERROR,10.10.2.170,167.229.71.79 +MKT-WS-070,2026-02-10T20:39:15.614Z,stackoverflow.com,CNAME,NXDOMAIN,10.10.2.170,41.147.245.125 +MKT-WS-070,2026-02-12T20:42:14.434Z,github.com,A,SERVFAIL,10.10.2.170,113.67.15.242 +MKT-WS-070,2026-02-10T22:11:47.836Z,akamai.net,A,NXDOMAIN,10.10.2.170,165.235.157.161 +MKT-WS-070,2026-02-15T14:13:21.008Z,teams.microsoft.com,A,NOERROR,10.10.2.170,35.23.78.41 +EXEC-WS-071,2026-02-15T07:10:59.557Z,www.indeed.com,CNAME,NXDOMAIN,10.10.3.171,199.221.95.239 +EXEC-WS-071,2026-02-14T06:32:11.677Z,pypi.org,MX,NOERROR,10.10.3.171,89.71.169.131 +EXEC-WS-071,2026-02-20T03:10:55.270Z,file-01.acme.local,TXT,NOERROR,10.10.3.171, +EXEC-WS-071,2026-02-13T02:50:35.991Z,github.com,TXT,NXDOMAIN,10.10.3.171,169.205.158.224 +EXEC-WS-071,2026-02-11T11:53:30.098Z,pypi.org,A,NOERROR,10.10.3.171, +EXEC-WS-071,2026-02-14T13:18:08.504Z,dc-01.acme.local,CNAME,NOERROR,10.10.3.171,62.146.227.160 +EXEC-WS-071,2026-02-16T10:14:28.701Z,update.microsoft.com,A,SERVFAIL,10.10.3.171,117.3.146.210 +EXEC-WS-071,2026-02-13T13:50:31.413Z,www.ebay.com,A,NOERROR,10.10.3.171,99.108.100.124 +EXEC-WS-071,2026-02-19T19:22:41.625Z,www.glassdoor.com,A,NOERROR,10.10.3.171,134.53.201.166 +EXEC-WS-071,2026-02-17T01:14:04.303Z,google.com,A,NOERROR,10.10.3.171,90.166.143.42 +EXEC-WS-071,2026-02-20T02:48:06.477Z,npmjs.com,A,NOERROR,10.10.3.171,166.77.147.20 +EXEC-WS-071,2026-02-15T03:03:58.153Z,cloudflare.com,MX,NOERROR,10.10.3.171, +EXEC-WS-071,2026-02-17T18:27:25.497Z,store.steampowered.com,MX,NXDOMAIN,10.10.3.171,118.150.99.98 +EXEC-WS-071,2026-02-16T00:22:33.527Z,open.spotify.com,A,SERVFAIL,10.10.3.171,155.79.224.26 +EXEC-WS-071,2026-02-17T11:06:46.592Z,acme.local,TXT,NOERROR,10.10.3.171,155.105.156.199 +EXEC-WS-071,2026-02-20T05:07:25.108Z,time.windows.com,TXT,SERVFAIL,10.10.3.171,130.213.41.101 +EXEC-WS-071,2026-02-17T15:09:09.928Z,teams.microsoft.com,TXT,NXDOMAIN,10.10.3.171,99.157.161.135 +EXEC-WS-071,2026-02-13T09:13:42.946Z,google.com,A,SERVFAIL,10.10.3.171,82.83.34.232 +EXEC-WS-071,2026-02-18T00:00:49.769Z,googleapis.com,A,NOERROR,10.10.3.171,50.33.68.108 +EXEC-WS-071,2026-02-17T14:13:41.467Z,1337x.to,MX,NOERROR,10.10.3.171, +EXEC-WS-071,2026-02-18T04:07:29.890Z,google.com,CNAME,NOERROR,10.10.3.171,138.226.216.147 +EXEC-WS-071,2026-02-19T09:44:31.278Z,googleapis.com,A,NOERROR,10.10.3.171,24.116.17.127 +EXEC-WS-071,2026-02-19T08:42:18.283Z,cdn.jsdelivr.net,A,SERVFAIL,10.10.3.171,62.178.157.28 +EXEC-WS-071,2026-02-18T07:13:51.146Z,acme.local,CNAME,NOERROR,10.10.3.171,45.103.90.208 +EXEC-WS-071,2026-02-10T21:56:55.049Z,npmjs.com,A,NOERROR,10.10.3.171,82.255.39.235 +EXEC-WS-071,2026-02-20T16:27:15.108Z,www.pornhub.com,A,NXDOMAIN,10.10.3.171,54.170.52.234 +EXEC-WS-071,2026-02-11T15:23:24.131Z,cloudflare.com,A,NXDOMAIN,10.10.3.171,127.28.78.53 +IT-WS-072,2026-02-19T17:41:38.194Z,aws.amazon.com,A,NOERROR,10.10.1.172,20.22.194.1 +IT-WS-072,2026-02-14T08:58:03.134Z,pypi.org,A,NOERROR,10.10.1.172,54.143.212.1 +IT-WS-072,2026-02-20T10:37:27.270Z,github.com,AAAA,NOERROR,10.10.1.172,102.142.37.182 +IT-WS-072,2026-02-16T12:06:16.513Z,windowsupdate.com,TXT,NXDOMAIN,10.10.1.172, +IT-WS-072,2026-02-11T07:39:34.092Z,update.microsoft.com,A,NOERROR,10.10.1.172,164.116.179.219 +IT-WS-072,2026-02-11T16:40:35.797Z,pypi.org,AAAA,NXDOMAIN,10.10.1.172,94.22.134.187 +IT-WS-072,2026-02-13T13:59:51.184Z,akamai.net,CNAME,NOERROR,10.10.1.172,163.72.125.86 +IT-WS-072,2026-02-11T22:26:28.626Z,pypi.org,AAAA,NOERROR,10.10.1.172, +IT-WS-072,2026-02-18T16:41:29.790Z,exch-01.acme.local,AAAA,NOERROR,10.10.1.172,20.59.115.157 +IT-WS-072,2026-02-14T03:23:33.810Z,open.spotify.com,TXT,SERVFAIL,10.10.1.172, +IT-WS-072,2026-02-12T01:16:57.367Z,aws.amazon.com,CNAME,NOERROR,10.10.1.172,10.191.214.144 +IT-WS-072,2026-02-12T16:21:59.004Z,akamai.net,CNAME,NOERROR,10.10.1.172,103.122.189.152 +IT-WS-072,2026-02-18T08:32:03.740Z,npmjs.com,TXT,NOERROR,10.10.1.172,157.224.152.136 +IT-WS-072,2026-02-16T04:08:11.530Z,googleapis.com,A,NOERROR,10.10.1.172,126.106.103.233 +IT-WS-072,2026-02-16T19:56:13.109Z,cdn.jsdelivr.net,A,NOERROR,10.10.1.172,100.0.147.3 +IT-WS-072,2026-02-19T13:07:11.321Z,cdn.jsdelivr.net,CNAME,NOERROR,10.10.1.172, +IT-WS-072,2026-02-13T19:17:12.688Z,login.microsoftonline.com,A,NXDOMAIN,10.10.1.172,83.19.203.83 +IT-WS-072,2026-02-19T08:52:45.024Z,github.com,MX,NOERROR,10.10.1.172, +IT-WS-072,2026-02-10T18:31:57.780Z,windowsupdate.com,AAAA,NOERROR,10.10.1.172, +IT-WS-072,2026-02-16T07:32:18.423Z,teams.microsoft.com,A,NOERROR,10.10.1.172,219.240.51.190 +IT-WS-072,2026-02-18T05:42:00.162Z,github.com,CNAME,SERVFAIL,10.10.1.172, +HR-WS-073,2026-02-19T03:16:58.440Z,teams.microsoft.com,A,NOERROR,10.10.2.173,215.78.203.28 +HR-WS-073,2026-02-12T14:04:28.092Z,update.microsoft.com,TXT,NXDOMAIN,10.10.2.173,195.61.138.1 +HR-WS-073,2026-02-16T23:00:14.003Z,update.microsoft.com,CNAME,NOERROR,10.10.2.173, +HR-WS-073,2026-02-11T23:02:59.537Z,cloudflare.com,CNAME,NOERROR,10.10.2.173, +HR-WS-073,2026-02-18T09:29:57.902Z,update.microsoft.com,A,NOERROR,10.10.2.173, +HR-WS-073,2026-02-15T19:36:23.783Z,cdn.jsdelivr.net,TXT,NOERROR,10.10.2.173,173.82.135.170 +HR-WS-073,2026-02-17T00:10:24.322Z,outlook.office365.com,A,NXDOMAIN,10.10.2.173,183.119.171.59 +HR-WS-073,2026-02-13T16:40:42.707Z,cloudflare.com,MX,NOERROR,10.10.2.173,125.210.94.151 +HR-WS-073,2026-02-15T17:51:41.033Z,time.windows.com,MX,NXDOMAIN,10.10.2.173,74.28.232.118 +HR-WS-073,2026-02-12T13:52:57.794Z,exch-01.acme.local,A,NOERROR,10.10.2.173, +HR-WS-073,2026-02-15T04:14:02.436Z,aws.amazon.com,TXT,NOERROR,10.10.2.173,61.192.28.33 +HR-WS-073,2026-02-19T19:28:27.414Z,acme.sharepoint.com,A,NOERROR,10.10.2.173,215.83.215.18 +HR-WS-073,2026-02-14T19:19:49.496Z,acme.sharepoint.com,TXT,NOERROR,10.10.2.173,208.240.230.222 +HR-WS-073,2026-02-17T21:34:13.865Z,google.com,AAAA,NOERROR,10.10.2.173, +HR-WS-073,2026-02-13T05:50:26.916Z,teams.microsoft.com,AAAA,SERVFAIL,10.10.2.173, +HR-WS-073,2026-02-20T04:32:08.946Z,windowsupdate.com,A,NOERROR,10.10.2.173, +HR-WS-073,2026-02-12T09:12:43.603Z,teams.microsoft.com,CNAME,NOERROR,10.10.2.173,56.172.14.99 +HR-WS-073,2026-02-10T14:51:05.827Z,akamai.net,TXT,NOERROR,10.10.2.173,210.21.49.72 +HR-WS-073,2026-02-13T13:52:29.517Z,windowsupdate.com,AAAA,NOERROR,10.10.2.173,40.128.189.100 +HR-WS-073,2026-02-15T18:36:01.861Z,login.microsoftonline.com,A,SERVFAIL,10.10.2.173,181.116.178.9 +HR-WS-073,2026-02-17T13:32:04.023Z,windowsupdate.com,TXT,NOERROR,10.10.2.173, +HR-WS-073,2026-02-11T12:14:03.251Z,dc-01.acme.local,AAAA,NOERROR,10.10.2.173,208.119.106.184 +HR-WS-073,2026-02-17T00:58:59.335Z,npmjs.com,TXT,NOERROR,10.10.2.173,21.11.174.63 +HR-WS-073,2026-02-16T23:45:06.943Z,googleapis.com,CNAME,NOERROR,10.10.2.173,93.176.30.131 +HR-WS-073,2026-02-13T22:20:27.280Z,windowsupdate.com,MX,NOERROR,10.10.2.173,190.97.7.2 +HR-WS-073,2026-02-14T17:20:33.676Z,google.com,A,SERVFAIL,10.10.2.173,209.155.152.101 +HR-WS-073,2026-02-15T04:35:40.569Z,dc-02.acme.local,A,NOERROR,10.10.2.173, +HR-WS-073,2026-02-16T00:55:41.048Z,dc-01.acme.local,A,NOERROR,10.10.2.173,98.185.21.143 +HR-WS-073,2026-02-16T06:50:38.544Z,github.com,A,NOERROR,10.10.2.173,222.0.88.86 +HR-WS-073,2026-02-17T10:47:34.268Z,akamai.net,A,NOERROR,10.10.2.173,27.56.31.229 +HR-WS-073,2026-02-14T00:46:17.946Z,exch-01.acme.local,MX,NOERROR,10.10.2.173,19.73.216.169 +HR-WS-073,2026-02-19T16:05:11.152Z,stackoverflow.com,TXT,NOERROR,10.10.2.173,146.135.25.190 +HR-WS-073,2026-02-13T11:33:15.429Z,github.com,A,NOERROR,10.10.2.173,211.136.87.216 +HR-WS-073,2026-02-18T05:55:56.072Z,file-01.acme.local,A,NOERROR,10.10.2.173, +HR-WS-073,2026-02-11T19:03:29.132Z,acme.local,MX,NOERROR,10.10.2.173,57.152.30.179 +HR-WS-073,2026-02-15T07:36:50.049Z,acme.sharepoint.com,CNAME,NOERROR,10.10.2.173,183.136.97.204 +HR-WS-073,2026-02-11T00:14:22.703Z,www.glassdoor.com,A,NXDOMAIN,10.10.2.173,167.15.186.62 +HR-WS-073,2026-02-18T02:51:36.163Z,teams.microsoft.com,AAAA,NOERROR,10.10.2.173,42.205.141.151 +HR-WS-073,2026-02-16T01:15:21.241Z,cdn.jsdelivr.net,A,NXDOMAIN,10.10.2.173,161.195.148.73 +HR-WS-073,2026-02-16T20:48:49.788Z,stackoverflow.com,A,NOERROR,10.10.2.173, +HR-WS-073,2026-02-15T03:03:02.635Z,login.microsoftonline.com,A,NOERROR,10.10.2.173,188.18.55.35 +HR-WS-073,2026-02-15T18:55:40.243Z,dc-02.acme.local,A,NOERROR,10.10.2.173,164.152.65.27 +HR-WS-073,2026-02-15T08:35:29.780Z,www.tiktok.com,A,SERVFAIL,10.10.2.173,7.143.131.150 +HR-WS-073,2026-02-17T04:28:24.593Z,pokerstars.com,A,NOERROR,10.10.2.173,179.98.36.188 +HR-WS-073,2026-02-19T21:22:43.894Z,dc-02.acme.local,AAAA,NOERROR,10.10.2.173,154.106.8.183 +HR-WS-073,2026-02-10T22:08:58.568Z,dc-02.acme.local,CNAME,NOERROR,10.10.2.173, +HR-WS-073,2026-02-17T07:48:40.580Z,pokerstars.com,CNAME,NOERROR,10.10.2.173, +HR-WS-073,2026-02-18T12:27:41.529Z,exch-01.acme.local,AAAA,NOERROR,10.10.2.173,134.233.162.10 +HR-WS-073,2026-02-18T08:41:29.829Z,login.microsoftonline.com,MX,NOERROR,10.10.2.173,69.59.135.134 +HR-WS-073,2026-02-13T19:01:58.162Z,teams.microsoft.com,A,SERVFAIL,10.10.2.173,69.67.234.122 +HR-WS-073,2026-02-11T00:15:36.136Z,steamcommunity.com,A,NOERROR,10.10.2.173,30.53.171.32 +HR-WS-073,2026-02-14T20:36:23.463Z,www.ebay.com,A,NXDOMAIN,10.10.2.173,66.106.189.158 +HR-WS-073,2026-02-10T16:56:25.256Z,graph.microsoft.com,A,NXDOMAIN,10.10.2.173,3.130.255.48 +HR-WS-073,2026-02-12T13:51:45.842Z,exch-01.acme.local,A,NOERROR,10.10.2.173,128.38.95.38 +HR-WS-073,2026-02-13T16:28:36.934Z,steamcommunity.com,A,SERVFAIL,10.10.2.173,79.164.90.77 +HR-WS-073,2026-02-15T17:23:24.403Z,google.com,A,NOERROR,10.10.2.173,110.65.162.197 +HR-WS-073,2026-02-14T13:52:38.535Z,acme.local,A,NOERROR,10.10.2.173,150.121.38.214 +FIN-WS-074,2026-02-19T01:19:58.214Z,time.windows.com,A,NOERROR,10.10.3.174, +FIN-WS-074,2026-02-15T14:16:01.989Z,akamai.net,AAAA,SERVFAIL,10.10.3.174,182.56.69.170 +FIN-WS-074,2026-02-12T06:10:58.492Z,aws.amazon.com,TXT,NXDOMAIN,10.10.3.174,79.39.171.182 +FIN-WS-074,2026-02-16T19:39:20.161Z,dc-01.acme.local,A,NOERROR,10.10.3.174,50.152.169.211 +FIN-WS-074,2026-02-14T18:35:35.491Z,www.pornhub.com,A,NOERROR,10.10.3.174,137.221.201.216 +FIN-WS-074,2026-02-16T01:10:34.282Z,dc-01.acme.local,A,NOERROR,10.10.3.174,197.87.69.179 +FIN-WS-074,2026-02-18T20:47:54.028Z,update.microsoft.com,AAAA,NOERROR,10.10.3.174,127.241.254.159 +FIN-WS-074,2026-02-14T08:21:12.405Z,akamai.net,MX,SERVFAIL,10.10.3.174, +FIN-WS-074,2026-02-17T12:47:29.223Z,npmjs.com,AAAA,NOERROR,10.10.3.174,129.114.183.22 +FIN-WS-074,2026-02-12T07:44:55.847Z,acme.local,A,NOERROR,10.10.3.174,117.91.28.144 +FIN-WS-074,2026-02-18T13:51:47.813Z,acme.local,MX,NOERROR,10.10.3.174,100.83.8.22 +FIN-WS-074,2026-02-16T11:24:27.421Z,update.microsoft.com,CNAME,NOERROR,10.10.3.174,98.205.29.226 +FIN-WS-074,2026-02-20T05:46:34.670Z,stackoverflow.com,MX,NOERROR,10.10.3.174,218.10.138.1 +FIN-WS-074,2026-02-10T14:44:29.302Z,cloudflare.com,TXT,NOERROR,10.10.3.174,172.244.200.230 +FIN-WS-074,2026-02-10T13:09:34.590Z,stackoverflow.com,TXT,NXDOMAIN,10.10.3.174,206.105.111.209 +FIN-WS-074,2026-02-20T10:32:36.964Z,aws.amazon.com,A,NXDOMAIN,10.10.3.174,104.252.219.3 +FIN-WS-074,2026-02-14T00:33:18.773Z,file-01.acme.local,TXT,NOERROR,10.10.3.174,87.24.27.141 +FIN-WS-074,2026-02-16T20:26:00.156Z,stackoverflow.com,AAAA,NOERROR,10.10.3.174, +FIN-WS-074,2026-02-18T23:21:46.170Z,npmjs.com,CNAME,NOERROR,10.10.3.174,76.159.39.150 +FIN-WS-074,2026-02-18T09:42:32.752Z,dc-02.acme.local,A,NOERROR,10.10.3.174,107.33.200.13 +FIN-WS-074,2026-02-12T05:00:52.648Z,time.windows.com,A,SERVFAIL,10.10.3.174,11.225.204.24 +FIN-WS-074,2026-02-15T14:11:17.996Z,aws.amazon.com,A,NOERROR,10.10.3.174,138.107.211.127 +FIN-WS-074,2026-02-10T11:35:12.712Z,cloudflare.com,AAAA,NOERROR,10.10.3.174,72.47.60.197 +FIN-WS-074,2026-02-13T19:12:36.367Z,cdn.jsdelivr.net,A,NOERROR,10.10.3.174,212.252.173.165 +FIN-WS-074,2026-02-13T19:06:03.976Z,graph.microsoft.com,MX,NOERROR,10.10.3.174,171.67.90.159 +FIN-WS-074,2026-02-15T22:35:42.186Z,time.windows.com,A,SERVFAIL,10.10.3.174,51.30.109.109 +FIN-WS-074,2026-02-14T19:20:12.464Z,google.com,A,NOERROR,10.10.3.174,121.188.104.198 +FIN-WS-074,2026-02-19T14:09:05.318Z,teams.microsoft.com,AAAA,NOERROR,10.10.3.174,127.145.103.154 +FIN-WS-074,2026-02-10T08:15:35.175Z,pypi.org,A,NOERROR,10.10.3.174, +FIN-WS-074,2026-02-10T14:26:33.029Z,time.windows.com,MX,SERVFAIL,10.10.3.174, +FIN-WS-074,2026-02-12T22:16:10.236Z,www.bet365.com,AAAA,NOERROR,10.10.3.174,217.122.131.233 +FIN-WS-074,2026-02-10T10:24:26.187Z,www.pornhub.com,A,SERVFAIL,10.10.3.174, +FIN-WS-074,2026-02-17T16:04:24.579Z,pypi.org,TXT,NOERROR,10.10.3.174, +FIN-WS-074,2026-02-16T04:37:36.162Z,teams.microsoft.com,MX,NXDOMAIN,10.10.3.174,69.24.143.58 +FIN-WS-074,2026-02-18T02:12:50.605Z,dc-02.acme.local,A,NXDOMAIN,10.10.3.174,112.72.64.177 +FIN-WS-074,2026-02-17T12:27:16.073Z,cdn.jsdelivr.net,MX,NOERROR,10.10.3.174,5.174.137.200 +FIN-WS-074,2026-02-12T02:20:35.917Z,outlook.office365.com,MX,NOERROR,10.10.3.174,47.154.211.92 +FIN-WS-074,2026-02-11T19:31:43.255Z,googleapis.com,A,SERVFAIL,10.10.3.174,99.205.128.224 +FIN-WS-074,2026-02-19T16:24:55.438Z,googleapis.com,A,NOERROR,10.10.3.174,116.140.180.49 +FIN-WS-074,2026-02-15T21:03:37.451Z,teams.microsoft.com,AAAA,NOERROR,10.10.3.174,143.225.210.22 +FIN-WS-074,2026-02-13T11:54:54.878Z,dc-02.acme.local,AAAA,NOERROR,10.10.3.174,197.225.118.97 +FIN-WS-074,2026-02-10T17:14:56.001Z,aws.amazon.com,A,NOERROR,10.10.3.174,113.173.114.200 +FIN-WS-074,2026-02-13T12:29:24.264Z,cloudflare.com,MX,NOERROR,10.10.3.174, +FIN-WS-074,2026-02-12T23:43:54.604Z,aws.amazon.com,A,SERVFAIL,10.10.3.174, +FIN-WS-074,2026-02-12T01:29:06.072Z,googleapis.com,MX,SERVFAIL,10.10.3.174,88.80.103.76 +FIN-WS-074,2026-02-11T03:36:19.495Z,akamai.net,A,NOERROR,10.10.3.174, +FIN-WS-074,2026-02-14T12:48:37.750Z,pypi.org,A,SERVFAIL,10.10.3.174,105.22.45.6 +FIN-WS-074,2026-02-19T10:25:33.744Z,stackoverflow.com,TXT,SERVFAIL,10.10.3.174,174.81.158.34 +FIN-WS-074,2026-02-14T02:07:59.823Z,stackoverflow.com,AAAA,SERVFAIL,10.10.3.174,210.168.128.180 +FIN-WS-074,2026-02-16T20:59:18.207Z,outlook.office365.com,CNAME,NOERROR,10.10.3.174,5.119.204.50 +FIN-WS-074,2026-02-18T02:37:32.851Z,acme.sharepoint.com,MX,NXDOMAIN,10.10.3.174,6.61.131.76 +FIN-WS-074,2026-02-20T17:06:29.107Z,github.com,AAAA,SERVFAIL,10.10.3.174,204.169.115.47 +SLS-WS-075,2026-02-19T08:26:48.896Z,acme.local,CNAME,NOERROR,10.10.1.175, +SLS-WS-075,2026-02-18T15:28:36.965Z,www.glassdoor.com,A,SERVFAIL,10.10.1.175, +SLS-WS-075,2026-02-17T14:00:20.886Z,npmjs.com,TXT,NXDOMAIN,10.10.1.175,20.183.31.132 +SLS-WS-075,2026-02-18T16:25:43.375Z,aws.amazon.com,AAAA,NOERROR,10.10.1.175,19.91.76.155 +SLS-WS-075,2026-02-13T22:45:56.176Z,dc-01.acme.local,A,NOERROR,10.10.1.175,52.254.55.78 +SLS-WS-075,2026-02-13T12:53:29.268Z,time.windows.com,CNAME,NOERROR,10.10.1.175,79.113.68.12 +SLS-WS-075,2026-02-14T00:53:11.430Z,cloudflare.com,A,NOERROR,10.10.1.175,206.28.226.131 +SLS-WS-075,2026-02-19T08:47:27.180Z,cdn.jsdelivr.net,CNAME,NOERROR,10.10.1.175, +SLS-WS-075,2026-02-15T09:02:25.834Z,file-01.acme.local,A,NXDOMAIN,10.10.1.175,167.112.200.220 +SLS-WS-075,2026-02-20T17:21:30.929Z,acme.sharepoint.com,A,NOERROR,10.10.1.175, +SLS-WS-075,2026-02-11T05:08:01.509Z,dc-01.acme.local,CNAME,NOERROR,10.10.1.175,189.114.76.158 +SLS-WS-075,2026-02-17T17:11:44.680Z,stackoverflow.com,A,NOERROR,10.10.1.175,197.80.135.168 +SLS-WS-075,2026-02-16T00:25:09.374Z,dc-02.acme.local,A,NXDOMAIN,10.10.1.175,179.230.185.191 +SLS-WS-075,2026-02-10T23:02:35.877Z,acme.sharepoint.com,MX,NOERROR,10.10.1.175,101.15.40.127 +SLS-WS-075,2026-02-16T12:51:59.700Z,teams.microsoft.com,CNAME,NOERROR,10.10.1.175,16.31.79.84 +SLS-WS-075,2026-02-18T13:31:03.971Z,npmjs.com,A,NOERROR,10.10.1.175,168.218.64.115 +SLS-WS-075,2026-02-18T17:47:31.286Z,aws.amazon.com,TXT,NXDOMAIN,10.10.1.175,98.168.133.1 +SLS-WS-075,2026-02-20T02:43:29.169Z,dc-02.acme.local,MX,NOERROR,10.10.1.175,30.98.231.70 +SLS-WS-075,2026-02-18T10:53:19.910Z,login.microsoftonline.com,TXT,NOERROR,10.10.1.175,92.220.175.47 +SLS-WS-075,2026-02-14T06:06:23.835Z,akamai.net,CNAME,NXDOMAIN,10.10.1.175, +SLS-WS-075,2026-02-13T21:15:44.561Z,dc-01.acme.local,A,NOERROR,10.10.1.175, +SLS-WS-075,2026-02-16T22:28:25.582Z,googleapis.com,TXT,SERVFAIL,10.10.1.175,115.184.183.85 +SLS-WS-075,2026-02-13T10:35:58.817Z,akamai.net,AAAA,NOERROR,10.10.1.175,220.134.224.9 +SLS-WS-075,2026-02-15T11:43:08.195Z,dc-01.acme.local,MX,NOERROR,10.10.1.175,182.102.5.18 +SLS-WS-075,2026-02-15T05:07:32.848Z,aws.amazon.com,A,SERVFAIL,10.10.1.175, +SLS-WS-075,2026-02-19T06:24:22.924Z,dc-01.acme.local,TXT,SERVFAIL,10.10.1.175,186.75.230.17 +SLS-WS-075,2026-02-18T08:19:39.089Z,exch-01.acme.local,TXT,NOERROR,10.10.1.175,167.136.115.7 +SLS-WS-075,2026-02-16T18:58:07.523Z,googleapis.com,A,NXDOMAIN,10.10.1.175,62.162.159.70 +SLS-WS-075,2026-02-18T16:46:52.637Z,windowsupdate.com,A,NOERROR,10.10.1.175,197.132.3.78 +SLS-WS-075,2026-02-15T19:17:22.097Z,npmjs.com,A,SERVFAIL,10.10.1.175,143.23.231.103 +SLS-WS-075,2026-02-20T02:31:25.715Z,dc-01.acme.local,AAAA,NXDOMAIN,10.10.1.175, +SLS-WS-075,2026-02-11T09:53:59.634Z,cdn.jsdelivr.net,CNAME,NXDOMAIN,10.10.1.175,50.245.43.88 +SLS-WS-075,2026-02-19T01:43:26.780Z,graph.microsoft.com,MX,NOERROR,10.10.1.175, +SLS-WS-075,2026-02-20T01:06:06.584Z,github.com,A,NOERROR,10.10.1.175,136.253.101.17 +SLS-WS-075,2026-02-16T23:57:07.125Z,time.windows.com,AAAA,NOERROR,10.10.1.175,216.60.203.109 +SLS-WS-075,2026-02-11T14:04:19.175Z,time.windows.com,AAAA,NOERROR,10.10.1.175,170.203.220.123 +SLS-WS-075,2026-02-12T03:04:23.451Z,github.com,A,NOERROR,10.10.1.175,47.159.237.146 +SLS-WS-075,2026-02-12T05:20:13.143Z,aws.amazon.com,CNAME,NXDOMAIN,10.10.1.175,142.216.225.11 +SLS-WS-075,2026-02-11T09:37:30.035Z,cdn.jsdelivr.net,A,NXDOMAIN,10.10.1.175, +SLS-WS-075,2026-02-16T06:41:43.525Z,akamai.net,MX,SERVFAIL,10.10.1.175, +SLS-WS-075,2026-02-17T12:57:50.418Z,exch-01.acme.local,AAAA,NOERROR,10.10.1.175,153.28.13.201 +SLS-WS-075,2026-02-18T05:36:58.694Z,dc-02.acme.local,AAAA,NXDOMAIN,10.10.1.175,88.137.65.74 +SLS-WS-075,2026-02-20T09:01:03.523Z,graph.microsoft.com,CNAME,NOERROR,10.10.1.175,48.92.33.143 +SLS-WS-075,2026-02-13T19:18:42.513Z,www.indeed.com,MX,NOERROR,10.10.1.175,1.230.13.112 +SLS-WS-075,2026-02-14T18:51:34.312Z,aws.amazon.com,A,SERVFAIL,10.10.1.175, +SLS-WS-075,2026-02-11T08:17:52.085Z,acme.sharepoint.com,A,NXDOMAIN,10.10.1.175,77.160.124.142 +SLS-WS-075,2026-02-19T14:25:38.279Z,github.com,AAAA,NOERROR,10.10.1.175,3.114.184.63 +SLS-WS-075,2026-02-18T19:50:15.390Z,windowsupdate.com,A,NOERROR,10.10.1.175, +SLS-WS-075,2026-02-17T14:31:37.023Z,dc-02.acme.local,MX,NOERROR,10.10.1.175,153.35.149.149 +SLS-WS-075,2026-02-14T01:32:28.830Z,cloudflare.com,TXT,NXDOMAIN,10.10.1.175,60.48.245.1 +SLS-WS-075,2026-02-17T04:29:12.261Z,google.com,AAAA,NOERROR,10.10.1.175,48.21.34.231 +SLS-WS-075,2026-02-13T18:26:16.049Z,acme.sharepoint.com,CNAME,NXDOMAIN,10.10.1.175,222.98.202.224 +SLS-WS-075,2026-02-15T16:54:15.591Z,npmjs.com,A,NOERROR,10.10.1.175,111.120.214.162 +SLS-WS-075,2026-02-20T13:44:33.245Z,dc-02.acme.local,CNAME,NOERROR,10.10.1.175,130.59.15.170 +SLS-WS-075,2026-02-18T03:53:52.052Z,acme.sharepoint.com,A,NXDOMAIN,10.10.1.175,195.98.71.163 +SLS-WS-075,2026-02-18T12:04:36.852Z,www.ebay.com,CNAME,NOERROR,10.10.1.175,149.150.75.158 +SLS-WS-075,2026-02-18T05:05:12.683Z,update.microsoft.com,A,SERVFAIL,10.10.1.175,69.228.134.245 +SLS-WS-075,2026-02-13T21:17:58.452Z,aws.amazon.com,MX,SERVFAIL,10.10.1.175,139.86.30.148 +DC-01,2026-02-15T08:01:57.813Z,npmjs.com,A,NOERROR,10.10.1.10, +DC-01,2026-02-15T15:54:01.391Z,acme.sharepoint.com,A,SERVFAIL,10.10.1.10,50.20.53.95 +DC-01,2026-02-20T05:39:27.549Z,akamai.net,A,NOERROR,10.10.1.10,77.250.218.21 +DC-01,2026-02-17T20:46:37.801Z,outlook.office365.com,MX,SERVFAIL,10.10.1.10, +DC-01,2026-02-17T21:50:54.143Z,dc-02.acme.local,A,NOERROR,10.10.1.10, +DC-01,2026-02-20T13:44:16.883Z,akamai.net,CNAME,NXDOMAIN,10.10.1.10,21.102.60.210 +DC-01,2026-02-12T12:48:21.174Z,dc-01.acme.local,AAAA,NXDOMAIN,10.10.1.10, +DC-01,2026-02-12T09:00:26.798Z,dc-01.acme.local,A,NOERROR,10.10.1.10, +DC-01,2026-02-16T07:34:44.967Z,dc-01.acme.local,TXT,SERVFAIL,10.10.1.10, +DC-01,2026-02-15T06:29:38.572Z,www.amazon.com,A,NOERROR,10.10.1.10,216.24.34.61 +DC-01,2026-02-15T10:31:34.473Z,teams.microsoft.com,MX,NOERROR,10.10.1.10,146.65.9.233 +DC-01,2026-02-20T12:34:03.173Z,exch-01.acme.local,CNAME,SERVFAIL,10.10.1.10,202.203.12.231 +DC-01,2026-02-19T14:27:48.155Z,login.microsoftonline.com,A,NXDOMAIN,10.10.1.10,4.54.42.88 +DC-01,2026-02-12T14:10:20.124Z,akamai.net,A,NXDOMAIN,10.10.1.10, +DC-01,2026-02-16T16:06:59.341Z,acme.sharepoint.com,CNAME,NOERROR,10.10.1.10,156.252.106.33 +DC-01,2026-02-14T15:30:47.828Z,www.indeed.com,A,NOERROR,10.10.1.10, +DC-01,2026-02-20T14:06:59.883Z,aws.amazon.com,A,NOERROR,10.10.1.10,46.176.221.191 +DC-01,2026-02-17T09:17:23.069Z,dc-02.acme.local,TXT,SERVFAIL,10.10.1.10,144.8.153.153 +DC-01,2026-02-14T14:57:01.072Z,dc-01.acme.local,TXT,NOERROR,10.10.1.10,25.207.107.42 +DC-01,2026-02-19T02:50:53.760Z,outlook.office365.com,A,NXDOMAIN,10.10.1.10,173.148.51.21 +DC-01,2026-02-12T11:12:46.493Z,googleapis.com,AAAA,SERVFAIL,10.10.1.10, +DC-01,2026-02-17T00:59:12.001Z,www.tiktok.com,TXT,NOERROR,10.10.1.10,209.204.254.113 +DC-01,2026-02-19T08:50:39.363Z,cloudflare.com,CNAME,NOERROR,10.10.1.10, +DC-01,2026-02-17T09:06:46.176Z,file-01.acme.local,A,NXDOMAIN,10.10.1.10,184.21.133.178 +DC-01,2026-02-13T01:06:26.042Z,cloudflare.com,TXT,NOERROR,10.10.1.10, +DC-01,2026-02-17T05:04:43.905Z,akamai.net,TXT,NOERROR,10.10.1.10,202.166.247.132 +DC-01,2026-02-17T18:45:49.026Z,cloudflare.com,TXT,NOERROR,10.10.1.10, +DC-01,2026-02-15T05:52:23.263Z,xvideos.com,A,NOERROR,10.10.1.10, +DC-01,2026-02-18T13:31:39.908Z,google.com,MX,SERVFAIL,10.10.1.10,79.181.105.178 +DC-01,2026-02-15T18:07:31.690Z,open.spotify.com,TXT,NOERROR,10.10.1.10,66.11.178.177 +DC-01,2026-02-10T11:33:51.877Z,dc-01.acme.local,A,NOERROR,10.10.1.10,63.197.38.127 +DC-01,2026-02-10T17:18:03.637Z,login.microsoftonline.com,CNAME,SERVFAIL,10.10.1.10,78.55.69.175 +DC-01,2026-02-15T14:35:02.737Z,dc-01.acme.local,A,NOERROR,10.10.1.10,150.145.166.43 +DC-01,2026-02-17T14:55:46.457Z,acme.local,MX,NOERROR,10.10.1.10,93.220.40.70 +DC-01,2026-02-17T05:47:26.343Z,update.microsoft.com,A,SERVFAIL,10.10.1.10,16.32.29.157 +DC-01,2026-02-11T14:17:21.669Z,update.microsoft.com,AAAA,SERVFAIL,10.10.1.10,128.220.56.29 +DC-01,2026-02-15T16:46:35.936Z,thepiratebay.org,AAAA,NOERROR,10.10.1.10,181.19.207.192 +DC-01,2026-02-20T00:51:18.425Z,update.microsoft.com,MX,NOERROR,10.10.1.10, +DC-01,2026-02-20T17:03:31.710Z,stackoverflow.com,TXT,NOERROR,10.10.1.10,180.30.0.20 +DC-01,2026-02-12T11:45:28.401Z,www.ebay.com,A,NOERROR,10.10.1.10, +DC-01,2026-02-13T20:18:53.711Z,github.com,CNAME,NXDOMAIN,10.10.1.10,63.95.113.141 +DC-01,2026-02-14T09:03:27.569Z,acme.sharepoint.com,CNAME,NOERROR,10.10.1.10,79.144.201.229 +DC-01,2026-02-10T13:39:23.295Z,npmjs.com,MX,NOERROR,10.10.1.10,165.28.160.252 +DC-01,2026-02-20T16:57:00.625Z,akamai.net,A,SERVFAIL,10.10.1.10,4.175.188.2 +DC-01,2026-02-12T00:27:09.636Z,dc-01.acme.local,A,NOERROR,10.10.1.10,60.203.78.85 +DC-01,2026-02-12T04:46:54.830Z,pypi.org,A,SERVFAIL,10.10.1.10,120.146.62.245 +DC-01,2026-02-16T09:45:06.414Z,fitgirl-repacks.site,CNAME,NXDOMAIN,10.10.1.10,147.43.191.87 +DC-01,2026-02-13T13:59:47.316Z,google.com,CNAME,NOERROR,10.10.1.10, +DC-01,2026-02-16T20:43:47.264Z,acme.local,AAAA,NOERROR,10.10.1.10, +DC-01,2026-02-13T12:22:16.925Z,google.com,CNAME,SERVFAIL,10.10.1.10,165.87.30.170 +DC-01,2026-02-16T18:18:16.497Z,update.microsoft.com,A,NXDOMAIN,10.10.1.10,99.160.54.168 +DC-01,2026-02-11T20:24:08.467Z,dc-01.acme.local,CNAME,NOERROR,10.10.1.10,133.56.125.28 +DC-02,2026-02-11T18:17:47.450Z,github.com,CNAME,NOERROR,10.10.2.10, +DC-02,2026-02-13T06:09:24.819Z,steamcommunity.com,A,NOERROR,10.10.2.10, +DC-02,2026-02-11T00:28:40.413Z,www.netflix.com,MX,NOERROR,10.10.2.10,48.42.144.64 +DC-02,2026-02-15T13:32:35.643Z,pypi.org,A,NOERROR,10.10.2.10,96.171.70.190 +DC-02,2026-02-20T09:26:40.934Z,pypi.org,A,NOERROR,10.10.2.10,190.156.238.103 +DC-02,2026-02-15T06:15:29.257Z,aws.amazon.com,TXT,SERVFAIL,10.10.2.10,179.94.179.104 +DC-02,2026-02-17T01:59:29.295Z,stackoverflow.com,CNAME,NOERROR,10.10.2.10, +DC-02,2026-02-17T12:44:54.758Z,cdn.jsdelivr.net,A,NOERROR,10.10.2.10,98.231.85.180 +DC-02,2026-02-12T07:30:00.374Z,github.com,TXT,NXDOMAIN,10.10.2.10,11.226.57.234 +DC-02,2026-02-15T12:46:32.375Z,thepiratebay.org,A,NOERROR,10.10.2.10,33.23.48.17 +DC-02,2026-02-18T19:38:23.686Z,pypi.org,A,NOERROR,10.10.2.10, +DC-02,2026-02-20T00:59:02.051Z,exch-01.acme.local,A,NOERROR,10.10.2.10,184.70.107.196 +DC-02,2026-02-12T18:04:29.316Z,dc-02.acme.local,A,NXDOMAIN,10.10.2.10,20.220.207.190 +DC-02,2026-02-15T05:55:02.433Z,akamai.net,A,NOERROR,10.10.2.10,106.249.20.125 +DC-02,2026-02-20T17:00:11.033Z,www.glassdoor.com,A,SERVFAIL,10.10.2.10,18.56.60.95 +DC-02,2026-02-11T16:05:44.617Z,cdn.jsdelivr.net,TXT,NOERROR,10.10.2.10,127.60.164.166 +DC-02,2026-02-14T12:09:45.075Z,npmjs.com,AAAA,NXDOMAIN,10.10.2.10,54.206.91.186 +DC-02,2026-02-18T15:14:52.008Z,file-01.acme.local,TXT,NOERROR,10.10.2.10,190.105.228.18 +DC-02,2026-02-17T01:44:16.129Z,cdn.jsdelivr.net,MX,NOERROR,10.10.2.10,133.11.182.166 +DC-02,2026-02-11T00:22:10.150Z,aws.amazon.com,A,NXDOMAIN,10.10.2.10,162.157.142.13 +DC-02,2026-02-15T09:50:12.707Z,www.shein.com,CNAME,SERVFAIL,10.10.2.10,44.141.157.240 +DC-02,2026-02-18T22:26:22.311Z,cloudflare.com,MX,NXDOMAIN,10.10.2.10,14.146.158.138 +DC-02,2026-02-11T13:10:54.966Z,cdn.jsdelivr.net,TXT,SERVFAIL,10.10.2.10, +DC-02,2026-02-18T00:57:24.115Z,discord.gg,A,NXDOMAIN,10.10.2.10,76.228.237.74 +DC-02,2026-02-20T11:05:45.447Z,cdn.jsdelivr.net,A,NOERROR,10.10.2.10,33.236.120.178 +DC-02,2026-02-16T22:30:08.764Z,aws.amazon.com,A,SERVFAIL,10.10.2.10,134.53.162.107 +DC-02,2026-02-11T14:13:37.218Z,dc-02.acme.local,AAAA,NOERROR,10.10.2.10,197.180.175.170 +DC-02,2026-02-16T23:11:36.709Z,cdn.jsdelivr.net,A,NXDOMAIN,10.10.2.10,185.31.243.229 +DC-02,2026-02-19T00:06:21.722Z,outlook.office365.com,A,NOERROR,10.10.2.10,54.13.10.19 +DC-02,2026-02-18T10:03:20.850Z,graph.microsoft.com,CNAME,NOERROR,10.10.2.10, +DC-02,2026-02-16T10:56:15.553Z,exch-01.acme.local,A,NOERROR,10.10.2.10,142.182.195.115 +DC-02,2026-02-10T21:03:59.564Z,dc-01.acme.local,CNAME,NOERROR,10.10.2.10,161.83.167.218 +DC-02,2026-02-15T05:17:11.648Z,pypi.org,A,SERVFAIL,10.10.2.10,83.79.206.79 +FILE-01,2026-02-12T14:00:23.691Z,dc-01.acme.local,CNAME,NOERROR,10.10.1.11,35.78.12.48 +FILE-01,2026-02-11T02:12:39.786Z,dc-01.acme.local,MX,NOERROR,10.10.1.11,104.21.234.42 +FILE-01,2026-02-17T18:31:03.563Z,windowsupdate.com,A,NOERROR,10.10.1.11,132.236.214.13 +FILE-01,2026-02-20T05:38:56.754Z,cdn.jsdelivr.net,MX,NOERROR,10.10.1.11,15.122.82.250 +FILE-01,2026-02-13T21:37:04.267Z,www.indeed.com,A,SERVFAIL,10.10.1.11, +FILE-01,2026-02-17T23:07:01.811Z,exch-01.acme.local,MX,NOERROR,10.10.1.11, +FILE-01,2026-02-19T19:36:00.456Z,github.com,A,NOERROR,10.10.1.11,134.129.139.172 +FILE-01,2026-02-14T11:13:48.064Z,acme.sharepoint.com,TXT,NOERROR,10.10.1.11, +FILE-01,2026-02-18T16:05:44.145Z,login.microsoftonline.com,A,NOERROR,10.10.1.11, +FILE-01,2026-02-14T12:58:40.154Z,pypi.org,A,NOERROR,10.10.1.11, +FILE-01,2026-02-12T21:14:17.785Z,update.microsoft.com,AAAA,NOERROR,10.10.1.11,31.238.161.32 +FILE-01,2026-02-16T11:33:36.610Z,pypi.org,AAAA,SERVFAIL,10.10.1.11,87.220.181.60 +FILE-01,2026-02-17T09:41:09.956Z,open.spotify.com,AAAA,NOERROR,10.10.1.11,46.16.253.212 +FILE-01,2026-02-12T14:14:49.553Z,thepiratebay.org,A,NOERROR,10.10.1.11,118.86.84.37 +FILE-01,2026-02-16T18:28:29.012Z,dc-01.acme.local,TXT,NOERROR,10.10.1.11,146.98.204.125 +FILE-01,2026-02-15T23:11:03.414Z,windowsupdate.com,MX,NOERROR,10.10.1.11, +FILE-01,2026-02-17T00:17:12.325Z,time.windows.com,A,SERVFAIL,10.10.1.11,55.29.60.27 +FILE-01,2026-02-10T16:16:17.385Z,www.netflix.com,CNAME,NOERROR,10.10.1.11,149.77.106.136 +FILE-01,2026-02-11T20:59:11.294Z,windowsupdate.com,MX,NXDOMAIN,10.10.1.11,70.146.15.102 +FILE-01,2026-02-12T06:46:44.083Z,aws.amazon.com,CNAME,SERVFAIL,10.10.1.11,103.128.209.9 +FILE-01,2026-02-19T23:34:00.626Z,graph.microsoft.com,A,NOERROR,10.10.1.11,102.187.166.162 +FILE-01,2026-02-16T10:23:08.177Z,cdn.jsdelivr.net,AAAA,SERVFAIL,10.10.1.11,15.67.61.228 +FILE-01,2026-02-14T07:13:08.102Z,akamai.net,A,NXDOMAIN,10.10.1.11,191.17.159.122 +FILE-01,2026-02-10T20:36:50.906Z,teams.microsoft.com,TXT,NXDOMAIN,10.10.1.11,167.187.134.76 +EXCH-01,2026-02-18T05:23:44.182Z,outlook.office365.com,CNAME,NOERROR,10.10.1.12,222.16.85.159 +EXCH-01,2026-02-19T23:09:27.925Z,cdn.jsdelivr.net,A,NOERROR,10.10.1.12, +EXCH-01,2026-02-12T19:24:57.223Z,windowsupdate.com,MX,NOERROR,10.10.1.12,71.203.137.198 +EXCH-01,2026-02-10T10:24:08.483Z,github.com,TXT,NOERROR,10.10.1.12,22.16.207.82 +EXCH-01,2026-02-12T03:59:07.400Z,acme.local,AAAA,NXDOMAIN,10.10.1.12,19.59.39.209 +EXCH-01,2026-02-11T12:30:48.274Z,file-01.acme.local,CNAME,SERVFAIL,10.10.1.12,175.232.91.204 +EXCH-01,2026-02-14T13:21:19.108Z,teams.microsoft.com,CNAME,NOERROR,10.10.1.12,34.72.178.64 +EXCH-01,2026-02-16T01:59:23.096Z,teams.microsoft.com,CNAME,NXDOMAIN,10.10.1.12,100.44.250.104 +EXCH-01,2026-02-12T00:26:56.820Z,pypi.org,A,NOERROR,10.10.1.12,94.120.223.111 +EXCH-01,2026-02-16T03:54:23.440Z,www.indeed.com,AAAA,NOERROR,10.10.1.12, +EXCH-01,2026-02-15T05:58:33.893Z,acme.sharepoint.com,AAAA,NXDOMAIN,10.10.1.12,29.180.93.219 +EXCH-01,2026-02-14T13:27:11.167Z,npmjs.com,A,SERVFAIL,10.10.1.12, +EXCH-01,2026-02-16T11:12:37.196Z,pypi.org,MX,NOERROR,10.10.1.12,7.25.95.208 +EXCH-01,2026-02-10T11:22:48.468Z,exch-01.acme.local,AAAA,NXDOMAIN,10.10.1.12,5.143.240.224 +EXCH-01,2026-02-16T04:04:43.022Z,steamcommunity.com,AAAA,NOERROR,10.10.1.12,23.135.72.175 +EXCH-01,2026-02-13T08:10:15.605Z,www.facebook.com,A,NOERROR,10.10.1.12,146.116.89.162 +EXCH-01,2026-02-20T15:20:24.773Z,stackoverflow.com,A,SERVFAIL,10.10.1.12,147.167.133.41 +EXCH-01,2026-02-18T01:21:24.329Z,stackoverflow.com,AAAA,SERVFAIL,10.10.1.12,187.126.202.188 +EXCH-01,2026-02-12T13:33:59.577Z,npmjs.com,A,NOERROR,10.10.1.12, +EXCH-01,2026-02-11T05:22:05.142Z,npmjs.com,TXT,NOERROR,10.10.1.12,27.213.38.171 +WEB-01,2026-02-18T20:42:53.329Z,www.tiktok.com,A,SERVFAIL,10.10.3.10,186.31.134.5 +WEB-01,2026-02-14T10:30:32.842Z,acme.local,AAAA,NXDOMAIN,10.10.3.10, +WEB-01,2026-02-13T18:19:38.683Z,dc-02.acme.local,AAAA,NOERROR,10.10.3.10,155.132.69.100 +WEB-01,2026-02-17T12:22:34.387Z,update.microsoft.com,A,NXDOMAIN,10.10.3.10, +WEB-01,2026-02-18T16:06:56.901Z,graph.microsoft.com,CNAME,NOERROR,10.10.3.10, +WEB-01,2026-02-14T10:05:16.368Z,store.steampowered.com,A,SERVFAIL,10.10.3.10, +WEB-01,2026-02-20T01:05:09.375Z,googleapis.com,MX,NOERROR,10.10.3.10,22.202.173.209 +WEB-01,2026-02-14T17:31:14.664Z,teams.microsoft.com,TXT,NXDOMAIN,10.10.3.10, +WEB-01,2026-02-18T11:49:00.220Z,googleapis.com,A,NOERROR,10.10.3.10, +WEB-01,2026-02-20T05:20:08.205Z,login.microsoftonline.com,CNAME,NXDOMAIN,10.10.3.10,39.207.202.191 +WEB-01,2026-02-11T00:25:27.493Z,pypi.org,A,NOERROR,10.10.3.10,55.68.1.117 +WEB-01,2026-02-11T13:40:12.145Z,googleapis.com,A,NOERROR,10.10.3.10,103.168.186.221 +WEB-01,2026-02-20T02:18:55.431Z,onlyfans.com,MX,SERVFAIL,10.10.3.10,220.174.32.249 +WEB-01,2026-02-17T02:12:04.364Z,stackoverflow.com,CNAME,NOERROR,10.10.3.10,193.38.194.212 +WEB-01,2026-02-14T13:29:35.742Z,cdn.jsdelivr.net,A,NOERROR,10.10.3.10, +WEB-01,2026-02-16T07:01:30.714Z,dc-02.acme.local,TXT,NOERROR,10.10.3.10,217.148.120.116 +WEB-01,2026-02-12T09:16:31.969Z,dc-01.acme.local,A,NOERROR,10.10.3.10,76.53.214.40 +WEB-01,2026-02-15T12:21:46.245Z,graph.microsoft.com,MX,NOERROR,10.10.3.10,70.75.92.38 +WEB-01,2026-02-17T09:55:54.411Z,discord.gg,AAAA,NOERROR,10.10.3.10,204.245.98.250 +WEB-01,2026-02-17T23:08:42.762Z,akamai.net,A,SERVFAIL,10.10.3.10, +WEB-01,2026-02-12T11:00:02.230Z,cdn.jsdelivr.net,MX,NOERROR,10.10.3.10, +WEB-01,2026-02-20T00:01:42.351Z,googleapis.com,TXT,NOERROR,10.10.3.10,84.7.105.61 +WEB-01,2026-02-10T14:05:56.135Z,graph.microsoft.com,CNAME,NOERROR,10.10.3.10,83.44.111.82 +WEB-01,2026-02-20T14:10:33.197Z,acme.sharepoint.com,A,NOERROR,10.10.3.10,17.225.39.155 +WEB-01,2026-02-20T09:33:53.599Z,aws.amazon.com,MX,NOERROR,10.10.3.10,51.178.133.115 +WEB-01,2026-02-14T01:37:48.429Z,time.windows.com,CNAME,NOERROR,10.10.3.10,164.85.165.78 +WEB-01,2026-02-16T00:07:39.439Z,onlyfans.com,AAAA,NOERROR,10.10.3.10, +WEB-01,2026-02-16T06:24:10.675Z,update.microsoft.com,A,SERVFAIL,10.10.3.10,66.174.21.45 +WEB-01,2026-02-13T22:38:34.511Z,dc-02.acme.local,A,SERVFAIL,10.10.3.10,176.51.43.110 +WEB-01,2026-02-20T03:21:27.822Z,exch-01.acme.local,TXT,SERVFAIL,10.10.3.10, +WEB-01,2026-02-12T22:12:06.034Z,file-01.acme.local,MX,NOERROR,10.10.3.10, +WEB-01,2026-02-20T09:35:15.429Z,npmjs.com,A,NOERROR,10.10.3.10,178.148.197.21 +WEB-01,2026-02-18T22:30:30.635Z,stackoverflow.com,CNAME,NOERROR,10.10.3.10,116.10.247.193 +WEB-01,2026-02-18T23:48:20.503Z,time.windows.com,MX,NXDOMAIN,10.10.3.10, +WEB-01,2026-02-15T08:58:14.573Z,dc-01.acme.local,MX,SERVFAIL,10.10.3.10,219.191.122.206 +WEB-01,2026-02-15T01:21:26.707Z,store.steampowered.com,TXT,SERVFAIL,10.10.3.10,1.198.230.36 +WEB-01,2026-02-14T23:34:33.909Z,stackoverflow.com,AAAA,NOERROR,10.10.3.10,142.220.86.157 +WEB-01,2026-02-18T04:58:40.979Z,cloudflare.com,A,NXDOMAIN,10.10.3.10,142.231.160.191 +WEB-01,2026-02-14T08:16:54.043Z,google.com,CNAME,NXDOMAIN,10.10.3.10,4.59.73.164 +WEB-01,2026-02-19T11:15:20.127Z,acme.local,MX,NOERROR,10.10.3.10,1.133.200.215 +WEB-01,2026-02-13T09:44:24.104Z,store.steampowered.com,AAAA,SERVFAIL,10.10.3.10,70.25.116.155 +WEB-01,2026-02-19T03:20:57.164Z,update.microsoft.com,MX,NOERROR,10.10.3.10,113.214.29.149 +WEB-01,2026-02-11T16:22:55.880Z,dc-01.acme.local,A,NOERROR,10.10.3.10,101.100.209.174 +WEB-01,2026-02-15T15:21:47.473Z,acme.sharepoint.com,A,NOERROR,10.10.3.10, +WEB-01,2026-02-12T07:27:26.301Z,windowsupdate.com,AAAA,NOERROR,10.10.3.10,110.248.110.229 +WEB-01,2026-02-12T10:40:05.615Z,dc-02.acme.local,CNAME,SERVFAIL,10.10.3.10,172.186.55.224 +WEB-01,2026-02-14T14:19:24.046Z,cdn.jsdelivr.net,TXT,NOERROR,10.10.3.10,101.75.72.86 +SQL-01,2026-02-12T16:38:43.982Z,dc-01.acme.local,A,NXDOMAIN,10.10.2.11, +SQL-01,2026-02-15T12:19:51.631Z,npmjs.com,A,NXDOMAIN,10.10.2.11,207.223.189.221 +SQL-01,2026-02-13T21:37:23.333Z,aws.amazon.com,A,NOERROR,10.10.2.11,50.137.189.207 +SQL-01,2026-02-16T06:01:48.119Z,www.amazon.com,TXT,NOERROR,10.10.2.11,169.65.134.138 +SQL-01,2026-02-16T15:41:05.961Z,outlook.office365.com,A,NXDOMAIN,10.10.2.11,134.170.166.178 +SQL-01,2026-02-14T23:40:06.560Z,graph.microsoft.com,AAAA,SERVFAIL,10.10.2.11,57.43.159.230 +SQL-01,2026-02-13T01:49:37.814Z,graph.microsoft.com,A,NOERROR,10.10.2.11,185.16.205.119 +SQL-01,2026-02-13T13:49:13.592Z,update.microsoft.com,AAAA,SERVFAIL,10.10.2.11,93.253.133.9 +SQL-01,2026-02-11T23:43:15.903Z,exch-01.acme.local,A,NXDOMAIN,10.10.2.11,120.10.102.95 +SQL-01,2026-02-14T19:45:05.241Z,cdn.jsdelivr.net,A,NOERROR,10.10.2.11, +SQL-01,2026-02-19T12:22:52.625Z,akamai.net,TXT,SERVFAIL,10.10.2.11,20.0.14.102 +SQL-01,2026-02-18T07:38:18.114Z,exch-01.acme.local,A,SERVFAIL,10.10.2.11,6.249.86.212 +SQL-01,2026-02-13T06:07:21.183Z,acme.local,A,NXDOMAIN,10.10.2.11, +SQL-01,2026-02-11T13:35:09.176Z,dc-01.acme.local,A,NOERROR,10.10.2.11,132.78.77.36 +SQL-01,2026-02-18T21:43:52.939Z,steamcommunity.com,A,NOERROR,10.10.2.11,2.91.182.12 +SQL-01,2026-02-11T07:25:00.959Z,www.shein.com,MX,NOERROR,10.10.2.11,213.228.90.158 +SQL-01,2026-02-13T22:51:31.759Z,time.windows.com,CNAME,NOERROR,10.10.2.11, +SQL-01,2026-02-17T13:33:22.321Z,acme.sharepoint.com,A,NOERROR,10.10.2.11,127.176.245.180 +SQL-01,2026-02-14T06:11:09.145Z,file-01.acme.local,TXT,NOERROR,10.10.2.11,212.195.118.51 +SQL-01,2026-02-18T10:12:36.322Z,acme.local,A,SERVFAIL,10.10.2.11,79.212.175.17 +SQL-01,2026-02-12T11:47:38.874Z,outlook.office365.com,CNAME,SERVFAIL,10.10.2.11, +SQL-01,2026-02-13T09:38:49.528Z,steamcommunity.com,AAAA,NOERROR,10.10.2.11, +SQL-01,2026-02-17T05:27:22.895Z,github.com,A,NOERROR,10.10.2.11,190.134.21.52 +SQL-01,2026-02-12T20:46:17.589Z,googleapis.com,CNAME,NOERROR,10.10.2.11,175.247.99.53 +SQL-01,2026-02-17T02:51:07.598Z,akamai.net,A,NOERROR,10.10.2.11,181.232.56.141 +SQL-01,2026-02-18T23:59:30.276Z,update.microsoft.com,A,SERVFAIL,10.10.2.11, +SQL-01,2026-02-10T12:13:05.010Z,akamai.net,MX,NOERROR,10.10.2.11,57.34.192.119 +SQL-01,2026-02-15T18:15:24.400Z,akamai.net,A,NOERROR,10.10.2.11,211.13.31.40 +SQL-01,2026-02-19T21:36:04.212Z,acme.local,TXT,NOERROR,10.10.2.11,148.245.3.198 +SQL-01,2026-02-18T14:16:08.074Z,akamai.net,MX,SERVFAIL,10.10.2.11,62.183.216.80 +SQL-01,2026-02-19T17:52:45.904Z,teams.microsoft.com,TXT,NOERROR,10.10.2.11,200.231.94.134 +SQL-01,2026-02-20T12:56:10.383Z,googleapis.com,A,NXDOMAIN,10.10.2.11, +SQL-01,2026-02-11T23:12:09.129Z,akamai.net,TXT,NOERROR,10.10.2.11,37.29.115.19 +SQL-01,2026-02-16T19:45:36.166Z,exch-01.acme.local,CNAME,NOERROR,10.10.2.11, +SQL-01,2026-02-10T13:53:32.415Z,www.linkedin.com/jobs,AAAA,SERVFAIL,10.10.2.11,197.245.70.134 +SQL-01,2026-02-12T20:22:56.643Z,cloudflare.com,CNAME,NOERROR,10.10.2.11,164.45.12.99 +SQL-01,2026-02-12T16:37:12.229Z,pypi.org,AAAA,SERVFAIL,10.10.2.11, +SQL-01,2026-02-18T21:00:33.106Z,file-01.acme.local,A,NOERROR,10.10.2.11,14.91.153.148 +SQL-01,2026-02-16T17:56:01.143Z,npmjs.com,A,NOERROR,10.10.2.11,143.185.176.186 +SQL-01,2026-02-10T14:48:16.883Z,windowsupdate.com,A,NOERROR,10.10.2.11,180.186.158.78 +SQL-01,2026-02-19T04:18:16.305Z,google.com,MX,SERVFAIL,10.10.2.11, +SQL-01,2026-02-14T03:36:34.074Z,outlook.office365.com,A,SERVFAIL,10.10.2.11,120.7.96.174 +SQL-01,2026-02-17T20:38:37.083Z,graph.microsoft.com,MX,NXDOMAIN,10.10.2.11,157.27.68.89 +SQL-01,2026-02-16T13:14:59.733Z,aws.amazon.com,TXT,NOERROR,10.10.2.11,7.106.90.2 +SQL-01,2026-02-17T20:46:34.800Z,graph.microsoft.com,AAAA,NXDOMAIN,10.10.2.11, +SQL-01,2026-02-20T14:49:00.289Z,outlook.office365.com,A,SERVFAIL,10.10.2.11,153.174.229.84 +SQL-01,2026-02-11T22:56:25.422Z,graph.microsoft.com,AAAA,NXDOMAIN,10.10.2.11, +SQL-01,2026-02-14T18:35:13.313Z,www.glassdoor.com,A,NOERROR,10.10.2.11,6.92.81.90 +SQL-01,2026-02-14T19:21:15.107Z,www.pornhub.com,A,SERVFAIL,10.10.2.11,45.60.84.126 +SQL-01,2026-02-11T08:39:48.567Z,windowsupdate.com,AAAA,NOERROR,10.10.2.11,148.177.90.164 +SQL-01,2026-02-20T08:29:20.310Z,exch-01.acme.local,CNAME,NXDOMAIN,10.10.2.11, +SQL-01,2026-02-16T13:28:55.483Z,windowsupdate.com,A,NOERROR,10.10.2.11,9.155.152.20 +SQL-01,2026-02-14T03:07:11.620Z,pypi.org,AAAA,NXDOMAIN,10.10.2.11,51.231.89.90 +SQL-01,2026-02-18T08:24:43.123Z,dc-02.acme.local,CNAME,SERVFAIL,10.10.2.11,80.254.223.107 +SQL-01,2026-02-13T16:48:52.443Z,akamai.net,MX,NXDOMAIN,10.10.2.11,83.60.208.221 +SQL-01,2026-02-14T11:04:40.620Z,outlook.office365.com,TXT,SERVFAIL,10.10.2.11,72.172.34.26 +SQL-01,2026-02-10T09:18:40.978Z,aws.amazon.com,TXT,NOERROR,10.10.2.11,216.169.211.129 +SQL-01,2026-02-19T10:08:43.991Z,dc-02.acme.local,MX,NOERROR,10.10.2.11,157.255.182.12 +SQL-01,2026-02-10T19:46:38.688Z,google.com,A,NOERROR,10.10.2.11,105.3.199.57 +SQL-01,2026-02-15T14:07:57.677Z,windowsupdate.com,A,NOERROR,10.10.2.11, +PROXY-01,2026-02-10T08:00:52.389Z,file-01.acme.local,A,NOERROR,10.10.1.13, +PROXY-01,2026-02-13T19:39:26.885Z,windowsupdate.com,A,NOERROR,10.10.1.13,209.114.6.45 +PROXY-01,2026-02-17T20:20:46.624Z,akamai.net,CNAME,NXDOMAIN,10.10.1.13,216.68.252.97 +PROXY-01,2026-02-19T13:42:56.082Z,graph.microsoft.com,CNAME,SERVFAIL,10.10.1.13,152.241.46.81 +PROXY-01,2026-02-17T08:13:52.929Z,update.microsoft.com,CNAME,NOERROR,10.10.1.13,207.123.160.58 +PROXY-01,2026-02-13T18:52:26.973Z,acme.local,A,NOERROR,10.10.1.13,161.34.221.152 +PROXY-01,2026-02-19T22:33:43.485Z,exch-01.acme.local,A,SERVFAIL,10.10.1.13,37.68.242.167 +PROXY-01,2026-02-11T16:26:14.562Z,teams.microsoft.com,A,SERVFAIL,10.10.1.13,17.45.254.171 +PROXY-01,2026-02-15T02:22:41.108Z,googleapis.com,A,NOERROR,10.10.1.13, +PROXY-01,2026-02-14T17:49:05.075Z,cloudflare.com,AAAA,NXDOMAIN,10.10.1.13,145.49.27.81 +PROXY-01,2026-02-17T08:08:21.108Z,dc-02.acme.local,A,NOERROR,10.10.1.13,100.52.231.231 +PROXY-01,2026-02-10T23:23:56.627Z,dc-01.acme.local,A,NOERROR,10.10.1.13,94.106.134.234 +PROXY-01,2026-02-14T01:24:10.018Z,dc-02.acme.local,A,NOERROR,10.10.1.13, +PROXY-01,2026-02-12T00:43:38.650Z,thepiratebay.org,A,SERVFAIL,10.10.1.13,209.45.95.140 +PROXY-01,2026-02-13T16:08:04.026Z,stackoverflow.com,TXT,NOERROR,10.10.1.13,141.226.89.84 +PROXY-01,2026-02-14T05:18:58.641Z,time.windows.com,A,NOERROR,10.10.1.13,31.24.104.118 +PROXY-01,2026-02-18T05:46:57.399Z,cdn.jsdelivr.net,A,NXDOMAIN,10.10.1.13,149.194.15.253 +PROXY-01,2026-02-11T07:10:08.478Z,github.com,A,NXDOMAIN,10.10.1.13,29.108.186.209 +PROXY-01,2026-02-13T01:38:18.844Z,www.reddit.com,A,SERVFAIL,10.10.1.13,218.160.184.151 +PROXY-01,2026-02-20T10:21:01.070Z,google.com,MX,NXDOMAIN,10.10.1.13,178.209.67.227 +PROXY-01,2026-02-19T01:42:04.133Z,cloudflare.com,A,NOERROR,10.10.1.13,173.128.14.112 +PROXY-01,2026-02-17T01:15:02.612Z,npmjs.com,MX,NXDOMAIN,10.10.1.13, +PROXY-01,2026-02-12T16:19:44.351Z,www.ebay.com,A,NOERROR,10.10.1.13,7.132.187.151 +PROXY-01,2026-02-16T09:53:03.754Z,github.com,CNAME,NXDOMAIN,10.10.1.13,67.133.99.144 diff --git a/backend/tests/test_csvs/03_process_listing.csv b/backend/tests/test_csvs/03_process_listing.csv new file mode 100644 index 0000000..db2de0b --- /dev/null +++ b/backend/tests/test_csvs/03_process_listing.csv @@ -0,0 +1,1897 @@ +ComputerName,CreateTime,Pid,PPid,Name,CommandLine,Username,MemoryUsage +HR-WS-001,2026-02-12T10:06:34.315Z,60870,14,svchost.exe,C:\Windows\System32\svchost.exe,ACME\emartinez,250928 +HR-WS-001,2026-02-19T08:38:47.946Z,23596,37264,explorer.exe,C:\Windows\System32\explorer.exe,ACME\emartinez,365399 +HR-WS-001,2026-02-16T12:03:51.097Z,47361,17701,chrome.exe,C:\Windows\System32\chrome.exe,ACME\emartinez,45600 +HR-WS-001,2026-02-15T23:09:10.835Z,16008,48097,msedge.exe,C:\Windows\System32\msedge.exe,ACME\emartinez,249301 +HR-WS-001,2026-02-15T20:11:09.667Z,58466,46416,outlook.exe,C:\Windows\System32\outlook.exe,ACME\emartinez,457525 +HR-WS-001,2026-02-16T04:17:25.731Z,278,7505,teams.exe,C:\Windows\System32\teams.exe,ACME\emartinez,47458 +HR-WS-001,2026-02-17T05:34:43.018Z,41379,51444,code.exe,C:\Windows\System32\code.exe,ACME\emartinez,449326 +HR-WS-001,2026-02-11T05:51:05.650Z,46303,44714,powershell.exe,C:\Windows\System32\powershell.exe,ACME\emartinez,378961 +HR-WS-001,2026-02-18T15:05:34.732Z,15204,15412,cmd.exe,C:\Windows\System32\cmd.exe,ACME\emartinez,320894 +HR-WS-001,2026-02-17T07:07:31.406Z,21451,57602,notepad.exe,C:\Windows\System32\notepad.exe,ACME\emartinez,84824 +HR-WS-001,2026-02-11T07:26:25.898Z,13761,13340,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\emartinez,124299 +HR-WS-001,2026-02-11T04:23:03.888Z,11006,18154,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\emartinez,475629 +HR-WS-001,2026-02-17T07:17:28.027Z,29078,916,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\emartinez,461502 +HR-WS-001,2026-02-11T20:08:16.320Z,49805,4,lsass.exe,C:\Windows\System32\lsass.exe,ACME\emartinez,264858 +HR-WS-001,2026-02-14T16:03:53.763Z,31895,20,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,129833 +HR-WS-001,2026-02-15T09:19:41.824Z,48968,33516,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\emartinez,427268 +HR-WS-001,2026-02-10T18:14:01.796Z,40488,42428,dwm.exe,C:\Windows\System32\dwm.exe,ACME\emartinez,269811 +HR-WS-001,2026-02-12T07:59:43.731Z,47590,4595,System,System,NT AUTHORITY\SYSTEM,497791 +HR-WS-001,2026-02-18T00:05:25.977Z,11383,11416,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,436464 +HR-WS-001,2026-02-12T05:15:44.444Z,33358,9387,services.exe,C:\Windows\System32\services.exe,ACME\emartinez,29428 +HR-WS-001,2026-02-15T17:45:53.312Z,20104,18576,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\emartinez,346429 +HR-WS-001,2026-02-12T19:48:20.393Z,53454,47043,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\emartinez,167777 +HR-WS-001,2026-02-15T10:42:07.641Z,7454,39665,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\emartinez,408032 +FIN-WS-002,2026-02-19T12:10:36.653Z,6528,14,svchost.exe,C:\Windows\System32\svchost.exe,ACME\hbrown,308324 +FIN-WS-002,2026-02-11T11:51:08.327Z,23251,31282,explorer.exe,C:\Windows\System32\explorer.exe,ACME\hbrown,398898 +FIN-WS-002,2026-02-13T08:43:40.044Z,2353,52608,chrome.exe,C:\Windows\System32\chrome.exe,ACME\hbrown,75069 +FIN-WS-002,2026-02-13T21:10:38.731Z,43918,57140,msedge.exe,C:\Windows\System32\msedge.exe,ACME\hbrown,327213 +FIN-WS-002,2026-02-10T11:42:53.693Z,38845,1217,outlook.exe,C:\Windows\System32\outlook.exe,ACME\hbrown,410881 +FIN-WS-002,2026-02-12T06:35:39.917Z,56827,41518,teams.exe,C:\Windows\System32\teams.exe,ACME\hbrown,155508 +FIN-WS-002,2026-02-13T04:44:54.102Z,10852,8823,code.exe,C:\Windows\System32\code.exe,ACME\hbrown,52140 +FIN-WS-002,2026-02-17T16:37:31.926Z,32773,2964,powershell.exe,C:\Windows\System32\powershell.exe,ACME\hbrown,283707 +FIN-WS-002,2026-02-17T03:22:10.477Z,52575,51295,cmd.exe,C:\Windows\System32\cmd.exe,ACME\hbrown,497169 +FIN-WS-002,2026-02-19T04:57:44.356Z,64621,14724,notepad.exe,C:\Windows\System32\notepad.exe,ACME\hbrown,412728 +FIN-WS-002,2026-02-15T11:36:21.898Z,6370,15734,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\hbrown,355424 +FIN-WS-002,2026-02-13T00:21:40.185Z,18172,13837,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\hbrown,118551 +FIN-WS-002,2026-02-19T18:52:12.933Z,64781,58408,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\hbrown,441230 +FIN-WS-002,2026-02-16T07:29:35.888Z,22473,16,lsass.exe,C:\Windows\System32\lsass.exe,ACME\hbrown,175136 +FIN-WS-002,2026-02-15T12:30:13.670Z,46447,3,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,117921 +FIN-WS-002,2026-02-15T18:08:20.228Z,16217,22868,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\hbrown,122995 +FIN-WS-002,2026-02-12T00:49:22.997Z,26871,32922,dwm.exe,C:\Windows\System32\dwm.exe,ACME\hbrown,86091 +FIN-WS-002,2026-02-16T21:02:33.601Z,3172,5454,System,System,NT AUTHORITY\SYSTEM,176488 +FIN-WS-002,2026-02-16T17:17:59.062Z,56242,10320,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,487267 +FIN-WS-002,2026-02-16T18:04:02.344Z,45246,31983,services.exe,C:\Windows\System32\services.exe,ACME\hbrown,290973 +FIN-WS-002,2026-02-14T13:00:40.226Z,24218,18958,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\hbrown,43666 +FIN-WS-002,2026-02-20T06:16:01.299Z,6156,25355,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\hbrown,5580 +FIN-WS-002,2026-02-14T16:15:55.881Z,41641,3608,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\hbrown,23860 +SLS-WS-003,2026-02-13T02:57:25.289Z,54065,5,svchost.exe,C:\Windows\System32\svchost.exe,ACME\agarcia,240655 +SLS-WS-003,2026-02-17T04:06:20.563Z,55135,50893,explorer.exe,C:\Windows\System32\explorer.exe,ACME\agarcia,227887 +SLS-WS-003,2026-02-16T23:10:45.048Z,18743,47222,chrome.exe,C:\Windows\System32\chrome.exe,ACME\agarcia,178154 +SLS-WS-003,2026-02-12T13:16:16.083Z,43866,53654,msedge.exe,C:\Windows\System32\msedge.exe,ACME\agarcia,80907 +SLS-WS-003,2026-02-11T15:58:02.304Z,54372,37785,outlook.exe,C:\Windows\System32\outlook.exe,ACME\agarcia,397572 +SLS-WS-003,2026-02-19T14:09:32.063Z,45720,16171,teams.exe,C:\Windows\System32\teams.exe,ACME\agarcia,175452 +SLS-WS-003,2026-02-19T05:25:12.738Z,2972,41583,code.exe,C:\Windows\System32\code.exe,ACME\agarcia,56007 +SLS-WS-003,2026-02-13T00:04:18.025Z,15816,17851,powershell.exe,C:\Windows\System32\powershell.exe,ACME\agarcia,318607 +SLS-WS-003,2026-02-19T21:46:02.023Z,24805,35605,cmd.exe,C:\Windows\System32\cmd.exe,ACME\agarcia,463398 +SLS-WS-003,2026-02-13T17:33:21.063Z,53870,38108,notepad.exe,C:\Windows\System32\notepad.exe,ACME\agarcia,310301 +SLS-WS-003,2026-02-16T04:51:17.911Z,8789,53829,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\agarcia,442395 +SLS-WS-003,2026-02-13T07:19:31.506Z,54184,34613,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\agarcia,494116 +SLS-WS-003,2026-02-13T00:08:39.134Z,38468,38994,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\agarcia,143407 +SLS-WS-003,2026-02-13T05:30:05.091Z,43917,19,lsass.exe,C:\Windows\System32\lsass.exe,ACME\agarcia,312345 +SLS-WS-003,2026-02-13T23:57:00.707Z,28881,5,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,245444 +SLS-WS-003,2026-02-17T04:40:41.925Z,55323,9715,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\agarcia,401343 +SLS-WS-003,2026-02-15T10:22:26.214Z,3708,19029,dwm.exe,C:\Windows\System32\dwm.exe,ACME\agarcia,413577 +SLS-WS-003,2026-02-20T15:54:27.177Z,54781,20195,System,System,NT AUTHORITY\SYSTEM,356956 +SLS-WS-003,2026-02-19T01:09:30.068Z,7162,29444,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,216991 +SLS-WS-003,2026-02-13T00:16:57.691Z,15234,37390,services.exe,C:\Windows\System32\services.exe,ACME\agarcia,2017 +SLS-WS-003,2026-02-18T19:19:38.007Z,61790,17328,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\agarcia,171712 +SLS-WS-003,2026-02-13T06:52:31.558Z,6712,57312,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\agarcia,136602 +SLS-WS-003,2026-02-17T13:26:28.900Z,20099,27667,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\agarcia,191395 +ENG-WS-004,2026-02-18T00:48:38.454Z,4570,10,svchost.exe,C:\Windows\System32\svchost.exe,ACME\hbrown,84936 +ENG-WS-004,2026-02-17T15:49:40.358Z,20879,8923,explorer.exe,C:\Windows\System32\explorer.exe,ACME\hbrown,269259 +ENG-WS-004,2026-02-15T21:32:07.370Z,49658,33576,chrome.exe,C:\Windows\System32\chrome.exe,ACME\hbrown,418993 +ENG-WS-004,2026-02-14T06:43:35.995Z,25914,19629,msedge.exe,C:\Windows\System32\msedge.exe,ACME\hbrown,454318 +ENG-WS-004,2026-02-16T04:03:53.150Z,1225,58084,outlook.exe,C:\Windows\System32\outlook.exe,ACME\hbrown,121262 +ENG-WS-004,2026-02-12T22:30:02.013Z,58759,1731,teams.exe,C:\Windows\System32\teams.exe,ACME\hbrown,44127 +ENG-WS-004,2026-02-13T09:26:11.376Z,31272,36675,code.exe,C:\Windows\System32\code.exe,ACME\hbrown,41100 +ENG-WS-004,2026-02-11T08:28:45.943Z,15671,39156,powershell.exe,C:\Windows\System32\powershell.exe,ACME\hbrown,408322 +ENG-WS-004,2026-02-16T16:20:27.761Z,28730,46165,cmd.exe,C:\Windows\System32\cmd.exe,ACME\hbrown,498274 +ENG-WS-004,2026-02-13T01:09:29.273Z,32818,22397,notepad.exe,C:\Windows\System32\notepad.exe,ACME\hbrown,115732 +ENG-WS-004,2026-02-15T09:55:08.539Z,40420,14167,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\hbrown,254628 +ENG-WS-004,2026-02-18T03:06:03.501Z,58784,8783,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\hbrown,232391 +ENG-WS-004,2026-02-20T17:39:33.314Z,48453,8094,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\hbrown,132808 +ENG-WS-004,2026-02-12T00:48:26.473Z,54878,5,lsass.exe,C:\Windows\System32\lsass.exe,ACME\hbrown,61624 +ENG-WS-004,2026-02-20T10:40:20.754Z,10858,11,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,418236 +ENG-WS-004,2026-02-12T10:53:26.173Z,198,47061,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\hbrown,277352 +ENG-WS-004,2026-02-13T04:45:48.980Z,44494,13899,dwm.exe,C:\Windows\System32\dwm.exe,ACME\hbrown,52373 +ENG-WS-004,2026-02-15T06:42:06.087Z,12292,18972,System,System,NT AUTHORITY\SYSTEM,95620 +ENG-WS-004,2026-02-19T05:52:09.133Z,15145,56785,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,480094 +ENG-WS-004,2026-02-14T23:08:12.655Z,9683,2955,services.exe,C:\Windows\System32\services.exe,ACME\hbrown,480223 +ENG-WS-004,2026-02-15T08:45:14.931Z,4611,39369,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\hbrown,114550 +ENG-WS-004,2026-02-10T20:19:27.210Z,54042,31393,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\hbrown,354808 +ENG-WS-004,2026-02-14T19:23:57.024Z,3505,56192,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\hbrown,85536 +LEG-WS-005,2026-02-19T17:39:55.046Z,36606,18,svchost.exe,C:\Windows\System32\svchost.exe,ACME\idavis,492809 +LEG-WS-005,2026-02-12T16:31:42.550Z,29987,13845,explorer.exe,C:\Windows\System32\explorer.exe,ACME\idavis,196491 +LEG-WS-005,2026-02-20T16:03:29.217Z,10539,6455,chrome.exe,C:\Windows\System32\chrome.exe,ACME\idavis,279409 +LEG-WS-005,2026-02-12T07:17:50.711Z,22478,34797,msedge.exe,C:\Windows\System32\msedge.exe,ACME\idavis,336651 +LEG-WS-005,2026-02-14T01:05:40.094Z,30249,24066,outlook.exe,C:\Windows\System32\outlook.exe,ACME\idavis,488008 +LEG-WS-005,2026-02-18T12:20:12.774Z,35887,58593,teams.exe,C:\Windows\System32\teams.exe,ACME\idavis,94989 +LEG-WS-005,2026-02-20T04:02:48.315Z,63626,27301,code.exe,C:\Windows\System32\code.exe,ACME\idavis,84447 +LEG-WS-005,2026-02-15T19:51:43.075Z,62195,5841,powershell.exe,C:\Windows\System32\powershell.exe,ACME\idavis,148426 +LEG-WS-005,2026-02-18T07:28:05.990Z,52535,50623,cmd.exe,C:\Windows\System32\cmd.exe,ACME\idavis,461883 +LEG-WS-005,2026-02-10T23:14:03.996Z,6659,47761,notepad.exe,C:\Windows\System32\notepad.exe,ACME\idavis,275393 +LEG-WS-005,2026-02-15T14:51:00.062Z,22819,50249,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\idavis,371082 +LEG-WS-005,2026-02-15T16:58:24.079Z,45259,38007,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,373268 +LEG-WS-005,2026-02-15T19:56:32.549Z,43878,6216,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\idavis,479135 +LEG-WS-005,2026-02-16T19:05:19.309Z,6634,20,lsass.exe,C:\Windows\System32\lsass.exe,ACME\idavis,96100 +LEG-WS-005,2026-02-15T12:13:44.562Z,36889,4,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,467014 +LEG-WS-005,2026-02-12T18:47:13.414Z,46681,36818,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\idavis,71752 +LEG-WS-005,2026-02-10T08:31:02.897Z,51219,42208,dwm.exe,C:\Windows\System32\dwm.exe,ACME\idavis,134825 +LEG-WS-005,2026-02-17T04:30:20.732Z,12532,13238,System,System,NT AUTHORITY\SYSTEM,309426 +LEG-WS-005,2026-02-19T15:17:46.678Z,48937,43085,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,168355 +LEG-WS-005,2026-02-18T18:41:20.923Z,22343,12425,services.exe,C:\Windows\System32\services.exe,ACME\idavis,103504 +LEG-WS-005,2026-02-16T04:57:34.336Z,12393,18698,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\idavis,238916 +LEG-WS-005,2026-02-18T08:09:48.017Z,46780,6574,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\idavis,234233 +LEG-WS-005,2026-02-10T11:08:43.195Z,8463,41089,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\idavis,27493 +MKT-WS-006,2026-02-12T06:18:39.522Z,37134,7,svchost.exe,C:\Windows\System32\svchost.exe,ACME\svc_web,78784 +MKT-WS-006,2026-02-12T08:59:37.235Z,18255,50901,explorer.exe,C:\Windows\System32\explorer.exe,ACME\svc_web,329567 +MKT-WS-006,2026-02-19T01:05:25.454Z,63744,50703,chrome.exe,C:\Windows\System32\chrome.exe,ACME\svc_web,17767 +MKT-WS-006,2026-02-16T17:13:37.859Z,56848,1700,msedge.exe,C:\Windows\System32\msedge.exe,ACME\svc_web,43516 +MKT-WS-006,2026-02-20T09:26:50.445Z,44709,48627,outlook.exe,C:\Windows\System32\outlook.exe,ACME\svc_web,241958 +MKT-WS-006,2026-02-14T06:02:42.015Z,14843,7413,teams.exe,C:\Windows\System32\teams.exe,ACME\svc_web,117180 +MKT-WS-006,2026-02-17T01:59:08.142Z,8867,19327,code.exe,C:\Windows\System32\code.exe,ACME\svc_web,3016 +MKT-WS-006,2026-02-17T03:50:00.299Z,43200,33901,powershell.exe,C:\Windows\System32\powershell.exe,ACME\svc_web,349645 +MKT-WS-006,2026-02-20T08:10:53.797Z,32733,50228,cmd.exe,C:\Windows\System32\cmd.exe,ACME\svc_web,161341 +MKT-WS-006,2026-02-15T13:40:53.900Z,16778,31565,notepad.exe,C:\Windows\System32\notepad.exe,ACME\svc_web,440906 +MKT-WS-006,2026-02-10T15:06:02.725Z,37641,48382,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\svc_web,255796 +MKT-WS-006,2026-02-11T17:50:28.126Z,7887,58793,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_web,478500 +MKT-WS-006,2026-02-14T03:27:03.886Z,59404,11045,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\svc_web,325780 +MKT-WS-006,2026-02-20T03:36:30.742Z,53261,18,lsass.exe,C:\Windows\System32\lsass.exe,ACME\svc_web,227345 +MKT-WS-006,2026-02-20T14:10:02.120Z,61346,20,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,27159 +MKT-WS-006,2026-02-19T04:51:16.331Z,9700,19976,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\svc_web,299292 +MKT-WS-006,2026-02-19T01:00:49.917Z,64932,33072,dwm.exe,C:\Windows\System32\dwm.exe,ACME\svc_web,346553 +MKT-WS-006,2026-02-18T07:18:32.620Z,11841,30951,System,System,NT AUTHORITY\SYSTEM,148339 +MKT-WS-006,2026-02-16T19:52:17.815Z,19163,42793,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,93551 +MKT-WS-006,2026-02-14T07:58:30.964Z,2545,28978,services.exe,C:\Windows\System32\services.exe,ACME\svc_web,306635 +MKT-WS-006,2026-02-11T03:16:23.572Z,41289,53488,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\svc_web,76178 +MKT-WS-006,2026-02-15T23:06:30.255Z,53585,59476,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\svc_web,45724 +MKT-WS-006,2026-02-16T05:22:07.229Z,5999,50839,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\svc_web,259500 +EXEC-WS-007,2026-02-14T13:25:20.961Z,7095,14,svchost.exe,C:\Windows\System32\svchost.exe,ACME\emartinez,449012 +EXEC-WS-007,2026-02-20T00:48:20.477Z,60008,3792,explorer.exe,C:\Windows\System32\explorer.exe,ACME\emartinez,461992 +EXEC-WS-007,2026-02-10T21:09:36.852Z,35152,3266,chrome.exe,C:\Windows\System32\chrome.exe,ACME\emartinez,145751 +EXEC-WS-007,2026-02-18T03:51:25.181Z,19548,1465,msedge.exe,C:\Windows\System32\msedge.exe,ACME\emartinez,245746 +EXEC-WS-007,2026-02-10T22:46:25.892Z,28777,25649,outlook.exe,C:\Windows\System32\outlook.exe,ACME\emartinez,349869 +EXEC-WS-007,2026-02-12T15:34:04.788Z,56807,8387,teams.exe,C:\Windows\System32\teams.exe,ACME\emartinez,204952 +EXEC-WS-007,2026-02-19T02:54:09.301Z,9118,22349,code.exe,C:\Windows\System32\code.exe,ACME\emartinez,193905 +EXEC-WS-007,2026-02-20T13:43:43.861Z,6136,1705,powershell.exe,C:\Windows\System32\powershell.exe,ACME\emartinez,11167 +EXEC-WS-007,2026-02-19T07:04:04.157Z,14229,25392,cmd.exe,C:\Windows\System32\cmd.exe,ACME\emartinez,394450 +EXEC-WS-007,2026-02-15T05:52:08.797Z,35321,22959,notepad.exe,C:\Windows\System32\notepad.exe,ACME\emartinez,164735 +EXEC-WS-007,2026-02-18T10:40:54.911Z,15773,38476,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\emartinez,249948 +EXEC-WS-007,2026-02-16T01:10:21.530Z,42233,15617,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\emartinez,450660 +EXEC-WS-007,2026-02-20T10:52:59.349Z,52395,29658,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\emartinez,429389 +EXEC-WS-007,2026-02-18T02:16:18.007Z,52146,3,lsass.exe,C:\Windows\System32\lsass.exe,ACME\emartinez,287696 +EXEC-WS-007,2026-02-15T13:43:47.928Z,17760,12,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,454942 +EXEC-WS-007,2026-02-19T07:14:49.554Z,25554,14968,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\emartinez,486453 +EXEC-WS-007,2026-02-12T03:30:32.581Z,11657,7122,dwm.exe,C:\Windows\System32\dwm.exe,ACME\emartinez,423040 +EXEC-WS-007,2026-02-11T23:44:02.999Z,5197,35224,System,System,NT AUTHORITY\SYSTEM,214434 +EXEC-WS-007,2026-02-15T06:38:41.199Z,12793,56020,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,71330 +EXEC-WS-007,2026-02-11T12:18:10.784Z,21740,54191,services.exe,C:\Windows\System32\services.exe,ACME\emartinez,74081 +EXEC-WS-007,2026-02-15T18:19:25.281Z,39143,43600,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\emartinez,17426 +EXEC-WS-007,2026-02-12T11:23:41.365Z,48854,57148,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\emartinez,396659 +EXEC-WS-007,2026-02-10T21:10:46.253Z,47291,5764,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\emartinez,200594 +IT-WS-008,2026-02-10T17:15:51.709Z,1714,12,svchost.exe,C:\Windows\System32\svchost.exe,ACME\gwhite,411189 +IT-WS-008,2026-02-13T09:42:19.032Z,29876,44231,explorer.exe,C:\Windows\System32\explorer.exe,ACME\gwhite,379927 +IT-WS-008,2026-02-17T09:07:20.044Z,61224,11530,chrome.exe,C:\Windows\System32\chrome.exe,ACME\gwhite,84946 +IT-WS-008,2026-02-16T07:56:22.793Z,56708,10088,msedge.exe,C:\Windows\System32\msedge.exe,ACME\gwhite,171946 +IT-WS-008,2026-02-19T14:28:23.707Z,18538,55730,outlook.exe,C:\Windows\System32\outlook.exe,ACME\gwhite,207234 +IT-WS-008,2026-02-18T04:51:36.746Z,22163,53633,teams.exe,C:\Windows\System32\teams.exe,ACME\gwhite,353556 +IT-WS-008,2026-02-14T06:00:53.426Z,18356,32495,code.exe,C:\Windows\System32\code.exe,ACME\gwhite,426612 +IT-WS-008,2026-02-16T14:28:39.385Z,5137,28444,powershell.exe,C:\Windows\System32\powershell.exe,ACME\gwhite,156682 +IT-WS-008,2026-02-19T16:50:39.897Z,24386,23293,cmd.exe,C:\Windows\System32\cmd.exe,ACME\gwhite,442670 +IT-WS-008,2026-02-14T08:13:09.634Z,3609,13620,notepad.exe,C:\Windows\System32\notepad.exe,ACME\gwhite,119149 +IT-WS-008,2026-02-19T23:21:18.677Z,23365,49112,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\gwhite,467311 +IT-WS-008,2026-02-19T00:15:09.397Z,18590,10491,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\gwhite,107991 +IT-WS-008,2026-02-20T15:02:32.689Z,28999,10533,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\gwhite,135051 +IT-WS-008,2026-02-15T00:58:25.880Z,28738,14,lsass.exe,C:\Windows\System32\lsass.exe,ACME\gwhite,202337 +IT-WS-008,2026-02-12T01:50:27.282Z,48947,5,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,478918 +IT-WS-008,2026-02-14T09:27:36.502Z,45841,31677,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\gwhite,259503 +IT-WS-008,2026-02-14T22:03:13.784Z,20031,42306,dwm.exe,C:\Windows\System32\dwm.exe,ACME\gwhite,7246 +IT-WS-008,2026-02-14T00:54:55.440Z,18285,52839,System,System,NT AUTHORITY\SYSTEM,395081 +IT-WS-008,2026-02-18T05:01:55.655Z,22076,10987,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,155293 +IT-WS-008,2026-02-12T02:40:29.574Z,47552,49698,services.exe,C:\Windows\System32\services.exe,ACME\gwhite,23691 +IT-WS-008,2026-02-18T11:25:57.643Z,23694,39249,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\gwhite,137718 +IT-WS-008,2026-02-14T03:33:18.797Z,63675,9754,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\gwhite,317845 +IT-WS-008,2026-02-10T21:08:58.865Z,29584,34991,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\gwhite,143532 +HR-WS-009,2026-02-10T18:00:01.505Z,40560,13,svchost.exe,C:\Windows\System32\svchost.exe,ACME\agarcia,340138 +HR-WS-009,2026-02-19T04:37:06.088Z,12489,19108,explorer.exe,C:\Windows\System32\explorer.exe,ACME\agarcia,422343 +HR-WS-009,2026-02-15T09:27:16.774Z,33626,40887,chrome.exe,C:\Windows\System32\chrome.exe,ACME\agarcia,496736 +HR-WS-009,2026-02-11T11:07:54.421Z,14656,4628,msedge.exe,C:\Windows\System32\msedge.exe,ACME\agarcia,25344 +HR-WS-009,2026-02-14T07:01:08.176Z,8151,22905,outlook.exe,C:\Windows\System32\outlook.exe,ACME\agarcia,180971 +HR-WS-009,2026-02-19T13:01:57.427Z,15471,58294,teams.exe,C:\Windows\System32\teams.exe,ACME\agarcia,317160 +HR-WS-009,2026-02-19T23:44:43.324Z,24382,12232,code.exe,C:\Windows\System32\code.exe,ACME\agarcia,51286 +HR-WS-009,2026-02-16T23:47:43.598Z,50709,48737,powershell.exe,C:\Windows\System32\powershell.exe,ACME\agarcia,498231 +HR-WS-009,2026-02-13T05:59:23.287Z,44785,20937,cmd.exe,C:\Windows\System32\cmd.exe,ACME\agarcia,97262 +HR-WS-009,2026-02-11T07:20:49.395Z,16816,416,notepad.exe,C:\Windows\System32\notepad.exe,ACME\agarcia,13037 +HR-WS-009,2026-02-13T01:16:42.166Z,44441,48683,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\agarcia,441750 +HR-WS-009,2026-02-16T16:45:59.056Z,41998,30594,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\agarcia,414660 +HR-WS-009,2026-02-15T19:10:10.778Z,4084,46220,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\agarcia,440241 +HR-WS-009,2026-02-15T20:48:21.388Z,36017,1,lsass.exe,C:\Windows\System32\lsass.exe,ACME\agarcia,269315 +HR-WS-009,2026-02-15T19:49:31.902Z,15891,11,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,393375 +HR-WS-009,2026-02-14T00:04:23.109Z,24297,58585,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\agarcia,264560 +HR-WS-009,2026-02-14T18:47:22.796Z,42363,14806,dwm.exe,C:\Windows\System32\dwm.exe,ACME\agarcia,169156 +HR-WS-009,2026-02-16T04:27:32.628Z,17330,41626,System,System,NT AUTHORITY\SYSTEM,196613 +HR-WS-009,2026-02-15T00:14:15.929Z,50269,40268,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,297327 +HR-WS-009,2026-02-17T17:49:44.755Z,50690,49987,services.exe,C:\Windows\System32\services.exe,ACME\agarcia,137308 +HR-WS-009,2026-02-17T23:24:45.671Z,8815,23000,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\agarcia,484404 +HR-WS-009,2026-02-16T09:13:36.567Z,10718,41521,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\agarcia,31341 +HR-WS-009,2026-02-19T04:02:09.825Z,48021,50474,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\agarcia,112695 +FIN-WS-010,2026-02-13T17:39:14.828Z,52349,16,svchost.exe,C:\Windows\System32\svchost.exe,ACME\bwilson,271101 +FIN-WS-010,2026-02-20T12:53:15.999Z,16865,38451,explorer.exe,C:\Windows\System32\explorer.exe,ACME\bwilson,465649 +FIN-WS-010,2026-02-13T17:57:02.567Z,44133,34702,chrome.exe,C:\Windows\System32\chrome.exe,ACME\bwilson,424019 +FIN-WS-010,2026-02-19T22:28:01.434Z,45502,58415,msedge.exe,C:\Windows\System32\msedge.exe,ACME\bwilson,274962 +FIN-WS-010,2026-02-19T10:30:02.388Z,56582,42100,outlook.exe,C:\Windows\System32\outlook.exe,ACME\bwilson,476763 +FIN-WS-010,2026-02-19T23:36:06.899Z,52663,31636,teams.exe,C:\Windows\System32\teams.exe,ACME\bwilson,401035 +FIN-WS-010,2026-02-10T22:10:54.230Z,20903,15341,code.exe,C:\Windows\System32\code.exe,ACME\bwilson,269240 +FIN-WS-010,2026-02-15T20:29:05.760Z,7111,21959,powershell.exe,C:\Windows\System32\powershell.exe,ACME\bwilson,285887 +FIN-WS-010,2026-02-20T08:51:13.781Z,56364,26580,cmd.exe,C:\Windows\System32\cmd.exe,ACME\bwilson,274932 +FIN-WS-010,2026-02-19T23:11:53.884Z,44314,51069,notepad.exe,C:\Windows\System32\notepad.exe,ACME\bwilson,313164 +FIN-WS-010,2026-02-11T11:04:37.041Z,17240,24553,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\bwilson,444632 +FIN-WS-010,2026-02-16T14:36:44.293Z,62633,58769,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\bwilson,117650 +FIN-WS-010,2026-02-19T06:05:06.194Z,44620,59449,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\bwilson,422268 +FIN-WS-010,2026-02-15T08:35:02.567Z,18673,14,lsass.exe,C:\Windows\System32\lsass.exe,ACME\bwilson,339559 +FIN-WS-010,2026-02-16T18:13:38.530Z,46885,19,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,81923 +FIN-WS-010,2026-02-12T02:46:10.640Z,30519,22133,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\bwilson,231241 +FIN-WS-010,2026-02-10T13:04:05.021Z,59065,7014,dwm.exe,C:\Windows\System32\dwm.exe,ACME\bwilson,5451 +FIN-WS-010,2026-02-17T22:02:48.421Z,47538,9726,System,System,NT AUTHORITY\SYSTEM,327492 +FIN-WS-010,2026-02-14T04:02:17.295Z,63102,52003,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,322116 +FIN-WS-010,2026-02-12T07:37:59.954Z,42084,25374,services.exe,C:\Windows\System32\services.exe,ACME\bwilson,39684 +FIN-WS-010,2026-02-16T03:52:23.180Z,52634,50325,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\bwilson,255748 +FIN-WS-010,2026-02-10T21:53:49.222Z,23094,29748,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\bwilson,107931 +FIN-WS-010,2026-02-10T18:23:23.971Z,53488,11970,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\bwilson,377634 +SLS-WS-011,2026-02-11T00:16:31.282Z,14600,1,svchost.exe,C:\Windows\System32\svchost.exe,ACME\agarcia,164478 +SLS-WS-011,2026-02-13T04:23:54.068Z,52987,26796,explorer.exe,C:\Windows\System32\explorer.exe,ACME\agarcia,57830 +SLS-WS-011,2026-02-11T23:25:43.015Z,40848,31713,chrome.exe,C:\Windows\System32\chrome.exe,ACME\agarcia,296926 +SLS-WS-011,2026-02-13T08:14:36.374Z,54577,43124,msedge.exe,C:\Windows\System32\msedge.exe,ACME\agarcia,345886 +SLS-WS-011,2026-02-14T18:50:31.887Z,3858,13949,outlook.exe,C:\Windows\System32\outlook.exe,ACME\agarcia,173046 +SLS-WS-011,2026-02-14T08:54:04.547Z,34872,1031,teams.exe,C:\Windows\System32\teams.exe,ACME\agarcia,410310 +SLS-WS-011,2026-02-11T22:25:24.306Z,47287,14657,code.exe,C:\Windows\System32\code.exe,ACME\agarcia,383757 +SLS-WS-011,2026-02-17T20:46:24.839Z,50695,50770,powershell.exe,C:\Windows\System32\powershell.exe,ACME\agarcia,468929 +SLS-WS-011,2026-02-10T17:57:02.296Z,38859,17543,cmd.exe,C:\Windows\System32\cmd.exe,ACME\agarcia,48940 +SLS-WS-011,2026-02-19T00:07:07.185Z,29988,5186,notepad.exe,C:\Windows\System32\notepad.exe,ACME\agarcia,464835 +SLS-WS-011,2026-02-12T22:06:22.847Z,2319,49279,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\agarcia,371644 +SLS-WS-011,2026-02-16T18:46:37.919Z,31854,1932,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\agarcia,54156 +SLS-WS-011,2026-02-14T15:01:37.370Z,34770,17432,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\agarcia,241604 +SLS-WS-011,2026-02-16T01:58:20.158Z,38835,2,lsass.exe,C:\Windows\System32\lsass.exe,ACME\agarcia,250633 +SLS-WS-011,2026-02-15T06:56:59.217Z,52508,8,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,334980 +SLS-WS-011,2026-02-18T16:29:24.385Z,7019,27372,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\agarcia,417651 +SLS-WS-011,2026-02-13T22:15:32.652Z,9484,29422,dwm.exe,C:\Windows\System32\dwm.exe,ACME\agarcia,89834 +SLS-WS-011,2026-02-14T15:26:41.962Z,32234,20385,System,System,NT AUTHORITY\SYSTEM,25827 +SLS-WS-011,2026-02-10T12:03:21.670Z,5627,2926,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,210589 +SLS-WS-011,2026-02-19T20:01:32.903Z,41863,40028,services.exe,C:\Windows\System32\services.exe,ACME\agarcia,428262 +SLS-WS-011,2026-02-13T09:00:50.844Z,29101,30944,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\agarcia,1873 +SLS-WS-011,2026-02-15T03:29:14.548Z,39054,45256,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\agarcia,34048 +SLS-WS-011,2026-02-11T17:03:58.631Z,33761,14217,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\agarcia,331178 +ENG-WS-012,2026-02-18T01:55:02.222Z,26198,13,svchost.exe,C:\Windows\System32\svchost.exe,ACME\svc_sql,38430 +ENG-WS-012,2026-02-14T06:28:54.747Z,35763,669,explorer.exe,C:\Windows\System32\explorer.exe,ACME\svc_sql,2718 +ENG-WS-012,2026-02-13T20:40:59.097Z,34614,59764,chrome.exe,C:\Windows\System32\chrome.exe,ACME\svc_sql,128779 +ENG-WS-012,2026-02-10T18:15:13.177Z,53234,29838,msedge.exe,C:\Windows\System32\msedge.exe,ACME\svc_sql,262972 +ENG-WS-012,2026-02-10T13:10:13.572Z,4186,54452,outlook.exe,C:\Windows\System32\outlook.exe,ACME\svc_sql,4259 +ENG-WS-012,2026-02-18T03:34:25.432Z,60341,9908,teams.exe,C:\Windows\System32\teams.exe,ACME\svc_sql,70444 +ENG-WS-012,2026-02-12T02:19:06.647Z,47607,7749,code.exe,C:\Windows\System32\code.exe,ACME\svc_sql,208519 +ENG-WS-012,2026-02-12T14:32:39.699Z,36774,54414,powershell.exe,C:\Windows\System32\powershell.exe,ACME\svc_sql,495905 +ENG-WS-012,2026-02-13T15:39:27.914Z,40342,2841,cmd.exe,C:\Windows\System32\cmd.exe,ACME\svc_sql,443978 +ENG-WS-012,2026-02-11T14:28:25.204Z,48937,2443,notepad.exe,C:\Windows\System32\notepad.exe,ACME\svc_sql,437354 +ENG-WS-012,2026-02-19T20:36:55.189Z,5123,49997,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\svc_sql,287314 +ENG-WS-012,2026-02-17T23:29:04.639Z,59650,4567,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_sql,297924 +ENG-WS-012,2026-02-13T03:09:08.026Z,12940,51854,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\svc_sql,309316 +ENG-WS-012,2026-02-18T11:43:28.954Z,7433,1,lsass.exe,C:\Windows\System32\lsass.exe,ACME\svc_sql,481216 +ENG-WS-012,2026-02-16T17:59:56.225Z,30456,14,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,473405 +ENG-WS-012,2026-02-11T00:11:39.308Z,31351,55352,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\svc_sql,440796 +ENG-WS-012,2026-02-13T06:24:11.241Z,64373,7301,dwm.exe,C:\Windows\System32\dwm.exe,ACME\svc_sql,160887 +ENG-WS-012,2026-02-18T13:52:13.813Z,5300,5445,System,System,NT AUTHORITY\SYSTEM,493926 +ENG-WS-012,2026-02-12T17:20:34.834Z,51018,27988,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,95119 +ENG-WS-012,2026-02-18T01:55:16.158Z,36711,9918,services.exe,C:\Windows\System32\services.exe,ACME\svc_sql,191236 +ENG-WS-012,2026-02-14T07:17:00.745Z,7444,37286,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\svc_sql,406303 +ENG-WS-012,2026-02-20T10:29:06.649Z,8955,59875,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\svc_sql,310392 +ENG-WS-012,2026-02-15T14:43:02.556Z,61500,21684,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\svc_sql,203475 +ENG-WS-012,2026-02-11T20:27:48.469Z,14123,58967,discord.exe,C:\Users\svc_sql\AppData\Local\discord\discord.exe,ACME\svc_sql,304112 +LEG-WS-013,2026-02-18T19:11:08.615Z,56961,5,svchost.exe,C:\Windows\System32\svchost.exe,ACME\jsmith,133766 +LEG-WS-013,2026-02-18T12:40:24.053Z,56054,19854,explorer.exe,C:\Windows\System32\explorer.exe,ACME\jsmith,313010 +LEG-WS-013,2026-02-13T17:42:35.509Z,25690,20818,chrome.exe,C:\Windows\System32\chrome.exe,ACME\jsmith,83362 +LEG-WS-013,2026-02-19T22:53:15.389Z,46375,18149,msedge.exe,C:\Windows\System32\msedge.exe,ACME\jsmith,83170 +LEG-WS-013,2026-02-11T04:54:25.620Z,59151,47023,outlook.exe,C:\Windows\System32\outlook.exe,ACME\jsmith,272739 +LEG-WS-013,2026-02-11T19:28:49.857Z,43574,52054,teams.exe,C:\Windows\System32\teams.exe,ACME\jsmith,171731 +LEG-WS-013,2026-02-13T01:50:37.081Z,54745,52495,code.exe,C:\Windows\System32\code.exe,ACME\jsmith,276209 +LEG-WS-013,2026-02-17T13:49:44.478Z,3403,21814,powershell.exe,C:\Windows\System32\powershell.exe,ACME\jsmith,497802 +LEG-WS-013,2026-02-19T01:16:52.502Z,22728,40580,cmd.exe,C:\Windows\System32\cmd.exe,ACME\jsmith,173349 +LEG-WS-013,2026-02-12T02:39:26.392Z,229,57780,notepad.exe,C:\Windows\System32\notepad.exe,ACME\jsmith,75289 +LEG-WS-013,2026-02-17T02:42:43.447Z,63564,16604,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\jsmith,73542 +LEG-WS-013,2026-02-12T21:16:37.113Z,27555,14207,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\jsmith,197526 +LEG-WS-013,2026-02-11T12:50:31.741Z,11859,14986,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\jsmith,243740 +LEG-WS-013,2026-02-13T07:52:14.367Z,41345,11,lsass.exe,C:\Windows\System32\lsass.exe,ACME\jsmith,233090 +LEG-WS-013,2026-02-19T02:57:57.793Z,32719,4,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,102890 +LEG-WS-013,2026-02-11T22:38:34.373Z,10168,256,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\jsmith,211064 +LEG-WS-013,2026-02-12T11:35:22.358Z,6004,45333,dwm.exe,C:\Windows\System32\dwm.exe,ACME\jsmith,421493 +LEG-WS-013,2026-02-10T11:35:11.773Z,41884,8636,System,System,NT AUTHORITY\SYSTEM,56528 +LEG-WS-013,2026-02-14T15:49:48.775Z,51096,34441,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,224009 +LEG-WS-013,2026-02-18T12:27:41.246Z,54606,48074,services.exe,C:\Windows\System32\services.exe,ACME\jsmith,243370 +LEG-WS-013,2026-02-15T17:30:56.418Z,18454,20234,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\jsmith,88693 +LEG-WS-013,2026-02-18T02:23:24.464Z,11757,33541,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\jsmith,291814 +LEG-WS-013,2026-02-19T20:00:17.670Z,812,32802,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\jsmith,323430 +LEG-WS-013,2026-02-16T17:02:05.312Z,25098,2150,steam.exe,C:\Users\jsmith\AppData\Local\steam\steam.exe,ACME\jsmith,353358 +MKT-WS-014,2026-02-19T08:44:27.057Z,27455,13,svchost.exe,C:\Windows\System32\svchost.exe,ACME\fthompson,398247 +MKT-WS-014,2026-02-12T03:39:31.236Z,54935,28738,explorer.exe,C:\Windows\System32\explorer.exe,ACME\fthompson,199384 +MKT-WS-014,2026-02-11T23:09:52.911Z,2173,41569,chrome.exe,C:\Windows\System32\chrome.exe,ACME\fthompson,416279 +MKT-WS-014,2026-02-19T04:14:58.681Z,46568,39990,msedge.exe,C:\Windows\System32\msedge.exe,ACME\fthompson,496723 +MKT-WS-014,2026-02-19T03:05:08.267Z,42747,20539,outlook.exe,C:\Windows\System32\outlook.exe,ACME\fthompson,314662 +MKT-WS-014,2026-02-20T13:11:10.245Z,4692,59536,teams.exe,C:\Windows\System32\teams.exe,ACME\fthompson,22815 +MKT-WS-014,2026-02-17T18:41:33.691Z,16943,52005,code.exe,C:\Windows\System32\code.exe,ACME\fthompson,65516 +MKT-WS-014,2026-02-13T10:27:04.703Z,64586,27299,powershell.exe,C:\Windows\System32\powershell.exe,ACME\fthompson,313161 +MKT-WS-014,2026-02-13T00:15:28.497Z,21572,56783,cmd.exe,C:\Windows\System32\cmd.exe,ACME\fthompson,436420 +MKT-WS-014,2026-02-16T23:29:15.046Z,63676,21119,notepad.exe,C:\Windows\System32\notepad.exe,ACME\fthompson,445989 +MKT-WS-014,2026-02-13T12:10:15.638Z,17446,48131,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\fthompson,214427 +MKT-WS-014,2026-02-15T03:27:15.395Z,22655,30756,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\fthompson,497308 +MKT-WS-014,2026-02-17T11:57:59.655Z,7835,16164,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\fthompson,472989 +MKT-WS-014,2026-02-11T11:48:54.509Z,41602,15,lsass.exe,C:\Windows\System32\lsass.exe,ACME\fthompson,104581 +MKT-WS-014,2026-02-15T04:23:50.990Z,16789,6,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,392342 +MKT-WS-014,2026-02-16T22:54:10.956Z,38242,13986,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\fthompson,92519 +MKT-WS-014,2026-02-19T04:13:38.114Z,34252,59667,dwm.exe,C:\Windows\System32\dwm.exe,ACME\fthompson,404596 +MKT-WS-014,2026-02-20T02:19:15.229Z,14188,9669,System,System,NT AUTHORITY\SYSTEM,408317 +MKT-WS-014,2026-02-15T05:06:35.686Z,11472,52910,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,199005 +MKT-WS-014,2026-02-13T00:15:52.770Z,28034,21098,services.exe,C:\Windows\System32\services.exe,ACME\fthompson,385659 +MKT-WS-014,2026-02-13T08:22:58.122Z,35115,41490,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\fthompson,262968 +MKT-WS-014,2026-02-18T08:07:11.530Z,56542,20096,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\fthompson,404958 +MKT-WS-014,2026-02-20T13:11:41.444Z,52463,19081,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\fthompson,362045 +EXEC-WS-015,2026-02-12T07:16:34.268Z,18131,2,svchost.exe,C:\Windows\System32\svchost.exe,ACME\admin,383512 +EXEC-WS-015,2026-02-10T14:58:42.656Z,2070,47291,explorer.exe,C:\Windows\System32\explorer.exe,ACME\admin,338246 +EXEC-WS-015,2026-02-13T11:03:46.370Z,6661,55791,chrome.exe,C:\Windows\System32\chrome.exe,ACME\admin,202741 +EXEC-WS-015,2026-02-18T05:12:05.406Z,27344,21488,msedge.exe,C:\Windows\System32\msedge.exe,ACME\admin,468943 +EXEC-WS-015,2026-02-13T09:28:16.971Z,63340,37026,outlook.exe,C:\Windows\System32\outlook.exe,ACME\admin,472422 +EXEC-WS-015,2026-02-16T02:31:55.292Z,60092,13288,teams.exe,C:\Windows\System32\teams.exe,ACME\admin,291024 +EXEC-WS-015,2026-02-11T18:06:45.274Z,11385,14195,code.exe,C:\Windows\System32\code.exe,ACME\admin,131486 +EXEC-WS-015,2026-02-20T07:06:16.524Z,20131,51838,powershell.exe,C:\Windows\System32\powershell.exe,ACME\admin,380212 +EXEC-WS-015,2026-02-13T23:16:38.036Z,16136,14410,cmd.exe,C:\Windows\System32\cmd.exe,ACME\admin,219775 +EXEC-WS-015,2026-02-12T00:28:40.291Z,33831,53122,notepad.exe,C:\Windows\System32\notepad.exe,ACME\admin,70495 +EXEC-WS-015,2026-02-15T18:57:50.054Z,50837,49997,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\admin,385997 +EXEC-WS-015,2026-02-18T19:59:31.154Z,50246,27323,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\admin,404917 +EXEC-WS-015,2026-02-14T04:08:49.061Z,31837,44064,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\admin,318109 +EXEC-WS-015,2026-02-17T06:08:05.088Z,59189,5,lsass.exe,C:\Windows\System32\lsass.exe,ACME\admin,413756 +EXEC-WS-015,2026-02-19T02:19:08.020Z,64179,8,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,323328 +EXEC-WS-015,2026-02-11T12:15:37.637Z,35959,147,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\admin,123057 +EXEC-WS-015,2026-02-15T04:40:53.496Z,53149,41751,dwm.exe,C:\Windows\System32\dwm.exe,ACME\admin,209019 +EXEC-WS-015,2026-02-16T16:52:21.003Z,4898,52026,System,System,NT AUTHORITY\SYSTEM,472986 +EXEC-WS-015,2026-02-15T02:13:59.320Z,24048,44139,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,5233 +EXEC-WS-015,2026-02-19T11:09:43.443Z,6607,20462,services.exe,C:\Windows\System32\services.exe,ACME\admin,61421 +EXEC-WS-015,2026-02-14T01:02:01.950Z,60744,5276,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\admin,405792 +EXEC-WS-015,2026-02-16T23:10:37.489Z,34724,7174,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\admin,440234 +EXEC-WS-015,2026-02-11T01:17:00.230Z,10177,13984,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\admin,128609 +IT-WS-016,2026-02-11T12:17:19.240Z,36067,3,svchost.exe,C:\Windows\System32\svchost.exe,ACME\bwilson,286948 +IT-WS-016,2026-02-17T20:36:19.420Z,30420,57463,explorer.exe,C:\Windows\System32\explorer.exe,ACME\bwilson,213366 +IT-WS-016,2026-02-16T08:12:50.011Z,22243,2659,chrome.exe,C:\Windows\System32\chrome.exe,ACME\bwilson,34686 +IT-WS-016,2026-02-19T16:35:24.801Z,24765,13337,msedge.exe,C:\Windows\System32\msedge.exe,ACME\bwilson,236161 +IT-WS-016,2026-02-14T03:04:21.173Z,57803,41884,outlook.exe,C:\Windows\System32\outlook.exe,ACME\bwilson,194551 +IT-WS-016,2026-02-18T21:04:05.474Z,58229,28881,teams.exe,C:\Windows\System32\teams.exe,ACME\bwilson,318481 +IT-WS-016,2026-02-18T05:55:43.794Z,49462,51582,code.exe,C:\Windows\System32\code.exe,ACME\bwilson,64340 +IT-WS-016,2026-02-14T04:39:38.932Z,57231,52691,powershell.exe,C:\Windows\System32\powershell.exe,ACME\bwilson,21194 +IT-WS-016,2026-02-16T03:09:56.255Z,43061,39657,cmd.exe,C:\Windows\System32\cmd.exe,ACME\bwilson,49508 +IT-WS-016,2026-02-17T01:06:56.344Z,4171,2094,notepad.exe,C:\Windows\System32\notepad.exe,ACME\bwilson,449268 +IT-WS-016,2026-02-12T15:14:23.864Z,17454,19426,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\bwilson,19632 +IT-WS-016,2026-02-15T10:01:49.655Z,9218,30209,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\bwilson,73546 +IT-WS-016,2026-02-17T09:20:01.416Z,49252,1026,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\bwilson,177131 +IT-WS-016,2026-02-13T08:16:30.496Z,26116,19,lsass.exe,C:\Windows\System32\lsass.exe,ACME\bwilson,235102 +IT-WS-016,2026-02-16T21:07:38.074Z,42255,14,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,291274 +IT-WS-016,2026-02-16T22:13:32.564Z,658,54770,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\bwilson,91795 +IT-WS-016,2026-02-12T09:25:04.023Z,25177,56690,dwm.exe,C:\Windows\System32\dwm.exe,ACME\bwilson,87511 +IT-WS-016,2026-02-18T18:27:47.162Z,57203,25893,System,System,NT AUTHORITY\SYSTEM,219747 +IT-WS-016,2026-02-17T13:44:38.520Z,48373,14932,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,53692 +IT-WS-016,2026-02-12T21:37:15.617Z,5848,20376,services.exe,C:\Windows\System32\services.exe,ACME\bwilson,392459 +IT-WS-016,2026-02-13T20:55:34.834Z,4124,30167,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\bwilson,451673 +IT-WS-016,2026-02-19T08:08:51.713Z,39207,33060,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\bwilson,462350 +IT-WS-016,2026-02-20T16:07:31.676Z,56535,31278,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\bwilson,145895 +IT-WS-016,2026-02-14T19:58:06.617Z,29125,8883,qbittorrent.exe,C:\Users\bwilson\AppData\Local\qbittorrent\qbittorrent.exe,ACME\bwilson,360336 +HR-WS-017,2026-02-17T07:33:56.532Z,2114,13,svchost.exe,C:\Windows\System32\svchost.exe,ACME\cjohnson,420874 +HR-WS-017,2026-02-14T07:21:57.589Z,16960,47976,explorer.exe,C:\Windows\System32\explorer.exe,ACME\cjohnson,59753 +HR-WS-017,2026-02-15T14:33:10.828Z,18534,13125,chrome.exe,C:\Windows\System32\chrome.exe,ACME\cjohnson,106813 +HR-WS-017,2026-02-17T21:57:11.621Z,54739,59420,msedge.exe,C:\Windows\System32\msedge.exe,ACME\cjohnson,458245 +HR-WS-017,2026-02-14T15:15:26.888Z,48988,4244,outlook.exe,C:\Windows\System32\outlook.exe,ACME\cjohnson,158553 +HR-WS-017,2026-02-11T17:35:27.693Z,46543,47562,teams.exe,C:\Windows\System32\teams.exe,ACME\cjohnson,284252 +HR-WS-017,2026-02-19T00:16:36.780Z,47696,39098,code.exe,C:\Windows\System32\code.exe,ACME\cjohnson,477224 +HR-WS-017,2026-02-10T20:46:40.691Z,20457,57252,powershell.exe,C:\Windows\System32\powershell.exe,ACME\cjohnson,280103 +HR-WS-017,2026-02-15T06:38:36.829Z,18737,43133,cmd.exe,C:\Windows\System32\cmd.exe,ACME\cjohnson,130064 +HR-WS-017,2026-02-16T09:59:21.846Z,36645,51905,notepad.exe,C:\Windows\System32\notepad.exe,ACME\cjohnson,257175 +HR-WS-017,2026-02-11T17:23:44.532Z,57583,22123,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\cjohnson,267519 +HR-WS-017,2026-02-15T09:04:50.171Z,62270,38729,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\cjohnson,432825 +HR-WS-017,2026-02-13T12:17:46.593Z,10712,42809,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\cjohnson,429284 +HR-WS-017,2026-02-19T20:07:24.298Z,39888,15,lsass.exe,C:\Windows\System32\lsass.exe,ACME\cjohnson,292450 +HR-WS-017,2026-02-15T23:47:59.921Z,61874,19,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,99136 +HR-WS-017,2026-02-13T07:56:01.931Z,60771,52372,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\cjohnson,181810 +HR-WS-017,2026-02-10T14:35:42.429Z,45446,19439,dwm.exe,C:\Windows\System32\dwm.exe,ACME\cjohnson,342455 +HR-WS-017,2026-02-11T21:50:40.487Z,61556,18421,System,System,NT AUTHORITY\SYSTEM,12206 +HR-WS-017,2026-02-13T11:03:06.046Z,717,7490,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,311167 +HR-WS-017,2026-02-11T13:36:47.744Z,40148,26278,services.exe,C:\Windows\System32\services.exe,ACME\cjohnson,400042 +HR-WS-017,2026-02-15T06:18:20.737Z,54471,54942,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\cjohnson,277190 +HR-WS-017,2026-02-13T05:56:28.940Z,21184,52542,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\cjohnson,110465 +HR-WS-017,2026-02-19T01:03:15.781Z,37184,48525,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\cjohnson,17458 +FIN-WS-018,2026-02-16T00:35:53.641Z,46202,20,svchost.exe,C:\Windows\System32\svchost.exe,ACME\gwhite,202527 +FIN-WS-018,2026-02-20T12:07:02.885Z,61278,8492,explorer.exe,C:\Windows\System32\explorer.exe,ACME\gwhite,227053 +FIN-WS-018,2026-02-19T04:23:48.674Z,39064,11681,chrome.exe,C:\Windows\System32\chrome.exe,ACME\gwhite,113721 +FIN-WS-018,2026-02-13T20:36:03.450Z,15626,37227,msedge.exe,C:\Windows\System32\msedge.exe,ACME\gwhite,127502 +FIN-WS-018,2026-02-19T00:45:35.895Z,60811,48005,outlook.exe,C:\Windows\System32\outlook.exe,ACME\gwhite,18078 +FIN-WS-018,2026-02-16T21:12:31.720Z,48993,44118,teams.exe,C:\Windows\System32\teams.exe,ACME\gwhite,68054 +FIN-WS-018,2026-02-18T00:33:29.863Z,42983,22802,code.exe,C:\Windows\System32\code.exe,ACME\gwhite,495075 +FIN-WS-018,2026-02-13T19:40:07.323Z,12901,39083,powershell.exe,C:\Windows\System32\powershell.exe,ACME\gwhite,346407 +FIN-WS-018,2026-02-16T23:53:58.722Z,12112,56877,cmd.exe,C:\Windows\System32\cmd.exe,ACME\gwhite,210902 +FIN-WS-018,2026-02-15T01:36:27.393Z,45529,13609,notepad.exe,C:\Windows\System32\notepad.exe,ACME\gwhite,432137 +FIN-WS-018,2026-02-18T02:35:09.990Z,32048,43890,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\gwhite,56342 +FIN-WS-018,2026-02-14T01:41:57.300Z,11615,53652,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\gwhite,164316 +FIN-WS-018,2026-02-17T19:50:53.310Z,23833,34888,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\gwhite,257661 +FIN-WS-018,2026-02-11T14:45:11.719Z,52968,2,lsass.exe,C:\Windows\System32\lsass.exe,ACME\gwhite,50816 +FIN-WS-018,2026-02-10T23:37:39.565Z,48471,4,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,185078 +FIN-WS-018,2026-02-12T19:24:14.406Z,8090,32247,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\gwhite,109152 +FIN-WS-018,2026-02-12T09:01:43.336Z,24010,36615,dwm.exe,C:\Windows\System32\dwm.exe,ACME\gwhite,75509 +FIN-WS-018,2026-02-19T00:04:36.226Z,58532,19366,System,System,NT AUTHORITY\SYSTEM,332362 +FIN-WS-018,2026-02-13T20:13:31.988Z,11657,8248,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,179173 +FIN-WS-018,2026-02-13T13:15:22.942Z,28197,38054,services.exe,C:\Windows\System32\services.exe,ACME\gwhite,116513 +FIN-WS-018,2026-02-19T13:28:35.064Z,36354,32571,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\gwhite,250373 +FIN-WS-018,2026-02-20T00:57:08.684Z,4682,30089,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\gwhite,122124 +FIN-WS-018,2026-02-19T13:00:10.930Z,21311,44932,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\gwhite,114139 +SLS-WS-019,2026-02-17T10:12:50.508Z,43946,17,svchost.exe,C:\Windows\System32\svchost.exe,ACME\svc_backup,44972 +SLS-WS-019,2026-02-19T20:29:44.228Z,59933,3796,explorer.exe,C:\Windows\System32\explorer.exe,ACME\svc_backup,411782 +SLS-WS-019,2026-02-15T22:37:45.297Z,53898,18358,chrome.exe,C:\Windows\System32\chrome.exe,ACME\svc_backup,405391 +SLS-WS-019,2026-02-13T18:41:56.794Z,50963,11510,msedge.exe,C:\Windows\System32\msedge.exe,ACME\svc_backup,84411 +SLS-WS-019,2026-02-15T08:58:38.614Z,47389,59646,outlook.exe,C:\Windows\System32\outlook.exe,ACME\svc_backup,321317 +SLS-WS-019,2026-02-13T06:09:19.108Z,27922,51614,teams.exe,C:\Windows\System32\teams.exe,ACME\svc_backup,354035 +SLS-WS-019,2026-02-19T05:54:29.323Z,51135,13344,code.exe,C:\Windows\System32\code.exe,ACME\svc_backup,226709 +SLS-WS-019,2026-02-11T22:33:06.687Z,5503,50382,powershell.exe,C:\Windows\System32\powershell.exe,ACME\svc_backup,338727 +SLS-WS-019,2026-02-11T19:17:59.622Z,39386,40495,cmd.exe,C:\Windows\System32\cmd.exe,ACME\svc_backup,289063 +SLS-WS-019,2026-02-15T21:22:59.650Z,27670,43415,notepad.exe,C:\Windows\System32\notepad.exe,ACME\svc_backup,379742 +SLS-WS-019,2026-02-16T03:35:19.692Z,46215,31271,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\svc_backup,81329 +SLS-WS-019,2026-02-15T06:01:44.699Z,43789,45624,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_backup,174308 +SLS-WS-019,2026-02-12T15:33:29.318Z,6843,20710,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\svc_backup,345643 +SLS-WS-019,2026-02-10T19:47:05.631Z,28918,5,lsass.exe,C:\Windows\System32\lsass.exe,ACME\svc_backup,310313 +SLS-WS-019,2026-02-10T17:01:56.693Z,28908,12,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,202260 +SLS-WS-019,2026-02-16T12:11:45.301Z,24708,40467,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\svc_backup,359672 +SLS-WS-019,2026-02-11T16:06:28.610Z,61260,42151,dwm.exe,C:\Windows\System32\dwm.exe,ACME\svc_backup,385231 +SLS-WS-019,2026-02-20T09:27:07.645Z,35916,20660,System,System,NT AUTHORITY\SYSTEM,388070 +SLS-WS-019,2026-02-13T18:24:27.119Z,26038,34046,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,452549 +SLS-WS-019,2026-02-11T03:40:49.118Z,18141,19191,services.exe,C:\Windows\System32\services.exe,ACME\svc_backup,150778 +SLS-WS-019,2026-02-12T19:08:35.845Z,53945,37577,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\svc_backup,53111 +SLS-WS-019,2026-02-11T04:56:55.155Z,50291,59426,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\svc_backup,168713 +SLS-WS-019,2026-02-16T23:18:14.942Z,25103,49696,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\svc_backup,285150 +ENG-WS-020,2026-02-18T03:07:46.049Z,11250,13,svchost.exe,C:\Windows\System32\svchost.exe,ACME\jsmith,66655 +ENG-WS-020,2026-02-10T18:19:19.091Z,6613,34040,explorer.exe,C:\Windows\System32\explorer.exe,ACME\jsmith,376713 +ENG-WS-020,2026-02-18T12:14:23.538Z,45528,43113,chrome.exe,C:\Windows\System32\chrome.exe,ACME\jsmith,376291 +ENG-WS-020,2026-02-20T12:14:06.209Z,16190,49264,msedge.exe,C:\Windows\System32\msedge.exe,ACME\jsmith,132003 +ENG-WS-020,2026-02-17T11:11:07.202Z,11226,15231,outlook.exe,C:\Windows\System32\outlook.exe,ACME\jsmith,388841 +ENG-WS-020,2026-02-13T17:20:03.875Z,8121,36135,teams.exe,C:\Windows\System32\teams.exe,ACME\jsmith,91054 +ENG-WS-020,2026-02-17T04:47:37.454Z,9577,39073,code.exe,C:\Windows\System32\code.exe,ACME\jsmith,225178 +ENG-WS-020,2026-02-14T11:44:39.210Z,53783,23306,powershell.exe,C:\Windows\System32\powershell.exe,ACME\jsmith,105498 +ENG-WS-020,2026-02-10T23:27:29.459Z,45664,58756,cmd.exe,C:\Windows\System32\cmd.exe,ACME\jsmith,231823 +ENG-WS-020,2026-02-12T20:06:46.341Z,48247,53303,notepad.exe,C:\Windows\System32\notepad.exe,ACME\jsmith,326145 +ENG-WS-020,2026-02-11T03:38:00.825Z,33887,28790,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\jsmith,352380 +ENG-WS-020,2026-02-13T08:16:57.046Z,19169,33599,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\jsmith,169484 +ENG-WS-020,2026-02-13T12:58:48.731Z,62571,17856,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\jsmith,457025 +ENG-WS-020,2026-02-10T08:59:38.740Z,13130,1,lsass.exe,C:\Windows\System32\lsass.exe,ACME\jsmith,339573 +ENG-WS-020,2026-02-18T19:43:06.618Z,19252,11,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,401216 +ENG-WS-020,2026-02-18T00:31:18.134Z,58913,29638,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\jsmith,246850 +ENG-WS-020,2026-02-11T14:16:35.342Z,60411,19171,dwm.exe,C:\Windows\System32\dwm.exe,ACME\jsmith,466928 +ENG-WS-020,2026-02-14T17:01:37.726Z,19334,58997,System,System,NT AUTHORITY\SYSTEM,441857 +ENG-WS-020,2026-02-18T13:51:34.495Z,49138,54170,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,456009 +ENG-WS-020,2026-02-12T12:29:30.591Z,6671,32961,services.exe,C:\Windows\System32\services.exe,ACME\jsmith,211460 +ENG-WS-020,2026-02-18T05:26:31.406Z,16122,13249,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\jsmith,465360 +ENG-WS-020,2026-02-19T06:50:27.507Z,24144,14628,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\jsmith,499935 +ENG-WS-020,2026-02-17T16:26:51.403Z,58353,15974,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\jsmith,104231 +ENG-WS-020,2026-02-17T23:38:56.904Z,40364,45156,discord.exe,C:\Users\jsmith\AppData\Local\discord\discord.exe,ACME\jsmith,315104 +LEG-WS-021,2026-02-19T10:41:24.659Z,24986,13,svchost.exe,C:\Windows\System32\svchost.exe,ACME\svc_web,238638 +LEG-WS-021,2026-02-18T22:49:21.246Z,3924,12344,explorer.exe,C:\Windows\System32\explorer.exe,ACME\svc_web,455248 +LEG-WS-021,2026-02-15T02:07:15.253Z,22156,1622,chrome.exe,C:\Windows\System32\chrome.exe,ACME\svc_web,201192 +LEG-WS-021,2026-02-10T19:09:09.852Z,28128,28067,msedge.exe,C:\Windows\System32\msedge.exe,ACME\svc_web,203689 +LEG-WS-021,2026-02-17T08:26:43.707Z,37821,42091,outlook.exe,C:\Windows\System32\outlook.exe,ACME\svc_web,11132 +LEG-WS-021,2026-02-17T17:57:32.792Z,33890,23760,teams.exe,C:\Windows\System32\teams.exe,ACME\svc_web,224652 +LEG-WS-021,2026-02-14T17:12:55.056Z,5465,3196,code.exe,C:\Windows\System32\code.exe,ACME\svc_web,324133 +LEG-WS-021,2026-02-13T22:32:07.337Z,26953,24509,powershell.exe,C:\Windows\System32\powershell.exe,ACME\svc_web,445297 +LEG-WS-021,2026-02-11T17:59:10.562Z,48285,13809,cmd.exe,C:\Windows\System32\cmd.exe,ACME\svc_web,401183 +LEG-WS-021,2026-02-15T12:06:47.207Z,64190,16788,notepad.exe,C:\Windows\System32\notepad.exe,ACME\svc_web,454872 +LEG-WS-021,2026-02-17T17:17:04.663Z,7131,42600,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\svc_web,34636 +LEG-WS-021,2026-02-13T04:00:19.922Z,11938,44172,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_web,354588 +LEG-WS-021,2026-02-13T00:59:55.842Z,49419,55008,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\svc_web,299241 +LEG-WS-021,2026-02-13T06:53:00.219Z,28670,17,lsass.exe,C:\Windows\System32\lsass.exe,ACME\svc_web,443411 +LEG-WS-021,2026-02-16T09:46:00.774Z,13885,11,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,405755 +LEG-WS-021,2026-02-10T09:46:51.056Z,25513,3382,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\svc_web,463375 +LEG-WS-021,2026-02-17T05:01:18.704Z,4507,36287,dwm.exe,C:\Windows\System32\dwm.exe,ACME\svc_web,82488 +LEG-WS-021,2026-02-15T16:24:40.175Z,606,59192,System,System,NT AUTHORITY\SYSTEM,56428 +LEG-WS-021,2026-02-12T14:10:57.874Z,25493,41530,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,466270 +LEG-WS-021,2026-02-16T12:06:15.128Z,36236,8079,services.exe,C:\Windows\System32\services.exe,ACME\svc_web,373753 +LEG-WS-021,2026-02-16T21:51:04.165Z,44468,38223,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\svc_web,77095 +LEG-WS-021,2026-02-16T05:35:46.508Z,31344,5423,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\svc_web,266289 +LEG-WS-021,2026-02-18T17:41:47.449Z,38924,37829,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\svc_web,294117 +MKT-WS-022,2026-02-15T21:34:17.262Z,62594,20,svchost.exe,C:\Windows\System32\svchost.exe,ACME\agarcia,459906 +MKT-WS-022,2026-02-11T08:04:51.613Z,39679,8526,explorer.exe,C:\Windows\System32\explorer.exe,ACME\agarcia,175335 +MKT-WS-022,2026-02-19T03:54:56.395Z,278,6478,chrome.exe,C:\Windows\System32\chrome.exe,ACME\agarcia,39825 +MKT-WS-022,2026-02-14T02:30:35.659Z,30597,48401,msedge.exe,C:\Windows\System32\msedge.exe,ACME\agarcia,221740 +MKT-WS-022,2026-02-11T09:38:11.570Z,48889,621,outlook.exe,C:\Windows\System32\outlook.exe,ACME\agarcia,17793 +MKT-WS-022,2026-02-14T19:45:36.732Z,63356,34173,teams.exe,C:\Windows\System32\teams.exe,ACME\agarcia,231467 +MKT-WS-022,2026-02-13T15:51:06.104Z,44905,55294,code.exe,C:\Windows\System32\code.exe,ACME\agarcia,66625 +MKT-WS-022,2026-02-11T16:47:30.679Z,8366,27067,powershell.exe,C:\Windows\System32\powershell.exe,ACME\agarcia,314077 +MKT-WS-022,2026-02-13T19:26:52.231Z,51393,5769,cmd.exe,C:\Windows\System32\cmd.exe,ACME\agarcia,360750 +MKT-WS-022,2026-02-12T16:12:41.124Z,34069,40383,notepad.exe,C:\Windows\System32\notepad.exe,ACME\agarcia,268602 +MKT-WS-022,2026-02-18T14:59:56.234Z,7135,59539,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\agarcia,438182 +MKT-WS-022,2026-02-14T21:07:15.871Z,26557,57267,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\agarcia,417114 +MKT-WS-022,2026-02-15T09:52:23.512Z,49216,5370,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\agarcia,257524 +MKT-WS-022,2026-02-12T11:33:24.331Z,13267,3,lsass.exe,C:\Windows\System32\lsass.exe,ACME\agarcia,444440 +MKT-WS-022,2026-02-19T17:13:03.688Z,40358,15,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,299531 +MKT-WS-022,2026-02-12T19:49:20.484Z,16220,7683,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\agarcia,73178 +MKT-WS-022,2026-02-18T01:57:29.024Z,46839,52076,dwm.exe,C:\Windows\System32\dwm.exe,ACME\agarcia,355635 +MKT-WS-022,2026-02-18T16:01:34.472Z,62370,28065,System,System,NT AUTHORITY\SYSTEM,411761 +MKT-WS-022,2026-02-13T21:40:18.079Z,52627,22685,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,130543 +MKT-WS-022,2026-02-14T17:46:06.013Z,62519,32334,services.exe,C:\Windows\System32\services.exe,ACME\agarcia,194955 +MKT-WS-022,2026-02-19T07:20:30.084Z,4203,6183,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\agarcia,461425 +MKT-WS-022,2026-02-14T21:19:24.510Z,8458,21103,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\agarcia,461058 +MKT-WS-022,2026-02-18T09:29:42.564Z,27878,41128,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\agarcia,58827 +EXEC-WS-023,2026-02-12T02:22:36.193Z,7290,15,svchost.exe,C:\Windows\System32\svchost.exe,ACME\idavis,51166 +EXEC-WS-023,2026-02-12T22:57:29.394Z,50383,21708,explorer.exe,C:\Windows\System32\explorer.exe,ACME\idavis,364475 +EXEC-WS-023,2026-02-12T03:02:19.604Z,12833,27193,chrome.exe,C:\Windows\System32\chrome.exe,ACME\idavis,49783 +EXEC-WS-023,2026-02-20T14:43:31.161Z,57014,48469,msedge.exe,C:\Windows\System32\msedge.exe,ACME\idavis,103376 +EXEC-WS-023,2026-02-12T18:34:06.115Z,18930,8061,outlook.exe,C:\Windows\System32\outlook.exe,ACME\idavis,176003 +EXEC-WS-023,2026-02-12T10:25:16.994Z,1639,12409,teams.exe,C:\Windows\System32\teams.exe,ACME\idavis,211919 +EXEC-WS-023,2026-02-15T06:20:51.040Z,911,46866,code.exe,C:\Windows\System32\code.exe,ACME\idavis,311798 +EXEC-WS-023,2026-02-16T22:40:32.782Z,27351,55514,powershell.exe,C:\Windows\System32\powershell.exe,ACME\idavis,265795 +EXEC-WS-023,2026-02-14T23:27:46.758Z,28999,21449,cmd.exe,C:\Windows\System32\cmd.exe,ACME\idavis,339568 +EXEC-WS-023,2026-02-14T18:58:24.836Z,48917,19483,notepad.exe,C:\Windows\System32\notepad.exe,ACME\idavis,166333 +EXEC-WS-023,2026-02-12T23:14:12.989Z,20060,46555,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\idavis,75687 +EXEC-WS-023,2026-02-19T03:50:10.286Z,7630,33869,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,449296 +EXEC-WS-023,2026-02-16T17:41:51.328Z,32109,14365,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\idavis,293432 +EXEC-WS-023,2026-02-11T10:25:59.027Z,43322,6,lsass.exe,C:\Windows\System32\lsass.exe,ACME\idavis,67658 +EXEC-WS-023,2026-02-19T18:22:26.617Z,58708,11,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,268465 +EXEC-WS-023,2026-02-20T07:36:03.164Z,35705,32186,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\idavis,147560 +EXEC-WS-023,2026-02-19T16:57:59.304Z,53932,2720,dwm.exe,C:\Windows\System32\dwm.exe,ACME\idavis,185238 +EXEC-WS-023,2026-02-18T08:22:54.759Z,3906,14382,System,System,NT AUTHORITY\SYSTEM,179513 +EXEC-WS-023,2026-02-13T13:35:08.193Z,4444,13731,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,349852 +EXEC-WS-023,2026-02-10T21:28:17.963Z,24954,24572,services.exe,C:\Windows\System32\services.exe,ACME\idavis,370449 +EXEC-WS-023,2026-02-13T16:48:14.926Z,43534,27349,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\idavis,220240 +EXEC-WS-023,2026-02-19T21:56:20.110Z,40709,36974,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\idavis,362642 +EXEC-WS-023,2026-02-16T00:22:41.834Z,48930,14461,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\idavis,414793 +IT-WS-024,2026-02-11T03:33:11.371Z,58072,16,svchost.exe,C:\Windows\System32\svchost.exe,ACME\gwhite,162464 +IT-WS-024,2026-02-13T20:51:57.384Z,5787,10935,explorer.exe,C:\Windows\System32\explorer.exe,ACME\gwhite,125990 +IT-WS-024,2026-02-15T17:39:30.537Z,42122,52636,chrome.exe,C:\Windows\System32\chrome.exe,ACME\gwhite,365973 +IT-WS-024,2026-02-18T10:12:03.611Z,60533,59186,msedge.exe,C:\Windows\System32\msedge.exe,ACME\gwhite,131521 +IT-WS-024,2026-02-18T23:48:25.411Z,17376,56717,outlook.exe,C:\Windows\System32\outlook.exe,ACME\gwhite,14399 +IT-WS-024,2026-02-18T10:08:01.929Z,27882,24259,teams.exe,C:\Windows\System32\teams.exe,ACME\gwhite,434615 +IT-WS-024,2026-02-16T16:43:09.438Z,58903,8969,code.exe,C:\Windows\System32\code.exe,ACME\gwhite,381105 +IT-WS-024,2026-02-20T04:04:33.043Z,64159,40782,powershell.exe,C:\Windows\System32\powershell.exe,ACME\gwhite,222053 +IT-WS-024,2026-02-14T03:40:16.002Z,55076,25163,cmd.exe,C:\Windows\System32\cmd.exe,ACME\gwhite,401807 +IT-WS-024,2026-02-18T09:19:54.019Z,10389,46831,notepad.exe,C:\Windows\System32\notepad.exe,ACME\gwhite,460666 +IT-WS-024,2026-02-15T12:42:29.952Z,27690,53708,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\gwhite,26849 +IT-WS-024,2026-02-19T14:59:30.208Z,56920,15586,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\gwhite,123233 +IT-WS-024,2026-02-14T22:09:00.079Z,14124,24732,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\gwhite,357592 +IT-WS-024,2026-02-12T23:58:50.516Z,32015,15,lsass.exe,C:\Windows\System32\lsass.exe,ACME\gwhite,445041 +IT-WS-024,2026-02-19T07:35:01.843Z,6323,2,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,470782 +IT-WS-024,2026-02-12T22:58:54.230Z,44906,36713,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\gwhite,307947 +IT-WS-024,2026-02-11T14:30:03.278Z,30844,59214,dwm.exe,C:\Windows\System32\dwm.exe,ACME\gwhite,405808 +IT-WS-024,2026-02-15T17:56:34.795Z,50032,7438,System,System,NT AUTHORITY\SYSTEM,370444 +IT-WS-024,2026-02-10T11:03:38.207Z,3702,59220,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,352961 +IT-WS-024,2026-02-10T16:47:35.937Z,60203,18146,services.exe,C:\Windows\System32\services.exe,ACME\gwhite,386762 +IT-WS-024,2026-02-18T00:15:55.187Z,16189,22076,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\gwhite,269009 +IT-WS-024,2026-02-18T00:00:05.423Z,12104,31383,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\gwhite,60453 +IT-WS-024,2026-02-15T09:24:25.604Z,60360,57953,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\gwhite,361462 +HR-WS-025,2026-02-12T12:47:28.631Z,53546,2,svchost.exe,C:\Windows\System32\svchost.exe,ACME\bwilson,349314 +HR-WS-025,2026-02-14T11:20:43.285Z,805,28748,explorer.exe,C:\Windows\System32\explorer.exe,ACME\bwilson,148578 +HR-WS-025,2026-02-17T15:34:51.424Z,59156,28646,chrome.exe,C:\Windows\System32\chrome.exe,ACME\bwilson,51588 +HR-WS-025,2026-02-20T01:01:25.674Z,55317,32970,msedge.exe,C:\Windows\System32\msedge.exe,ACME\bwilson,250003 +HR-WS-025,2026-02-15T15:03:10.132Z,33443,51918,outlook.exe,C:\Windows\System32\outlook.exe,ACME\bwilson,376490 +HR-WS-025,2026-02-16T19:32:53.006Z,59473,42206,teams.exe,C:\Windows\System32\teams.exe,ACME\bwilson,276774 +HR-WS-025,2026-02-20T15:00:39.267Z,36086,33653,code.exe,C:\Windows\System32\code.exe,ACME\bwilson,184344 +HR-WS-025,2026-02-16T20:25:52.887Z,56038,32905,powershell.exe,C:\Windows\System32\powershell.exe,ACME\bwilson,381303 +HR-WS-025,2026-02-17T23:06:54.045Z,32317,40681,cmd.exe,C:\Windows\System32\cmd.exe,ACME\bwilson,187418 +HR-WS-025,2026-02-16T09:14:37.352Z,30590,46012,notepad.exe,C:\Windows\System32\notepad.exe,ACME\bwilson,45746 +HR-WS-025,2026-02-19T10:26:58.986Z,6585,19254,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\bwilson,46429 +HR-WS-025,2026-02-19T02:39:15.621Z,30122,39527,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\bwilson,219513 +HR-WS-025,2026-02-19T08:52:55.592Z,4493,42521,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\bwilson,29419 +HR-WS-025,2026-02-16T11:13:35.496Z,61115,13,lsass.exe,C:\Windows\System32\lsass.exe,ACME\bwilson,477022 +HR-WS-025,2026-02-18T15:58:46.519Z,61707,6,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,335843 +HR-WS-025,2026-02-18T16:45:30.079Z,47138,37525,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\bwilson,51583 +HR-WS-025,2026-02-19T07:04:33.032Z,1459,35417,dwm.exe,C:\Windows\System32\dwm.exe,ACME\bwilson,449677 +HR-WS-025,2026-02-17T23:58:26.049Z,47463,51298,System,System,NT AUTHORITY\SYSTEM,108093 +HR-WS-025,2026-02-18T06:28:52.413Z,62244,8809,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,352616 +HR-WS-025,2026-02-14T10:07:13.935Z,33965,26164,services.exe,C:\Windows\System32\services.exe,ACME\bwilson,450151 +HR-WS-025,2026-02-20T10:47:29.357Z,27995,35620,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\bwilson,318974 +HR-WS-025,2026-02-13T11:25:03.215Z,37540,34516,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\bwilson,10325 +HR-WS-025,2026-02-12T06:49:16.122Z,1468,15106,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\bwilson,203014 +FIN-WS-026,2026-02-20T17:00:34.700Z,4062,8,svchost.exe,C:\Windows\System32\svchost.exe,ACME\emartinez,461469 +FIN-WS-026,2026-02-13T01:22:54.376Z,20865,9262,explorer.exe,C:\Windows\System32\explorer.exe,ACME\emartinez,51691 +FIN-WS-026,2026-02-12T02:05:59.729Z,17963,49573,chrome.exe,C:\Windows\System32\chrome.exe,ACME\emartinez,386026 +FIN-WS-026,2026-02-14T05:28:46.772Z,29131,26773,msedge.exe,C:\Windows\System32\msedge.exe,ACME\emartinez,50929 +FIN-WS-026,2026-02-12T14:00:01.442Z,52957,14711,outlook.exe,C:\Windows\System32\outlook.exe,ACME\emartinez,94232 +FIN-WS-026,2026-02-13T06:33:29.455Z,55094,36987,teams.exe,C:\Windows\System32\teams.exe,ACME\emartinez,196878 +FIN-WS-026,2026-02-10T21:15:39.935Z,31320,28755,code.exe,C:\Windows\System32\code.exe,ACME\emartinez,374315 +FIN-WS-026,2026-02-18T04:16:58.502Z,64948,41416,powershell.exe,C:\Windows\System32\powershell.exe,ACME\emartinez,219956 +FIN-WS-026,2026-02-11T01:39:49.703Z,56649,45277,cmd.exe,C:\Windows\System32\cmd.exe,ACME\emartinez,16897 +FIN-WS-026,2026-02-18T12:38:22.282Z,35485,17825,notepad.exe,C:\Windows\System32\notepad.exe,ACME\emartinez,494844 +FIN-WS-026,2026-02-16T05:48:29.040Z,41558,44645,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\emartinez,396949 +FIN-WS-026,2026-02-15T07:27:48.096Z,47187,38804,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\emartinez,158846 +FIN-WS-026,2026-02-12T11:30:07.084Z,50744,20897,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\emartinez,223405 +FIN-WS-026,2026-02-14T11:36:27.842Z,35669,15,lsass.exe,C:\Windows\System32\lsass.exe,ACME\emartinez,76247 +FIN-WS-026,2026-02-15T00:09:39.466Z,45631,19,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,258404 +FIN-WS-026,2026-02-11T12:23:00.824Z,24790,10083,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\emartinez,334826 +FIN-WS-026,2026-02-12T09:02:24.421Z,61706,56289,dwm.exe,C:\Windows\System32\dwm.exe,ACME\emartinez,158321 +FIN-WS-026,2026-02-14T13:00:23.936Z,41454,21128,System,System,NT AUTHORITY\SYSTEM,36804 +FIN-WS-026,2026-02-12T16:40:11.794Z,18498,47368,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,447060 +FIN-WS-026,2026-02-18T01:15:33.150Z,7996,22673,services.exe,C:\Windows\System32\services.exe,ACME\emartinez,490972 +FIN-WS-026,2026-02-16T20:43:58.045Z,43690,33661,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\emartinez,359613 +FIN-WS-026,2026-02-16T03:37:05.100Z,57732,20034,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\emartinez,438773 +FIN-WS-026,2026-02-19T08:56:47.770Z,42092,37873,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\emartinez,374958 +SLS-WS-027,2026-02-12T04:33:47.044Z,64316,3,svchost.exe,C:\Windows\System32\svchost.exe,ACME\cjohnson,479306 +SLS-WS-027,2026-02-15T17:57:03.183Z,3411,2189,explorer.exe,C:\Windows\System32\explorer.exe,ACME\cjohnson,174967 +SLS-WS-027,2026-02-13T13:57:11.248Z,37912,2888,chrome.exe,C:\Windows\System32\chrome.exe,ACME\cjohnson,409292 +SLS-WS-027,2026-02-12T03:50:33.042Z,2035,56962,msedge.exe,C:\Windows\System32\msedge.exe,ACME\cjohnson,55550 +SLS-WS-027,2026-02-15T00:47:27.043Z,64132,44494,outlook.exe,C:\Windows\System32\outlook.exe,ACME\cjohnson,113706 +SLS-WS-027,2026-02-12T22:52:55.585Z,26606,47049,teams.exe,C:\Windows\System32\teams.exe,ACME\cjohnson,464732 +SLS-WS-027,2026-02-15T10:43:49.090Z,16067,52412,code.exe,C:\Windows\System32\code.exe,ACME\cjohnson,131178 +SLS-WS-027,2026-02-12T11:08:21.390Z,14369,5187,powershell.exe,C:\Windows\System32\powershell.exe,ACME\cjohnson,429498 +SLS-WS-027,2026-02-13T13:49:49.233Z,41616,9871,cmd.exe,C:\Windows\System32\cmd.exe,ACME\cjohnson,154302 +SLS-WS-027,2026-02-14T21:57:25.000Z,58062,41143,notepad.exe,C:\Windows\System32\notepad.exe,ACME\cjohnson,421438 +SLS-WS-027,2026-02-19T16:39:04.023Z,33692,37609,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\cjohnson,457742 +SLS-WS-027,2026-02-12T00:36:44.221Z,54257,25890,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\cjohnson,40270 +SLS-WS-027,2026-02-18T11:54:57.809Z,49883,31578,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\cjohnson,246942 +SLS-WS-027,2026-02-17T21:53:38.798Z,39784,10,lsass.exe,C:\Windows\System32\lsass.exe,ACME\cjohnson,497236 +SLS-WS-027,2026-02-12T04:24:49.832Z,42160,20,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,19407 +SLS-WS-027,2026-02-15T11:45:10.546Z,53554,6890,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\cjohnson,260929 +SLS-WS-027,2026-02-15T23:29:43.767Z,58580,17635,dwm.exe,C:\Windows\System32\dwm.exe,ACME\cjohnson,70954 +SLS-WS-027,2026-02-13T21:09:47.345Z,5402,46534,System,System,NT AUTHORITY\SYSTEM,46581 +SLS-WS-027,2026-02-18T07:39:25.581Z,59273,31566,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,11397 +SLS-WS-027,2026-02-17T10:57:50.775Z,48074,32234,services.exe,C:\Windows\System32\services.exe,ACME\cjohnson,222184 +SLS-WS-027,2026-02-12T16:13:41.071Z,15562,5354,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\cjohnson,144605 +SLS-WS-027,2026-02-17T05:36:33.727Z,45151,4056,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\cjohnson,381954 +SLS-WS-027,2026-02-16T10:41:43.468Z,61296,18085,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\cjohnson,429089 +SLS-WS-027,2026-02-17T14:46:26.104Z,51493,21005,discord.exe,C:\Users\cjohnson\AppData\Local\discord\discord.exe,ACME\cjohnson,98268 +ENG-WS-028,2026-02-12T02:55:29.950Z,26078,13,svchost.exe,C:\Windows\System32\svchost.exe,ACME\idavis,49209 +ENG-WS-028,2026-02-15T09:03:32.214Z,18210,23096,explorer.exe,C:\Windows\System32\explorer.exe,ACME\idavis,223381 +ENG-WS-028,2026-02-15T20:49:19.539Z,20836,45327,chrome.exe,C:\Windows\System32\chrome.exe,ACME\idavis,362376 +ENG-WS-028,2026-02-15T14:51:37.552Z,28509,51143,msedge.exe,C:\Windows\System32\msedge.exe,ACME\idavis,86435 +ENG-WS-028,2026-02-19T22:46:11.775Z,54881,50572,outlook.exe,C:\Windows\System32\outlook.exe,ACME\idavis,113315 +ENG-WS-028,2026-02-14T05:00:31.776Z,29047,33622,teams.exe,C:\Windows\System32\teams.exe,ACME\idavis,394646 +ENG-WS-028,2026-02-11T08:07:56.479Z,29496,30409,code.exe,C:\Windows\System32\code.exe,ACME\idavis,464630 +ENG-WS-028,2026-02-11T14:44:40.363Z,63813,30450,powershell.exe,C:\Windows\System32\powershell.exe,ACME\idavis,35540 +ENG-WS-028,2026-02-16T06:41:02.103Z,37797,38814,cmd.exe,C:\Windows\System32\cmd.exe,ACME\idavis,103244 +ENG-WS-028,2026-02-17T03:55:58.556Z,56085,45589,notepad.exe,C:\Windows\System32\notepad.exe,ACME\idavis,318244 +ENG-WS-028,2026-02-15T11:09:48.840Z,51724,5761,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\idavis,379199 +ENG-WS-028,2026-02-10T08:15:37.014Z,48785,31444,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,453310 +ENG-WS-028,2026-02-16T23:14:00.295Z,49390,32177,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\idavis,1781 +ENG-WS-028,2026-02-17T01:40:15.091Z,8420,6,lsass.exe,C:\Windows\System32\lsass.exe,ACME\idavis,303758 +ENG-WS-028,2026-02-18T09:43:02.284Z,56579,14,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,387193 +ENG-WS-028,2026-02-13T20:12:30.211Z,18230,20159,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\idavis,232997 +ENG-WS-028,2026-02-13T08:33:18.797Z,33246,55655,dwm.exe,C:\Windows\System32\dwm.exe,ACME\idavis,103760 +ENG-WS-028,2026-02-20T10:20:18.006Z,105,45935,System,System,NT AUTHORITY\SYSTEM,116060 +ENG-WS-028,2026-02-15T12:14:40.793Z,39843,35823,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,335061 +ENG-WS-028,2026-02-14T17:00:39.993Z,49560,2720,services.exe,C:\Windows\System32\services.exe,ACME\idavis,411590 +ENG-WS-028,2026-02-14T17:54:30.344Z,63476,18898,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\idavis,499868 +ENG-WS-028,2026-02-16T05:00:31.393Z,22414,54723,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\idavis,387836 +ENG-WS-028,2026-02-17T04:40:18.931Z,39212,5846,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\idavis,449472 +LEG-WS-029,2026-02-16T14:15:47.227Z,42405,10,svchost.exe,C:\Windows\System32\svchost.exe,ACME\hbrown,269041 +LEG-WS-029,2026-02-13T03:56:07.563Z,31987,45775,explorer.exe,C:\Windows\System32\explorer.exe,ACME\hbrown,373435 +LEG-WS-029,2026-02-12T04:36:14.546Z,12775,45895,chrome.exe,C:\Windows\System32\chrome.exe,ACME\hbrown,110872 +LEG-WS-029,2026-02-11T19:18:17.870Z,47397,38196,msedge.exe,C:\Windows\System32\msedge.exe,ACME\hbrown,199250 +LEG-WS-029,2026-02-20T00:52:10.378Z,36335,56393,outlook.exe,C:\Windows\System32\outlook.exe,ACME\hbrown,263800 +LEG-WS-029,2026-02-17T02:02:35.105Z,30954,1779,teams.exe,C:\Windows\System32\teams.exe,ACME\hbrown,109560 +LEG-WS-029,2026-02-14T05:02:21.353Z,30930,24154,code.exe,C:\Windows\System32\code.exe,ACME\hbrown,387890 +LEG-WS-029,2026-02-15T20:49:27.663Z,52039,32285,powershell.exe,C:\Windows\System32\powershell.exe,ACME\hbrown,413182 +LEG-WS-029,2026-02-13T17:55:11.425Z,56370,18905,cmd.exe,C:\Windows\System32\cmd.exe,ACME\hbrown,370737 +LEG-WS-029,2026-02-14T08:37:49.405Z,45559,58886,notepad.exe,C:\Windows\System32\notepad.exe,ACME\hbrown,171049 +LEG-WS-029,2026-02-16T08:59:50.356Z,14148,378,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\hbrown,137685 +LEG-WS-029,2026-02-13T07:58:02.576Z,49071,27530,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\hbrown,10495 +LEG-WS-029,2026-02-11T11:54:22.160Z,59804,33213,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\hbrown,68639 +LEG-WS-029,2026-02-13T22:30:10.521Z,9936,6,lsass.exe,C:\Windows\System32\lsass.exe,ACME\hbrown,242455 +LEG-WS-029,2026-02-13T00:40:15.783Z,24390,1,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,73440 +LEG-WS-029,2026-02-14T10:18:31.473Z,10823,27727,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\hbrown,395532 +LEG-WS-029,2026-02-18T15:26:16.025Z,15732,45464,dwm.exe,C:\Windows\System32\dwm.exe,ACME\hbrown,384236 +LEG-WS-029,2026-02-16T06:59:55.553Z,49931,298,System,System,NT AUTHORITY\SYSTEM,440535 +LEG-WS-029,2026-02-14T04:28:01.369Z,59473,20756,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,388531 +LEG-WS-029,2026-02-14T22:52:55.419Z,42493,42324,services.exe,C:\Windows\System32\services.exe,ACME\hbrown,52427 +LEG-WS-029,2026-02-16T06:31:38.914Z,18874,50568,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\hbrown,346790 +LEG-WS-029,2026-02-14T17:28:18.504Z,62832,27883,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\hbrown,77301 +LEG-WS-029,2026-02-12T23:18:33.083Z,53049,43202,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\hbrown,230868 +MKT-WS-030,2026-02-11T22:03:18.766Z,64328,18,svchost.exe,C:\Windows\System32\svchost.exe,ACME\cjohnson,357727 +MKT-WS-030,2026-02-10T22:50:49.649Z,63459,33019,explorer.exe,C:\Windows\System32\explorer.exe,ACME\cjohnson,37864 +MKT-WS-030,2026-02-11T20:07:19.201Z,4088,3308,chrome.exe,C:\Windows\System32\chrome.exe,ACME\cjohnson,166764 +MKT-WS-030,2026-02-19T03:21:50.965Z,34546,50728,msedge.exe,C:\Windows\System32\msedge.exe,ACME\cjohnson,277941 +MKT-WS-030,2026-02-14T19:08:37.449Z,44466,49769,outlook.exe,C:\Windows\System32\outlook.exe,ACME\cjohnson,60376 +MKT-WS-030,2026-02-17T03:48:38.363Z,41319,30235,teams.exe,C:\Windows\System32\teams.exe,ACME\cjohnson,126480 +MKT-WS-030,2026-02-19T01:29:06.418Z,39278,39618,code.exe,C:\Windows\System32\code.exe,ACME\cjohnson,322207 +MKT-WS-030,2026-02-12T21:09:10.630Z,31448,39621,powershell.exe,C:\Windows\System32\powershell.exe,ACME\cjohnson,458923 +MKT-WS-030,2026-02-18T13:13:46.341Z,49699,51311,cmd.exe,C:\Windows\System32\cmd.exe,ACME\cjohnson,118381 +MKT-WS-030,2026-02-16T17:12:10.420Z,49635,52230,notepad.exe,C:\Windows\System32\notepad.exe,ACME\cjohnson,107489 +MKT-WS-030,2026-02-12T08:55:22.445Z,16206,33226,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\cjohnson,103741 +MKT-WS-030,2026-02-18T20:44:03.165Z,34636,29336,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\cjohnson,291435 +MKT-WS-030,2026-02-16T01:55:30.195Z,33678,13879,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\cjohnson,418602 +MKT-WS-030,2026-02-16T09:12:47.725Z,26219,17,lsass.exe,C:\Windows\System32\lsass.exe,ACME\cjohnson,278540 +MKT-WS-030,2026-02-15T16:10:53.033Z,9907,12,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,235596 +MKT-WS-030,2026-02-19T09:38:16.097Z,13888,36622,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\cjohnson,228398 +MKT-WS-030,2026-02-11T09:37:26.632Z,63457,35392,dwm.exe,C:\Windows\System32\dwm.exe,ACME\cjohnson,199673 +MKT-WS-030,2026-02-18T01:41:40.089Z,22945,11931,System,System,NT AUTHORITY\SYSTEM,131820 +MKT-WS-030,2026-02-15T10:47:19.752Z,21898,2534,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,435103 +MKT-WS-030,2026-02-19T00:27:08.798Z,41714,39631,services.exe,C:\Windows\System32\services.exe,ACME\cjohnson,332273 +MKT-WS-030,2026-02-15T07:58:50.155Z,40450,15542,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\cjohnson,258181 +MKT-WS-030,2026-02-16T21:57:02.660Z,15359,48121,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\cjohnson,70790 +MKT-WS-030,2026-02-16T14:54:29.563Z,7571,38095,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\cjohnson,14165 +EXEC-WS-031,2026-02-14T12:58:07.681Z,16854,20,svchost.exe,C:\Windows\System32\svchost.exe,ACME\hbrown,350668 +EXEC-WS-031,2026-02-20T00:17:28.238Z,13008,13771,explorer.exe,C:\Windows\System32\explorer.exe,ACME\hbrown,93565 +EXEC-WS-031,2026-02-19T01:25:51.390Z,39045,59652,chrome.exe,C:\Windows\System32\chrome.exe,ACME\hbrown,324405 +EXEC-WS-031,2026-02-10T22:22:42.258Z,47593,23094,msedge.exe,C:\Windows\System32\msedge.exe,ACME\hbrown,207913 +EXEC-WS-031,2026-02-20T17:23:54.737Z,30488,10190,outlook.exe,C:\Windows\System32\outlook.exe,ACME\hbrown,81901 +EXEC-WS-031,2026-02-16T21:47:40.014Z,26860,43528,teams.exe,C:\Windows\System32\teams.exe,ACME\hbrown,98069 +EXEC-WS-031,2026-02-19T16:33:55.171Z,35135,5878,code.exe,C:\Windows\System32\code.exe,ACME\hbrown,236703 +EXEC-WS-031,2026-02-15T02:13:37.120Z,26586,28959,powershell.exe,C:\Windows\System32\powershell.exe,ACME\hbrown,233952 +EXEC-WS-031,2026-02-15T22:34:27.062Z,52957,50811,cmd.exe,C:\Windows\System32\cmd.exe,ACME\hbrown,217717 +EXEC-WS-031,2026-02-17T07:40:19.811Z,63134,29141,notepad.exe,C:\Windows\System32\notepad.exe,ACME\hbrown,121044 +EXEC-WS-031,2026-02-15T08:32:15.459Z,46055,39536,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\hbrown,280351 +EXEC-WS-031,2026-02-10T19:21:06.239Z,4530,39998,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\hbrown,342891 +EXEC-WS-031,2026-02-13T02:11:32.685Z,37863,28794,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\hbrown,226574 +EXEC-WS-031,2026-02-19T15:40:28.768Z,32958,19,lsass.exe,C:\Windows\System32\lsass.exe,ACME\hbrown,120390 +EXEC-WS-031,2026-02-14T02:23:15.775Z,14334,2,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,363910 +EXEC-WS-031,2026-02-10T18:43:32.911Z,31944,18491,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\hbrown,223566 +EXEC-WS-031,2026-02-11T19:04:17.294Z,10443,16896,dwm.exe,C:\Windows\System32\dwm.exe,ACME\hbrown,62548 +EXEC-WS-031,2026-02-12T18:50:46.120Z,3726,46577,System,System,NT AUTHORITY\SYSTEM,80414 +EXEC-WS-031,2026-02-17T13:13:49.853Z,18427,36544,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,262170 +EXEC-WS-031,2026-02-13T23:32:45.608Z,12408,25628,services.exe,C:\Windows\System32\services.exe,ACME\hbrown,277927 +EXEC-WS-031,2026-02-18T10:58:55.417Z,35263,18040,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\hbrown,59235 +EXEC-WS-031,2026-02-18T21:57:23.630Z,40346,35261,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\hbrown,396490 +EXEC-WS-031,2026-02-12T12:52:07.333Z,25885,5412,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\hbrown,305279 +IT-WS-032,2026-02-20T10:56:09.671Z,15711,12,svchost.exe,C:\Windows\System32\svchost.exe,ACME\fthompson,96699 +IT-WS-032,2026-02-14T12:44:20.165Z,17428,30712,explorer.exe,C:\Windows\System32\explorer.exe,ACME\fthompson,107922 +IT-WS-032,2026-02-13T23:03:36.086Z,39383,36192,chrome.exe,C:\Windows\System32\chrome.exe,ACME\fthompson,402355 +IT-WS-032,2026-02-14T11:11:05.083Z,9761,53053,msedge.exe,C:\Windows\System32\msedge.exe,ACME\fthompson,367831 +IT-WS-032,2026-02-10T16:37:48.395Z,34401,21255,outlook.exe,C:\Windows\System32\outlook.exe,ACME\fthompson,244857 +IT-WS-032,2026-02-20T00:11:13.677Z,9266,36325,teams.exe,C:\Windows\System32\teams.exe,ACME\fthompson,371649 +IT-WS-032,2026-02-12T16:39:19.233Z,19699,55379,code.exe,C:\Windows\System32\code.exe,ACME\fthompson,340938 +IT-WS-032,2026-02-14T00:43:38.193Z,46764,45618,powershell.exe,C:\Windows\System32\powershell.exe,ACME\fthompson,407231 +IT-WS-032,2026-02-10T10:04:19.706Z,57317,52009,cmd.exe,C:\Windows\System32\cmd.exe,ACME\fthompson,304556 +IT-WS-032,2026-02-16T11:12:01.902Z,40857,53301,notepad.exe,C:\Windows\System32\notepad.exe,ACME\fthompson,268914 +IT-WS-032,2026-02-19T16:50:40.507Z,28197,28522,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\fthompson,490102 +IT-WS-032,2026-02-12T00:15:41.886Z,45975,37353,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\fthompson,366595 +IT-WS-032,2026-02-17T01:13:05.551Z,64057,17646,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\fthompson,460563 +IT-WS-032,2026-02-17T12:31:17.694Z,64910,11,lsass.exe,C:\Windows\System32\lsass.exe,ACME\fthompson,488494 +IT-WS-032,2026-02-19T09:48:30.058Z,21512,3,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,324165 +IT-WS-032,2026-02-15T13:48:18.500Z,1981,20446,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\fthompson,245953 +IT-WS-032,2026-02-13T22:11:06.537Z,49097,14746,dwm.exe,C:\Windows\System32\dwm.exe,ACME\fthompson,319455 +IT-WS-032,2026-02-13T04:18:15.368Z,32066,24656,System,System,NT AUTHORITY\SYSTEM,439509 +IT-WS-032,2026-02-13T16:23:53.971Z,18915,52191,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,201146 +IT-WS-032,2026-02-16T18:39:19.962Z,55207,19346,services.exe,C:\Windows\System32\services.exe,ACME\fthompson,206414 +IT-WS-032,2026-02-10T23:22:28.760Z,6675,47011,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\fthompson,262889 +IT-WS-032,2026-02-16T15:18:00.681Z,47390,37709,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\fthompson,234137 +IT-WS-032,2026-02-11T21:22:28.959Z,30018,9433,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\fthompson,75150 +HR-WS-033,2026-02-17T22:36:55.589Z,57132,13,svchost.exe,C:\Windows\System32\svchost.exe,ACME\dlee,45364 +HR-WS-033,2026-02-20T01:34:49.888Z,49658,21317,explorer.exe,C:\Windows\System32\explorer.exe,ACME\dlee,125250 +HR-WS-033,2026-02-10T10:37:10.004Z,62346,2337,chrome.exe,C:\Windows\System32\chrome.exe,ACME\dlee,261478 +HR-WS-033,2026-02-15T03:03:12.970Z,828,9000,msedge.exe,C:\Windows\System32\msedge.exe,ACME\dlee,191507 +HR-WS-033,2026-02-19T06:01:00.454Z,48737,4024,outlook.exe,C:\Windows\System32\outlook.exe,ACME\dlee,250718 +HR-WS-033,2026-02-18T17:13:59.320Z,55305,27590,teams.exe,C:\Windows\System32\teams.exe,ACME\dlee,321625 +HR-WS-033,2026-02-19T15:12:50.855Z,30926,50168,code.exe,C:\Windows\System32\code.exe,ACME\dlee,230083 +HR-WS-033,2026-02-12T20:48:33.550Z,45568,36996,powershell.exe,C:\Windows\System32\powershell.exe,ACME\dlee,282840 +HR-WS-033,2026-02-19T16:16:47.236Z,45443,2636,cmd.exe,C:\Windows\System32\cmd.exe,ACME\dlee,57789 +HR-WS-033,2026-02-12T20:04:48.157Z,16624,23584,notepad.exe,C:\Windows\System32\notepad.exe,ACME\dlee,291526 +HR-WS-033,2026-02-16T12:35:03.151Z,24829,42638,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\dlee,6146 +HR-WS-033,2026-02-15T16:55:49.523Z,7768,28597,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\dlee,458595 +HR-WS-033,2026-02-18T06:25:06.138Z,4711,10254,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\dlee,465436 +HR-WS-033,2026-02-13T21:30:36.852Z,2556,16,lsass.exe,C:\Windows\System32\lsass.exe,ACME\dlee,4377 +HR-WS-033,2026-02-14T12:38:08.738Z,3682,1,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,451215 +HR-WS-033,2026-02-16T18:26:40.368Z,50581,59400,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\dlee,43427 +HR-WS-033,2026-02-14T03:29:13.256Z,62419,22905,dwm.exe,C:\Windows\System32\dwm.exe,ACME\dlee,464820 +HR-WS-033,2026-02-19T23:59:07.737Z,60873,22801,System,System,NT AUTHORITY\SYSTEM,115865 +HR-WS-033,2026-02-19T15:25:29.598Z,56895,38466,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,83219 +HR-WS-033,2026-02-19T08:39:27.037Z,56785,9514,services.exe,C:\Windows\System32\services.exe,ACME\dlee,135313 +HR-WS-033,2026-02-20T03:57:50.148Z,20994,23425,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\dlee,178610 +HR-WS-033,2026-02-12T05:22:27.850Z,12075,14001,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\dlee,51311 +HR-WS-033,2026-02-20T11:08:40.964Z,20003,48797,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\dlee,323478 +FIN-WS-034,2026-02-16T19:28:31.084Z,5599,7,svchost.exe,C:\Windows\System32\svchost.exe,ACME\svc_sql,406620 +FIN-WS-034,2026-02-14T05:24:17.994Z,37574,37756,explorer.exe,C:\Windows\System32\explorer.exe,ACME\svc_sql,45795 +FIN-WS-034,2026-02-14T12:30:23.743Z,59733,29409,chrome.exe,C:\Windows\System32\chrome.exe,ACME\svc_sql,315437 +FIN-WS-034,2026-02-20T02:26:27.389Z,13146,13771,msedge.exe,C:\Windows\System32\msedge.exe,ACME\svc_sql,126050 +FIN-WS-034,2026-02-13T15:12:28.291Z,36251,5286,outlook.exe,C:\Windows\System32\outlook.exe,ACME\svc_sql,307102 +FIN-WS-034,2026-02-19T20:02:27.133Z,21539,38586,teams.exe,C:\Windows\System32\teams.exe,ACME\svc_sql,253533 +FIN-WS-034,2026-02-18T00:30:07.392Z,969,22986,code.exe,C:\Windows\System32\code.exe,ACME\svc_sql,354294 +FIN-WS-034,2026-02-16T13:26:03.543Z,50161,28631,powershell.exe,C:\Windows\System32\powershell.exe,ACME\svc_sql,372418 +FIN-WS-034,2026-02-19T01:52:11.008Z,4370,953,cmd.exe,C:\Windows\System32\cmd.exe,ACME\svc_sql,432105 +FIN-WS-034,2026-02-14T14:48:02.294Z,53658,13775,notepad.exe,C:\Windows\System32\notepad.exe,ACME\svc_sql,59730 +FIN-WS-034,2026-02-10T23:55:32.216Z,42750,51563,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\svc_sql,74518 +FIN-WS-034,2026-02-15T09:10:13.943Z,34106,55910,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_sql,22538 +FIN-WS-034,2026-02-15T13:37:21.305Z,46298,52982,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\svc_sql,60307 +FIN-WS-034,2026-02-18T22:51:38.154Z,4284,15,lsass.exe,C:\Windows\System32\lsass.exe,ACME\svc_sql,14062 +FIN-WS-034,2026-02-16T08:28:35.926Z,45112,13,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,316188 +FIN-WS-034,2026-02-15T20:35:30.490Z,15120,54679,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\svc_sql,37330 +FIN-WS-034,2026-02-11T17:05:02.153Z,18148,20676,dwm.exe,C:\Windows\System32\dwm.exe,ACME\svc_sql,232132 +FIN-WS-034,2026-02-15T17:51:39.184Z,58372,52879,System,System,NT AUTHORITY\SYSTEM,316905 +FIN-WS-034,2026-02-19T14:11:57.437Z,49757,38136,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,208916 +FIN-WS-034,2026-02-16T08:04:17.556Z,8944,33216,services.exe,C:\Windows\System32\services.exe,ACME\svc_sql,493422 +FIN-WS-034,2026-02-18T11:12:12.053Z,15472,587,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\svc_sql,99114 +FIN-WS-034,2026-02-10T22:06:07.070Z,36308,18902,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\svc_sql,76787 +FIN-WS-034,2026-02-14T01:47:36.357Z,4996,33029,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\svc_sql,169015 +SLS-WS-035,2026-02-18T02:00:42.449Z,36776,7,svchost.exe,C:\Windows\System32\svchost.exe,ACME\jsmith,300369 +SLS-WS-035,2026-02-17T03:09:10.669Z,6388,9915,explorer.exe,C:\Windows\System32\explorer.exe,ACME\jsmith,29008 +SLS-WS-035,2026-02-17T22:23:21.390Z,17314,46086,chrome.exe,C:\Windows\System32\chrome.exe,ACME\jsmith,186561 +SLS-WS-035,2026-02-16T05:48:51.546Z,48878,34722,msedge.exe,C:\Windows\System32\msedge.exe,ACME\jsmith,171915 +SLS-WS-035,2026-02-20T01:56:10.263Z,17365,40290,outlook.exe,C:\Windows\System32\outlook.exe,ACME\jsmith,36655 +SLS-WS-035,2026-02-13T04:05:06.073Z,36009,17914,teams.exe,C:\Windows\System32\teams.exe,ACME\jsmith,9125 +SLS-WS-035,2026-02-12T20:27:11.030Z,39043,57371,code.exe,C:\Windows\System32\code.exe,ACME\jsmith,495827 +SLS-WS-035,2026-02-14T18:58:02.229Z,61732,54492,powershell.exe,C:\Windows\System32\powershell.exe,ACME\jsmith,162426 +SLS-WS-035,2026-02-16T19:33:05.145Z,30184,4647,cmd.exe,C:\Windows\System32\cmd.exe,ACME\jsmith,98933 +SLS-WS-035,2026-02-17T00:21:59.881Z,59375,32840,notepad.exe,C:\Windows\System32\notepad.exe,ACME\jsmith,494961 +SLS-WS-035,2026-02-20T06:13:27.266Z,3471,45145,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\jsmith,133924 +SLS-WS-035,2026-02-13T12:30:47.849Z,33546,30073,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\jsmith,248448 +SLS-WS-035,2026-02-14T11:46:39.536Z,2520,22136,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\jsmith,81332 +SLS-WS-035,2026-02-19T06:28:30.690Z,14848,1,lsass.exe,C:\Windows\System32\lsass.exe,ACME\jsmith,486829 +SLS-WS-035,2026-02-19T00:25:15.492Z,47728,2,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,206805 +SLS-WS-035,2026-02-17T02:10:52.918Z,544,38400,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\jsmith,162888 +SLS-WS-035,2026-02-14T09:50:03.386Z,17939,41135,dwm.exe,C:\Windows\System32\dwm.exe,ACME\jsmith,57681 +SLS-WS-035,2026-02-19T06:45:55.721Z,23739,788,System,System,NT AUTHORITY\SYSTEM,73652 +SLS-WS-035,2026-02-19T18:57:46.270Z,55153,58398,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,353758 +SLS-WS-035,2026-02-12T15:17:32.537Z,51129,47663,services.exe,C:\Windows\System32\services.exe,ACME\jsmith,176414 +SLS-WS-035,2026-02-14T10:40:59.285Z,3549,27431,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\jsmith,197618 +SLS-WS-035,2026-02-14T20:11:28.786Z,56444,24751,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\jsmith,30014 +SLS-WS-035,2026-02-14T02:01:12.265Z,55572,54493,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\jsmith,183951 +ENG-WS-036,2026-02-17T00:58:47.865Z,33610,12,svchost.exe,C:\Windows\System32\svchost.exe,ACME\svc_web,366050 +ENG-WS-036,2026-02-13T18:27:26.176Z,30100,28162,explorer.exe,C:\Windows\System32\explorer.exe,ACME\svc_web,283000 +ENG-WS-036,2026-02-12T13:11:24.402Z,58512,37749,chrome.exe,C:\Windows\System32\chrome.exe,ACME\svc_web,422775 +ENG-WS-036,2026-02-17T14:53:10.650Z,31314,37647,msedge.exe,C:\Windows\System32\msedge.exe,ACME\svc_web,131388 +ENG-WS-036,2026-02-19T23:41:11.876Z,38349,6405,outlook.exe,C:\Windows\System32\outlook.exe,ACME\svc_web,162705 +ENG-WS-036,2026-02-12T16:26:16.544Z,32049,17568,teams.exe,C:\Windows\System32\teams.exe,ACME\svc_web,80697 +ENG-WS-036,2026-02-19T02:49:58.683Z,57531,37255,code.exe,C:\Windows\System32\code.exe,ACME\svc_web,22869 +ENG-WS-036,2026-02-13T17:24:05.811Z,46299,12597,powershell.exe,C:\Windows\System32\powershell.exe,ACME\svc_web,80928 +ENG-WS-036,2026-02-18T13:41:06.754Z,5516,45575,cmd.exe,C:\Windows\System32\cmd.exe,ACME\svc_web,407894 +ENG-WS-036,2026-02-19T23:59:11.474Z,37227,48067,notepad.exe,C:\Windows\System32\notepad.exe,ACME\svc_web,204240 +ENG-WS-036,2026-02-10T12:34:11.172Z,53054,55596,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\svc_web,66428 +ENG-WS-036,2026-02-15T01:53:32.128Z,1863,9149,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_web,476300 +ENG-WS-036,2026-02-15T12:16:20.964Z,51331,17925,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\svc_web,477749 +ENG-WS-036,2026-02-12T06:49:22.682Z,50183,10,lsass.exe,C:\Windows\System32\lsass.exe,ACME\svc_web,355220 +ENG-WS-036,2026-02-12T02:05:03.228Z,42850,8,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,53825 +ENG-WS-036,2026-02-16T22:05:11.233Z,4967,53407,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\svc_web,26809 +ENG-WS-036,2026-02-17T02:00:31.393Z,8670,28729,dwm.exe,C:\Windows\System32\dwm.exe,ACME\svc_web,400486 +ENG-WS-036,2026-02-12T18:38:18.543Z,44254,8859,System,System,NT AUTHORITY\SYSTEM,236963 +ENG-WS-036,2026-02-20T00:57:04.382Z,12692,41545,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,58206 +ENG-WS-036,2026-02-20T05:05:39.123Z,51400,14465,services.exe,C:\Windows\System32\services.exe,ACME\svc_web,414618 +ENG-WS-036,2026-02-16T17:01:04.321Z,16439,587,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\svc_web,282693 +ENG-WS-036,2026-02-20T17:10:30.575Z,16049,6505,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\svc_web,195007 +ENG-WS-036,2026-02-12T22:28:21.499Z,64209,10748,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\svc_web,280999 +LEG-WS-037,2026-02-13T13:10:19.826Z,956,7,svchost.exe,C:\Windows\System32\svchost.exe,ACME\svc_sql,114725 +LEG-WS-037,2026-02-18T00:27:05.908Z,52542,12950,explorer.exe,C:\Windows\System32\explorer.exe,ACME\svc_sql,95748 +LEG-WS-037,2026-02-13T02:04:02.273Z,33849,29130,chrome.exe,C:\Windows\System32\chrome.exe,ACME\svc_sql,81454 +LEG-WS-037,2026-02-14T16:12:41.455Z,52733,23981,msedge.exe,C:\Windows\System32\msedge.exe,ACME\svc_sql,212527 +LEG-WS-037,2026-02-19T18:50:12.787Z,63303,59009,outlook.exe,C:\Windows\System32\outlook.exe,ACME\svc_sql,206904 +LEG-WS-037,2026-02-15T20:52:08.325Z,27227,49934,teams.exe,C:\Windows\System32\teams.exe,ACME\svc_sql,393148 +LEG-WS-037,2026-02-19T22:02:26.997Z,43248,21966,code.exe,C:\Windows\System32\code.exe,ACME\svc_sql,22381 +LEG-WS-037,2026-02-17T18:52:56.473Z,2156,3351,powershell.exe,C:\Windows\System32\powershell.exe,ACME\svc_sql,476773 +LEG-WS-037,2026-02-17T04:23:54.531Z,36548,37833,cmd.exe,C:\Windows\System32\cmd.exe,ACME\svc_sql,483759 +LEG-WS-037,2026-02-18T04:24:56.429Z,57804,45945,notepad.exe,C:\Windows\System32\notepad.exe,ACME\svc_sql,286486 +LEG-WS-037,2026-02-15T05:16:47.606Z,7691,21571,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\svc_sql,196304 +LEG-WS-037,2026-02-10T21:17:03.075Z,56799,58590,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_sql,49536 +LEG-WS-037,2026-02-13T03:23:22.936Z,56017,20676,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\svc_sql,359950 +LEG-WS-037,2026-02-15T01:30:51.002Z,35718,11,lsass.exe,C:\Windows\System32\lsass.exe,ACME\svc_sql,56879 +LEG-WS-037,2026-02-20T08:20:40.820Z,36788,2,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,239100 +LEG-WS-037,2026-02-17T18:06:21.513Z,40797,59791,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\svc_sql,144542 +LEG-WS-037,2026-02-19T21:56:10.512Z,40681,47547,dwm.exe,C:\Windows\System32\dwm.exe,ACME\svc_sql,419985 +LEG-WS-037,2026-02-15T20:37:33.381Z,18584,57765,System,System,NT AUTHORITY\SYSTEM,273453 +LEG-WS-037,2026-02-11T12:36:53.109Z,57203,52985,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,352142 +LEG-WS-037,2026-02-16T22:39:01.715Z,49756,55341,services.exe,C:\Windows\System32\services.exe,ACME\svc_sql,413695 +LEG-WS-037,2026-02-20T06:47:31.692Z,55153,7580,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\svc_sql,143158 +LEG-WS-037,2026-02-11T07:09:51.084Z,28128,26730,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\svc_sql,313825 +LEG-WS-037,2026-02-13T21:16:52.565Z,43210,39022,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\svc_sql,58969 +MKT-WS-038,2026-02-19T21:40:39.868Z,344,14,svchost.exe,C:\Windows\System32\svchost.exe,ACME\jsmith,218617 +MKT-WS-038,2026-02-19T19:40:29.480Z,55374,9373,explorer.exe,C:\Windows\System32\explorer.exe,ACME\jsmith,205962 +MKT-WS-038,2026-02-16T02:19:16.270Z,28162,35248,chrome.exe,C:\Windows\System32\chrome.exe,ACME\jsmith,153326 +MKT-WS-038,2026-02-13T14:25:32.175Z,56242,51465,msedge.exe,C:\Windows\System32\msedge.exe,ACME\jsmith,175365 +MKT-WS-038,2026-02-19T10:26:36.630Z,15497,51039,outlook.exe,C:\Windows\System32\outlook.exe,ACME\jsmith,360150 +MKT-WS-038,2026-02-15T12:24:22.855Z,26251,14506,teams.exe,C:\Windows\System32\teams.exe,ACME\jsmith,421855 +MKT-WS-038,2026-02-14T20:23:23.612Z,32624,27989,code.exe,C:\Windows\System32\code.exe,ACME\jsmith,317951 +MKT-WS-038,2026-02-14T00:02:55.754Z,40779,58391,powershell.exe,C:\Windows\System32\powershell.exe,ACME\jsmith,315348 +MKT-WS-038,2026-02-17T05:40:35.853Z,3085,11154,cmd.exe,C:\Windows\System32\cmd.exe,ACME\jsmith,145482 +MKT-WS-038,2026-02-18T15:22:56.326Z,18553,50817,notepad.exe,C:\Windows\System32\notepad.exe,ACME\jsmith,123178 +MKT-WS-038,2026-02-16T04:15:41.605Z,58693,52667,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\jsmith,438671 +MKT-WS-038,2026-02-12T06:08:14.179Z,28141,11962,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\jsmith,225964 +MKT-WS-038,2026-02-15T15:35:34.998Z,63833,17753,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\jsmith,163409 +MKT-WS-038,2026-02-15T19:37:23.259Z,40332,4,lsass.exe,C:\Windows\System32\lsass.exe,ACME\jsmith,206586 +MKT-WS-038,2026-02-14T08:13:54.504Z,6436,10,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,84999 +MKT-WS-038,2026-02-12T18:25:27.246Z,36057,33964,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\jsmith,115278 +MKT-WS-038,2026-02-15T22:22:26.815Z,46783,22064,dwm.exe,C:\Windows\System32\dwm.exe,ACME\jsmith,32378 +MKT-WS-038,2026-02-18T03:58:00.096Z,43301,24613,System,System,NT AUTHORITY\SYSTEM,106282 +MKT-WS-038,2026-02-14T02:11:30.642Z,5782,43239,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,331298 +MKT-WS-038,2026-02-17T09:23:20.775Z,13184,5161,services.exe,C:\Windows\System32\services.exe,ACME\jsmith,104295 +MKT-WS-038,2026-02-11T12:25:14.410Z,22743,28344,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\jsmith,58315 +MKT-WS-038,2026-02-19T16:10:26.314Z,62112,29216,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\jsmith,86931 +MKT-WS-038,2026-02-13T08:22:56.575Z,31894,33310,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\jsmith,99411 +EXEC-WS-039,2026-02-18T13:10:47.435Z,64196,19,svchost.exe,C:\Windows\System32\svchost.exe,ACME\gwhite,234654 +EXEC-WS-039,2026-02-12T03:55:40.047Z,11294,49130,explorer.exe,C:\Windows\System32\explorer.exe,ACME\gwhite,404630 +EXEC-WS-039,2026-02-18T17:34:55.539Z,40771,58354,chrome.exe,C:\Windows\System32\chrome.exe,ACME\gwhite,58823 +EXEC-WS-039,2026-02-14T07:03:57.331Z,31726,50146,msedge.exe,C:\Windows\System32\msedge.exe,ACME\gwhite,320918 +EXEC-WS-039,2026-02-14T13:49:44.342Z,45905,56966,outlook.exe,C:\Windows\System32\outlook.exe,ACME\gwhite,85161 +EXEC-WS-039,2026-02-13T22:33:39.811Z,57845,11251,teams.exe,C:\Windows\System32\teams.exe,ACME\gwhite,287434 +EXEC-WS-039,2026-02-20T04:45:00.376Z,22455,43765,code.exe,C:\Windows\System32\code.exe,ACME\gwhite,497893 +EXEC-WS-039,2026-02-13T04:20:27.436Z,61244,53441,powershell.exe,C:\Windows\System32\powershell.exe,ACME\gwhite,104323 +EXEC-WS-039,2026-02-16T22:38:50.763Z,7972,14220,cmd.exe,C:\Windows\System32\cmd.exe,ACME\gwhite,394908 +EXEC-WS-039,2026-02-17T10:22:10.990Z,20684,45727,notepad.exe,C:\Windows\System32\notepad.exe,ACME\gwhite,260849 +EXEC-WS-039,2026-02-15T19:55:51.111Z,20049,1090,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\gwhite,162213 +EXEC-WS-039,2026-02-10T14:54:09.197Z,29393,18048,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\gwhite,237804 +EXEC-WS-039,2026-02-15T07:10:05.667Z,12899,40082,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\gwhite,302335 +EXEC-WS-039,2026-02-11T10:05:18.619Z,41286,14,lsass.exe,C:\Windows\System32\lsass.exe,ACME\gwhite,256406 +EXEC-WS-039,2026-02-13T21:23:14.017Z,22854,14,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,255358 +EXEC-WS-039,2026-02-18T18:30:11.232Z,38751,37569,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\gwhite,30158 +EXEC-WS-039,2026-02-15T14:41:47.194Z,25322,8272,dwm.exe,C:\Windows\System32\dwm.exe,ACME\gwhite,128381 +EXEC-WS-039,2026-02-13T01:38:08.003Z,48647,19050,System,System,NT AUTHORITY\SYSTEM,173411 +EXEC-WS-039,2026-02-15T14:30:34.832Z,8247,5757,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,314191 +EXEC-WS-039,2026-02-13T19:26:08.486Z,20826,17185,services.exe,C:\Windows\System32\services.exe,ACME\gwhite,41880 +EXEC-WS-039,2026-02-20T05:16:34.613Z,38440,58944,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\gwhite,67104 +EXEC-WS-039,2026-02-14T04:16:56.745Z,19065,6946,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\gwhite,68847 +EXEC-WS-039,2026-02-12T19:13:24.377Z,33777,28410,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\gwhite,287889 +IT-WS-040,2026-02-19T03:13:27.521Z,63198,14,svchost.exe,C:\Windows\System32\svchost.exe,ACME\agarcia,46704 +IT-WS-040,2026-02-10T19:59:19.176Z,44064,29684,explorer.exe,C:\Windows\System32\explorer.exe,ACME\agarcia,437229 +IT-WS-040,2026-02-14T07:09:30.865Z,42703,43845,chrome.exe,C:\Windows\System32\chrome.exe,ACME\agarcia,319182 +IT-WS-040,2026-02-13T12:04:17.686Z,59745,7787,msedge.exe,C:\Windows\System32\msedge.exe,ACME\agarcia,171640 +IT-WS-040,2026-02-15T11:03:48.822Z,14016,16185,outlook.exe,C:\Windows\System32\outlook.exe,ACME\agarcia,184286 +IT-WS-040,2026-02-10T13:01:03.417Z,55356,11845,teams.exe,C:\Windows\System32\teams.exe,ACME\agarcia,430414 +IT-WS-040,2026-02-16T17:15:20.128Z,23654,25080,code.exe,C:\Windows\System32\code.exe,ACME\agarcia,145774 +IT-WS-040,2026-02-11T11:17:38.498Z,28633,44217,powershell.exe,C:\Windows\System32\powershell.exe,ACME\agarcia,360099 +IT-WS-040,2026-02-20T16:25:57.846Z,62038,19681,cmd.exe,C:\Windows\System32\cmd.exe,ACME\agarcia,184893 +IT-WS-040,2026-02-12T16:58:30.241Z,57843,31166,notepad.exe,C:\Windows\System32\notepad.exe,ACME\agarcia,250150 +IT-WS-040,2026-02-20T10:56:17.590Z,27982,58792,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\agarcia,142649 +IT-WS-040,2026-02-16T18:46:22.883Z,572,47537,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\agarcia,106724 +IT-WS-040,2026-02-16T21:19:21.083Z,17606,4799,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\agarcia,266748 +IT-WS-040,2026-02-16T18:39:42.348Z,4608,1,lsass.exe,C:\Windows\System32\lsass.exe,ACME\agarcia,256332 +IT-WS-040,2026-02-14T05:35:04.834Z,7392,19,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,337802 +IT-WS-040,2026-02-20T07:15:49.631Z,6793,43156,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\agarcia,474778 +IT-WS-040,2026-02-13T13:54:25.578Z,22697,6762,dwm.exe,C:\Windows\System32\dwm.exe,ACME\agarcia,188946 +IT-WS-040,2026-02-16T09:36:18.306Z,6564,18435,System,System,NT AUTHORITY\SYSTEM,363082 +IT-WS-040,2026-02-13T17:43:22.578Z,42797,23636,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,407243 +IT-WS-040,2026-02-15T09:35:02.808Z,12514,35662,services.exe,C:\Windows\System32\services.exe,ACME\agarcia,112529 +IT-WS-040,2026-02-10T17:04:14.258Z,25243,36082,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\agarcia,458232 +IT-WS-040,2026-02-16T12:41:30.427Z,30705,11558,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\agarcia,224548 +IT-WS-040,2026-02-19T03:13:33.496Z,47710,5204,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\agarcia,272322 +IT-WS-040,2026-02-12T20:18:39.380Z,44108,34085,steam.exe,C:\Users\agarcia\AppData\Local\steam\steam.exe,ACME\agarcia,85957 +HR-WS-041,2026-02-13T13:44:00.549Z,54349,18,svchost.exe,C:\Windows\System32\svchost.exe,ACME\fthompson,74382 +HR-WS-041,2026-02-17T18:22:46.651Z,56303,30797,explorer.exe,C:\Windows\System32\explorer.exe,ACME\fthompson,103457 +HR-WS-041,2026-02-10T13:47:57.321Z,42838,58123,chrome.exe,C:\Windows\System32\chrome.exe,ACME\fthompson,312720 +HR-WS-041,2026-02-15T01:55:07.350Z,39693,2161,msedge.exe,C:\Windows\System32\msedge.exe,ACME\fthompson,10191 +HR-WS-041,2026-02-17T20:51:56.383Z,51718,20529,outlook.exe,C:\Windows\System32\outlook.exe,ACME\fthompson,202962 +HR-WS-041,2026-02-13T21:05:46.665Z,18153,16532,teams.exe,C:\Windows\System32\teams.exe,ACME\fthompson,124809 +HR-WS-041,2026-02-10T09:42:49.418Z,1535,43550,code.exe,C:\Windows\System32\code.exe,ACME\fthompson,353118 +HR-WS-041,2026-02-14T01:24:15.839Z,269,17251,powershell.exe,C:\Windows\System32\powershell.exe,ACME\fthompson,380463 +HR-WS-041,2026-02-16T16:33:06.544Z,8251,44276,cmd.exe,C:\Windows\System32\cmd.exe,ACME\fthompson,25968 +HR-WS-041,2026-02-19T01:39:33.740Z,33629,5581,notepad.exe,C:\Windows\System32\notepad.exe,ACME\fthompson,252371 +HR-WS-041,2026-02-10T21:11:23.434Z,15223,13928,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\fthompson,94006 +HR-WS-041,2026-02-18T22:02:03.405Z,32407,41921,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\fthompson,126412 +HR-WS-041,2026-02-18T17:56:33.689Z,46925,9190,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\fthompson,240612 +HR-WS-041,2026-02-12T11:40:55.852Z,12115,6,lsass.exe,C:\Windows\System32\lsass.exe,ACME\fthompson,261199 +HR-WS-041,2026-02-16T17:16:37.569Z,14647,14,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,170880 +HR-WS-041,2026-02-18T23:47:13.729Z,3983,17252,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\fthompson,77644 +HR-WS-041,2026-02-14T08:27:34.958Z,60183,42632,dwm.exe,C:\Windows\System32\dwm.exe,ACME\fthompson,24535 +HR-WS-041,2026-02-10T20:01:05.763Z,21854,38447,System,System,NT AUTHORITY\SYSTEM,244465 +HR-WS-041,2026-02-12T12:42:39.859Z,15423,23472,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,443183 +HR-WS-041,2026-02-14T16:34:52.028Z,9330,10867,services.exe,C:\Windows\System32\services.exe,ACME\fthompson,433246 +HR-WS-041,2026-02-14T03:30:46.977Z,43150,59795,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\fthompson,310199 +HR-WS-041,2026-02-20T09:19:58.987Z,13602,3535,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\fthompson,428939 +HR-WS-041,2026-02-19T07:18:13.423Z,50002,22642,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\fthompson,296373 +FIN-WS-042,2026-02-19T02:52:02.076Z,50488,10,svchost.exe,C:\Windows\System32\svchost.exe,ACME\cjohnson,51643 +FIN-WS-042,2026-02-17T04:38:51.642Z,12862,44470,explorer.exe,C:\Windows\System32\explorer.exe,ACME\cjohnson,425358 +FIN-WS-042,2026-02-14T20:35:09.167Z,40376,38596,chrome.exe,C:\Windows\System32\chrome.exe,ACME\cjohnson,77080 +FIN-WS-042,2026-02-16T22:21:50.066Z,27678,3982,msedge.exe,C:\Windows\System32\msedge.exe,ACME\cjohnson,433020 +FIN-WS-042,2026-02-10T14:22:31.297Z,4158,46959,outlook.exe,C:\Windows\System32\outlook.exe,ACME\cjohnson,295498 +FIN-WS-042,2026-02-15T02:35:52.453Z,40873,46406,teams.exe,C:\Windows\System32\teams.exe,ACME\cjohnson,245893 +FIN-WS-042,2026-02-10T10:46:04.035Z,16828,57934,code.exe,C:\Windows\System32\code.exe,ACME\cjohnson,165784 +FIN-WS-042,2026-02-17T03:40:52.645Z,5979,17032,powershell.exe,C:\Windows\System32\powershell.exe,ACME\cjohnson,128088 +FIN-WS-042,2026-02-14T08:41:16.595Z,7600,55966,cmd.exe,C:\Windows\System32\cmd.exe,ACME\cjohnson,48801 +FIN-WS-042,2026-02-16T16:00:09.582Z,51947,4612,notepad.exe,C:\Windows\System32\notepad.exe,ACME\cjohnson,449091 +FIN-WS-042,2026-02-12T10:01:42.962Z,5933,46054,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\cjohnson,193535 +FIN-WS-042,2026-02-17T19:17:46.840Z,27617,20447,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\cjohnson,337044 +FIN-WS-042,2026-02-11T23:05:51.430Z,64196,49986,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\cjohnson,190137 +FIN-WS-042,2026-02-19T13:18:17.628Z,60668,10,lsass.exe,C:\Windows\System32\lsass.exe,ACME\cjohnson,91901 +FIN-WS-042,2026-02-10T18:32:13.492Z,28150,2,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,67695 +FIN-WS-042,2026-02-17T01:28:55.454Z,35490,49414,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\cjohnson,346470 +FIN-WS-042,2026-02-12T07:20:05.362Z,12103,11061,dwm.exe,C:\Windows\System32\dwm.exe,ACME\cjohnson,137208 +FIN-WS-042,2026-02-19T04:44:03.049Z,13446,23692,System,System,NT AUTHORITY\SYSTEM,320428 +FIN-WS-042,2026-02-12T06:54:24.044Z,59948,40471,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,339859 +FIN-WS-042,2026-02-19T22:56:55.054Z,39218,21018,services.exe,C:\Windows\System32\services.exe,ACME\cjohnson,158631 +FIN-WS-042,2026-02-19T18:10:24.602Z,24170,57510,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\cjohnson,297368 +FIN-WS-042,2026-02-13T17:30:34.846Z,11059,10298,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\cjohnson,337075 +FIN-WS-042,2026-02-19T08:47:54.868Z,31726,18366,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\cjohnson,169887 +SLS-WS-043,2026-02-15T02:36:18.291Z,40907,15,svchost.exe,C:\Windows\System32\svchost.exe,ACME\dlee,209768 +SLS-WS-043,2026-02-11T09:32:00.832Z,24100,20723,explorer.exe,C:\Windows\System32\explorer.exe,ACME\dlee,270986 +SLS-WS-043,2026-02-18T18:34:15.673Z,55543,51018,chrome.exe,C:\Windows\System32\chrome.exe,ACME\dlee,353970 +SLS-WS-043,2026-02-17T07:49:09.223Z,58251,40596,msedge.exe,C:\Windows\System32\msedge.exe,ACME\dlee,229424 +SLS-WS-043,2026-02-12T07:02:03.593Z,13328,35231,outlook.exe,C:\Windows\System32\outlook.exe,ACME\dlee,258162 +SLS-WS-043,2026-02-13T22:45:50.842Z,26828,27849,teams.exe,C:\Windows\System32\teams.exe,ACME\dlee,239084 +SLS-WS-043,2026-02-11T04:04:15.919Z,3916,13874,code.exe,C:\Windows\System32\code.exe,ACME\dlee,2729 +SLS-WS-043,2026-02-11T15:54:18.229Z,5229,11087,powershell.exe,C:\Windows\System32\powershell.exe,ACME\dlee,38451 +SLS-WS-043,2026-02-17T01:00:08.026Z,16181,14812,cmd.exe,C:\Windows\System32\cmd.exe,ACME\dlee,490074 +SLS-WS-043,2026-02-15T11:15:11.543Z,45963,33905,notepad.exe,C:\Windows\System32\notepad.exe,ACME\dlee,413128 +SLS-WS-043,2026-02-18T10:15:27.124Z,13876,42108,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\dlee,412676 +SLS-WS-043,2026-02-11T02:25:27.537Z,17252,11801,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\dlee,151622 +SLS-WS-043,2026-02-12T13:37:13.840Z,48406,33610,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\dlee,416658 +SLS-WS-043,2026-02-17T08:58:27.803Z,22106,10,lsass.exe,C:\Windows\System32\lsass.exe,ACME\dlee,398352 +SLS-WS-043,2026-02-13T08:08:04.701Z,21828,15,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,266565 +SLS-WS-043,2026-02-16T21:10:35.978Z,34596,46772,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\dlee,325260 +SLS-WS-043,2026-02-15T18:05:07.202Z,27949,58136,dwm.exe,C:\Windows\System32\dwm.exe,ACME\dlee,105984 +SLS-WS-043,2026-02-11T15:47:55.140Z,36926,45525,System,System,NT AUTHORITY\SYSTEM,80029 +SLS-WS-043,2026-02-13T07:35:16.882Z,24456,56958,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,19855 +SLS-WS-043,2026-02-12T08:04:23.568Z,40945,56272,services.exe,C:\Windows\System32\services.exe,ACME\dlee,180119 +SLS-WS-043,2026-02-20T00:59:31.322Z,45270,16411,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\dlee,179084 +SLS-WS-043,2026-02-13T23:59:34.698Z,11429,4298,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\dlee,258023 +SLS-WS-043,2026-02-20T14:14:54.040Z,12924,44682,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\dlee,415082 +ENG-WS-044,2026-02-20T06:12:49.153Z,1492,14,svchost.exe,C:\Windows\System32\svchost.exe,ACME\svc_web,380481 +ENG-WS-044,2026-02-16T05:16:06.924Z,37718,42064,explorer.exe,C:\Windows\System32\explorer.exe,ACME\svc_web,374781 +ENG-WS-044,2026-02-20T11:01:51.299Z,48260,10037,chrome.exe,C:\Windows\System32\chrome.exe,ACME\svc_web,135113 +ENG-WS-044,2026-02-20T08:37:17.253Z,30916,6785,msedge.exe,C:\Windows\System32\msedge.exe,ACME\svc_web,250493 +ENG-WS-044,2026-02-14T15:48:16.731Z,51186,21129,outlook.exe,C:\Windows\System32\outlook.exe,ACME\svc_web,56283 +ENG-WS-044,2026-02-10T19:36:21.947Z,1226,35852,teams.exe,C:\Windows\System32\teams.exe,ACME\svc_web,478128 +ENG-WS-044,2026-02-18T16:12:19.483Z,5135,2649,code.exe,C:\Windows\System32\code.exe,ACME\svc_web,430548 +ENG-WS-044,2026-02-12T04:52:39.580Z,1427,10738,powershell.exe,C:\Windows\System32\powershell.exe,ACME\svc_web,54815 +ENG-WS-044,2026-02-12T12:24:43.725Z,47006,9267,cmd.exe,C:\Windows\System32\cmd.exe,ACME\svc_web,178364 +ENG-WS-044,2026-02-11T10:39:08.538Z,63091,23915,notepad.exe,C:\Windows\System32\notepad.exe,ACME\svc_web,51635 +ENG-WS-044,2026-02-14T16:22:49.071Z,56471,53389,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\svc_web,269472 +ENG-WS-044,2026-02-12T07:45:26.822Z,14810,9038,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_web,292259 +ENG-WS-044,2026-02-13T00:50:27.132Z,23371,59817,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\svc_web,138260 +ENG-WS-044,2026-02-20T01:52:11.040Z,64074,5,lsass.exe,C:\Windows\System32\lsass.exe,ACME\svc_web,215606 +ENG-WS-044,2026-02-16T20:58:38.198Z,53763,8,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,217271 +ENG-WS-044,2026-02-11T15:54:12.794Z,48847,49024,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\svc_web,155674 +ENG-WS-044,2026-02-12T10:43:41.204Z,17406,21034,dwm.exe,C:\Windows\System32\dwm.exe,ACME\svc_web,249958 +ENG-WS-044,2026-02-17T01:30:01.849Z,7073,22125,System,System,NT AUTHORITY\SYSTEM,140836 +ENG-WS-044,2026-02-19T00:41:04.815Z,21192,8268,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,206946 +ENG-WS-044,2026-02-19T07:28:05.073Z,32114,35722,services.exe,C:\Windows\System32\services.exe,ACME\svc_web,259887 +ENG-WS-044,2026-02-18T18:27:00.314Z,36174,32870,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\svc_web,402514 +ENG-WS-044,2026-02-17T09:44:54.641Z,54469,5241,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\svc_web,335974 +ENG-WS-044,2026-02-16T15:22:32.607Z,23231,50009,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\svc_web,110104 +LEG-WS-045,2026-02-12T08:55:22.667Z,19663,6,svchost.exe,C:\Windows\System32\svchost.exe,ACME\hbrown,92718 +LEG-WS-045,2026-02-14T10:18:39.841Z,46385,45066,explorer.exe,C:\Windows\System32\explorer.exe,ACME\hbrown,178072 +LEG-WS-045,2026-02-13T03:10:45.750Z,23386,52076,chrome.exe,C:\Windows\System32\chrome.exe,ACME\hbrown,321274 +LEG-WS-045,2026-02-12T11:54:20.926Z,44695,2762,msedge.exe,C:\Windows\System32\msedge.exe,ACME\hbrown,377077 +LEG-WS-045,2026-02-18T00:01:27.927Z,25455,53999,outlook.exe,C:\Windows\System32\outlook.exe,ACME\hbrown,371013 +LEG-WS-045,2026-02-10T16:46:27.751Z,12438,5772,teams.exe,C:\Windows\System32\teams.exe,ACME\hbrown,461735 +LEG-WS-045,2026-02-14T23:06:28.503Z,55986,22462,code.exe,C:\Windows\System32\code.exe,ACME\hbrown,298595 +LEG-WS-045,2026-02-12T03:59:49.553Z,29918,16309,powershell.exe,C:\Windows\System32\powershell.exe,ACME\hbrown,369705 +LEG-WS-045,2026-02-14T00:30:06.662Z,36026,6666,cmd.exe,C:\Windows\System32\cmd.exe,ACME\hbrown,179666 +LEG-WS-045,2026-02-15T01:31:03.383Z,22286,9120,notepad.exe,C:\Windows\System32\notepad.exe,ACME\hbrown,493478 +LEG-WS-045,2026-02-15T05:19:27.241Z,36746,47913,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\hbrown,335960 +LEG-WS-045,2026-02-16T21:30:02.358Z,51099,10693,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\hbrown,4482 +LEG-WS-045,2026-02-19T11:42:37.952Z,57737,12037,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\hbrown,173898 +LEG-WS-045,2026-02-10T13:28:31.111Z,28247,10,lsass.exe,C:\Windows\System32\lsass.exe,ACME\hbrown,355393 +LEG-WS-045,2026-02-10T11:38:08.721Z,38325,8,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,321866 +LEG-WS-045,2026-02-15T21:31:06.845Z,49897,40465,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\hbrown,267797 +LEG-WS-045,2026-02-16T13:55:36.492Z,39882,5231,dwm.exe,C:\Windows\System32\dwm.exe,ACME\hbrown,196623 +LEG-WS-045,2026-02-17T13:57:56.597Z,915,31668,System,System,NT AUTHORITY\SYSTEM,229942 +LEG-WS-045,2026-02-20T15:48:00.337Z,32569,37388,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,299607 +LEG-WS-045,2026-02-16T05:33:09.338Z,37549,39860,services.exe,C:\Windows\System32\services.exe,ACME\hbrown,351186 +LEG-WS-045,2026-02-20T17:38:41.709Z,34480,7193,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\hbrown,339755 +LEG-WS-045,2026-02-19T15:39:38.195Z,8182,58224,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\hbrown,298900 +LEG-WS-045,2026-02-20T10:30:29.180Z,19131,36928,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\hbrown,478752 +MKT-WS-046,2026-02-12T03:19:52.892Z,25578,4,svchost.exe,C:\Windows\System32\svchost.exe,ACME\dlee,346759 +MKT-WS-046,2026-02-17T13:59:01.018Z,5570,39331,explorer.exe,C:\Windows\System32\explorer.exe,ACME\dlee,5626 +MKT-WS-046,2026-02-13T08:16:05.497Z,2466,9407,chrome.exe,C:\Windows\System32\chrome.exe,ACME\dlee,190966 +MKT-WS-046,2026-02-15T11:36:35.955Z,22175,7510,msedge.exe,C:\Windows\System32\msedge.exe,ACME\dlee,479599 +MKT-WS-046,2026-02-18T06:07:53.967Z,21521,34159,outlook.exe,C:\Windows\System32\outlook.exe,ACME\dlee,476045 +MKT-WS-046,2026-02-19T22:30:14.475Z,14370,58993,teams.exe,C:\Windows\System32\teams.exe,ACME\dlee,238569 +MKT-WS-046,2026-02-12T11:05:29.728Z,13911,21938,code.exe,C:\Windows\System32\code.exe,ACME\dlee,87961 +MKT-WS-046,2026-02-10T16:33:54.487Z,57741,31132,powershell.exe,C:\Windows\System32\powershell.exe,ACME\dlee,265629 +MKT-WS-046,2026-02-16T12:17:05.057Z,50902,53507,cmd.exe,C:\Windows\System32\cmd.exe,ACME\dlee,211700 +MKT-WS-046,2026-02-15T13:24:20.311Z,26864,28574,notepad.exe,C:\Windows\System32\notepad.exe,ACME\dlee,425323 +MKT-WS-046,2026-02-14T04:14:39.019Z,58267,35033,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\dlee,283792 +MKT-WS-046,2026-02-13T03:08:44.365Z,54713,48994,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\dlee,37513 +MKT-WS-046,2026-02-12T00:23:29.376Z,5925,25345,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\dlee,36165 +MKT-WS-046,2026-02-14T00:37:58.198Z,3991,13,lsass.exe,C:\Windows\System32\lsass.exe,ACME\dlee,445781 +MKT-WS-046,2026-02-13T12:10:26.968Z,49548,3,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,323855 +MKT-WS-046,2026-02-15T03:24:51.974Z,16684,55305,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\dlee,413670 +MKT-WS-046,2026-02-17T23:30:53.422Z,40315,26483,dwm.exe,C:\Windows\System32\dwm.exe,ACME\dlee,359852 +MKT-WS-046,2026-02-18T03:15:46.515Z,51902,19117,System,System,NT AUTHORITY\SYSTEM,42008 +MKT-WS-046,2026-02-14T00:24:59.926Z,1293,22376,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,260688 +MKT-WS-046,2026-02-10T19:17:49.322Z,4451,43551,services.exe,C:\Windows\System32\services.exe,ACME\dlee,108454 +MKT-WS-046,2026-02-20T17:34:18.719Z,44685,3706,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\dlee,406057 +MKT-WS-046,2026-02-13T18:38:02.357Z,9530,30308,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\dlee,218262 +MKT-WS-046,2026-02-19T22:10:01.236Z,2819,36618,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\dlee,287176 +EXEC-WS-047,2026-02-14T07:45:39.722Z,21770,18,svchost.exe,C:\Windows\System32\svchost.exe,ACME\svc_sql,237669 +EXEC-WS-047,2026-02-20T15:09:51.581Z,39939,12489,explorer.exe,C:\Windows\System32\explorer.exe,ACME\svc_sql,455922 +EXEC-WS-047,2026-02-12T10:57:09.087Z,34270,19721,chrome.exe,C:\Windows\System32\chrome.exe,ACME\svc_sql,473732 +EXEC-WS-047,2026-02-11T08:57:23.818Z,10658,12443,msedge.exe,C:\Windows\System32\msedge.exe,ACME\svc_sql,298490 +EXEC-WS-047,2026-02-13T19:21:20.382Z,18223,50506,outlook.exe,C:\Windows\System32\outlook.exe,ACME\svc_sql,389933 +EXEC-WS-047,2026-02-13T22:24:14.892Z,6746,11163,teams.exe,C:\Windows\System32\teams.exe,ACME\svc_sql,457060 +EXEC-WS-047,2026-02-14T20:18:36.989Z,63359,36027,code.exe,C:\Windows\System32\code.exe,ACME\svc_sql,223459 +EXEC-WS-047,2026-02-20T10:14:00.309Z,9206,42219,powershell.exe,C:\Windows\System32\powershell.exe,ACME\svc_sql,3590 +EXEC-WS-047,2026-02-19T15:50:42.336Z,49684,41031,cmd.exe,C:\Windows\System32\cmd.exe,ACME\svc_sql,57377 +EXEC-WS-047,2026-02-17T10:31:55.501Z,36246,3016,notepad.exe,C:\Windows\System32\notepad.exe,ACME\svc_sql,26059 +EXEC-WS-047,2026-02-19T10:12:01.313Z,42913,37733,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\svc_sql,378804 +EXEC-WS-047,2026-02-18T23:04:28.943Z,47866,47828,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_sql,307600 +EXEC-WS-047,2026-02-11T15:01:56.927Z,7665,20872,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\svc_sql,159350 +EXEC-WS-047,2026-02-13T08:57:09.260Z,48934,4,lsass.exe,C:\Windows\System32\lsass.exe,ACME\svc_sql,188862 +EXEC-WS-047,2026-02-16T03:35:20.290Z,51713,2,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,8501 +EXEC-WS-047,2026-02-17T16:00:31.795Z,43696,5290,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\svc_sql,354656 +EXEC-WS-047,2026-02-16T21:18:42.572Z,17548,31504,dwm.exe,C:\Windows\System32\dwm.exe,ACME\svc_sql,375984 +EXEC-WS-047,2026-02-17T12:00:43.851Z,10687,39513,System,System,NT AUTHORITY\SYSTEM,477535 +EXEC-WS-047,2026-02-14T15:39:37.559Z,14463,51453,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,38858 +EXEC-WS-047,2026-02-12T02:56:23.422Z,58362,12068,services.exe,C:\Windows\System32\services.exe,ACME\svc_sql,216994 +EXEC-WS-047,2026-02-11T17:54:51.380Z,19971,29737,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\svc_sql,363878 +EXEC-WS-047,2026-02-12T14:48:09.137Z,17594,45275,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\svc_sql,302432 +EXEC-WS-047,2026-02-12T04:34:35.098Z,48583,56668,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\svc_sql,179581 +IT-WS-048,2026-02-19T03:48:45.048Z,26172,1,svchost.exe,C:\Windows\System32\svchost.exe,ACME\svc_backup,67342 +IT-WS-048,2026-02-15T22:13:01.620Z,16713,1814,explorer.exe,C:\Windows\System32\explorer.exe,ACME\svc_backup,44884 +IT-WS-048,2026-02-17T16:57:33.445Z,29823,18658,chrome.exe,C:\Windows\System32\chrome.exe,ACME\svc_backup,145961 +IT-WS-048,2026-02-17T08:10:25.766Z,9159,24178,msedge.exe,C:\Windows\System32\msedge.exe,ACME\svc_backup,488139 +IT-WS-048,2026-02-17T15:27:05.862Z,37534,45928,outlook.exe,C:\Windows\System32\outlook.exe,ACME\svc_backup,384940 +IT-WS-048,2026-02-14T12:02:27.812Z,52866,55847,teams.exe,C:\Windows\System32\teams.exe,ACME\svc_backup,342515 +IT-WS-048,2026-02-16T20:26:08.065Z,22213,49348,code.exe,C:\Windows\System32\code.exe,ACME\svc_backup,238109 +IT-WS-048,2026-02-20T04:46:05.697Z,52102,53384,powershell.exe,C:\Windows\System32\powershell.exe,ACME\svc_backup,227783 +IT-WS-048,2026-02-12T04:13:55.185Z,33072,56208,cmd.exe,C:\Windows\System32\cmd.exe,ACME\svc_backup,299024 +IT-WS-048,2026-02-17T01:52:44.649Z,6515,36019,notepad.exe,C:\Windows\System32\notepad.exe,ACME\svc_backup,54557 +IT-WS-048,2026-02-13T12:39:54.297Z,10943,10088,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\svc_backup,404318 +IT-WS-048,2026-02-11T14:43:56.722Z,25277,25646,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_backup,137160 +IT-WS-048,2026-02-18T10:50:09.383Z,58015,10557,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\svc_backup,282512 +IT-WS-048,2026-02-18T17:03:03.296Z,2664,20,lsass.exe,C:\Windows\System32\lsass.exe,ACME\svc_backup,1863 +IT-WS-048,2026-02-16T15:59:42.439Z,10677,1,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,442508 +IT-WS-048,2026-02-17T16:29:00.153Z,30773,38564,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\svc_backup,319473 +IT-WS-048,2026-02-12T21:42:33.561Z,28629,44276,dwm.exe,C:\Windows\System32\dwm.exe,ACME\svc_backup,455468 +IT-WS-048,2026-02-18T23:45:16.333Z,59989,6752,System,System,NT AUTHORITY\SYSTEM,360836 +IT-WS-048,2026-02-11T03:21:08.153Z,20950,40912,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,247009 +IT-WS-048,2026-02-12T13:18:22.286Z,22485,42658,services.exe,C:\Windows\System32\services.exe,ACME\svc_backup,62522 +IT-WS-048,2026-02-11T17:49:07.671Z,28926,3696,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\svc_backup,444353 +IT-WS-048,2026-02-12T10:57:01.242Z,23056,58775,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\svc_backup,262569 +IT-WS-048,2026-02-10T08:25:33.777Z,39327,31161,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\svc_backup,205116 +IT-WS-048,2026-02-12T18:55:02.621Z,60026,31465,epicgameslauncher.exe,C:\Users\svc_backup\AppData\Local\epicgameslauncher\epicgameslauncher.exe,ACME\svc_backup,231186 +HR-WS-049,2026-02-18T08:09:39.915Z,30296,6,svchost.exe,C:\Windows\System32\svchost.exe,ACME\hbrown,104996 +HR-WS-049,2026-02-15T11:05:08.695Z,30717,5763,explorer.exe,C:\Windows\System32\explorer.exe,ACME\hbrown,19625 +HR-WS-049,2026-02-13T16:49:57.638Z,44969,7627,chrome.exe,C:\Windows\System32\chrome.exe,ACME\hbrown,126919 +HR-WS-049,2026-02-10T09:50:54.810Z,14987,1726,msedge.exe,C:\Windows\System32\msedge.exe,ACME\hbrown,485969 +HR-WS-049,2026-02-13T20:09:58.168Z,57031,12313,outlook.exe,C:\Windows\System32\outlook.exe,ACME\hbrown,201720 +HR-WS-049,2026-02-18T17:57:59.328Z,37808,59916,teams.exe,C:\Windows\System32\teams.exe,ACME\hbrown,143424 +HR-WS-049,2026-02-12T22:51:21.163Z,29266,50136,code.exe,C:\Windows\System32\code.exe,ACME\hbrown,473481 +HR-WS-049,2026-02-19T22:59:23.691Z,4500,12607,powershell.exe,C:\Windows\System32\powershell.exe,ACME\hbrown,124698 +HR-WS-049,2026-02-14T01:11:44.025Z,4684,6679,cmd.exe,C:\Windows\System32\cmd.exe,ACME\hbrown,312895 +HR-WS-049,2026-02-12T16:42:02.205Z,27268,33074,notepad.exe,C:\Windows\System32\notepad.exe,ACME\hbrown,153423 +HR-WS-049,2026-02-18T03:38:25.407Z,64779,35449,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\hbrown,364016 +HR-WS-049,2026-02-11T19:15:14.080Z,19835,10447,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\hbrown,344960 +HR-WS-049,2026-02-11T05:43:40.841Z,28434,13043,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\hbrown,159690 +HR-WS-049,2026-02-10T12:24:15.983Z,57989,7,lsass.exe,C:\Windows\System32\lsass.exe,ACME\hbrown,462666 +HR-WS-049,2026-02-10T15:20:18.498Z,54736,20,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,109208 +HR-WS-049,2026-02-20T03:55:55.282Z,42176,42904,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\hbrown,363527 +HR-WS-049,2026-02-12T21:41:27.731Z,37350,7800,dwm.exe,C:\Windows\System32\dwm.exe,ACME\hbrown,187556 +HR-WS-049,2026-02-17T00:08:53.836Z,53902,25067,System,System,NT AUTHORITY\SYSTEM,103776 +HR-WS-049,2026-02-17T17:22:19.112Z,56386,53827,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,227570 +HR-WS-049,2026-02-12T11:47:19.908Z,32614,5864,services.exe,C:\Windows\System32\services.exe,ACME\hbrown,161520 +HR-WS-049,2026-02-19T18:44:15.665Z,27540,57880,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\hbrown,103653 +HR-WS-049,2026-02-18T02:43:19.967Z,21641,5570,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\hbrown,159087 +HR-WS-049,2026-02-12T05:56:15.972Z,21387,11160,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\hbrown,396791 +FIN-WS-050,2026-02-17T11:44:05.994Z,9222,11,svchost.exe,C:\Windows\System32\svchost.exe,ACME\cjohnson,436561 +FIN-WS-050,2026-02-17T04:59:13.938Z,20337,33622,explorer.exe,C:\Windows\System32\explorer.exe,ACME\cjohnson,381225 +FIN-WS-050,2026-02-17T19:10:24.822Z,12353,54093,chrome.exe,C:\Windows\System32\chrome.exe,ACME\cjohnson,235304 +FIN-WS-050,2026-02-16T06:01:53.489Z,50054,40230,msedge.exe,C:\Windows\System32\msedge.exe,ACME\cjohnson,374334 +FIN-WS-050,2026-02-19T04:12:45.590Z,16854,39165,outlook.exe,C:\Windows\System32\outlook.exe,ACME\cjohnson,187296 +FIN-WS-050,2026-02-15T02:01:08.197Z,63900,28813,teams.exe,C:\Windows\System32\teams.exe,ACME\cjohnson,289267 +FIN-WS-050,2026-02-12T15:18:05.652Z,15822,42128,code.exe,C:\Windows\System32\code.exe,ACME\cjohnson,93447 +FIN-WS-050,2026-02-16T15:51:21.715Z,7917,43945,powershell.exe,C:\Windows\System32\powershell.exe,ACME\cjohnson,1088 +FIN-WS-050,2026-02-14T08:53:25.968Z,64278,44885,cmd.exe,C:\Windows\System32\cmd.exe,ACME\cjohnson,4440 +FIN-WS-050,2026-02-13T08:06:21.667Z,62660,28491,notepad.exe,C:\Windows\System32\notepad.exe,ACME\cjohnson,76346 +FIN-WS-050,2026-02-20T04:18:51.808Z,12963,45455,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\cjohnson,387991 +FIN-WS-050,2026-02-13T16:51:58.204Z,42086,5100,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\cjohnson,22472 +FIN-WS-050,2026-02-13T01:19:20.723Z,10295,20296,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\cjohnson,242311 +FIN-WS-050,2026-02-10T10:05:08.347Z,33067,7,lsass.exe,C:\Windows\System32\lsass.exe,ACME\cjohnson,497285 +FIN-WS-050,2026-02-10T11:38:01.087Z,29758,11,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,210676 +FIN-WS-050,2026-02-15T12:21:43.946Z,12999,9389,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\cjohnson,11999 +FIN-WS-050,2026-02-17T02:41:07.287Z,62924,12523,dwm.exe,C:\Windows\System32\dwm.exe,ACME\cjohnson,300457 +FIN-WS-050,2026-02-11T09:33:03.829Z,7638,16660,System,System,NT AUTHORITY\SYSTEM,9683 +FIN-WS-050,2026-02-11T15:20:32.428Z,44386,22791,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,498334 +FIN-WS-050,2026-02-14T11:12:59.435Z,39762,41291,services.exe,C:\Windows\System32\services.exe,ACME\cjohnson,431534 +FIN-WS-050,2026-02-20T01:35:05.894Z,60955,27193,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\cjohnson,88649 +FIN-WS-050,2026-02-17T22:35:20.313Z,30538,10113,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\cjohnson,99326 +FIN-WS-050,2026-02-14T13:33:22.241Z,59817,57360,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\cjohnson,497311 +SLS-WS-051,2026-02-12T10:40:29.261Z,61778,10,svchost.exe,C:\Windows\System32\svchost.exe,ACME\emartinez,256062 +SLS-WS-051,2026-02-17T01:58:05.994Z,27505,33501,explorer.exe,C:\Windows\System32\explorer.exe,ACME\emartinez,403574 +SLS-WS-051,2026-02-20T07:03:43.833Z,31626,40155,chrome.exe,C:\Windows\System32\chrome.exe,ACME\emartinez,252034 +SLS-WS-051,2026-02-14T09:28:02.636Z,43295,20139,msedge.exe,C:\Windows\System32\msedge.exe,ACME\emartinez,331103 +SLS-WS-051,2026-02-14T08:36:00.680Z,56166,12284,outlook.exe,C:\Windows\System32\outlook.exe,ACME\emartinez,270414 +SLS-WS-051,2026-02-12T08:37:14.724Z,26860,46581,teams.exe,C:\Windows\System32\teams.exe,ACME\emartinez,468855 +SLS-WS-051,2026-02-17T12:43:47.427Z,51738,5932,code.exe,C:\Windows\System32\code.exe,ACME\emartinez,109092 +SLS-WS-051,2026-02-15T10:02:47.700Z,14557,8789,powershell.exe,C:\Windows\System32\powershell.exe,ACME\emartinez,407284 +SLS-WS-051,2026-02-18T16:36:19.070Z,36861,48377,cmd.exe,C:\Windows\System32\cmd.exe,ACME\emartinez,377869 +SLS-WS-051,2026-02-18T18:56:45.244Z,36154,8936,notepad.exe,C:\Windows\System32\notepad.exe,ACME\emartinez,436110 +SLS-WS-051,2026-02-12T02:45:14.102Z,29735,176,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\emartinez,499096 +SLS-WS-051,2026-02-19T07:14:22.715Z,27430,43765,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\emartinez,64266 +SLS-WS-051,2026-02-14T08:12:06.674Z,39619,37237,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\emartinez,156533 +SLS-WS-051,2026-02-13T06:46:44.455Z,56246,20,lsass.exe,C:\Windows\System32\lsass.exe,ACME\emartinez,50318 +SLS-WS-051,2026-02-13T23:57:31.029Z,56271,18,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,162607 +SLS-WS-051,2026-02-14T00:40:17.992Z,48252,30224,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\emartinez,499559 +SLS-WS-051,2026-02-18T00:45:14.772Z,8172,27350,dwm.exe,C:\Windows\System32\dwm.exe,ACME\emartinez,418471 +SLS-WS-051,2026-02-13T06:47:25.687Z,13787,35798,System,System,NT AUTHORITY\SYSTEM,498336 +SLS-WS-051,2026-02-11T21:33:30.641Z,21483,45388,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,16358 +SLS-WS-051,2026-02-15T16:51:31.521Z,53782,27541,services.exe,C:\Windows\System32\services.exe,ACME\emartinez,97453 +SLS-WS-051,2026-02-20T10:40:22.335Z,55194,10434,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\emartinez,241367 +SLS-WS-051,2026-02-17T17:40:24.006Z,37213,20638,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\emartinez,38579 +SLS-WS-051,2026-02-11T05:09:26.245Z,20209,51131,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\emartinez,6672 +ENG-WS-052,2026-02-17T08:06:12.818Z,25169,3,svchost.exe,C:\Windows\System32\svchost.exe,ACME\fthompson,194281 +ENG-WS-052,2026-02-16T19:09:43.524Z,40405,11222,explorer.exe,C:\Windows\System32\explorer.exe,ACME\fthompson,100633 +ENG-WS-052,2026-02-13T20:20:12.655Z,10456,48053,chrome.exe,C:\Windows\System32\chrome.exe,ACME\fthompson,498731 +ENG-WS-052,2026-02-16T13:46:25.159Z,29708,34691,msedge.exe,C:\Windows\System32\msedge.exe,ACME\fthompson,478703 +ENG-WS-052,2026-02-13T19:44:49.196Z,35958,33174,outlook.exe,C:\Windows\System32\outlook.exe,ACME\fthompson,465026 +ENG-WS-052,2026-02-16T06:06:48.745Z,2936,27858,teams.exe,C:\Windows\System32\teams.exe,ACME\fthompson,101283 +ENG-WS-052,2026-02-17T15:51:48.977Z,3694,53443,code.exe,C:\Windows\System32\code.exe,ACME\fthompson,404866 +ENG-WS-052,2026-02-17T23:58:51.328Z,14686,18817,powershell.exe,C:\Windows\System32\powershell.exe,ACME\fthompson,254065 +ENG-WS-052,2026-02-18T20:32:06.568Z,48381,54950,cmd.exe,C:\Windows\System32\cmd.exe,ACME\fthompson,400216 +ENG-WS-052,2026-02-11T03:35:16.409Z,48231,4765,notepad.exe,C:\Windows\System32\notepad.exe,ACME\fthompson,26853 +ENG-WS-052,2026-02-12T13:08:34.479Z,9099,30820,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\fthompson,436926 +ENG-WS-052,2026-02-11T18:44:36.649Z,55345,42696,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\fthompson,123894 +ENG-WS-052,2026-02-16T20:19:52.735Z,57330,34713,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\fthompson,191150 +ENG-WS-052,2026-02-19T00:05:58.287Z,41940,19,lsass.exe,C:\Windows\System32\lsass.exe,ACME\fthompson,369195 +ENG-WS-052,2026-02-17T13:33:27.485Z,57257,4,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,74054 +ENG-WS-052,2026-02-11T22:30:51.443Z,38932,41133,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\fthompson,19475 +ENG-WS-052,2026-02-11T20:47:30.875Z,30554,10090,dwm.exe,C:\Windows\System32\dwm.exe,ACME\fthompson,24989 +ENG-WS-052,2026-02-12T20:37:50.762Z,51833,13512,System,System,NT AUTHORITY\SYSTEM,386886 +ENG-WS-052,2026-02-12T15:38:49.203Z,36370,9936,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,303194 +ENG-WS-052,2026-02-17T08:56:11.410Z,35551,40554,services.exe,C:\Windows\System32\services.exe,ACME\fthompson,36475 +ENG-WS-052,2026-02-11T13:59:30.700Z,7018,45892,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\fthompson,127427 +ENG-WS-052,2026-02-20T15:58:12.848Z,41156,50204,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\fthompson,306455 +ENG-WS-052,2026-02-18T01:20:59.577Z,32679,50110,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\fthompson,483027 +LEG-WS-053,2026-02-16T14:24:11.654Z,54082,15,svchost.exe,C:\Windows\System32\svchost.exe,ACME\hbrown,231188 +LEG-WS-053,2026-02-14T09:30:19.573Z,36229,30756,explorer.exe,C:\Windows\System32\explorer.exe,ACME\hbrown,230458 +LEG-WS-053,2026-02-18T21:24:22.663Z,61847,35060,chrome.exe,C:\Windows\System32\chrome.exe,ACME\hbrown,129927 +LEG-WS-053,2026-02-16T22:42:14.522Z,25757,603,msedge.exe,C:\Windows\System32\msedge.exe,ACME\hbrown,375510 +LEG-WS-053,2026-02-11T16:33:32.920Z,19305,12050,outlook.exe,C:\Windows\System32\outlook.exe,ACME\hbrown,404923 +LEG-WS-053,2026-02-19T10:08:19.433Z,25212,53171,teams.exe,C:\Windows\System32\teams.exe,ACME\hbrown,445538 +LEG-WS-053,2026-02-13T18:15:31.057Z,54895,26845,code.exe,C:\Windows\System32\code.exe,ACME\hbrown,160716 +LEG-WS-053,2026-02-13T01:03:16.468Z,16859,45077,powershell.exe,C:\Windows\System32\powershell.exe,ACME\hbrown,267873 +LEG-WS-053,2026-02-15T02:52:38.296Z,24794,22304,cmd.exe,C:\Windows\System32\cmd.exe,ACME\hbrown,104808 +LEG-WS-053,2026-02-14T12:43:59.923Z,1649,58976,notepad.exe,C:\Windows\System32\notepad.exe,ACME\hbrown,430973 +LEG-WS-053,2026-02-15T19:57:32.690Z,1621,25142,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\hbrown,163251 +LEG-WS-053,2026-02-20T11:24:00.481Z,44398,44418,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\hbrown,293099 +LEG-WS-053,2026-02-18T18:22:19.437Z,41778,19679,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\hbrown,323149 +LEG-WS-053,2026-02-16T10:54:06.574Z,41141,4,lsass.exe,C:\Windows\System32\lsass.exe,ACME\hbrown,369614 +LEG-WS-053,2026-02-10T20:35:22.735Z,28873,5,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,442979 +LEG-WS-053,2026-02-11T03:47:01.729Z,38777,33781,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\hbrown,110330 +LEG-WS-053,2026-02-10T09:10:36.733Z,761,49855,dwm.exe,C:\Windows\System32\dwm.exe,ACME\hbrown,143465 +LEG-WS-053,2026-02-12T14:36:45.891Z,15672,42493,System,System,NT AUTHORITY\SYSTEM,63749 +LEG-WS-053,2026-02-11T05:02:32.338Z,19077,58979,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,370886 +LEG-WS-053,2026-02-18T04:41:57.806Z,36125,7714,services.exe,C:\Windows\System32\services.exe,ACME\hbrown,40587 +LEG-WS-053,2026-02-14T21:30:12.617Z,46024,41582,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\hbrown,216092 +LEG-WS-053,2026-02-12T08:45:17.307Z,16430,58612,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\hbrown,329044 +LEG-WS-053,2026-02-20T17:40:13.078Z,22225,185,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\hbrown,395834 +MKT-WS-054,2026-02-10T21:11:57.645Z,62980,11,svchost.exe,C:\Windows\System32\svchost.exe,ACME\idavis,149023 +MKT-WS-054,2026-02-19T03:43:36.209Z,18638,15766,explorer.exe,C:\Windows\System32\explorer.exe,ACME\idavis,90576 +MKT-WS-054,2026-02-18T22:26:43.538Z,29002,6445,chrome.exe,C:\Windows\System32\chrome.exe,ACME\idavis,310666 +MKT-WS-054,2026-02-16T03:36:44.340Z,10984,37480,msedge.exe,C:\Windows\System32\msedge.exe,ACME\idavis,341858 +MKT-WS-054,2026-02-11T19:31:15.130Z,63325,491,outlook.exe,C:\Windows\System32\outlook.exe,ACME\idavis,273697 +MKT-WS-054,2026-02-13T01:55:31.735Z,18513,42689,teams.exe,C:\Windows\System32\teams.exe,ACME\idavis,486520 +MKT-WS-054,2026-02-18T12:01:14.992Z,7405,52278,code.exe,C:\Windows\System32\code.exe,ACME\idavis,46358 +MKT-WS-054,2026-02-16T11:58:32.434Z,44282,24857,powershell.exe,C:\Windows\System32\powershell.exe,ACME\idavis,359563 +MKT-WS-054,2026-02-18T18:13:39.448Z,63117,26869,cmd.exe,C:\Windows\System32\cmd.exe,ACME\idavis,144158 +MKT-WS-054,2026-02-15T17:54:22.854Z,54551,3915,notepad.exe,C:\Windows\System32\notepad.exe,ACME\idavis,276921 +MKT-WS-054,2026-02-20T13:26:13.279Z,50346,21756,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\idavis,61138 +MKT-WS-054,2026-02-17T03:41:44.794Z,61995,58498,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,225337 +MKT-WS-054,2026-02-12T20:07:53.857Z,15346,8797,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\idavis,55427 +MKT-WS-054,2026-02-10T11:29:12.744Z,12932,16,lsass.exe,C:\Windows\System32\lsass.exe,ACME\idavis,472994 +MKT-WS-054,2026-02-15T08:41:40.504Z,48344,11,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,349534 +MKT-WS-054,2026-02-10T17:24:53.078Z,19384,5110,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\idavis,250496 +MKT-WS-054,2026-02-12T03:48:11.255Z,27030,10502,dwm.exe,C:\Windows\System32\dwm.exe,ACME\idavis,448255 +MKT-WS-054,2026-02-16T14:14:41.719Z,47899,22028,System,System,NT AUTHORITY\SYSTEM,65078 +MKT-WS-054,2026-02-11T16:09:25.310Z,47202,21484,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,489196 +MKT-WS-054,2026-02-15T21:30:55.846Z,57575,52271,services.exe,C:\Windows\System32\services.exe,ACME\idavis,277002 +MKT-WS-054,2026-02-18T16:37:07.118Z,23032,5583,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\idavis,123848 +MKT-WS-054,2026-02-15T17:15:20.416Z,20732,32413,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\idavis,419904 +MKT-WS-054,2026-02-13T06:43:04.381Z,7873,27059,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\idavis,408052 +EXEC-WS-055,2026-02-13T04:40:29.194Z,27005,17,svchost.exe,C:\Windows\System32\svchost.exe,ACME\fthompson,252085 +EXEC-WS-055,2026-02-12T07:30:58.920Z,7072,54042,explorer.exe,C:\Windows\System32\explorer.exe,ACME\fthompson,359966 +EXEC-WS-055,2026-02-10T22:40:30.503Z,59780,40717,chrome.exe,C:\Windows\System32\chrome.exe,ACME\fthompson,473781 +EXEC-WS-055,2026-02-10T22:42:42.395Z,6684,50959,msedge.exe,C:\Windows\System32\msedge.exe,ACME\fthompson,94219 +EXEC-WS-055,2026-02-17T02:13:14.814Z,54629,39679,outlook.exe,C:\Windows\System32\outlook.exe,ACME\fthompson,493803 +EXEC-WS-055,2026-02-18T09:05:29.863Z,22279,34271,teams.exe,C:\Windows\System32\teams.exe,ACME\fthompson,485318 +EXEC-WS-055,2026-02-19T07:30:51.476Z,56267,44278,code.exe,C:\Windows\System32\code.exe,ACME\fthompson,360236 +EXEC-WS-055,2026-02-11T08:36:39.503Z,8015,55088,powershell.exe,C:\Windows\System32\powershell.exe,ACME\fthompson,193772 +EXEC-WS-055,2026-02-19T20:55:30.064Z,34549,5422,cmd.exe,C:\Windows\System32\cmd.exe,ACME\fthompson,434421 +EXEC-WS-055,2026-02-11T07:26:15.317Z,62005,3585,notepad.exe,C:\Windows\System32\notepad.exe,ACME\fthompson,202340 +EXEC-WS-055,2026-02-12T07:49:48.449Z,3091,8727,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\fthompson,391903 +EXEC-WS-055,2026-02-19T14:29:57.052Z,24394,16482,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\fthompson,333342 +EXEC-WS-055,2026-02-20T10:55:00.422Z,51573,38900,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\fthompson,268081 +EXEC-WS-055,2026-02-16T12:02:45.184Z,10782,17,lsass.exe,C:\Windows\System32\lsass.exe,ACME\fthompson,52076 +EXEC-WS-055,2026-02-20T08:27:40.067Z,51518,9,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,283012 +EXEC-WS-055,2026-02-11T19:08:43.391Z,7550,55747,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\fthompson,128075 +EXEC-WS-055,2026-02-12T16:57:05.279Z,22159,28201,dwm.exe,C:\Windows\System32\dwm.exe,ACME\fthompson,43795 +EXEC-WS-055,2026-02-18T20:14:14.822Z,26256,32552,System,System,NT AUTHORITY\SYSTEM,208228 +EXEC-WS-055,2026-02-15T01:14:50.480Z,3315,9462,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,209188 +EXEC-WS-055,2026-02-12T05:01:05.589Z,36864,38308,services.exe,C:\Windows\System32\services.exe,ACME\fthompson,278202 +EXEC-WS-055,2026-02-16T02:41:15.623Z,58827,41577,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\fthompson,145020 +EXEC-WS-055,2026-02-15T16:08:45.760Z,57170,30805,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\fthompson,360901 +EXEC-WS-055,2026-02-20T07:34:55.141Z,51896,30238,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\fthompson,286908 +EXEC-WS-055,2026-02-12T09:41:22.056Z,44851,15143,spotify.exe,C:\Users\fthompson\AppData\Local\spotify\spotify.exe,ACME\fthompson,211046 +IT-WS-056,2026-02-18T02:47:34.476Z,43975,15,svchost.exe,C:\Windows\System32\svchost.exe,ACME\gwhite,183520 +IT-WS-056,2026-02-10T11:09:21.265Z,63986,5914,explorer.exe,C:\Windows\System32\explorer.exe,ACME\gwhite,429920 +IT-WS-056,2026-02-17T19:08:41.703Z,50094,48730,chrome.exe,C:\Windows\System32\chrome.exe,ACME\gwhite,249704 +IT-WS-056,2026-02-20T15:27:52.594Z,15343,209,msedge.exe,C:\Windows\System32\msedge.exe,ACME\gwhite,291873 +IT-WS-056,2026-02-20T17:27:54.908Z,2107,12208,outlook.exe,C:\Windows\System32\outlook.exe,ACME\gwhite,87326 +IT-WS-056,2026-02-12T13:53:33.948Z,61808,6284,teams.exe,C:\Windows\System32\teams.exe,ACME\gwhite,370282 +IT-WS-056,2026-02-13T10:30:58.960Z,5252,45794,code.exe,C:\Windows\System32\code.exe,ACME\gwhite,269026 +IT-WS-056,2026-02-16T21:16:02.461Z,11418,20484,powershell.exe,C:\Windows\System32\powershell.exe,ACME\gwhite,449686 +IT-WS-056,2026-02-18T00:51:37.304Z,6152,54560,cmd.exe,C:\Windows\System32\cmd.exe,ACME\gwhite,387930 +IT-WS-056,2026-02-13T04:30:26.797Z,15439,1470,notepad.exe,C:\Windows\System32\notepad.exe,ACME\gwhite,155984 +IT-WS-056,2026-02-16T05:46:16.836Z,20359,25121,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\gwhite,280220 +IT-WS-056,2026-02-13T10:10:04.802Z,41176,38681,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\gwhite,418570 +IT-WS-056,2026-02-14T15:10:28.798Z,21572,36971,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\gwhite,158479 +IT-WS-056,2026-02-18T06:10:57.441Z,38087,1,lsass.exe,C:\Windows\System32\lsass.exe,ACME\gwhite,488500 +IT-WS-056,2026-02-15T00:53:53.096Z,6092,19,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,276775 +IT-WS-056,2026-02-16T16:15:56.204Z,47292,47966,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\gwhite,130388 +IT-WS-056,2026-02-10T09:48:28.890Z,18237,23673,dwm.exe,C:\Windows\System32\dwm.exe,ACME\gwhite,136458 +IT-WS-056,2026-02-14T03:00:27.459Z,6915,40631,System,System,NT AUTHORITY\SYSTEM,350524 +IT-WS-056,2026-02-16T21:24:21.816Z,5778,13083,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,113471 +IT-WS-056,2026-02-18T10:00:52.292Z,1825,29151,services.exe,C:\Windows\System32\services.exe,ACME\gwhite,451347 +IT-WS-056,2026-02-15T07:10:37.510Z,25671,4722,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\gwhite,203972 +IT-WS-056,2026-02-14T08:56:13.877Z,46161,7064,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\gwhite,380259 +IT-WS-056,2026-02-17T23:25:46.047Z,26441,36561,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\gwhite,449187 +HR-WS-057,2026-02-17T08:36:01.114Z,45327,18,svchost.exe,C:\Windows\System32\svchost.exe,ACME\svc_sql,72057 +HR-WS-057,2026-02-20T11:28:09.546Z,52260,42106,explorer.exe,C:\Windows\System32\explorer.exe,ACME\svc_sql,489204 +HR-WS-057,2026-02-15T10:11:13.635Z,39376,34323,chrome.exe,C:\Windows\System32\chrome.exe,ACME\svc_sql,279384 +HR-WS-057,2026-02-15T18:48:55.344Z,20384,50456,msedge.exe,C:\Windows\System32\msedge.exe,ACME\svc_sql,437927 +HR-WS-057,2026-02-15T15:58:19.815Z,58122,4743,outlook.exe,C:\Windows\System32\outlook.exe,ACME\svc_sql,281283 +HR-WS-057,2026-02-14T10:17:56.291Z,25608,37723,teams.exe,C:\Windows\System32\teams.exe,ACME\svc_sql,74260 +HR-WS-057,2026-02-13T06:11:46.852Z,14932,51266,code.exe,C:\Windows\System32\code.exe,ACME\svc_sql,471196 +HR-WS-057,2026-02-13T17:38:31.376Z,16883,3753,powershell.exe,C:\Windows\System32\powershell.exe,ACME\svc_sql,231675 +HR-WS-057,2026-02-19T22:58:36.547Z,9418,55847,cmd.exe,C:\Windows\System32\cmd.exe,ACME\svc_sql,262362 +HR-WS-057,2026-02-12T02:46:56.673Z,49647,30325,notepad.exe,C:\Windows\System32\notepad.exe,ACME\svc_sql,415673 +HR-WS-057,2026-02-16T06:40:35.847Z,14677,51252,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\svc_sql,448481 +HR-WS-057,2026-02-20T09:15:55.675Z,12947,42706,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_sql,81091 +HR-WS-057,2026-02-20T10:59:46.219Z,1777,46444,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\svc_sql,40020 +HR-WS-057,2026-02-20T05:35:02.506Z,26849,1,lsass.exe,C:\Windows\System32\lsass.exe,ACME\svc_sql,143895 +HR-WS-057,2026-02-20T06:01:59.492Z,38387,10,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,251145 +HR-WS-057,2026-02-11T23:23:33.385Z,48308,46029,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\svc_sql,102588 +HR-WS-057,2026-02-16T20:01:05.129Z,4574,58707,dwm.exe,C:\Windows\System32\dwm.exe,ACME\svc_sql,33810 +HR-WS-057,2026-02-17T14:41:20.058Z,28862,3763,System,System,NT AUTHORITY\SYSTEM,205689 +HR-WS-057,2026-02-15T19:45:26.039Z,27853,54090,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,198103 +HR-WS-057,2026-02-14T21:28:07.208Z,16011,53692,services.exe,C:\Windows\System32\services.exe,ACME\svc_sql,53384 +HR-WS-057,2026-02-18T14:26:31.903Z,45815,35852,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\svc_sql,413472 +HR-WS-057,2026-02-12T13:51:55.509Z,36457,37846,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\svc_sql,182335 +HR-WS-057,2026-02-17T21:39:41.417Z,33759,16496,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\svc_sql,484765 +FIN-WS-058,2026-02-15T08:21:20.852Z,52966,10,svchost.exe,C:\Windows\System32\svchost.exe,ACME\jsmith,409450 +FIN-WS-058,2026-02-17T13:27:33.103Z,56751,24098,explorer.exe,C:\Windows\System32\explorer.exe,ACME\jsmith,47346 +FIN-WS-058,2026-02-18T17:00:26.070Z,54295,58832,chrome.exe,C:\Windows\System32\chrome.exe,ACME\jsmith,437075 +FIN-WS-058,2026-02-14T09:04:07.403Z,27397,20916,msedge.exe,C:\Windows\System32\msedge.exe,ACME\jsmith,182669 +FIN-WS-058,2026-02-19T18:42:39.045Z,25272,56260,outlook.exe,C:\Windows\System32\outlook.exe,ACME\jsmith,146913 +FIN-WS-058,2026-02-14T19:05:48.437Z,6708,44703,teams.exe,C:\Windows\System32\teams.exe,ACME\jsmith,208139 +FIN-WS-058,2026-02-15T02:23:15.426Z,25643,27598,code.exe,C:\Windows\System32\code.exe,ACME\jsmith,176750 +FIN-WS-058,2026-02-18T14:10:34.432Z,30140,50763,powershell.exe,C:\Windows\System32\powershell.exe,ACME\jsmith,59810 +FIN-WS-058,2026-02-18T21:32:41.842Z,63744,5548,cmd.exe,C:\Windows\System32\cmd.exe,ACME\jsmith,74606 +FIN-WS-058,2026-02-10T12:29:14.093Z,2654,32484,notepad.exe,C:\Windows\System32\notepad.exe,ACME\jsmith,274864 +FIN-WS-058,2026-02-10T12:25:23.501Z,45238,43166,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\jsmith,178022 +FIN-WS-058,2026-02-18T08:00:25.584Z,41125,34602,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\jsmith,101563 +FIN-WS-058,2026-02-16T06:25:10.532Z,50248,24166,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\jsmith,258204 +FIN-WS-058,2026-02-18T18:04:44.722Z,41462,19,lsass.exe,C:\Windows\System32\lsass.exe,ACME\jsmith,422553 +FIN-WS-058,2026-02-12T05:36:18.740Z,62241,14,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,379265 +FIN-WS-058,2026-02-11T18:18:43.096Z,57207,22321,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\jsmith,242420 +FIN-WS-058,2026-02-13T23:21:35.364Z,27692,5223,dwm.exe,C:\Windows\System32\dwm.exe,ACME\jsmith,374013 +FIN-WS-058,2026-02-20T14:55:43.028Z,46785,55589,System,System,NT AUTHORITY\SYSTEM,125618 +FIN-WS-058,2026-02-19T09:56:18.047Z,12390,22855,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,319476 +FIN-WS-058,2026-02-15T16:18:58.194Z,52404,41262,services.exe,C:\Windows\System32\services.exe,ACME\jsmith,136370 +FIN-WS-058,2026-02-19T02:07:09.797Z,35195,3191,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\jsmith,220066 +FIN-WS-058,2026-02-14T19:46:43.090Z,4397,33128,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\jsmith,399482 +FIN-WS-058,2026-02-16T22:55:33.787Z,43955,45398,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\jsmith,389221 +SLS-WS-059,2026-02-12T11:02:19.003Z,758,9,svchost.exe,C:\Windows\System32\svchost.exe,ACME\svc_sql,77078 +SLS-WS-059,2026-02-16T14:43:44.743Z,10654,38941,explorer.exe,C:\Windows\System32\explorer.exe,ACME\svc_sql,349906 +SLS-WS-059,2026-02-15T23:02:47.532Z,55210,32604,chrome.exe,C:\Windows\System32\chrome.exe,ACME\svc_sql,114739 +SLS-WS-059,2026-02-19T08:58:10.406Z,8670,54244,msedge.exe,C:\Windows\System32\msedge.exe,ACME\svc_sql,363275 +SLS-WS-059,2026-02-11T00:08:12.977Z,45315,319,outlook.exe,C:\Windows\System32\outlook.exe,ACME\svc_sql,127084 +SLS-WS-059,2026-02-16T09:44:05.243Z,14452,59149,teams.exe,C:\Windows\System32\teams.exe,ACME\svc_sql,297371 +SLS-WS-059,2026-02-10T10:24:01.155Z,54258,14335,code.exe,C:\Windows\System32\code.exe,ACME\svc_sql,8201 +SLS-WS-059,2026-02-10T19:51:35.491Z,18487,582,powershell.exe,C:\Windows\System32\powershell.exe,ACME\svc_sql,257918 +SLS-WS-059,2026-02-19T10:44:48.549Z,61199,53396,cmd.exe,C:\Windows\System32\cmd.exe,ACME\svc_sql,181743 +SLS-WS-059,2026-02-19T00:25:35.028Z,36416,20368,notepad.exe,C:\Windows\System32\notepad.exe,ACME\svc_sql,483301 +SLS-WS-059,2026-02-16T05:48:42.662Z,58652,43112,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\svc_sql,437656 +SLS-WS-059,2026-02-19T14:55:37.605Z,1141,7049,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_sql,23243 +SLS-WS-059,2026-02-14T20:09:46.396Z,57485,22326,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\svc_sql,386785 +SLS-WS-059,2026-02-19T00:31:22.479Z,126,5,lsass.exe,C:\Windows\System32\lsass.exe,ACME\svc_sql,237008 +SLS-WS-059,2026-02-10T17:19:08.229Z,36031,16,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,388647 +SLS-WS-059,2026-02-16T13:26:46.208Z,53633,52585,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\svc_sql,321202 +SLS-WS-059,2026-02-10T22:04:35.726Z,21393,40115,dwm.exe,C:\Windows\System32\dwm.exe,ACME\svc_sql,358691 +SLS-WS-059,2026-02-17T23:51:46.680Z,60201,30308,System,System,NT AUTHORITY\SYSTEM,296527 +SLS-WS-059,2026-02-14T09:43:39.396Z,554,17875,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,208081 +SLS-WS-059,2026-02-11T01:00:00.135Z,39725,56378,services.exe,C:\Windows\System32\services.exe,ACME\svc_sql,312912 +SLS-WS-059,2026-02-19T19:35:54.632Z,50084,37806,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\svc_sql,271733 +SLS-WS-059,2026-02-18T08:05:26.159Z,50237,12742,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\svc_sql,221212 +SLS-WS-059,2026-02-15T20:39:27.796Z,57830,17579,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\svc_sql,284550 +ENG-WS-060,2026-02-19T19:20:49.030Z,26875,19,svchost.exe,C:\Windows\System32\svchost.exe,ACME\bwilson,218425 +ENG-WS-060,2026-02-17T15:07:05.516Z,5311,27167,explorer.exe,C:\Windows\System32\explorer.exe,ACME\bwilson,204894 +ENG-WS-060,2026-02-17T07:56:31.972Z,62593,29268,chrome.exe,C:\Windows\System32\chrome.exe,ACME\bwilson,250068 +ENG-WS-060,2026-02-15T01:51:14.715Z,58129,4456,msedge.exe,C:\Windows\System32\msedge.exe,ACME\bwilson,372937 +ENG-WS-060,2026-02-12T06:18:14.593Z,30095,20958,outlook.exe,C:\Windows\System32\outlook.exe,ACME\bwilson,216531 +ENG-WS-060,2026-02-16T06:38:09.139Z,47014,44735,teams.exe,C:\Windows\System32\teams.exe,ACME\bwilson,157865 +ENG-WS-060,2026-02-18T13:08:49.880Z,61269,44225,code.exe,C:\Windows\System32\code.exe,ACME\bwilson,362225 +ENG-WS-060,2026-02-11T08:49:02.259Z,25313,40914,powershell.exe,C:\Windows\System32\powershell.exe,ACME\bwilson,449084 +ENG-WS-060,2026-02-15T23:03:49.647Z,17929,46454,cmd.exe,C:\Windows\System32\cmd.exe,ACME\bwilson,322996 +ENG-WS-060,2026-02-16T00:02:53.630Z,30386,35480,notepad.exe,C:\Windows\System32\notepad.exe,ACME\bwilson,47124 +ENG-WS-060,2026-02-13T02:11:43.770Z,44114,41815,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\bwilson,362865 +ENG-WS-060,2026-02-13T17:58:18.686Z,9160,16996,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\bwilson,86931 +ENG-WS-060,2026-02-18T04:03:39.152Z,52196,29240,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\bwilson,248652 +ENG-WS-060,2026-02-10T17:32:35.193Z,2423,12,lsass.exe,C:\Windows\System32\lsass.exe,ACME\bwilson,280585 +ENG-WS-060,2026-02-13T20:27:40.450Z,52832,16,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,178216 +ENG-WS-060,2026-02-14T19:29:21.021Z,2783,21209,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\bwilson,140229 +ENG-WS-060,2026-02-18T21:45:57.737Z,19452,55320,dwm.exe,C:\Windows\System32\dwm.exe,ACME\bwilson,43149 +ENG-WS-060,2026-02-20T06:07:02.238Z,35717,48780,System,System,NT AUTHORITY\SYSTEM,456583 +ENG-WS-060,2026-02-17T20:18:55.304Z,48981,57430,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,282387 +ENG-WS-060,2026-02-18T21:17:21.025Z,35021,43305,services.exe,C:\Windows\System32\services.exe,ACME\bwilson,203112 +ENG-WS-060,2026-02-20T08:13:59.951Z,29060,33955,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\bwilson,376218 +ENG-WS-060,2026-02-10T14:14:43.577Z,24217,56719,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\bwilson,119372 +ENG-WS-060,2026-02-11T12:13:27.964Z,58240,37716,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\bwilson,303537 +LEG-WS-061,2026-02-19T22:14:22.990Z,4178,15,svchost.exe,C:\Windows\System32\svchost.exe,ACME\gwhite,440332 +LEG-WS-061,2026-02-13T10:42:05.315Z,46977,5388,explorer.exe,C:\Windows\System32\explorer.exe,ACME\gwhite,89230 +LEG-WS-061,2026-02-12T20:11:23.967Z,1538,6734,chrome.exe,C:\Windows\System32\chrome.exe,ACME\gwhite,439489 +LEG-WS-061,2026-02-17T04:04:29.697Z,40956,53548,msedge.exe,C:\Windows\System32\msedge.exe,ACME\gwhite,283070 +LEG-WS-061,2026-02-12T12:56:54.902Z,56360,20393,outlook.exe,C:\Windows\System32\outlook.exe,ACME\gwhite,466254 +LEG-WS-061,2026-02-16T00:27:25.780Z,49064,11532,teams.exe,C:\Windows\System32\teams.exe,ACME\gwhite,401719 +LEG-WS-061,2026-02-20T01:54:07.990Z,60970,5025,code.exe,C:\Windows\System32\code.exe,ACME\gwhite,163900 +LEG-WS-061,2026-02-14T09:36:10.334Z,1191,19299,powershell.exe,C:\Windows\System32\powershell.exe,ACME\gwhite,164580 +LEG-WS-061,2026-02-14T21:21:58.508Z,31213,35027,cmd.exe,C:\Windows\System32\cmd.exe,ACME\gwhite,382526 +LEG-WS-061,2026-02-14T01:25:42.723Z,12946,52228,notepad.exe,C:\Windows\System32\notepad.exe,ACME\gwhite,231734 +LEG-WS-061,2026-02-12T06:14:27.106Z,60851,49421,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\gwhite,216270 +LEG-WS-061,2026-02-15T08:22:49.619Z,43563,10753,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\gwhite,120160 +LEG-WS-061,2026-02-15T13:23:15.671Z,15343,3207,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\gwhite,300113 +LEG-WS-061,2026-02-13T12:27:07.973Z,854,8,lsass.exe,C:\Windows\System32\lsass.exe,ACME\gwhite,408169 +LEG-WS-061,2026-02-14T11:11:31.174Z,19545,10,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,263173 +LEG-WS-061,2026-02-19T17:43:21.260Z,18667,52757,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\gwhite,400139 +LEG-WS-061,2026-02-10T23:42:36.542Z,11807,54829,dwm.exe,C:\Windows\System32\dwm.exe,ACME\gwhite,392855 +LEG-WS-061,2026-02-19T08:19:09.815Z,61811,2852,System,System,NT AUTHORITY\SYSTEM,312381 +LEG-WS-061,2026-02-20T07:34:42.665Z,21194,19493,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,203940 +LEG-WS-061,2026-02-11T09:25:51.823Z,36939,27532,services.exe,C:\Windows\System32\services.exe,ACME\gwhite,242456 +LEG-WS-061,2026-02-17T06:19:27.550Z,52671,47151,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\gwhite,31033 +LEG-WS-061,2026-02-15T06:03:48.168Z,51337,59253,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\gwhite,489638 +LEG-WS-061,2026-02-16T19:05:52.373Z,295,37645,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\gwhite,365447 +MKT-WS-062,2026-02-19T03:17:47.193Z,40131,17,svchost.exe,C:\Windows\System32\svchost.exe,ACME\idavis,432973 +MKT-WS-062,2026-02-13T05:43:57.519Z,60849,58488,explorer.exe,C:\Windows\System32\explorer.exe,ACME\idavis,234812 +MKT-WS-062,2026-02-15T04:20:34.394Z,27583,4566,chrome.exe,C:\Windows\System32\chrome.exe,ACME\idavis,313863 +MKT-WS-062,2026-02-11T13:31:32.047Z,37735,24494,msedge.exe,C:\Windows\System32\msedge.exe,ACME\idavis,395474 +MKT-WS-062,2026-02-17T18:41:16.232Z,2697,14215,outlook.exe,C:\Windows\System32\outlook.exe,ACME\idavis,185099 +MKT-WS-062,2026-02-20T10:23:05.712Z,26574,47881,teams.exe,C:\Windows\System32\teams.exe,ACME\idavis,168016 +MKT-WS-062,2026-02-14T11:27:31.951Z,31717,45524,code.exe,C:\Windows\System32\code.exe,ACME\idavis,37179 +MKT-WS-062,2026-02-16T20:27:34.194Z,3819,47693,powershell.exe,C:\Windows\System32\powershell.exe,ACME\idavis,18677 +MKT-WS-062,2026-02-10T14:27:37.175Z,9438,34616,cmd.exe,C:\Windows\System32\cmd.exe,ACME\idavis,238857 +MKT-WS-062,2026-02-16T11:35:00.517Z,49783,56513,notepad.exe,C:\Windows\System32\notepad.exe,ACME\idavis,369586 +MKT-WS-062,2026-02-10T13:49:34.579Z,22607,24585,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\idavis,422628 +MKT-WS-062,2026-02-13T00:12:11.236Z,3691,50245,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,144774 +MKT-WS-062,2026-02-14T18:36:33.156Z,4929,22669,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\idavis,442909 +MKT-WS-062,2026-02-17T09:58:47.460Z,54714,13,lsass.exe,C:\Windows\System32\lsass.exe,ACME\idavis,22657 +MKT-WS-062,2026-02-17T21:46:02.530Z,62038,12,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,470774 +MKT-WS-062,2026-02-14T05:14:24.171Z,10348,32663,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\idavis,82161 +MKT-WS-062,2026-02-19T18:16:51.204Z,52656,58052,dwm.exe,C:\Windows\System32\dwm.exe,ACME\idavis,99267 +MKT-WS-062,2026-02-11T12:24:12.033Z,1524,10832,System,System,NT AUTHORITY\SYSTEM,168437 +MKT-WS-062,2026-02-12T04:43:05.996Z,35533,37340,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,483920 +MKT-WS-062,2026-02-16T05:06:46.040Z,36889,14001,services.exe,C:\Windows\System32\services.exe,ACME\idavis,12498 +MKT-WS-062,2026-02-15T02:52:15.348Z,21099,12806,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\idavis,62642 +MKT-WS-062,2026-02-17T00:31:02.395Z,48877,14965,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\idavis,372672 +MKT-WS-062,2026-02-18T01:14:09.531Z,25817,46133,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\idavis,495249 +EXEC-WS-063,2026-02-11T22:09:51.495Z,415,7,svchost.exe,C:\Windows\System32\svchost.exe,ACME\bwilson,384715 +EXEC-WS-063,2026-02-20T13:05:39.320Z,18399,34140,explorer.exe,C:\Windows\System32\explorer.exe,ACME\bwilson,102367 +EXEC-WS-063,2026-02-11T19:11:42.278Z,54552,50960,chrome.exe,C:\Windows\System32\chrome.exe,ACME\bwilson,340789 +EXEC-WS-063,2026-02-19T22:51:59.299Z,30607,58503,msedge.exe,C:\Windows\System32\msedge.exe,ACME\bwilson,481572 +EXEC-WS-063,2026-02-15T10:52:59.840Z,24063,27654,outlook.exe,C:\Windows\System32\outlook.exe,ACME\bwilson,321539 +EXEC-WS-063,2026-02-20T01:52:47.761Z,60655,17858,teams.exe,C:\Windows\System32\teams.exe,ACME\bwilson,204430 +EXEC-WS-063,2026-02-13T17:17:47.769Z,56812,35836,code.exe,C:\Windows\System32\code.exe,ACME\bwilson,436580 +EXEC-WS-063,2026-02-11T13:11:21.331Z,12305,18272,powershell.exe,C:\Windows\System32\powershell.exe,ACME\bwilson,400739 +EXEC-WS-063,2026-02-13T06:43:46.608Z,19337,33218,cmd.exe,C:\Windows\System32\cmd.exe,ACME\bwilson,220475 +EXEC-WS-063,2026-02-16T15:04:50.978Z,42668,36901,notepad.exe,C:\Windows\System32\notepad.exe,ACME\bwilson,289547 +EXEC-WS-063,2026-02-19T13:52:38.039Z,47820,2410,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\bwilson,232396 +EXEC-WS-063,2026-02-19T09:03:21.344Z,23627,31311,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\bwilson,491399 +EXEC-WS-063,2026-02-18T14:17:33.060Z,18828,28753,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\bwilson,278716 +EXEC-WS-063,2026-02-16T01:17:10.065Z,22301,15,lsass.exe,C:\Windows\System32\lsass.exe,ACME\bwilson,207843 +EXEC-WS-063,2026-02-14T03:40:18.072Z,53943,10,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,407729 +EXEC-WS-063,2026-02-12T04:52:17.226Z,45682,38226,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\bwilson,73137 +EXEC-WS-063,2026-02-12T20:31:08.571Z,29489,37312,dwm.exe,C:\Windows\System32\dwm.exe,ACME\bwilson,203356 +EXEC-WS-063,2026-02-11T15:51:35.769Z,35368,44757,System,System,NT AUTHORITY\SYSTEM,343128 +EXEC-WS-063,2026-02-16T03:52:23.617Z,40530,43906,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,191449 +EXEC-WS-063,2026-02-13T22:28:04.753Z,6076,26216,services.exe,C:\Windows\System32\services.exe,ACME\bwilson,97277 +EXEC-WS-063,2026-02-15T10:38:00.868Z,43814,34268,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\bwilson,464950 +EXEC-WS-063,2026-02-11T10:57:59.250Z,13718,21480,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\bwilson,289784 +EXEC-WS-063,2026-02-15T20:34:25.455Z,30700,31592,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\bwilson,127131 +IT-WS-064,2026-02-13T07:09:43.674Z,4553,9,svchost.exe,C:\Windows\System32\svchost.exe,ACME\admin,474079 +IT-WS-064,2026-02-15T09:18:18.961Z,31455,43690,explorer.exe,C:\Windows\System32\explorer.exe,ACME\admin,158612 +IT-WS-064,2026-02-18T10:23:20.161Z,29259,26811,chrome.exe,C:\Windows\System32\chrome.exe,ACME\admin,307308 +IT-WS-064,2026-02-17T20:15:54.067Z,29314,43284,msedge.exe,C:\Windows\System32\msedge.exe,ACME\admin,10576 +IT-WS-064,2026-02-15T18:58:06.603Z,12765,4511,outlook.exe,C:\Windows\System32\outlook.exe,ACME\admin,231103 +IT-WS-064,2026-02-20T17:28:18.065Z,55973,50959,teams.exe,C:\Windows\System32\teams.exe,ACME\admin,431176 +IT-WS-064,2026-02-15T09:36:46.013Z,11834,32691,code.exe,C:\Windows\System32\code.exe,ACME\admin,299094 +IT-WS-064,2026-02-20T10:09:29.549Z,62290,27505,powershell.exe,C:\Windows\System32\powershell.exe,ACME\admin,459715 +IT-WS-064,2026-02-15T22:50:26.955Z,26957,43836,cmd.exe,C:\Windows\System32\cmd.exe,ACME\admin,417609 +IT-WS-064,2026-02-14T07:30:17.094Z,34305,44001,notepad.exe,C:\Windows\System32\notepad.exe,ACME\admin,351047 +IT-WS-064,2026-02-13T06:40:52.671Z,46929,51397,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\admin,483025 +IT-WS-064,2026-02-13T18:37:40.062Z,11550,700,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\admin,369548 +IT-WS-064,2026-02-18T21:07:45.201Z,2092,43660,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\admin,171106 +IT-WS-064,2026-02-20T09:58:34.428Z,30945,18,lsass.exe,C:\Windows\System32\lsass.exe,ACME\admin,212542 +IT-WS-064,2026-02-18T21:43:53.118Z,11597,5,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,213491 +IT-WS-064,2026-02-18T08:54:26.228Z,13812,17261,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\admin,174279 +IT-WS-064,2026-02-17T20:18:27.438Z,6171,34917,dwm.exe,C:\Windows\System32\dwm.exe,ACME\admin,450630 +IT-WS-064,2026-02-11T12:19:17.157Z,20939,50687,System,System,NT AUTHORITY\SYSTEM,123034 +IT-WS-064,2026-02-10T23:55:12.317Z,5729,8792,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,468777 +IT-WS-064,2026-02-19T06:39:47.488Z,4801,44445,services.exe,C:\Windows\System32\services.exe,ACME\admin,374470 +IT-WS-064,2026-02-16T21:09:23.568Z,34261,8315,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\admin,264112 +IT-WS-064,2026-02-15T09:04:15.167Z,42150,55265,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\admin,25611 +IT-WS-064,2026-02-18T23:42:42.977Z,34941,49168,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\admin,226556 +HR-WS-065,2026-02-19T22:10:53.345Z,20739,4,svchost.exe,C:\Windows\System32\svchost.exe,ACME\fthompson,133912 +HR-WS-065,2026-02-14T14:27:52.919Z,28719,55026,explorer.exe,C:\Windows\System32\explorer.exe,ACME\fthompson,28845 +HR-WS-065,2026-02-11T09:37:16.101Z,51436,51786,chrome.exe,C:\Windows\System32\chrome.exe,ACME\fthompson,8404 +HR-WS-065,2026-02-18T00:29:29.644Z,52519,50317,msedge.exe,C:\Windows\System32\msedge.exe,ACME\fthompson,298123 +HR-WS-065,2026-02-14T15:41:44.408Z,15627,40344,outlook.exe,C:\Windows\System32\outlook.exe,ACME\fthompson,20419 +HR-WS-065,2026-02-18T19:42:29.342Z,7113,58911,teams.exe,C:\Windows\System32\teams.exe,ACME\fthompson,176541 +HR-WS-065,2026-02-19T08:45:56.265Z,24321,45451,code.exe,C:\Windows\System32\code.exe,ACME\fthompson,97480 +HR-WS-065,2026-02-11T03:27:42.140Z,25505,20300,powershell.exe,C:\Windows\System32\powershell.exe,ACME\fthompson,71133 +HR-WS-065,2026-02-20T07:12:04.484Z,17333,25386,cmd.exe,C:\Windows\System32\cmd.exe,ACME\fthompson,197137 +HR-WS-065,2026-02-17T12:04:11.482Z,22044,10204,notepad.exe,C:\Windows\System32\notepad.exe,ACME\fthompson,491324 +HR-WS-065,2026-02-14T02:19:25.196Z,48305,39493,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\fthompson,255994 +HR-WS-065,2026-02-20T09:29:57.683Z,36881,29744,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\fthompson,490234 +HR-WS-065,2026-02-11T12:41:10.139Z,12922,20885,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\fthompson,285711 +HR-WS-065,2026-02-10T09:25:16.279Z,15729,5,lsass.exe,C:\Windows\System32\lsass.exe,ACME\fthompson,428962 +HR-WS-065,2026-02-18T15:31:39.784Z,11890,6,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,243834 +HR-WS-065,2026-02-11T04:38:07.729Z,47063,8248,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\fthompson,343127 +HR-WS-065,2026-02-10T20:32:52.671Z,5390,32899,dwm.exe,C:\Windows\System32\dwm.exe,ACME\fthompson,76063 +HR-WS-065,2026-02-13T05:30:19.688Z,5491,49036,System,System,NT AUTHORITY\SYSTEM,273045 +HR-WS-065,2026-02-17T19:57:14.625Z,3474,2188,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,280770 +HR-WS-065,2026-02-20T11:26:23.315Z,16747,29122,services.exe,C:\Windows\System32\services.exe,ACME\fthompson,166198 +HR-WS-065,2026-02-13T19:12:59.702Z,53547,56045,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\fthompson,235196 +HR-WS-065,2026-02-12T21:38:59.373Z,44955,31943,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\fthompson,361025 +HR-WS-065,2026-02-11T21:25:11.262Z,42383,14294,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\fthompson,95643 +FIN-WS-066,2026-02-11T15:50:54.725Z,4575,7,svchost.exe,C:\Windows\System32\svchost.exe,ACME\idavis,348332 +FIN-WS-066,2026-02-16T01:26:56.921Z,46376,4444,explorer.exe,C:\Windows\System32\explorer.exe,ACME\idavis,432675 +FIN-WS-066,2026-02-14T15:58:23.470Z,41687,15897,chrome.exe,C:\Windows\System32\chrome.exe,ACME\idavis,305188 +FIN-WS-066,2026-02-20T16:06:25.997Z,53300,47705,msedge.exe,C:\Windows\System32\msedge.exe,ACME\idavis,328011 +FIN-WS-066,2026-02-14T01:34:54.814Z,34016,16416,outlook.exe,C:\Windows\System32\outlook.exe,ACME\idavis,269965 +FIN-WS-066,2026-02-15T19:05:34.865Z,42117,750,teams.exe,C:\Windows\System32\teams.exe,ACME\idavis,205518 +FIN-WS-066,2026-02-18T19:14:45.642Z,39449,33913,code.exe,C:\Windows\System32\code.exe,ACME\idavis,261726 +FIN-WS-066,2026-02-16T08:24:26.012Z,13621,9157,powershell.exe,C:\Windows\System32\powershell.exe,ACME\idavis,410812 +FIN-WS-066,2026-02-13T14:54:35.831Z,29798,58594,cmd.exe,C:\Windows\System32\cmd.exe,ACME\idavis,144090 +FIN-WS-066,2026-02-14T18:44:52.471Z,49707,22048,notepad.exe,C:\Windows\System32\notepad.exe,ACME\idavis,249634 +FIN-WS-066,2026-02-17T01:57:09.012Z,7114,59128,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\idavis,245467 +FIN-WS-066,2026-02-11T19:54:32.049Z,3595,41068,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,480624 +FIN-WS-066,2026-02-19T04:19:48.019Z,19685,25814,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\idavis,276391 +FIN-WS-066,2026-02-16T04:59:27.913Z,18228,12,lsass.exe,C:\Windows\System32\lsass.exe,ACME\idavis,323189 +FIN-WS-066,2026-02-16T14:28:27.884Z,47696,1,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,200044 +FIN-WS-066,2026-02-10T15:01:26.931Z,26264,53401,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\idavis,156693 +FIN-WS-066,2026-02-12T09:36:32.949Z,30729,34470,dwm.exe,C:\Windows\System32\dwm.exe,ACME\idavis,29679 +FIN-WS-066,2026-02-11T20:45:39.950Z,53602,27407,System,System,NT AUTHORITY\SYSTEM,443821 +FIN-WS-066,2026-02-14T13:22:14.483Z,27997,19171,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,174877 +FIN-WS-066,2026-02-15T20:58:45.834Z,33001,58801,services.exe,C:\Windows\System32\services.exe,ACME\idavis,297875 +FIN-WS-066,2026-02-15T12:55:29.822Z,38782,36366,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\idavis,141318 +FIN-WS-066,2026-02-13T11:07:56.796Z,17657,49851,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\idavis,477036 +FIN-WS-066,2026-02-11T04:31:36.066Z,62938,15993,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\idavis,382638 +SLS-WS-067,2026-02-17T11:49:58.756Z,52311,5,svchost.exe,C:\Windows\System32\svchost.exe,ACME\dlee,23504 +SLS-WS-067,2026-02-15T02:37:58.726Z,38059,11421,explorer.exe,C:\Windows\System32\explorer.exe,ACME\dlee,308209 +SLS-WS-067,2026-02-16T05:46:48.321Z,16200,45023,chrome.exe,C:\Windows\System32\chrome.exe,ACME\dlee,24243 +SLS-WS-067,2026-02-11T07:00:43.376Z,38693,33895,msedge.exe,C:\Windows\System32\msedge.exe,ACME\dlee,42957 +SLS-WS-067,2026-02-10T17:30:54.633Z,9487,9169,outlook.exe,C:\Windows\System32\outlook.exe,ACME\dlee,395232 +SLS-WS-067,2026-02-17T03:57:22.276Z,4948,22463,teams.exe,C:\Windows\System32\teams.exe,ACME\dlee,73628 +SLS-WS-067,2026-02-15T14:57:08.563Z,42398,44976,code.exe,C:\Windows\System32\code.exe,ACME\dlee,42057 +SLS-WS-067,2026-02-15T15:24:25.280Z,13876,25218,powershell.exe,C:\Windows\System32\powershell.exe,ACME\dlee,17826 +SLS-WS-067,2026-02-19T02:03:15.516Z,21379,19148,cmd.exe,C:\Windows\System32\cmd.exe,ACME\dlee,375931 +SLS-WS-067,2026-02-13T18:58:40.784Z,25508,43957,notepad.exe,C:\Windows\System32\notepad.exe,ACME\dlee,121573 +SLS-WS-067,2026-02-10T08:18:20.361Z,32117,614,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\dlee,282789 +SLS-WS-067,2026-02-15T01:00:20.387Z,56435,59478,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\dlee,250640 +SLS-WS-067,2026-02-16T17:37:20.164Z,24465,5166,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\dlee,394713 +SLS-WS-067,2026-02-12T03:58:34.840Z,3130,7,lsass.exe,C:\Windows\System32\lsass.exe,ACME\dlee,381328 +SLS-WS-067,2026-02-15T06:57:09.268Z,28340,1,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,151462 +SLS-WS-067,2026-02-15T04:04:24.765Z,49916,57271,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\dlee,392646 +SLS-WS-067,2026-02-12T00:11:28.019Z,18904,15817,dwm.exe,C:\Windows\System32\dwm.exe,ACME\dlee,246234 +SLS-WS-067,2026-02-19T12:09:49.796Z,62695,16915,System,System,NT AUTHORITY\SYSTEM,163331 +SLS-WS-067,2026-02-20T17:08:06.455Z,27770,17936,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,115967 +SLS-WS-067,2026-02-10T23:27:58.440Z,5187,50985,services.exe,C:\Windows\System32\services.exe,ACME\dlee,423334 +SLS-WS-067,2026-02-11T19:04:54.723Z,64929,13787,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\dlee,122633 +SLS-WS-067,2026-02-18T18:00:35.318Z,35801,43616,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\dlee,426222 +SLS-WS-067,2026-02-14T23:38:51.593Z,16978,16005,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\dlee,228915 +ENG-WS-068,2026-02-18T02:44:50.367Z,15574,2,svchost.exe,C:\Windows\System32\svchost.exe,ACME\gwhite,288324 +ENG-WS-068,2026-02-12T03:30:19.998Z,22569,35362,explorer.exe,C:\Windows\System32\explorer.exe,ACME\gwhite,326591 +ENG-WS-068,2026-02-18T01:54:32.251Z,27810,58128,chrome.exe,C:\Windows\System32\chrome.exe,ACME\gwhite,400559 +ENG-WS-068,2026-02-20T07:56:28.070Z,22465,39586,msedge.exe,C:\Windows\System32\msedge.exe,ACME\gwhite,220997 +ENG-WS-068,2026-02-11T18:38:56.527Z,35851,9833,outlook.exe,C:\Windows\System32\outlook.exe,ACME\gwhite,109044 +ENG-WS-068,2026-02-11T18:02:51.981Z,6206,59838,teams.exe,C:\Windows\System32\teams.exe,ACME\gwhite,349834 +ENG-WS-068,2026-02-11T21:18:50.481Z,57723,5338,code.exe,C:\Windows\System32\code.exe,ACME\gwhite,192750 +ENG-WS-068,2026-02-15T13:27:18.082Z,61838,32960,powershell.exe,C:\Windows\System32\powershell.exe,ACME\gwhite,273495 +ENG-WS-068,2026-02-16T18:11:14.674Z,12908,48298,cmd.exe,C:\Windows\System32\cmd.exe,ACME\gwhite,362426 +ENG-WS-068,2026-02-15T07:17:47.331Z,13600,1473,notepad.exe,C:\Windows\System32\notepad.exe,ACME\gwhite,63669 +ENG-WS-068,2026-02-11T15:54:05.886Z,17613,7378,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\gwhite,407637 +ENG-WS-068,2026-02-15T04:50:31.320Z,50455,21716,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\gwhite,348616 +ENG-WS-068,2026-02-19T17:45:00.641Z,27137,29626,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\gwhite,240763 +ENG-WS-068,2026-02-17T15:51:56.814Z,32751,20,lsass.exe,C:\Windows\System32\lsass.exe,ACME\gwhite,384016 +ENG-WS-068,2026-02-19T02:24:44.021Z,63839,6,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,158378 +ENG-WS-068,2026-02-17T18:13:10.202Z,16723,58928,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\gwhite,181140 +ENG-WS-068,2026-02-18T22:25:50.089Z,19789,48342,dwm.exe,C:\Windows\System32\dwm.exe,ACME\gwhite,246860 +ENG-WS-068,2026-02-16T14:37:20.450Z,21456,42966,System,System,NT AUTHORITY\SYSTEM,230719 +ENG-WS-068,2026-02-12T17:38:22.031Z,4648,6856,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,58787 +ENG-WS-068,2026-02-18T04:40:58.132Z,24601,53070,services.exe,C:\Windows\System32\services.exe,ACME\gwhite,218716 +ENG-WS-068,2026-02-19T00:27:21.839Z,52555,34599,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\gwhite,111591 +ENG-WS-068,2026-02-10T18:22:23.243Z,7775,44256,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\gwhite,157514 +ENG-WS-068,2026-02-18T17:04:54.010Z,10409,25475,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\gwhite,167377 +LEG-WS-069,2026-02-16T06:58:22.042Z,28231,8,svchost.exe,C:\Windows\System32\svchost.exe,ACME\svc_sql,147697 +LEG-WS-069,2026-02-15T20:04:49.114Z,63434,28111,explorer.exe,C:\Windows\System32\explorer.exe,ACME\svc_sql,195630 +LEG-WS-069,2026-02-17T17:11:11.019Z,33755,14106,chrome.exe,C:\Windows\System32\chrome.exe,ACME\svc_sql,424363 +LEG-WS-069,2026-02-16T07:08:05.396Z,923,52549,msedge.exe,C:\Windows\System32\msedge.exe,ACME\svc_sql,101884 +LEG-WS-069,2026-02-16T02:41:50.278Z,56257,22788,outlook.exe,C:\Windows\System32\outlook.exe,ACME\svc_sql,181882 +LEG-WS-069,2026-02-15T07:03:29.270Z,33092,46762,teams.exe,C:\Windows\System32\teams.exe,ACME\svc_sql,199211 +LEG-WS-069,2026-02-12T06:51:40.967Z,12578,44747,code.exe,C:\Windows\System32\code.exe,ACME\svc_sql,421963 +LEG-WS-069,2026-02-10T16:36:58.639Z,31134,23035,powershell.exe,C:\Windows\System32\powershell.exe,ACME\svc_sql,99230 +LEG-WS-069,2026-02-11T01:44:10.733Z,32270,41639,cmd.exe,C:\Windows\System32\cmd.exe,ACME\svc_sql,82086 +LEG-WS-069,2026-02-12T06:03:52.313Z,25584,20134,notepad.exe,C:\Windows\System32\notepad.exe,ACME\svc_sql,392091 +LEG-WS-069,2026-02-12T18:49:58.385Z,538,11437,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\svc_sql,410621 +LEG-WS-069,2026-02-12T00:35:35.457Z,28861,53452,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_sql,448820 +LEG-WS-069,2026-02-16T00:50:16.486Z,33935,55261,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\svc_sql,257198 +LEG-WS-069,2026-02-20T11:57:52.963Z,16445,14,lsass.exe,C:\Windows\System32\lsass.exe,ACME\svc_sql,490589 +LEG-WS-069,2026-02-16T06:16:36.665Z,48425,10,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,259830 +LEG-WS-069,2026-02-17T02:09:51.801Z,2843,24922,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\svc_sql,433208 +LEG-WS-069,2026-02-17T17:36:10.008Z,20605,38032,dwm.exe,C:\Windows\System32\dwm.exe,ACME\svc_sql,2408 +LEG-WS-069,2026-02-17T10:49:04.533Z,47819,48199,System,System,NT AUTHORITY\SYSTEM,62365 +LEG-WS-069,2026-02-14T13:10:22.745Z,37009,53948,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,331635 +LEG-WS-069,2026-02-12T15:09:26.620Z,53665,17604,services.exe,C:\Windows\System32\services.exe,ACME\svc_sql,348149 +LEG-WS-069,2026-02-13T22:22:22.928Z,46710,15807,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\svc_sql,76283 +LEG-WS-069,2026-02-13T19:19:39.233Z,12480,38186,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\svc_sql,14980 +LEG-WS-069,2026-02-19T14:25:35.830Z,11382,4893,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\svc_sql,452982 +LEG-WS-069,2026-02-15T05:53:51.386Z,54988,2993,spotify.exe,C:\Users\svc_sql\AppData\Local\spotify\spotify.exe,ACME\svc_sql,52162 +MKT-WS-070,2026-02-12T04:41:43.211Z,35330,5,svchost.exe,C:\Windows\System32\svchost.exe,ACME\jsmith,29890 +MKT-WS-070,2026-02-11T16:48:51.269Z,23623,15552,explorer.exe,C:\Windows\System32\explorer.exe,ACME\jsmith,88480 +MKT-WS-070,2026-02-16T10:36:33.625Z,2886,35606,chrome.exe,C:\Windows\System32\chrome.exe,ACME\jsmith,302941 +MKT-WS-070,2026-02-14T07:52:13.030Z,47187,23651,msedge.exe,C:\Windows\System32\msedge.exe,ACME\jsmith,402805 +MKT-WS-070,2026-02-16T06:48:42.628Z,3330,34777,outlook.exe,C:\Windows\System32\outlook.exe,ACME\jsmith,16920 +MKT-WS-070,2026-02-14T07:44:35.104Z,19201,27931,teams.exe,C:\Windows\System32\teams.exe,ACME\jsmith,446296 +MKT-WS-070,2026-02-19T00:56:56.317Z,29393,7737,code.exe,C:\Windows\System32\code.exe,ACME\jsmith,9154 +MKT-WS-070,2026-02-13T07:30:07.632Z,56755,6139,powershell.exe,C:\Windows\System32\powershell.exe,ACME\jsmith,453657 +MKT-WS-070,2026-02-13T01:53:24.820Z,35262,11985,cmd.exe,C:\Windows\System32\cmd.exe,ACME\jsmith,245229 +MKT-WS-070,2026-02-19T16:13:54.953Z,54130,23197,notepad.exe,C:\Windows\System32\notepad.exe,ACME\jsmith,322857 +MKT-WS-070,2026-02-18T08:14:30.765Z,47351,6628,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\jsmith,475274 +MKT-WS-070,2026-02-16T05:55:55.486Z,32021,12647,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\jsmith,415497 +MKT-WS-070,2026-02-13T17:02:55.732Z,25801,27540,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\jsmith,387014 +MKT-WS-070,2026-02-15T20:42:47.807Z,26503,17,lsass.exe,C:\Windows\System32\lsass.exe,ACME\jsmith,382524 +MKT-WS-070,2026-02-15T03:30:43.447Z,33042,12,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,226262 +MKT-WS-070,2026-02-12T05:42:08.226Z,51142,2638,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\jsmith,498127 +MKT-WS-070,2026-02-11T14:16:47.304Z,60373,13001,dwm.exe,C:\Windows\System32\dwm.exe,ACME\jsmith,11455 +MKT-WS-070,2026-02-20T14:50:07.299Z,15738,54439,System,System,NT AUTHORITY\SYSTEM,28917 +MKT-WS-070,2026-02-13T12:20:35.570Z,10174,45235,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,457372 +MKT-WS-070,2026-02-14T10:28:48.525Z,22399,1123,services.exe,C:\Windows\System32\services.exe,ACME\jsmith,105484 +MKT-WS-070,2026-02-15T03:45:15.407Z,8399,48727,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\jsmith,438959 +MKT-WS-070,2026-02-20T01:17:37.079Z,62438,4084,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\jsmith,365402 +MKT-WS-070,2026-02-11T22:37:14.757Z,44160,23002,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\jsmith,476875 +EXEC-WS-071,2026-02-16T16:06:15.195Z,43421,14,svchost.exe,C:\Windows\System32\svchost.exe,ACME\agarcia,135851 +EXEC-WS-071,2026-02-16T22:55:38.784Z,51082,50337,explorer.exe,C:\Windows\System32\explorer.exe,ACME\agarcia,165631 +EXEC-WS-071,2026-02-13T10:56:42.381Z,28363,58907,chrome.exe,C:\Windows\System32\chrome.exe,ACME\agarcia,282493 +EXEC-WS-071,2026-02-15T04:42:08.160Z,27342,24931,msedge.exe,C:\Windows\System32\msedge.exe,ACME\agarcia,406429 +EXEC-WS-071,2026-02-17T23:00:31.353Z,41746,43362,outlook.exe,C:\Windows\System32\outlook.exe,ACME\agarcia,134372 +EXEC-WS-071,2026-02-19T06:13:45.609Z,27083,40340,teams.exe,C:\Windows\System32\teams.exe,ACME\agarcia,63994 +EXEC-WS-071,2026-02-17T18:34:15.693Z,18322,10967,code.exe,C:\Windows\System32\code.exe,ACME\agarcia,160938 +EXEC-WS-071,2026-02-10T09:15:42.380Z,647,1236,powershell.exe,C:\Windows\System32\powershell.exe,ACME\agarcia,474979 +EXEC-WS-071,2026-02-19T01:13:21.739Z,54848,985,cmd.exe,C:\Windows\System32\cmd.exe,ACME\agarcia,58559 +EXEC-WS-071,2026-02-20T03:11:40.168Z,13975,49910,notepad.exe,C:\Windows\System32\notepad.exe,ACME\agarcia,233597 +EXEC-WS-071,2026-02-14T23:50:11.807Z,17342,12641,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\agarcia,143221 +EXEC-WS-071,2026-02-11T08:24:18.807Z,32153,48050,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\agarcia,398395 +EXEC-WS-071,2026-02-15T14:54:36.411Z,31210,15845,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\agarcia,94500 +EXEC-WS-071,2026-02-11T20:49:02.976Z,12583,6,lsass.exe,C:\Windows\System32\lsass.exe,ACME\agarcia,445138 +EXEC-WS-071,2026-02-17T12:27:04.033Z,47517,18,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,118046 +EXEC-WS-071,2026-02-18T11:05:54.279Z,31615,28116,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\agarcia,474753 +EXEC-WS-071,2026-02-17T22:34:44.620Z,10876,42187,dwm.exe,C:\Windows\System32\dwm.exe,ACME\agarcia,457639 +EXEC-WS-071,2026-02-12T18:49:40.667Z,13802,47330,System,System,NT AUTHORITY\SYSTEM,173778 +EXEC-WS-071,2026-02-13T21:34:40.628Z,3010,7676,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,63208 +EXEC-WS-071,2026-02-14T13:13:02.147Z,30948,32462,services.exe,C:\Windows\System32\services.exe,ACME\agarcia,243150 +EXEC-WS-071,2026-02-20T17:40:20.926Z,35424,27726,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\agarcia,230185 +EXEC-WS-071,2026-02-17T14:34:42.319Z,5245,2872,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\agarcia,27481 +EXEC-WS-071,2026-02-19T13:47:48.158Z,2442,1345,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\agarcia,314787 +EXEC-WS-071,2026-02-15T20:25:03.857Z,34983,10761,utorrent.exe,C:\Users\agarcia\AppData\Local\utorrent\utorrent.exe,ACME\agarcia,387704 +IT-WS-072,2026-02-16T16:05:51.296Z,17672,16,svchost.exe,C:\Windows\System32\svchost.exe,ACME\svc_backup,126189 +IT-WS-072,2026-02-16T20:22:26.493Z,40938,14206,explorer.exe,C:\Windows\System32\explorer.exe,ACME\svc_backup,109086 +IT-WS-072,2026-02-15T15:03:01.631Z,62822,19851,chrome.exe,C:\Windows\System32\chrome.exe,ACME\svc_backup,304008 +IT-WS-072,2026-02-10T22:01:23.204Z,5686,18789,msedge.exe,C:\Windows\System32\msedge.exe,ACME\svc_backup,207992 +IT-WS-072,2026-02-17T00:32:11.376Z,63704,38690,outlook.exe,C:\Windows\System32\outlook.exe,ACME\svc_backup,204925 +IT-WS-072,2026-02-12T16:19:23.495Z,63262,58779,teams.exe,C:\Windows\System32\teams.exe,ACME\svc_backup,168812 +IT-WS-072,2026-02-13T22:54:37.553Z,63679,45930,code.exe,C:\Windows\System32\code.exe,ACME\svc_backup,185039 +IT-WS-072,2026-02-10T19:57:37.257Z,44407,34552,powershell.exe,C:\Windows\System32\powershell.exe,ACME\svc_backup,10914 +IT-WS-072,2026-02-14T04:38:03.462Z,33089,31617,cmd.exe,C:\Windows\System32\cmd.exe,ACME\svc_backup,405944 +IT-WS-072,2026-02-13T18:07:24.880Z,22281,30307,notepad.exe,C:\Windows\System32\notepad.exe,ACME\svc_backup,497489 +IT-WS-072,2026-02-11T11:24:42.596Z,45293,13992,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\svc_backup,488074 +IT-WS-072,2026-02-17T23:50:58.380Z,50059,14738,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_backup,290202 +IT-WS-072,2026-02-15T10:48:03.762Z,9000,12720,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\svc_backup,349831 +IT-WS-072,2026-02-13T06:13:04.388Z,48727,18,lsass.exe,C:\Windows\System32\lsass.exe,ACME\svc_backup,135305 +IT-WS-072,2026-02-20T01:12:22.161Z,25538,18,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,168630 +IT-WS-072,2026-02-17T06:54:22.356Z,1183,7007,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\svc_backup,331856 +IT-WS-072,2026-02-12T21:08:17.649Z,35599,5843,dwm.exe,C:\Windows\System32\dwm.exe,ACME\svc_backup,193369 +IT-WS-072,2026-02-17T09:04:50.524Z,46952,59464,System,System,NT AUTHORITY\SYSTEM,448038 +IT-WS-072,2026-02-20T03:14:53.376Z,7252,36089,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,93805 +IT-WS-072,2026-02-12T00:12:35.608Z,40479,14896,services.exe,C:\Windows\System32\services.exe,ACME\svc_backup,212284 +IT-WS-072,2026-02-20T15:42:05.903Z,48587,18438,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\svc_backup,238825 +IT-WS-072,2026-02-15T05:29:02.457Z,3110,4407,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\svc_backup,425652 +IT-WS-072,2026-02-12T22:24:03.328Z,62965,29512,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\svc_backup,441934 +HR-WS-073,2026-02-10T19:48:20.992Z,2591,3,svchost.exe,C:\Windows\System32\svchost.exe,ACME\admin,190476 +HR-WS-073,2026-02-10T19:03:19.786Z,12721,26421,explorer.exe,C:\Windows\System32\explorer.exe,ACME\admin,155436 +HR-WS-073,2026-02-18T22:33:21.475Z,51869,47566,chrome.exe,C:\Windows\System32\chrome.exe,ACME\admin,256032 +HR-WS-073,2026-02-15T06:14:43.479Z,5534,12148,msedge.exe,C:\Windows\System32\msedge.exe,ACME\admin,123159 +HR-WS-073,2026-02-10T17:30:58.887Z,5278,41192,outlook.exe,C:\Windows\System32\outlook.exe,ACME\admin,82704 +HR-WS-073,2026-02-12T01:15:25.578Z,57667,25532,teams.exe,C:\Windows\System32\teams.exe,ACME\admin,340775 +HR-WS-073,2026-02-13T14:23:15.380Z,31589,30762,code.exe,C:\Windows\System32\code.exe,ACME\admin,446310 +HR-WS-073,2026-02-16T13:28:00.053Z,50863,47764,powershell.exe,C:\Windows\System32\powershell.exe,ACME\admin,369924 +HR-WS-073,2026-02-10T08:03:57.814Z,40348,49220,cmd.exe,C:\Windows\System32\cmd.exe,ACME\admin,365502 +HR-WS-073,2026-02-11T12:57:25.867Z,1544,19805,notepad.exe,C:\Windows\System32\notepad.exe,ACME\admin,228384 +HR-WS-073,2026-02-14T09:03:07.449Z,40485,53889,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\admin,321219 +HR-WS-073,2026-02-14T08:03:20.440Z,63646,23654,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\admin,453934 +HR-WS-073,2026-02-11T05:14:09.279Z,55201,6675,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\admin,387435 +HR-WS-073,2026-02-12T06:43:03.816Z,56444,18,lsass.exe,C:\Windows\System32\lsass.exe,ACME\admin,303645 +HR-WS-073,2026-02-17T16:32:09.276Z,8597,3,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,253109 +HR-WS-073,2026-02-14T19:41:35.129Z,20626,33042,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\admin,116039 +HR-WS-073,2026-02-18T18:13:21.625Z,23761,36937,dwm.exe,C:\Windows\System32\dwm.exe,ACME\admin,12747 +HR-WS-073,2026-02-13T16:26:38.008Z,38449,32412,System,System,NT AUTHORITY\SYSTEM,104937 +HR-WS-073,2026-02-12T09:33:25.148Z,45389,24834,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,138309 +HR-WS-073,2026-02-20T13:29:00.938Z,37996,56779,services.exe,C:\Windows\System32\services.exe,ACME\admin,71612 +HR-WS-073,2026-02-16T11:56:07.589Z,32972,41353,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\admin,304516 +HR-WS-073,2026-02-17T11:30:39.052Z,6289,33917,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\admin,63979 +HR-WS-073,2026-02-13T15:56:28.136Z,43305,31220,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\admin,207956 +FIN-WS-074,2026-02-17T04:53:44.060Z,16506,11,svchost.exe,C:\Windows\System32\svchost.exe,ACME\cjohnson,419713 +FIN-WS-074,2026-02-20T02:04:21.936Z,38862,25137,explorer.exe,C:\Windows\System32\explorer.exe,ACME\cjohnson,350988 +FIN-WS-074,2026-02-12T03:08:08.958Z,44931,11213,chrome.exe,C:\Windows\System32\chrome.exe,ACME\cjohnson,219152 +FIN-WS-074,2026-02-18T07:57:15.791Z,53132,54320,msedge.exe,C:\Windows\System32\msedge.exe,ACME\cjohnson,468092 +FIN-WS-074,2026-02-17T06:05:27.864Z,49910,37677,outlook.exe,C:\Windows\System32\outlook.exe,ACME\cjohnson,178407 +FIN-WS-074,2026-02-15T20:10:37.898Z,50808,22587,teams.exe,C:\Windows\System32\teams.exe,ACME\cjohnson,127168 +FIN-WS-074,2026-02-12T09:32:15.113Z,3669,810,code.exe,C:\Windows\System32\code.exe,ACME\cjohnson,437806 +FIN-WS-074,2026-02-10T22:45:55.117Z,23017,35142,powershell.exe,C:\Windows\System32\powershell.exe,ACME\cjohnson,369515 +FIN-WS-074,2026-02-18T10:16:27.230Z,46497,36261,cmd.exe,C:\Windows\System32\cmd.exe,ACME\cjohnson,194087 +FIN-WS-074,2026-02-20T14:27:34.926Z,26688,41151,notepad.exe,C:\Windows\System32\notepad.exe,ACME\cjohnson,129795 +FIN-WS-074,2026-02-13T08:27:40.662Z,16743,48890,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\cjohnson,51811 +FIN-WS-074,2026-02-19T07:34:07.175Z,47222,56247,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\cjohnson,266815 +FIN-WS-074,2026-02-19T02:42:11.547Z,34030,22905,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\cjohnson,153204 +FIN-WS-074,2026-02-19T20:42:16.783Z,64391,18,lsass.exe,C:\Windows\System32\lsass.exe,ACME\cjohnson,126851 +FIN-WS-074,2026-02-19T15:24:49.150Z,60478,3,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,438170 +FIN-WS-074,2026-02-12T06:36:21.349Z,49515,59285,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\cjohnson,381002 +FIN-WS-074,2026-02-20T01:56:44.225Z,64884,10820,dwm.exe,C:\Windows\System32\dwm.exe,ACME\cjohnson,444395 +FIN-WS-074,2026-02-19T19:01:09.203Z,61750,53191,System,System,NT AUTHORITY\SYSTEM,266352 +FIN-WS-074,2026-02-13T08:08:20.610Z,51440,13843,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,261438 +FIN-WS-074,2026-02-17T11:23:49.749Z,38303,54843,services.exe,C:\Windows\System32\services.exe,ACME\cjohnson,425693 +FIN-WS-074,2026-02-20T02:56:10.078Z,12414,9123,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\cjohnson,264187 +FIN-WS-074,2026-02-11T06:14:00.908Z,5277,36597,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\cjohnson,348180 +FIN-WS-074,2026-02-19T16:39:03.410Z,31152,5737,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\cjohnson,258489 +SLS-WS-075,2026-02-12T16:28:36.742Z,7912,1,svchost.exe,C:\Windows\System32\svchost.exe,ACME\agarcia,23809 +SLS-WS-075,2026-02-20T09:04:01.969Z,11536,3591,explorer.exe,C:\Windows\System32\explorer.exe,ACME\agarcia,258679 +SLS-WS-075,2026-02-14T21:11:18.442Z,57229,14437,chrome.exe,C:\Windows\System32\chrome.exe,ACME\agarcia,262174 +SLS-WS-075,2026-02-15T01:45:03.423Z,20475,21028,msedge.exe,C:\Windows\System32\msedge.exe,ACME\agarcia,138236 +SLS-WS-075,2026-02-16T20:39:25.884Z,7013,31146,outlook.exe,C:\Windows\System32\outlook.exe,ACME\agarcia,35811 +SLS-WS-075,2026-02-16T23:42:32.668Z,32997,17925,teams.exe,C:\Windows\System32\teams.exe,ACME\agarcia,4046 +SLS-WS-075,2026-02-10T23:32:32.549Z,1277,52030,code.exe,C:\Windows\System32\code.exe,ACME\agarcia,395113 +SLS-WS-075,2026-02-18T22:32:27.459Z,1106,57540,powershell.exe,C:\Windows\System32\powershell.exe,ACME\agarcia,120384 +SLS-WS-075,2026-02-19T00:22:43.803Z,15749,3965,cmd.exe,C:\Windows\System32\cmd.exe,ACME\agarcia,361340 +SLS-WS-075,2026-02-17T20:21:33.267Z,41924,11143,notepad.exe,C:\Windows\System32\notepad.exe,ACME\agarcia,145877 +SLS-WS-075,2026-02-16T11:11:31.439Z,54137,35984,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\agarcia,134856 +SLS-WS-075,2026-02-11T03:55:20.231Z,60111,626,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\agarcia,381993 +SLS-WS-075,2026-02-12T21:48:31.975Z,53902,58901,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\agarcia,413754 +SLS-WS-075,2026-02-12T00:24:58.447Z,50615,19,lsass.exe,C:\Windows\System32\lsass.exe,ACME\agarcia,187264 +SLS-WS-075,2026-02-19T08:06:04.805Z,43386,18,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,462315 +SLS-WS-075,2026-02-11T21:29:56.025Z,5212,38125,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\agarcia,403604 +SLS-WS-075,2026-02-13T02:38:30.180Z,32345,9750,dwm.exe,C:\Windows\System32\dwm.exe,ACME\agarcia,131993 +SLS-WS-075,2026-02-17T17:40:11.735Z,42377,29479,System,System,NT AUTHORITY\SYSTEM,499397 +SLS-WS-075,2026-02-14T06:21:16.116Z,19039,21222,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,272452 +SLS-WS-075,2026-02-19T12:28:04.549Z,48035,48704,services.exe,C:\Windows\System32\services.exe,ACME\agarcia,163684 +SLS-WS-075,2026-02-16T07:21:08.721Z,28036,36857,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\agarcia,52749 +SLS-WS-075,2026-02-17T12:04:12.702Z,24564,59333,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\agarcia,286937 +SLS-WS-075,2026-02-12T09:00:57.449Z,48881,54400,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\agarcia,479229 +DC-01,2026-02-13T13:23:32.191Z,40800,15,svchost.exe,C:\Windows\System32\svchost.exe,ACME\emartinez,464474 +DC-01,2026-02-20T08:40:27.698Z,3016,41357,explorer.exe,C:\Windows\System32\explorer.exe,ACME\emartinez,55690 +DC-01,2026-02-15T03:20:47.293Z,19203,33873,chrome.exe,C:\Windows\System32\chrome.exe,ACME\emartinez,361539 +DC-01,2026-02-12T06:16:50.359Z,7879,39635,msedge.exe,C:\Windows\System32\msedge.exe,ACME\emartinez,354027 +DC-01,2026-02-10T11:44:01.205Z,40009,49506,outlook.exe,C:\Windows\System32\outlook.exe,ACME\emartinez,268884 +DC-01,2026-02-12T15:41:42.331Z,51765,14795,teams.exe,C:\Windows\System32\teams.exe,ACME\emartinez,274792 +DC-01,2026-02-19T02:42:15.795Z,58296,8705,code.exe,C:\Windows\System32\code.exe,ACME\emartinez,198090 +DC-01,2026-02-11T14:19:19.969Z,22876,27760,powershell.exe,C:\Windows\System32\powershell.exe,ACME\emartinez,247494 +DC-01,2026-02-18T16:49:15.039Z,35141,41719,cmd.exe,C:\Windows\System32\cmd.exe,ACME\emartinez,305451 +DC-01,2026-02-19T13:43:39.549Z,24911,35715,notepad.exe,C:\Windows\System32\notepad.exe,ACME\emartinez,72125 +DC-01,2026-02-14T14:51:25.979Z,24806,26521,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\emartinez,324494 +DC-01,2026-02-14T08:15:31.572Z,38128,7845,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\emartinez,444476 +DC-01,2026-02-16T05:37:55.976Z,37721,55406,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\emartinez,83771 +DC-01,2026-02-19T09:19:23.304Z,47856,15,lsass.exe,C:\Windows\System32\lsass.exe,ACME\emartinez,354423 +DC-01,2026-02-18T18:57:22.886Z,1857,17,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,223494 +DC-01,2026-02-14T06:12:26.798Z,45715,51529,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\emartinez,240073 +DC-01,2026-02-18T13:48:48.466Z,60408,59417,dwm.exe,C:\Windows\System32\dwm.exe,ACME\emartinez,486684 +DC-01,2026-02-14T18:03:16.939Z,35425,48159,System,System,NT AUTHORITY\SYSTEM,441359 +DC-01,2026-02-14T22:34:44.447Z,39234,29585,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,168667 +DC-01,2026-02-19T19:24:42.138Z,39451,59646,services.exe,C:\Windows\System32\services.exe,ACME\emartinez,258157 +DC-01,2026-02-12T13:29:06.864Z,28521,31714,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\emartinez,349872 +DC-01,2026-02-16T20:39:52.934Z,52023,52903,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\emartinez,9241 +DC-01,2026-02-15T03:35:32.674Z,2671,59242,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\emartinez,18846 +DC-02,2026-02-12T08:02:07.384Z,34472,5,svchost.exe,C:\Windows\System32\svchost.exe,ACME\fthompson,384278 +DC-02,2026-02-15T06:44:23.947Z,16365,51240,explorer.exe,C:\Windows\System32\explorer.exe,ACME\fthompson,440305 +DC-02,2026-02-16T05:28:58.793Z,59140,14778,chrome.exe,C:\Windows\System32\chrome.exe,ACME\fthompson,147324 +DC-02,2026-02-13T06:37:54.525Z,30746,50715,msedge.exe,C:\Windows\System32\msedge.exe,ACME\fthompson,49958 +DC-02,2026-02-17T19:43:27.026Z,60825,43634,outlook.exe,C:\Windows\System32\outlook.exe,ACME\fthompson,228566 +DC-02,2026-02-15T13:01:38.426Z,32786,36956,teams.exe,C:\Windows\System32\teams.exe,ACME\fthompson,428802 +DC-02,2026-02-10T21:02:57.505Z,22240,29512,code.exe,C:\Windows\System32\code.exe,ACME\fthompson,129938 +DC-02,2026-02-16T00:09:21.801Z,42355,53778,powershell.exe,C:\Windows\System32\powershell.exe,ACME\fthompson,493568 +DC-02,2026-02-19T02:01:43.686Z,24222,17238,cmd.exe,C:\Windows\System32\cmd.exe,ACME\fthompson,2607 +DC-02,2026-02-18T04:49:04.193Z,48850,48821,notepad.exe,C:\Windows\System32\notepad.exe,ACME\fthompson,82503 +DC-02,2026-02-20T16:44:51.923Z,5431,30240,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\fthompson,493253 +DC-02,2026-02-11T00:40:38.742Z,13869,8966,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\fthompson,115242 +DC-02,2026-02-13T19:04:02.933Z,298,41924,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\fthompson,419490 +DC-02,2026-02-16T09:56:48.919Z,28858,18,lsass.exe,C:\Windows\System32\lsass.exe,ACME\fthompson,419886 +DC-02,2026-02-15T19:19:18.569Z,41296,17,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,8917 +DC-02,2026-02-20T13:47:45.157Z,64530,10873,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\fthompson,407729 +DC-02,2026-02-16T11:06:20.334Z,44414,10351,dwm.exe,C:\Windows\System32\dwm.exe,ACME\fthompson,429274 +DC-02,2026-02-18T10:18:16.653Z,22809,21967,System,System,NT AUTHORITY\SYSTEM,457489 +DC-02,2026-02-14T11:35:15.815Z,53640,32863,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,397699 +DC-02,2026-02-15T16:01:00.696Z,14386,3714,services.exe,C:\Windows\System32\services.exe,ACME\fthompson,282818 +DC-02,2026-02-18T19:33:04.744Z,14209,32747,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\fthompson,17739 +DC-02,2026-02-17T22:58:46.559Z,28846,39320,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\fthompson,381454 +DC-02,2026-02-17T13:44:28.911Z,4584,54661,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\fthompson,316234 +FILE-01,2026-02-12T07:06:21.020Z,27456,5,svchost.exe,C:\Windows\System32\svchost.exe,ACME\jsmith,348225 +FILE-01,2026-02-13T22:26:55.556Z,42647,5546,explorer.exe,C:\Windows\System32\explorer.exe,ACME\jsmith,148892 +FILE-01,2026-02-13T12:38:25.888Z,14835,50754,chrome.exe,C:\Windows\System32\chrome.exe,ACME\jsmith,328522 +FILE-01,2026-02-18T22:39:32.317Z,5260,36994,msedge.exe,C:\Windows\System32\msedge.exe,ACME\jsmith,163701 +FILE-01,2026-02-15T01:31:56.706Z,58617,55809,outlook.exe,C:\Windows\System32\outlook.exe,ACME\jsmith,335606 +FILE-01,2026-02-13T07:19:01.506Z,35879,58406,teams.exe,C:\Windows\System32\teams.exe,ACME\jsmith,390340 +FILE-01,2026-02-11T15:00:41.097Z,26117,32080,code.exe,C:\Windows\System32\code.exe,ACME\jsmith,369735 +FILE-01,2026-02-18T08:49:19.241Z,28925,49545,powershell.exe,C:\Windows\System32\powershell.exe,ACME\jsmith,154716 +FILE-01,2026-02-16T21:48:36.279Z,40053,34731,cmd.exe,C:\Windows\System32\cmd.exe,ACME\jsmith,435515 +FILE-01,2026-02-12T19:54:07.386Z,38487,24815,notepad.exe,C:\Windows\System32\notepad.exe,ACME\jsmith,106951 +FILE-01,2026-02-18T23:35:35.259Z,27788,24588,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\jsmith,380739 +FILE-01,2026-02-20T10:28:50.051Z,56352,3181,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\jsmith,132416 +FILE-01,2026-02-20T01:22:14.852Z,6939,27464,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\jsmith,331923 +FILE-01,2026-02-20T08:59:15.064Z,45708,13,lsass.exe,C:\Windows\System32\lsass.exe,ACME\jsmith,94609 +FILE-01,2026-02-15T14:21:42.800Z,17532,1,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,199958 +FILE-01,2026-02-17T06:10:56.082Z,10844,36776,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\jsmith,30806 +FILE-01,2026-02-17T18:20:10.949Z,5563,58453,dwm.exe,C:\Windows\System32\dwm.exe,ACME\jsmith,75827 +FILE-01,2026-02-14T05:02:46.860Z,55620,6721,System,System,NT AUTHORITY\SYSTEM,448262 +FILE-01,2026-02-15T00:12:19.129Z,26192,27877,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,34066 +FILE-01,2026-02-16T18:55:27.002Z,44462,56839,services.exe,C:\Windows\System32\services.exe,ACME\jsmith,268836 +FILE-01,2026-02-15T04:11:30.469Z,30580,7883,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\jsmith,4829 +FILE-01,2026-02-13T19:24:10.679Z,17648,51613,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\jsmith,320902 +FILE-01,2026-02-16T13:38:43.022Z,37604,52666,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\jsmith,376636 +EXCH-01,2026-02-19T19:30:50.056Z,53182,3,svchost.exe,C:\Windows\System32\svchost.exe,ACME\gwhite,455272 +EXCH-01,2026-02-20T01:26:01.750Z,39961,36165,explorer.exe,C:\Windows\System32\explorer.exe,ACME\gwhite,12742 +EXCH-01,2026-02-11T03:41:32.857Z,9920,11403,chrome.exe,C:\Windows\System32\chrome.exe,ACME\gwhite,55882 +EXCH-01,2026-02-17T01:57:42.769Z,36489,38282,msedge.exe,C:\Windows\System32\msedge.exe,ACME\gwhite,17987 +EXCH-01,2026-02-12T07:42:01.565Z,20624,2390,outlook.exe,C:\Windows\System32\outlook.exe,ACME\gwhite,164834 +EXCH-01,2026-02-19T09:00:39.602Z,25317,7242,teams.exe,C:\Windows\System32\teams.exe,ACME\gwhite,333418 +EXCH-01,2026-02-12T19:28:49.853Z,5990,31143,code.exe,C:\Windows\System32\code.exe,ACME\gwhite,48156 +EXCH-01,2026-02-19T16:46:54.934Z,61590,31719,powershell.exe,C:\Windows\System32\powershell.exe,ACME\gwhite,135641 +EXCH-01,2026-02-13T05:42:23.065Z,59822,5866,cmd.exe,C:\Windows\System32\cmd.exe,ACME\gwhite,439022 +EXCH-01,2026-02-14T03:03:12.832Z,61961,22739,notepad.exe,C:\Windows\System32\notepad.exe,ACME\gwhite,172813 +EXCH-01,2026-02-20T14:31:11.362Z,5728,52959,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\gwhite,130693 +EXCH-01,2026-02-20T01:24:04.453Z,56420,13629,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\gwhite,179420 +EXCH-01,2026-02-11T02:44:54.848Z,23966,38570,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\gwhite,417210 +EXCH-01,2026-02-18T02:29:57.790Z,64827,10,lsass.exe,C:\Windows\System32\lsass.exe,ACME\gwhite,46702 +EXCH-01,2026-02-14T13:32:36.162Z,22968,14,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,13348 +EXCH-01,2026-02-14T07:27:42.115Z,45336,12971,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\gwhite,123023 +EXCH-01,2026-02-17T18:44:45.380Z,33689,27105,dwm.exe,C:\Windows\System32\dwm.exe,ACME\gwhite,267871 +EXCH-01,2026-02-10T12:46:08.552Z,26289,21908,System,System,NT AUTHORITY\SYSTEM,235095 +EXCH-01,2026-02-13T01:28:38.987Z,61523,19404,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,171719 +EXCH-01,2026-02-18T16:52:35.611Z,11854,59036,services.exe,C:\Windows\System32\services.exe,ACME\gwhite,445205 +EXCH-01,2026-02-11T00:04:31.113Z,42794,194,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\gwhite,298116 +EXCH-01,2026-02-14T03:28:23.050Z,5843,27180,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\gwhite,209490 +EXCH-01,2026-02-10T12:55:12.260Z,17116,30314,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\gwhite,206981 +WEB-01,2026-02-15T09:21:40.443Z,28084,16,svchost.exe,C:\Windows\System32\svchost.exe,ACME\idavis,328737 +WEB-01,2026-02-19T03:30:24.785Z,6593,53987,explorer.exe,C:\Windows\System32\explorer.exe,ACME\idavis,139825 +WEB-01,2026-02-18T15:11:20.173Z,4327,20346,chrome.exe,C:\Windows\System32\chrome.exe,ACME\idavis,79511 +WEB-01,2026-02-13T04:51:57.488Z,18059,56218,msedge.exe,C:\Windows\System32\msedge.exe,ACME\idavis,492021 +WEB-01,2026-02-18T08:43:11.070Z,28490,18103,outlook.exe,C:\Windows\System32\outlook.exe,ACME\idavis,35012 +WEB-01,2026-02-13T15:05:12.652Z,44997,53873,teams.exe,C:\Windows\System32\teams.exe,ACME\idavis,182480 +WEB-01,2026-02-16T06:41:06.489Z,60221,1706,code.exe,C:\Windows\System32\code.exe,ACME\idavis,351590 +WEB-01,2026-02-20T08:51:54.208Z,17498,12967,powershell.exe,C:\Windows\System32\powershell.exe,ACME\idavis,386308 +WEB-01,2026-02-19T00:22:02.669Z,49703,5073,cmd.exe,C:\Windows\System32\cmd.exe,ACME\idavis,146402 +WEB-01,2026-02-14T06:39:15.651Z,2674,58245,notepad.exe,C:\Windows\System32\notepad.exe,ACME\idavis,110423 +WEB-01,2026-02-16T14:15:44.988Z,39328,10154,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\idavis,136026 +WEB-01,2026-02-14T13:00:25.429Z,41845,48059,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,52575 +WEB-01,2026-02-12T11:06:49.188Z,51195,59359,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\idavis,482091 +WEB-01,2026-02-10T20:17:28.865Z,29968,3,lsass.exe,C:\Windows\System32\lsass.exe,ACME\idavis,157905 +WEB-01,2026-02-11T09:55:37.305Z,40616,19,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,91711 +WEB-01,2026-02-20T06:23:43.186Z,28232,50295,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\idavis,475070 +WEB-01,2026-02-20T12:48:44.360Z,51057,18467,dwm.exe,C:\Windows\System32\dwm.exe,ACME\idavis,124506 +WEB-01,2026-02-13T02:19:13.038Z,63405,33945,System,System,NT AUTHORITY\SYSTEM,248513 +WEB-01,2026-02-17T23:13:15.990Z,46717,1795,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,295105 +WEB-01,2026-02-18T16:12:35.295Z,6523,37839,services.exe,C:\Windows\System32\services.exe,ACME\idavis,340296 +WEB-01,2026-02-10T20:10:29.527Z,1226,23848,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\idavis,318573 +WEB-01,2026-02-19T06:42:21.514Z,6330,25212,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\idavis,126399 +WEB-01,2026-02-17T23:37:54.305Z,37229,44411,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\idavis,80400 +SQL-01,2026-02-11T15:46:08.267Z,62379,13,svchost.exe,C:\Windows\System32\svchost.exe,ACME\svc_web,306438 +SQL-01,2026-02-19T09:47:47.191Z,14519,8888,explorer.exe,C:\Windows\System32\explorer.exe,ACME\svc_web,225679 +SQL-01,2026-02-18T02:41:49.234Z,23778,32186,chrome.exe,C:\Windows\System32\chrome.exe,ACME\svc_web,63793 +SQL-01,2026-02-19T07:42:16.362Z,7382,45606,msedge.exe,C:\Windows\System32\msedge.exe,ACME\svc_web,319545 +SQL-01,2026-02-13T09:16:10.358Z,11164,46518,outlook.exe,C:\Windows\System32\outlook.exe,ACME\svc_web,301908 +SQL-01,2026-02-11T18:59:58.206Z,48810,7187,teams.exe,C:\Windows\System32\teams.exe,ACME\svc_web,404359 +SQL-01,2026-02-18T09:13:50.393Z,48857,59745,code.exe,C:\Windows\System32\code.exe,ACME\svc_web,2387 +SQL-01,2026-02-14T18:54:07.829Z,58020,1842,powershell.exe,C:\Windows\System32\powershell.exe,ACME\svc_web,457661 +SQL-01,2026-02-15T21:00:05.148Z,15762,49786,cmd.exe,C:\Windows\System32\cmd.exe,ACME\svc_web,269635 +SQL-01,2026-02-19T22:54:35.273Z,13983,59830,notepad.exe,C:\Windows\System32\notepad.exe,ACME\svc_web,344770 +SQL-01,2026-02-13T03:03:48.170Z,40902,11238,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\svc_web,61808 +SQL-01,2026-02-16T06:37:48.099Z,27260,32466,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_web,259790 +SQL-01,2026-02-11T14:35:10.853Z,29600,26313,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\svc_web,376047 +SQL-01,2026-02-10T09:58:03.006Z,37657,14,lsass.exe,C:\Windows\System32\lsass.exe,ACME\svc_web,326171 +SQL-01,2026-02-11T07:43:18.165Z,53166,3,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,74762 +SQL-01,2026-02-11T21:20:03.785Z,40269,56929,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\svc_web,120770 +SQL-01,2026-02-13T17:34:03.847Z,62092,46182,dwm.exe,C:\Windows\System32\dwm.exe,ACME\svc_web,65443 +SQL-01,2026-02-12T12:23:28.306Z,16412,48049,System,System,NT AUTHORITY\SYSTEM,109162 +SQL-01,2026-02-14T05:20:07.137Z,5494,59459,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,185691 +SQL-01,2026-02-17T17:57:43.800Z,28396,11081,services.exe,C:\Windows\System32\services.exe,ACME\svc_web,285927 +SQL-01,2026-02-17T19:52:58.249Z,56346,30273,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\svc_web,377650 +SQL-01,2026-02-17T14:30:50.711Z,20488,23302,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\svc_web,333254 +SQL-01,2026-02-13T04:09:54.033Z,1540,50655,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\svc_web,488381 +PROXY-01,2026-02-12T23:25:17.262Z,1937,19,svchost.exe,C:\Windows\System32\svchost.exe,ACME\svc_backup,140725 +PROXY-01,2026-02-17T06:16:54.740Z,52094,29349,explorer.exe,C:\Windows\System32\explorer.exe,ACME\svc_backup,48240 +PROXY-01,2026-02-14T19:16:37.868Z,49648,54666,chrome.exe,C:\Windows\System32\chrome.exe,ACME\svc_backup,87946 +PROXY-01,2026-02-16T16:28:22.699Z,34955,43759,msedge.exe,C:\Windows\System32\msedge.exe,ACME\svc_backup,91828 +PROXY-01,2026-02-17T02:37:54.254Z,5180,35237,outlook.exe,C:\Windows\System32\outlook.exe,ACME\svc_backup,153185 +PROXY-01,2026-02-16T00:51:00.113Z,18806,25407,teams.exe,C:\Windows\System32\teams.exe,ACME\svc_backup,427145 +PROXY-01,2026-02-14T12:02:39.504Z,60223,6441,code.exe,C:\Windows\System32\code.exe,ACME\svc_backup,197838 +PROXY-01,2026-02-15T10:03:06.968Z,8630,39283,powershell.exe,C:\Windows\System32\powershell.exe,ACME\svc_backup,112138 +PROXY-01,2026-02-19T05:19:07.102Z,34387,28368,cmd.exe,C:\Windows\System32\cmd.exe,ACME\svc_backup,150363 +PROXY-01,2026-02-17T14:06:17.147Z,42295,56892,notepad.exe,C:\Windows\System32\notepad.exe,ACME\svc_backup,468441 +PROXY-01,2026-02-17T00:24:39.825Z,43336,41978,taskhostw.exe,C:\Windows\System32\taskhostw.exe,ACME\svc_backup,461427 +PROXY-01,2026-02-20T10:44:15.675Z,15218,9374,RuntimeBroker.exe,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_backup,86157 +PROXY-01,2026-02-11T18:45:48.305Z,14367,59489,SearchHost.exe,C:\Windows\System32\SearchHost.exe,ACME\svc_backup,73464 +PROXY-01,2026-02-19T06:01:10.040Z,16628,6,lsass.exe,C:\Windows\System32\lsass.exe,ACME\svc_backup,105856 +PROXY-01,2026-02-17T21:15:36.239Z,29787,18,csrss.exe,C:\Windows\System32\csrss.exe,NT AUTHORITY\SYSTEM,206934 +PROXY-01,2026-02-11T03:38:57.611Z,33683,48997,winlogon.exe,C:\Windows\System32\winlogon.exe,ACME\svc_backup,179494 +PROXY-01,2026-02-13T09:24:07.673Z,16574,6917,dwm.exe,C:\Windows\System32\dwm.exe,ACME\svc_backup,72521 +PROXY-01,2026-02-18T10:27:49.504Z,61301,34275,System,System,NT AUTHORITY\SYSTEM,494587 +PROXY-01,2026-02-13T06:01:42.525Z,53404,35587,smss.exe,C:\Windows\System32\smss.exe,NT AUTHORITY\SYSTEM,183041 +PROXY-01,2026-02-13T05:22:52.998Z,40144,586,services.exe,C:\Windows\System32\services.exe,ACME\svc_backup,245130 +PROXY-01,2026-02-11T06:34:10.531Z,18648,45752,spoolsv.exe,C:\Windows\System32\spoolsv.exe,ACME\svc_backup,223457 +PROXY-01,2026-02-13T04:16:19.899Z,20559,14179,MsMpEng.exe,C:\Windows\System32\MsMpEng.exe,ACME\svc_backup,41897 +PROXY-01,2026-02-15T02:33:38.037Z,329,22656,OneDrive.exe,C:\Windows\System32\OneDrive.exe,ACME\svc_backup,158073 diff --git a/backend/tests/test_csvs/04_network_interfaces.csv b/backend/tests/test_csvs/04_network_interfaces.csv new file mode 100644 index 0000000..3579399 --- /dev/null +++ b/backend/tests/test_csvs/04_network_interfaces.csv @@ -0,0 +1,95 @@ +Hostname,Timestamp,Name,MacAddress,IP,Netmask,Gateway,DNSServer,DHCPEnabled,Status +HR-WS-001,2026-02-10T16:24:26.900Z,Ethernet0,00:1A:2B:01:03:07,10.10.2.101,255.255.255.0,10.10.2.1,10.10.1.10,True,Up +FIN-WS-002,2026-02-12T21:40:50.754Z,Ethernet0,00:1A:2B:02:06:0E,10.10.3.102,255.255.255.0,10.10.3.1,10.10.1.10,False,Up +SLS-WS-003,2026-02-18T04:41:53.395Z,Ethernet0,00:1A:2B:03:09:15,10.10.1.103,255.255.255.0,10.10.1.1,10.10.1.10,False,Up +ENG-WS-004,2026-02-10T09:17:24.303Z,Ethernet0,00:1A:2B:04:0C:1C,10.10.2.104,255.255.255.0,10.10.2.1,10.10.1.10,False,Up +LEG-WS-005,2026-02-17T19:14:58.917Z,Ethernet0,00:1A:2B:05:0F:23,10.10.3.105,255.255.255.0,10.10.3.1,10.10.1.10,True,Up +MKT-WS-006,2026-02-14T17:52:45.679Z,Ethernet0,00:1A:2B:06:12:2A,10.10.1.106,255.255.255.0,10.10.1.1,10.10.1.10,False,Up +EXEC-WS-007,2026-02-12T06:47:59.653Z,Ethernet0,00:1A:2B:07:15:31,10.10.2.107,255.255.255.0,10.10.2.1,10.10.1.10,False,Up +IT-WS-008,2026-02-13T00:45:43.505Z,Ethernet0,00:1A:2B:08:18:38,10.10.3.108,255.255.255.0,10.10.3.1,10.10.1.10,False,Up +HR-WS-009,2026-02-16T10:06:59.053Z,Ethernet0,00:1A:2B:09:1B:3F,10.10.1.109,255.255.255.0,10.10.1.1,10.10.1.10,False,Up +FIN-WS-010,2026-02-15T17:42:42.094Z,Ethernet0,00:1A:2B:0A:1E:46,10.10.2.110,255.255.255.0,10.10.2.1,10.10.1.10,False,Up +SLS-WS-011,2026-02-17T22:02:06.433Z,Ethernet0,00:1A:2B:0B:21:4D,10.10.3.111,255.255.255.0,10.10.3.1,10.10.1.10,False,Up +ENG-WS-012,2026-02-19T05:25:25.672Z,Ethernet0,00:1A:2B:0C:24:54,10.10.1.112,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +LEG-WS-013,2026-02-16T20:31:43.770Z,Ethernet0,00:1A:2B:0D:27:5B,10.10.2.113,255.255.255.0,10.10.2.1,10.10.1.10,True,Up +MKT-WS-014,2026-02-17T09:41:02.510Z,Ethernet0,00:1A:2B:0E:2A:62,10.10.3.114,255.255.255.0,10.10.3.1,10.10.1.10,True,Up +EXEC-WS-015,2026-02-15T10:28:26.740Z,Ethernet0,00:1A:2B:0F:2D:69,10.10.1.115,255.255.255.0,10.10.1.1,10.10.1.10,False,Up +EXEC-WS-015,2026-02-10T11:51:53.112Z,WiFi,00:1A:2B:55:56:F5,192.168.1.253,255.255.255.0,192.168.1.1,192.168.1.1,True,Up +IT-WS-016,2026-02-16T04:21:28.306Z,Ethernet0,00:1A:2B:10:30:70,10.10.2.116,255.255.255.0,10.10.2.1,10.10.1.10,True,Up +HR-WS-017,2026-02-16T17:05:22.194Z,Ethernet0,00:1A:2B:11:33:77,10.10.3.117,255.255.255.0,10.10.3.1,10.10.1.10,False,Up +FIN-WS-018,2026-02-12T18:00:28.942Z,Ethernet0,00:1A:2B:12:36:7E,10.10.1.118,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +SLS-WS-019,2026-02-15T04:56:45.920Z,Ethernet0,00:1A:2B:13:39:85,10.10.2.119,255.255.255.0,10.10.2.1,10.10.1.10,False,Up +ENG-WS-020,2026-02-11T10:01:43.793Z,Ethernet0,00:1A:2B:14:3C:8C,10.10.3.120,255.255.255.0,10.10.3.1,10.10.1.10,False,Up +LEG-WS-021,2026-02-11T21:06:19.348Z,Ethernet0,00:1A:2B:15:3F:93,10.10.1.121,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +MKT-WS-022,2026-02-10T20:29:46.294Z,Ethernet0,00:1A:2B:16:42:9A,10.10.2.122,255.255.255.0,10.10.2.1,10.10.1.10,True,Up +EXEC-WS-023,2026-02-11T19:04:20.910Z,Ethernet0,00:1A:2B:17:45:A1,10.10.3.123,255.255.255.0,10.10.3.1,10.10.1.10,True,Up +IT-WS-024,2026-02-16T09:50:42.318Z,Ethernet0,00:1A:2B:18:48:A8,10.10.1.124,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +IT-WS-024,2026-02-14T22:30:35.434Z,WiFi,00:1A:2B:BF:1F:78,192.168.1.203,255.255.255.0,192.168.1.1,192.168.1.1,True,Up +HR-WS-025,2026-02-13T09:55:26.913Z,Ethernet0,00:1A:2B:19:4B:AF,10.10.2.125,255.255.255.0,10.10.2.1,10.10.1.10,True,Up +FIN-WS-026,2026-02-16T17:25:01.286Z,Ethernet0,00:1A:2B:1A:4E:B6,10.10.3.126,255.255.255.0,10.10.3.1,10.10.1.10,False,Up +SLS-WS-027,2026-02-14T18:31:05.971Z,Ethernet0,00:1A:2B:1B:51:BD,10.10.1.127,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +ENG-WS-028,2026-02-20T14:27:15.813Z,Ethernet0,00:1A:2B:1C:54:C4,10.10.2.128,255.255.255.0,10.10.2.1,10.10.1.10,True,Up +LEG-WS-029,2026-02-20T12:27:41.544Z,Ethernet0,00:1A:2B:1D:57:CB,10.10.3.129,255.255.255.0,10.10.3.1,10.10.1.10,False,Up +LEG-WS-029,2026-02-16T09:22:52.989Z,WiFi,00:1A:2B:E0:FE:1A,192.168.1.111,255.255.255.0,192.168.1.1,192.168.1.1,True,Up +MKT-WS-030,2026-02-15T04:55:56.987Z,Ethernet0,00:1A:2B:1E:5A:D2,10.10.1.130,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +EXEC-WS-031,2026-02-12T14:44:11.880Z,Ethernet0,00:1A:2B:1F:5D:D9,10.10.2.131,255.255.255.0,10.10.2.1,10.10.1.10,True,Up +IT-WS-032,2026-02-15T05:33:06.487Z,Ethernet0,00:1A:2B:20:60:E0,10.10.3.132,255.255.255.0,10.10.3.1,10.10.1.10,False,Up +HR-WS-033,2026-02-11T05:39:51.291Z,Ethernet0,00:1A:2B:21:63:E7,10.10.1.133,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +FIN-WS-034,2026-02-11T11:33:18.757Z,Ethernet0,00:1A:2B:22:66:EE,10.10.2.134,255.255.255.0,10.10.2.1,10.10.1.10,True,Up +SLS-WS-035,2026-02-11T00:04:29.942Z,Ethernet0,00:1A:2B:23:69:F5,10.10.3.135,255.255.255.0,10.10.3.1,10.10.1.10,True,Up +ENG-WS-036,2026-02-17T14:12:29.280Z,Ethernet0,00:1A:2B:24:6C:FC,10.10.1.136,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +LEG-WS-037,2026-02-14T08:36:09.053Z,Ethernet0,00:1A:2B:25:6F:03,10.10.2.137,255.255.255.0,10.10.2.1,10.10.1.10,True,Up +MKT-WS-038,2026-02-17T03:32:51.019Z,Ethernet0,00:1A:2B:26:72:0A,10.10.3.138,255.255.255.0,10.10.3.1,10.10.1.10,False,Up +EXEC-WS-039,2026-02-12T14:30:02.287Z,Ethernet0,00:1A:2B:27:75:11,10.10.1.139,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +IT-WS-040,2026-02-16T05:42:19.535Z,Ethernet0,00:1A:2B:28:78:18,10.10.2.140,255.255.255.0,10.10.2.1,10.10.1.10,True,Up +HR-WS-041,2026-02-12T22:00:14.852Z,Ethernet0,00:1A:2B:29:7B:1F,10.10.3.141,255.255.255.0,10.10.3.1,10.10.1.10,False,Up +FIN-WS-042,2026-02-14T08:06:34.719Z,Ethernet0,00:1A:2B:2A:7E:26,10.10.1.142,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +SLS-WS-043,2026-02-15T09:46:46.751Z,Ethernet0,00:1A:2B:2B:81:2D,10.10.2.143,255.255.255.0,10.10.2.1,10.10.1.10,False,Up +ENG-WS-044,2026-02-13T22:35:19.386Z,Ethernet0,00:1A:2B:2C:84:34,10.10.3.144,255.255.255.0,10.10.3.1,10.10.1.10,True,Up +LEG-WS-045,2026-02-16T14:36:44.741Z,Ethernet0,00:1A:2B:2D:87:3B,10.10.1.145,255.255.255.0,10.10.1.1,10.10.1.10,False,Up +MKT-WS-046,2026-02-10T20:21:06.160Z,Ethernet0,00:1A:2B:2E:8A:42,10.10.2.146,255.255.255.0,10.10.2.1,10.10.1.10,True,Up +EXEC-WS-047,2026-02-13T17:28:04.672Z,Ethernet0,00:1A:2B:2F:8D:49,10.10.3.147,255.255.255.0,10.10.3.1,10.10.1.10,True,Up +EXEC-WS-047,2026-02-15T05:39:34.377Z,WiFi,00:1A:2B:56:C7:C5,192.168.1.173,255.255.255.0,192.168.1.1,192.168.1.1,True,Up +IT-WS-048,2026-02-10T12:18:07.676Z,Ethernet0,00:1A:2B:30:90:50,10.10.1.148,255.255.255.0,10.10.1.1,10.10.1.10,False,Up +IT-WS-048,2026-02-16T04:58:53.462Z,WiFi,00:1A:2B:0D:DC:8E,192.168.1.105,255.255.255.0,192.168.1.1,192.168.1.1,True,Up +HR-WS-049,2026-02-15T16:58:23.088Z,Ethernet0,00:1A:2B:31:93:57,10.10.2.149,255.255.255.0,10.10.2.1,10.10.1.10,True,Up +HR-WS-049,2026-02-11T10:08:21.611Z,WiFi,00:1A:2B:C0:BD:32,192.168.1.104,255.255.255.0,192.168.1.1,192.168.1.1,True,Up +FIN-WS-050,2026-02-18T17:07:33.846Z,Ethernet0,00:1A:2B:32:96:5E,10.10.3.150,255.255.255.0,10.10.3.1,10.10.1.10,False,Up +SLS-WS-051,2026-02-17T21:04:50.875Z,Ethernet0,00:1A:2B:33:99:65,10.10.1.151,255.255.255.0,10.10.1.1,10.10.1.10,False,Up +ENG-WS-052,2026-02-12T08:55:29.512Z,Ethernet0,00:1A:2B:34:9C:6C,10.10.2.152,255.255.255.0,10.10.2.1,10.10.1.10,False,Up +LEG-WS-053,2026-02-17T19:12:11.653Z,Ethernet0,00:1A:2B:35:9F:73,10.10.3.153,255.255.255.0,10.10.3.1,10.10.1.10,False,Up +MKT-WS-054,2026-02-11T10:29:55.699Z,Ethernet0,00:1A:2B:36:A2:7A,10.10.1.154,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +EXEC-WS-055,2026-02-19T22:37:21.448Z,Ethernet0,00:1A:2B:37:A5:81,10.10.2.155,255.255.255.0,10.10.2.1,10.10.1.10,True,Up +EXEC-WS-055,2026-02-15T04:05:15.992Z,WiFi,00:1A:2B:6F:0B:FB,192.168.1.234,255.255.255.0,192.168.1.1,192.168.1.1,True,Up +IT-WS-056,2026-02-11T14:10:01.331Z,Ethernet0,00:1A:2B:38:A8:88,10.10.3.156,255.255.255.0,10.10.3.1,10.10.1.10,True,Up +HR-WS-057,2026-02-19T21:26:13.167Z,Ethernet0,00:1A:2B:39:AB:8F,10.10.1.157,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +FIN-WS-058,2026-02-15T03:50:27.520Z,Ethernet0,00:1A:2B:3A:AE:96,10.10.2.158,255.255.255.0,10.10.2.1,10.10.1.10,True,Up +SLS-WS-059,2026-02-15T13:42:58.594Z,Ethernet0,00:1A:2B:3B:B1:9D,10.10.3.159,255.255.255.0,10.10.3.1,10.10.1.10,False,Up +ENG-WS-060,2026-02-14T20:41:02.310Z,Ethernet0,00:1A:2B:3C:B4:A4,10.10.1.160,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +LEG-WS-061,2026-02-13T22:18:10.231Z,Ethernet0,00:1A:2B:3D:B7:AB,10.10.2.161,255.255.255.0,10.10.2.1,10.10.1.10,False,Up +LEG-WS-061,2026-02-13T20:39:08.097Z,WiFi,00:1A:2B:98:B3:9A,192.168.1.212,255.255.255.0,192.168.1.1,192.168.1.1,True,Up +MKT-WS-062,2026-02-16T06:02:40.122Z,Ethernet0,00:1A:2B:3E:BA:B2,10.10.3.162,255.255.255.0,10.10.3.1,10.10.1.10,True,Up +EXEC-WS-063,2026-02-19T05:26:24.391Z,Ethernet0,00:1A:2B:3F:BD:B9,10.10.1.163,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +IT-WS-064,2026-02-16T10:52:03.498Z,Ethernet0,00:1A:2B:40:C0:C0,10.10.2.164,255.255.255.0,10.10.2.1,10.10.1.10,False,Up +HR-WS-065,2026-02-16T06:51:58.416Z,Ethernet0,00:1A:2B:41:C3:C7,10.10.3.165,255.255.255.0,10.10.3.1,10.10.1.10,True,Up +FIN-WS-066,2026-02-12T21:32:27.236Z,Ethernet0,00:1A:2B:42:C6:CE,10.10.1.166,255.255.255.0,10.10.1.1,10.10.1.10,False,Up +SLS-WS-067,2026-02-14T09:35:36.931Z,Ethernet0,00:1A:2B:43:C9:D5,10.10.2.167,255.255.255.0,10.10.2.1,10.10.1.10,True,Up +ENG-WS-068,2026-02-17T01:03:57.807Z,Ethernet0,00:1A:2B:44:CC:DC,10.10.3.168,255.255.255.0,10.10.3.1,10.10.1.10,True,Up +LEG-WS-069,2026-02-18T07:35:16.538Z,Ethernet0,00:1A:2B:45:CF:E3,10.10.1.169,255.255.255.0,10.10.1.1,10.10.1.10,False,Up +MKT-WS-070,2026-02-13T22:47:29.628Z,Ethernet0,00:1A:2B:46:D2:EA,10.10.2.170,255.255.255.0,10.10.2.1,10.10.1.10,False,Up +EXEC-WS-071,2026-02-10T22:35:50.568Z,Ethernet0,00:1A:2B:47:D5:F1,10.10.3.171,255.255.255.0,10.10.3.1,10.10.1.10,False,Up +IT-WS-072,2026-02-10T18:39:18.543Z,Ethernet0,00:1A:2B:48:D8:F8,10.10.1.172,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +HR-WS-073,2026-02-15T02:52:48.715Z,Ethernet0,00:1A:2B:49:DB:FF,10.10.2.173,255.255.255.0,10.10.2.1,10.10.1.10,True,Up +FIN-WS-074,2026-02-16T15:48:43.982Z,Ethernet0,00:1A:2B:4A:DE:06,10.10.3.174,255.255.255.0,10.10.3.1,10.10.1.10,False,Up +FIN-WS-074,2026-02-15T03:16:41.128Z,WiFi,00:1A:2B:E5:58:D5,192.168.1.187,255.255.255.0,192.168.1.1,192.168.1.1,True,Up +SLS-WS-075,2026-02-13T19:56:33.469Z,Ethernet0,00:1A:2B:4B:E1:0D,10.10.1.175,255.255.255.0,10.10.1.1,10.10.1.10,False,Up +SLS-WS-075,2026-02-13T19:51:59.764Z,WiFi,00:1A:2B:85:45:E7,192.168.1.101,255.255.255.0,192.168.1.1,192.168.1.1,True,Up +DC-01,2026-02-11T04:33:29.426Z,Ethernet0,00:1A:2B:AA:01:01,10.10.1.10,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +DC-02,2026-02-19T18:46:33.305Z,Ethernet0,00:1A:2B:AA:02:02,10.10.2.10,255.255.255.0,10.10.2.1,10.10.1.10,True,Up +DC-02,2026-02-18T23:30:06.254Z,WiFi,00:1A:2B:CC:F1:9E,192.168.1.104,255.255.255.0,192.168.1.1,192.168.1.1,True,Up +FILE-01,2026-02-18T11:12:43.756Z,Ethernet0,00:1A:2B:AA:03:03,10.10.1.11,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +FILE-01,2026-02-11T03:22:46.203Z,WiFi,00:1A:2B:CE:97:70,192.168.1.182,255.255.255.0,192.168.1.1,192.168.1.1,True,Up +EXCH-01,2026-02-19T04:32:00.039Z,Ethernet0,00:1A:2B:AA:04:04,10.10.1.12,255.255.255.0,10.10.1.1,10.10.1.10,True,Up +WEB-01,2026-02-18T10:09:44.001Z,Ethernet0,00:1A:2B:AA:05:05,10.10.3.10,255.255.255.0,10.10.3.1,10.10.1.10,False,Up +SQL-01,2026-02-11T21:40:03.308Z,Ethernet0,00:1A:2B:AA:06:06,10.10.2.11,255.255.255.0,10.10.2.1,10.10.1.10,False,Up +PROXY-01,2026-02-15T18:13:44.315Z,Ethernet0,00:1A:2B:AA:07:07,10.10.1.13,255.255.255.0,10.10.1.1,10.10.1.10,True,Up diff --git a/backend/tests/test_csvs/05_logged_in_users.csv b/backend/tests/test_csvs/05_logged_in_users.csv new file mode 100644 index 0000000..ad64d34 --- /dev/null +++ b/backend/tests/test_csvs/05_logged_in_users.csv @@ -0,0 +1,172 @@ +ComputerName,SourceIP,User,LogonType,LogonTime,LogoffTime,OS +HR-WS-001,10.10.2.101,ACME\svc_backup,3,2026-02-10T19:47:11.019Z,,Windows 11 Enterprise +FIN-WS-002,10.10.3.102,ACME\svc_sql,2,2026-02-20T13:32:12.532Z,,Windows Server 2022 +FIN-WS-002,10.10.3.102,ACME\jsmith,3,2026-02-11T07:54:47.111Z,2026-02-11T09:12:28.977Z,Windows Server 2022 +SLS-WS-003,10.10.1.103,ACME\svc_web,10,2026-02-19T16:28:42.907Z,2026-02-19T19:28:32.631Z,Windows Server 2019 +SLS-WS-003,10.10.1.103,ACME\svc_sql,2,2026-02-18T21:50:34.213Z,2026-02-19T07:20:53.104Z,Windows Server 2019 +SLS-WS-003,10.10.1.103,ACME\emartinez,2,2026-02-11T09:06:27.246Z,2026-02-11T11:25:00.125Z,Windows Server 2019 +ENG-WS-004,10.10.2.104,ACME\cjohnson,2,2026-02-13T08:35:29.495Z,2026-02-13T15:52:05.734Z,Windows 10 Enterprise +ENG-WS-004,10.10.2.104,ACME\idavis,10,2026-02-19T17:23:04.396Z,2026-02-20T00:37:16.818Z,Windows 10 Enterprise +ENG-WS-004,10.10.2.104,ACME\admin,10,2026-02-14T03:25:34.410Z,2026-02-14T10:55:35.412Z,Windows 10 Enterprise +LEG-WS-005,10.10.3.105,ACME\svc_sql,3,2026-02-17T17:50:11.604Z,2026-02-17T22:14:26.990Z,Windows 11 Enterprise +LEG-WS-005,10.10.3.105,ACME\svc_web,10,2026-02-11T09:48:56.652Z,,Windows 11 Enterprise +LEG-WS-005,10.10.3.105,ACME\bwilson,10,2026-02-10T18:48:03.885Z,2026-02-11T01:51:20.678Z,Windows 11 Enterprise +MKT-WS-006,10.10.1.106,ACME\svc_backup,10,2026-02-13T03:05:51.107Z,2026-02-13T06:52:13.336Z,Windows Server 2022 +MKT-WS-006,10.10.1.106,ACME\svc_web,3,2026-02-18T18:32:46.430Z,,Windows Server 2022 +EXEC-WS-007,10.10.2.107,ACME\jsmith,3,2026-02-20T01:44:44.694Z,,Windows Server 2019 +IT-WS-008,10.10.3.108,ACME\bwilson,10,2026-02-12T17:44:34.450Z,,Windows 10 Enterprise +HR-WS-009,10.10.1.109,ACME\dlee,3,2026-02-12T16:59:52.610Z,2026-02-12T19:19:40.030Z,Windows 11 Enterprise +HR-WS-009,10.10.1.109,ACME\svc_sql,10,2026-02-19T05:07:55.057Z,2026-02-19T13:20:14.389Z,Windows 11 Enterprise +FIN-WS-010,10.10.2.110,ACME\idavis,3,2026-02-15T00:54:53.507Z,2026-02-15T02:02:32.810Z,Windows Server 2022 +FIN-WS-010,10.10.2.110,ACME\emartinez,2,2026-02-11T17:22:16.798Z,,Windows Server 2022 +FIN-WS-010,10.10.2.110,ACME\svc_sql,2,2026-02-19T03:09:04.371Z,2026-02-19T09:08:46.020Z,Windows Server 2022 +SLS-WS-011,10.10.3.111,ACME\jsmith,10,2026-02-14T17:25:05.510Z,2026-02-14T20:21:23.416Z,Windows Server 2019 +SLS-WS-011,10.10.3.111,ACME\admin,2,2026-02-20T05:47:59.301Z,2026-02-20T07:11:14.685Z,Windows Server 2019 +SLS-WS-011,10.10.3.111,ACME\svc_sql,3,2026-02-19T00:44:15.031Z,,Windows Server 2019 +ENG-WS-012,10.10.1.112,ACME\jsmith,2,2026-02-16T17:08:17.109Z,,Windows 10 Enterprise +LEG-WS-013,10.10.2.113,ACME\svc_sql,2,2026-02-13T01:36:09.002Z,,Windows 11 Enterprise +LEG-WS-013,10.10.2.113,ACME\emartinez,2,2026-02-12T06:29:05.626Z,2026-02-12T10:13:07.627Z,Windows 11 Enterprise +LEG-WS-013,10.10.2.113,ACME\fthompson,2,2026-02-19T16:37:13.912Z,2026-02-19T23:51:58.182Z,Windows 11 Enterprise +MKT-WS-014,10.10.3.114,ACME\jsmith,2,2026-02-12T10:03:32.551Z,2026-02-12T15:02:40.993Z,Windows Server 2022 +EXEC-WS-015,10.10.1.115,ACME\bwilson,2,2026-02-11T17:51:50.902Z,,Windows Server 2019 +EXEC-WS-015,10.10.1.115,ACME\idavis,2,2026-02-19T18:27:36.117Z,,Windows Server 2019 +EXEC-WS-015,10.10.1.115,ACME\emartinez,3,2026-02-18T13:18:33.046Z,2026-02-18T18:49:58.167Z,Windows Server 2019 +IT-WS-016,10.10.2.116,ACME\svc_web,10,2026-02-20T00:10:52.698Z,2026-02-20T04:34:07.792Z,Windows 10 Enterprise +IT-WS-016,10.10.2.116,ACME\svc_backup,10,2026-02-17T17:42:51.219Z,2026-02-18T01:45:38.050Z,Windows 10 Enterprise +IT-WS-016,10.10.2.116,ACME\emartinez,2,2026-02-13T13:58:01.715Z,2026-02-13T20:07:49.098Z,Windows 10 Enterprise +HR-WS-017,10.10.3.117,ACME\hbrown,10,2026-02-16T05:42:16.836Z,2026-02-16T13:26:56.569Z,Windows 11 Enterprise +FIN-WS-018,10.10.1.118,ACME\svc_web,10,2026-02-17T04:02:44.098Z,2026-02-17T06:47:30.956Z,Windows Server 2022 +SLS-WS-019,10.10.2.119,ACME\dlee,2,2026-02-16T09:29:29.147Z,2026-02-16T13:51:01.526Z,Windows Server 2019 +SLS-WS-019,10.10.2.119,ACME\svc_backup,10,2026-02-15T15:19:14.774Z,2026-02-16T00:49:54.396Z,Windows Server 2019 +ENG-WS-020,10.10.3.120,ACME\bwilson,3,2026-02-11T20:14:59.199Z,2026-02-11T23:16:55.830Z,Windows 10 Enterprise +ENG-WS-020,10.10.3.120,ACME\dlee,10,2026-02-16T22:35:18.680Z,,Windows 10 Enterprise +ENG-WS-020,10.10.3.120,ACME\svc_sql,10,2026-02-18T17:04:59.041Z,2026-02-18T22:34:22.842Z,Windows 10 Enterprise +LEG-WS-021,10.10.1.121,ACME\fthompson,10,2026-02-18T10:34:32.151Z,2026-02-18T14:11:49.252Z,Windows 11 Enterprise +LEG-WS-021,10.10.1.121,ACME\svc_backup,2,2026-02-13T01:37:08.345Z,2026-02-13T06:31:18.977Z,Windows 11 Enterprise +LEG-WS-021,10.10.1.121,ACME\idavis,2,2026-02-18T01:44:04.261Z,,Windows 11 Enterprise +MKT-WS-022,10.10.2.122,ACME\svc_backup,2,2026-02-10T21:51:50.126Z,,Windows Server 2022 +MKT-WS-022,10.10.2.122,ACME\svc_sql,10,2026-02-16T08:50:03.777Z,,Windows Server 2022 +EXEC-WS-023,10.10.3.123,ACME\bwilson,10,2026-02-14T22:10:06.595Z,2026-02-14T23:45:48.592Z,Windows Server 2019 +EXEC-WS-023,10.10.3.123,ACME\svc_sql,2,2026-02-11T17:04:35.135Z,2026-02-11T20:05:01.609Z,Windows Server 2019 +EXEC-WS-023,10.10.3.123,ACME\svc_backup,3,2026-02-19T22:57:28.638Z,2026-02-20T06:20:22.890Z,Windows Server 2019 +IT-WS-024,10.10.1.124,ACME\svc_web,3,2026-02-12T11:59:59.061Z,2026-02-12T12:35:57.980Z,Windows 10 Enterprise +HR-WS-025,10.10.2.125,ACME\svc_sql,3,2026-02-15T05:08:57.237Z,,Windows 11 Enterprise +HR-WS-025,10.10.2.125,ACME\idavis,10,2026-02-20T08:38:06.286Z,2026-02-20T11:25:35.220Z,Windows 11 Enterprise +FIN-WS-026,10.10.3.126,ACME\idavis,10,2026-02-17T21:12:27.358Z,2026-02-18T01:27:41.010Z,Windows Server 2022 +FIN-WS-026,10.10.3.126,ACME\jsmith,10,2026-02-17T18:36:19.617Z,2026-02-18T04:06:32.766Z,Windows Server 2022 +FIN-WS-026,10.10.3.126,ACME\agarcia,2,2026-02-18T20:11:00.202Z,2026-02-19T04:07:24.421Z,Windows Server 2022 +SLS-WS-027,10.10.1.127,ACME\cjohnson,3,2026-02-16T01:15:04.595Z,2026-02-16T08:14:59.728Z,Windows Server 2019 +SLS-WS-027,10.10.1.127,ACME\svc_web,3,2026-02-11T04:57:49.338Z,2026-02-11T12:20:08.092Z,Windows Server 2019 +SLS-WS-027,10.10.1.127,ACME\jsmith,2,2026-02-14T22:36:10.872Z,2026-02-15T04:09:32.820Z,Windows Server 2019 +ENG-WS-028,10.10.2.128,ACME\emartinez,2,2026-02-10T10:43:30.295Z,2026-02-10T12:21:18.954Z,Windows 10 Enterprise +ENG-WS-028,10.10.2.128,ACME\agarcia,10,2026-02-17T11:10:18.102Z,2026-02-17T16:02:50.839Z,Windows 10 Enterprise +LEG-WS-029,10.10.3.129,ACME\emartinez,10,2026-02-14T10:49:11.753Z,,Windows 11 Enterprise +LEG-WS-029,10.10.3.129,ACME\gwhite,10,2026-02-20T01:41:09.184Z,2026-02-20T08:35:51.265Z,Windows 11 Enterprise +LEG-WS-029,10.10.3.129,ACME\svc_backup,3,2026-02-12T04:17:16.386Z,2026-02-12T12:39:20.882Z,Windows 11 Enterprise +MKT-WS-030,10.10.1.130,ACME\dlee,10,2026-02-19T09:56:10.855Z,2026-02-19T19:48:24.356Z,Windows Server 2022 +MKT-WS-030,10.10.1.130,ACME\agarcia,10,2026-02-17T17:21:55.036Z,2026-02-17T22:09:46.832Z,Windows Server 2022 +EXEC-WS-031,10.10.2.131,ACME\admin,10,2026-02-10T16:44:36.145Z,,Windows Server 2019 +IT-WS-032,10.10.3.132,ACME\cjohnson,10,2026-02-12T21:01:40.843Z,2026-02-13T00:13:30.847Z,Windows 10 Enterprise +IT-WS-032,10.10.3.132,ACME\svc_sql,3,2026-02-10T08:49:32.659Z,2026-02-10T10:39:13.588Z,Windows 10 Enterprise +IT-WS-032,10.10.3.132,ACME\idavis,2,2026-02-20T11:31:40.794Z,2026-02-20T16:48:16.067Z,Windows 10 Enterprise +HR-WS-033,10.10.1.133,ACME\agarcia,3,2026-02-12T11:07:06.421Z,2026-02-12T20:44:06.116Z,Windows 11 Enterprise +HR-WS-033,10.10.1.133,ACME\idavis,2,2026-02-12T21:15:41.371Z,2026-02-13T03:37:44.480Z,Windows 11 Enterprise +HR-WS-033,10.10.1.133,ACME\cjohnson,2,2026-02-10T13:57:00.717Z,2026-02-10T20:39:38.037Z,Windows 11 Enterprise +FIN-WS-034,10.10.2.134,ACME\bwilson,3,2026-02-17T18:03:46.436Z,2026-02-18T03:19:43.816Z,Windows Server 2022 +SLS-WS-035,10.10.3.135,ACME\svc_sql,10,2026-02-15T12:57:07.282Z,2026-02-15T19:04:37.869Z,Windows Server 2019 +ENG-WS-036,10.10.1.136,ACME\svc_web,10,2026-02-18T15:40:50.583Z,2026-02-18T18:05:35.800Z,Windows 10 Enterprise +LEG-WS-037,10.10.2.137,ACME\bwilson,10,2026-02-16T02:10:26.988Z,2026-02-16T06:56:01.127Z,Windows 11 Enterprise +LEG-WS-037,10.10.2.137,ACME\jsmith,2,2026-02-17T10:55:10.623Z,2026-02-17T17:06:13.738Z,Windows 11 Enterprise +LEG-WS-037,10.10.2.137,ACME\admin,3,2026-02-15T08:12:50.391Z,2026-02-15T16:48:40.322Z,Windows 11 Enterprise +MKT-WS-038,10.10.3.138,ACME\admin,10,2026-02-14T14:22:36.434Z,2026-02-14T20:33:17.463Z,Windows Server 2022 +MKT-WS-038,10.10.3.138,ACME\idavis,2,2026-02-10T12:33:19.862Z,,Windows Server 2022 +MKT-WS-038,10.10.3.138,ACME\cjohnson,3,2026-02-14T03:03:39.346Z,,Windows Server 2022 +EXEC-WS-039,10.10.1.139,ACME\emartinez,3,2026-02-12T15:26:12.740Z,2026-02-12T18:23:31.810Z,Windows Server 2019 +IT-WS-040,10.10.2.140,ACME\idavis,2,2026-02-12T15:39:47.637Z,2026-02-12T22:11:33.746Z,Windows 10 Enterprise +IT-WS-040,10.10.2.140,ACME\fthompson,2,2026-02-13T10:36:38.122Z,,Windows 10 Enterprise +HR-WS-041,10.10.3.141,ACME\dlee,3,2026-02-15T16:45:18.354Z,,Windows 11 Enterprise +FIN-WS-042,10.10.1.142,ACME\svc_backup,10,2026-02-13T01:05:29.949Z,2026-02-13T08:45:38.547Z,Windows Server 2022 +FIN-WS-042,10.10.1.142,ACME\gwhite,10,2026-02-12T05:08:08.376Z,2026-02-12T14:57:07.908Z,Windows Server 2022 +FIN-WS-042,10.10.1.142,ACME\bwilson,2,2026-02-11T09:12:22.768Z,2026-02-11T18:03:32.327Z,Windows Server 2022 +SLS-WS-043,10.10.2.143,ACME\emartinez,10,2026-02-10T08:11:58.189Z,2026-02-10T14:21:34.307Z,Windows Server 2019 +SLS-WS-043,10.10.2.143,ACME\svc_sql,10,2026-02-14T03:50:49.336Z,2026-02-14T12:06:10.084Z,Windows Server 2019 +ENG-WS-044,10.10.3.144,ACME\fthompson,3,2026-02-10T21:26:43.757Z,,Windows 10 Enterprise +ENG-WS-044,10.10.3.144,ACME\hbrown,2,2026-02-15T13:43:23.944Z,2026-02-15T23:21:05.115Z,Windows 10 Enterprise +ENG-WS-044,10.10.3.144,ACME\idavis,2,2026-02-11T21:26:42.687Z,2026-02-12T03:15:22.121Z,Windows 10 Enterprise +LEG-WS-045,10.10.1.145,ACME\svc_backup,10,2026-02-14T13:34:41.010Z,2026-02-14T19:05:53.025Z,Windows 11 Enterprise +LEG-WS-045,10.10.1.145,ACME\agarcia,10,2026-02-10T15:47:07.953Z,2026-02-11T00:44:00.362Z,Windows 11 Enterprise +LEG-WS-045,10.10.1.145,ACME\bwilson,10,2026-02-15T20:33:32.011Z,2026-02-16T04:02:03.695Z,Windows 11 Enterprise +MKT-WS-046,10.10.2.146,ACME\emartinez,3,2026-02-12T03:40:13.508Z,2026-02-12T08:12:36.966Z,Windows Server 2022 +EXEC-WS-047,10.10.3.147,ACME\svc_web,2,2026-02-20T04:37:26.574Z,2026-02-20T12:36:14.841Z,Windows Server 2019 +EXEC-WS-047,10.10.3.147,ACME\cjohnson,2,2026-02-17T03:09:07.678Z,2026-02-17T05:11:23.506Z,Windows Server 2019 +IT-WS-048,10.10.1.148,ACME\svc_backup,2,2026-02-11T18:49:32.007Z,,Windows 10 Enterprise +IT-WS-048,10.10.1.148,ACME\admin,10,2026-02-19T13:38:11.426Z,,Windows 10 Enterprise +HR-WS-049,10.10.2.149,ACME\idavis,2,2026-02-13T09:27:02.147Z,2026-02-13T14:09:17.279Z,Windows 11 Enterprise +HR-WS-049,10.10.2.149,ACME\cjohnson,10,2026-02-16T14:31:31.829Z,2026-02-16T20:21:16.254Z,Windows 11 Enterprise +HR-WS-049,10.10.2.149,ACME\svc_web,10,2026-02-11T04:49:41.763Z,2026-02-11T10:53:32.643Z,Windows 11 Enterprise +FIN-WS-050,10.10.3.150,ACME\svc_sql,10,2026-02-16T13:23:33.444Z,2026-02-16T15:30:49.957Z,Windows Server 2022 +FIN-WS-050,10.10.3.150,ACME\svc_web,10,2026-02-13T09:58:42.075Z,2026-02-13T16:29:30.095Z,Windows Server 2022 +SLS-WS-051,10.10.1.151,ACME\agarcia,10,2026-02-18T07:55:41.992Z,2026-02-18T10:54:03.481Z,Windows Server 2019 +SLS-WS-051,10.10.1.151,ACME\admin,2,2026-02-15T16:03:29.360Z,2026-02-16T00:17:55.642Z,Windows Server 2019 +ENG-WS-052,10.10.2.152,ACME\svc_web,10,2026-02-18T12:28:09.927Z,2026-02-18T16:46:29.828Z,Windows 10 Enterprise +ENG-WS-052,10.10.2.152,ACME\idavis,3,2026-02-18T23:31:19.526Z,2026-02-19T08:54:17.009Z,Windows 10 Enterprise +LEG-WS-053,10.10.3.153,ACME\gwhite,2,2026-02-16T21:58:16.692Z,,Windows 11 Enterprise +MKT-WS-054,10.10.1.154,ACME\fthompson,10,2026-02-16T02:40:07.132Z,2026-02-16T06:05:45.953Z,Windows Server 2022 +EXEC-WS-055,10.10.2.155,ACME\svc_web,3,2026-02-14T12:56:53.489Z,,Windows Server 2019 +EXEC-WS-055,10.10.2.155,ACME\svc_sql,2,2026-02-16T19:46:18.314Z,2026-02-17T03:37:45.216Z,Windows Server 2019 +IT-WS-056,10.10.3.156,ACME\agarcia,10,2026-02-13T12:11:31.170Z,2026-02-13T20:23:26.255Z,Windows 10 Enterprise +IT-WS-056,10.10.3.156,ACME\bwilson,2,2026-02-18T07:47:28.631Z,2026-02-18T12:43:49.215Z,Windows 10 Enterprise +IT-WS-056,10.10.3.156,ACME\fthompson,10,2026-02-15T10:34:59.328Z,,Windows 10 Enterprise +HR-WS-057,10.10.1.157,ACME\emartinez,10,2026-02-12T20:30:10.337Z,,Windows 11 Enterprise +HR-WS-057,10.10.1.157,ACME\fthompson,10,2026-02-17T23:44:46.543Z,2026-02-18T08:06:20.732Z,Windows 11 Enterprise +FIN-WS-058,10.10.2.158,ACME\admin,10,2026-02-14T22:49:09.181Z,,Windows Server 2022 +SLS-WS-059,10.10.3.159,ACME\agarcia,2,2026-02-17T03:15:51.656Z,,Windows Server 2019 +SLS-WS-059,10.10.3.159,ACME\fthompson,10,2026-02-18T17:16:46.768Z,2026-02-18T21:18:32.972Z,Windows Server 2019 +ENG-WS-060,10.10.1.160,ACME\dlee,10,2026-02-11T01:43:00.260Z,,Windows 10 Enterprise +LEG-WS-061,10.10.2.161,ACME\gwhite,2,2026-02-13T11:12:03.130Z,,Windows 11 Enterprise +LEG-WS-061,10.10.2.161,ACME\fthompson,10,2026-02-16T23:31:29.658Z,2026-02-17T01:57:47.139Z,Windows 11 Enterprise +LEG-WS-061,10.10.2.161,ACME\emartinez,2,2026-02-11T05:57:03.436Z,2026-02-11T06:42:29.220Z,Windows 11 Enterprise +MKT-WS-062,10.10.3.162,ACME\svc_sql,2,2026-02-20T01:38:41.003Z,,Windows Server 2022 +MKT-WS-062,10.10.3.162,ACME\agarcia,2,2026-02-18T12:14:12.295Z,2026-02-18T13:22:44.877Z,Windows Server 2022 +MKT-WS-062,10.10.3.162,ACME\jsmith,3,2026-02-11T05:12:34.424Z,,Windows Server 2022 +EXEC-WS-063,10.10.1.163,ACME\admin,10,2026-02-15T01:20:24.037Z,2026-02-15T08:29:33.232Z,Windows Server 2019 +IT-WS-064,10.10.2.164,ACME\emartinez,2,2026-02-17T11:38:09.952Z,2026-02-17T21:34:46.199Z,Windows 10 Enterprise +HR-WS-065,10.10.3.165,ACME\bwilson,2,2026-02-12T07:12:16.922Z,,Windows 11 Enterprise +HR-WS-065,10.10.3.165,ACME\svc_backup,10,2026-02-11T00:56:04.540Z,2026-02-11T08:01:21.095Z,Windows 11 Enterprise +FIN-WS-066,10.10.1.166,ACME\dlee,10,2026-02-19T05:57:37.028Z,2026-02-19T11:17:42.241Z,Windows Server 2022 +SLS-WS-067,10.10.2.167,ACME\svc_backup,2,2026-02-15T12:30:46.626Z,,Windows Server 2019 +ENG-WS-068,10.10.3.168,ACME\admin,10,2026-02-18T12:37:02.663Z,,Windows 10 Enterprise +ENG-WS-068,10.10.3.168,ACME\cjohnson,10,2026-02-14T14:25:49.436Z,,Windows 10 Enterprise +ENG-WS-068,10.10.3.168,ACME\dlee,10,2026-02-12T04:36:57.506Z,2026-02-12T05:41:35.348Z,Windows 10 Enterprise +LEG-WS-069,10.10.1.169,ACME\fthompson,2,2026-02-16T20:07:50.289Z,2026-02-17T04:27:27.454Z,Windows 11 Enterprise +MKT-WS-070,10.10.2.170,ACME\dlee,10,2026-02-14T11:37:16.104Z,2026-02-14T13:22:16.645Z,Windows Server 2022 +MKT-WS-070,10.10.2.170,ACME\svc_web,3,2026-02-10T08:22:31.467Z,2026-02-10T10:17:31.541Z,Windows Server 2022 +MKT-WS-070,10.10.2.170,ACME\svc_sql,3,2026-02-18T04:28:19.510Z,2026-02-18T11:48:49.289Z,Windows Server 2022 +EXEC-WS-071,10.10.3.171,ACME\admin,2,2026-02-14T21:25:07.016Z,2026-02-15T01:48:57.362Z,Windows Server 2019 +EXEC-WS-071,10.10.3.171,ACME\svc_backup,10,2026-02-12T20:12:27.125Z,2026-02-12T23:20:08.269Z,Windows Server 2019 +EXEC-WS-071,10.10.3.171,ACME\cjohnson,10,2026-02-16T09:32:31.958Z,2026-02-16T10:29:12.449Z,Windows Server 2019 +IT-WS-072,10.10.1.172,ACME\idavis,2,2026-02-19T15:23:35.302Z,2026-02-20T00:57:36.100Z,Windows 10 Enterprise +HR-WS-073,10.10.2.173,ACME\emartinez,2,2026-02-14T09:20:44.855Z,2026-02-14T18:55:52.875Z,Windows 11 Enterprise +HR-WS-073,10.10.2.173,ACME\hbrown,2,2026-02-13T11:47:22.510Z,2026-02-13T13:44:56.845Z,Windows 11 Enterprise +HR-WS-073,10.10.2.173,ACME\cjohnson,3,2026-02-14T16:58:28.455Z,2026-02-14T22:43:13.054Z,Windows 11 Enterprise +FIN-WS-074,10.10.3.174,ACME\dlee,10,2026-02-16T18:29:13.839Z,,Windows Server 2022 +FIN-WS-074,10.10.3.174,ACME\admin,10,2026-02-19T12:25:04.093Z,2026-02-19T15:25:32.007Z,Windows Server 2022 +FIN-WS-074,10.10.3.174,ACME\gwhite,10,2026-02-13T17:34:03.583Z,,Windows Server 2022 +SLS-WS-075,10.10.1.175,ACME\admin,10,2026-02-16T15:23:53.945Z,2026-02-16T16:04:05.964Z,Windows Server 2019 +SLS-WS-075,10.10.1.175,ACME\svc_sql,2,2026-02-14T19:49:21.691Z,2026-02-15T04:31:54.404Z,Windows Server 2019 +DC-01,10.10.1.10,ACME\admin,2,2026-02-15T17:23:38.033Z,2026-02-15T18:02:54.817Z,Windows Server 2022 +DC-02,10.10.2.10,ACME\admin,10,2026-02-12T03:04:20.793Z,2026-02-12T07:34:27.380Z,Windows Server 2022 +DC-02,10.10.2.10,ACME\gwhite,2,2026-02-17T22:41:13.350Z,,Windows Server 2022 +DC-02,10.10.2.10,ACME\dlee,10,2026-02-14T17:29:00.267Z,,Windows Server 2022 +FILE-01,10.10.1.11,ACME\bwilson,3,2026-02-11T21:18:31.543Z,,Windows Server 2019 +FILE-01,10.10.1.11,ACME\hbrown,10,2026-02-16T00:53:59.083Z,2026-02-16T03:20:43.181Z,Windows Server 2019 +FILE-01,10.10.1.11,ACME\emartinez,3,2026-02-18T20:53:55.592Z,2026-02-19T05:59:50.555Z,Windows Server 2019 +EXCH-01,10.10.1.12,ACME\bwilson,10,2026-02-12T16:54:40.664Z,,Windows Server 2022 +EXCH-01,10.10.1.12,ACME\dlee,10,2026-02-13T00:45:40.170Z,,Windows Server 2022 +EXCH-01,10.10.1.12,ACME\svc_sql,2,2026-02-19T12:13:54.245Z,2026-02-19T18:00:56.147Z,Windows Server 2022 +WEB-01,10.10.3.10,ACME\admin,2,2026-02-11T04:22:10.529Z,2026-02-11T10:31:15.005Z,Windows Server 2022 +WEB-01,10.10.3.10,ACME\hbrown,3,2026-02-20T02:24:15.106Z,2026-02-20T04:27:46.695Z,Windows Server 2022 +WEB-01,10.10.3.10,ACME\cjohnson,2,2026-02-11T15:43:33.584Z,2026-02-11T19:05:11.076Z,Windows Server 2022 +SQL-01,10.10.2.11,ACME\agarcia,2,2026-02-16T14:25:46.694Z,2026-02-16T15:21:39.280Z,Windows Server 2019 +SQL-01,10.10.2.11,ACME\svc_backup,2,2026-02-11T07:27:04.230Z,2026-02-11T09:20:41.606Z,Windows Server 2019 +PROXY-01,10.10.1.13,ACME\cjohnson,10,2026-02-17T00:47:34.831Z,2026-02-17T07:52:30.535Z,Windows Server 2022 diff --git a/backend/tests/test_csvs/06_scheduled_tasks.csv b/backend/tests/test_csvs/06_scheduled_tasks.csv new file mode 100644 index 0000000..93a0686 --- /dev/null +++ b/backend/tests/test_csvs/06_scheduled_tasks.csv @@ -0,0 +1,411 @@ +Hostname,IP,TaskName,CommandLine,Enabled,LastRunTime,NextRunTime,Username +HR-WS-001,10.10.2.101,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-11T04:10:18.272Z,2026-02-13T00:59:27.083Z,NT AUTHORITY\SYSTEM +HR-WS-001,10.10.2.101,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-18T22:21:06.535Z,2026-02-13T00:20:19.721Z,NT AUTHORITY\SYSTEM +HR-WS-001,10.10.2.101,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-11T22:34:59.678Z,2026-02-10T14:58:18.353Z,NT AUTHORITY\SYSTEM +HR-WS-001,10.10.2.101,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-19T10:19:22.767Z,2026-02-20T15:37:57.928Z,ACME\svc_backup +HR-WS-001,10.10.2.101,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-18T16:32:05.355Z,2026-02-18T09:04:04.511Z,ACME\svc_backup +FIN-WS-002,10.10.3.102,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-19T19:08:35.756Z,2026-02-17T04:24:25.316Z,NT AUTHORITY\SYSTEM +FIN-WS-002,10.10.3.102,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-12T10:09:36.081Z,2026-02-12T14:35:40.437Z,NT AUTHORITY\SYSTEM +FIN-WS-002,10.10.3.102,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-15T16:46:39.201Z,2026-02-18T17:27:26.085Z,NT AUTHORITY\SYSTEM +FIN-WS-002,10.10.3.102,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-15T19:09:52.759Z,2026-02-18T11:49:21.126Z,ACME\svc_backup +FIN-WS-002,10.10.3.102,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-19T01:57:38.377Z,2026-02-19T03:39:09.043Z,ACME\svc_backup +SLS-WS-003,10.10.1.103,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-17T23:33:16.784Z,2026-02-18T03:56:24.145Z,NT AUTHORITY\SYSTEM +SLS-WS-003,10.10.1.103,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-14T12:02:21.885Z,2026-02-10T09:06:28.155Z,NT AUTHORITY\SYSTEM +SLS-WS-003,10.10.1.103,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-10T08:29:32.180Z,2026-02-20T05:43:38.079Z,NT AUTHORITY\SYSTEM +SLS-WS-003,10.10.1.103,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-12T20:47:27.743Z,2026-02-14T20:40:38.686Z,ACME\svc_backup +SLS-WS-003,10.10.1.103,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-15T08:44:46.616Z,2026-02-14T02:51:26.262Z,ACME\svc_backup +ENG-WS-004,10.10.2.104,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-16T09:23:23.347Z,2026-02-14T22:26:28.830Z,NT AUTHORITY\SYSTEM +ENG-WS-004,10.10.2.104,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-20T06:44:32.640Z,2026-02-17T21:47:53.810Z,NT AUTHORITY\SYSTEM +ENG-WS-004,10.10.2.104,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-15T04:57:06.522Z,2026-02-12T18:35:33.511Z,NT AUTHORITY\SYSTEM +ENG-WS-004,10.10.2.104,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-13T19:05:56.454Z,2026-02-12T15:35:44.582Z,ACME\svc_backup +ENG-WS-004,10.10.2.104,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-15T12:42:15.302Z,2026-02-20T10:33:44.912Z,ACME\svc_backup +LEG-WS-005,10.10.3.105,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-12T06:05:12.613Z,2026-02-15T21:32:29.512Z,NT AUTHORITY\SYSTEM +LEG-WS-005,10.10.3.105,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-18T11:19:55.513Z,2026-02-10T22:00:16.747Z,NT AUTHORITY\SYSTEM +LEG-WS-005,10.10.3.105,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-16T12:32:08.627Z,2026-02-13T08:21:40.415Z,NT AUTHORITY\SYSTEM +LEG-WS-005,10.10.3.105,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-14T06:57:14.139Z,2026-02-11T10:11:17.762Z,ACME\svc_backup +LEG-WS-005,10.10.3.105,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-15T03:50:01.070Z,2026-02-18T00:35:18.228Z,ACME\svc_backup +MKT-WS-006,10.10.1.106,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-11T22:20:50.111Z,2026-02-17T09:07:59.275Z,NT AUTHORITY\SYSTEM +MKT-WS-006,10.10.1.106,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-15T03:21:15.355Z,2026-02-16T21:59:46.067Z,NT AUTHORITY\SYSTEM +MKT-WS-006,10.10.1.106,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-13T05:57:57.374Z,2026-02-10T16:59:40.813Z,NT AUTHORITY\SYSTEM +MKT-WS-006,10.10.1.106,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-11T23:34:05.389Z,2026-02-13T01:32:43.835Z,ACME\svc_backup +MKT-WS-006,10.10.1.106,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-18T04:35:33.516Z,2026-02-13T17:55:50.780Z,ACME\svc_backup +EXEC-WS-007,10.10.2.107,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-19T09:31:08.738Z,2026-02-17T19:09:26.442Z,NT AUTHORITY\SYSTEM +EXEC-WS-007,10.10.2.107,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-11T21:48:25.002Z,2026-02-11T03:43:03.357Z,NT AUTHORITY\SYSTEM +EXEC-WS-007,10.10.2.107,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-10T23:54:37.709Z,2026-02-14T23:33:07.222Z,NT AUTHORITY\SYSTEM +EXEC-WS-007,10.10.2.107,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-13T19:14:09.341Z,2026-02-14T09:51:49.598Z,ACME\svc_backup +EXEC-WS-007,10.10.2.107,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-19T10:07:28.683Z,2026-02-15T07:58:45.104Z,ACME\svc_backup +IT-WS-008,10.10.3.108,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-11T11:58:13.097Z,2026-02-19T14:28:46.034Z,NT AUTHORITY\SYSTEM +IT-WS-008,10.10.3.108,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-17T18:52:05.470Z,2026-02-19T08:37:29.557Z,NT AUTHORITY\SYSTEM +IT-WS-008,10.10.3.108,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-17T12:54:47.353Z,2026-02-18T13:22:38.075Z,NT AUTHORITY\SYSTEM +IT-WS-008,10.10.3.108,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-18T12:22:20.956Z,2026-02-15T10:44:19.542Z,ACME\svc_backup +IT-WS-008,10.10.3.108,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-17T15:14:52.999Z,2026-02-15T10:03:00.756Z,ACME\svc_backup +HR-WS-009,10.10.1.109,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,False,2026-02-15T17:50:29.509Z,2026-02-19T02:51:18.037Z,NT AUTHORITY\SYSTEM +HR-WS-009,10.10.1.109,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-12T18:45:37.946Z,2026-02-18T18:31:24.942Z,NT AUTHORITY\SYSTEM +HR-WS-009,10.10.1.109,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-20T14:02:14.569Z,2026-02-16T07:54:05.576Z,NT AUTHORITY\SYSTEM +HR-WS-009,10.10.1.109,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-12T14:46:40.034Z,2026-02-17T09:05:45.968Z,ACME\svc_backup +HR-WS-009,10.10.1.109,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-20T12:34:17.719Z,2026-02-10T10:25:36.528Z,ACME\svc_backup +FIN-WS-010,10.10.2.110,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-12T16:05:20.284Z,2026-02-11T14:09:53.006Z,NT AUTHORITY\SYSTEM +FIN-WS-010,10.10.2.110,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-18T17:20:38.118Z,2026-02-11T14:06:07.250Z,NT AUTHORITY\SYSTEM +FIN-WS-010,10.10.2.110,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-17T16:42:52.183Z,2026-02-18T13:30:07.185Z,NT AUTHORITY\SYSTEM +FIN-WS-010,10.10.2.110,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-20T16:08:48.332Z,2026-02-12T08:59:35.678Z,ACME\svc_backup +FIN-WS-010,10.10.2.110,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-10T21:41:35.587Z,2026-02-19T02:02:26.909Z,ACME\svc_backup +SLS-WS-011,10.10.3.111,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-12T07:35:36.579Z,2026-02-14T04:17:39.468Z,NT AUTHORITY\SYSTEM +SLS-WS-011,10.10.3.111,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-11T10:21:27.809Z,2026-02-19T22:23:50.559Z,NT AUTHORITY\SYSTEM +SLS-WS-011,10.10.3.111,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-17T23:54:51.119Z,2026-02-11T11:19:59.085Z,NT AUTHORITY\SYSTEM +SLS-WS-011,10.10.3.111,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-18T14:59:56.507Z,2026-02-10T15:12:34.534Z,ACME\svc_backup +SLS-WS-011,10.10.3.111,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-16T01:42:27.441Z,2026-02-15T16:42:53.961Z,ACME\svc_backup +ENG-WS-012,10.10.1.112,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-18T08:47:19.597Z,2026-02-15T23:16:44.221Z,NT AUTHORITY\SYSTEM +ENG-WS-012,10.10.1.112,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-16T05:17:16.467Z,2026-02-20T15:14:36.400Z,NT AUTHORITY\SYSTEM +ENG-WS-012,10.10.1.112,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-12T17:04:07.300Z,2026-02-17T13:33:01.444Z,NT AUTHORITY\SYSTEM +ENG-WS-012,10.10.1.112,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-19T10:41:22.404Z,2026-02-15T08:14:38.725Z,ACME\svc_backup +ENG-WS-012,10.10.1.112,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-16T19:29:02.351Z,2026-02-11T19:48:45.196Z,ACME\svc_backup +LEG-WS-013,10.10.2.113,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-19T12:38:12.330Z,2026-02-17T15:08:18.153Z,NT AUTHORITY\SYSTEM +LEG-WS-013,10.10.2.113,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-12T12:39:57.944Z,2026-02-16T08:29:18.173Z,NT AUTHORITY\SYSTEM +LEG-WS-013,10.10.2.113,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-14T16:53:14.600Z,2026-02-10T15:48:25.569Z,NT AUTHORITY\SYSTEM +LEG-WS-013,10.10.2.113,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-18T23:37:15.766Z,2026-02-16T04:26:54.647Z,ACME\svc_backup +LEG-WS-013,10.10.2.113,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-19T18:56:57.978Z,2026-02-18T08:05:41.707Z,ACME\svc_backup +MKT-WS-014,10.10.3.114,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-19T04:54:01.657Z,2026-02-16T08:42:00.134Z,NT AUTHORITY\SYSTEM +MKT-WS-014,10.10.3.114,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-16T00:19:53.914Z,2026-02-15T07:55:08.380Z,NT AUTHORITY\SYSTEM +MKT-WS-014,10.10.3.114,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-17T02:15:29.456Z,2026-02-17T14:37:46.580Z,NT AUTHORITY\SYSTEM +MKT-WS-014,10.10.3.114,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-19T03:41:01.814Z,2026-02-18T20:49:02.270Z,ACME\svc_backup +MKT-WS-014,10.10.3.114,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-18T22:20:31.364Z,2026-02-16T10:39:04.357Z,ACME\svc_backup +EXEC-WS-015,10.10.1.115,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-16T00:25:37.310Z,2026-02-11T04:27:50.639Z,NT AUTHORITY\SYSTEM +EXEC-WS-015,10.10.1.115,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-13T21:45:43.509Z,2026-02-17T07:13:31.528Z,NT AUTHORITY\SYSTEM +EXEC-WS-015,10.10.1.115,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-18T10:33:00.550Z,2026-02-12T03:49:17.618Z,NT AUTHORITY\SYSTEM +EXEC-WS-015,10.10.1.115,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-19T13:57:59.293Z,2026-02-12T17:08:19.461Z,ACME\svc_backup +EXEC-WS-015,10.10.1.115,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-20T15:58:21.276Z,2026-02-18T02:43:23.938Z,ACME\svc_backup +IT-WS-016,10.10.2.116,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,False,2026-02-11T17:53:34.407Z,2026-02-15T13:47:25.202Z,NT AUTHORITY\SYSTEM +IT-WS-016,10.10.2.116,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-19T05:34:08.201Z,2026-02-10T12:07:30.178Z,NT AUTHORITY\SYSTEM +IT-WS-016,10.10.2.116,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-17T00:09:46.336Z,2026-02-15T06:50:54.924Z,NT AUTHORITY\SYSTEM +IT-WS-016,10.10.2.116,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-15T09:11:55.347Z,2026-02-19T18:34:52.818Z,ACME\svc_backup +IT-WS-016,10.10.2.116,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-11T23:33:28.562Z,2026-02-17T11:48:41.377Z,ACME\svc_backup +HR-WS-017,10.10.3.117,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-15T09:47:17.619Z,2026-02-20T07:55:22.028Z,NT AUTHORITY\SYSTEM +HR-WS-017,10.10.3.117,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-12T20:20:44.882Z,2026-02-19T08:19:13.236Z,NT AUTHORITY\SYSTEM +HR-WS-017,10.10.3.117,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-12T15:24:05.664Z,2026-02-11T00:56:49.490Z,NT AUTHORITY\SYSTEM +HR-WS-017,10.10.3.117,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-14T07:55:36.757Z,2026-02-19T07:54:44.258Z,ACME\svc_backup +HR-WS-017,10.10.3.117,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-14T16:29:13.283Z,2026-02-14T21:46:54.021Z,ACME\svc_backup +FIN-WS-018,10.10.1.118,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-18T14:39:21.986Z,2026-02-14T21:47:34.203Z,NT AUTHORITY\SYSTEM +FIN-WS-018,10.10.1.118,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-14T22:11:15.193Z,2026-02-11T11:23:59.541Z,NT AUTHORITY\SYSTEM +FIN-WS-018,10.10.1.118,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-14T13:50:52.916Z,2026-02-14T00:08:04.372Z,NT AUTHORITY\SYSTEM +FIN-WS-018,10.10.1.118,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-20T06:09:38.641Z,2026-02-19T21:38:06.213Z,ACME\svc_backup +FIN-WS-018,10.10.1.118,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-16T23:36:15.163Z,2026-02-14T22:05:30.950Z,ACME\svc_backup +SLS-WS-019,10.10.2.119,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-16T17:26:19.317Z,2026-02-18T14:05:54.158Z,NT AUTHORITY\SYSTEM +SLS-WS-019,10.10.2.119,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-13T00:53:27.139Z,2026-02-17T01:41:01.159Z,NT AUTHORITY\SYSTEM +SLS-WS-019,10.10.2.119,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-18T11:19:23.835Z,2026-02-16T12:51:56.274Z,NT AUTHORITY\SYSTEM +SLS-WS-019,10.10.2.119,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-11T07:27:43.891Z,2026-02-17T13:45:31.692Z,ACME\svc_backup +SLS-WS-019,10.10.2.119,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-18T13:09:32.527Z,2026-02-16T17:33:43.569Z,ACME\svc_backup +ENG-WS-020,10.10.3.120,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-18T06:49:14.065Z,2026-02-15T08:04:18.774Z,NT AUTHORITY\SYSTEM +ENG-WS-020,10.10.3.120,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-14T09:23:50.169Z,2026-02-10T12:51:38.083Z,NT AUTHORITY\SYSTEM +ENG-WS-020,10.10.3.120,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-18T05:01:59.602Z,2026-02-16T13:15:30.465Z,NT AUTHORITY\SYSTEM +ENG-WS-020,10.10.3.120,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-11T05:20:52.039Z,2026-02-10T11:12:43.499Z,ACME\svc_backup +ENG-WS-020,10.10.3.120,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-15T08:32:00.457Z,2026-02-17T15:43:39.779Z,ACME\svc_backup +LEG-WS-021,10.10.1.121,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-20T11:10:29.415Z,2026-02-11T13:13:41.644Z,NT AUTHORITY\SYSTEM +LEG-WS-021,10.10.1.121,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-17T23:06:43.206Z,2026-02-12T10:50:24.538Z,NT AUTHORITY\SYSTEM +LEG-WS-021,10.10.1.121,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-11T01:40:28.291Z,2026-02-15T22:59:54.785Z,NT AUTHORITY\SYSTEM +LEG-WS-021,10.10.1.121,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-12T11:56:38.797Z,2026-02-12T05:51:20.276Z,ACME\svc_backup +LEG-WS-021,10.10.1.121,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-10T22:08:15.182Z,2026-02-15T16:48:06.361Z,ACME\svc_backup +MKT-WS-022,10.10.2.122,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-12T17:43:14.699Z,2026-02-17T08:30:49.188Z,NT AUTHORITY\SYSTEM +MKT-WS-022,10.10.2.122,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-15T06:41:06.394Z,2026-02-19T10:32:28.292Z,NT AUTHORITY\SYSTEM +MKT-WS-022,10.10.2.122,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-19T10:24:37.330Z,2026-02-13T02:16:21.356Z,NT AUTHORITY\SYSTEM +MKT-WS-022,10.10.2.122,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-17T21:37:04.120Z,2026-02-13T06:53:53.583Z,ACME\svc_backup +MKT-WS-022,10.10.2.122,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-19T20:02:44.067Z,2026-02-20T04:48:00.316Z,ACME\svc_backup +EXEC-WS-023,10.10.3.123,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,False,2026-02-15T17:40:24.940Z,2026-02-15T11:34:19.658Z,NT AUTHORITY\SYSTEM +EXEC-WS-023,10.10.3.123,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-13T08:32:29.614Z,2026-02-18T15:15:55.737Z,NT AUTHORITY\SYSTEM +EXEC-WS-023,10.10.3.123,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-19T22:32:49.533Z,2026-02-11T02:57:20.999Z,NT AUTHORITY\SYSTEM +EXEC-WS-023,10.10.3.123,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-10T13:55:56.086Z,2026-02-19T23:21:07.294Z,ACME\svc_backup +EXEC-WS-023,10.10.3.123,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-15T00:20:20.226Z,2026-02-18T08:40:38.412Z,ACME\svc_backup +IT-WS-024,10.10.1.124,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-11T15:25:00.827Z,2026-02-10T09:26:07.179Z,NT AUTHORITY\SYSTEM +IT-WS-024,10.10.1.124,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-11T14:09:06.733Z,2026-02-15T06:05:45.983Z,NT AUTHORITY\SYSTEM +IT-WS-024,10.10.1.124,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-12T07:46:04.449Z,2026-02-14T05:57:31.991Z,NT AUTHORITY\SYSTEM +IT-WS-024,10.10.1.124,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-13T15:17:14.219Z,2026-02-17T20:08:02.700Z,ACME\svc_backup +IT-WS-024,10.10.1.124,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-19T19:59:37.242Z,2026-02-16T00:09:04.759Z,ACME\svc_backup +HR-WS-025,10.10.2.125,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,False,2026-02-16T04:55:50.389Z,2026-02-16T14:01:37.319Z,NT AUTHORITY\SYSTEM +HR-WS-025,10.10.2.125,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-15T13:04:32.418Z,2026-02-11T03:10:31.981Z,NT AUTHORITY\SYSTEM +HR-WS-025,10.10.2.125,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-20T03:38:36.810Z,2026-02-19T16:34:13.701Z,NT AUTHORITY\SYSTEM +HR-WS-025,10.10.2.125,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-13T15:01:01.192Z,2026-02-19T20:36:40.015Z,ACME\svc_backup +HR-WS-025,10.10.2.125,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-14T03:20:06.246Z,2026-02-15T07:33:50.496Z,ACME\svc_backup +FIN-WS-026,10.10.3.126,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-12T03:14:45.670Z,2026-02-19T17:51:52.973Z,NT AUTHORITY\SYSTEM +FIN-WS-026,10.10.3.126,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-12T02:37:02.769Z,2026-02-13T17:09:29.023Z,NT AUTHORITY\SYSTEM +FIN-WS-026,10.10.3.126,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-16T15:57:32.073Z,2026-02-12T07:59:55.524Z,NT AUTHORITY\SYSTEM +FIN-WS-026,10.10.3.126,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-11T16:37:59.553Z,2026-02-20T09:54:18.072Z,ACME\svc_backup +FIN-WS-026,10.10.3.126,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-13T08:39:07.969Z,2026-02-15T09:49:07.790Z,ACME\svc_backup +SLS-WS-027,10.10.1.127,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-18T15:23:10.055Z,2026-02-12T05:53:57.700Z,NT AUTHORITY\SYSTEM +SLS-WS-027,10.10.1.127,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-10T15:00:56.181Z,2026-02-19T15:38:50.857Z,NT AUTHORITY\SYSTEM +SLS-WS-027,10.10.1.127,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-14T00:42:32.206Z,2026-02-17T14:17:13.806Z,NT AUTHORITY\SYSTEM +SLS-WS-027,10.10.1.127,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-10T18:46:56.374Z,2026-02-12T21:23:32.173Z,ACME\svc_backup +SLS-WS-027,10.10.1.127,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-16T04:37:41.365Z,2026-02-11T01:23:31.251Z,ACME\svc_backup +ENG-WS-028,10.10.2.128,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-15T13:04:58.474Z,2026-02-17T02:25:59.995Z,NT AUTHORITY\SYSTEM +ENG-WS-028,10.10.2.128,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-13T08:54:27.210Z,2026-02-19T20:33:58.101Z,NT AUTHORITY\SYSTEM +ENG-WS-028,10.10.2.128,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-17T04:37:46.619Z,2026-02-14T19:45:40.877Z,NT AUTHORITY\SYSTEM +ENG-WS-028,10.10.2.128,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-15T16:16:04.921Z,2026-02-10T14:30:04.621Z,ACME\svc_backup +ENG-WS-028,10.10.2.128,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-15T10:32:54.762Z,2026-02-16T13:11:05.730Z,ACME\svc_backup +LEG-WS-029,10.10.3.129,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-10T20:33:02.827Z,2026-02-16T16:21:00.588Z,NT AUTHORITY\SYSTEM +LEG-WS-029,10.10.3.129,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-13T23:34:43.565Z,2026-02-12T13:16:47.250Z,NT AUTHORITY\SYSTEM +LEG-WS-029,10.10.3.129,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-19T13:38:02.407Z,2026-02-17T10:33:17.759Z,NT AUTHORITY\SYSTEM +LEG-WS-029,10.10.3.129,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-15T20:36:41.924Z,2026-02-13T11:46:06.808Z,ACME\svc_backup +LEG-WS-029,10.10.3.129,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-17T18:14:48.691Z,2026-02-18T00:04:12.553Z,ACME\svc_backup +MKT-WS-030,10.10.1.130,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,False,2026-02-16T04:50:25.242Z,2026-02-19T06:32:03.303Z,NT AUTHORITY\SYSTEM +MKT-WS-030,10.10.1.130,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-16T03:09:11.888Z,2026-02-18T19:17:17.312Z,NT AUTHORITY\SYSTEM +MKT-WS-030,10.10.1.130,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-16T19:54:43.760Z,2026-02-10T08:42:57.840Z,NT AUTHORITY\SYSTEM +MKT-WS-030,10.10.1.130,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-20T15:58:22.109Z,2026-02-18T03:19:40.560Z,ACME\svc_backup +MKT-WS-030,10.10.1.130,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-12T22:26:04.406Z,2026-02-15T16:12:35.508Z,ACME\svc_backup +EXEC-WS-031,10.10.2.131,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-19T18:39:03.864Z,2026-02-13T01:35:35.660Z,NT AUTHORITY\SYSTEM +EXEC-WS-031,10.10.2.131,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-20T02:01:54.852Z,2026-02-15T22:53:31.476Z,NT AUTHORITY\SYSTEM +EXEC-WS-031,10.10.2.131,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-16T22:27:22.763Z,2026-02-19T20:20:26.276Z,NT AUTHORITY\SYSTEM +EXEC-WS-031,10.10.2.131,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-17T13:30:08.797Z,2026-02-10T21:37:36.455Z,ACME\svc_backup +EXEC-WS-031,10.10.2.131,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-10T19:45:08.117Z,2026-02-15T03:26:58.890Z,ACME\svc_backup +IT-WS-032,10.10.3.132,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-16T01:11:58.620Z,2026-02-17T16:57:29.329Z,NT AUTHORITY\SYSTEM +IT-WS-032,10.10.3.132,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-12T01:08:52.343Z,2026-02-19T07:55:59.921Z,NT AUTHORITY\SYSTEM +IT-WS-032,10.10.3.132,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-15T06:08:56.865Z,2026-02-17T22:09:43.378Z,NT AUTHORITY\SYSTEM +IT-WS-032,10.10.3.132,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-10T19:49:42.684Z,2026-02-19T19:18:30.053Z,ACME\svc_backup +IT-WS-032,10.10.3.132,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-16T18:14:57.150Z,2026-02-19T15:36:07.924Z,ACME\svc_backup +HR-WS-033,10.10.1.133,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-17T05:31:20.367Z,2026-02-19T13:32:04.721Z,NT AUTHORITY\SYSTEM +HR-WS-033,10.10.1.133,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-20T07:41:32.969Z,2026-02-12T02:11:07.863Z,NT AUTHORITY\SYSTEM +HR-WS-033,10.10.1.133,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-19T12:03:45.202Z,2026-02-17T09:21:44.329Z,NT AUTHORITY\SYSTEM +HR-WS-033,10.10.1.133,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-20T00:18:58.723Z,2026-02-16T20:17:56.784Z,ACME\svc_backup +HR-WS-033,10.10.1.133,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-17T10:14:16.140Z,2026-02-15T01:13:59.702Z,ACME\svc_backup +FIN-WS-034,10.10.2.134,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-16T00:27:55.308Z,2026-02-13T18:34:21.414Z,NT AUTHORITY\SYSTEM +FIN-WS-034,10.10.2.134,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-15T05:21:12.636Z,2026-02-14T22:04:37.191Z,NT AUTHORITY\SYSTEM +FIN-WS-034,10.10.2.134,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-16T18:41:00.839Z,2026-02-14T22:25:57.601Z,NT AUTHORITY\SYSTEM +FIN-WS-034,10.10.2.134,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-15T18:02:25.400Z,2026-02-16T04:53:02.671Z,ACME\svc_backup +FIN-WS-034,10.10.2.134,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-13T15:50:06.949Z,2026-02-11T04:07:22.042Z,ACME\svc_backup +SLS-WS-035,10.10.3.135,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-15T23:52:06.120Z,2026-02-14T12:09:55.914Z,NT AUTHORITY\SYSTEM +SLS-WS-035,10.10.3.135,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-14T13:05:06.701Z,2026-02-15T08:42:28.508Z,NT AUTHORITY\SYSTEM +SLS-WS-035,10.10.3.135,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-10T11:15:21.002Z,2026-02-17T13:37:59.232Z,NT AUTHORITY\SYSTEM +SLS-WS-035,10.10.3.135,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-15T02:44:47.045Z,2026-02-15T04:41:10.501Z,ACME\svc_backup +SLS-WS-035,10.10.3.135,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-12T02:27:25.262Z,2026-02-20T08:42:40.871Z,ACME\svc_backup +ENG-WS-036,10.10.1.136,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-15T12:53:00.176Z,2026-02-13T04:33:20.240Z,NT AUTHORITY\SYSTEM +ENG-WS-036,10.10.1.136,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-12T14:22:34.288Z,2026-02-11T01:13:46.648Z,NT AUTHORITY\SYSTEM +ENG-WS-036,10.10.1.136,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-13T11:55:36.117Z,2026-02-10T14:20:40.804Z,NT AUTHORITY\SYSTEM +ENG-WS-036,10.10.1.136,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-16T12:46:25.045Z,2026-02-19T20:12:56.821Z,ACME\svc_backup +ENG-WS-036,10.10.1.136,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-14T07:34:56.922Z,2026-02-10T12:49:56.644Z,ACME\svc_backup +LEG-WS-037,10.10.2.137,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-18T02:51:51.978Z,2026-02-13T06:11:38.941Z,NT AUTHORITY\SYSTEM +LEG-WS-037,10.10.2.137,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-11T01:44:07.216Z,2026-02-16T23:48:04.905Z,NT AUTHORITY\SYSTEM +LEG-WS-037,10.10.2.137,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-18T17:58:07.400Z,2026-02-15T22:26:08.683Z,NT AUTHORITY\SYSTEM +LEG-WS-037,10.10.2.137,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-17T18:16:48.846Z,2026-02-10T16:29:10.995Z,ACME\svc_backup +LEG-WS-037,10.10.2.137,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-11T17:42:26.427Z,2026-02-16T12:20:33.670Z,ACME\svc_backup +MKT-WS-038,10.10.3.138,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-19T17:39:41.163Z,2026-02-11T04:30:07.114Z,NT AUTHORITY\SYSTEM +MKT-WS-038,10.10.3.138,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-18T09:19:05.003Z,2026-02-19T11:32:12.157Z,NT AUTHORITY\SYSTEM +MKT-WS-038,10.10.3.138,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-12T07:20:45.346Z,2026-02-16T19:24:42.020Z,NT AUTHORITY\SYSTEM +MKT-WS-038,10.10.3.138,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-13T23:31:46.676Z,2026-02-12T23:17:47.391Z,ACME\svc_backup +MKT-WS-038,10.10.3.138,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-15T06:38:36.143Z,2026-02-17T05:16:43.062Z,ACME\svc_backup +EXEC-WS-039,10.10.1.139,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-12T17:12:53.766Z,2026-02-17T07:38:30.430Z,NT AUTHORITY\SYSTEM +EXEC-WS-039,10.10.1.139,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-15T09:43:58.381Z,2026-02-16T15:33:28.709Z,NT AUTHORITY\SYSTEM +EXEC-WS-039,10.10.1.139,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-14T21:23:01.168Z,2026-02-14T17:31:20.994Z,NT AUTHORITY\SYSTEM +EXEC-WS-039,10.10.1.139,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-19T12:01:04.643Z,2026-02-10T16:20:29.794Z,ACME\svc_backup +EXEC-WS-039,10.10.1.139,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-13T17:39:02.933Z,2026-02-12T10:14:43.649Z,ACME\svc_backup +IT-WS-040,10.10.2.140,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-18T04:52:30.083Z,2026-02-12T22:44:13.582Z,NT AUTHORITY\SYSTEM +IT-WS-040,10.10.2.140,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-11T09:59:49.613Z,2026-02-12T04:53:13.144Z,NT AUTHORITY\SYSTEM +IT-WS-040,10.10.2.140,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-10T20:32:09.001Z,2026-02-15T21:51:24.060Z,NT AUTHORITY\SYSTEM +IT-WS-040,10.10.2.140,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-14T02:02:25.314Z,2026-02-13T19:45:08.607Z,ACME\svc_backup +IT-WS-040,10.10.2.140,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-12T08:37:46.983Z,2026-02-15T06:11:10.277Z,ACME\svc_backup +HR-WS-041,10.10.3.141,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,False,2026-02-20T16:34:18.148Z,2026-02-20T01:17:01.526Z,NT AUTHORITY\SYSTEM +HR-WS-041,10.10.3.141,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-14T18:27:49.393Z,2026-02-14T16:48:45.838Z,NT AUTHORITY\SYSTEM +HR-WS-041,10.10.3.141,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-16T19:58:20.162Z,2026-02-13T18:30:27.303Z,NT AUTHORITY\SYSTEM +HR-WS-041,10.10.3.141,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-16T07:35:31.485Z,2026-02-20T07:24:39.759Z,ACME\svc_backup +HR-WS-041,10.10.3.141,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-13T07:27:28.310Z,2026-02-13T11:41:10.906Z,ACME\svc_backup +FIN-WS-042,10.10.1.142,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,False,2026-02-12T08:32:06.811Z,2026-02-12T05:10:22.185Z,NT AUTHORITY\SYSTEM +FIN-WS-042,10.10.1.142,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-17T00:06:44.259Z,2026-02-20T16:31:44.712Z,NT AUTHORITY\SYSTEM +FIN-WS-042,10.10.1.142,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-13T09:20:35.899Z,2026-02-15T03:20:39.739Z,NT AUTHORITY\SYSTEM +FIN-WS-042,10.10.1.142,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-19T22:55:01.161Z,2026-02-15T03:32:13.303Z,ACME\svc_backup +FIN-WS-042,10.10.1.142,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-10T17:54:52.225Z,2026-02-18T08:28:27.424Z,ACME\svc_backup +SLS-WS-043,10.10.2.143,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-18T00:24:25.555Z,2026-02-16T02:01:43.780Z,NT AUTHORITY\SYSTEM +SLS-WS-043,10.10.2.143,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-13T14:00:55.806Z,2026-02-18T13:50:11.756Z,NT AUTHORITY\SYSTEM +SLS-WS-043,10.10.2.143,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-13T06:53:39.515Z,2026-02-20T04:01:26.269Z,NT AUTHORITY\SYSTEM +SLS-WS-043,10.10.2.143,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-20T00:12:31.793Z,2026-02-19T05:23:06.750Z,ACME\svc_backup +SLS-WS-043,10.10.2.143,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-13T13:02:39.583Z,2026-02-20T11:31:42.030Z,ACME\svc_backup +ENG-WS-044,10.10.3.144,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-17T21:30:20.789Z,2026-02-13T16:26:17.537Z,NT AUTHORITY\SYSTEM +ENG-WS-044,10.10.3.144,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-11T21:35:02.192Z,2026-02-15T01:29:08.612Z,NT AUTHORITY\SYSTEM +ENG-WS-044,10.10.3.144,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-20T00:35:55.846Z,2026-02-13T22:04:14.343Z,NT AUTHORITY\SYSTEM +ENG-WS-044,10.10.3.144,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-12T00:27:50.050Z,2026-02-14T12:14:17.634Z,ACME\svc_backup +ENG-WS-044,10.10.3.144,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-15T22:57:28.555Z,2026-02-18T21:33:18.664Z,ACME\svc_backup +LEG-WS-045,10.10.1.145,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-15T00:38:54.627Z,2026-02-18T17:56:33.277Z,NT AUTHORITY\SYSTEM +LEG-WS-045,10.10.1.145,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-10T14:37:41.313Z,2026-02-16T03:33:54.586Z,NT AUTHORITY\SYSTEM +LEG-WS-045,10.10.1.145,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-14T11:30:41.181Z,2026-02-18T20:06:24.052Z,NT AUTHORITY\SYSTEM +LEG-WS-045,10.10.1.145,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-17T19:45:45.532Z,2026-02-18T08:32:51.250Z,ACME\svc_backup +LEG-WS-045,10.10.1.145,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-10T17:46:03.622Z,2026-02-20T11:51:45.421Z,ACME\svc_backup +MKT-WS-046,10.10.2.146,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,False,2026-02-16T22:38:49.613Z,2026-02-16T05:01:54.471Z,NT AUTHORITY\SYSTEM +MKT-WS-046,10.10.2.146,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-19T07:31:12.356Z,2026-02-12T19:41:18.613Z,NT AUTHORITY\SYSTEM +MKT-WS-046,10.10.2.146,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-13T18:14:10.252Z,2026-02-18T21:06:38.332Z,NT AUTHORITY\SYSTEM +MKT-WS-046,10.10.2.146,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-15T16:48:36.176Z,2026-02-12T10:24:42.652Z,ACME\svc_backup +MKT-WS-046,10.10.2.146,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-12T16:41:02.198Z,2026-02-11T06:13:28.016Z,ACME\svc_backup +EXEC-WS-047,10.10.3.147,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-17T02:42:54.883Z,2026-02-14T01:24:49.703Z,NT AUTHORITY\SYSTEM +EXEC-WS-047,10.10.3.147,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-15T15:48:14.287Z,2026-02-20T00:45:42.458Z,NT AUTHORITY\SYSTEM +EXEC-WS-047,10.10.3.147,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-15T13:25:29.139Z,2026-02-20T01:58:50.715Z,NT AUTHORITY\SYSTEM +EXEC-WS-047,10.10.3.147,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-18T02:20:08.558Z,2026-02-20T03:12:22.453Z,ACME\svc_backup +EXEC-WS-047,10.10.3.147,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-14T19:24:32.981Z,2026-02-13T16:28:04.308Z,ACME\svc_backup +IT-WS-048,10.10.1.148,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-15T12:59:56.698Z,2026-02-15T00:06:53.085Z,NT AUTHORITY\SYSTEM +IT-WS-048,10.10.1.148,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-10T16:44:28.196Z,2026-02-10T13:19:02.999Z,NT AUTHORITY\SYSTEM +IT-WS-048,10.10.1.148,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-19T03:03:43.877Z,2026-02-20T01:11:41.019Z,NT AUTHORITY\SYSTEM +IT-WS-048,10.10.1.148,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-10T17:48:45.262Z,2026-02-12T11:18:22.491Z,ACME\svc_backup +IT-WS-048,10.10.1.148,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-18T02:52:35.295Z,2026-02-14T11:47:48.053Z,ACME\svc_backup +HR-WS-049,10.10.2.149,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-15T04:37:24.806Z,2026-02-10T11:16:11.052Z,NT AUTHORITY\SYSTEM +HR-WS-049,10.10.2.149,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-18T15:02:20.807Z,2026-02-13T13:06:36.614Z,NT AUTHORITY\SYSTEM +HR-WS-049,10.10.2.149,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-14T09:52:11.777Z,2026-02-20T11:28:16.172Z,NT AUTHORITY\SYSTEM +HR-WS-049,10.10.2.149,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-17T13:41:44.249Z,2026-02-18T10:32:22.995Z,ACME\svc_backup +HR-WS-049,10.10.2.149,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-10T08:52:45.463Z,2026-02-19T07:54:06.248Z,ACME\svc_backup +FIN-WS-050,10.10.3.150,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-20T01:27:24.175Z,2026-02-12T00:27:05.551Z,NT AUTHORITY\SYSTEM +FIN-WS-050,10.10.3.150,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-18T05:29:47.321Z,2026-02-11T22:31:56.904Z,NT AUTHORITY\SYSTEM +FIN-WS-050,10.10.3.150,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-14T02:23:17.798Z,2026-02-12T10:19:53.923Z,NT AUTHORITY\SYSTEM +FIN-WS-050,10.10.3.150,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-15T02:07:34.737Z,2026-02-20T14:41:09.357Z,ACME\svc_backup +FIN-WS-050,10.10.3.150,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-20T12:03:05.917Z,2026-02-11T02:15:28.141Z,ACME\svc_backup +SLS-WS-051,10.10.1.151,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,False,2026-02-19T08:04:34.795Z,2026-02-18T02:19:39.654Z,NT AUTHORITY\SYSTEM +SLS-WS-051,10.10.1.151,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-14T05:59:26.864Z,2026-02-13T08:09:26.358Z,NT AUTHORITY\SYSTEM +SLS-WS-051,10.10.1.151,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-12T13:09:01.056Z,2026-02-10T14:13:12.308Z,NT AUTHORITY\SYSTEM +SLS-WS-051,10.10.1.151,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-18T06:57:38.570Z,2026-02-15T06:36:07.347Z,ACME\svc_backup +SLS-WS-051,10.10.1.151,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-11T12:53:38.656Z,2026-02-15T03:14:29.799Z,ACME\svc_backup +ENG-WS-052,10.10.2.152,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-13T13:07:37.297Z,2026-02-10T12:55:55.898Z,NT AUTHORITY\SYSTEM +ENG-WS-052,10.10.2.152,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-13T10:00:16.639Z,2026-02-16T03:46:49.138Z,NT AUTHORITY\SYSTEM +ENG-WS-052,10.10.2.152,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-13T02:19:57.856Z,2026-02-11T13:16:14.889Z,NT AUTHORITY\SYSTEM +ENG-WS-052,10.10.2.152,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-10T10:22:57.217Z,2026-02-16T00:54:01.239Z,ACME\svc_backup +ENG-WS-052,10.10.2.152,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-11T07:47:26.259Z,2026-02-11T17:00:25.634Z,ACME\svc_backup +LEG-WS-053,10.10.3.153,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-12T15:39:26.774Z,2026-02-19T06:11:54.575Z,NT AUTHORITY\SYSTEM +LEG-WS-053,10.10.3.153,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-13T04:10:39.301Z,2026-02-15T12:39:57.869Z,NT AUTHORITY\SYSTEM +LEG-WS-053,10.10.3.153,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-11T09:45:50.659Z,2026-02-15T10:30:21.655Z,NT AUTHORITY\SYSTEM +LEG-WS-053,10.10.3.153,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-16T23:36:22.191Z,2026-02-19T01:55:34.033Z,ACME\svc_backup +LEG-WS-053,10.10.3.153,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-15T01:07:59.017Z,2026-02-11T10:08:48.989Z,ACME\svc_backup +MKT-WS-054,10.10.1.154,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-14T06:56:32.106Z,2026-02-16T04:16:55.893Z,NT AUTHORITY\SYSTEM +MKT-WS-054,10.10.1.154,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-17T13:40:54.674Z,2026-02-15T20:03:49.632Z,NT AUTHORITY\SYSTEM +MKT-WS-054,10.10.1.154,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-19T21:42:16.371Z,2026-02-12T07:23:59.445Z,NT AUTHORITY\SYSTEM +MKT-WS-054,10.10.1.154,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-17T08:29:32.052Z,2026-02-19T11:31:12.681Z,ACME\svc_backup +MKT-WS-054,10.10.1.154,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-14T23:18:47.119Z,2026-02-14T10:16:53.168Z,ACME\svc_backup +EXEC-WS-055,10.10.2.155,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-18T19:03:18.814Z,2026-02-13T08:28:03.971Z,NT AUTHORITY\SYSTEM +EXEC-WS-055,10.10.2.155,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-12T13:51:42.917Z,2026-02-14T01:57:38.173Z,NT AUTHORITY\SYSTEM +EXEC-WS-055,10.10.2.155,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-17T03:52:50.143Z,2026-02-20T13:49:39.549Z,NT AUTHORITY\SYSTEM +EXEC-WS-055,10.10.2.155,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-11T19:17:28.469Z,2026-02-17T04:25:41.385Z,ACME\svc_backup +EXEC-WS-055,10.10.2.155,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-13T01:38:12.857Z,2026-02-17T09:11:12.721Z,ACME\svc_backup +IT-WS-056,10.10.3.156,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-11T16:17:49.377Z,2026-02-12T07:49:48.497Z,NT AUTHORITY\SYSTEM +IT-WS-056,10.10.3.156,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-16T08:10:22.467Z,2026-02-12T19:09:24.082Z,NT AUTHORITY\SYSTEM +IT-WS-056,10.10.3.156,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-11T04:59:44.480Z,2026-02-16T07:05:23.990Z,NT AUTHORITY\SYSTEM +IT-WS-056,10.10.3.156,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-13T03:53:39.130Z,2026-02-17T22:35:46.400Z,ACME\svc_backup +IT-WS-056,10.10.3.156,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-13T20:11:02.708Z,2026-02-20T08:46:24.560Z,ACME\svc_backup +HR-WS-057,10.10.1.157,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-20T10:39:54.324Z,2026-02-14T02:12:25.423Z,NT AUTHORITY\SYSTEM +HR-WS-057,10.10.1.157,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-13T00:56:51.206Z,2026-02-11T20:57:13.260Z,NT AUTHORITY\SYSTEM +HR-WS-057,10.10.1.157,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-10T09:07:51.265Z,2026-02-10T17:23:37.684Z,NT AUTHORITY\SYSTEM +HR-WS-057,10.10.1.157,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-15T14:05:45.700Z,2026-02-17T06:33:21.076Z,ACME\svc_backup +HR-WS-057,10.10.1.157,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-16T21:53:43.467Z,2026-02-11T02:12:27.885Z,ACME\svc_backup +FIN-WS-058,10.10.2.158,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,False,2026-02-10T13:32:35.479Z,2026-02-13T08:00:30.042Z,NT AUTHORITY\SYSTEM +FIN-WS-058,10.10.2.158,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-11T00:40:20.335Z,2026-02-20T07:03:07.506Z,NT AUTHORITY\SYSTEM +FIN-WS-058,10.10.2.158,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-18T17:07:22.065Z,2026-02-10T09:32:20.210Z,NT AUTHORITY\SYSTEM +FIN-WS-058,10.10.2.158,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-14T13:48:44.200Z,2026-02-15T09:17:02.922Z,ACME\svc_backup +FIN-WS-058,10.10.2.158,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-14T00:25:04.919Z,2026-02-11T04:12:54.828Z,ACME\svc_backup +SLS-WS-059,10.10.3.159,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-15T19:33:58.088Z,2026-02-16T01:48:28.014Z,NT AUTHORITY\SYSTEM +SLS-WS-059,10.10.3.159,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-13T10:53:44.931Z,2026-02-13T22:45:45.235Z,NT AUTHORITY\SYSTEM +SLS-WS-059,10.10.3.159,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-17T16:54:07.752Z,2026-02-20T03:15:07.125Z,NT AUTHORITY\SYSTEM +SLS-WS-059,10.10.3.159,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-18T19:11:20.798Z,2026-02-12T05:42:12.676Z,ACME\svc_backup +SLS-WS-059,10.10.3.159,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-20T06:10:59.244Z,2026-02-17T00:50:19.553Z,ACME\svc_backup +ENG-WS-060,10.10.1.160,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-13T06:48:10.401Z,2026-02-11T07:39:25.302Z,NT AUTHORITY\SYSTEM +ENG-WS-060,10.10.1.160,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-10T12:25:18.134Z,2026-02-20T08:51:20.161Z,NT AUTHORITY\SYSTEM +ENG-WS-060,10.10.1.160,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-15T12:28:09.879Z,2026-02-16T14:08:21.881Z,NT AUTHORITY\SYSTEM +ENG-WS-060,10.10.1.160,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-16T19:00:48.687Z,2026-02-17T14:29:52.896Z,ACME\svc_backup +ENG-WS-060,10.10.1.160,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-18T04:30:53.688Z,2026-02-19T00:51:38.463Z,ACME\svc_backup +LEG-WS-061,10.10.2.161,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,False,2026-02-20T15:20:33.774Z,2026-02-19T00:18:06.091Z,NT AUTHORITY\SYSTEM +LEG-WS-061,10.10.2.161,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-17T09:53:01.370Z,2026-02-17T01:31:51.621Z,NT AUTHORITY\SYSTEM +LEG-WS-061,10.10.2.161,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-17T18:43:59.956Z,2026-02-13T19:36:16.733Z,NT AUTHORITY\SYSTEM +LEG-WS-061,10.10.2.161,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-20T04:44:49.801Z,2026-02-16T22:10:39.417Z,ACME\svc_backup +LEG-WS-061,10.10.2.161,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-11T04:39:19.292Z,2026-02-19T11:07:42.571Z,ACME\svc_backup +MKT-WS-062,10.10.3.162,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-10T21:35:44.844Z,2026-02-15T04:09:40.629Z,NT AUTHORITY\SYSTEM +MKT-WS-062,10.10.3.162,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-10T17:57:20.101Z,2026-02-15T18:15:52.409Z,NT AUTHORITY\SYSTEM +MKT-WS-062,10.10.3.162,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-17T11:46:28.196Z,2026-02-14T23:39:55.119Z,NT AUTHORITY\SYSTEM +MKT-WS-062,10.10.3.162,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-15T03:32:12.866Z,2026-02-12T22:09:54.245Z,ACME\svc_backup +MKT-WS-062,10.10.3.162,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-14T02:29:09.217Z,2026-02-12T13:19:08.503Z,ACME\svc_backup +EXEC-WS-063,10.10.1.163,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-15T03:00:42.244Z,2026-02-17T22:26:46.243Z,NT AUTHORITY\SYSTEM +EXEC-WS-063,10.10.1.163,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-16T03:37:31.456Z,2026-02-11T22:59:47.615Z,NT AUTHORITY\SYSTEM +EXEC-WS-063,10.10.1.163,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-18T06:38:56.200Z,2026-02-12T00:19:22.109Z,NT AUTHORITY\SYSTEM +EXEC-WS-063,10.10.1.163,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-13T20:19:30.773Z,2026-02-14T18:24:24.789Z,ACME\svc_backup +EXEC-WS-063,10.10.1.163,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-13T12:01:11.381Z,2026-02-12T12:43:38.922Z,ACME\svc_backup +IT-WS-064,10.10.2.164,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-19T17:21:12.376Z,2026-02-17T10:02:16.368Z,NT AUTHORITY\SYSTEM +IT-WS-064,10.10.2.164,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-19T15:50:42.011Z,2026-02-12T17:58:19.048Z,NT AUTHORITY\SYSTEM +IT-WS-064,10.10.2.164,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-11T01:49:38.430Z,2026-02-19T15:56:40.756Z,NT AUTHORITY\SYSTEM +IT-WS-064,10.10.2.164,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-13T00:09:09.866Z,2026-02-15T08:41:11.447Z,ACME\svc_backup +IT-WS-064,10.10.2.164,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-12T22:14:29.236Z,2026-02-10T22:02:56.979Z,ACME\svc_backup +HR-WS-065,10.10.3.165,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-18T00:54:39.768Z,2026-02-19T16:47:40.687Z,NT AUTHORITY\SYSTEM +HR-WS-065,10.10.3.165,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-15T23:21:31.438Z,2026-02-17T13:46:56.603Z,NT AUTHORITY\SYSTEM +HR-WS-065,10.10.3.165,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-12T13:01:23.505Z,2026-02-15T11:44:53.742Z,NT AUTHORITY\SYSTEM +HR-WS-065,10.10.3.165,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-18T19:31:04.992Z,2026-02-11T14:13:49.636Z,ACME\svc_backup +HR-WS-065,10.10.3.165,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-13T05:03:45.358Z,2026-02-13T03:36:04.167Z,ACME\svc_backup +FIN-WS-066,10.10.1.166,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-10T16:57:48.753Z,2026-02-18T06:52:33.511Z,NT AUTHORITY\SYSTEM +FIN-WS-066,10.10.1.166,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-18T20:24:17.462Z,2026-02-16T10:51:51.126Z,NT AUTHORITY\SYSTEM +FIN-WS-066,10.10.1.166,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-18T20:59:12.352Z,2026-02-10T18:15:22.831Z,NT AUTHORITY\SYSTEM +FIN-WS-066,10.10.1.166,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-17T14:13:08.229Z,2026-02-10T21:42:39.121Z,ACME\svc_backup +FIN-WS-066,10.10.1.166,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-19T11:17:12.330Z,2026-02-14T13:02:38.561Z,ACME\svc_backup +SLS-WS-067,10.10.2.167,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-17T06:44:14.817Z,2026-02-14T10:04:24.351Z,NT AUTHORITY\SYSTEM +SLS-WS-067,10.10.2.167,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-15T18:21:16.370Z,2026-02-13T11:47:39.420Z,NT AUTHORITY\SYSTEM +SLS-WS-067,10.10.2.167,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-13T23:53:09.292Z,2026-02-19T04:22:51.709Z,NT AUTHORITY\SYSTEM +SLS-WS-067,10.10.2.167,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-14T09:32:14.262Z,2026-02-13T23:55:00.827Z,ACME\svc_backup +SLS-WS-067,10.10.2.167,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-14T03:33:11.712Z,2026-02-14T20:40:52.915Z,ACME\svc_backup +ENG-WS-068,10.10.3.168,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-13T13:55:46.181Z,2026-02-11T19:23:09.804Z,NT AUTHORITY\SYSTEM +ENG-WS-068,10.10.3.168,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-15T11:33:54.705Z,2026-02-13T21:19:09.081Z,NT AUTHORITY\SYSTEM +ENG-WS-068,10.10.3.168,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-16T14:45:02.469Z,2026-02-11T20:36:25.115Z,NT AUTHORITY\SYSTEM +ENG-WS-068,10.10.3.168,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-11T16:37:23.228Z,2026-02-14T13:57:15.793Z,ACME\svc_backup +ENG-WS-068,10.10.3.168,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-13T14:02:01.808Z,2026-02-13T05:49:47.398Z,ACME\svc_backup +LEG-WS-069,10.10.1.169,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-18T06:45:29.345Z,2026-02-12T03:16:18.194Z,NT AUTHORITY\SYSTEM +LEG-WS-069,10.10.1.169,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-14T08:20:40.685Z,2026-02-16T17:16:42.022Z,NT AUTHORITY\SYSTEM +LEG-WS-069,10.10.1.169,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-12T03:40:20.934Z,2026-02-15T15:18:01.003Z,NT AUTHORITY\SYSTEM +LEG-WS-069,10.10.1.169,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-20T11:52:48.196Z,2026-02-16T16:16:13.339Z,ACME\svc_backup +LEG-WS-069,10.10.1.169,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-11T02:55:43.227Z,2026-02-13T07:56:11.915Z,ACME\svc_backup +MKT-WS-070,10.10.2.170,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-17T22:47:31.958Z,2026-02-17T15:06:34.912Z,NT AUTHORITY\SYSTEM +MKT-WS-070,10.10.2.170,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-15T02:08:07.289Z,2026-02-15T12:41:06.092Z,NT AUTHORITY\SYSTEM +MKT-WS-070,10.10.2.170,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-11T14:03:06.009Z,2026-02-12T23:21:43.664Z,NT AUTHORITY\SYSTEM +MKT-WS-070,10.10.2.170,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-16T11:23:49.725Z,2026-02-15T17:20:03.103Z,ACME\svc_backup +MKT-WS-070,10.10.2.170,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-14T05:45:14.665Z,2026-02-18T04:36:05.218Z,ACME\svc_backup +EXEC-WS-071,10.10.3.171,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-19T21:58:07.627Z,2026-02-13T20:29:02.208Z,NT AUTHORITY\SYSTEM +EXEC-WS-071,10.10.3.171,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-12T11:01:14.918Z,2026-02-17T22:49:52.939Z,NT AUTHORITY\SYSTEM +EXEC-WS-071,10.10.3.171,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-16T21:55:41.932Z,2026-02-19T20:13:09.894Z,NT AUTHORITY\SYSTEM +EXEC-WS-071,10.10.3.171,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-17T02:32:40.833Z,2026-02-12T14:25:25.075Z,ACME\svc_backup +EXEC-WS-071,10.10.3.171,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-13T16:04:12.865Z,2026-02-15T22:04:39.245Z,ACME\svc_backup +IT-WS-072,10.10.1.172,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-15T01:30:34.938Z,2026-02-18T16:57:52.320Z,NT AUTHORITY\SYSTEM +IT-WS-072,10.10.1.172,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-13T11:00:21.112Z,2026-02-18T18:39:21.915Z,NT AUTHORITY\SYSTEM +IT-WS-072,10.10.1.172,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-19T06:06:35.027Z,2026-02-19T19:07:43.006Z,NT AUTHORITY\SYSTEM +IT-WS-072,10.10.1.172,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-13T22:19:29.987Z,2026-02-16T23:11:40.491Z,ACME\svc_backup +IT-WS-072,10.10.1.172,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-12T14:46:23.485Z,2026-02-10T15:07:59.419Z,ACME\svc_backup +HR-WS-073,10.10.2.173,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-17T18:06:47.797Z,2026-02-18T04:18:01.534Z,NT AUTHORITY\SYSTEM +HR-WS-073,10.10.2.173,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-20T17:51:58.761Z,2026-02-20T00:44:00.041Z,NT AUTHORITY\SYSTEM +HR-WS-073,10.10.2.173,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-17T07:20:04.569Z,2026-02-17T09:06:03.744Z,NT AUTHORITY\SYSTEM +HR-WS-073,10.10.2.173,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-16T23:23:12.970Z,2026-02-11T15:43:15.739Z,ACME\svc_backup +HR-WS-073,10.10.2.173,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-14T14:03:31.039Z,2026-02-15T04:51:55.591Z,ACME\svc_backup +FIN-WS-074,10.10.3.174,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-16T20:00:55.479Z,2026-02-15T02:59:46.886Z,NT AUTHORITY\SYSTEM +FIN-WS-074,10.10.3.174,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-13T15:12:39.650Z,2026-02-11T03:38:35.784Z,NT AUTHORITY\SYSTEM +FIN-WS-074,10.10.3.174,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-20T04:55:05.330Z,2026-02-14T00:15:48.376Z,NT AUTHORITY\SYSTEM +FIN-WS-074,10.10.3.174,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-10T18:50:31.495Z,2026-02-20T00:42:34.849Z,ACME\svc_backup +FIN-WS-074,10.10.3.174,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-16T04:36:02.677Z,2026-02-14T12:21:16.058Z,ACME\svc_backup +SLS-WS-075,10.10.1.175,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,False,2026-02-19T13:23:32.622Z,2026-02-11T05:35:54.700Z,NT AUTHORITY\SYSTEM +SLS-WS-075,10.10.1.175,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-11T00:02:00.028Z,2026-02-11T01:58:38.127Z,NT AUTHORITY\SYSTEM +SLS-WS-075,10.10.1.175,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-19T00:28:03.739Z,2026-02-16T12:10:17.803Z,NT AUTHORITY\SYSTEM +SLS-WS-075,10.10.1.175,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-18T21:54:47.101Z,2026-02-17T22:18:28.826Z,ACME\svc_backup +SLS-WS-075,10.10.1.175,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-15T14:45:11.098Z,2026-02-17T00:26:03.139Z,ACME\svc_backup +DC-01,10.10.1.10,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-18T05:34:55.315Z,2026-02-12T02:10:11.753Z,NT AUTHORITY\SYSTEM +DC-01,10.10.1.10,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-12T06:31:45.770Z,2026-02-14T09:35:12.337Z,NT AUTHORITY\SYSTEM +DC-01,10.10.1.10,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-16T23:45:01.815Z,2026-02-20T12:20:04.033Z,NT AUTHORITY\SYSTEM +DC-01,10.10.1.10,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-14T12:56:42.532Z,2026-02-18T08:03:44.533Z,ACME\svc_backup +DC-01,10.10.1.10,\ACME\Inventory,C:\Tools\inventory.exe --scan,False,2026-02-14T16:21:55.199Z,2026-02-10T10:37:33.447Z,ACME\svc_backup +DC-02,10.10.2.10,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-12T21:41:33.305Z,2026-02-18T06:57:25.169Z,NT AUTHORITY\SYSTEM +DC-02,10.10.2.10,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-19T11:04:47.035Z,2026-02-18T12:48:33.666Z,NT AUTHORITY\SYSTEM +DC-02,10.10.2.10,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-16T15:09:33.108Z,2026-02-19T13:21:17.011Z,NT AUTHORITY\SYSTEM +DC-02,10.10.2.10,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-11T04:53:25.476Z,2026-02-17T23:33:55.502Z,ACME\svc_backup +DC-02,10.10.2.10,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-17T06:32:00.675Z,2026-02-12T03:16:42.034Z,ACME\svc_backup +FILE-01,10.10.1.11,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-10T16:02:30.187Z,2026-02-18T19:56:12.599Z,NT AUTHORITY\SYSTEM +FILE-01,10.10.1.11,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,False,2026-02-18T11:25:10.160Z,2026-02-11T15:30:06.173Z,NT AUTHORITY\SYSTEM +FILE-01,10.10.1.11,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-14T03:21:46.273Z,2026-02-18T23:56:47.836Z,NT AUTHORITY\SYSTEM +FILE-01,10.10.1.11,\ACME\Backup,C:\Tools\backup.ps1,True,2026-02-20T02:34:57.371Z,2026-02-12T20:01:23.947Z,ACME\svc_backup +FILE-01,10.10.1.11,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-18T17:43:39.979Z,2026-02-12T10:42:19.061Z,ACME\svc_backup +EXCH-01,10.10.1.12,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-15T15:10:43.406Z,2026-02-16T04:55:20.434Z,NT AUTHORITY\SYSTEM +EXCH-01,10.10.1.12,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-13T17:09:26.090Z,2026-02-17T18:12:23.822Z,NT AUTHORITY\SYSTEM +EXCH-01,10.10.1.12,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-20T16:29:42.205Z,2026-02-19T10:49:11.222Z,NT AUTHORITY\SYSTEM +EXCH-01,10.10.1.12,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-11T18:25:07.936Z,2026-02-20T04:19:26.786Z,ACME\svc_backup +EXCH-01,10.10.1.12,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-17T01:30:28.460Z,2026-02-13T05:57:34.175Z,ACME\svc_backup +WEB-01,10.10.3.10,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,False,2026-02-12T12:22:58.456Z,2026-02-18T19:15:11.541Z,NT AUTHORITY\SYSTEM +WEB-01,10.10.3.10,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-15T19:15:16.733Z,2026-02-14T08:34:13.004Z,NT AUTHORITY\SYSTEM +WEB-01,10.10.3.10,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,False,2026-02-19T09:53:12.372Z,2026-02-17T02:59:14.291Z,NT AUTHORITY\SYSTEM +WEB-01,10.10.3.10,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-15T21:38:04.019Z,2026-02-19T04:43:09.645Z,ACME\svc_backup +WEB-01,10.10.3.10,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-10T12:59:56.574Z,2026-02-13T15:51:55.193Z,ACME\svc_backup +SQL-01,10.10.2.11,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-14T02:24:22.229Z,2026-02-12T07:23:21.046Z,NT AUTHORITY\SYSTEM +SQL-01,10.10.2.11,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-12T15:35:11.480Z,2026-02-11T07:46:47.657Z,NT AUTHORITY\SYSTEM +SQL-01,10.10.2.11,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-13T09:04:33.741Z,2026-02-14T22:48:34.137Z,NT AUTHORITY\SYSTEM +SQL-01,10.10.2.11,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-12T08:16:22.617Z,2026-02-18T21:46:16.878Z,ACME\svc_backup +SQL-01,10.10.2.11,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-14T01:28:09.989Z,2026-02-19T03:38:03.534Z,ACME\svc_backup +PROXY-01,10.10.1.13,\Microsoft\Windows\UpdateOrchestrator\Schedule Scan,C:\Windows\System32\usoclient.exe StartScan,True,2026-02-20T01:06:00.970Z,2026-02-13T05:34:29.899Z,NT AUTHORITY\SYSTEM +PROXY-01,10.10.1.13,\Microsoft\Windows\Defrag\ScheduledDefrag,C:\Windows\System32\defrag.exe -c -h -o,True,2026-02-15T00:23:40.261Z,2026-02-19T05:33:16.704Z,NT AUTHORITY\SYSTEM +PROXY-01,10.10.1.13,\Microsoft\Windows\WindowsUpdate\Automatic App Update,C:\Windows\System32\UsoClient.exe,True,2026-02-18T03:48:10.799Z,2026-02-15T08:41:54.461Z,NT AUTHORITY\SYSTEM +PROXY-01,10.10.1.13,\ACME\Backup,C:\Tools\backup.ps1,False,2026-02-17T12:57:02.701Z,2026-02-16T21:29:03.726Z,ACME\svc_backup +PROXY-01,10.10.1.13,\ACME\Inventory,C:\Tools\inventory.exe --scan,True,2026-02-12T07:58:03.576Z,2026-02-16T01:04:54.799Z,ACME\svc_backup diff --git a/backend/tests/test_csvs/07_browser_history.csv b/backend/tests/test_csvs/07_browser_history.csv new file mode 100644 index 0000000..54cc536 --- /dev/null +++ b/backend/tests/test_csvs/07_browser_history.csv @@ -0,0 +1,1587 @@ +ComputerName,SourceAddress,User,URL,Title,VisitTime,VisitCount,Browser +HR-WS-001,10.10.2.101,agarcia,https://1337x.to/home,1337x.to,2026-02-18T04:25:19.385Z,10,Chrome +HR-WS-001,10.10.2.101,agarcia,https://update.microsoft.com/,update.microsoft.com,2026-02-18T20:36:46.524Z,15,Chrome +HR-WS-001,10.10.2.101,agarcia,https://exch-01.acme.local/inbox,exch-01.acme.local,2026-02-20T15:59:05.519Z,9,Chrome +HR-WS-001,10.10.2.101,agarcia,https://outlook.office365.com/docs,outlook.office365.com,2026-02-11T17:02:24.437Z,15,Chrome +HR-WS-001,10.10.2.101,agarcia,https://akamai.net/,akamai.net,2026-02-11T16:24:25.330Z,18,Chrome +HR-WS-001,10.10.2.101,agarcia,https://stackoverflow.com/search,stackoverflow.com,2026-02-11T15:37:26.189Z,6,Chrome +HR-WS-001,10.10.2.101,agarcia,https://dc-02.acme.local/api,dc-02.acme.local,2026-02-19T17:34:03.059Z,12,Chrome +HR-WS-001,10.10.2.101,agarcia,https://googleapis.com/,googleapis.com,2026-02-14T13:23:45.261Z,16,Chrome +HR-WS-001,10.10.2.101,agarcia,https://teams.microsoft.com/inbox,teams.microsoft.com,2026-02-19T00:36:05.000Z,18,Edge +HR-WS-001,10.10.2.101,agarcia,https://www.netflix.com/category/popular,Netflix - Watch TV Shows,2026-02-13T05:10:17.574Z,7,Chrome +HR-WS-001,10.10.2.101,agarcia,https://www.amazon.com/category/popular,Amazon.com - Shopping,2026-02-15T17:42:27.881Z,6,Chrome +HR-WS-001,10.10.2.101,agarcia,https://exch-01.acme.local/api,exch-01.acme.local,2026-02-12T06:19:28.603Z,8,Chrome +HR-WS-001,10.10.2.101,agarcia,https://file-01.acme.local/docs,file-01.acme.local,2026-02-17T12:05:07.698Z,19,Chrome +HR-WS-001,10.10.2.101,agarcia,https://thepiratebay.org/search?q=free+movies,The Pirate Bay,2026-02-14T16:50:58.446Z,20,Edge +HR-WS-001,10.10.2.101,agarcia,https://file-01.acme.local/docs,file-01.acme.local,2026-02-13T20:09:42.136Z,6,Edge +HR-WS-001,10.10.2.101,agarcia,https://cdn.jsdelivr.net/api,cdn.jsdelivr.net,2026-02-17T02:45:40.343Z,19,Chrome +FIN-WS-002,10.10.3.102,cjohnson,https://pypi.org/,pypi.org,2026-02-12T14:55:53.610Z,16,Chrome +FIN-WS-002,10.10.3.102,cjohnson,https://pypi.org/inbox,pypi.org,2026-02-17T18:03:38.762Z,11,Edge +FIN-WS-002,10.10.3.102,cjohnson,https://teams.microsoft.com/inbox,teams.microsoft.com,2026-02-19T14:05:20.578Z,6,Chrome +FIN-WS-002,10.10.3.102,cjohnson,https://thepiratebay.org/,The Pirate Bay,2026-02-16T22:28:25.764Z,7,Chrome +FIN-WS-002,10.10.3.102,cjohnson,https://pokerstars.com/home,PokerStars - Online Poker,2026-02-12T16:31:24.061Z,18,Chrome +FIN-WS-002,10.10.3.102,cjohnson,https://google.com/api,google.com,2026-02-14T05:14:01.684Z,7,Chrome +FIN-WS-002,10.10.3.102,cjohnson,https://outlook.office365.com/docs,outlook.office365.com,2026-02-11T08:14:38.842Z,14,Edge +FIN-WS-002,10.10.3.102,cjohnson,https://github.com/search,github.com,2026-02-14T15:52:31.700Z,9,Edge +FIN-WS-002,10.10.3.102,cjohnson,https://file-01.acme.local/dashboard,file-01.acme.local,2026-02-14T05:48:49.441Z,20,Chrome +FIN-WS-002,10.10.3.102,cjohnson,https://cloudflare.com/dashboard,cloudflare.com,2026-02-15T07:54:28.399Z,11,Chrome +FIN-WS-002,10.10.3.102,cjohnson,https://time.windows.com/inbox,time.windows.com,2026-02-19T16:02:29.043Z,10,Chrome +FIN-WS-002,10.10.3.102,cjohnson,https://acme.local/inbox,acme.local,2026-02-12T00:24:09.714Z,13,Chrome +FIN-WS-002,10.10.3.102,cjohnson,https://pypi.org/api,pypi.org,2026-02-16T09:23:07.332Z,5,Edge +FIN-WS-002,10.10.3.102,cjohnson,https://www.linkedin.com/jobs/search?q=free+movies,www.linkedin.com/jobs,2026-02-15T19:20:11.367Z,13,Chrome +FIN-WS-002,10.10.3.102,cjohnson,https://stackoverflow.com/search,stackoverflow.com,2026-02-12T17:23:41.465Z,10,Edge +FIN-WS-002,10.10.3.102,cjohnson,https://outlook.office365.com/dashboard,outlook.office365.com,2026-02-11T04:25:42.792Z,11,Chrome +FIN-WS-002,10.10.3.102,cjohnson,https://github.com/dashboard,github.com,2026-02-12T03:03:31.620Z,20,Chrome +SLS-WS-003,10.10.1.103,gwhite,https://akamai.net/api,akamai.net,2026-02-17T06:43:02.499Z,4,Chrome +SLS-WS-003,10.10.1.103,gwhite,https://akamai.net/api,akamai.net,2026-02-19T12:57:39.019Z,14,Chrome +SLS-WS-003,10.10.1.103,gwhite,https://pypi.org/search,pypi.org,2026-02-14T00:20:29.952Z,6,Chrome +SLS-WS-003,10.10.1.103,gwhite,https://aws.amazon.com/inbox,aws.amazon.com,2026-02-17T19:44:12.812Z,20,Chrome +SLS-WS-003,10.10.1.103,gwhite,https://acme.local/api,acme.local,2026-02-11T09:20:26.100Z,17,Edge +SLS-WS-003,10.10.1.103,gwhite,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-12T01:03:59.148Z,19,Edge +SLS-WS-003,10.10.1.103,gwhite,https://akamai.net/dashboard,akamai.net,2026-02-13T17:18:05.419Z,11,Chrome +SLS-WS-003,10.10.1.103,gwhite,https://google.com/docs,google.com,2026-02-11T22:42:56.315Z,7,Chrome +SLS-WS-003,10.10.1.103,gwhite,https://dc-02.acme.local/search,dc-02.acme.local,2026-02-14T12:16:42.648Z,11,Chrome +SLS-WS-003,10.10.1.103,gwhite,https://exch-01.acme.local/inbox,exch-01.acme.local,2026-02-18T06:41:45.707Z,3,Edge +ENG-WS-004,10.10.2.104,dlee,https://akamai.net/docs,akamai.net,2026-02-12T17:32:09.224Z,10,Chrome +ENG-WS-004,10.10.2.104,dlee,https://www.pornhub.com/play,Pornhub,2026-02-18T15:41:56.710Z,13,Edge +ENG-WS-004,10.10.2.104,dlee,https://update.microsoft.com/api,update.microsoft.com,2026-02-17T08:03:40.805Z,20,Chrome +ENG-WS-004,10.10.2.104,dlee,https://aws.amazon.com/dashboard,aws.amazon.com,2026-02-12T15:55:53.255Z,16,Edge +ENG-WS-004,10.10.2.104,dlee,https://aws.amazon.com/inbox,aws.amazon.com,2026-02-17T04:27:29.931Z,20,Chrome +ENG-WS-004,10.10.2.104,dlee,https://acme.local/,acme.local,2026-02-18T06:08:09.928Z,3,Chrome +ENG-WS-004,10.10.2.104,dlee,https://npmjs.com/search,npmjs.com,2026-02-14T23:55:14.113Z,9,Chrome +ENG-WS-004,10.10.2.104,dlee,https://cdn.jsdelivr.net/dashboard,cdn.jsdelivr.net,2026-02-20T14:43:25.686Z,17,Chrome +ENG-WS-004,10.10.2.104,dlee,https://login.microsoftonline.com/search,login.microsoftonline.com,2026-02-10T23:49:39.497Z,3,Chrome +ENG-WS-004,10.10.2.104,dlee,https://dc-01.acme.local/api,dc-01.acme.local,2026-02-19T01:16:56.547Z,18,Edge +ENG-WS-004,10.10.2.104,dlee,https://cloudflare.com/search,cloudflare.com,2026-02-20T03:31:01.772Z,3,Chrome +ENG-WS-004,10.10.2.104,dlee,https://time.windows.com/,time.windows.com,2026-02-13T21:42:30.611Z,19,Chrome +ENG-WS-004,10.10.2.104,dlee,https://login.microsoftonline.com/api,login.microsoftonline.com,2026-02-18T03:52:58.053Z,3,Chrome +ENG-WS-004,10.10.2.104,dlee,https://googleapis.com/dashboard,googleapis.com,2026-02-13T10:48:27.650Z,20,Chrome +ENG-WS-004,10.10.2.104,dlee,https://graph.microsoft.com/,graph.microsoft.com,2026-02-19T20:47:04.946Z,10,Edge +ENG-WS-004,10.10.2.104,dlee,https://dc-02.acme.local/docs,dc-02.acme.local,2026-02-11T19:27:54.241Z,15,Chrome +ENG-WS-004,10.10.2.104,dlee,https://fitgirl-repacks.site/,fitgirl-repacks.site,2026-02-20T14:21:27.029Z,6,Chrome +ENG-WS-004,10.10.2.104,dlee,https://npmjs.com/dashboard,npmjs.com,2026-02-17T00:52:53.682Z,7,Chrome +ENG-WS-004,10.10.2.104,dlee,https://store.steampowered.com/,Steam Store,2026-02-18T01:49:20.357Z,12,Chrome +ENG-WS-004,10.10.2.104,dlee,https://acme.local/,acme.local,2026-02-16T03:08:28.552Z,4,Chrome +ENG-WS-004,10.10.2.104,dlee,https://www.linkedin.com/jobs/search?q=free+movies,www.linkedin.com/jobs,2026-02-20T00:12:56.081Z,9,Chrome +ENG-WS-004,10.10.2.104,dlee,https://store.steampowered.com/home,Steam Store,2026-02-15T23:31:05.848Z,12,Chrome +ENG-WS-004,10.10.2.104,dlee,https://googleapis.com/dashboard,googleapis.com,2026-02-17T21:31:30.231Z,15,Edge +ENG-WS-004,10.10.2.104,dlee,https://acme.local/,acme.local,2026-02-17T03:05:04.783Z,2,Chrome +ENG-WS-004,10.10.2.104,dlee,https://onlyfans.com/play,onlyfans.com,2026-02-14T22:35:23.132Z,2,Chrome +ENG-WS-004,10.10.2.104,dlee,https://update.microsoft.com/inbox,update.microsoft.com,2026-02-16T08:32:10.459Z,15,Chrome +ENG-WS-004,10.10.2.104,dlee,https://file-01.acme.local/api,file-01.acme.local,2026-02-17T07:41:17.293Z,13,Chrome +ENG-WS-004,10.10.2.104,dlee,https://www.linkedin.com/jobs/search?q=free+movies,www.linkedin.com/jobs,2026-02-11T23:41:13.658Z,12,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://pypi.org/search,pypi.org,2026-02-20T04:59:57.495Z,3,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://npmjs.com/inbox,npmjs.com,2026-02-20T01:02:39.864Z,3,Edge +LEG-WS-005,10.10.3.105,svc_sql,https://hulu.com/watch,hulu.com,2026-02-16T06:22:17.435Z,2,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://aws.amazon.com/docs,aws.amazon.com,2026-02-18T05:18:04.082Z,2,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://steamcommunity.com/home,Steam Store,2026-02-13T19:31:10.716Z,13,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://acme.sharepoint.com/search,acme.sharepoint.com,2026-02-11T06:17:28.066Z,8,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://1337x.to/play,1337x.to,2026-02-11T09:39:33.775Z,14,Edge +LEG-WS-005,10.10.3.105,svc_sql,https://npmjs.com/api,npmjs.com,2026-02-15T12:22:26.493Z,12,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://outlook.office365.com/inbox,outlook.office365.com,2026-02-18T16:16:44.525Z,19,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://graph.microsoft.com/api,graph.microsoft.com,2026-02-14T05:50:10.965Z,20,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://npmjs.com/inbox,npmjs.com,2026-02-14T00:06:56.923Z,2,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://stackoverflow.com/dashboard,stackoverflow.com,2026-02-13T20:38:28.825Z,14,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://cdn.jsdelivr.net/dashboard,cdn.jsdelivr.net,2026-02-16T14:50:10.541Z,8,Edge +LEG-WS-005,10.10.3.105,svc_sql,https://cdn.jsdelivr.net/api,cdn.jsdelivr.net,2026-02-18T15:43:07.055Z,20,Edge +LEG-WS-005,10.10.3.105,svc_sql,https://www.linkedin.com/jobs/play,www.linkedin.com/jobs,2026-02-20T01:02:15.730Z,20,Edge +LEG-WS-005,10.10.3.105,svc_sql,https://www.shein.com/,www.shein.com,2026-02-12T21:58:28.900Z,18,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://aws.amazon.com/api,aws.amazon.com,2026-02-17T20:20:51.513Z,10,Edge +LEG-WS-005,10.10.3.105,svc_sql,https://acme.sharepoint.com/search,acme.sharepoint.com,2026-02-15T21:45:53.427Z,15,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://cdn.jsdelivr.net/,cdn.jsdelivr.net,2026-02-15T04:49:36.295Z,18,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://google.com/,google.com,2026-02-15T02:01:35.059Z,13,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://outlook.office365.com/api,outlook.office365.com,2026-02-19T01:11:03.563Z,11,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://file-01.acme.local/search,file-01.acme.local,2026-02-14T09:27:28.765Z,13,Edge +LEG-WS-005,10.10.3.105,svc_sql,https://time.windows.com/dashboard,time.windows.com,2026-02-17T06:49:40.841Z,4,Edge +LEG-WS-005,10.10.3.105,svc_sql,https://update.microsoft.com/inbox,update.microsoft.com,2026-02-18T18:43:39.873Z,6,Edge +LEG-WS-005,10.10.3.105,svc_sql,https://dc-02.acme.local/docs,dc-02.acme.local,2026-02-11T08:12:35.049Z,8,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://googleapis.com/dashboard,googleapis.com,2026-02-18T19:46:00.053Z,1,Chrome +LEG-WS-005,10.10.3.105,svc_sql,https://cdn.jsdelivr.net/dashboard,cdn.jsdelivr.net,2026-02-20T02:32:09.341Z,7,Chrome +MKT-WS-006,10.10.1.106,svc_backup,https://teams.microsoft.com/docs,teams.microsoft.com,2026-02-12T17:56:14.019Z,11,Chrome +MKT-WS-006,10.10.1.106,svc_backup,https://googleapis.com/inbox,googleapis.com,2026-02-12T14:25:54.725Z,16,Chrome +MKT-WS-006,10.10.1.106,svc_backup,https://exch-01.acme.local/dashboard,exch-01.acme.local,2026-02-10T09:42:36.092Z,6,Edge +MKT-WS-006,10.10.1.106,svc_backup,https://akamai.net/dashboard,akamai.net,2026-02-11T16:26:47.242Z,5,Chrome +MKT-WS-006,10.10.1.106,svc_backup,https://www.netflix.com/play,Netflix - Watch TV Shows,2026-02-10T11:37:18.109Z,10,Chrome +MKT-WS-006,10.10.1.106,svc_backup,https://dc-01.acme.local/inbox,dc-01.acme.local,2026-02-10T09:45:38.996Z,18,Chrome +MKT-WS-006,10.10.1.106,svc_backup,https://www.shein.com/play,www.shein.com,2026-02-17T16:28:32.186Z,20,Chrome +MKT-WS-006,10.10.1.106,svc_backup,https://teams.microsoft.com/docs,teams.microsoft.com,2026-02-16T14:59:45.083Z,18,Edge +MKT-WS-006,10.10.1.106,svc_backup,https://stackoverflow.com/dashboard,stackoverflow.com,2026-02-14T17:38:00.253Z,10,Edge +MKT-WS-006,10.10.1.106,svc_backup,https://update.microsoft.com/search,update.microsoft.com,2026-02-16T04:14:29.535Z,3,Edge +MKT-WS-006,10.10.1.106,svc_backup,https://time.windows.com/,time.windows.com,2026-02-17T18:33:51.775Z,7,Edge +EXEC-WS-007,10.10.2.107,hbrown,https://stackoverflow.com/inbox,stackoverflow.com,2026-02-15T01:59:47.948Z,7,Chrome +EXEC-WS-007,10.10.2.107,hbrown,https://www.shein.com/,www.shein.com,2026-02-13T06:57:50.595Z,14,Chrome +EXEC-WS-007,10.10.2.107,hbrown,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-11T05:48:29.303Z,11,Chrome +EXEC-WS-007,10.10.2.107,hbrown,https://aws.amazon.com/,aws.amazon.com,2026-02-10T10:55:18.057Z,20,Chrome +EXEC-WS-007,10.10.2.107,hbrown,https://update.microsoft.com/dashboard,update.microsoft.com,2026-02-12T06:05:49.613Z,8,Chrome +EXEC-WS-007,10.10.2.107,hbrown,https://pypi.org/inbox,pypi.org,2026-02-15T14:08:52.040Z,11,Edge +EXEC-WS-007,10.10.2.107,hbrown,https://update.microsoft.com/,update.microsoft.com,2026-02-11T00:03:46.742Z,2,Chrome +EXEC-WS-007,10.10.2.107,hbrown,https://pypi.org/docs,pypi.org,2026-02-12T17:25:06.416Z,5,Chrome +EXEC-WS-007,10.10.2.107,hbrown,https://cdn.jsdelivr.net/dashboard,cdn.jsdelivr.net,2026-02-12T19:15:07.471Z,2,Chrome +EXEC-WS-007,10.10.2.107,hbrown,https://dc-02.acme.local/api,dc-02.acme.local,2026-02-11T14:54:20.832Z,17,Edge +EXEC-WS-007,10.10.2.107,hbrown,https://dc-01.acme.local/api,dc-01.acme.local,2026-02-11T21:52:03.536Z,8,Chrome +EXEC-WS-007,10.10.2.107,hbrown,https://dc-01.acme.local/dashboard,dc-01.acme.local,2026-02-18T05:31:05.435Z,3,Chrome +EXEC-WS-007,10.10.2.107,hbrown,https://google.com/api,google.com,2026-02-15T06:53:12.500Z,16,Chrome +EXEC-WS-007,10.10.2.107,hbrown,https://googleapis.com/docs,googleapis.com,2026-02-15T14:43:22.948Z,7,Chrome +EXEC-WS-007,10.10.2.107,hbrown,https://draftkings.com/watch,draftkings.com,2026-02-14T21:47:35.389Z,3,Chrome +EXEC-WS-007,10.10.2.107,hbrown,https://www.linkedin.com/jobs/home,www.linkedin.com/jobs,2026-02-18T00:44:12.461Z,15,Edge +IT-WS-008,10.10.3.108,cjohnson,https://login.microsoftonline.com/inbox,login.microsoftonline.com,2026-02-18T02:51:42.351Z,5,Chrome +IT-WS-008,10.10.3.108,cjohnson,https://pokerstars.com/watch,PokerStars - Online Poker,2026-02-16T15:43:49.999Z,13,Edge +IT-WS-008,10.10.3.108,cjohnson,https://www.pornhub.com/home,Pornhub,2026-02-14T17:56:57.275Z,18,Chrome +IT-WS-008,10.10.3.108,cjohnson,https://teams.microsoft.com/dashboard,teams.microsoft.com,2026-02-15T05:08:12.796Z,15,Chrome +IT-WS-008,10.10.3.108,cjohnson,https://google.com/dashboard,google.com,2026-02-14T15:45:19.412Z,16,Chrome +IT-WS-008,10.10.3.108,cjohnson,https://cdn.jsdelivr.net/inbox,cdn.jsdelivr.net,2026-02-12T06:44:32.972Z,14,Edge +IT-WS-008,10.10.3.108,cjohnson,https://login.microsoftonline.com/api,login.microsoftonline.com,2026-02-12T02:32:07.606Z,19,Chrome +IT-WS-008,10.10.3.108,cjohnson,https://time.windows.com/dashboard,time.windows.com,2026-02-16T21:05:55.304Z,2,Chrome +IT-WS-008,10.10.3.108,cjohnson,https://dc-02.acme.local/,dc-02.acme.local,2026-02-10T19:44:30.861Z,1,Edge +IT-WS-008,10.10.3.108,cjohnson,https://googleapis.com/inbox,googleapis.com,2026-02-12T04:44:53.843Z,2,Chrome +IT-WS-008,10.10.3.108,cjohnson,https://graph.microsoft.com/search,graph.microsoft.com,2026-02-14T15:23:33.018Z,6,Chrome +IT-WS-008,10.10.3.108,cjohnson,https://file-01.acme.local/docs,file-01.acme.local,2026-02-19T15:03:46.059Z,17,Chrome +IT-WS-008,10.10.3.108,cjohnson,https://dc-02.acme.local/dashboard,dc-02.acme.local,2026-02-19T19:21:22.111Z,1,Chrome +IT-WS-008,10.10.3.108,cjohnson,https://googleapis.com/,googleapis.com,2026-02-14T05:20:53.081Z,2,Chrome +IT-WS-008,10.10.3.108,cjohnson,https://googleapis.com/inbox,googleapis.com,2026-02-13T19:33:20.820Z,3,Chrome +IT-WS-008,10.10.3.108,cjohnson,https://login.microsoftonline.com/api,login.microsoftonline.com,2026-02-11T15:26:26.731Z,2,Chrome +IT-WS-008,10.10.3.108,cjohnson,https://login.microsoftonline.com/dashboard,login.microsoftonline.com,2026-02-18T23:11:38.438Z,18,Chrome +IT-WS-008,10.10.3.108,cjohnson,https://update.microsoft.com/search,update.microsoft.com,2026-02-12T16:05:15.676Z,6,Chrome +IT-WS-008,10.10.3.108,cjohnson,https://acme.local/docs,acme.local,2026-02-17T09:40:54.020Z,11,Chrome +HR-WS-009,10.10.1.109,svc_web,https://teams.microsoft.com/,teams.microsoft.com,2026-02-12T13:57:04.243Z,16,Chrome +HR-WS-009,10.10.1.109,svc_web,https://hulu.com/home,hulu.com,2026-02-13T15:24:52.210Z,5,Edge +HR-WS-009,10.10.1.109,svc_web,https://login.microsoftonline.com/search,login.microsoftonline.com,2026-02-12T03:28:51.743Z,10,Chrome +HR-WS-009,10.10.1.109,svc_web,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-19T16:20:37.884Z,17,Edge +HR-WS-009,10.10.1.109,svc_web,https://github.com/,github.com,2026-02-13T01:58:00.406Z,13,Chrome +HR-WS-009,10.10.1.109,svc_web,https://file-01.acme.local/api,file-01.acme.local,2026-02-12T14:57:32.375Z,10,Chrome +HR-WS-009,10.10.1.109,svc_web,https://aws.amazon.com/inbox,aws.amazon.com,2026-02-15T13:44:59.090Z,5,Chrome +HR-WS-009,10.10.1.109,svc_web,https://akamai.net/api,akamai.net,2026-02-15T01:09:09.455Z,10,Chrome +HR-WS-009,10.10.1.109,svc_web,https://acme.local/docs,acme.local,2026-02-20T15:23:05.206Z,2,Chrome +HR-WS-009,10.10.1.109,svc_web,https://acme.sharepoint.com/,acme.sharepoint.com,2026-02-17T06:35:37.299Z,11,Chrome +HR-WS-009,10.10.1.109,svc_web,https://exch-01.acme.local/inbox,exch-01.acme.local,2026-02-15T16:22:43.254Z,12,Edge +HR-WS-009,10.10.1.109,svc_web,https://stackoverflow.com/docs,stackoverflow.com,2026-02-16T14:34:47.713Z,12,Chrome +HR-WS-009,10.10.1.109,svc_web,https://cloudflare.com/dashboard,cloudflare.com,2026-02-13T04:59:53.238Z,3,Chrome +HR-WS-009,10.10.1.109,svc_web,https://cdn.jsdelivr.net/docs,cdn.jsdelivr.net,2026-02-12T19:33:07.305Z,3,Edge +HR-WS-009,10.10.1.109,svc_web,https://cloudflare.com/docs,cloudflare.com,2026-02-17T14:17:45.244Z,13,Chrome +FIN-WS-010,10.10.2.110,emartinez,https://file-01.acme.local/inbox,file-01.acme.local,2026-02-10T22:49:22.902Z,6,Edge +FIN-WS-010,10.10.2.110,emartinez,https://www.reddit.com/,www.reddit.com,2026-02-14T05:33:11.227Z,18,Chrome +FIN-WS-010,10.10.2.110,emartinez,https://akamai.net/inbox,akamai.net,2026-02-16T08:08:17.533Z,5,Chrome +FIN-WS-010,10.10.2.110,emartinez,https://teams.microsoft.com/docs,teams.microsoft.com,2026-02-19T06:36:35.408Z,9,Chrome +FIN-WS-010,10.10.2.110,emartinez,https://google.com/docs,google.com,2026-02-17T10:49:05.932Z,20,Chrome +FIN-WS-010,10.10.2.110,emartinez,https://graph.microsoft.com/inbox,graph.microsoft.com,2026-02-12T01:48:37.604Z,4,Chrome +FIN-WS-010,10.10.2.110,emartinez,https://xvideos.com/search?q=free+movies,xvideos.com,2026-02-19T18:08:44.361Z,8,Chrome +FIN-WS-010,10.10.2.110,emartinez,https://xvideos.com/play,xvideos.com,2026-02-18T13:03:12.571Z,14,Chrome +FIN-WS-010,10.10.2.110,emartinez,https://www.bet365.com/search?q=free+movies,Bet365 - Sports Betting,2026-02-17T21:17:36.661Z,8,Chrome +FIN-WS-010,10.10.2.110,emartinez,https://cdn.jsdelivr.net/docs,cdn.jsdelivr.net,2026-02-13T13:14:59.871Z,20,Chrome +FIN-WS-010,10.10.2.110,emartinez,https://graph.microsoft.com/api,graph.microsoft.com,2026-02-14T01:51:00.937Z,8,Chrome +FIN-WS-010,10.10.2.110,emartinez,https://file-01.acme.local/docs,file-01.acme.local,2026-02-11T09:25:57.798Z,11,Edge +FIN-WS-010,10.10.2.110,emartinez,https://google.com/search,google.com,2026-02-11T09:00:44.725Z,6,Edge +FIN-WS-010,10.10.2.110,emartinez,https://login.microsoftonline.com/inbox,login.microsoftonline.com,2026-02-17T07:41:05.753Z,2,Edge +FIN-WS-010,10.10.2.110,emartinez,https://acme.sharepoint.com/search,acme.sharepoint.com,2026-02-19T01:47:22.310Z,11,Chrome +FIN-WS-010,10.10.2.110,emartinez,https://file-01.acme.local/,file-01.acme.local,2026-02-16T23:45:38.488Z,6,Edge +FIN-WS-010,10.10.2.110,emartinez,https://dc-01.acme.local/,dc-01.acme.local,2026-02-20T12:02:42.918Z,17,Chrome +FIN-WS-010,10.10.2.110,emartinez,https://aws.amazon.com/search,aws.amazon.com,2026-02-20T13:40:23.377Z,17,Chrome +FIN-WS-010,10.10.2.110,emartinez,https://acme.local/api,acme.local,2026-02-11T04:16:02.600Z,18,Chrome +FIN-WS-010,10.10.2.110,emartinez,https://windowsupdate.com/search,windowsupdate.com,2026-02-13T13:41:52.766Z,4,Chrome +FIN-WS-010,10.10.2.110,emartinez,https://google.com/inbox,google.com,2026-02-15T15:37:57.963Z,3,Chrome +FIN-WS-010,10.10.2.110,emartinez,https://time.windows.com/api,time.windows.com,2026-02-19T10:49:55.004Z,16,Chrome +SLS-WS-011,10.10.3.111,admin,https://pypi.org/inbox,pypi.org,2026-02-16T19:23:22.493Z,20,Edge +SLS-WS-011,10.10.3.111,admin,https://update.microsoft.com/,update.microsoft.com,2026-02-13T22:29:06.774Z,3,Chrome +SLS-WS-011,10.10.3.111,admin,https://cdn.jsdelivr.net/,cdn.jsdelivr.net,2026-02-18T13:34:15.957Z,12,Edge +SLS-WS-011,10.10.3.111,admin,https://acme.local/,acme.local,2026-02-13T08:21:45.461Z,9,Chrome +SLS-WS-011,10.10.3.111,admin,https://exch-01.acme.local/dashboard,exch-01.acme.local,2026-02-16T04:35:14.943Z,17,Edge +SLS-WS-011,10.10.3.111,admin,https://npmjs.com/search,npmjs.com,2026-02-13T09:10:48.864Z,8,Edge +SLS-WS-011,10.10.3.111,admin,https://acme.sharepoint.com/,acme.sharepoint.com,2026-02-20T11:39:54.083Z,1,Edge +SLS-WS-011,10.10.3.111,admin,https://acme.local/,acme.local,2026-02-10T20:39:46.519Z,4,Chrome +SLS-WS-011,10.10.3.111,admin,https://teams.microsoft.com/,teams.microsoft.com,2026-02-11T13:02:26.302Z,10,Chrome +SLS-WS-011,10.10.3.111,admin,https://exch-01.acme.local/dashboard,exch-01.acme.local,2026-02-15T05:02:53.933Z,14,Edge +SLS-WS-011,10.10.3.111,admin,https://onlyfans.com/home,onlyfans.com,2026-02-12T23:05:15.173Z,10,Chrome +SLS-WS-011,10.10.3.111,admin,https://outlook.office365.com/api,outlook.office365.com,2026-02-12T13:19:07.448Z,9,Chrome +SLS-WS-011,10.10.3.111,admin,https://exch-01.acme.local/,exch-01.acme.local,2026-02-18T14:11:38.440Z,5,Edge +SLS-WS-011,10.10.3.111,admin,https://npmjs.com/inbox,npmjs.com,2026-02-15T21:19:22.960Z,4,Chrome +SLS-WS-011,10.10.3.111,admin,https://xvideos.com/category/popular,xvideos.com,2026-02-11T05:18:41.602Z,11,Chrome +SLS-WS-011,10.10.3.111,admin,https://update.microsoft.com/search,update.microsoft.com,2026-02-11T14:30:36.488Z,13,Edge +SLS-WS-011,10.10.3.111,admin,https://dc-02.acme.local/docs,dc-02.acme.local,2026-02-15T21:30:33.786Z,14,Chrome +SLS-WS-011,10.10.3.111,admin,https://aws.amazon.com/inbox,aws.amazon.com,2026-02-19T19:10:07.143Z,18,Chrome +SLS-WS-011,10.10.3.111,admin,https://acme.sharepoint.com/docs,acme.sharepoint.com,2026-02-12T09:51:05.931Z,8,Edge +SLS-WS-011,10.10.3.111,admin,https://pypi.org/,pypi.org,2026-02-13T14:02:47.875Z,9,Edge +SLS-WS-011,10.10.3.111,admin,https://update.microsoft.com/search,update.microsoft.com,2026-02-20T09:45:03.290Z,10,Chrome +SLS-WS-011,10.10.3.111,admin,https://exch-01.acme.local/api,exch-01.acme.local,2026-02-16T01:24:36.860Z,20,Edge +SLS-WS-011,10.10.3.111,admin,https://google.com/,google.com,2026-02-12T01:22:27.708Z,8,Chrome +SLS-WS-011,10.10.3.111,admin,https://store.steampowered.com/search?q=free+movies,Steam Store,2026-02-14T00:33:58.964Z,9,Chrome +SLS-WS-011,10.10.3.111,admin,https://akamai.net/,akamai.net,2026-02-12T23:17:21.855Z,17,Edge +SLS-WS-011,10.10.3.111,admin,https://pypi.org/inbox,pypi.org,2026-02-18T09:32:25.378Z,9,Chrome +SLS-WS-011,10.10.3.111,admin,https://dc-01.acme.local/inbox,dc-01.acme.local,2026-02-13T06:01:07.850Z,3,Chrome +SLS-WS-011,10.10.3.111,admin,https://update.microsoft.com/api,update.microsoft.com,2026-02-18T05:54:33.043Z,14,Edge +ENG-WS-012,10.10.1.112,agarcia,https://stackoverflow.com/,stackoverflow.com,2026-02-12T18:05:25.997Z,12,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://acme.local/search,acme.local,2026-02-10T22:42:13.650Z,11,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://time.windows.com/search,time.windows.com,2026-02-12T07:44:45.215Z,18,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://graph.microsoft.com/inbox,graph.microsoft.com,2026-02-14T00:22:28.810Z,15,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://outlook.office365.com/inbox,outlook.office365.com,2026-02-15T00:31:23.861Z,9,Edge +ENG-WS-012,10.10.1.112,agarcia,https://www.amazon.com/category/popular,Amazon.com - Shopping,2026-02-20T00:20:30.486Z,7,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://update.microsoft.com/dashboard,update.microsoft.com,2026-02-16T22:33:34.588Z,4,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://www.bet365.com/search?q=free+movies,Bet365 - Sports Betting,2026-02-18T05:21:14.568Z,6,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://akamai.net/search,akamai.net,2026-02-13T04:47:18.108Z,14,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://googleapis.com/inbox,googleapis.com,2026-02-18T04:24:11.880Z,5,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://onlyfans.com/home,onlyfans.com,2026-02-20T13:46:50.846Z,16,Edge +ENG-WS-012,10.10.1.112,agarcia,https://acme.sharepoint.com/api,acme.sharepoint.com,2026-02-18T04:55:49.867Z,8,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://store.steampowered.com/watch,Steam Store,2026-02-14T10:32:05.302Z,2,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://pokerstars.com/search?q=free+movies,PokerStars - Online Poker,2026-02-20T14:52:37.677Z,17,Edge +ENG-WS-012,10.10.1.112,agarcia,https://dc-01.acme.local/docs,dc-01.acme.local,2026-02-18T08:52:13.535Z,18,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://acme.local/,acme.local,2026-02-10T20:25:27.103Z,13,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://pypi.org/api,pypi.org,2026-02-15T07:15:54.790Z,10,Edge +ENG-WS-012,10.10.1.112,agarcia,https://pypi.org/docs,pypi.org,2026-02-13T17:26:03.849Z,5,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://npmjs.com/docs,npmjs.com,2026-02-13T10:28:17.245Z,6,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://login.microsoftonline.com/dashboard,login.microsoftonline.com,2026-02-12T12:57:38.046Z,19,Edge +ENG-WS-012,10.10.1.112,agarcia,https://cloudflare.com/inbox,cloudflare.com,2026-02-19T10:56:16.115Z,13,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://cloudflare.com/docs,cloudflare.com,2026-02-14T02:57:40.151Z,20,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://windowsupdate.com/,windowsupdate.com,2026-02-18T01:28:01.058Z,10,Edge +ENG-WS-012,10.10.1.112,agarcia,https://stackoverflow.com/docs,stackoverflow.com,2026-02-18T23:46:32.861Z,15,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://google.com/dashboard,google.com,2026-02-18T22:51:08.083Z,6,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://outlook.office365.com/,outlook.office365.com,2026-02-12T12:07:51.867Z,3,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://cdn.jsdelivr.net/docs,cdn.jsdelivr.net,2026-02-12T06:35:39.416Z,5,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://aws.amazon.com/search,aws.amazon.com,2026-02-17T02:18:31.105Z,15,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://teams.microsoft.com/api,teams.microsoft.com,2026-02-13T02:20:06.238Z,16,Edge +ENG-WS-012,10.10.1.112,agarcia,https://open.spotify.com/watch,open.spotify.com,2026-02-12T16:23:37.398Z,8,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://github.com/dashboard,github.com,2026-02-18T12:11:11.224Z,15,Chrome +ENG-WS-012,10.10.1.112,agarcia,https://update.microsoft.com/search,update.microsoft.com,2026-02-14T11:41:43.680Z,9,Edge +ENG-WS-012,10.10.1.112,agarcia,https://akamai.net/,akamai.net,2026-02-18T04:19:13.550Z,8,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://windowsupdate.com/docs,windowsupdate.com,2026-02-17T17:09:58.989Z,18,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://pypi.org/docs,pypi.org,2026-02-17T06:04:47.695Z,12,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://windowsupdate.com/,windowsupdate.com,2026-02-11T11:06:40.379Z,15,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://update.microsoft.com/search,update.microsoft.com,2026-02-17T00:40:39.328Z,19,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://file-01.acme.local/inbox,file-01.acme.local,2026-02-17T08:03:03.703Z,2,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://aws.amazon.com/dashboard,aws.amazon.com,2026-02-15T03:33:55.503Z,10,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://stackoverflow.com/dashboard,stackoverflow.com,2026-02-13T21:47:40.725Z,1,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://cdn.jsdelivr.net/dashboard,cdn.jsdelivr.net,2026-02-17T09:06:04.338Z,15,Edge +LEG-WS-013,10.10.2.113,jsmith,https://aws.amazon.com/search,aws.amazon.com,2026-02-18T09:54:45.752Z,4,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://update.microsoft.com/inbox,update.microsoft.com,2026-02-17T15:34:23.043Z,20,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://googleapis.com/docs,googleapis.com,2026-02-16T06:22:37.512Z,18,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://stackoverflow.com/inbox,stackoverflow.com,2026-02-18T02:07:15.328Z,15,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://github.com/search,github.com,2026-02-12T17:34:29.249Z,12,Edge +LEG-WS-013,10.10.2.113,jsmith,https://github.com/,github.com,2026-02-10T12:37:01.399Z,15,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://dc-01.acme.local/,dc-01.acme.local,2026-02-17T02:46:59.630Z,9,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://npmjs.com/docs,npmjs.com,2026-02-18T11:12:25.262Z,19,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://xvideos.com/watch,xvideos.com,2026-02-19T21:01:03.912Z,18,Edge +LEG-WS-013,10.10.2.113,jsmith,https://www.linkedin.com/jobs/play,www.linkedin.com/jobs,2026-02-16T13:18:39.139Z,16,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://googleapis.com/inbox,googleapis.com,2026-02-15T13:37:58.159Z,18,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://www.tiktok.com/home,TikTok - Make Your Day,2026-02-14T05:25:08.344Z,3,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://outlook.office365.com/docs,outlook.office365.com,2026-02-16T02:04:01.746Z,1,Edge +LEG-WS-013,10.10.2.113,jsmith,https://google.com/,google.com,2026-02-11T20:11:17.092Z,6,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://github.com/search,github.com,2026-02-11T04:50:56.033Z,14,Chrome +LEG-WS-013,10.10.2.113,jsmith,https://www.ebay.com/watch,www.ebay.com,2026-02-16T04:22:51.157Z,13,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://pypi.org/,pypi.org,2026-02-13T10:40:36.246Z,7,Edge +MKT-WS-014,10.10.3.114,bwilson,https://googleapis.com/docs,googleapis.com,2026-02-12T09:25:43.814Z,17,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://www.indeed.com/category/popular,Indeed - Job Search,2026-02-11T13:36:06.089Z,13,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://dc-01.acme.local/dashboard,dc-01.acme.local,2026-02-16T03:27:13.690Z,15,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://dc-02.acme.local/docs,dc-02.acme.local,2026-02-14T23:03:35.629Z,11,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://akamai.net/inbox,akamai.net,2026-02-17T10:03:14.767Z,15,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://file-01.acme.local/api,file-01.acme.local,2026-02-15T05:07:05.227Z,2,Edge +MKT-WS-014,10.10.3.114,bwilson,https://github.com/inbox,github.com,2026-02-13T17:50:44.970Z,5,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://cloudflare.com/api,cloudflare.com,2026-02-19T17:32:28.391Z,4,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://stackoverflow.com/dashboard,stackoverflow.com,2026-02-10T18:52:51.580Z,8,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://outlook.office365.com/,outlook.office365.com,2026-02-19T23:09:47.440Z,15,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://github.com/inbox,github.com,2026-02-10T19:37:13.522Z,6,Edge +MKT-WS-014,10.10.3.114,bwilson,https://www.linkedin.com/jobs/home,www.linkedin.com/jobs,2026-02-17T12:13:58.464Z,14,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://acme.sharepoint.com/dashboard,acme.sharepoint.com,2026-02-12T01:41:17.601Z,8,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://update.microsoft.com/,update.microsoft.com,2026-02-16T14:36:19.459Z,4,Edge +MKT-WS-014,10.10.3.114,bwilson,https://file-01.acme.local/inbox,file-01.acme.local,2026-02-17T16:00:27.250Z,6,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://www.bet365.com/home,Bet365 - Sports Betting,2026-02-14T02:15:41.060Z,1,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://www.netflix.com/search?q=free+movies,Netflix - Watch TV Shows,2026-02-18T12:45:42.516Z,11,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://file-01.acme.local/inbox,file-01.acme.local,2026-02-13T14:17:11.309Z,15,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://time.windows.com/dashboard,time.windows.com,2026-02-16T04:07:28.334Z,14,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://file-01.acme.local/,file-01.acme.local,2026-02-18T23:07:57.767Z,6,Chrome +MKT-WS-014,10.10.3.114,bwilson,https://www.glassdoor.com/play,www.glassdoor.com,2026-02-14T04:41:04.552Z,16,Edge +EXEC-WS-015,10.10.1.115,jsmith,https://acme.sharepoint.com/inbox,acme.sharepoint.com,2026-02-19T16:49:44.848Z,10,Edge +EXEC-WS-015,10.10.1.115,jsmith,https://github.com/,github.com,2026-02-13T10:50:59.761Z,6,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://googleapis.com/dashboard,googleapis.com,2026-02-13T08:30:32.919Z,2,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://googleapis.com/inbox,googleapis.com,2026-02-18T01:27:29.731Z,4,Edge +EXEC-WS-015,10.10.1.115,jsmith,https://pypi.org/,pypi.org,2026-02-10T22:58:06.224Z,10,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://akamai.net/,akamai.net,2026-02-12T15:53:34.456Z,14,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://cloudflare.com/,cloudflare.com,2026-02-19T11:08:49.704Z,13,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://google.com/,google.com,2026-02-12T07:20:44.999Z,4,Edge +EXEC-WS-015,10.10.1.115,jsmith,https://cdn.jsdelivr.net/search,cdn.jsdelivr.net,2026-02-16T18:28:22.279Z,2,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://akamai.net/dashboard,akamai.net,2026-02-18T01:46:26.746Z,11,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://npmjs.com/inbox,npmjs.com,2026-02-19T00:02:06.834Z,11,Edge +EXEC-WS-015,10.10.1.115,jsmith,https://dc-01.acme.local/docs,dc-01.acme.local,2026-02-20T15:28:08.521Z,19,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://outlook.office365.com/docs,outlook.office365.com,2026-02-16T06:05:35.358Z,15,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://npmjs.com/,npmjs.com,2026-02-19T08:47:29.525Z,9,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://acme.sharepoint.com/docs,acme.sharepoint.com,2026-02-17T03:14:12.883Z,14,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://graph.microsoft.com/,graph.microsoft.com,2026-02-18T21:36:43.503Z,5,Edge +EXEC-WS-015,10.10.1.115,jsmith,https://login.microsoftonline.com/,login.microsoftonline.com,2026-02-19T15:24:56.710Z,18,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://github.com/docs,github.com,2026-02-17T14:04:40.634Z,7,Edge +EXEC-WS-015,10.10.1.115,jsmith,https://pypi.org/dashboard,pypi.org,2026-02-11T00:44:30.139Z,8,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://teams.microsoft.com/,teams.microsoft.com,2026-02-19T16:47:37.638Z,15,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://file-01.acme.local/search,file-01.acme.local,2026-02-12T14:51:51.053Z,11,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://dc-01.acme.local/,dc-01.acme.local,2026-02-13T19:20:33.180Z,14,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://acme.sharepoint.com/,acme.sharepoint.com,2026-02-12T04:22:53.439Z,8,Edge +EXEC-WS-015,10.10.1.115,jsmith,https://www.indeed.com/play,Indeed - Job Search,2026-02-16T07:06:27.334Z,5,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://time.windows.com/inbox,time.windows.com,2026-02-14T11:37:35.983Z,4,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://acme.local/api,acme.local,2026-02-16T23:09:48.447Z,7,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://1337x.to/play,1337x.to,2026-02-15T18:10:41.285Z,9,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://update.microsoft.com/search,update.microsoft.com,2026-02-12T12:34:47.609Z,2,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://pypi.org/api,pypi.org,2026-02-13T01:40:39.635Z,8,Edge +EXEC-WS-015,10.10.1.115,jsmith,https://time.windows.com/inbox,time.windows.com,2026-02-10T09:23:48.819Z,4,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://google.com/inbox,google.com,2026-02-18T04:25:08.729Z,5,Edge +EXEC-WS-015,10.10.1.115,jsmith,https://acme.sharepoint.com/,acme.sharepoint.com,2026-02-16T11:36:56.926Z,5,Chrome +EXEC-WS-015,10.10.1.115,jsmith,https://acme.sharepoint.com/search,acme.sharepoint.com,2026-02-10T15:37:59.065Z,11,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://stackoverflow.com/,stackoverflow.com,2026-02-15T12:03:30.097Z,20,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://stackoverflow.com/docs,stackoverflow.com,2026-02-15T13:57:42.372Z,7,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://update.microsoft.com/dashboard,update.microsoft.com,2026-02-14T04:17:16.820Z,4,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://update.microsoft.com/dashboard,update.microsoft.com,2026-02-17T22:52:41.119Z,11,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://acme.local/,acme.local,2026-02-14T06:51:14.818Z,2,Edge +IT-WS-016,10.10.2.116,cjohnson,https://stackoverflow.com/docs,stackoverflow.com,2026-02-20T10:24:00.131Z,10,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://exch-01.acme.local/inbox,exch-01.acme.local,2026-02-14T10:00:21.682Z,4,Edge +IT-WS-016,10.10.2.116,cjohnson,https://outlook.office365.com/search,outlook.office365.com,2026-02-16T15:32:16.783Z,12,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://windowsupdate.com/,windowsupdate.com,2026-02-11T10:21:08.137Z,20,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://github.com/,github.com,2026-02-13T19:32:47.907Z,13,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://akamai.net/api,akamai.net,2026-02-16T17:20:37.322Z,4,Edge +IT-WS-016,10.10.2.116,cjohnson,https://graph.microsoft.com/docs,graph.microsoft.com,2026-02-16T15:53:41.369Z,18,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://discord.gg/home,discord.gg,2026-02-16T01:44:20.997Z,11,Edge +IT-WS-016,10.10.2.116,cjohnson,https://cloudflare.com/search,cloudflare.com,2026-02-13T15:52:54.834Z,12,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://outlook.office365.com/dashboard,outlook.office365.com,2026-02-13T16:53:02.403Z,9,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://aws.amazon.com/inbox,aws.amazon.com,2026-02-19T06:50:04.549Z,13,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://googleapis.com/dashboard,googleapis.com,2026-02-15T06:45:49.444Z,17,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://google.com/api,google.com,2026-02-18T07:51:28.275Z,1,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://www.pornhub.com/search?q=free+movies,Pornhub,2026-02-18T04:59:05.554Z,2,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://outlook.office365.com/api,outlook.office365.com,2026-02-17T09:53:30.527Z,5,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://npmjs.com/dashboard,npmjs.com,2026-02-16T18:22:29.040Z,6,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://pypi.org/search,pypi.org,2026-02-15T12:41:31.665Z,2,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-20T10:25:50.906Z,8,Edge +IT-WS-016,10.10.2.116,cjohnson,https://github.com/search,github.com,2026-02-15T00:12:15.327Z,12,Edge +IT-WS-016,10.10.2.116,cjohnson,https://googleapis.com/docs,googleapis.com,2026-02-14T00:21:17.026Z,18,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://steamcommunity.com/category/popular,Steam Store,2026-02-15T00:13:07.707Z,4,Edge +IT-WS-016,10.10.2.116,cjohnson,https://hulu.com/home,hulu.com,2026-02-11T18:58:31.995Z,12,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://time.windows.com/,time.windows.com,2026-02-13T11:57:26.868Z,3,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://dc-01.acme.local/docs,dc-01.acme.local,2026-02-11T18:16:59.494Z,5,Chrome +IT-WS-016,10.10.2.116,cjohnson,https://1337x.to/watch,1337x.to,2026-02-17T02:50:35.620Z,10,Chrome +HR-WS-017,10.10.3.117,jsmith,https://stackoverflow.com/inbox,stackoverflow.com,2026-02-11T02:17:46.443Z,3,Chrome +HR-WS-017,10.10.3.117,jsmith,https://teams.microsoft.com/,teams.microsoft.com,2026-02-15T11:41:21.492Z,8,Chrome +HR-WS-017,10.10.3.117,jsmith,https://googleapis.com/inbox,googleapis.com,2026-02-15T10:25:52.402Z,1,Chrome +HR-WS-017,10.10.3.117,jsmith,https://time.windows.com/api,time.windows.com,2026-02-16T22:34:17.923Z,13,Chrome +HR-WS-017,10.10.3.117,jsmith,https://pypi.org/docs,pypi.org,2026-02-10T22:15:16.554Z,2,Edge +HR-WS-017,10.10.3.117,jsmith,https://akamai.net/api,akamai.net,2026-02-10T10:15:35.269Z,10,Chrome +HR-WS-017,10.10.3.117,jsmith,https://draftkings.com/play,draftkings.com,2026-02-16T02:56:21.598Z,14,Edge +HR-WS-017,10.10.3.117,jsmith,https://dc-02.acme.local/docs,dc-02.acme.local,2026-02-14T11:59:00.360Z,9,Chrome +HR-WS-017,10.10.3.117,jsmith,https://outlook.office365.com/,outlook.office365.com,2026-02-11T23:05:35.189Z,1,Chrome +HR-WS-017,10.10.3.117,jsmith,https://windowsupdate.com/dashboard,windowsupdate.com,2026-02-20T12:10:59.836Z,18,Chrome +HR-WS-017,10.10.3.117,jsmith,https://cdn.jsdelivr.net/api,cdn.jsdelivr.net,2026-02-14T07:51:06.473Z,13,Edge +HR-WS-017,10.10.3.117,jsmith,https://acme.sharepoint.com/docs,acme.sharepoint.com,2026-02-10T16:41:43.776Z,10,Chrome +HR-WS-017,10.10.3.117,jsmith,https://exch-01.acme.local/docs,exch-01.acme.local,2026-02-11T05:20:52.911Z,19,Chrome +HR-WS-017,10.10.3.117,jsmith,https://pypi.org/,pypi.org,2026-02-11T00:48:37.533Z,10,Chrome +FIN-WS-018,10.10.1.118,agarcia,https://outlook.office365.com/inbox,outlook.office365.com,2026-02-17T16:22:07.007Z,16,Edge +FIN-WS-018,10.10.1.118,agarcia,https://update.microsoft.com/api,update.microsoft.com,2026-02-18T15:48:00.175Z,15,Edge +FIN-WS-018,10.10.1.118,agarcia,https://www.ebay.com/play,www.ebay.com,2026-02-13T06:02:48.967Z,11,Chrome +FIN-WS-018,10.10.1.118,agarcia,https://npmjs.com/inbox,npmjs.com,2026-02-12T03:56:16.968Z,5,Chrome +FIN-WS-018,10.10.1.118,agarcia,https://cloudflare.com/search,cloudflare.com,2026-02-19T00:33:49.653Z,14,Chrome +FIN-WS-018,10.10.1.118,agarcia,https://akamai.net/search,akamai.net,2026-02-17T09:27:24.795Z,16,Edge +FIN-WS-018,10.10.1.118,agarcia,https://acme.local/search,acme.local,2026-02-11T23:14:43.577Z,19,Edge +FIN-WS-018,10.10.1.118,agarcia,https://aws.amazon.com/,aws.amazon.com,2026-02-12T21:44:19.226Z,5,Chrome +FIN-WS-018,10.10.1.118,agarcia,https://github.com/,github.com,2026-02-15T17:15:16.690Z,20,Chrome +FIN-WS-018,10.10.1.118,agarcia,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-16T11:07:20.504Z,5,Chrome +FIN-WS-018,10.10.1.118,agarcia,https://exch-01.acme.local/,exch-01.acme.local,2026-02-19T22:59:33.470Z,14,Chrome +FIN-WS-018,10.10.1.118,agarcia,https://windowsupdate.com/search,windowsupdate.com,2026-02-11T04:51:59.762Z,14,Chrome +FIN-WS-018,10.10.1.118,agarcia,https://acme.local/inbox,acme.local,2026-02-18T05:54:10.985Z,3,Edge +FIN-WS-018,10.10.1.118,agarcia,https://google.com/,google.com,2026-02-12T06:21:03.993Z,13,Edge +FIN-WS-018,10.10.1.118,agarcia,https://xvideos.com/watch,xvideos.com,2026-02-15T06:49:52.995Z,2,Chrome +FIN-WS-018,10.10.1.118,agarcia,https://outlook.office365.com/api,outlook.office365.com,2026-02-11T20:47:03.919Z,4,Chrome +FIN-WS-018,10.10.1.118,agarcia,https://www.amazon.com/play,Amazon.com - Shopping,2026-02-13T14:46:31.088Z,5,Chrome +FIN-WS-018,10.10.1.118,agarcia,https://www.pornhub.com/,Pornhub,2026-02-13T00:05:44.590Z,10,Edge +FIN-WS-018,10.10.1.118,agarcia,https://www.shein.com/,www.shein.com,2026-02-14T21:40:14.489Z,10,Chrome +FIN-WS-018,10.10.1.118,agarcia,https://github.com/inbox,github.com,2026-02-10T10:33:18.172Z,12,Edge +FIN-WS-018,10.10.1.118,agarcia,https://www.netflix.com/search?q=free+movies,Netflix - Watch TV Shows,2026-02-17T15:46:59.262Z,17,Edge +FIN-WS-018,10.10.1.118,agarcia,https://pypi.org/search,pypi.org,2026-02-14T06:57:32.077Z,20,Edge +FIN-WS-018,10.10.1.118,agarcia,https://pypi.org/docs,pypi.org,2026-02-13T12:16:55.856Z,6,Chrome +FIN-WS-018,10.10.1.118,agarcia,https://npmjs.com/api,npmjs.com,2026-02-18T11:38:53.722Z,3,Edge +FIN-WS-018,10.10.1.118,agarcia,https://akamai.net/search,akamai.net,2026-02-17T00:06:29.949Z,4,Edge +FIN-WS-018,10.10.1.118,agarcia,https://npmjs.com/docs,npmjs.com,2026-02-14T18:39:54.926Z,4,Edge +SLS-WS-019,10.10.2.119,dlee,https://google.com/search,google.com,2026-02-15T00:04:24.877Z,19,Chrome +SLS-WS-019,10.10.2.119,dlee,https://npmjs.com/,npmjs.com,2026-02-16T09:42:25.504Z,2,Chrome +SLS-WS-019,10.10.2.119,dlee,https://graph.microsoft.com/docs,graph.microsoft.com,2026-02-19T03:43:20.623Z,12,Chrome +SLS-WS-019,10.10.2.119,dlee,https://login.microsoftonline.com/api,login.microsoftonline.com,2026-02-19T20:14:18.260Z,18,Chrome +SLS-WS-019,10.10.2.119,dlee,https://acme.sharepoint.com/docs,acme.sharepoint.com,2026-02-13T16:54:20.847Z,17,Chrome +SLS-WS-019,10.10.2.119,dlee,https://dc-01.acme.local/dashboard,dc-01.acme.local,2026-02-11T01:55:51.202Z,13,Edge +SLS-WS-019,10.10.2.119,dlee,https://teams.microsoft.com/search,teams.microsoft.com,2026-02-13T22:51:12.909Z,13,Edge +SLS-WS-019,10.10.2.119,dlee,https://time.windows.com/dashboard,time.windows.com,2026-02-18T00:47:27.819Z,11,Chrome +SLS-WS-019,10.10.2.119,dlee,https://login.microsoftonline.com/api,login.microsoftonline.com,2026-02-13T01:42:32.147Z,12,Edge +SLS-WS-019,10.10.2.119,dlee,https://pypi.org/dashboard,pypi.org,2026-02-14T17:16:16.170Z,10,Chrome +SLS-WS-019,10.10.2.119,dlee,https://login.microsoftonline.com/,login.microsoftonline.com,2026-02-14T17:04:56.780Z,19,Chrome +SLS-WS-019,10.10.2.119,dlee,https://login.microsoftonline.com/inbox,login.microsoftonline.com,2026-02-11T21:44:21.012Z,8,Edge +SLS-WS-019,10.10.2.119,dlee,https://pypi.org/,pypi.org,2026-02-14T12:00:23.094Z,8,Chrome +SLS-WS-019,10.10.2.119,dlee,https://pypi.org/dashboard,pypi.org,2026-02-16T12:13:29.285Z,13,Edge +SLS-WS-019,10.10.2.119,dlee,https://file-01.acme.local/api,file-01.acme.local,2026-02-19T07:40:08.946Z,12,Chrome +SLS-WS-019,10.10.2.119,dlee,https://login.microsoftonline.com/api,login.microsoftonline.com,2026-02-14T01:50:53.174Z,19,Chrome +SLS-WS-019,10.10.2.119,dlee,https://google.com/api,google.com,2026-02-19T01:43:54.693Z,12,Edge +SLS-WS-019,10.10.2.119,dlee,https://outlook.office365.com/api,outlook.office365.com,2026-02-19T04:26:06.602Z,2,Chrome +SLS-WS-019,10.10.2.119,dlee,https://teams.microsoft.com/inbox,teams.microsoft.com,2026-02-18T14:37:34.519Z,1,Chrome +SLS-WS-019,10.10.2.119,dlee,https://stackoverflow.com/,stackoverflow.com,2026-02-14T05:20:58.685Z,17,Chrome +SLS-WS-019,10.10.2.119,dlee,https://googleapis.com/docs,googleapis.com,2026-02-17T00:19:48.596Z,7,Chrome +SLS-WS-019,10.10.2.119,dlee,https://npmjs.com/inbox,npmjs.com,2026-02-15T15:50:42.814Z,6,Edge +SLS-WS-019,10.10.2.119,dlee,https://pypi.org/,pypi.org,2026-02-12T02:08:24.126Z,4,Chrome +SLS-WS-019,10.10.2.119,dlee,https://github.com/search,github.com,2026-02-20T10:43:16.532Z,2,Edge +SLS-WS-019,10.10.2.119,dlee,https://cloudflare.com/inbox,cloudflare.com,2026-02-20T03:05:34.769Z,6,Chrome +SLS-WS-019,10.10.2.119,dlee,https://npmjs.com/dashboard,npmjs.com,2026-02-14T10:27:50.469Z,12,Chrome +SLS-WS-019,10.10.2.119,dlee,https://googleapis.com/inbox,googleapis.com,2026-02-19T05:09:26.742Z,16,Chrome +SLS-WS-019,10.10.2.119,dlee,https://exch-01.acme.local/api,exch-01.acme.local,2026-02-17T08:56:15.389Z,18,Edge +SLS-WS-019,10.10.2.119,dlee,https://teams.microsoft.com/inbox,teams.microsoft.com,2026-02-18T11:15:37.909Z,11,Edge +SLS-WS-019,10.10.2.119,dlee,https://acme.local/search,acme.local,2026-02-14T09:09:18.840Z,10,Chrome +SLS-WS-019,10.10.2.119,dlee,https://dc-02.acme.local/search,dc-02.acme.local,2026-02-17T15:13:54.339Z,8,Chrome +SLS-WS-019,10.10.2.119,dlee,https://aws.amazon.com/docs,aws.amazon.com,2026-02-14T19:33:15.753Z,15,Chrome +ENG-WS-020,10.10.3.120,svc_sql,https://stackoverflow.com/inbox,stackoverflow.com,2026-02-20T09:58:16.957Z,3,Chrome +ENG-WS-020,10.10.3.120,svc_sql,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-16T04:34:00.108Z,3,Chrome +ENG-WS-020,10.10.3.120,svc_sql,https://cloudflare.com/search,cloudflare.com,2026-02-13T12:50:34.392Z,2,Chrome +ENG-WS-020,10.10.3.120,svc_sql,https://pypi.org/search,pypi.org,2026-02-14T16:22:42.710Z,3,Chrome +ENG-WS-020,10.10.3.120,svc_sql,https://windowsupdate.com/inbox,windowsupdate.com,2026-02-20T05:32:41.951Z,13,Chrome +ENG-WS-020,10.10.3.120,svc_sql,https://dc-02.acme.local/inbox,dc-02.acme.local,2026-02-16T21:05:16.925Z,8,Chrome +ENG-WS-020,10.10.3.120,svc_sql,https://google.com/inbox,google.com,2026-02-10T15:07:15.716Z,15,Chrome +ENG-WS-020,10.10.3.120,svc_sql,https://time.windows.com/docs,time.windows.com,2026-02-20T04:12:30.641Z,16,Edge +ENG-WS-020,10.10.3.120,svc_sql,https://www.indeed.com/search?q=free+movies,Indeed - Job Search,2026-02-14T18:50:10.021Z,19,Chrome +ENG-WS-020,10.10.3.120,svc_sql,https://exch-01.acme.local/docs,exch-01.acme.local,2026-02-11T10:25:26.973Z,10,Chrome +ENG-WS-020,10.10.3.120,svc_sql,https://file-01.acme.local/dashboard,file-01.acme.local,2026-02-16T09:30:25.026Z,18,Chrome +ENG-WS-020,10.10.3.120,svc_sql,https://google.com/search,google.com,2026-02-16T04:30:34.091Z,10,Edge +ENG-WS-020,10.10.3.120,svc_sql,https://login.microsoftonline.com/inbox,login.microsoftonline.com,2026-02-14T09:56:27.123Z,17,Chrome +ENG-WS-020,10.10.3.120,svc_sql,https://thepiratebay.org/watch,The Pirate Bay,2026-02-15T04:33:50.111Z,19,Chrome +ENG-WS-020,10.10.3.120,svc_sql,https://cdn.jsdelivr.net/docs,cdn.jsdelivr.net,2026-02-16T02:13:47.602Z,3,Chrome +ENG-WS-020,10.10.3.120,svc_sql,https://time.windows.com/search,time.windows.com,2026-02-16T08:31:43.742Z,20,Chrome +ENG-WS-020,10.10.3.120,svc_sql,https://npmjs.com/,npmjs.com,2026-02-13T21:56:33.225Z,14,Chrome +ENG-WS-020,10.10.3.120,svc_sql,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-20T15:15:35.490Z,8,Edge +ENG-WS-020,10.10.3.120,svc_sql,https://github.com/docs,github.com,2026-02-16T12:42:28.486Z,3,Chrome +ENG-WS-020,10.10.3.120,svc_sql,https://cloudflare.com/api,cloudflare.com,2026-02-18T10:38:57.234Z,16,Edge +LEG-WS-021,10.10.1.121,svc_sql,https://npmjs.com/search,npmjs.com,2026-02-17T09:56:48.534Z,13,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://stackoverflow.com/api,stackoverflow.com,2026-02-20T14:16:23.475Z,16,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://teams.microsoft.com/inbox,teams.microsoft.com,2026-02-20T01:39:44.617Z,12,Edge +LEG-WS-021,10.10.1.121,svc_sql,https://googleapis.com/search,googleapis.com,2026-02-11T10:55:45.091Z,19,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://exch-01.acme.local/,exch-01.acme.local,2026-02-11T05:45:36.145Z,16,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://acme.sharepoint.com/api,acme.sharepoint.com,2026-02-18T21:15:36.066Z,2,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://store.steampowered.com/,Steam Store,2026-02-16T11:04:53.534Z,13,Edge +LEG-WS-021,10.10.1.121,svc_sql,https://stackoverflow.com/dashboard,stackoverflow.com,2026-02-20T08:20:58.703Z,16,Edge +LEG-WS-021,10.10.1.121,svc_sql,https://cdn.jsdelivr.net/dashboard,cdn.jsdelivr.net,2026-02-17T14:10:44.864Z,8,Edge +LEG-WS-021,10.10.1.121,svc_sql,https://windowsupdate.com/search,windowsupdate.com,2026-02-19T22:36:34.633Z,16,Edge +LEG-WS-021,10.10.1.121,svc_sql,https://onlyfans.com/search?q=free+movies,onlyfans.com,2026-02-12T03:34:48.804Z,7,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://teams.microsoft.com/docs,teams.microsoft.com,2026-02-19T13:53:39.123Z,2,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://time.windows.com/dashboard,time.windows.com,2026-02-15T00:11:10.780Z,14,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://fitgirl-repacks.site/play,fitgirl-repacks.site,2026-02-16T10:13:07.569Z,10,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://login.microsoftonline.com/,login.microsoftonline.com,2026-02-11T23:25:12.712Z,18,Edge +LEG-WS-021,10.10.1.121,svc_sql,https://googleapis.com/inbox,googleapis.com,2026-02-18T08:14:22.934Z,12,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://www.pornhub.com/watch,Pornhub,2026-02-14T08:39:20.286Z,16,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://login.microsoftonline.com/search,login.microsoftonline.com,2026-02-16T23:58:36.890Z,13,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://google.com/api,google.com,2026-02-19T18:10:05.100Z,2,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-17T13:43:54.679Z,17,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://file-01.acme.local/dashboard,file-01.acme.local,2026-02-12T05:35:10.168Z,5,Edge +LEG-WS-021,10.10.1.121,svc_sql,https://outlook.office365.com/,outlook.office365.com,2026-02-18T08:18:56.252Z,12,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://dc-02.acme.local/inbox,dc-02.acme.local,2026-02-11T12:50:07.271Z,9,Edge +LEG-WS-021,10.10.1.121,svc_sql,https://teams.microsoft.com/dashboard,teams.microsoft.com,2026-02-17T04:34:18.316Z,1,Edge +LEG-WS-021,10.10.1.121,svc_sql,https://update.microsoft.com/,update.microsoft.com,2026-02-17T19:21:01.973Z,18,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://windowsupdate.com/,windowsupdate.com,2026-02-19T23:06:03.203Z,1,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://stackoverflow.com/search,stackoverflow.com,2026-02-15T19:13:56.725Z,16,Chrome +LEG-WS-021,10.10.1.121,svc_sql,https://time.windows.com/inbox,time.windows.com,2026-02-16T03:30:31.401Z,16,Chrome +MKT-WS-022,10.10.2.122,bwilson,https://onlyfans.com/play,onlyfans.com,2026-02-11T11:10:20.646Z,8,Chrome +MKT-WS-022,10.10.2.122,bwilson,https://time.windows.com/api,time.windows.com,2026-02-15T14:51:38.644Z,13,Chrome +MKT-WS-022,10.10.2.122,bwilson,https://google.com/,google.com,2026-02-18T02:56:13.649Z,4,Chrome +MKT-WS-022,10.10.2.122,bwilson,https://exch-01.acme.local/dashboard,exch-01.acme.local,2026-02-18T20:05:39.377Z,4,Edge +MKT-WS-022,10.10.2.122,bwilson,https://stackoverflow.com/inbox,stackoverflow.com,2026-02-12T00:55:24.253Z,5,Chrome +MKT-WS-022,10.10.2.122,bwilson,https://teams.microsoft.com/inbox,teams.microsoft.com,2026-02-10T14:53:37.455Z,4,Edge +MKT-WS-022,10.10.2.122,bwilson,https://time.windows.com/inbox,time.windows.com,2026-02-14T02:52:35.893Z,19,Chrome +MKT-WS-022,10.10.2.122,bwilson,https://cloudflare.com/dashboard,cloudflare.com,2026-02-13T01:03:33.558Z,18,Edge +MKT-WS-022,10.10.2.122,bwilson,https://npmjs.com/dashboard,npmjs.com,2026-02-11T01:57:18.599Z,9,Chrome +MKT-WS-022,10.10.2.122,bwilson,https://www.amazon.com/search?q=free+movies,Amazon.com - Shopping,2026-02-11T20:21:45.661Z,15,Chrome +MKT-WS-022,10.10.2.122,bwilson,https://www.shein.com/play,www.shein.com,2026-02-16T05:36:15.097Z,10,Edge +MKT-WS-022,10.10.2.122,bwilson,https://dc-02.acme.local/,dc-02.acme.local,2026-02-17T07:39:27.610Z,15,Chrome +MKT-WS-022,10.10.2.122,bwilson,https://github.com/,github.com,2026-02-18T23:46:58.895Z,20,Chrome +EXEC-WS-023,10.10.3.123,bwilson,https://acme.local/dashboard,acme.local,2026-02-20T01:59:47.137Z,20,Chrome +EXEC-WS-023,10.10.3.123,bwilson,https://www.amazon.com/search?q=free+movies,Amazon.com - Shopping,2026-02-15T08:49:14.308Z,13,Chrome +EXEC-WS-023,10.10.3.123,bwilson,https://www.netflix.com/home,Netflix - Watch TV Shows,2026-02-18T16:43:59.694Z,13,Chrome +EXEC-WS-023,10.10.3.123,bwilson,https://npmjs.com/inbox,npmjs.com,2026-02-10T09:08:53.585Z,18,Chrome +EXEC-WS-023,10.10.3.123,bwilson,https://akamai.net/search,akamai.net,2026-02-17T09:39:58.068Z,11,Chrome +EXEC-WS-023,10.10.3.123,bwilson,https://cloudflare.com/docs,cloudflare.com,2026-02-19T03:15:03.683Z,18,Edge +EXEC-WS-023,10.10.3.123,bwilson,https://outlook.office365.com/dashboard,outlook.office365.com,2026-02-10T12:37:56.985Z,11,Chrome +EXEC-WS-023,10.10.3.123,bwilson,https://pypi.org/docs,pypi.org,2026-02-16T14:14:40.542Z,3,Edge +EXEC-WS-023,10.10.3.123,bwilson,https://steamcommunity.com/,Steam Store,2026-02-11T05:52:58.926Z,18,Chrome +EXEC-WS-023,10.10.3.123,bwilson,https://exch-01.acme.local/docs,exch-01.acme.local,2026-02-15T07:31:56.087Z,4,Chrome +EXEC-WS-023,10.10.3.123,bwilson,https://cdn.jsdelivr.net/search,cdn.jsdelivr.net,2026-02-13T23:46:09.779Z,14,Chrome +EXEC-WS-023,10.10.3.123,bwilson,https://windowsupdate.com/api,windowsupdate.com,2026-02-11T10:52:05.051Z,17,Chrome +IT-WS-024,10.10.1.124,emartinez,https://hulu.com/search?q=free+movies,hulu.com,2026-02-13T14:03:40.497Z,2,Chrome +IT-WS-024,10.10.1.124,emartinez,https://googleapis.com/api,googleapis.com,2026-02-18T17:16:11.634Z,19,Edge +IT-WS-024,10.10.1.124,emartinez,https://dc-01.acme.local/dashboard,dc-01.acme.local,2026-02-12T04:32:23.894Z,9,Chrome +IT-WS-024,10.10.1.124,emartinez,https://dc-01.acme.local/,dc-01.acme.local,2026-02-17T19:15:42.544Z,13,Chrome +IT-WS-024,10.10.1.124,emartinez,https://teams.microsoft.com/api,teams.microsoft.com,2026-02-16T07:24:43.350Z,6,Edge +IT-WS-024,10.10.1.124,emartinez,https://www.indeed.com/play,Indeed - Job Search,2026-02-18T22:44:09.972Z,9,Chrome +IT-WS-024,10.10.1.124,emartinez,https://www.netflix.com/category/popular,Netflix - Watch TV Shows,2026-02-20T02:29:54.237Z,6,Chrome +IT-WS-024,10.10.1.124,emartinez,https://file-01.acme.local/inbox,file-01.acme.local,2026-02-16T10:59:59.953Z,10,Edge +IT-WS-024,10.10.1.124,emartinez,https://teams.microsoft.com/,teams.microsoft.com,2026-02-17T17:05:17.050Z,6,Chrome +IT-WS-024,10.10.1.124,emartinez,https://outlook.office365.com/api,outlook.office365.com,2026-02-11T03:16:04.074Z,6,Chrome +IT-WS-024,10.10.1.124,emartinez,https://outlook.office365.com/dashboard,outlook.office365.com,2026-02-14T15:28:39.873Z,15,Chrome +IT-WS-024,10.10.1.124,emartinez,https://graph.microsoft.com/docs,graph.microsoft.com,2026-02-13T21:02:03.560Z,17,Chrome +IT-WS-024,10.10.1.124,emartinez,https://acme.sharepoint.com/docs,acme.sharepoint.com,2026-02-20T13:40:06.905Z,5,Chrome +IT-WS-024,10.10.1.124,emartinez,https://time.windows.com/api,time.windows.com,2026-02-15T04:04:07.811Z,8,Chrome +IT-WS-024,10.10.1.124,emartinez,https://exch-01.acme.local/dashboard,exch-01.acme.local,2026-02-12T06:41:58.784Z,16,Chrome +IT-WS-024,10.10.1.124,emartinez,https://windowsupdate.com/search,windowsupdate.com,2026-02-19T02:31:03.525Z,19,Edge +IT-WS-024,10.10.1.124,emartinez,https://time.windows.com/api,time.windows.com,2026-02-17T17:06:00.462Z,19,Chrome +IT-WS-024,10.10.1.124,emartinez,https://teams.microsoft.com/inbox,teams.microsoft.com,2026-02-14T21:22:44.116Z,3,Edge +IT-WS-024,10.10.1.124,emartinez,https://windowsupdate.com/inbox,windowsupdate.com,2026-02-14T19:46:52.840Z,3,Chrome +IT-WS-024,10.10.1.124,emartinez,https://github.com/inbox,github.com,2026-02-15T06:45:39.249Z,16,Chrome +IT-WS-024,10.10.1.124,emartinez,https://dc-02.acme.local/,dc-02.acme.local,2026-02-10T17:27:52.776Z,6,Chrome +IT-WS-024,10.10.1.124,emartinez,https://login.microsoftonline.com/dashboard,login.microsoftonline.com,2026-02-12T11:37:10.253Z,18,Edge +IT-WS-024,10.10.1.124,emartinez,https://login.microsoftonline.com/dashboard,login.microsoftonline.com,2026-02-11T05:39:50.291Z,8,Chrome +IT-WS-024,10.10.1.124,emartinez,https://acme.local/dashboard,acme.local,2026-02-18T17:54:53.192Z,9,Chrome +IT-WS-024,10.10.1.124,emartinez,https://acme.local/,acme.local,2026-02-17T09:19:47.520Z,17,Edge +IT-WS-024,10.10.1.124,emartinez,https://pypi.org/docs,pypi.org,2026-02-11T03:55:06.003Z,19,Chrome +IT-WS-024,10.10.1.124,emartinez,https://www.reddit.com/search?q=free+movies,www.reddit.com,2026-02-15T05:58:07.509Z,6,Chrome +IT-WS-024,10.10.1.124,emartinez,https://teams.microsoft.com/docs,teams.microsoft.com,2026-02-19T20:37:24.787Z,2,Chrome +IT-WS-024,10.10.1.124,emartinez,https://hulu.com/search?q=free+movies,hulu.com,2026-02-15T05:15:28.205Z,13,Chrome +IT-WS-024,10.10.1.124,emartinez,https://login.microsoftonline.com/,login.microsoftonline.com,2026-02-18T01:18:32.454Z,16,Chrome +IT-WS-024,10.10.1.124,emartinez,https://dc-02.acme.local/docs,dc-02.acme.local,2026-02-17T19:30:20.711Z,15,Chrome +IT-WS-024,10.10.1.124,emartinez,https://cdn.jsdelivr.net/dashboard,cdn.jsdelivr.net,2026-02-18T11:44:03.528Z,5,Chrome +IT-WS-024,10.10.1.124,emartinez,https://googleapis.com/dashboard,googleapis.com,2026-02-20T14:47:38.984Z,7,Chrome +HR-WS-025,10.10.2.125,svc_web,https://acme.local/,acme.local,2026-02-19T07:24:19.984Z,15,Chrome +HR-WS-025,10.10.2.125,svc_web,https://akamai.net/inbox,akamai.net,2026-02-13T19:46:49.373Z,4,Chrome +HR-WS-025,10.10.2.125,svc_web,https://windowsupdate.com/inbox,windowsupdate.com,2026-02-12T15:43:44.300Z,9,Chrome +HR-WS-025,10.10.2.125,svc_web,https://fitgirl-repacks.site/category/popular,fitgirl-repacks.site,2026-02-16T03:06:08.460Z,17,Chrome +HR-WS-025,10.10.2.125,svc_web,https://teams.microsoft.com/,teams.microsoft.com,2026-02-15T19:22:43.052Z,20,Edge +HR-WS-025,10.10.2.125,svc_web,https://graph.microsoft.com/search,graph.microsoft.com,2026-02-11T08:00:04.057Z,1,Chrome +HR-WS-025,10.10.2.125,svc_web,https://file-01.acme.local/docs,file-01.acme.local,2026-02-11T04:02:54.196Z,20,Chrome +HR-WS-025,10.10.2.125,svc_web,https://github.com/inbox,github.com,2026-02-10T10:46:44.308Z,15,Edge +HR-WS-025,10.10.2.125,svc_web,https://file-01.acme.local/api,file-01.acme.local,2026-02-15T12:51:16.572Z,16,Chrome +HR-WS-025,10.10.2.125,svc_web,https://npmjs.com/dashboard,npmjs.com,2026-02-11T13:34:55.310Z,15,Chrome +HR-WS-025,10.10.2.125,svc_web,https://exch-01.acme.local/docs,exch-01.acme.local,2026-02-11T16:20:41.487Z,16,Chrome +HR-WS-025,10.10.2.125,svc_web,https://time.windows.com/,time.windows.com,2026-02-10T10:53:21.652Z,4,Chrome +HR-WS-025,10.10.2.125,svc_web,https://cloudflare.com/dashboard,cloudflare.com,2026-02-16T06:17:12.605Z,16,Chrome +HR-WS-025,10.10.2.125,svc_web,https://dc-02.acme.local/search,dc-02.acme.local,2026-02-16T09:09:38.757Z,7,Chrome +HR-WS-025,10.10.2.125,svc_web,https://time.windows.com/,time.windows.com,2026-02-18T17:37:28.004Z,12,Chrome +HR-WS-025,10.10.2.125,svc_web,https://cloudflare.com/,cloudflare.com,2026-02-17T18:19:27.547Z,1,Chrome +HR-WS-025,10.10.2.125,svc_web,https://open.spotify.com/watch,open.spotify.com,2026-02-13T21:17:53.564Z,20,Chrome +HR-WS-025,10.10.2.125,svc_web,https://googleapis.com/docs,googleapis.com,2026-02-12T19:41:11.433Z,1,Chrome +HR-WS-025,10.10.2.125,svc_web,https://stackoverflow.com/,stackoverflow.com,2026-02-19T04:32:10.925Z,20,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://npmjs.com/api,npmjs.com,2026-02-12T00:59:13.273Z,11,Edge +FIN-WS-026,10.10.3.126,agarcia,https://stackoverflow.com/search,stackoverflow.com,2026-02-11T13:50:10.867Z,7,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://aws.amazon.com/api,aws.amazon.com,2026-02-18T22:15:18.281Z,16,Edge +FIN-WS-026,10.10.3.126,agarcia,https://login.microsoftonline.com/dashboard,login.microsoftonline.com,2026-02-15T07:49:26.454Z,7,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://googleapis.com/dashboard,googleapis.com,2026-02-12T10:56:43.304Z,9,Edge +FIN-WS-026,10.10.3.126,agarcia,https://cloudflare.com/inbox,cloudflare.com,2026-02-18T22:19:38.275Z,12,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://acme.local/,acme.local,2026-02-19T17:49:31.153Z,14,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://acme.sharepoint.com/docs,acme.sharepoint.com,2026-02-12T21:10:29.176Z,9,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://exch-01.acme.local/api,exch-01.acme.local,2026-02-11T14:49:34.657Z,20,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://acme.sharepoint.com/inbox,acme.sharepoint.com,2026-02-20T00:11:14.393Z,16,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://outlook.office365.com/api,outlook.office365.com,2026-02-12T17:29:47.785Z,19,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://npmjs.com/dashboard,npmjs.com,2026-02-16T01:11:30.680Z,9,Edge +FIN-WS-026,10.10.3.126,agarcia,https://graph.microsoft.com/inbox,graph.microsoft.com,2026-02-14T05:58:52.260Z,20,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://dc-02.acme.local/api,dc-02.acme.local,2026-02-14T01:50:38.168Z,7,Edge +FIN-WS-026,10.10.3.126,agarcia,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-20T04:05:27.880Z,16,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://github.com/api,github.com,2026-02-18T01:17:40.073Z,9,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://www.pornhub.com/search?q=free+movies,Pornhub,2026-02-20T06:49:50.981Z,19,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://www.netflix.com/home,Netflix - Watch TV Shows,2026-02-15T16:48:02.217Z,13,Edge +FIN-WS-026,10.10.3.126,agarcia,https://www.linkedin.com/jobs/search?q=free+movies,www.linkedin.com/jobs,2026-02-10T15:31:26.569Z,4,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://aws.amazon.com/docs,aws.amazon.com,2026-02-16T05:55:47.114Z,7,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://outlook.office365.com/inbox,outlook.office365.com,2026-02-10T15:17:37.738Z,12,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://file-01.acme.local/search,file-01.acme.local,2026-02-19T13:32:40.287Z,6,Edge +FIN-WS-026,10.10.3.126,agarcia,https://akamai.net/,akamai.net,2026-02-14T13:59:55.404Z,2,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://stackoverflow.com/,stackoverflow.com,2026-02-16T09:23:36.943Z,8,Chrome +FIN-WS-026,10.10.3.126,agarcia,https://outlook.office365.com/inbox,outlook.office365.com,2026-02-14T15:16:37.189Z,11,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://teams.microsoft.com/dashboard,teams.microsoft.com,2026-02-18T20:45:33.970Z,2,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://pypi.org/docs,pypi.org,2026-02-14T00:32:43.737Z,8,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://npmjs.com/api,npmjs.com,2026-02-16T10:47:50.522Z,10,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://windowsupdate.com/docs,windowsupdate.com,2026-02-20T13:46:51.981Z,11,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://acme.local/docs,acme.local,2026-02-14T17:35:41.868Z,1,Edge +SLS-WS-027,10.10.1.127,svc_sql,https://update.microsoft.com/inbox,update.microsoft.com,2026-02-18T12:54:07.460Z,16,Edge +SLS-WS-027,10.10.1.127,svc_sql,https://graph.microsoft.com/,graph.microsoft.com,2026-02-19T05:16:56.860Z,6,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://time.windows.com/api,time.windows.com,2026-02-11T02:32:56.805Z,5,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://www.bet365.com/watch,Bet365 - Sports Betting,2026-02-19T17:05:42.554Z,17,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://aws.amazon.com/dashboard,aws.amazon.com,2026-02-14T16:54:46.113Z,2,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://acme.local/docs,acme.local,2026-02-10T16:48:04.905Z,9,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://time.windows.com/search,time.windows.com,2026-02-14T12:59:38.319Z,17,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://acme.sharepoint.com/api,acme.sharepoint.com,2026-02-18T13:46:32.541Z,13,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://update.microsoft.com/dashboard,update.microsoft.com,2026-02-13T17:03:01.185Z,13,Edge +SLS-WS-027,10.10.1.127,svc_sql,https://pypi.org/docs,pypi.org,2026-02-12T22:04:25.610Z,1,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://login.microsoftonline.com/api,login.microsoftonline.com,2026-02-15T02:04:36.067Z,13,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://update.microsoft.com/docs,update.microsoft.com,2026-02-13T07:06:22.578Z,6,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://aws.amazon.com/,aws.amazon.com,2026-02-20T13:26:42.000Z,5,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://login.microsoftonline.com/,login.microsoftonline.com,2026-02-11T11:09:09.869Z,5,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://www.facebook.com/category/popular,Facebook - Log In,2026-02-17T20:37:22.570Z,4,Chrome +SLS-WS-027,10.10.1.127,svc_sql,https://dc-02.acme.local/,dc-02.acme.local,2026-02-13T11:50:19.644Z,12,Chrome +ENG-WS-028,10.10.2.128,svc_web,https://cdn.jsdelivr.net/,cdn.jsdelivr.net,2026-02-15T11:23:52.694Z,9,Edge +ENG-WS-028,10.10.2.128,svc_web,https://pypi.org/docs,pypi.org,2026-02-18T07:22:00.194Z,15,Chrome +ENG-WS-028,10.10.2.128,svc_web,https://hulu.com/watch,hulu.com,2026-02-20T08:08:13.240Z,11,Chrome +ENG-WS-028,10.10.2.128,svc_web,https://stackoverflow.com/inbox,stackoverflow.com,2026-02-12T01:20:18.760Z,5,Chrome +ENG-WS-028,10.10.2.128,svc_web,https://github.com/search,github.com,2026-02-10T16:53:40.493Z,20,Chrome +ENG-WS-028,10.10.2.128,svc_web,https://googleapis.com/,googleapis.com,2026-02-16T07:53:13.562Z,3,Edge +ENG-WS-028,10.10.2.128,svc_web,https://cloudflare.com/docs,cloudflare.com,2026-02-14T05:22:50.037Z,4,Chrome +ENG-WS-028,10.10.2.128,svc_web,https://store.steampowered.com/search?q=free+movies,Steam Store,2026-02-18T12:33:27.030Z,12,Chrome +ENG-WS-028,10.10.2.128,svc_web,https://thepiratebay.org/search?q=free+movies,The Pirate Bay,2026-02-20T17:19:48.463Z,13,Chrome +ENG-WS-028,10.10.2.128,svc_web,https://google.com/api,google.com,2026-02-14T08:39:29.349Z,12,Chrome +ENG-WS-028,10.10.2.128,svc_web,https://cloudflare.com/api,cloudflare.com,2026-02-19T18:30:46.226Z,19,Chrome +ENG-WS-028,10.10.2.128,svc_web,https://exch-01.acme.local/api,exch-01.acme.local,2026-02-14T19:06:18.716Z,3,Edge +ENG-WS-028,10.10.2.128,svc_web,https://login.microsoftonline.com/,login.microsoftonline.com,2026-02-20T13:54:11.834Z,11,Edge +ENG-WS-028,10.10.2.128,svc_web,https://login.microsoftonline.com/api,login.microsoftonline.com,2026-02-10T14:20:19.916Z,3,Chrome +ENG-WS-028,10.10.2.128,svc_web,https://onlyfans.com/home,onlyfans.com,2026-02-16T12:23:38.182Z,9,Edge +ENG-WS-028,10.10.2.128,svc_web,https://steamcommunity.com/category/popular,Steam Store,2026-02-11T11:18:23.634Z,5,Edge +ENG-WS-028,10.10.2.128,svc_web,https://thepiratebay.org/home,The Pirate Bay,2026-02-12T23:56:25.026Z,6,Chrome +ENG-WS-028,10.10.2.128,svc_web,https://update.microsoft.com/api,update.microsoft.com,2026-02-20T09:14:12.614Z,3,Chrome +ENG-WS-028,10.10.2.128,svc_web,https://npmjs.com/search,npmjs.com,2026-02-12T12:45:05.248Z,4,Edge +ENG-WS-028,10.10.2.128,svc_web,https://update.microsoft.com/docs,update.microsoft.com,2026-02-10T17:52:08.203Z,15,Edge +ENG-WS-028,10.10.2.128,svc_web,https://graph.microsoft.com/inbox,graph.microsoft.com,2026-02-12T12:59:06.087Z,3,Chrome +ENG-WS-028,10.10.2.128,svc_web,https://googleapis.com/search,googleapis.com,2026-02-15T16:30:07.508Z,19,Chrome +ENG-WS-028,10.10.2.128,svc_web,https://akamai.net/api,akamai.net,2026-02-19T18:55:44.069Z,6,Chrome +LEG-WS-029,10.10.3.129,hbrown,https://file-01.acme.local/api,file-01.acme.local,2026-02-16T22:51:05.065Z,20,Chrome +LEG-WS-029,10.10.3.129,hbrown,https://open.spotify.com/,open.spotify.com,2026-02-20T10:21:23.347Z,8,Chrome +LEG-WS-029,10.10.3.129,hbrown,https://dc-02.acme.local/docs,dc-02.acme.local,2026-02-16T00:54:03.142Z,5,Chrome +LEG-WS-029,10.10.3.129,hbrown,https://google.com/dashboard,google.com,2026-02-13T09:32:31.320Z,13,Chrome +LEG-WS-029,10.10.3.129,hbrown,https://dc-01.acme.local/inbox,dc-01.acme.local,2026-02-11T13:42:32.587Z,10,Chrome +LEG-WS-029,10.10.3.129,hbrown,https://exch-01.acme.local/inbox,exch-01.acme.local,2026-02-18T18:03:44.478Z,2,Chrome +LEG-WS-029,10.10.3.129,hbrown,https://acme.local/search,acme.local,2026-02-13T18:59:22.247Z,16,Chrome +LEG-WS-029,10.10.3.129,hbrown,https://fitgirl-repacks.site/,fitgirl-repacks.site,2026-02-15T20:17:42.960Z,1,Chrome +LEG-WS-029,10.10.3.129,hbrown,https://file-01.acme.local/dashboard,file-01.acme.local,2026-02-13T08:04:16.886Z,9,Chrome +LEG-WS-029,10.10.3.129,hbrown,https://1337x.to/category/popular,1337x.to,2026-02-17T05:04:53.287Z,6,Chrome +LEG-WS-029,10.10.3.129,hbrown,https://pypi.org/,pypi.org,2026-02-19T03:34:51.649Z,9,Chrome +LEG-WS-029,10.10.3.129,hbrown,https://npmjs.com/,npmjs.com,2026-02-16T16:03:49.147Z,12,Chrome +LEG-WS-029,10.10.3.129,hbrown,https://file-01.acme.local/,file-01.acme.local,2026-02-14T00:51:35.408Z,17,Edge +LEG-WS-029,10.10.3.129,hbrown,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-15T02:26:44.426Z,12,Chrome +LEG-WS-029,10.10.3.129,hbrown,https://akamai.net/,akamai.net,2026-02-11T15:07:11.390Z,9,Edge +LEG-WS-029,10.10.3.129,hbrown,https://googleapis.com/api,googleapis.com,2026-02-10T13:08:31.763Z,7,Chrome +LEG-WS-029,10.10.3.129,hbrown,https://github.com/dashboard,github.com,2026-02-12T16:13:47.442Z,2,Edge +LEG-WS-029,10.10.3.129,hbrown,https://graph.microsoft.com/,graph.microsoft.com,2026-02-13T03:12:23.161Z,10,Chrome +LEG-WS-029,10.10.3.129,hbrown,https://aws.amazon.com/api,aws.amazon.com,2026-02-14T09:14:21.998Z,13,Chrome +LEG-WS-029,10.10.3.129,hbrown,https://dc-02.acme.local/inbox,dc-02.acme.local,2026-02-16T08:54:09.891Z,1,Chrome +MKT-WS-030,10.10.1.130,fthompson,https://acme.sharepoint.com/api,acme.sharepoint.com,2026-02-16T14:51:23.838Z,14,Chrome +MKT-WS-030,10.10.1.130,fthompson,https://exch-01.acme.local/inbox,exch-01.acme.local,2026-02-13T16:48:35.651Z,15,Edge +MKT-WS-030,10.10.1.130,fthompson,https://googleapis.com/,googleapis.com,2026-02-13T01:14:11.420Z,11,Chrome +MKT-WS-030,10.10.1.130,fthompson,https://windowsupdate.com/docs,windowsupdate.com,2026-02-12T08:14:09.685Z,20,Edge +MKT-WS-030,10.10.1.130,fthompson,https://steamcommunity.com/category/popular,Steam Store,2026-02-11T02:36:08.219Z,2,Chrome +MKT-WS-030,10.10.1.130,fthompson,https://pokerstars.com/home,PokerStars - Online Poker,2026-02-15T23:40:34.328Z,16,Edge +MKT-WS-030,10.10.1.130,fthompson,https://google.com/,google.com,2026-02-19T14:02:51.249Z,15,Chrome +MKT-WS-030,10.10.1.130,fthompson,https://google.com/dashboard,google.com,2026-02-18T12:04:29.528Z,17,Chrome +MKT-WS-030,10.10.1.130,fthompson,https://time.windows.com/search,time.windows.com,2026-02-16T01:59:43.416Z,15,Chrome +MKT-WS-030,10.10.1.130,fthompson,https://stackoverflow.com/search,stackoverflow.com,2026-02-20T03:21:43.151Z,17,Chrome +MKT-WS-030,10.10.1.130,fthompson,https://acme.sharepoint.com/,acme.sharepoint.com,2026-02-14T20:23:07.478Z,2,Edge +MKT-WS-030,10.10.1.130,fthompson,https://google.com/,google.com,2026-02-17T05:57:29.768Z,16,Edge +MKT-WS-030,10.10.1.130,fthompson,https://cloudflare.com/inbox,cloudflare.com,2026-02-10T19:08:50.635Z,9,Chrome +MKT-WS-030,10.10.1.130,fthompson,https://acme.sharepoint.com/dashboard,acme.sharepoint.com,2026-02-12T17:33:09.114Z,13,Chrome +MKT-WS-030,10.10.1.130,fthompson,https://acme.local/dashboard,acme.local,2026-02-19T10:55:31.266Z,8,Chrome +MKT-WS-030,10.10.1.130,fthompson,https://pypi.org/docs,pypi.org,2026-02-20T12:54:10.272Z,17,Chrome +MKT-WS-030,10.10.1.130,fthompson,https://1337x.to/home,1337x.to,2026-02-17T06:32:17.450Z,12,Chrome +MKT-WS-030,10.10.1.130,fthompson,https://update.microsoft.com/,update.microsoft.com,2026-02-10T16:49:06.687Z,6,Edge +MKT-WS-030,10.10.1.130,fthompson,https://www.bet365.com/,Bet365 - Sports Betting,2026-02-19T20:12:39.224Z,20,Edge +MKT-WS-030,10.10.1.130,fthompson,https://google.com/search,google.com,2026-02-10T23:08:07.050Z,4,Chrome +MKT-WS-030,10.10.1.130,fthompson,https://exch-01.acme.local/api,exch-01.acme.local,2026-02-17T12:24:34.815Z,12,Chrome +MKT-WS-030,10.10.1.130,fthompson,https://store.steampowered.com/category/popular,Steam Store,2026-02-15T23:58:18.612Z,15,Chrome +MKT-WS-030,10.10.1.130,fthompson,https://teams.microsoft.com/api,teams.microsoft.com,2026-02-11T23:48:16.409Z,14,Edge +EXEC-WS-031,10.10.2.131,dlee,https://pypi.org/search,pypi.org,2026-02-18T06:32:43.534Z,1,Chrome +EXEC-WS-031,10.10.2.131,dlee,https://time.windows.com/,time.windows.com,2026-02-11T05:42:19.816Z,17,Chrome +EXEC-WS-031,10.10.2.131,dlee,https://discord.gg/category/popular,discord.gg,2026-02-19T08:44:35.150Z,9,Chrome +EXEC-WS-031,10.10.2.131,dlee,https://file-01.acme.local/inbox,file-01.acme.local,2026-02-16T11:15:24.325Z,9,Chrome +EXEC-WS-031,10.10.2.131,dlee,https://dc-01.acme.local/docs,dc-01.acme.local,2026-02-14T04:58:12.559Z,16,Chrome +EXEC-WS-031,10.10.2.131,dlee,https://teams.microsoft.com/search,teams.microsoft.com,2026-02-15T10:05:01.443Z,19,Chrome +EXEC-WS-031,10.10.2.131,dlee,https://hulu.com/play,hulu.com,2026-02-12T03:43:38.437Z,12,Chrome +EXEC-WS-031,10.10.2.131,dlee,https://acme.local/docs,acme.local,2026-02-15T12:09:53.063Z,9,Edge +EXEC-WS-031,10.10.2.131,dlee,https://google.com/dashboard,google.com,2026-02-16T15:58:16.691Z,20,Chrome +EXEC-WS-031,10.10.2.131,dlee,https://www.bet365.com/,Bet365 - Sports Betting,2026-02-12T02:07:26.976Z,6,Chrome +EXEC-WS-031,10.10.2.131,dlee,https://teams.microsoft.com/docs,teams.microsoft.com,2026-02-15T00:18:38.925Z,13,Chrome +EXEC-WS-031,10.10.2.131,dlee,https://github.com/docs,github.com,2026-02-14T05:18:34.000Z,19,Chrome +EXEC-WS-031,10.10.2.131,dlee,https://pypi.org/dashboard,pypi.org,2026-02-15T06:05:10.979Z,10,Chrome +EXEC-WS-031,10.10.2.131,dlee,https://www.shein.com/search?q=free+movies,www.shein.com,2026-02-13T13:39:37.049Z,10,Edge +EXEC-WS-031,10.10.2.131,dlee,https://www.shein.com/home,www.shein.com,2026-02-20T16:57:14.351Z,16,Chrome +EXEC-WS-031,10.10.2.131,dlee,https://aws.amazon.com/docs,aws.amazon.com,2026-02-11T03:26:49.571Z,20,Chrome +EXEC-WS-031,10.10.2.131,dlee,https://www.shein.com/watch,www.shein.com,2026-02-20T13:39:07.344Z,16,Chrome +EXEC-WS-031,10.10.2.131,dlee,https://pypi.org/,pypi.org,2026-02-14T21:10:00.986Z,14,Chrome +EXEC-WS-031,10.10.2.131,dlee,https://akamai.net/dashboard,akamai.net,2026-02-16T21:07:39.218Z,19,Chrome +IT-WS-032,10.10.3.132,admin,https://acme.local/inbox,acme.local,2026-02-15T20:46:38.639Z,5,Chrome +IT-WS-032,10.10.3.132,admin,https://dc-02.acme.local/,dc-02.acme.local,2026-02-13T12:37:07.809Z,12,Chrome +IT-WS-032,10.10.3.132,admin,https://acme.local/docs,acme.local,2026-02-12T08:55:37.983Z,2,Chrome +IT-WS-032,10.10.3.132,admin,https://www.tiktok.com/home,TikTok - Make Your Day,2026-02-17T16:05:26.859Z,6,Chrome +IT-WS-032,10.10.3.132,admin,https://pypi.org/,pypi.org,2026-02-13T09:02:31.464Z,15,Edge +IT-WS-032,10.10.3.132,admin,https://dc-02.acme.local/search,dc-02.acme.local,2026-02-19T11:44:34.883Z,10,Chrome +IT-WS-032,10.10.3.132,admin,https://dc-01.acme.local/dashboard,dc-01.acme.local,2026-02-14T20:22:58.543Z,11,Chrome +IT-WS-032,10.10.3.132,admin,https://teams.microsoft.com/,teams.microsoft.com,2026-02-11T01:35:04.819Z,12,Edge +IT-WS-032,10.10.3.132,admin,https://teams.microsoft.com/inbox,teams.microsoft.com,2026-02-15T20:47:05.403Z,12,Chrome +IT-WS-032,10.10.3.132,admin,https://google.com/,google.com,2026-02-12T00:59:14.085Z,14,Chrome +IT-WS-032,10.10.3.132,admin,https://npmjs.com/inbox,npmjs.com,2026-02-16T02:09:52.782Z,6,Edge +IT-WS-032,10.10.3.132,admin,https://fitgirl-repacks.site/,fitgirl-repacks.site,2026-02-11T01:52:32.499Z,19,Chrome +IT-WS-032,10.10.3.132,admin,https://windowsupdate.com/api,windowsupdate.com,2026-02-17T20:01:17.845Z,19,Chrome +IT-WS-032,10.10.3.132,admin,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-11T03:59:30.812Z,13,Chrome +HR-WS-033,10.10.1.133,jsmith,https://aws.amazon.com/docs,aws.amazon.com,2026-02-18T23:39:39.685Z,9,Chrome +HR-WS-033,10.10.1.133,jsmith,https://www.facebook.com/home,Facebook - Log In,2026-02-10T22:09:44.538Z,4,Chrome +HR-WS-033,10.10.1.133,jsmith,https://discord.gg/home,discord.gg,2026-02-14T21:44:04.382Z,15,Chrome +HR-WS-033,10.10.1.133,jsmith,https://akamai.net/api,akamai.net,2026-02-20T15:55:38.361Z,12,Chrome +HR-WS-033,10.10.1.133,jsmith,https://cdn.jsdelivr.net/docs,cdn.jsdelivr.net,2026-02-18T05:25:07.577Z,7,Chrome +HR-WS-033,10.10.1.133,jsmith,https://1337x.to/category/popular,1337x.to,2026-02-20T14:02:45.632Z,17,Chrome +HR-WS-033,10.10.1.133,jsmith,https://cdn.jsdelivr.net/dashboard,cdn.jsdelivr.net,2026-02-11T06:35:31.738Z,12,Chrome +HR-WS-033,10.10.1.133,jsmith,https://exch-01.acme.local/api,exch-01.acme.local,2026-02-16T22:59:48.571Z,3,Chrome +HR-WS-033,10.10.1.133,jsmith,https://www.reddit.com/play,www.reddit.com,2026-02-12T22:38:17.758Z,3,Edge +HR-WS-033,10.10.1.133,jsmith,https://graph.microsoft.com/search,graph.microsoft.com,2026-02-19T09:03:48.545Z,10,Chrome +HR-WS-033,10.10.1.133,jsmith,https://windowsupdate.com/docs,windowsupdate.com,2026-02-18T19:54:31.252Z,5,Chrome +HR-WS-033,10.10.1.133,jsmith,https://graph.microsoft.com/dashboard,graph.microsoft.com,2026-02-14T13:21:43.745Z,11,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://graph.microsoft.com/dashboard,graph.microsoft.com,2026-02-17T05:27:18.082Z,11,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://login.microsoftonline.com/dashboard,login.microsoftonline.com,2026-02-13T17:17:16.277Z,8,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://cloudflare.com/api,cloudflare.com,2026-02-18T08:19:20.786Z,1,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://github.com/inbox,github.com,2026-02-11T10:45:10.150Z,20,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://cloudflare.com/search,cloudflare.com,2026-02-16T11:45:32.852Z,19,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://googleapis.com/inbox,googleapis.com,2026-02-11T03:56:23.129Z,4,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://pypi.org/,pypi.org,2026-02-20T12:07:07.284Z,17,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://teams.microsoft.com/api,teams.microsoft.com,2026-02-14T23:54:53.421Z,9,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://pypi.org/,pypi.org,2026-02-14T17:54:05.721Z,11,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://akamai.net/dashboard,akamai.net,2026-02-15T19:29:26.043Z,14,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://google.com/dashboard,google.com,2026-02-13T18:27:52.218Z,14,Edge +FIN-WS-034,10.10.2.134,fthompson,https://www.reddit.com/watch,www.reddit.com,2026-02-11T20:29:18.575Z,17,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://dc-02.acme.local/,dc-02.acme.local,2026-02-11T00:29:48.767Z,11,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://teams.microsoft.com/inbox,teams.microsoft.com,2026-02-14T03:55:30.317Z,1,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://googleapis.com/dashboard,googleapis.com,2026-02-13T20:58:57.964Z,4,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://www.amazon.com/play,Amazon.com - Shopping,2026-02-20T14:02:37.214Z,18,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://npmjs.com/,npmjs.com,2026-02-16T03:52:26.405Z,11,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://cloudflare.com/search,cloudflare.com,2026-02-19T08:05:40.556Z,15,Chrome +FIN-WS-034,10.10.2.134,fthompson,https://graph.microsoft.com/inbox,graph.microsoft.com,2026-02-20T06:01:44.480Z,19,Chrome +SLS-WS-035,10.10.3.135,dlee,https://store.steampowered.com/home,Steam Store,2026-02-18T06:11:23.389Z,10,Edge +SLS-WS-035,10.10.3.135,dlee,https://google.com/docs,google.com,2026-02-16T17:15:28.635Z,13,Chrome +SLS-WS-035,10.10.3.135,dlee,https://acme.local/inbox,acme.local,2026-02-16T22:33:48.625Z,12,Chrome +SLS-WS-035,10.10.3.135,dlee,https://store.steampowered.com/play,Steam Store,2026-02-16T00:45:11.847Z,10,Chrome +SLS-WS-035,10.10.3.135,dlee,https://steamcommunity.com/home,Steam Store,2026-02-17T23:05:03.527Z,2,Edge +SLS-WS-035,10.10.3.135,dlee,https://cdn.jsdelivr.net/dashboard,cdn.jsdelivr.net,2026-02-16T17:32:24.039Z,7,Chrome +SLS-WS-035,10.10.3.135,dlee,https://graph.microsoft.com/api,graph.microsoft.com,2026-02-17T22:37:07.899Z,13,Chrome +SLS-WS-035,10.10.3.135,dlee,https://googleapis.com/search,googleapis.com,2026-02-19T10:36:03.415Z,6,Chrome +SLS-WS-035,10.10.3.135,dlee,https://www.indeed.com/home,Indeed - Job Search,2026-02-11T21:39:19.187Z,19,Chrome +SLS-WS-035,10.10.3.135,dlee,https://stackoverflow.com/docs,stackoverflow.com,2026-02-11T13:41:40.351Z,1,Chrome +ENG-WS-036,10.10.1.136,cjohnson,https://update.microsoft.com/search,update.microsoft.com,2026-02-18T16:28:59.692Z,2,Chrome +ENG-WS-036,10.10.1.136,cjohnson,https://exch-01.acme.local/api,exch-01.acme.local,2026-02-19T12:08:30.712Z,1,Chrome +ENG-WS-036,10.10.1.136,cjohnson,https://pypi.org/docs,pypi.org,2026-02-20T08:48:42.287Z,8,Chrome +ENG-WS-036,10.10.1.136,cjohnson,https://acme.local/search,acme.local,2026-02-18T09:49:14.709Z,12,Chrome +ENG-WS-036,10.10.1.136,cjohnson,https://time.windows.com/dashboard,time.windows.com,2026-02-12T10:56:11.626Z,13,Edge +ENG-WS-036,10.10.1.136,cjohnson,https://npmjs.com/,npmjs.com,2026-02-19T05:49:41.350Z,2,Chrome +ENG-WS-036,10.10.1.136,cjohnson,https://time.windows.com/search,time.windows.com,2026-02-15T10:01:42.318Z,19,Chrome +ENG-WS-036,10.10.1.136,cjohnson,https://www.shein.com/search?q=free+movies,www.shein.com,2026-02-18T07:12:47.479Z,19,Chrome +ENG-WS-036,10.10.1.136,cjohnson,https://acme.sharepoint.com/search,acme.sharepoint.com,2026-02-17T13:26:43.356Z,17,Chrome +ENG-WS-036,10.10.1.136,cjohnson,https://xvideos.com/home,xvideos.com,2026-02-10T08:23:02.009Z,17,Edge +ENG-WS-036,10.10.1.136,cjohnson,https://googleapis.com/search,googleapis.com,2026-02-16T04:37:32.024Z,16,Chrome +ENG-WS-036,10.10.1.136,cjohnson,https://cdn.jsdelivr.net/search,cdn.jsdelivr.net,2026-02-10T17:45:18.832Z,3,Chrome +ENG-WS-036,10.10.1.136,cjohnson,https://dc-02.acme.local/inbox,dc-02.acme.local,2026-02-12T03:13:20.061Z,9,Chrome +ENG-WS-036,10.10.1.136,cjohnson,https://outlook.office365.com/docs,outlook.office365.com,2026-02-16T19:09:30.916Z,7,Edge +ENG-WS-036,10.10.1.136,cjohnson,https://www.netflix.com/play,Netflix - Watch TV Shows,2026-02-15T05:56:15.874Z,9,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://file-01.acme.local/inbox,file-01.acme.local,2026-02-17T23:23:24.923Z,5,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://www.indeed.com/search?q=free+movies,Indeed - Job Search,2026-02-12T13:48:38.785Z,17,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://outlook.office365.com/docs,outlook.office365.com,2026-02-18T10:05:42.513Z,7,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://graph.microsoft.com/api,graph.microsoft.com,2026-02-18T21:44:06.197Z,18,Edge +LEG-WS-037,10.10.2.137,jsmith,https://file-01.acme.local/inbox,file-01.acme.local,2026-02-20T15:41:10.589Z,12,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://google.com/docs,google.com,2026-02-19T23:06:51.396Z,12,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://google.com/,google.com,2026-02-16T12:43:42.093Z,16,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://akamai.net/inbox,akamai.net,2026-02-18T13:23:55.576Z,14,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://update.microsoft.com/docs,update.microsoft.com,2026-02-12T07:29:22.313Z,18,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://dc-01.acme.local/docs,dc-01.acme.local,2026-02-18T20:09:58.121Z,1,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://cdn.jsdelivr.net/,cdn.jsdelivr.net,2026-02-20T00:54:59.446Z,16,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://fitgirl-repacks.site/search?q=free+movies,fitgirl-repacks.site,2026-02-16T00:12:43.556Z,10,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://stackoverflow.com/search,stackoverflow.com,2026-02-18T14:24:41.119Z,5,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://teams.microsoft.com/,teams.microsoft.com,2026-02-14T20:14:25.127Z,2,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://aws.amazon.com/api,aws.amazon.com,2026-02-17T15:57:49.928Z,4,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://onlyfans.com/,onlyfans.com,2026-02-15T02:04:31.717Z,6,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://www.pornhub.com/search?q=free+movies,Pornhub,2026-02-17T02:19:41.031Z,6,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://teams.microsoft.com/search,teams.microsoft.com,2026-02-16T04:15:03.767Z,16,Edge +LEG-WS-037,10.10.2.137,jsmith,https://windowsupdate.com/,windowsupdate.com,2026-02-14T06:55:11.766Z,3,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://pokerstars.com/search?q=free+movies,PokerStars - Online Poker,2026-02-11T16:41:49.964Z,9,Edge +LEG-WS-037,10.10.2.137,jsmith,https://exch-01.acme.local/inbox,exch-01.acme.local,2026-02-19T17:47:08.327Z,10,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://stackoverflow.com/dashboard,stackoverflow.com,2026-02-17T15:29:33.636Z,10,Edge +LEG-WS-037,10.10.2.137,jsmith,https://github.com/inbox,github.com,2026-02-11T14:51:05.351Z,16,Edge +LEG-WS-037,10.10.2.137,jsmith,https://cdn.jsdelivr.net/docs,cdn.jsdelivr.net,2026-02-18T16:56:40.290Z,7,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://google.com/dashboard,google.com,2026-02-15T10:42:11.862Z,14,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://github.com/docs,github.com,2026-02-10T12:19:58.944Z,15,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-11T02:19:30.222Z,20,Chrome +LEG-WS-037,10.10.2.137,jsmith,https://akamai.net/search,akamai.net,2026-02-12T09:59:25.833Z,5,Chrome +MKT-WS-038,10.10.3.138,dlee,https://graph.microsoft.com/api,graph.microsoft.com,2026-02-10T14:11:02.928Z,18,Chrome +MKT-WS-038,10.10.3.138,dlee,https://stackoverflow.com/inbox,stackoverflow.com,2026-02-14T07:06:14.524Z,10,Edge +MKT-WS-038,10.10.3.138,dlee,https://login.microsoftonline.com/search,login.microsoftonline.com,2026-02-10T22:19:34.756Z,17,Edge +MKT-WS-038,10.10.3.138,dlee,https://dc-02.acme.local/docs,dc-02.acme.local,2026-02-15T03:34:25.067Z,8,Chrome +MKT-WS-038,10.10.3.138,dlee,https://www.facebook.com/,Facebook - Log In,2026-02-14T16:01:17.427Z,10,Edge +MKT-WS-038,10.10.3.138,dlee,https://steamcommunity.com/watch,Steam Store,2026-02-17T13:48:20.867Z,4,Chrome +MKT-WS-038,10.10.3.138,dlee,https://dc-02.acme.local/,dc-02.acme.local,2026-02-18T14:25:05.801Z,9,Chrome +MKT-WS-038,10.10.3.138,dlee,https://dc-01.acme.local/,dc-01.acme.local,2026-02-13T02:31:23.038Z,9,Chrome +MKT-WS-038,10.10.3.138,dlee,https://stackoverflow.com/search,stackoverflow.com,2026-02-12T14:33:05.896Z,16,Chrome +MKT-WS-038,10.10.3.138,dlee,https://outlook.office365.com/,outlook.office365.com,2026-02-11T18:51:53.472Z,2,Chrome +MKT-WS-038,10.10.3.138,dlee,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-14T01:10:21.886Z,19,Chrome +MKT-WS-038,10.10.3.138,dlee,https://cloudflare.com/search,cloudflare.com,2026-02-13T14:51:40.685Z,13,Chrome +MKT-WS-038,10.10.3.138,dlee,https://dc-01.acme.local/search,dc-01.acme.local,2026-02-17T04:58:48.243Z,16,Chrome +MKT-WS-038,10.10.3.138,dlee,https://cdn.jsdelivr.net/api,cdn.jsdelivr.net,2026-02-20T09:03:13.761Z,3,Edge +EXEC-WS-039,10.10.1.139,dlee,https://github.com/dashboard,github.com,2026-02-18T07:06:06.951Z,9,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://dc-02.acme.local/docs,dc-02.acme.local,2026-02-12T00:21:06.087Z,14,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://acme.sharepoint.com/inbox,acme.sharepoint.com,2026-02-11T17:56:58.621Z,10,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://update.microsoft.com/,update.microsoft.com,2026-02-13T12:32:27.834Z,4,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://www.indeed.com/search?q=free+movies,Indeed - Job Search,2026-02-12T07:54:44.086Z,20,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://file-01.acme.local/dashboard,file-01.acme.local,2026-02-11T09:03:37.754Z,20,Edge +EXEC-WS-039,10.10.1.139,dlee,https://teams.microsoft.com/api,teams.microsoft.com,2026-02-14T12:04:50.479Z,2,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://teams.microsoft.com/dashboard,teams.microsoft.com,2026-02-19T18:40:01.053Z,16,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://cloudflare.com/search,cloudflare.com,2026-02-16T08:09:51.564Z,2,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://google.com/docs,google.com,2026-02-18T07:24:06.515Z,3,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://pypi.org/api,pypi.org,2026-02-10T16:58:14.071Z,19,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://www.netflix.com/watch,Netflix - Watch TV Shows,2026-02-13T04:05:47.439Z,12,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://stackoverflow.com/api,stackoverflow.com,2026-02-10T17:20:29.912Z,20,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://update.microsoft.com/inbox,update.microsoft.com,2026-02-18T20:30:10.879Z,18,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-20T15:38:20.111Z,4,Edge +EXEC-WS-039,10.10.1.139,dlee,https://time.windows.com/,time.windows.com,2026-02-14T01:58:08.918Z,19,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://exch-01.acme.local/dashboard,exch-01.acme.local,2026-02-18T09:50:11.860Z,9,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://cdn.jsdelivr.net/,cdn.jsdelivr.net,2026-02-14T20:20:37.543Z,11,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://acme.sharepoint.com/search,acme.sharepoint.com,2026-02-18T18:31:48.155Z,4,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://www.facebook.com/,Facebook - Log In,2026-02-12T11:09:22.503Z,18,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://update.microsoft.com/inbox,update.microsoft.com,2026-02-14T00:47:01.857Z,18,Edge +EXEC-WS-039,10.10.1.139,dlee,https://dc-02.acme.local/api,dc-02.acme.local,2026-02-20T11:50:06.060Z,20,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://update.microsoft.com/,update.microsoft.com,2026-02-17T03:34:52.657Z,11,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://google.com/,google.com,2026-02-19T10:40:33.636Z,4,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://stackoverflow.com/dashboard,stackoverflow.com,2026-02-15T12:39:43.544Z,6,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://www.facebook.com/home,Facebook - Log In,2026-02-15T07:33:11.999Z,6,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://google.com/api,google.com,2026-02-13T23:31:25.879Z,7,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://googleapis.com/dashboard,googleapis.com,2026-02-14T11:19:05.146Z,15,Edge +EXEC-WS-039,10.10.1.139,dlee,https://www.amazon.com/,Amazon.com - Shopping,2026-02-11T21:57:15.818Z,7,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://windowsupdate.com/api,windowsupdate.com,2026-02-12T09:28:06.161Z,13,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://update.microsoft.com/dashboard,update.microsoft.com,2026-02-11T11:48:52.870Z,7,Chrome +EXEC-WS-039,10.10.1.139,dlee,https://teams.microsoft.com/api,teams.microsoft.com,2026-02-12T16:44:52.733Z,9,Chrome +IT-WS-040,10.10.2.140,jsmith,https://teams.microsoft.com/api,teams.microsoft.com,2026-02-14T16:46:21.557Z,4,Edge +IT-WS-040,10.10.2.140,jsmith,https://www.ebay.com/search?q=free+movies,www.ebay.com,2026-02-13T04:48:21.356Z,18,Chrome +IT-WS-040,10.10.2.140,jsmith,https://cdn.jsdelivr.net/api,cdn.jsdelivr.net,2026-02-12T14:57:58.291Z,7,Chrome +IT-WS-040,10.10.2.140,jsmith,https://login.microsoftonline.com/search,login.microsoftonline.com,2026-02-13T10:03:26.456Z,4,Edge +IT-WS-040,10.10.2.140,jsmith,https://acme.sharepoint.com/api,acme.sharepoint.com,2026-02-12T18:53:28.943Z,8,Chrome +IT-WS-040,10.10.2.140,jsmith,https://dc-01.acme.local/,dc-01.acme.local,2026-02-19T09:45:24.732Z,12,Chrome +IT-WS-040,10.10.2.140,jsmith,https://akamai.net/,akamai.net,2026-02-15T00:05:22.720Z,12,Chrome +IT-WS-040,10.10.2.140,jsmith,https://update.microsoft.com/api,update.microsoft.com,2026-02-20T07:39:01.430Z,9,Edge +IT-WS-040,10.10.2.140,jsmith,https://google.com/inbox,google.com,2026-02-20T10:38:29.618Z,13,Chrome +IT-WS-040,10.10.2.140,jsmith,https://www.amazon.com/watch,Amazon.com - Shopping,2026-02-18T07:49:14.944Z,16,Chrome +IT-WS-040,10.10.2.140,jsmith,https://login.microsoftonline.com/search,login.microsoftonline.com,2026-02-18T19:00:07.182Z,2,Chrome +IT-WS-040,10.10.2.140,jsmith,https://update.microsoft.com/dashboard,update.microsoft.com,2026-02-12T22:31:53.933Z,17,Chrome +IT-WS-040,10.10.2.140,jsmith,https://acme.local/search,acme.local,2026-02-14T18:31:11.180Z,15,Edge +IT-WS-040,10.10.2.140,jsmith,https://www.netflix.com/search?q=free+movies,Netflix - Watch TV Shows,2026-02-18T01:05:59.460Z,6,Chrome +IT-WS-040,10.10.2.140,jsmith,https://google.com/dashboard,google.com,2026-02-15T02:43:17.695Z,10,Chrome +IT-WS-040,10.10.2.140,jsmith,https://www.amazon.com/,Amazon.com - Shopping,2026-02-12T05:23:44.709Z,10,Edge +IT-WS-040,10.10.2.140,jsmith,https://exch-01.acme.local/dashboard,exch-01.acme.local,2026-02-18T22:14:10.983Z,7,Edge +IT-WS-040,10.10.2.140,jsmith,https://windowsupdate.com/search,windowsupdate.com,2026-02-20T14:24:41.007Z,17,Edge +IT-WS-040,10.10.2.140,jsmith,https://google.com/dashboard,google.com,2026-02-11T14:06:01.953Z,12,Chrome +IT-WS-040,10.10.2.140,jsmith,https://cloudflare.com/search,cloudflare.com,2026-02-10T11:26:04.985Z,2,Edge +IT-WS-040,10.10.2.140,jsmith,https://cdn.jsdelivr.net/api,cdn.jsdelivr.net,2026-02-13T12:15:26.154Z,15,Chrome +IT-WS-040,10.10.2.140,jsmith,https://google.com/,google.com,2026-02-12T11:24:32.249Z,11,Chrome +IT-WS-040,10.10.2.140,jsmith,https://windowsupdate.com/dashboard,windowsupdate.com,2026-02-19T03:39:47.294Z,5,Chrome +IT-WS-040,10.10.2.140,jsmith,https://dc-02.acme.local/docs,dc-02.acme.local,2026-02-12T17:56:49.884Z,11,Chrome +IT-WS-040,10.10.2.140,jsmith,https://npmjs.com/api,npmjs.com,2026-02-12T13:49:10.540Z,19,Edge +IT-WS-040,10.10.2.140,jsmith,https://acme.local/inbox,acme.local,2026-02-18T23:11:55.901Z,20,Chrome +IT-WS-040,10.10.2.140,jsmith,https://www.ebay.com/home,www.ebay.com,2026-02-19T10:02:37.382Z,7,Edge +IT-WS-040,10.10.2.140,jsmith,https://graph.microsoft.com/dashboard,graph.microsoft.com,2026-02-11T18:19:46.297Z,10,Chrome +IT-WS-040,10.10.2.140,jsmith,https://npmjs.com/inbox,npmjs.com,2026-02-17T04:18:37.353Z,9,Chrome +IT-WS-040,10.10.2.140,jsmith,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-17T19:09:21.603Z,1,Edge +IT-WS-040,10.10.2.140,jsmith,https://aws.amazon.com/inbox,aws.amazon.com,2026-02-19T01:43:11.927Z,18,Chrome +IT-WS-040,10.10.2.140,jsmith,https://github.com/api,github.com,2026-02-16T09:37:27.509Z,16,Chrome +IT-WS-040,10.10.2.140,jsmith,https://graph.microsoft.com/inbox,graph.microsoft.com,2026-02-12T04:08:44.147Z,14,Chrome +IT-WS-040,10.10.2.140,jsmith,https://dc-02.acme.local/dashboard,dc-02.acme.local,2026-02-19T00:33:09.859Z,5,Chrome +HR-WS-041,10.10.3.141,gwhite,https://exch-01.acme.local/dashboard,exch-01.acme.local,2026-02-11T04:09:52.591Z,4,Chrome +HR-WS-041,10.10.3.141,gwhite,https://www.shein.com/home,www.shein.com,2026-02-14T11:48:57.246Z,10,Chrome +HR-WS-041,10.10.3.141,gwhite,https://googleapis.com/,googleapis.com,2026-02-11T13:50:27.021Z,17,Chrome +HR-WS-041,10.10.3.141,gwhite,https://outlook.office365.com/inbox,outlook.office365.com,2026-02-18T09:21:12.816Z,9,Chrome +HR-WS-041,10.10.3.141,gwhite,https://login.microsoftonline.com/dashboard,login.microsoftonline.com,2026-02-12T04:12:40.123Z,7,Chrome +HR-WS-041,10.10.3.141,gwhite,https://github.com/,github.com,2026-02-15T05:56:42.703Z,5,Chrome +HR-WS-041,10.10.3.141,gwhite,https://google.com/docs,google.com,2026-02-17T10:40:31.346Z,17,Chrome +HR-WS-041,10.10.3.141,gwhite,https://windowsupdate.com/search,windowsupdate.com,2026-02-20T11:13:15.157Z,17,Chrome +HR-WS-041,10.10.3.141,gwhite,https://file-01.acme.local/dashboard,file-01.acme.local,2026-02-20T01:47:17.506Z,6,Chrome +HR-WS-041,10.10.3.141,gwhite,https://store.steampowered.com/category/popular,Steam Store,2026-02-18T22:46:48.895Z,16,Chrome +HR-WS-041,10.10.3.141,gwhite,https://aws.amazon.com/api,aws.amazon.com,2026-02-18T18:41:57.355Z,12,Chrome +HR-WS-041,10.10.3.141,gwhite,https://acme.local/search,acme.local,2026-02-13T21:28:24.715Z,17,Edge +HR-WS-041,10.10.3.141,gwhite,https://pypi.org/,pypi.org,2026-02-13T11:45:56.050Z,2,Edge +FIN-WS-042,10.10.1.142,cjohnson,https://aws.amazon.com/inbox,aws.amazon.com,2026-02-12T00:46:15.354Z,1,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://windowsupdate.com/,windowsupdate.com,2026-02-17T23:10:51.113Z,5,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://acme.local/api,acme.local,2026-02-15T16:35:43.992Z,8,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://cloudflare.com/inbox,cloudflare.com,2026-02-13T18:45:44.465Z,20,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://time.windows.com/api,time.windows.com,2026-02-14T05:34:53.694Z,9,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://npmjs.com/dashboard,npmjs.com,2026-02-15T04:28:30.527Z,8,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://googleapis.com/inbox,googleapis.com,2026-02-16T20:08:32.290Z,17,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://exch-01.acme.local/docs,exch-01.acme.local,2026-02-19T04:15:38.208Z,20,Edge +FIN-WS-042,10.10.1.142,cjohnson,https://pypi.org/,pypi.org,2026-02-12T05:30:38.267Z,19,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://file-01.acme.local/api,file-01.acme.local,2026-02-19T02:30:46.853Z,5,Edge +FIN-WS-042,10.10.1.142,cjohnson,https://file-01.acme.local/api,file-01.acme.local,2026-02-17T22:10:32.277Z,17,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://googleapis.com/,googleapis.com,2026-02-12T06:27:12.859Z,17,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://acme.local/inbox,acme.local,2026-02-14T03:30:56.280Z,8,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://www.linkedin.com/jobs/play,www.linkedin.com/jobs,2026-02-18T02:35:35.820Z,5,Edge +FIN-WS-042,10.10.1.142,cjohnson,https://www.linkedin.com/jobs/,www.linkedin.com/jobs,2026-02-14T22:06:31.091Z,20,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-18T14:43:34.408Z,7,Edge +FIN-WS-042,10.10.1.142,cjohnson,https://exch-01.acme.local/inbox,exch-01.acme.local,2026-02-18T23:35:56.987Z,13,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://fitgirl-repacks.site/category/popular,fitgirl-repacks.site,2026-02-14T17:47:15.348Z,16,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://github.com/docs,github.com,2026-02-15T12:12:19.935Z,16,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-14T15:27:16.747Z,8,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://outlook.office365.com/docs,outlook.office365.com,2026-02-14T08:29:41.604Z,17,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://akamai.net/search,akamai.net,2026-02-13T19:23:34.752Z,17,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://login.microsoftonline.com/api,login.microsoftonline.com,2026-02-12T16:35:41.977Z,3,Chrome +FIN-WS-042,10.10.1.142,cjohnson,https://file-01.acme.local/docs,file-01.acme.local,2026-02-12T06:35:49.914Z,17,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://discord.gg/play,discord.gg,2026-02-13T04:09:49.253Z,14,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://thepiratebay.org/,The Pirate Bay,2026-02-10T08:00:48.070Z,12,Edge +SLS-WS-043,10.10.2.143,fthompson,https://cdn.jsdelivr.net/,cdn.jsdelivr.net,2026-02-19T02:06:05.610Z,12,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://googleapis.com/dashboard,googleapis.com,2026-02-13T03:18:35.273Z,19,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://login.microsoftonline.com/,login.microsoftonline.com,2026-02-16T14:57:21.748Z,2,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://akamai.net/api,akamai.net,2026-02-10T20:35:21.405Z,16,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://akamai.net/api,akamai.net,2026-02-12T17:11:10.343Z,10,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://1337x.to/watch,1337x.to,2026-02-16T20:29:13.849Z,6,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://update.microsoft.com/search,update.microsoft.com,2026-02-16T04:02:06.621Z,6,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://www.reddit.com/,www.reddit.com,2026-02-11T12:37:49.394Z,1,Edge +SLS-WS-043,10.10.2.143,fthompson,https://acme.sharepoint.com/,acme.sharepoint.com,2026-02-11T02:38:28.163Z,14,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://graph.microsoft.com/api,graph.microsoft.com,2026-02-18T16:57:19.374Z,5,Edge +SLS-WS-043,10.10.2.143,fthompson,https://outlook.office365.com/dashboard,outlook.office365.com,2026-02-16T05:11:13.877Z,1,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://acme.sharepoint.com/search,acme.sharepoint.com,2026-02-19T06:27:51.276Z,13,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://login.microsoftonline.com/inbox,login.microsoftonline.com,2026-02-19T10:34:05.383Z,2,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://stackoverflow.com/,stackoverflow.com,2026-02-20T00:23:28.801Z,2,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://exch-01.acme.local/,exch-01.acme.local,2026-02-11T06:01:38.326Z,8,Edge +SLS-WS-043,10.10.2.143,fthompson,https://dc-01.acme.local/,dc-01.acme.local,2026-02-18T22:55:41.736Z,4,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://outlook.office365.com/search,outlook.office365.com,2026-02-16T19:04:29.365Z,9,Edge +SLS-WS-043,10.10.2.143,fthompson,https://googleapis.com/docs,googleapis.com,2026-02-13T16:19:09.569Z,4,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://update.microsoft.com/api,update.microsoft.com,2026-02-14T20:18:42.428Z,12,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://dc-02.acme.local/inbox,dc-02.acme.local,2026-02-17T17:20:33.599Z,3,Edge +SLS-WS-043,10.10.2.143,fthompson,https://teams.microsoft.com/api,teams.microsoft.com,2026-02-19T11:37:15.640Z,4,Edge +SLS-WS-043,10.10.2.143,fthompson,https://google.com/dashboard,google.com,2026-02-11T17:18:40.182Z,13,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://acme.local/api,acme.local,2026-02-20T04:32:43.882Z,6,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://acme.sharepoint.com/inbox,acme.sharepoint.com,2026-02-17T02:30:15.434Z,20,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://google.com/api,google.com,2026-02-14T13:58:14.441Z,14,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://github.com/dashboard,github.com,2026-02-16T21:20:04.128Z,9,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://www.glassdoor.com/home,www.glassdoor.com,2026-02-19T11:32:23.544Z,20,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://akamai.net/dashboard,akamai.net,2026-02-14T19:14:17.433Z,19,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://aws.amazon.com/docs,aws.amazon.com,2026-02-16T12:35:39.630Z,9,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://aws.amazon.com/dashboard,aws.amazon.com,2026-02-12T23:45:01.320Z,7,Chrome +SLS-WS-043,10.10.2.143,fthompson,https://time.windows.com/dashboard,time.windows.com,2026-02-13T13:14:04.447Z,15,Chrome +ENG-WS-044,10.10.3.144,dlee,https://outlook.office365.com/inbox,outlook.office365.com,2026-02-18T17:24:48.001Z,8,Chrome +ENG-WS-044,10.10.3.144,dlee,https://pypi.org/,pypi.org,2026-02-19T11:36:46.158Z,10,Chrome +ENG-WS-044,10.10.3.144,dlee,https://akamai.net/,akamai.net,2026-02-17T03:24:00.120Z,5,Chrome +ENG-WS-044,10.10.3.144,dlee,https://draftkings.com/,draftkings.com,2026-02-15T14:54:50.516Z,15,Chrome +ENG-WS-044,10.10.3.144,dlee,https://teams.microsoft.com/,teams.microsoft.com,2026-02-15T15:40:15.069Z,18,Chrome +ENG-WS-044,10.10.3.144,dlee,https://acme.local/search,acme.local,2026-02-15T20:00:32.083Z,4,Chrome +ENG-WS-044,10.10.3.144,dlee,https://xvideos.com/,xvideos.com,2026-02-15T15:09:39.463Z,9,Chrome +ENG-WS-044,10.10.3.144,dlee,https://dc-01.acme.local/api,dc-01.acme.local,2026-02-13T14:58:52.668Z,8,Edge +ENG-WS-044,10.10.3.144,dlee,https://pypi.org/docs,pypi.org,2026-02-11T06:20:48.909Z,3,Chrome +ENG-WS-044,10.10.3.144,dlee,https://draftkings.com/,draftkings.com,2026-02-16T06:03:58.688Z,12,Edge +ENG-WS-044,10.10.3.144,dlee,https://npmjs.com/inbox,npmjs.com,2026-02-20T01:57:52.921Z,3,Chrome +ENG-WS-044,10.10.3.144,dlee,https://teams.microsoft.com/api,teams.microsoft.com,2026-02-18T17:22:57.388Z,6,Chrome +ENG-WS-044,10.10.3.144,dlee,https://login.microsoftonline.com/dashboard,login.microsoftonline.com,2026-02-20T17:57:23.791Z,18,Chrome +ENG-WS-044,10.10.3.144,dlee,https://dc-02.acme.local/inbox,dc-02.acme.local,2026-02-18T12:48:28.770Z,10,Edge +ENG-WS-044,10.10.3.144,dlee,https://cdn.jsdelivr.net/docs,cdn.jsdelivr.net,2026-02-12T00:01:31.917Z,17,Chrome +ENG-WS-044,10.10.3.144,dlee,https://stackoverflow.com/dashboard,stackoverflow.com,2026-02-20T09:09:12.816Z,7,Chrome +ENG-WS-044,10.10.3.144,dlee,https://dc-01.acme.local/dashboard,dc-01.acme.local,2026-02-12T17:54:39.660Z,10,Chrome +ENG-WS-044,10.10.3.144,dlee,https://pypi.org/docs,pypi.org,2026-02-11T19:46:51.374Z,14,Chrome +ENG-WS-044,10.10.3.144,dlee,https://cloudflare.com/inbox,cloudflare.com,2026-02-10T18:11:39.567Z,15,Chrome +ENG-WS-044,10.10.3.144,dlee,https://teams.microsoft.com/,teams.microsoft.com,2026-02-10T10:20:17.850Z,6,Chrome +ENG-WS-044,10.10.3.144,dlee,https://acme.sharepoint.com/search,acme.sharepoint.com,2026-02-20T13:56:19.732Z,11,Edge +ENG-WS-044,10.10.3.144,dlee,https://google.com/api,google.com,2026-02-11T12:34:42.112Z,12,Chrome +ENG-WS-044,10.10.3.144,dlee,https://googleapis.com/api,googleapis.com,2026-02-10T17:49:53.180Z,1,Chrome +ENG-WS-044,10.10.3.144,dlee,https://stackoverflow.com/search,stackoverflow.com,2026-02-11T17:35:13.843Z,19,Chrome +ENG-WS-044,10.10.3.144,dlee,https://npmjs.com/dashboard,npmjs.com,2026-02-20T11:11:56.702Z,4,Edge +ENG-WS-044,10.10.3.144,dlee,https://www.shein.com/,www.shein.com,2026-02-14T21:48:28.962Z,2,Chrome +ENG-WS-044,10.10.3.144,dlee,https://googleapis.com/api,googleapis.com,2026-02-19T15:00:22.483Z,18,Chrome +ENG-WS-044,10.10.3.144,dlee,https://outlook.office365.com/api,outlook.office365.com,2026-02-11T20:01:27.369Z,8,Chrome +ENG-WS-044,10.10.3.144,dlee,https://stackoverflow.com/dashboard,stackoverflow.com,2026-02-17T19:02:05.250Z,14,Chrome +LEG-WS-045,10.10.1.145,svc_backup,https://fitgirl-repacks.site/watch,fitgirl-repacks.site,2026-02-16T10:53:32.711Z,13,Chrome +LEG-WS-045,10.10.1.145,svc_backup,https://pypi.org/,pypi.org,2026-02-12T04:00:13.601Z,16,Edge +LEG-WS-045,10.10.1.145,svc_backup,https://pypi.org/docs,pypi.org,2026-02-12T12:19:23.207Z,1,Chrome +LEG-WS-045,10.10.1.145,svc_backup,https://update.microsoft.com/,update.microsoft.com,2026-02-14T12:45:47.773Z,14,Edge +LEG-WS-045,10.10.1.145,svc_backup,https://akamai.net/search,akamai.net,2026-02-15T18:36:52.648Z,6,Chrome +LEG-WS-045,10.10.1.145,svc_backup,https://windowsupdate.com/dashboard,windowsupdate.com,2026-02-16T04:56:39.097Z,2,Chrome +LEG-WS-045,10.10.1.145,svc_backup,https://google.com/api,google.com,2026-02-18T00:34:30.543Z,10,Chrome +LEG-WS-045,10.10.1.145,svc_backup,https://login.microsoftonline.com/inbox,login.microsoftonline.com,2026-02-17T03:35:11.615Z,13,Chrome +LEG-WS-045,10.10.1.145,svc_backup,https://cloudflare.com/dashboard,cloudflare.com,2026-02-18T11:50:10.189Z,8,Edge +LEG-WS-045,10.10.1.145,svc_backup,https://draftkings.com/category/popular,draftkings.com,2026-02-18T22:56:46.156Z,8,Edge +LEG-WS-045,10.10.1.145,svc_backup,https://dc-01.acme.local/api,dc-01.acme.local,2026-02-11T15:37:08.559Z,16,Chrome +LEG-WS-045,10.10.1.145,svc_backup,https://dc-02.acme.local/inbox,dc-02.acme.local,2026-02-15T20:59:52.627Z,12,Chrome +LEG-WS-045,10.10.1.145,svc_backup,https://exch-01.acme.local/inbox,exch-01.acme.local,2026-02-10T11:32:07.861Z,10,Chrome +LEG-WS-045,10.10.1.145,svc_backup,https://login.microsoftonline.com/api,login.microsoftonline.com,2026-02-17T11:14:52.658Z,10,Chrome +LEG-WS-045,10.10.1.145,svc_backup,https://acme.sharepoint.com/,acme.sharepoint.com,2026-02-14T18:11:53.166Z,13,Chrome +LEG-WS-045,10.10.1.145,svc_backup,https://pypi.org/,pypi.org,2026-02-10T21:17:07.099Z,8,Edge +LEG-WS-045,10.10.1.145,svc_backup,https://login.microsoftonline.com/api,login.microsoftonline.com,2026-02-20T12:06:52.579Z,15,Chrome +MKT-WS-046,10.10.2.146,svc_sql,https://www.shein.com/,www.shein.com,2026-02-14T18:25:17.668Z,13,Chrome +MKT-WS-046,10.10.2.146,svc_sql,https://akamai.net/dashboard,akamai.net,2026-02-10T14:32:14.658Z,18,Chrome +MKT-WS-046,10.10.2.146,svc_sql,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-17T21:06:15.747Z,19,Chrome +MKT-WS-046,10.10.2.146,svc_sql,https://outlook.office365.com/dashboard,outlook.office365.com,2026-02-19T12:03:24.745Z,17,Chrome +MKT-WS-046,10.10.2.146,svc_sql,https://update.microsoft.com/api,update.microsoft.com,2026-02-11T21:35:29.742Z,2,Chrome +MKT-WS-046,10.10.2.146,svc_sql,https://login.microsoftonline.com/dashboard,login.microsoftonline.com,2026-02-20T03:07:06.654Z,15,Chrome +MKT-WS-046,10.10.2.146,svc_sql,https://www.pornhub.com/search?q=free+movies,Pornhub,2026-02-14T17:55:29.976Z,13,Chrome +MKT-WS-046,10.10.2.146,svc_sql,https://cloudflare.com/api,cloudflare.com,2026-02-19T14:28:31.573Z,17,Chrome +MKT-WS-046,10.10.2.146,svc_sql,https://teams.microsoft.com/inbox,teams.microsoft.com,2026-02-13T17:11:08.713Z,2,Chrome +MKT-WS-046,10.10.2.146,svc_sql,https://google.com/api,google.com,2026-02-18T05:42:57.240Z,19,Chrome +MKT-WS-046,10.10.2.146,svc_sql,https://time.windows.com/search,time.windows.com,2026-02-13T23:32:14.105Z,14,Chrome +MKT-WS-046,10.10.2.146,svc_sql,https://googleapis.com/docs,googleapis.com,2026-02-20T07:46:59.612Z,5,Chrome +MKT-WS-046,10.10.2.146,svc_sql,https://www.glassdoor.com/watch,www.glassdoor.com,2026-02-11T19:26:25.671Z,3,Chrome +MKT-WS-046,10.10.2.146,svc_sql,https://onlyfans.com/play,onlyfans.com,2026-02-10T23:01:53.987Z,19,Chrome +EXEC-WS-047,10.10.3.147,hbrown,https://time.windows.com/inbox,time.windows.com,2026-02-18T16:02:11.971Z,5,Chrome +EXEC-WS-047,10.10.3.147,hbrown,https://stackoverflow.com/api,stackoverflow.com,2026-02-15T23:19:08.143Z,11,Chrome +EXEC-WS-047,10.10.3.147,hbrown,https://acme.local/docs,acme.local,2026-02-11T17:31:07.156Z,11,Chrome +EXEC-WS-047,10.10.3.147,hbrown,https://time.windows.com/search,time.windows.com,2026-02-12T12:11:52.333Z,18,Chrome +EXEC-WS-047,10.10.3.147,hbrown,https://outlook.office365.com/api,outlook.office365.com,2026-02-17T10:03:48.268Z,8,Chrome +EXEC-WS-047,10.10.3.147,hbrown,https://exch-01.acme.local/inbox,exch-01.acme.local,2026-02-19T22:01:38.501Z,19,Chrome +EXEC-WS-047,10.10.3.147,hbrown,https://acme.local/inbox,acme.local,2026-02-17T00:52:30.655Z,20,Edge +EXEC-WS-047,10.10.3.147,hbrown,https://www.reddit.com/,www.reddit.com,2026-02-20T01:54:21.150Z,16,Chrome +EXEC-WS-047,10.10.3.147,hbrown,https://dc-02.acme.local/,dc-02.acme.local,2026-02-13T06:11:15.266Z,14,Chrome +EXEC-WS-047,10.10.3.147,hbrown,https://draftkings.com/,draftkings.com,2026-02-14T20:41:21.837Z,3,Chrome +EXEC-WS-047,10.10.3.147,hbrown,https://teams.microsoft.com/search,teams.microsoft.com,2026-02-11T06:53:28.441Z,20,Edge +EXEC-WS-047,10.10.3.147,hbrown,https://googleapis.com/inbox,googleapis.com,2026-02-15T23:29:27.175Z,11,Edge +EXEC-WS-047,10.10.3.147,hbrown,https://github.com/,github.com,2026-02-13T10:44:05.401Z,1,Chrome +EXEC-WS-047,10.10.3.147,hbrown,https://google.com/search,google.com,2026-02-16T03:46:15.547Z,2,Edge +EXEC-WS-047,10.10.3.147,hbrown,https://dc-02.acme.local/inbox,dc-02.acme.local,2026-02-12T10:42:00.718Z,3,Edge +EXEC-WS-047,10.10.3.147,hbrown,https://dc-02.acme.local/docs,dc-02.acme.local,2026-02-18T05:28:17.028Z,13,Chrome +EXEC-WS-047,10.10.3.147,hbrown,https://npmjs.com/dashboard,npmjs.com,2026-02-17T09:10:06.011Z,5,Chrome +IT-WS-048,10.10.1.148,agarcia,https://windowsupdate.com/,windowsupdate.com,2026-02-11T22:53:25.195Z,20,Edge +IT-WS-048,10.10.1.148,agarcia,https://acme.sharepoint.com/dashboard,acme.sharepoint.com,2026-02-15T01:39:56.527Z,1,Chrome +IT-WS-048,10.10.1.148,agarcia,https://outlook.office365.com/docs,outlook.office365.com,2026-02-17T02:28:14.025Z,17,Chrome +IT-WS-048,10.10.1.148,agarcia,https://time.windows.com/api,time.windows.com,2026-02-20T04:48:19.657Z,8,Chrome +IT-WS-048,10.10.1.148,agarcia,https://cdn.jsdelivr.net/api,cdn.jsdelivr.net,2026-02-14T20:54:58.308Z,10,Chrome +IT-WS-048,10.10.1.148,agarcia,https://www.indeed.com/watch,Indeed - Job Search,2026-02-14T04:29:06.079Z,2,Chrome +IT-WS-048,10.10.1.148,agarcia,https://1337x.to/search?q=free+movies,1337x.to,2026-02-20T15:36:32.866Z,1,Edge +IT-WS-048,10.10.1.148,agarcia,https://dc-01.acme.local/dashboard,dc-01.acme.local,2026-02-13T10:43:38.963Z,3,Edge +IT-WS-048,10.10.1.148,agarcia,https://login.microsoftonline.com/dashboard,login.microsoftonline.com,2026-02-15T16:08:00.344Z,9,Chrome +IT-WS-048,10.10.1.148,agarcia,https://time.windows.com/docs,time.windows.com,2026-02-18T21:42:20.410Z,11,Chrome +IT-WS-048,10.10.1.148,agarcia,https://cloudflare.com/inbox,cloudflare.com,2026-02-12T23:54:27.368Z,5,Edge +IT-WS-048,10.10.1.148,agarcia,https://teams.microsoft.com/api,teams.microsoft.com,2026-02-11T06:46:59.818Z,8,Chrome +IT-WS-048,10.10.1.148,agarcia,https://update.microsoft.com/api,update.microsoft.com,2026-02-19T12:14:44.858Z,17,Chrome +IT-WS-048,10.10.1.148,agarcia,https://acme.local/docs,acme.local,2026-02-17T23:37:52.671Z,7,Chrome +IT-WS-048,10.10.1.148,agarcia,https://graph.microsoft.com/inbox,graph.microsoft.com,2026-02-19T17:14:53.886Z,4,Chrome +IT-WS-048,10.10.1.148,agarcia,https://www.linkedin.com/jobs/category/popular,www.linkedin.com/jobs,2026-02-12T21:01:54.482Z,5,Edge +IT-WS-048,10.10.1.148,agarcia,https://stackoverflow.com/search,stackoverflow.com,2026-02-17T19:14:41.651Z,20,Chrome +IT-WS-048,10.10.1.148,agarcia,https://graph.microsoft.com/docs,graph.microsoft.com,2026-02-18T01:19:05.230Z,12,Edge +IT-WS-048,10.10.1.148,agarcia,https://update.microsoft.com/,update.microsoft.com,2026-02-18T19:24:03.819Z,3,Chrome +IT-WS-048,10.10.1.148,agarcia,https://login.microsoftonline.com/dashboard,login.microsoftonline.com,2026-02-16T01:19:06.860Z,2,Chrome +HR-WS-049,10.10.2.149,idavis,https://acme.local/docs,acme.local,2026-02-10T19:40:37.950Z,3,Edge +HR-WS-049,10.10.2.149,idavis,https://aws.amazon.com/dashboard,aws.amazon.com,2026-02-11T04:36:52.402Z,20,Chrome +HR-WS-049,10.10.2.149,idavis,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-10T12:28:11.858Z,17,Edge +HR-WS-049,10.10.2.149,idavis,https://stackoverflow.com/inbox,stackoverflow.com,2026-02-19T21:58:21.314Z,17,Chrome +HR-WS-049,10.10.2.149,idavis,https://dc-01.acme.local/docs,dc-01.acme.local,2026-02-12T10:58:55.333Z,11,Chrome +HR-WS-049,10.10.2.149,idavis,https://google.com/docs,google.com,2026-02-19T12:46:36.935Z,12,Chrome +HR-WS-049,10.10.2.149,idavis,https://google.com/dashboard,google.com,2026-02-20T15:45:07.264Z,15,Chrome +HR-WS-049,10.10.2.149,idavis,https://googleapis.com/search,googleapis.com,2026-02-15T13:03:40.813Z,15,Chrome +HR-WS-049,10.10.2.149,idavis,https://googleapis.com/,googleapis.com,2026-02-12T04:35:50.676Z,10,Chrome +HR-WS-049,10.10.2.149,idavis,https://windowsupdate.com/docs,windowsupdate.com,2026-02-17T04:01:16.226Z,19,Chrome +HR-WS-049,10.10.2.149,idavis,https://dc-01.acme.local/,dc-01.acme.local,2026-02-17T12:38:26.021Z,19,Edge +HR-WS-049,10.10.2.149,idavis,https://pypi.org/,pypi.org,2026-02-19T12:10:39.187Z,19,Chrome +HR-WS-049,10.10.2.149,idavis,https://exch-01.acme.local/api,exch-01.acme.local,2026-02-20T13:55:28.049Z,5,Chrome +HR-WS-049,10.10.2.149,idavis,https://google.com/,google.com,2026-02-11T06:39:34.594Z,15,Chrome +HR-WS-049,10.10.2.149,idavis,https://google.com/docs,google.com,2026-02-18T22:12:35.166Z,7,Chrome +HR-WS-049,10.10.2.149,idavis,https://cloudflare.com/search,cloudflare.com,2026-02-14T01:16:15.898Z,17,Chrome +HR-WS-049,10.10.2.149,idavis,https://npmjs.com/inbox,npmjs.com,2026-02-20T04:51:16.432Z,9,Chrome +HR-WS-049,10.10.2.149,idavis,https://dc-01.acme.local/dashboard,dc-01.acme.local,2026-02-19T04:34:35.016Z,11,Chrome +HR-WS-049,10.10.2.149,idavis,https://stackoverflow.com/search,stackoverflow.com,2026-02-16T05:40:17.858Z,7,Edge +HR-WS-049,10.10.2.149,idavis,https://acme.sharepoint.com/docs,acme.sharepoint.com,2026-02-13T01:08:39.685Z,15,Chrome +HR-WS-049,10.10.2.149,idavis,https://teams.microsoft.com/,teams.microsoft.com,2026-02-19T22:21:40.406Z,12,Chrome +HR-WS-049,10.10.2.149,idavis,https://teams.microsoft.com/inbox,teams.microsoft.com,2026-02-13T08:50:42.715Z,14,Chrome +HR-WS-049,10.10.2.149,idavis,https://akamai.net/api,akamai.net,2026-02-20T01:35:11.301Z,2,Chrome +HR-WS-049,10.10.2.149,idavis,https://outlook.office365.com/search,outlook.office365.com,2026-02-10T18:48:48.658Z,4,Chrome +HR-WS-049,10.10.2.149,idavis,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-12T01:41:17.746Z,7,Chrome +HR-WS-049,10.10.2.149,idavis,https://googleapis.com/search,googleapis.com,2026-02-10T10:52:33.208Z,12,Chrome +HR-WS-049,10.10.2.149,idavis,https://windowsupdate.com/docs,windowsupdate.com,2026-02-19T14:04:01.072Z,19,Chrome +HR-WS-049,10.10.2.149,idavis,https://www.amazon.com/watch,Amazon.com - Shopping,2026-02-13T08:10:32.803Z,14,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://npmjs.com/api,npmjs.com,2026-02-15T21:27:17.672Z,13,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://pypi.org/api,pypi.org,2026-02-13T16:46:54.331Z,11,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://update.microsoft.com/search,update.microsoft.com,2026-02-17T02:50:44.203Z,14,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://npmjs.com/dashboard,npmjs.com,2026-02-17T04:39:41.566Z,8,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://exch-01.acme.local/dashboard,exch-01.acme.local,2026-02-17T14:58:01.676Z,2,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://stackoverflow.com/search,stackoverflow.com,2026-02-18T18:22:41.299Z,9,Edge +FIN-WS-050,10.10.3.150,svc_sql,https://login.microsoftonline.com/dashboard,login.microsoftonline.com,2026-02-17T16:42:59.494Z,15,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://file-01.acme.local/,file-01.acme.local,2026-02-11T11:33:00.402Z,7,Edge +FIN-WS-050,10.10.3.150,svc_sql,https://dc-02.acme.local/docs,dc-02.acme.local,2026-02-18T02:35:03.679Z,16,Edge +FIN-WS-050,10.10.3.150,svc_sql,https://pypi.org/inbox,pypi.org,2026-02-13T08:10:52.467Z,14,Edge +FIN-WS-050,10.10.3.150,svc_sql,https://www.tiktok.com/watch,TikTok - Make Your Day,2026-02-12T18:35:51.043Z,9,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://github.com/,github.com,2026-02-18T22:33:15.904Z,2,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://npmjs.com/api,npmjs.com,2026-02-20T09:48:07.955Z,5,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://windowsupdate.com/docs,windowsupdate.com,2026-02-19T21:58:30.396Z,2,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://npmjs.com/inbox,npmjs.com,2026-02-16T20:44:23.048Z,11,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://time.windows.com/dashboard,time.windows.com,2026-02-13T06:19:48.832Z,5,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://dc-02.acme.local/docs,dc-02.acme.local,2026-02-10T12:37:38.487Z,3,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://github.com/dashboard,github.com,2026-02-12T03:14:43.279Z,6,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://dc-02.acme.local/,dc-02.acme.local,2026-02-11T03:53:41.557Z,17,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://cdn.jsdelivr.net/inbox,cdn.jsdelivr.net,2026-02-14T21:57:19.727Z,9,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://teams.microsoft.com/dashboard,teams.microsoft.com,2026-02-17T12:09:59.735Z,5,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://fitgirl-repacks.site/category/popular,fitgirl-repacks.site,2026-02-19T13:09:19.733Z,7,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://npmjs.com/docs,npmjs.com,2026-02-18T01:01:13.712Z,18,Edge +FIN-WS-050,10.10.3.150,svc_sql,https://time.windows.com/docs,time.windows.com,2026-02-13T03:31:25.955Z,20,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-17T23:26:33.515Z,18,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://acme.sharepoint.com/api,acme.sharepoint.com,2026-02-20T15:41:55.824Z,16,Edge +FIN-WS-050,10.10.3.150,svc_sql,https://dc-02.acme.local/api,dc-02.acme.local,2026-02-15T03:12:46.000Z,10,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://dc-01.acme.local/inbox,dc-01.acme.local,2026-02-18T02:01:05.552Z,20,Edge +FIN-WS-050,10.10.3.150,svc_sql,https://www.ebay.com/category/popular,www.ebay.com,2026-02-18T20:45:13.373Z,18,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://update.microsoft.com/docs,update.microsoft.com,2026-02-12T07:32:21.735Z,15,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://graph.microsoft.com/api,graph.microsoft.com,2026-02-14T00:38:51.402Z,6,Edge +FIN-WS-050,10.10.3.150,svc_sql,https://googleapis.com/inbox,googleapis.com,2026-02-16T11:54:06.266Z,15,Chrome +FIN-WS-050,10.10.3.150,svc_sql,https://graph.microsoft.com/api,graph.microsoft.com,2026-02-19T00:01:30.477Z,11,Chrome +SLS-WS-051,10.10.1.151,agarcia,https://acme.sharepoint.com/docs,acme.sharepoint.com,2026-02-12T20:53:12.329Z,19,Chrome +SLS-WS-051,10.10.1.151,agarcia,https://update.microsoft.com/dashboard,update.microsoft.com,2026-02-15T02:24:48.984Z,11,Chrome +SLS-WS-051,10.10.1.151,agarcia,https://npmjs.com/api,npmjs.com,2026-02-10T17:22:10.587Z,1,Chrome +SLS-WS-051,10.10.1.151,agarcia,https://www.bet365.com/category/popular,Bet365 - Sports Betting,2026-02-16T13:13:36.442Z,16,Chrome +SLS-WS-051,10.10.1.151,agarcia,https://time.windows.com/,time.windows.com,2026-02-11T01:16:10.330Z,19,Chrome +SLS-WS-051,10.10.1.151,agarcia,https://akamai.net/search,akamai.net,2026-02-17T11:47:11.812Z,19,Edge +SLS-WS-051,10.10.1.151,agarcia,https://googleapis.com/inbox,googleapis.com,2026-02-12T06:49:23.777Z,18,Edge +SLS-WS-051,10.10.1.151,agarcia,https://time.windows.com/,time.windows.com,2026-02-19T08:59:50.658Z,16,Chrome +SLS-WS-051,10.10.1.151,agarcia,https://googleapis.com/search,googleapis.com,2026-02-17T23:59:43.020Z,18,Edge +SLS-WS-051,10.10.1.151,agarcia,https://pypi.org/inbox,pypi.org,2026-02-19T18:13:26.028Z,19,Edge +SLS-WS-051,10.10.1.151,agarcia,https://time.windows.com/docs,time.windows.com,2026-02-15T18:04:57.688Z,1,Chrome +SLS-WS-051,10.10.1.151,agarcia,https://acme.sharepoint.com/search,acme.sharepoint.com,2026-02-19T11:49:47.728Z,9,Chrome +SLS-WS-051,10.10.1.151,agarcia,https://acme.sharepoint.com/,acme.sharepoint.com,2026-02-16T16:23:11.320Z,5,Chrome +SLS-WS-051,10.10.1.151,agarcia,https://github.com/search,github.com,2026-02-13T07:28:37.553Z,9,Chrome +SLS-WS-051,10.10.1.151,agarcia,https://acme.sharepoint.com/inbox,acme.sharepoint.com,2026-02-17T20:54:35.806Z,6,Edge +SLS-WS-051,10.10.1.151,agarcia,https://file-01.acme.local/,file-01.acme.local,2026-02-14T03:22:00.239Z,13,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://akamai.net/api,akamai.net,2026-02-15T13:12:45.877Z,18,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://exch-01.acme.local/dashboard,exch-01.acme.local,2026-02-13T18:48:33.995Z,16,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-15T21:17:39.611Z,19,Edge +ENG-WS-052,10.10.2.152,svc_backup,https://acme.local/inbox,acme.local,2026-02-15T01:11:25.678Z,4,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://time.windows.com/api,time.windows.com,2026-02-12T08:07:50.552Z,17,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://acme.local/inbox,acme.local,2026-02-15T03:19:03.003Z,6,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://google.com/dashboard,google.com,2026-02-19T08:37:49.459Z,2,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://stackoverflow.com/api,stackoverflow.com,2026-02-15T10:55:26.502Z,17,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://cdn.jsdelivr.net/api,cdn.jsdelivr.net,2026-02-19T02:23:21.705Z,4,Edge +ENG-WS-052,10.10.2.152,svc_backup,https://login.microsoftonline.com/search,login.microsoftonline.com,2026-02-11T18:17:07.521Z,11,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-19T20:37:46.957Z,5,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://outlook.office365.com/docs,outlook.office365.com,2026-02-12T02:11:21.296Z,3,Edge +ENG-WS-052,10.10.2.152,svc_backup,https://acme.sharepoint.com/search,acme.sharepoint.com,2026-02-15T21:37:06.405Z,1,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://dc-02.acme.local/,dc-02.acme.local,2026-02-16T18:01:12.595Z,14,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://update.microsoft.com/dashboard,update.microsoft.com,2026-02-18T21:14:29.587Z,18,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://outlook.office365.com/search,outlook.office365.com,2026-02-16T20:49:32.895Z,7,Edge +ENG-WS-052,10.10.2.152,svc_backup,https://login.microsoftonline.com/,login.microsoftonline.com,2026-02-17T12:12:22.414Z,17,Edge +ENG-WS-052,10.10.2.152,svc_backup,https://dc-02.acme.local/api,dc-02.acme.local,2026-02-17T10:21:08.642Z,19,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://aws.amazon.com/search,aws.amazon.com,2026-02-19T02:52:32.149Z,1,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://pypi.org/,pypi.org,2026-02-13T05:51:00.227Z,19,Edge +ENG-WS-052,10.10.2.152,svc_backup,https://login.microsoftonline.com/search,login.microsoftonline.com,2026-02-13T04:32:02.452Z,4,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://graph.microsoft.com/dashboard,graph.microsoft.com,2026-02-11T18:07:22.042Z,6,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://www.amazon.com/category/popular,Amazon.com - Shopping,2026-02-19T09:13:57.494Z,19,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://www.bet365.com/home,Bet365 - Sports Betting,2026-02-12T21:10:40.776Z,7,Edge +ENG-WS-052,10.10.2.152,svc_backup,https://graph.microsoft.com/docs,graph.microsoft.com,2026-02-16T06:16:19.603Z,5,Chrome +ENG-WS-052,10.10.2.152,svc_backup,https://npmjs.com/,npmjs.com,2026-02-13T06:46:49.728Z,6,Chrome +LEG-WS-053,10.10.3.153,cjohnson,https://steamcommunity.com/,Steam Store,2026-02-17T18:18:26.129Z,20,Chrome +LEG-WS-053,10.10.3.153,cjohnson,https://teams.microsoft.com/,teams.microsoft.com,2026-02-17T12:36:23.304Z,3,Chrome +LEG-WS-053,10.10.3.153,cjohnson,https://update.microsoft.com/,update.microsoft.com,2026-02-10T08:00:58.722Z,20,Chrome +LEG-WS-053,10.10.3.153,cjohnson,https://dc-02.acme.local/inbox,dc-02.acme.local,2026-02-18T13:36:43.324Z,18,Chrome +LEG-WS-053,10.10.3.153,cjohnson,https://aws.amazon.com/docs,aws.amazon.com,2026-02-16T22:59:03.608Z,4,Chrome +LEG-WS-053,10.10.3.153,cjohnson,https://graph.microsoft.com/dashboard,graph.microsoft.com,2026-02-19T06:34:08.720Z,15,Chrome +LEG-WS-053,10.10.3.153,cjohnson,https://acme.local/,acme.local,2026-02-17T06:08:30.885Z,20,Chrome +LEG-WS-053,10.10.3.153,cjohnson,https://open.spotify.com/home,open.spotify.com,2026-02-17T22:54:15.297Z,14,Chrome +LEG-WS-053,10.10.3.153,cjohnson,https://teams.microsoft.com/inbox,teams.microsoft.com,2026-02-13T09:05:37.767Z,1,Chrome +LEG-WS-053,10.10.3.153,cjohnson,https://google.com/dashboard,google.com,2026-02-11T18:17:38.579Z,1,Chrome +LEG-WS-053,10.10.3.153,cjohnson,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-20T06:04:38.514Z,1,Chrome +LEG-WS-053,10.10.3.153,cjohnson,https://acme.sharepoint.com/inbox,acme.sharepoint.com,2026-02-12T04:06:30.372Z,16,Edge +LEG-WS-053,10.10.3.153,cjohnson,https://exch-01.acme.local/docs,exch-01.acme.local,2026-02-17T02:01:48.065Z,19,Edge +LEG-WS-053,10.10.3.153,cjohnson,https://update.microsoft.com/api,update.microsoft.com,2026-02-20T14:32:37.887Z,5,Chrome +LEG-WS-053,10.10.3.153,cjohnson,https://aws.amazon.com/api,aws.amazon.com,2026-02-14T06:41:01.534Z,14,Chrome +LEG-WS-053,10.10.3.153,cjohnson,https://graph.microsoft.com/search,graph.microsoft.com,2026-02-14T23:10:09.456Z,3,Edge +LEG-WS-053,10.10.3.153,cjohnson,https://cloudflare.com/api,cloudflare.com,2026-02-18T16:58:32.365Z,1,Chrome +LEG-WS-053,10.10.3.153,cjohnson,https://exch-01.acme.local/dashboard,exch-01.acme.local,2026-02-15T00:38:06.207Z,11,Edge +LEG-WS-053,10.10.3.153,cjohnson,https://windowsupdate.com/api,windowsupdate.com,2026-02-18T09:04:37.659Z,19,Chrome +LEG-WS-053,10.10.3.153,cjohnson,https://cdn.jsdelivr.net/inbox,cdn.jsdelivr.net,2026-02-12T09:24:29.879Z,13,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://google.com/search,google.com,2026-02-18T22:51:53.328Z,19,Edge +MKT-WS-054,10.10.1.154,svc_web,https://outlook.office365.com/inbox,outlook.office365.com,2026-02-17T08:03:04.688Z,5,Edge +MKT-WS-054,10.10.1.154,svc_web,https://exch-01.acme.local/api,exch-01.acme.local,2026-02-10T19:16:30.695Z,1,Edge +MKT-WS-054,10.10.1.154,svc_web,https://teams.microsoft.com/search,teams.microsoft.com,2026-02-19T08:00:02.289Z,17,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://outlook.office365.com/,outlook.office365.com,2026-02-13T15:48:59.116Z,14,Edge +MKT-WS-054,10.10.1.154,svc_web,https://google.com/api,google.com,2026-02-15T17:35:24.849Z,20,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://dc-02.acme.local/api,dc-02.acme.local,2026-02-18T23:09:39.128Z,20,Edge +MKT-WS-054,10.10.1.154,svc_web,https://google.com/,google.com,2026-02-13T06:48:01.765Z,16,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://stackoverflow.com/api,stackoverflow.com,2026-02-16T17:08:36.621Z,15,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://update.microsoft.com/dashboard,update.microsoft.com,2026-02-11T14:57:48.343Z,13,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://acme.local/docs,acme.local,2026-02-13T03:39:16.245Z,12,Edge +MKT-WS-054,10.10.1.154,svc_web,https://dc-02.acme.local/docs,dc-02.acme.local,2026-02-10T13:13:45.490Z,5,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://npmjs.com/dashboard,npmjs.com,2026-02-17T02:56:54.287Z,7,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://www.ebay.com/home,www.ebay.com,2026-02-19T19:24:09.209Z,2,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://outlook.office365.com/inbox,outlook.office365.com,2026-02-14T02:48:23.681Z,9,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-13T00:33:17.869Z,2,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-14T01:06:52.125Z,20,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://www.facebook.com/category/popular,Facebook - Log In,2026-02-13T00:15:57.222Z,8,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://dc-01.acme.local/api,dc-01.acme.local,2026-02-18T04:05:14.034Z,10,Edge +MKT-WS-054,10.10.1.154,svc_web,https://login.microsoftonline.com/dashboard,login.microsoftonline.com,2026-02-14T05:00:27.207Z,11,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://cloudflare.com/,cloudflare.com,2026-02-12T05:38:39.371Z,17,Edge +MKT-WS-054,10.10.1.154,svc_web,https://store.steampowered.com/play,Steam Store,2026-02-19T14:11:41.895Z,19,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://googleapis.com/api,googleapis.com,2026-02-19T17:55:19.193Z,5,Edge +MKT-WS-054,10.10.1.154,svc_web,https://acme.local/docs,acme.local,2026-02-16T20:00:35.628Z,19,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://cdn.jsdelivr.net/api,cdn.jsdelivr.net,2026-02-11T22:49:16.007Z,20,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://login.microsoftonline.com/api,login.microsoftonline.com,2026-02-16T17:46:54.806Z,11,Chrome +MKT-WS-054,10.10.1.154,svc_web,https://thepiratebay.org/play,The Pirate Bay,2026-02-15T20:51:54.066Z,13,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://google.com/docs,google.com,2026-02-15T14:33:37.395Z,3,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://file-01.acme.local/inbox,file-01.acme.local,2026-02-19T01:08:18.038Z,6,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://store.steampowered.com/,Steam Store,2026-02-19T09:45:37.623Z,17,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://acme.local/,acme.local,2026-02-20T08:24:27.478Z,14,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-12T15:41:21.752Z,14,Edge +EXEC-WS-055,10.10.2.155,agarcia,https://www.amazon.com/watch,Amazon.com - Shopping,2026-02-18T21:06:54.848Z,7,Edge +EXEC-WS-055,10.10.2.155,agarcia,https://outlook.office365.com/,outlook.office365.com,2026-02-13T23:06:06.825Z,10,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://aws.amazon.com/api,aws.amazon.com,2026-02-19T01:15:07.487Z,11,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://teams.microsoft.com/api,teams.microsoft.com,2026-02-20T00:55:41.977Z,15,Edge +EXEC-WS-055,10.10.2.155,agarcia,https://update.microsoft.com/inbox,update.microsoft.com,2026-02-15T14:06:34.983Z,20,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-19T09:31:45.471Z,9,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://graph.microsoft.com/search,graph.microsoft.com,2026-02-19T22:05:02.285Z,12,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://file-01.acme.local/search,file-01.acme.local,2026-02-14T12:29:56.698Z,1,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://github.com/api,github.com,2026-02-13T21:04:38.265Z,13,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://teams.microsoft.com/,teams.microsoft.com,2026-02-14T17:36:25.482Z,14,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://cloudflare.com/docs,cloudflare.com,2026-02-16T17:57:01.501Z,6,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://aws.amazon.com/search,aws.amazon.com,2026-02-20T00:17:50.238Z,8,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://stackoverflow.com/dashboard,stackoverflow.com,2026-02-19T21:21:58.629Z,17,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://onlyfans.com/home,onlyfans.com,2026-02-17T18:18:13.128Z,7,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://dc-02.acme.local/search,dc-02.acme.local,2026-02-14T23:50:04.230Z,10,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://acme.sharepoint.com/docs,acme.sharepoint.com,2026-02-17T14:52:08.867Z,14,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://www.facebook.com/search?q=free+movies,Facebook - Log In,2026-02-20T03:46:34.842Z,16,Chrome +EXEC-WS-055,10.10.2.155,agarcia,https://outlook.office365.com/api,outlook.office365.com,2026-02-12T13:40:47.341Z,11,Chrome +IT-WS-056,10.10.3.156,cjohnson,https://time.windows.com/,time.windows.com,2026-02-14T19:03:03.839Z,12,Chrome +IT-WS-056,10.10.3.156,cjohnson,https://google.com/inbox,google.com,2026-02-19T19:41:28.731Z,2,Chrome +IT-WS-056,10.10.3.156,cjohnson,https://thepiratebay.org/play,The Pirate Bay,2026-02-13T11:22:44.434Z,16,Chrome +IT-WS-056,10.10.3.156,cjohnson,https://www.tiktok.com/category/popular,TikTok - Make Your Day,2026-02-20T07:15:38.930Z,15,Chrome +IT-WS-056,10.10.3.156,cjohnson,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-19T04:59:18.178Z,7,Edge +IT-WS-056,10.10.3.156,cjohnson,https://update.microsoft.com/dashboard,update.microsoft.com,2026-02-18T11:01:10.465Z,13,Edge +IT-WS-056,10.10.3.156,cjohnson,https://store.steampowered.com/search?q=free+movies,Steam Store,2026-02-20T09:59:17.493Z,5,Chrome +IT-WS-056,10.10.3.156,cjohnson,https://stackoverflow.com/search,stackoverflow.com,2026-02-18T02:56:45.281Z,11,Chrome +IT-WS-056,10.10.3.156,cjohnson,https://acme.local/dashboard,acme.local,2026-02-10T21:58:05.849Z,2,Chrome +IT-WS-056,10.10.3.156,cjohnson,https://pypi.org/inbox,pypi.org,2026-02-15T11:42:15.677Z,6,Edge +IT-WS-056,10.10.3.156,cjohnson,https://time.windows.com/search,time.windows.com,2026-02-14T15:01:59.915Z,9,Chrome +IT-WS-056,10.10.3.156,cjohnson,https://stackoverflow.com/api,stackoverflow.com,2026-02-17T13:13:15.744Z,16,Chrome +IT-WS-056,10.10.3.156,cjohnson,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-11T23:26:55.580Z,4,Edge +IT-WS-056,10.10.3.156,cjohnson,https://dc-01.acme.local/dashboard,dc-01.acme.local,2026-02-17T16:22:56.702Z,11,Chrome +IT-WS-056,10.10.3.156,cjohnson,https://time.windows.com/api,time.windows.com,2026-02-16T12:39:52.302Z,3,Chrome +IT-WS-056,10.10.3.156,cjohnson,https://google.com/inbox,google.com,2026-02-19T19:05:49.311Z,14,Chrome +IT-WS-056,10.10.3.156,cjohnson,https://npmjs.com/inbox,npmjs.com,2026-02-11T02:16:26.359Z,19,Chrome +IT-WS-056,10.10.3.156,cjohnson,https://pypi.org/dashboard,pypi.org,2026-02-18T17:40:13.698Z,18,Edge +IT-WS-056,10.10.3.156,cjohnson,https://aws.amazon.com/,aws.amazon.com,2026-02-15T10:46:36.422Z,1,Edge +IT-WS-056,10.10.3.156,cjohnson,https://graph.microsoft.com/api,graph.microsoft.com,2026-02-14T10:26:15.123Z,14,Chrome +HR-WS-057,10.10.1.157,jsmith,https://acme.local/inbox,acme.local,2026-02-20T13:26:23.639Z,2,Chrome +HR-WS-057,10.10.1.157,jsmith,https://www.reddit.com/home,www.reddit.com,2026-02-15T23:46:19.449Z,13,Chrome +HR-WS-057,10.10.1.157,jsmith,https://github.com/inbox,github.com,2026-02-12T05:41:20.039Z,20,Chrome +HR-WS-057,10.10.1.157,jsmith,https://googleapis.com/,googleapis.com,2026-02-10T23:52:45.552Z,7,Chrome +HR-WS-057,10.10.1.157,jsmith,https://googleapis.com/search,googleapis.com,2026-02-19T10:40:34.698Z,17,Chrome +HR-WS-057,10.10.1.157,jsmith,https://time.windows.com/inbox,time.windows.com,2026-02-18T06:59:30.635Z,9,Chrome +HR-WS-057,10.10.1.157,jsmith,https://dc-01.acme.local/,dc-01.acme.local,2026-02-20T00:56:18.267Z,3,Chrome +HR-WS-057,10.10.1.157,jsmith,https://aws.amazon.com/inbox,aws.amazon.com,2026-02-11T08:25:27.097Z,1,Chrome +HR-WS-057,10.10.1.157,jsmith,https://dc-02.acme.local/dashboard,dc-02.acme.local,2026-02-13T23:21:42.486Z,19,Chrome +HR-WS-057,10.10.1.157,jsmith,https://www.bet365.com/watch,Bet365 - Sports Betting,2026-02-18T12:16:06.049Z,1,Chrome +HR-WS-057,10.10.1.157,jsmith,https://aws.amazon.com/search,aws.amazon.com,2026-02-19T15:41:43.801Z,19,Chrome +HR-WS-057,10.10.1.157,jsmith,https://time.windows.com/api,time.windows.com,2026-02-18T11:30:21.131Z,2,Edge +HR-WS-057,10.10.1.157,jsmith,https://googleapis.com/docs,googleapis.com,2026-02-15T13:25:26.112Z,3,Edge +HR-WS-057,10.10.1.157,jsmith,https://cloudflare.com/docs,cloudflare.com,2026-02-15T02:36:51.934Z,8,Chrome +HR-WS-057,10.10.1.157,jsmith,https://dc-01.acme.local/inbox,dc-01.acme.local,2026-02-13T03:11:03.305Z,18,Chrome +HR-WS-057,10.10.1.157,jsmith,https://cdn.jsdelivr.net/docs,cdn.jsdelivr.net,2026-02-17T03:00:03.167Z,4,Chrome +HR-WS-057,10.10.1.157,jsmith,https://draftkings.com/watch,draftkings.com,2026-02-17T15:02:05.210Z,15,Edge +HR-WS-057,10.10.1.157,jsmith,https://exch-01.acme.local/inbox,exch-01.acme.local,2026-02-17T00:01:45.957Z,14,Edge +HR-WS-057,10.10.1.157,jsmith,https://outlook.office365.com/api,outlook.office365.com,2026-02-11T11:37:38.899Z,17,Chrome +HR-WS-057,10.10.1.157,jsmith,https://cdn.jsdelivr.net/dashboard,cdn.jsdelivr.net,2026-02-16T10:20:45.271Z,8,Chrome +FIN-WS-058,10.10.2.158,gwhite,https://acme.sharepoint.com/dashboard,acme.sharepoint.com,2026-02-19T00:38:11.355Z,13,Edge +FIN-WS-058,10.10.2.158,gwhite,https://aws.amazon.com/api,aws.amazon.com,2026-02-14T23:50:59.956Z,2,Chrome +FIN-WS-058,10.10.2.158,gwhite,https://outlook.office365.com/inbox,outlook.office365.com,2026-02-12T20:36:16.871Z,7,Chrome +FIN-WS-058,10.10.2.158,gwhite,https://stackoverflow.com/docs,stackoverflow.com,2026-02-16T16:21:11.592Z,7,Chrome +FIN-WS-058,10.10.2.158,gwhite,https://graph.microsoft.com/docs,graph.microsoft.com,2026-02-13T01:28:14.730Z,7,Edge +FIN-WS-058,10.10.2.158,gwhite,https://cdn.jsdelivr.net/,cdn.jsdelivr.net,2026-02-18T09:36:11.468Z,6,Chrome +FIN-WS-058,10.10.2.158,gwhite,https://file-01.acme.local/search,file-01.acme.local,2026-02-13T13:31:26.132Z,5,Chrome +FIN-WS-058,10.10.2.158,gwhite,https://google.com/search,google.com,2026-02-10T08:39:04.682Z,17,Edge +FIN-WS-058,10.10.2.158,gwhite,https://cdn.jsdelivr.net/docs,cdn.jsdelivr.net,2026-02-18T12:59:47.293Z,17,Chrome +FIN-WS-058,10.10.2.158,gwhite,https://open.spotify.com/watch,open.spotify.com,2026-02-14T12:20:42.091Z,11,Edge +FIN-WS-058,10.10.2.158,gwhite,https://akamai.net/,akamai.net,2026-02-15T05:36:14.625Z,19,Chrome +FIN-WS-058,10.10.2.158,gwhite,https://login.microsoftonline.com/inbox,login.microsoftonline.com,2026-02-16T08:17:16.338Z,2,Chrome +FIN-WS-058,10.10.2.158,gwhite,https://dc-01.acme.local/docs,dc-01.acme.local,2026-02-17T01:05:31.045Z,11,Edge +FIN-WS-058,10.10.2.158,gwhite,https://aws.amazon.com/search,aws.amazon.com,2026-02-19T22:00:58.661Z,14,Chrome +FIN-WS-058,10.10.2.158,gwhite,https://exch-01.acme.local/inbox,exch-01.acme.local,2026-02-17T00:46:49.881Z,14,Edge +FIN-WS-058,10.10.2.158,gwhite,https://login.microsoftonline.com/search,login.microsoftonline.com,2026-02-17T09:43:27.783Z,3,Chrome +FIN-WS-058,10.10.2.158,gwhite,https://akamai.net/,akamai.net,2026-02-19T03:00:03.934Z,6,Edge +SLS-WS-059,10.10.3.159,agarcia,https://acme.local/search,acme.local,2026-02-15T12:15:02.060Z,14,Chrome +SLS-WS-059,10.10.3.159,agarcia,https://outlook.office365.com/dashboard,outlook.office365.com,2026-02-11T05:35:18.276Z,20,Chrome +SLS-WS-059,10.10.3.159,agarcia,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-17T21:08:22.288Z,9,Edge +SLS-WS-059,10.10.3.159,agarcia,https://steamcommunity.com/search?q=free+movies,Steam Store,2026-02-17T19:46:23.317Z,11,Chrome +SLS-WS-059,10.10.3.159,agarcia,https://dc-02.acme.local/dashboard,dc-02.acme.local,2026-02-13T18:31:24.379Z,4,Chrome +SLS-WS-059,10.10.3.159,agarcia,https://npmjs.com/inbox,npmjs.com,2026-02-16T03:34:30.168Z,8,Edge +SLS-WS-059,10.10.3.159,agarcia,https://draftkings.com/watch,draftkings.com,2026-02-18T13:25:01.880Z,13,Chrome +SLS-WS-059,10.10.3.159,agarcia,https://npmjs.com/search,npmjs.com,2026-02-12T18:25:39.355Z,9,Chrome +SLS-WS-059,10.10.3.159,agarcia,https://pypi.org/search,pypi.org,2026-02-20T01:02:27.751Z,13,Edge +SLS-WS-059,10.10.3.159,agarcia,https://outlook.office365.com/,outlook.office365.com,2026-02-18T00:57:34.455Z,7,Chrome +SLS-WS-059,10.10.3.159,agarcia,https://www.tiktok.com/play,TikTok - Make Your Day,2026-02-18T14:45:13.315Z,10,Chrome +SLS-WS-059,10.10.3.159,agarcia,https://dc-01.acme.local/docs,dc-01.acme.local,2026-02-15T14:53:36.194Z,11,Chrome +SLS-WS-059,10.10.3.159,agarcia,https://windowsupdate.com/api,windowsupdate.com,2026-02-17T08:05:39.716Z,1,Chrome +SLS-WS-059,10.10.3.159,agarcia,https://file-01.acme.local/api,file-01.acme.local,2026-02-12T23:25:46.707Z,18,Edge +SLS-WS-059,10.10.3.159,agarcia,https://npmjs.com/dashboard,npmjs.com,2026-02-20T05:33:49.113Z,9,Edge +ENG-WS-060,10.10.1.160,agarcia,https://acme.local/dashboard,acme.local,2026-02-10T19:11:57.868Z,10,Chrome +ENG-WS-060,10.10.1.160,agarcia,https://googleapis.com/inbox,googleapis.com,2026-02-17T21:58:07.342Z,17,Edge +ENG-WS-060,10.10.1.160,agarcia,https://store.steampowered.com/search?q=free+movies,Steam Store,2026-02-18T06:10:35.284Z,14,Chrome +ENG-WS-060,10.10.1.160,agarcia,https://login.microsoftonline.com/inbox,login.microsoftonline.com,2026-02-15T05:11:02.691Z,8,Edge +ENG-WS-060,10.10.1.160,agarcia,https://googleapis.com/dashboard,googleapis.com,2026-02-19T09:41:12.972Z,13,Chrome +ENG-WS-060,10.10.1.160,agarcia,https://stackoverflow.com/,stackoverflow.com,2026-02-20T07:13:01.522Z,9,Edge +ENG-WS-060,10.10.1.160,agarcia,https://googleapis.com/dashboard,googleapis.com,2026-02-12T19:55:03.568Z,14,Chrome +ENG-WS-060,10.10.1.160,agarcia,https://npmjs.com/inbox,npmjs.com,2026-02-16T10:11:44.359Z,10,Edge +ENG-WS-060,10.10.1.160,agarcia,https://acme.sharepoint.com/dashboard,acme.sharepoint.com,2026-02-17T01:20:14.954Z,1,Chrome +ENG-WS-060,10.10.1.160,agarcia,https://stackoverflow.com/docs,stackoverflow.com,2026-02-12T22:56:37.405Z,3,Chrome +ENG-WS-060,10.10.1.160,agarcia,https://outlook.office365.com/api,outlook.office365.com,2026-02-18T11:10:25.262Z,15,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://time.windows.com/api,time.windows.com,2026-02-12T22:35:35.218Z,5,Edge +LEG-WS-061,10.10.2.161,emartinez,https://windowsupdate.com/api,windowsupdate.com,2026-02-16T09:05:04.664Z,10,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://dc-01.acme.local/api,dc-01.acme.local,2026-02-16T06:57:11.582Z,4,Edge +LEG-WS-061,10.10.2.161,emartinez,https://www.ebay.com/,www.ebay.com,2026-02-13T22:38:29.986Z,16,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://github.com/dashboard,github.com,2026-02-17T22:20:44.975Z,13,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://dc-01.acme.local/,dc-01.acme.local,2026-02-14T08:02:34.701Z,16,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://akamai.net/search,akamai.net,2026-02-19T17:05:29.183Z,15,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://akamai.net/inbox,akamai.net,2026-02-11T13:35:38.093Z,11,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://update.microsoft.com/search,update.microsoft.com,2026-02-19T18:05:17.862Z,9,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://outlook.office365.com/docs,outlook.office365.com,2026-02-20T02:43:23.569Z,11,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://stackoverflow.com/api,stackoverflow.com,2026-02-19T03:51:21.722Z,11,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://stackoverflow.com/search,stackoverflow.com,2026-02-15T03:03:28.119Z,7,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-19T22:13:49.086Z,4,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://time.windows.com/docs,time.windows.com,2026-02-13T05:19:11.314Z,18,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://open.spotify.com/play,open.spotify.com,2026-02-16T16:48:58.654Z,17,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://time.windows.com/inbox,time.windows.com,2026-02-11T09:19:22.843Z,12,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://stackoverflow.com/dashboard,stackoverflow.com,2026-02-12T10:51:40.714Z,6,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://update.microsoft.com/dashboard,update.microsoft.com,2026-02-16T11:08:30.273Z,2,Edge +LEG-WS-061,10.10.2.161,emartinez,https://pypi.org/,pypi.org,2026-02-10T14:54:30.705Z,19,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://discord.gg/home,discord.gg,2026-02-12T16:28:01.051Z,20,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://time.windows.com/docs,time.windows.com,2026-02-11T22:05:04.620Z,16,Edge +LEG-WS-061,10.10.2.161,emartinez,https://www.netflix.com/category/popular,Netflix - Watch TV Shows,2026-02-19T19:27:06.898Z,16,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://time.windows.com/inbox,time.windows.com,2026-02-11T08:28:07.258Z,14,Edge +LEG-WS-061,10.10.2.161,emartinez,https://github.com/inbox,github.com,2026-02-16T17:35:01.016Z,15,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://teams.microsoft.com/,teams.microsoft.com,2026-02-13T03:06:05.850Z,15,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://graph.microsoft.com/search,graph.microsoft.com,2026-02-12T10:38:23.900Z,11,Edge +LEG-WS-061,10.10.2.161,emartinez,https://cloudflare.com/search,cloudflare.com,2026-02-11T19:34:54.857Z,15,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://graph.microsoft.com/,graph.microsoft.com,2026-02-15T17:37:01.325Z,19,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://google.com/docs,google.com,2026-02-17T11:34:21.262Z,9,Chrome +LEG-WS-061,10.10.2.161,emartinez,https://steamcommunity.com/play,Steam Store,2026-02-17T00:16:50.507Z,2,Edge +MKT-WS-062,10.10.3.162,emartinez,https://google.com/inbox,google.com,2026-02-16T05:38:34.007Z,10,Edge +MKT-WS-062,10.10.3.162,emartinez,https://dc-02.acme.local/,dc-02.acme.local,2026-02-19T04:48:52.469Z,17,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://google.com/api,google.com,2026-02-11T23:47:15.901Z,1,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://exch-01.acme.local/inbox,exch-01.acme.local,2026-02-12T22:45:37.163Z,20,Edge +MKT-WS-062,10.10.3.162,emartinez,https://github.com/search,github.com,2026-02-17T07:25:58.752Z,14,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://npmjs.com/search,npmjs.com,2026-02-14T14:14:57.557Z,17,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://file-01.acme.local/inbox,file-01.acme.local,2026-02-12T13:08:02.431Z,19,Edge +MKT-WS-062,10.10.3.162,emartinez,https://teams.microsoft.com/docs,teams.microsoft.com,2026-02-18T01:42:44.655Z,7,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://windowsupdate.com/search,windowsupdate.com,2026-02-17T04:41:44.309Z,2,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://dc-02.acme.local/api,dc-02.acme.local,2026-02-13T07:38:14.829Z,19,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://update.microsoft.com/,update.microsoft.com,2026-02-15T18:13:43.744Z,5,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://cloudflare.com/dashboard,cloudflare.com,2026-02-11T11:17:14.172Z,5,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://akamai.net/dashboard,akamai.net,2026-02-14T19:00:01.812Z,9,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://windowsupdate.com/dashboard,windowsupdate.com,2026-02-20T04:16:56.927Z,3,Edge +MKT-WS-062,10.10.3.162,emartinez,https://1337x.to/home,1337x.to,2026-02-17T08:44:51.413Z,17,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://store.steampowered.com/search?q=free+movies,Steam Store,2026-02-10T19:54:58.287Z,6,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://exch-01.acme.local/docs,exch-01.acme.local,2026-02-19T18:04:31.606Z,3,Edge +MKT-WS-062,10.10.3.162,emartinez,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-11T22:23:41.098Z,10,Edge +MKT-WS-062,10.10.3.162,emartinez,https://update.microsoft.com/dashboard,update.microsoft.com,2026-02-20T06:08:01.665Z,2,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://exch-01.acme.local/api,exch-01.acme.local,2026-02-14T03:46:14.878Z,14,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://outlook.office365.com/docs,outlook.office365.com,2026-02-14T22:05:44.212Z,2,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://pokerstars.com/search?q=free+movies,PokerStars - Online Poker,2026-02-19T18:28:34.942Z,12,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://exch-01.acme.local/docs,exch-01.acme.local,2026-02-19T19:07:27.228Z,17,Edge +MKT-WS-062,10.10.3.162,emartinez,https://time.windows.com/search,time.windows.com,2026-02-16T02:54:28.542Z,7,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://store.steampowered.com/play,Steam Store,2026-02-17T01:45:29.495Z,3,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://time.windows.com/inbox,time.windows.com,2026-02-14T12:52:05.527Z,4,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://pypi.org/dashboard,pypi.org,2026-02-11T04:13:11.488Z,18,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://npmjs.com/,npmjs.com,2026-02-14T01:51:20.097Z,19,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://stackoverflow.com/docs,stackoverflow.com,2026-02-12T18:57:44.272Z,7,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://outlook.office365.com/dashboard,outlook.office365.com,2026-02-17T01:58:04.079Z,3,Chrome +MKT-WS-062,10.10.3.162,emartinez,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-20T14:41:25.089Z,6,Chrome +EXEC-WS-063,10.10.1.163,jsmith,https://dc-01.acme.local/search,dc-01.acme.local,2026-02-17T16:43:22.099Z,3,Chrome +EXEC-WS-063,10.10.1.163,jsmith,https://www.linkedin.com/jobs/watch,www.linkedin.com/jobs,2026-02-19T15:56:12.422Z,17,Chrome +EXEC-WS-063,10.10.1.163,jsmith,https://outlook.office365.com/,outlook.office365.com,2026-02-12T08:25:20.840Z,15,Chrome +EXEC-WS-063,10.10.1.163,jsmith,https://stackoverflow.com/,stackoverflow.com,2026-02-19T23:33:40.583Z,10,Chrome +EXEC-WS-063,10.10.1.163,jsmith,https://googleapis.com/,googleapis.com,2026-02-10T21:31:07.168Z,15,Chrome +EXEC-WS-063,10.10.1.163,jsmith,https://pypi.org/dashboard,pypi.org,2026-02-12T08:31:26.388Z,14,Edge +EXEC-WS-063,10.10.1.163,jsmith,https://graph.microsoft.com/inbox,graph.microsoft.com,2026-02-19T08:53:22.000Z,9,Chrome +EXEC-WS-063,10.10.1.163,jsmith,https://draftkings.com/home,draftkings.com,2026-02-14T10:26:33.978Z,1,Chrome +EXEC-WS-063,10.10.1.163,jsmith,https://time.windows.com/inbox,time.windows.com,2026-02-19T18:40:18.044Z,6,Edge +EXEC-WS-063,10.10.1.163,jsmith,https://googleapis.com/docs,googleapis.com,2026-02-19T15:40:17.078Z,13,Edge +EXEC-WS-063,10.10.1.163,jsmith,https://store.steampowered.com/home,Steam Store,2026-02-13T08:16:33.842Z,4,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://stackoverflow.com/docs,stackoverflow.com,2026-02-10T15:46:59.771Z,19,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://npmjs.com/,npmjs.com,2026-02-11T04:15:57.282Z,1,Edge +IT-WS-064,10.10.2.164,svc_backup,https://www.pornhub.com/category/popular,Pornhub,2026-02-15T18:10:45.232Z,11,Edge +IT-WS-064,10.10.2.164,svc_backup,https://teams.microsoft.com/docs,teams.microsoft.com,2026-02-18T01:00:37.032Z,17,Edge +IT-WS-064,10.10.2.164,svc_backup,https://acme.local/search,acme.local,2026-02-19T19:07:20.914Z,10,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://npmjs.com/inbox,npmjs.com,2026-02-15T20:21:58.309Z,5,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://cloudflare.com/,cloudflare.com,2026-02-16T15:57:34.020Z,16,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://acme.sharepoint.com/dashboard,acme.sharepoint.com,2026-02-11T14:06:40.262Z,16,Edge +IT-WS-064,10.10.2.164,svc_backup,https://update.microsoft.com/dashboard,update.microsoft.com,2026-02-15T17:41:56.103Z,8,Edge +IT-WS-064,10.10.2.164,svc_backup,https://cdn.jsdelivr.net/api,cdn.jsdelivr.net,2026-02-13T12:32:49.417Z,7,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://1337x.to/watch,1337x.to,2026-02-18T17:26:52.677Z,1,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://pypi.org/api,pypi.org,2026-02-13T23:58:16.352Z,6,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://acme.sharepoint.com/search,acme.sharepoint.com,2026-02-20T14:38:24.946Z,20,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://outlook.office365.com/docs,outlook.office365.com,2026-02-17T21:11:59.720Z,10,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://graph.microsoft.com/,graph.microsoft.com,2026-02-17T12:30:52.739Z,4,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://cdn.jsdelivr.net/dashboard,cdn.jsdelivr.net,2026-02-16T05:14:28.592Z,16,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://time.windows.com/search,time.windows.com,2026-02-19T20:48:18.294Z,1,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://file-01.acme.local/api,file-01.acme.local,2026-02-13T21:27:33.098Z,20,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://fitgirl-repacks.site/home,fitgirl-repacks.site,2026-02-15T04:30:33.098Z,15,Edge +IT-WS-064,10.10.2.164,svc_backup,https://github.com/inbox,github.com,2026-02-16T07:52:23.619Z,12,Edge +IT-WS-064,10.10.2.164,svc_backup,https://dc-01.acme.local/api,dc-01.acme.local,2026-02-13T04:29:38.019Z,16,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://windowsupdate.com/search,windowsupdate.com,2026-02-19T18:57:39.060Z,11,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://aws.amazon.com/docs,aws.amazon.com,2026-02-14T16:05:05.220Z,6,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://store.steampowered.com/home,Steam Store,2026-02-20T15:48:46.847Z,17,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://dc-02.acme.local/inbox,dc-02.acme.local,2026-02-20T01:44:58.299Z,5,Chrome +IT-WS-064,10.10.2.164,svc_backup,https://npmjs.com/dashboard,npmjs.com,2026-02-14T00:39:30.153Z,17,Chrome +HR-WS-065,10.10.3.165,jsmith,https://outlook.office365.com/,outlook.office365.com,2026-02-12T11:19:49.536Z,16,Chrome +HR-WS-065,10.10.3.165,jsmith,https://github.com/search,github.com,2026-02-16T03:10:56.605Z,5,Chrome +HR-WS-065,10.10.3.165,jsmith,https://pypi.org/search,pypi.org,2026-02-16T16:08:58.202Z,9,Chrome +HR-WS-065,10.10.3.165,jsmith,https://1337x.to/category/popular,1337x.to,2026-02-19T21:03:56.354Z,20,Edge +HR-WS-065,10.10.3.165,jsmith,https://www.bet365.com/watch,Bet365 - Sports Betting,2026-02-17T06:48:13.258Z,16,Chrome +HR-WS-065,10.10.3.165,jsmith,https://file-01.acme.local/,file-01.acme.local,2026-02-18T15:19:47.824Z,11,Chrome +HR-WS-065,10.10.3.165,jsmith,https://dc-01.acme.local/dashboard,dc-01.acme.local,2026-02-10T11:11:25.972Z,2,Edge +HR-WS-065,10.10.3.165,jsmith,https://stackoverflow.com/inbox,stackoverflow.com,2026-02-18T11:54:47.028Z,6,Chrome +HR-WS-065,10.10.3.165,jsmith,https://github.com/,github.com,2026-02-10T12:26:04.257Z,12,Chrome +HR-WS-065,10.10.3.165,jsmith,https://www.glassdoor.com/,www.glassdoor.com,2026-02-15T09:21:52.763Z,4,Chrome +HR-WS-065,10.10.3.165,jsmith,https://update.microsoft.com/dashboard,update.microsoft.com,2026-02-19T13:35:48.895Z,15,Chrome +HR-WS-065,10.10.3.165,jsmith,https://dc-01.acme.local/,dc-01.acme.local,2026-02-16T03:29:54.886Z,18,Chrome +HR-WS-065,10.10.3.165,jsmith,https://cdn.jsdelivr.net/api,cdn.jsdelivr.net,2026-02-17T04:11:48.818Z,3,Chrome +HR-WS-065,10.10.3.165,jsmith,https://dc-02.acme.local/api,dc-02.acme.local,2026-02-20T04:07:06.918Z,3,Chrome +HR-WS-065,10.10.3.165,jsmith,https://acme.local/inbox,acme.local,2026-02-17T00:14:53.273Z,17,Edge +HR-WS-065,10.10.3.165,jsmith,https://acme.local/search,acme.local,2026-02-19T03:03:55.158Z,15,Chrome +HR-WS-065,10.10.3.165,jsmith,https://xvideos.com/watch,xvideos.com,2026-02-19T04:06:48.331Z,18,Chrome +HR-WS-065,10.10.3.165,jsmith,https://update.microsoft.com/dashboard,update.microsoft.com,2026-02-17T11:49:26.844Z,16,Chrome +HR-WS-065,10.10.3.165,jsmith,https://graph.microsoft.com/dashboard,graph.microsoft.com,2026-02-17T08:31:12.616Z,18,Chrome +HR-WS-065,10.10.3.165,jsmith,https://aws.amazon.com/inbox,aws.amazon.com,2026-02-12T08:20:40.932Z,15,Chrome +HR-WS-065,10.10.3.165,jsmith,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-18T23:12:15.272Z,14,Chrome +HR-WS-065,10.10.3.165,jsmith,https://google.com/api,google.com,2026-02-11T09:04:14.581Z,7,Chrome +HR-WS-065,10.10.3.165,jsmith,https://www.glassdoor.com/home,www.glassdoor.com,2026-02-20T00:57:34.152Z,6,Chrome +FIN-WS-066,10.10.1.166,fthompson,https://login.microsoftonline.com/search,login.microsoftonline.com,2026-02-17T02:44:20.534Z,16,Edge +FIN-WS-066,10.10.1.166,fthompson,https://npmjs.com/docs,npmjs.com,2026-02-14T16:11:06.253Z,3,Chrome +FIN-WS-066,10.10.1.166,fthompson,https://login.microsoftonline.com/docs,login.microsoftonline.com,2026-02-19T06:18:49.359Z,6,Chrome +FIN-WS-066,10.10.1.166,fthompson,https://npmjs.com/inbox,npmjs.com,2026-02-10T09:08:28.756Z,14,Chrome +FIN-WS-066,10.10.1.166,fthompson,https://aws.amazon.com/inbox,aws.amazon.com,2026-02-11T22:25:02.943Z,18,Chrome +FIN-WS-066,10.10.1.166,fthompson,https://exch-01.acme.local/,exch-01.acme.local,2026-02-16T21:03:40.368Z,6,Edge +FIN-WS-066,10.10.1.166,fthompson,https://file-01.acme.local/inbox,file-01.acme.local,2026-02-18T11:47:31.286Z,3,Chrome +FIN-WS-066,10.10.1.166,fthompson,https://googleapis.com/inbox,googleapis.com,2026-02-17T01:29:39.922Z,12,Chrome +FIN-WS-066,10.10.1.166,fthompson,https://stackoverflow.com/docs,stackoverflow.com,2026-02-20T12:46:17.285Z,17,Chrome +FIN-WS-066,10.10.1.166,fthompson,https://www.bet365.com/watch,Bet365 - Sports Betting,2026-02-17T12:39:13.137Z,5,Chrome +FIN-WS-066,10.10.1.166,fthompson,https://pokerstars.com/,PokerStars - Online Poker,2026-02-11T01:07:08.617Z,3,Chrome +FIN-WS-066,10.10.1.166,fthompson,https://acme.local/,acme.local,2026-02-15T08:02:25.307Z,17,Chrome +FIN-WS-066,10.10.1.166,fthompson,https://teams.microsoft.com/inbox,teams.microsoft.com,2026-02-11T19:26:34.380Z,3,Edge +FIN-WS-066,10.10.1.166,fthompson,https://acme.sharepoint.com/inbox,acme.sharepoint.com,2026-02-18T09:42:31.074Z,14,Chrome +FIN-WS-066,10.10.1.166,fthompson,https://graph.microsoft.com/,graph.microsoft.com,2026-02-11T03:21:30.019Z,15,Chrome +FIN-WS-066,10.10.1.166,fthompson,https://outlook.office365.com/inbox,outlook.office365.com,2026-02-13T23:00:15.358Z,2,Chrome +FIN-WS-066,10.10.1.166,fthompson,https://googleapis.com/,googleapis.com,2026-02-11T00:42:32.497Z,15,Chrome +FIN-WS-066,10.10.1.166,fthompson,https://login.microsoftonline.com/dashboard,login.microsoftonline.com,2026-02-18T16:52:28.919Z,4,Chrome +FIN-WS-066,10.10.1.166,fthompson,https://teams.microsoft.com/api,teams.microsoft.com,2026-02-10T13:48:44.835Z,10,Chrome +SLS-WS-067,10.10.2.167,bwilson,https://file-01.acme.local/,file-01.acme.local,2026-02-19T01:47:24.941Z,4,Edge +SLS-WS-067,10.10.2.167,bwilson,https://cdn.jsdelivr.net/api,cdn.jsdelivr.net,2026-02-10T22:59:33.354Z,17,Edge +SLS-WS-067,10.10.2.167,bwilson,https://outlook.office365.com/docs,outlook.office365.com,2026-02-16T05:31:43.332Z,19,Chrome +SLS-WS-067,10.10.2.167,bwilson,https://login.microsoftonline.com/search,login.microsoftonline.com,2026-02-16T18:07:05.727Z,4,Chrome +SLS-WS-067,10.10.2.167,bwilson,https://acme.local/search,acme.local,2026-02-19T19:47:25.212Z,4,Chrome +SLS-WS-067,10.10.2.167,bwilson,https://fitgirl-repacks.site/,fitgirl-repacks.site,2026-02-13T11:44:52.319Z,9,Chrome +SLS-WS-067,10.10.2.167,bwilson,https://npmjs.com/,npmjs.com,2026-02-18T12:54:55.655Z,11,Chrome +SLS-WS-067,10.10.2.167,bwilson,https://www.indeed.com/watch,Indeed - Job Search,2026-02-16T02:53:07.345Z,10,Edge +SLS-WS-067,10.10.2.167,bwilson,https://cloudflare.com/,cloudflare.com,2026-02-18T20:08:11.193Z,15,Chrome +SLS-WS-067,10.10.2.167,bwilson,https://stackoverflow.com/inbox,stackoverflow.com,2026-02-12T06:13:01.644Z,16,Chrome +SLS-WS-067,10.10.2.167,bwilson,https://acme.local/inbox,acme.local,2026-02-12T08:13:41.823Z,10,Chrome +SLS-WS-067,10.10.2.167,bwilson,https://googleapis.com/,googleapis.com,2026-02-19T15:25:49.566Z,18,Edge +SLS-WS-067,10.10.2.167,bwilson,https://stackoverflow.com/docs,stackoverflow.com,2026-02-19T21:41:03.346Z,13,Chrome +SLS-WS-067,10.10.2.167,bwilson,https://aws.amazon.com/inbox,aws.amazon.com,2026-02-17T07:22:02.416Z,17,Chrome +SLS-WS-067,10.10.2.167,bwilson,https://teams.microsoft.com/,teams.microsoft.com,2026-02-16T00:20:06.292Z,12,Chrome +ENG-WS-068,10.10.3.168,gwhite,https://login.microsoftonline.com/search,login.microsoftonline.com,2026-02-19T02:54:22.155Z,12,Chrome +ENG-WS-068,10.10.3.168,gwhite,https://stackoverflow.com/docs,stackoverflow.com,2026-02-20T14:36:21.712Z,15,Chrome +ENG-WS-068,10.10.3.168,gwhite,https://www.ebay.com/play,www.ebay.com,2026-02-11T09:51:11.995Z,2,Chrome +ENG-WS-068,10.10.3.168,gwhite,https://outlook.office365.com/docs,outlook.office365.com,2026-02-10T13:14:28.203Z,7,Chrome +ENG-WS-068,10.10.3.168,gwhite,https://github.com/dashboard,github.com,2026-02-11T19:59:11.492Z,17,Chrome +ENG-WS-068,10.10.3.168,gwhite,https://cdn.jsdelivr.net/dashboard,cdn.jsdelivr.net,2026-02-10T13:17:21.652Z,15,Chrome +ENG-WS-068,10.10.3.168,gwhite,https://stackoverflow.com/dashboard,stackoverflow.com,2026-02-10T08:10:05.716Z,17,Chrome +ENG-WS-068,10.10.3.168,gwhite,https://time.windows.com/search,time.windows.com,2026-02-13T17:49:00.361Z,2,Chrome +ENG-WS-068,10.10.3.168,gwhite,https://npmjs.com/,npmjs.com,2026-02-13T00:37:47.062Z,10,Edge +ENG-WS-068,10.10.3.168,gwhite,https://dc-01.acme.local/api,dc-01.acme.local,2026-02-14T14:40:44.972Z,20,Edge +ENG-WS-068,10.10.3.168,gwhite,https://windowsupdate.com/search,windowsupdate.com,2026-02-18T08:51:02.345Z,20,Chrome +ENG-WS-068,10.10.3.168,gwhite,https://www.ebay.com/search?q=free+movies,www.ebay.com,2026-02-11T10:53:05.552Z,8,Edge +LEG-WS-069,10.10.1.169,cjohnson,https://cloudflare.com/inbox,cloudflare.com,2026-02-13T12:03:45.135Z,3,Chrome +LEG-WS-069,10.10.1.169,cjohnson,https://windowsupdate.com/dashboard,windowsupdate.com,2026-02-18T01:13:23.651Z,20,Edge +LEG-WS-069,10.10.1.169,cjohnson,https://pypi.org/inbox,pypi.org,2026-02-15T01:27:57.688Z,7,Chrome +LEG-WS-069,10.10.1.169,cjohnson,https://cloudflare.com/inbox,cloudflare.com,2026-02-14T14:53:52.686Z,13,Chrome +LEG-WS-069,10.10.1.169,cjohnson,https://www.netflix.com/,Netflix - Watch TV Shows,2026-02-11T13:08:20.740Z,16,Chrome +LEG-WS-069,10.10.1.169,cjohnson,https://www.reddit.com/play,www.reddit.com,2026-02-17T04:36:34.630Z,15,Edge +LEG-WS-069,10.10.1.169,cjohnson,https://acme.local/,acme.local,2026-02-16T07:33:52.669Z,15,Chrome +LEG-WS-069,10.10.1.169,cjohnson,https://1337x.to/search?q=free+movies,1337x.to,2026-02-13T10:41:59.295Z,2,Chrome +LEG-WS-069,10.10.1.169,cjohnson,https://windowsupdate.com/inbox,windowsupdate.com,2026-02-13T18:47:38.552Z,19,Chrome +LEG-WS-069,10.10.1.169,cjohnson,https://github.com/inbox,github.com,2026-02-14T10:42:26.560Z,11,Chrome +LEG-WS-069,10.10.1.169,cjohnson,https://googleapis.com/,googleapis.com,2026-02-20T02:03:14.710Z,6,Chrome +LEG-WS-069,10.10.1.169,cjohnson,https://windowsupdate.com/dashboard,windowsupdate.com,2026-02-15T18:13:16.972Z,20,Chrome +LEG-WS-069,10.10.1.169,cjohnson,https://aws.amazon.com/dashboard,aws.amazon.com,2026-02-13T01:49:54.248Z,15,Chrome +LEG-WS-069,10.10.1.169,cjohnson,https://graph.microsoft.com/dashboard,graph.microsoft.com,2026-02-10T14:42:18.400Z,9,Chrome +LEG-WS-069,10.10.1.169,cjohnson,https://akamai.net/,akamai.net,2026-02-15T11:57:15.723Z,5,Edge +LEG-WS-069,10.10.1.169,cjohnson,https://googleapis.com/inbox,googleapis.com,2026-02-14T22:06:19.066Z,8,Chrome +LEG-WS-069,10.10.1.169,cjohnson,https://login.microsoftonline.com/api,login.microsoftonline.com,2026-02-19T17:09:27.582Z,7,Chrome +LEG-WS-069,10.10.1.169,cjohnson,https://www.indeed.com/home,Indeed - Job Search,2026-02-13T18:25:39.489Z,17,Chrome +MKT-WS-070,10.10.2.170,dlee,https://www.tiktok.com/watch,TikTok - Make Your Day,2026-02-18T01:12:48.278Z,11,Chrome +MKT-WS-070,10.10.2.170,dlee,https://teams.microsoft.com/docs,teams.microsoft.com,2026-02-18T11:03:44.940Z,10,Chrome +MKT-WS-070,10.10.2.170,dlee,https://graph.microsoft.com/api,graph.microsoft.com,2026-02-19T20:13:43.595Z,12,Chrome +MKT-WS-070,10.10.2.170,dlee,https://pypi.org/,pypi.org,2026-02-13T16:52:04.404Z,1,Chrome +MKT-WS-070,10.10.2.170,dlee,https://google.com/dashboard,google.com,2026-02-12T15:24:01.658Z,17,Edge +MKT-WS-070,10.10.2.170,dlee,https://update.microsoft.com/,update.microsoft.com,2026-02-11T04:28:15.242Z,2,Edge +MKT-WS-070,10.10.2.170,dlee,https://graph.microsoft.com/api,graph.microsoft.com,2026-02-18T17:46:39.742Z,13,Edge +MKT-WS-070,10.10.2.170,dlee,https://www.amazon.com/category/popular,Amazon.com - Shopping,2026-02-18T10:26:15.767Z,16,Chrome +MKT-WS-070,10.10.2.170,dlee,https://pypi.org/api,pypi.org,2026-02-17T09:49:24.694Z,4,Chrome +MKT-WS-070,10.10.2.170,dlee,https://cdn.jsdelivr.net/docs,cdn.jsdelivr.net,2026-02-14T03:50:44.461Z,1,Chrome +MKT-WS-070,10.10.2.170,dlee,https://cdn.jsdelivr.net/docs,cdn.jsdelivr.net,2026-02-14T17:57:12.748Z,17,Chrome +MKT-WS-070,10.10.2.170,dlee,https://aws.amazon.com/inbox,aws.amazon.com,2026-02-16T09:42:00.505Z,19,Edge +MKT-WS-070,10.10.2.170,dlee,https://akamai.net/docs,akamai.net,2026-02-11T13:51:39.461Z,12,Chrome +MKT-WS-070,10.10.2.170,dlee,https://www.linkedin.com/jobs/search?q=free+movies,www.linkedin.com/jobs,2026-02-11T03:36:21.725Z,16,Edge +MKT-WS-070,10.10.2.170,dlee,https://hulu.com/watch,hulu.com,2026-02-19T03:26:16.072Z,3,Chrome +MKT-WS-070,10.10.2.170,dlee,https://acme.sharepoint.com/inbox,acme.sharepoint.com,2026-02-18T08:43:15.032Z,14,Chrome +MKT-WS-070,10.10.2.170,dlee,https://stackoverflow.com/api,stackoverflow.com,2026-02-15T14:46:28.994Z,17,Chrome +MKT-WS-070,10.10.2.170,dlee,https://npmjs.com/docs,npmjs.com,2026-02-18T16:51:56.539Z,13,Chrome +MKT-WS-070,10.10.2.170,dlee,https://aws.amazon.com/inbox,aws.amazon.com,2026-02-15T00:40:02.460Z,5,Chrome +MKT-WS-070,10.10.2.170,dlee,https://outlook.office365.com/search,outlook.office365.com,2026-02-13T22:03:00.379Z,9,Edge +MKT-WS-070,10.10.2.170,dlee,https://akamai.net/search,akamai.net,2026-02-20T07:09:56.781Z,6,Chrome +MKT-WS-070,10.10.2.170,dlee,https://outlook.office365.com/dashboard,outlook.office365.com,2026-02-20T07:08:55.289Z,9,Chrome +MKT-WS-070,10.10.2.170,dlee,https://dc-01.acme.local/,dc-01.acme.local,2026-02-12T05:46:19.773Z,17,Chrome +MKT-WS-070,10.10.2.170,dlee,https://file-01.acme.local/dashboard,file-01.acme.local,2026-02-16T12:35:26.012Z,3,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://pypi.org/api,pypi.org,2026-02-18T23:19:27.288Z,13,Edge +EXEC-WS-071,10.10.3.171,hbrown,https://googleapis.com/,googleapis.com,2026-02-19T02:40:56.270Z,17,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://npmjs.com/docs,npmjs.com,2026-02-12T00:22:48.527Z,1,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://acme.sharepoint.com/dashboard,acme.sharepoint.com,2026-02-17T23:29:47.704Z,13,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://acme.local/search,acme.local,2026-02-10T08:50:07.273Z,4,Edge +EXEC-WS-071,10.10.3.171,hbrown,https://cloudflare.com/dashboard,cloudflare.com,2026-02-12T04:40:50.314Z,20,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://update.microsoft.com/api,update.microsoft.com,2026-02-16T07:01:24.586Z,15,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://www.glassdoor.com/category/popular,www.glassdoor.com,2026-02-12T14:46:27.177Z,18,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://akamai.net/search,akamai.net,2026-02-10T18:54:26.407Z,8,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://www.glassdoor.com/search?q=free+movies,www.glassdoor.com,2026-02-19T22:40:23.353Z,5,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://teams.microsoft.com/,teams.microsoft.com,2026-02-19T20:29:36.979Z,16,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://update.microsoft.com/search,update.microsoft.com,2026-02-13T19:54:04.020Z,6,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://www.bet365.com/play,Bet365 - Sports Betting,2026-02-15T20:31:43.596Z,14,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://stackoverflow.com/api,stackoverflow.com,2026-02-19T06:43:40.372Z,12,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://discord.gg/category/popular,discord.gg,2026-02-17T18:28:15.152Z,19,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://acme.sharepoint.com/search,acme.sharepoint.com,2026-02-13T02:45:25.609Z,15,Edge +EXEC-WS-071,10.10.3.171,hbrown,https://exch-01.acme.local/search,exch-01.acme.local,2026-02-15T11:55:49.192Z,3,Edge +EXEC-WS-071,10.10.3.171,hbrown,https://time.windows.com/docs,time.windows.com,2026-02-13T10:50:57.289Z,18,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://dc-02.acme.local/,dc-02.acme.local,2026-02-13T16:22:32.513Z,16,Edge +EXEC-WS-071,10.10.3.171,hbrown,https://hulu.com/,hulu.com,2026-02-17T13:52:10.226Z,20,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://github.com/dashboard,github.com,2026-02-19T21:22:54.440Z,19,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://npmjs.com/docs,npmjs.com,2026-02-16T08:11:22.663Z,14,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://windowsupdate.com/,windowsupdate.com,2026-02-15T11:49:57.869Z,3,Chrome +EXEC-WS-071,10.10.3.171,hbrown,https://exch-01.acme.local/,exch-01.acme.local,2026-02-18T19:22:32.923Z,8,Edge +IT-WS-072,10.10.1.172,fthompson,https://googleapis.com/api,googleapis.com,2026-02-18T20:47:13.589Z,10,Edge +IT-WS-072,10.10.1.172,fthompson,https://acme.sharepoint.com/search,acme.sharepoint.com,2026-02-15T06:54:28.451Z,9,Chrome +IT-WS-072,10.10.1.172,fthompson,https://windowsupdate.com/api,windowsupdate.com,2026-02-13T18:56:14.679Z,4,Chrome +IT-WS-072,10.10.1.172,fthompson,https://exch-01.acme.local/api,exch-01.acme.local,2026-02-16T05:24:31.816Z,14,Chrome +IT-WS-072,10.10.1.172,fthompson,https://cdn.jsdelivr.net/inbox,cdn.jsdelivr.net,2026-02-14T12:28:01.469Z,9,Chrome +IT-WS-072,10.10.1.172,fthompson,https://windowsupdate.com/dashboard,windowsupdate.com,2026-02-11T07:11:33.066Z,16,Chrome +IT-WS-072,10.10.1.172,fthompson,https://github.com/dashboard,github.com,2026-02-16T11:29:59.842Z,10,Chrome +IT-WS-072,10.10.1.172,fthompson,https://aws.amazon.com/dashboard,aws.amazon.com,2026-02-12T07:02:22.228Z,13,Edge +IT-WS-072,10.10.1.172,fthompson,https://windowsupdate.com/api,windowsupdate.com,2026-02-15T11:15:26.782Z,1,Chrome +IT-WS-072,10.10.1.172,fthompson,https://akamai.net/inbox,akamai.net,2026-02-20T05:55:03.618Z,11,Chrome +IT-WS-072,10.10.1.172,fthompson,https://pypi.org/,pypi.org,2026-02-12T01:18:20.052Z,2,Chrome +IT-WS-072,10.10.1.172,fthompson,https://teams.microsoft.com/search,teams.microsoft.com,2026-02-16T02:53:38.745Z,18,Chrome +IT-WS-072,10.10.1.172,fthompson,https://google.com/docs,google.com,2026-02-13T03:29:25.014Z,8,Chrome +IT-WS-072,10.10.1.172,fthompson,https://github.com/inbox,github.com,2026-02-15T08:28:07.045Z,11,Edge +IT-WS-072,10.10.1.172,fthompson,https://www.glassdoor.com/search?q=free+movies,www.glassdoor.com,2026-02-16T05:37:41.624Z,8,Chrome +IT-WS-072,10.10.1.172,fthompson,https://time.windows.com/api,time.windows.com,2026-02-16T15:48:30.591Z,2,Chrome +IT-WS-072,10.10.1.172,fthompson,https://dc-02.acme.local/,dc-02.acme.local,2026-02-16T09:56:35.210Z,10,Edge +IT-WS-072,10.10.1.172,fthompson,https://dc-02.acme.local/inbox,dc-02.acme.local,2026-02-19T20:39:01.326Z,4,Chrome +IT-WS-072,10.10.1.172,fthompson,https://npmjs.com/,npmjs.com,2026-02-19T02:15:31.160Z,9,Chrome +IT-WS-072,10.10.1.172,fthompson,https://time.windows.com/,time.windows.com,2026-02-14T17:39:46.323Z,14,Edge +IT-WS-072,10.10.1.172,fthompson,https://dc-01.acme.local/search,dc-01.acme.local,2026-02-12T19:38:02.276Z,3,Chrome +IT-WS-072,10.10.1.172,fthompson,https://github.com/docs,github.com,2026-02-15T12:33:58.611Z,1,Chrome +IT-WS-072,10.10.1.172,fthompson,https://google.com/api,google.com,2026-02-10T17:09:17.050Z,5,Edge +HR-WS-073,10.10.2.173,fthompson,https://dc-02.acme.local/,dc-02.acme.local,2026-02-13T21:55:09.254Z,13,Chrome +HR-WS-073,10.10.2.173,fthompson,https://file-01.acme.local/dashboard,file-01.acme.local,2026-02-10T13:04:14.402Z,4,Chrome +HR-WS-073,10.10.2.173,fthompson,https://windowsupdate.com/api,windowsupdate.com,2026-02-10T23:18:26.357Z,1,Chrome +HR-WS-073,10.10.2.173,fthompson,https://exch-01.acme.local/,exch-01.acme.local,2026-02-13T09:13:27.418Z,8,Chrome +HR-WS-073,10.10.2.173,fthompson,https://graph.microsoft.com/api,graph.microsoft.com,2026-02-11T07:24:17.459Z,16,Chrome +HR-WS-073,10.10.2.173,fthompson,https://www.shein.com/watch,www.shein.com,2026-02-12T19:55:58.617Z,17,Chrome +HR-WS-073,10.10.2.173,fthompson,https://update.microsoft.com/inbox,update.microsoft.com,2026-02-15T22:42:28.004Z,19,Edge +HR-WS-073,10.10.2.173,fthompson,https://update.microsoft.com/docs,update.microsoft.com,2026-02-15T13:33:14.582Z,4,Chrome +HR-WS-073,10.10.2.173,fthompson,https://pypi.org/api,pypi.org,2026-02-19T14:43:22.407Z,2,Chrome +HR-WS-073,10.10.2.173,fthompson,https://dc-01.acme.local/docs,dc-01.acme.local,2026-02-18T04:26:19.751Z,13,Edge +HR-WS-073,10.10.2.173,fthompson,https://aws.amazon.com/api,aws.amazon.com,2026-02-12T12:59:34.283Z,8,Chrome +HR-WS-073,10.10.2.173,fthompson,https://aws.amazon.com/docs,aws.amazon.com,2026-02-13T15:51:54.066Z,16,Edge +FIN-WS-074,10.10.3.174,idavis,https://update.microsoft.com/api,update.microsoft.com,2026-02-18T20:44:25.166Z,6,Edge +FIN-WS-074,10.10.3.174,idavis,https://stackoverflow.com/api,stackoverflow.com,2026-02-20T01:03:12.884Z,5,Edge +FIN-WS-074,10.10.3.174,idavis,https://acme.local/api,acme.local,2026-02-18T02:39:23.673Z,6,Chrome +FIN-WS-074,10.10.3.174,idavis,https://www.amazon.com/category/popular,Amazon.com - Shopping,2026-02-12T14:12:42.303Z,5,Edge +FIN-WS-074,10.10.3.174,idavis,https://file-01.acme.local/search,file-01.acme.local,2026-02-11T09:04:32.141Z,12,Edge +FIN-WS-074,10.10.3.174,idavis,https://dc-01.acme.local/inbox,dc-01.acme.local,2026-02-19T18:46:30.529Z,15,Edge +FIN-WS-074,10.10.3.174,idavis,https://www.tiktok.com/category/popular,TikTok - Make Your Day,2026-02-11T04:55:55.607Z,17,Chrome +FIN-WS-074,10.10.3.174,idavis,https://googleapis.com/inbox,googleapis.com,2026-02-20T17:10:52.050Z,5,Chrome +FIN-WS-074,10.10.3.174,idavis,https://akamai.net/docs,akamai.net,2026-02-13T05:59:32.918Z,6,Chrome +FIN-WS-074,10.10.3.174,idavis,https://exch-01.acme.local/dashboard,exch-01.acme.local,2026-02-15T11:04:10.573Z,6,Edge +FIN-WS-074,10.10.3.174,idavis,https://npmjs.com/docs,npmjs.com,2026-02-11T21:14:18.335Z,20,Edge +FIN-WS-074,10.10.3.174,idavis,https://dc-01.acme.local/dashboard,dc-01.acme.local,2026-02-16T00:48:22.337Z,1,Edge +FIN-WS-074,10.10.3.174,idavis,https://stackoverflow.com/search,stackoverflow.com,2026-02-14T21:42:24.666Z,12,Chrome +FIN-WS-074,10.10.3.174,idavis,https://exch-01.acme.local/api,exch-01.acme.local,2026-02-13T03:24:30.894Z,20,Chrome +FIN-WS-074,10.10.3.174,idavis,https://dc-02.acme.local/docs,dc-02.acme.local,2026-02-18T12:16:01.908Z,20,Chrome +FIN-WS-074,10.10.3.174,idavis,https://pypi.org/docs,pypi.org,2026-02-14T19:05:24.895Z,7,Edge +FIN-WS-074,10.10.3.174,idavis,https://acme.sharepoint.com/api,acme.sharepoint.com,2026-02-15T21:14:49.440Z,7,Chrome +FIN-WS-074,10.10.3.174,idavis,https://exch-01.acme.local/inbox,exch-01.acme.local,2026-02-14T23:50:52.396Z,8,Chrome +SLS-WS-075,10.10.1.175,hbrown,https://www.glassdoor.com/home,www.glassdoor.com,2026-02-20T12:34:45.795Z,3,Chrome +SLS-WS-075,10.10.1.175,hbrown,https://github.com/api,github.com,2026-02-12T13:53:45.348Z,5,Chrome +SLS-WS-075,10.10.1.175,hbrown,https://github.com/inbox,github.com,2026-02-18T01:36:26.013Z,13,Chrome +SLS-WS-075,10.10.1.175,hbrown,https://cdn.jsdelivr.net/,cdn.jsdelivr.net,2026-02-14T00:35:04.938Z,4,Chrome +SLS-WS-075,10.10.1.175,hbrown,https://www.glassdoor.com/category/popular,www.glassdoor.com,2026-02-11T05:42:47.487Z,18,Edge +SLS-WS-075,10.10.1.175,hbrown,https://acme.local/docs,acme.local,2026-02-14T03:30:49.291Z,6,Chrome +SLS-WS-075,10.10.1.175,hbrown,https://graph.microsoft.com/docs,graph.microsoft.com,2026-02-13T19:48:25.630Z,18,Chrome +SLS-WS-075,10.10.1.175,hbrown,https://pokerstars.com/category/popular,PokerStars - Online Poker,2026-02-17T22:35:12.187Z,9,Chrome +SLS-WS-075,10.10.1.175,hbrown,https://hulu.com/play,hulu.com,2026-02-12T08:08:25.838Z,5,Chrome +SLS-WS-075,10.10.1.175,hbrown,https://aws.amazon.com/inbox,aws.amazon.com,2026-02-11T16:01:07.872Z,2,Chrome +SLS-WS-075,10.10.1.175,hbrown,https://cdn.jsdelivr.net/docs,cdn.jsdelivr.net,2026-02-20T08:56:50.327Z,18,Edge +SLS-WS-075,10.10.1.175,hbrown,https://aws.amazon.com/search,aws.amazon.com,2026-02-18T09:39:53.489Z,2,Chrome +SLS-WS-075,10.10.1.175,hbrown,https://aws.amazon.com/dashboard,aws.amazon.com,2026-02-17T13:55:45.861Z,14,Chrome +SLS-WS-075,10.10.1.175,hbrown,https://pypi.org/,pypi.org,2026-02-16T20:09:39.842Z,14,Chrome +SLS-WS-075,10.10.1.175,hbrown,https://google.com/search,google.com,2026-02-18T16:36:00.659Z,20,Chrome +SLS-WS-075,10.10.1.175,hbrown,https://stackoverflow.com/dashboard,stackoverflow.com,2026-02-20T04:42:13.157Z,19,Edge +SLS-WS-075,10.10.1.175,hbrown,https://file-01.acme.local/dashboard,file-01.acme.local,2026-02-18T11:20:09.703Z,3,Chrome +SLS-WS-075,10.10.1.175,hbrown,https://update.microsoft.com/dashboard,update.microsoft.com,2026-02-20T01:57:39.506Z,10,Edge +SLS-WS-075,10.10.1.175,hbrown,https://acme.sharepoint.com/api,acme.sharepoint.com,2026-02-10T11:33:18.648Z,19,Edge +SLS-WS-075,10.10.1.175,hbrown,https://xvideos.com/watch,xvideos.com,2026-02-12T07:35:47.532Z,20,Chrome diff --git a/backend/tests/test_csvs/08_sysmon_network.csv b/backend/tests/test_csvs/08_sysmon_network.csv new file mode 100644 index 0000000..ee4d3d0 --- /dev/null +++ b/backend/tests/test_csvs/08_sysmon_network.csv @@ -0,0 +1,2518 @@ +Hostname,EventTime,EventID,Image,User,Protocol,SourceIp,SourcePort,DestinationIp,DestinationPort,DestinationHostname +HR-WS-001,2026-02-17T14:12:13.418Z,3,C:\Program Files\chrome.exe,ACME\dlee,tcp,10.10.2.101,57098,129.202.97.224,3389, +HR-WS-001,2026-02-12T02:54:59.451Z,3,C:\Windows\System32\svchost.exe,ACME\dlee,udp,10.10.2.101,51471,217.202.165.200,8080,google.com +HR-WS-001,2026-02-11T07:17:06.984Z,3,C:\Windows\System32\SearchHost.exe,ACME\dlee,udp,10.10.2.101,58767,10.10.2.110,8080, +HR-WS-001,2026-02-12T07:58:08.177Z,3,C:\Windows\System32\MsMpEng.exe,ACME\dlee,udp,10.10.2.101,61435,211.129.211.205,389, +HR-WS-001,2026-02-13T06:27:10.565Z,3,C:\Windows\System32\outlook.exe,ACME\dlee,tcp,10.10.2.101,55676,111.9.26.135,443, +HR-WS-001,2026-02-12T10:18:09.171Z,3,C:\Windows\System32\explorer.exe,ACME\dlee,udp,10.10.2.101,64209,191.6.156.220,443, +HR-WS-001,2026-02-11T09:12:38.045Z,3,C:\Program Files\msedge.exe,ACME\dlee,tcp,10.10.2.101,49419,212.10.186.55,53, +HR-WS-001,2026-02-14T19:50:24.649Z,3,C:\Program Files\chrome.exe,ACME\dlee,tcp,10.10.2.101,49835,70.82.74.61,3389, +HR-WS-001,2026-02-10T17:48:13.868Z,3,C:\Windows\System32\winlogon.exe,ACME\dlee,udp,10.10.2.101,52414,38.105.87.18,80, +HR-WS-001,2026-02-13T06:22:37.124Z,3,C:\Windows\System32\explorer.exe,ACME\dlee,tcp,10.10.2.101,50252,218.250.154.145,389, +HR-WS-001,2026-02-20T10:55:36.723Z,3,C:\Program Files\chrome.exe,ACME\dlee,tcp,10.10.2.101,59308,118.207.218.172,53, +HR-WS-001,2026-02-13T17:45:27.852Z,3,C:\Windows\System32\services.exe,ACME\dlee,tcp,10.10.2.101,54540,10.10.2.128,445,pypi.org +HR-WS-001,2026-02-18T18:47:52.135Z,3,C:\Program Files\msedge.exe,ACME\dlee,tcp,10.10.2.101,56629,10.10.3.162,8080, +HR-WS-001,2026-02-18T20:28:15.108Z,3,C:\Program Files\msedge.exe,ACME\dlee,udp,10.10.2.101,56431,10.10.3.135,80, +HR-WS-001,2026-02-14T11:33:31.574Z,3,C:\Program Files\msedge.exe,ACME\dlee,udp,10.10.2.101,64697,204.146.109.107,3389, +HR-WS-001,2026-02-15T04:17:13.330Z,3,C:\Windows\System32\OneDrive.exe,ACME\dlee,tcp,10.10.2.101,59510,99.114.15.238,445, +HR-WS-001,2026-02-14T22:58:46.021Z,3,C:\Windows\System32\cmd.exe,ACME\dlee,tcp,10.10.2.101,52502,136.123.206.54,8080, +HR-WS-001,2026-02-18T21:54:48.565Z,3,C:\Windows\System32\dwm.exe,ACME\dlee,tcp,10.10.2.101,54830,10.10.2.173,3389, +HR-WS-001,2026-02-20T13:24:29.766Z,3,C:\Windows\System32\powershell.exe,ACME\dlee,tcp,10.10.2.101,53452,10.10.2.128,443, +HR-WS-001,2026-02-11T14:24:11.114Z,3,C:\Program Files\msedge.exe,ACME\dlee,udp,10.10.2.101,53776,34.73.213.78,443, +HR-WS-001,2026-02-14T17:17:45.542Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\dlee,udp,10.10.2.101,52691,10.10.1.157,3389, +HR-WS-001,2026-02-11T15:10:47.242Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\dlee,udp,10.10.2.101,56836,32.248.132.61,389, +HR-WS-001,2026-02-16T15:10:06.928Z,3,C:\Windows\System32\dwm.exe,ACME\dlee,udp,10.10.2.101,61924,10.10.2.113,445, +HR-WS-001,2026-02-13T08:59:26.480Z,3,C:\Windows\System32\svchost.exe,ACME\dlee,udp,10.10.2.101,52787,10.10.1.172,3389, +HR-WS-001,2026-02-15T10:54:21.289Z,3,C:\Windows\System32\csrss.exe,ACME\dlee,udp,10.10.2.101,59834,10.10.2.119,8080, +HR-WS-001,2026-02-19T21:53:44.488Z,3,C:\Windows\System32\csrss.exe,ACME\dlee,udp,10.10.2.101,50467,97.217.154.201,443, +HR-WS-001,2026-02-20T16:21:19.296Z,3,C:\Windows\System32\teams.exe,ACME\dlee,tcp,10.10.2.101,60032,10.10.1.12,3389, +HR-WS-001,2026-02-17T07:00:17.985Z,3,C:\Windows\System32\taskhostw.exe,ACME\dlee,tcp,10.10.2.101,50490,10.10.3.138,80, +HR-WS-001,2026-02-12T18:37:58.835Z,3,C:\Windows\System32\winlogon.exe,ACME\dlee,tcp,10.10.2.101,57801,170.197.126.93,443, +HR-WS-001,2026-02-11T00:37:31.607Z,3,C:\Windows\System32\explorer.exe,ACME\dlee,udp,10.10.2.101,51176,74.214.187.59,53, +HR-WS-001,2026-02-16T07:05:02.332Z,3,C:\Program Files\msedge.exe,ACME\dlee,tcp,10.10.2.101,50583,10.10.2.164,8080, +HR-WS-001,2026-02-12T10:11:34.849Z,3,C:\Windows\System32\outlook.exe,ACME\dlee,udp,10.10.2.101,64344,185.25.98.10,389, +HR-WS-001,2026-02-19T12:23:29.035Z,3,C:\Program Files\chrome.exe,ACME\dlee,tcp,10.10.2.101,57217,10.10.1.112,389, +HR-WS-001,2026-02-19T00:26:20.454Z,3,C:\Windows\System32\explorer.exe,ACME\dlee,udp,10.10.2.101,53174,10.10.3.102,389, +HR-WS-001,2026-02-14T19:58:21.475Z,3,C:\Windows\System32\SearchHost.exe,ACME\dlee,udp,10.10.2.101,61649,52.36.187.73,53, +HR-WS-001,2026-02-13T23:00:54.896Z,3,C:\Windows\System32\lsass.exe,ACME\dlee,tcp,10.10.2.101,62300,10.10.1.109,53, +HR-WS-001,2026-02-18T12:12:22.193Z,3,C:\Windows\System32\cmd.exe,ACME\dlee,tcp,10.10.2.101,59092,122.100.247.10,80, +HR-WS-001,2026-02-18T15:24:34.789Z,3,C:\Windows\System32\powershell.exe,ACME\dlee,tcp,10.10.2.101,49356,10.10.3.168,389, +HR-WS-001,2026-02-18T17:25:03.291Z,3,C:\Windows\System32\cmd.exe,ACME\dlee,udp,10.10.2.101,62209,89.28.208.164,443, +HR-WS-001,2026-02-20T04:27:56.403Z,3,C:\Windows\System32\dwm.exe,ACME\dlee,tcp,10.10.2.101,56169,10.10.1.142,445,github.com +HR-WS-001,2026-02-11T16:21:40.646Z,3,C:\Windows\System32\outlook.exe,ACME\dlee,tcp,10.10.2.101,65473,2.105.252.251,80, +HR-WS-001,2026-02-12T20:29:02.895Z,3,C:\Windows\System32\winlogon.exe,ACME\dlee,udp,10.10.2.101,63642,61.202.214.212,445,time.windows.com +HR-WS-001,2026-02-10T19:04:59.598Z,3,C:\Windows\System32\services.exe,ACME\dlee,udp,10.10.2.101,56900,4.137.196.165,3389,googleapis.com +HR-WS-001,2026-02-17T03:14:59.881Z,3,C:\Windows\System32\cmd.exe,ACME\dlee,udp,10.10.2.101,51951,147.96.140.69,53, +HR-WS-001,2026-02-20T04:06:11.117Z,3,C:\Windows\System32\teams.exe,ACME\dlee,udp,10.10.2.101,60068,203.224.77.107,445, +HR-WS-001,2026-02-15T18:20:07.376Z,3,C:\Program Files\msedge.exe,ACME\dlee,tcp,10.10.2.101,63368,200.54.133.185,445,stackoverflow.com +HR-WS-001,2026-02-19T19:41:17.565Z,3,C:\Windows\System32\powershell.exe,ACME\dlee,tcp,10.10.2.101,53193,69.6.45.182,443, +HR-WS-001,2026-02-18T14:27:29.660Z,3,C:\Program Files\chrome.exe,ACME\dlee,tcp,10.10.2.101,50169,10.10.3.138,53, +FIN-WS-002,2026-02-18T11:54:42.686Z,3,C:\Program Files\chrome.exe,ACME\bwilson,tcp,10.10.3.102,62430,10.10.3.135,53, +FIN-WS-002,2026-02-16T01:53:38.423Z,3,C:\Windows\System32\cmd.exe,ACME\bwilson,udp,10.10.3.102,52733,10.10.1.121,53, +FIN-WS-002,2026-02-16T06:47:15.709Z,3,C:\Windows\System32\notepad.exe,ACME\bwilson,udp,10.10.3.102,50108,10.10.1.10,445,www.bet365.com +FIN-WS-002,2026-02-10T15:39:44.401Z,3,C:\Windows\System32\System,ACME\bwilson,tcp,10.10.3.102,53998,10.10.3.108,53, +FIN-WS-002,2026-02-20T15:50:23.138Z,3,C:\Windows\System32\smss.exe,ACME\bwilson,udp,10.10.3.102,60600,180.224.34.80,389, +FIN-WS-002,2026-02-16T19:07:41.052Z,3,C:\Windows\System32\taskhostw.exe,ACME\bwilson,udp,10.10.3.102,59094,10.10.1.115,8080, +FIN-WS-002,2026-02-14T12:52:40.266Z,3,C:\Windows\System32\svchost.exe,ACME\bwilson,udp,10.10.3.102,51424,167.158.209.170,443, +FIN-WS-002,2026-02-11T19:10:41.637Z,3,C:\Windows\System32\lsass.exe,ACME\bwilson,udp,10.10.3.102,51329,35.170.211.149,445, +FIN-WS-002,2026-02-12T04:45:41.075Z,3,C:\Program Files\chrome.exe,ACME\bwilson,tcp,10.10.3.102,58733,10.10.3.114,445, +FIN-WS-002,2026-02-16T15:45:17.731Z,3,C:\Windows\System32\smss.exe,ACME\bwilson,tcp,10.10.3.102,58162,125.176.62.54,53, +FIN-WS-002,2026-02-20T01:06:28.687Z,3,C:\Windows\System32\powershell.exe,ACME\bwilson,udp,10.10.3.102,53642,87.19.21.191,389,graph.microsoft.com +FIN-WS-002,2026-02-20T12:30:06.088Z,3,C:\Windows\System32\cmd.exe,ACME\bwilson,udp,10.10.3.102,58698,32.54.68.28,80, +FIN-WS-002,2026-02-18T09:28:11.355Z,3,C:\Windows\System32\code.exe,ACME\bwilson,udp,10.10.3.102,57515,101.86.192.162,445,npmjs.com +FIN-WS-002,2026-02-20T07:22:20.659Z,3,C:\Program Files\chrome.exe,ACME\bwilson,tcp,10.10.3.102,60376,185.81.172.242,443, +FIN-WS-002,2026-02-11T03:49:45.518Z,3,C:\Windows\System32\services.exe,ACME\bwilson,udp,10.10.3.102,59336,56.62.33.80,445, +FIN-WS-002,2026-02-11T03:32:24.215Z,3,C:\Windows\System32\smss.exe,ACME\bwilson,tcp,10.10.3.102,49718,178.231.4.66,445, +FIN-WS-002,2026-02-18T05:21:18.597Z,3,C:\Windows\System32\taskhostw.exe,ACME\bwilson,tcp,10.10.3.102,58224,212.117.175.224,53, +FIN-WS-002,2026-02-12T10:28:01.513Z,3,C:\Program Files\chrome.exe,ACME\bwilson,tcp,10.10.3.102,63511,10.10.2.167,53, +FIN-WS-002,2026-02-14T22:27:38.140Z,3,C:\Program Files\chrome.exe,ACME\bwilson,tcp,10.10.3.102,49352,68.230.212.214,389, +FIN-WS-002,2026-02-11T20:56:34.314Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.3.102,58053,193.51.248.16,80,github.com +FIN-WS-002,2026-02-20T02:17:06.846Z,3,C:\Windows\System32\teams.exe,ACME\bwilson,udp,10.10.3.102,57078,216.10.44.199,443, +FIN-WS-002,2026-02-15T10:41:36.351Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.3.102,49758,10.10.3.105,445, +SLS-WS-003,2026-02-13T05:53:24.609Z,3,C:\Windows\System32\explorer.exe,ACME\admin,tcp,10.10.1.103,50796,170.171.217.93,8080, +SLS-WS-003,2026-02-18T16:12:06.047Z,3,C:\Windows\System32\MsMpEng.exe,ACME\admin,udp,10.10.1.103,59556,127.42.210.18,443, +SLS-WS-003,2026-02-17T14:38:59.958Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.1.103,52231,145.169.132.225,8080,stackoverflow.com +SLS-WS-003,2026-02-15T14:45:41.535Z,3,C:\Windows\System32\smss.exe,ACME\admin,tcp,10.10.1.103,57064,133.56.142.199,80, +SLS-WS-003,2026-02-14T15:10:28.413Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.1.103,62292,10.10.1.175,3389, +SLS-WS-003,2026-02-10T17:04:38.242Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.1.103,52217,10.10.1.148,8080,googleapis.com +SLS-WS-003,2026-02-14T12:24:46.125Z,3,C:\Windows\System32\teams.exe,ACME\admin,udp,10.10.1.103,64662,10.10.3.171,80, +SLS-WS-003,2026-02-17T03:17:15.256Z,3,C:\Windows\System32\taskhostw.exe,ACME\admin,udp,10.10.1.103,59426,124.84.21.49,80, +SLS-WS-003,2026-02-13T22:08:00.547Z,3,C:\Windows\System32\winlogon.exe,ACME\admin,tcp,10.10.1.103,62203,174.117.244.39,443, +SLS-WS-003,2026-02-11T02:34:20.930Z,3,C:\Windows\System32\OneDrive.exe,ACME\admin,tcp,10.10.1.103,50145,10.10.2.116,389, +SLS-WS-003,2026-02-11T07:29:29.783Z,3,C:\Windows\System32\services.exe,ACME\admin,tcp,10.10.1.103,52328,10.10.3.135,80, +SLS-WS-003,2026-02-19T15:25:38.315Z,3,C:\Windows\System32\taskhostw.exe,ACME\admin,tcp,10.10.1.103,54594,134.13.232.120,80, +SLS-WS-003,2026-02-16T16:20:01.604Z,3,C:\Windows\System32\cmd.exe,ACME\admin,udp,10.10.1.103,56550,10.10.2.161,389, +SLS-WS-003,2026-02-16T18:58:12.021Z,3,C:\Windows\System32\taskhostw.exe,ACME\admin,udp,10.10.1.103,54820,64.166.141.221,8080, +SLS-WS-003,2026-02-14T09:44:16.417Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.1.103,60426,185.24.4.49,445, +SLS-WS-003,2026-02-20T03:07:51.152Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.1.103,65372,10.35.169.17,389, +SLS-WS-003,2026-02-14T11:07:52.229Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.1.103,61092,10.10.3.138,445, +SLS-WS-003,2026-02-19T08:32:16.946Z,3,C:\Windows\System32\powershell.exe,ACME\admin,udp,10.10.1.103,59304,10.10.1.118,8080, +SLS-WS-003,2026-02-12T03:58:54.794Z,3,C:\Windows\System32\winlogon.exe,ACME\admin,udp,10.10.1.103,60610,82.227.36.70,443, +SLS-WS-003,2026-02-16T05:52:22.299Z,3,C:\Windows\System32\MsMpEng.exe,ACME\admin,udp,10.10.1.103,63945,10.10.1.11,53,akamai.net +SLS-WS-003,2026-02-14T23:09:15.086Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.1.103,60971,86.211.213.135,53, +SLS-WS-003,2026-02-12T07:04:50.497Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.1.103,53620,44.96.76.71,443, +SLS-WS-003,2026-02-20T10:36:23.586Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.1.103,50339,149.144.99.158,80,akamai.net +SLS-WS-003,2026-02-10T23:25:53.047Z,3,C:\Windows\System32\powershell.exe,ACME\admin,udp,10.10.1.103,50478,147.152.59.80,80, +SLS-WS-003,2026-02-11T19:07:18.436Z,3,C:\Windows\System32\winlogon.exe,ACME\admin,udp,10.10.1.103,52326,212.133.49.146,80,time.windows.com +SLS-WS-003,2026-02-16T19:43:37.961Z,3,C:\Windows\System32\lsass.exe,ACME\admin,tcp,10.10.1.103,62720,10.10.3.123,389, +SLS-WS-003,2026-02-15T03:49:07.302Z,3,C:\Windows\System32\powershell.exe,ACME\admin,tcp,10.10.1.103,64621,10.10.1.172,53, +SLS-WS-003,2026-02-11T13:28:52.502Z,3,C:\Windows\System32\SearchHost.exe,ACME\admin,udp,10.10.1.103,54906,113.106.1.178,80, +SLS-WS-003,2026-02-14T13:05:38.586Z,3,C:\Windows\System32\OneDrive.exe,ACME\admin,udp,10.10.1.103,62046,174.69.247.155,53, +SLS-WS-003,2026-02-12T07:41:35.787Z,3,C:\Windows\System32\winlogon.exe,ACME\admin,udp,10.10.1.103,64192,10.10.1.157,443,teams.microsoft.com +SLS-WS-003,2026-02-13T14:22:34.417Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.1.103,64545,56.187.147.187,53, +SLS-WS-003,2026-02-19T19:14:56.900Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.1.103,61392,75.159.114.31,445,stackoverflow.com +ENG-WS-004,2026-02-10T08:57:22.674Z,3,C:\Windows\System32\powershell.exe,ACME\bwilson,udp,10.10.2.104,61806,10.10.3.138,3389, +ENG-WS-004,2026-02-18T05:30:30.455Z,3,C:\Windows\System32\csrss.exe,ACME\bwilson,tcp,10.10.2.104,64805,77.17.240.35,389, +ENG-WS-004,2026-02-13T15:40:14.906Z,3,C:\Windows\System32\winlogon.exe,ACME\bwilson,tcp,10.10.2.104,65215,27.249.11.139,445, +ENG-WS-004,2026-02-16T22:33:45.347Z,3,C:\Program Files\chrome.exe,ACME\bwilson,tcp,10.10.2.104,63099,10.10.3.102,80, +ENG-WS-004,2026-02-19T02:18:32.303Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.2.104,54747,10.10.3.108,443, +ENG-WS-004,2026-02-18T15:54:45.019Z,3,C:\Windows\System32\spoolsv.exe,ACME\bwilson,tcp,10.10.2.104,56103,130.48.233.145,80, +ENG-WS-004,2026-02-16T11:27:37.322Z,3,C:\Windows\System32\lsass.exe,ACME\bwilson,udp,10.10.2.104,63515,10.10.1.115,389,windowsupdate.com +ENG-WS-004,2026-02-14T20:23:24.889Z,3,C:\Windows\System32\SearchHost.exe,ACME\bwilson,tcp,10.10.2.104,62488,98.250.48.194,3389, +ENG-WS-004,2026-02-20T15:22:56.159Z,3,C:\Windows\System32\smss.exe,ACME\bwilson,tcp,10.10.2.104,53675,127.21.27.114,445,www.bet365.com +ENG-WS-004,2026-02-19T14:24:03.921Z,3,C:\Windows\System32\outlook.exe,ACME\bwilson,tcp,10.10.2.104,62360,10.10.3.10,8080, +ENG-WS-004,2026-02-16T02:32:15.810Z,3,C:\Windows\System32\powershell.exe,ACME\bwilson,udp,10.10.2.104,53887,28.219.243.53,445, +ENG-WS-004,2026-02-13T17:00:41.496Z,3,C:\Windows\System32\lsass.exe,ACME\bwilson,udp,10.10.2.104,52852,189.47.229.129,443,graph.microsoft.com +ENG-WS-004,2026-02-10T11:09:28.603Z,3,C:\Windows\System32\outlook.exe,ACME\bwilson,udp,10.10.2.104,57875,10.10.3.132,389, +ENG-WS-004,2026-02-18T05:50:21.089Z,3,C:\Program Files\msedge.exe,ACME\bwilson,udp,10.10.2.104,52366,129.233.247.26,3389, +ENG-WS-004,2026-02-16T11:42:35.048Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\bwilson,tcp,10.10.2.104,62906,153.119.110.184,389, +ENG-WS-004,2026-02-19T19:24:57.160Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.2.104,61958,69.81.60.81,80, +ENG-WS-004,2026-02-15T09:47:31.187Z,3,C:\Windows\System32\smss.exe,ACME\bwilson,udp,10.10.2.104,60666,10.10.3.120,443, +ENG-WS-004,2026-02-12T17:04:22.923Z,3,C:\Program Files\chrome.exe,ACME\bwilson,tcp,10.10.2.104,62965,10.10.2.11,8080, +ENG-WS-004,2026-02-12T12:55:43.310Z,3,C:\Windows\System32\notepad.exe,ACME\bwilson,tcp,10.10.2.104,57740,10.10.2.158,443, +ENG-WS-004,2026-02-12T19:50:18.916Z,3,C:\Windows\System32\taskhostw.exe,ACME\bwilson,tcp,10.10.2.104,64150,10.10.1.12,80, +ENG-WS-004,2026-02-14T20:59:55.023Z,3,C:\Program Files\msedge.exe,ACME\bwilson,udp,10.10.2.104,59230,10.10.1.163,389, +ENG-WS-004,2026-02-11T03:54:20.207Z,3,C:\Windows\System32\spoolsv.exe,ACME\bwilson,tcp,10.10.2.104,62286,81.196.128.254,445, +ENG-WS-004,2026-02-13T19:23:13.893Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.2.104,60775,10.10.1.12,8080, +ENG-WS-004,2026-02-14T12:33:47.329Z,3,C:\Windows\System32\services.exe,ACME\bwilson,tcp,10.10.2.104,51070,152.26.38.169,445, +ENG-WS-004,2026-02-19T01:27:04.926Z,3,C:\Program Files\chrome.exe,ACME\bwilson,tcp,10.10.2.104,63241,10.10.1.127,443, +ENG-WS-004,2026-02-12T12:23:21.284Z,3,C:\Windows\System32\winlogon.exe,ACME\bwilson,tcp,10.10.2.104,62893,10.10.2.11,80, +ENG-WS-004,2026-02-19T06:21:43.593Z,3,C:\Windows\System32\winlogon.exe,ACME\bwilson,udp,10.10.2.104,55857,10.10.1.124,445, +ENG-WS-004,2026-02-18T15:20:19.785Z,3,C:\Windows\System32\services.exe,ACME\bwilson,tcp,10.10.2.104,49748,192.132.182.135,445, +ENG-WS-004,2026-02-14T15:09:12.350Z,3,C:\Program Files\chrome.exe,ACME\bwilson,udp,10.10.2.104,52624,12.168.192.79,53, +ENG-WS-004,2026-02-17T15:27:34.619Z,3,C:\Windows\System32\winlogon.exe,ACME\bwilson,tcp,10.10.2.104,59508,10.10.1.103,8080, +ENG-WS-004,2026-02-20T10:57:22.304Z,3,C:\Program Files\msedge.exe,ACME\bwilson,udp,10.10.2.104,59184,10.10.2.143,389, +ENG-WS-004,2026-02-16T06:31:33.310Z,3,C:\Windows\System32\powershell.exe,ACME\bwilson,udp,10.10.2.104,54597,222.93.49.78,8080, +ENG-WS-004,2026-02-18T02:06:11.249Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.2.104,51596,10.10.3.147,3389, +ENG-WS-004,2026-02-14T18:45:14.844Z,3,C:\Windows\System32\lsass.exe,ACME\bwilson,udp,10.10.2.104,62979,13.25.90.182,445, +ENG-WS-004,2026-02-19T06:03:06.488Z,3,C:\Windows\System32\services.exe,ACME\bwilson,tcp,10.10.2.104,64342,41.215.192.35,8080, +ENG-WS-004,2026-02-14T02:08:34.983Z,3,C:\Windows\System32\MsMpEng.exe,ACME\bwilson,udp,10.10.2.104,52538,10.10.1.12,53, +ENG-WS-004,2026-02-18T20:33:04.610Z,3,C:\Windows\System32\outlook.exe,ACME\bwilson,udp,10.10.2.104,64367,169.59.39.218,8080, +ENG-WS-004,2026-02-14T19:09:56.918Z,3,C:\Windows\System32\cmd.exe,ACME\bwilson,tcp,10.10.2.104,57365,10.10.1.166,53, +ENG-WS-004,2026-02-12T16:52:01.848Z,3,C:\Windows\System32\winlogon.exe,ACME\bwilson,tcp,10.10.2.104,57473,206.36.198.145,80, +ENG-WS-004,2026-02-11T09:14:57.135Z,3,C:\Windows\System32\dwm.exe,ACME\bwilson,tcp,10.10.2.104,64451,10.10.1.142,80, +ENG-WS-004,2026-02-13T19:51:57.659Z,3,C:\Program Files\chrome.exe,ACME\bwilson,udp,10.10.2.104,56661,153.42.93.238,53, +ENG-WS-004,2026-02-14T12:47:16.117Z,3,C:\Windows\System32\outlook.exe,ACME\bwilson,tcp,10.10.2.104,50636,10.10.2.155,445, +LEG-WS-005,2026-02-18T14:50:14.740Z,3,C:\Windows\System32\lsass.exe,ACME\fthompson,tcp,10.10.3.105,51441,10.10.3.120,8080,graph.microsoft.com +LEG-WS-005,2026-02-18T11:24:55.180Z,3,C:\Windows\System32\spoolsv.exe,ACME\fthompson,tcp,10.10.3.105,60138,34.14.46.92,53, +LEG-WS-005,2026-02-17T01:24:15.047Z,3,C:\Windows\System32\cmd.exe,ACME\fthompson,tcp,10.10.3.105,50849,185.77.237.252,53, +LEG-WS-005,2026-02-18T17:33:01.533Z,3,C:\Windows\System32\outlook.exe,ACME\fthompson,tcp,10.10.3.105,57417,134.241.208.75,389, +LEG-WS-005,2026-02-18T23:49:19.418Z,3,C:\Windows\System32\outlook.exe,ACME\fthompson,udp,10.10.3.105,58213,10.10.3.114,80, +LEG-WS-005,2026-02-11T03:25:19.142Z,3,C:\Windows\System32\winlogon.exe,ACME\fthompson,udp,10.10.3.105,62456,38.54.54.33,443, +LEG-WS-005,2026-02-18T04:50:30.698Z,3,C:\Windows\System32\dwm.exe,ACME\fthompson,udp,10.10.3.105,59940,10.10.3.135,8080, +LEG-WS-005,2026-02-18T21:48:59.480Z,3,C:\Windows\System32\teams.exe,ACME\fthompson,udp,10.10.3.105,62603,220.210.177.224,443, +LEG-WS-005,2026-02-17T16:32:46.029Z,3,C:\Windows\System32\notepad.exe,ACME\fthompson,udp,10.10.3.105,50573,73.98.74.160,3389, +LEG-WS-005,2026-02-11T06:51:47.601Z,3,C:\Windows\System32\lsass.exe,ACME\fthompson,udp,10.10.3.105,52201,10.10.1.13,53, +LEG-WS-005,2026-02-11T15:01:11.095Z,3,C:\Windows\System32\svchost.exe,ACME\fthompson,tcp,10.10.3.105,49446,197.3.104.127,389, +LEG-WS-005,2026-02-19T03:00:31.873Z,3,C:\Windows\System32\services.exe,ACME\fthompson,udp,10.10.3.105,63807,10.10.2.164,80, +LEG-WS-005,2026-02-15T12:10:56.358Z,3,C:\Program Files\chrome.exe,ACME\fthompson,udp,10.10.3.105,62539,10.10.2.125,8080, +LEG-WS-005,2026-02-16T18:50:49.727Z,3,C:\Windows\System32\services.exe,ACME\fthompson,tcp,10.10.3.105,60171,10.10.1.166,80, +LEG-WS-005,2026-02-14T01:33:56.857Z,3,C:\Windows\System32\System,ACME\fthompson,tcp,10.10.3.105,56203,216.14.160.153,8080, +LEG-WS-005,2026-02-10T21:41:11.262Z,3,C:\Program Files\msedge.exe,ACME\fthompson,tcp,10.10.3.105,61086,222.207.68.187,8080, +LEG-WS-005,2026-02-13T05:05:14.928Z,3,C:\Windows\System32\dwm.exe,ACME\fthompson,udp,10.10.3.105,64894,120.17.122.59,445, +LEG-WS-005,2026-02-10T22:09:27.748Z,3,C:\Program Files\chrome.exe,ACME\fthompson,tcp,10.10.3.105,51327,108.228.2.109,80, +LEG-WS-005,2026-02-18T08:28:23.141Z,3,C:\Windows\System32\outlook.exe,ACME\fthompson,udp,10.10.3.105,60662,10.10.3.123,80, +LEG-WS-005,2026-02-18T14:14:37.343Z,3,C:\Windows\System32\spoolsv.exe,ACME\fthompson,tcp,10.10.3.105,63539,10.10.3.126,8080, +LEG-WS-005,2026-02-18T20:10:17.823Z,3,C:\Windows\System32\MsMpEng.exe,ACME\fthompson,tcp,10.10.3.105,60114,10.10.2.11,389, +LEG-WS-005,2026-02-13T07:05:36.783Z,3,C:\Windows\System32\powershell.exe,ACME\fthompson,udp,10.10.3.105,51081,10.10.2.11,445, +LEG-WS-005,2026-02-15T14:49:21.396Z,3,C:\Program Files\msedge.exe,ACME\fthompson,tcp,10.10.3.105,61467,143.172.106.145,389, +LEG-WS-005,2026-02-14T01:00:56.046Z,3,C:\Windows\System32\powershell.exe,ACME\fthompson,udp,10.10.3.105,52473,65.40.32.207,3389, +LEG-WS-005,2026-02-13T22:18:56.598Z,3,C:\Windows\System32\explorer.exe,ACME\fthompson,tcp,10.10.3.105,62392,111.151.108.181,389, +LEG-WS-005,2026-02-15T02:01:21.205Z,3,C:\Program Files\msedge.exe,ACME\fthompson,udp,10.10.3.105,62468,71.72.197.219,8080, +LEG-WS-005,2026-02-19T14:53:59.345Z,3,C:\Program Files\msedge.exe,ACME\fthompson,tcp,10.10.3.105,58277,64.126.18.16,8080, +LEG-WS-005,2026-02-14T19:15:30.319Z,3,C:\Program Files\chrome.exe,ACME\fthompson,udp,10.10.3.105,57086,122.242.60.95,80, +LEG-WS-005,2026-02-11T09:32:57.599Z,3,C:\Program Files\chrome.exe,ACME\fthompson,tcp,10.10.3.105,63352,75.80.33.27,3389, +LEG-WS-005,2026-02-19T08:21:10.244Z,3,C:\Windows\System32\powershell.exe,ACME\fthompson,udp,10.10.3.105,61078,108.3.253.11,80, +MKT-WS-006,2026-02-11T09:06:08.101Z,3,C:\Windows\System32\powershell.exe,ACME\svc_sql,tcp,10.10.1.106,49465,10.10.2.143,3389, +MKT-WS-006,2026-02-15T04:22:31.546Z,3,C:\Program Files\chrome.exe,ACME\svc_sql,udp,10.10.1.106,50333,92.193.230.78,389, +MKT-WS-006,2026-02-11T00:58:51.884Z,3,C:\Windows\System32\outlook.exe,ACME\svc_sql,tcp,10.10.1.106,55651,10.10.1.166,80, +MKT-WS-006,2026-02-15T23:16:08.262Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,tcp,10.10.1.106,59364,159.41.153.68,53, +MKT-WS-006,2026-02-13T21:39:11.068Z,3,C:\Windows\System32\explorer.exe,ACME\svc_sql,udp,10.10.1.106,57383,63.70.244.183,443, +MKT-WS-006,2026-02-20T11:43:01.277Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_sql,tcp,10.10.1.106,64563,146.71.69.128,53, +MKT-WS-006,2026-02-15T15:03:42.804Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_sql,tcp,10.10.1.106,53449,10.10.1.11,3389, +MKT-WS-006,2026-02-19T18:28:51.577Z,3,C:\Windows\System32\notepad.exe,ACME\svc_sql,udp,10.10.1.106,63369,83.98.59.194,8080,dc-01.acme.local +MKT-WS-006,2026-02-10T18:28:30.095Z,3,C:\Windows\System32\OneDrive.exe,ACME\svc_sql,udp,10.10.1.106,53898,10.10.2.155,80, +MKT-WS-006,2026-02-18T14:51:41.917Z,3,C:\Windows\System32\OneDrive.exe,ACME\svc_sql,tcp,10.10.1.106,51131,10.10.2.137,53, +MKT-WS-006,2026-02-13T10:47:08.470Z,3,C:\Windows\System32\powershell.exe,ACME\svc_sql,tcp,10.10.1.106,56415,10.10.1.121,443, +EXEC-WS-007,2026-02-13T12:09:18.115Z,3,C:\Windows\System32\notepad.exe,ACME\admin,udp,10.10.2.107,58327,200.183.17.226,389, +EXEC-WS-007,2026-02-17T22:00:44.514Z,3,C:\Windows\System32\teams.exe,ACME\admin,udp,10.10.2.107,58850,182.96.77.218,8080, +EXEC-WS-007,2026-02-12T20:19:33.942Z,3,C:\Windows\System32\spoolsv.exe,ACME\admin,udp,10.10.2.107,53144,10.10.2.137,53, +EXEC-WS-007,2026-02-13T21:41:57.043Z,3,C:\Windows\System32\notepad.exe,ACME\admin,udp,10.10.2.107,60784,10.10.1.106,53, +EXEC-WS-007,2026-02-15T02:48:19.566Z,3,C:\Windows\System32\taskhostw.exe,ACME\admin,udp,10.10.2.107,58114,10.10.3.135,3389, +EXEC-WS-007,2026-02-11T14:55:06.475Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\admin,tcp,10.10.2.107,56462,202.171.108.181,80, +EXEC-WS-007,2026-02-19T05:46:27.422Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.2.107,52468,54.74.41.231,8080, +EXEC-WS-007,2026-02-12T11:43:44.047Z,3,C:\Windows\System32\spoolsv.exe,ACME\admin,tcp,10.10.2.107,50138,10.10.1.112,443, +EXEC-WS-007,2026-02-14T21:16:01.685Z,3,C:\Windows\System32\MsMpEng.exe,ACME\admin,tcp,10.10.2.107,52281,154.127.111.252,80, +EXEC-WS-007,2026-02-12T23:56:30.594Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.2.107,50367,10.10.3.102,53, +EXEC-WS-007,2026-02-14T14:38:41.172Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.2.107,59459,10.10.2.149,8080, +EXEC-WS-007,2026-02-20T01:51:43.906Z,3,C:\Windows\System32\powershell.exe,ACME\admin,tcp,10.10.2.107,61766,97.79.74.225,53, +EXEC-WS-007,2026-02-10T11:46:43.837Z,3,C:\Windows\System32\smss.exe,ACME\admin,udp,10.10.2.107,61020,90.136.159.111,80, +EXEC-WS-007,2026-02-12T06:10:56.944Z,3,C:\Windows\System32\code.exe,ACME\admin,tcp,10.10.2.107,64910,10.10.1.112,445, +EXEC-WS-007,2026-02-16T14:30:21.178Z,3,C:\Windows\System32\services.exe,ACME\admin,udp,10.10.2.107,62845,33.186.95.54,443, +EXEC-WS-007,2026-02-11T17:49:22.397Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.2.107,49561,35.174.17.125,8080, +EXEC-WS-007,2026-02-11T15:45:19.621Z,3,C:\Windows\System32\explorer.exe,ACME\admin,udp,10.10.2.107,59664,10.10.2.119,389, +EXEC-WS-007,2026-02-12T11:18:42.764Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.2.107,60661,10.10.2.161,443, +EXEC-WS-007,2026-02-19T10:44:51.829Z,3,C:\Windows\System32\winlogon.exe,ACME\admin,tcp,10.10.2.107,63644,178.206.224.117,389, +EXEC-WS-007,2026-02-19T12:13:25.390Z,3,C:\Windows\System32\winlogon.exe,ACME\admin,udp,10.10.2.107,62395,10.10.3.153,3389, +EXEC-WS-007,2026-02-15T19:34:22.462Z,3,C:\Windows\System32\explorer.exe,ACME\admin,tcp,10.10.2.107,55606,10.10.3.144,3389, +EXEC-WS-007,2026-02-13T12:31:10.383Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.2.107,54124,157.236.18.237,445, +EXEC-WS-007,2026-02-13T03:47:43.421Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\admin,udp,10.10.2.107,65208,174.118.202.80,445, +EXEC-WS-007,2026-02-14T06:46:06.221Z,3,C:\Windows\System32\notepad.exe,ACME\admin,tcp,10.10.2.107,51178,87.141.62.129,389, +EXEC-WS-007,2026-02-15T06:57:11.552Z,3,C:\Windows\System32\teams.exe,ACME\admin,udp,10.10.2.107,60782,6.224.199.73,443, +EXEC-WS-007,2026-02-13T16:23:02.679Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.2.107,50075,10.10.1.124,80, +EXEC-WS-007,2026-02-10T20:40:37.167Z,3,C:\Windows\System32\code.exe,ACME\admin,tcp,10.10.2.107,64565,10.10.2.161,389, +EXEC-WS-007,2026-02-19T10:43:29.119Z,3,C:\Windows\System32\code.exe,ACME\admin,tcp,10.10.2.107,62396,10.10.1.115,443,time.windows.com +EXEC-WS-007,2026-02-20T12:27:10.761Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.2.107,61754,10.10.2.155,80, +IT-WS-008,2026-02-20T01:07:49.805Z,3,C:\Windows\System32\dwm.exe,ACME\hbrown,udp,10.10.3.108,59527,61.123.200.36,80, +IT-WS-008,2026-02-17T08:37:47.374Z,3,C:\Program Files\chrome.exe,ACME\hbrown,udp,10.10.3.108,60469,11.150.237.251,80, +IT-WS-008,2026-02-15T00:00:40.205Z,3,C:\Windows\System32\powershell.exe,ACME\hbrown,tcp,10.10.3.108,49663,10.10.2.173,445, +IT-WS-008,2026-02-14T09:12:26.997Z,3,C:\Program Files\chrome.exe,ACME\hbrown,tcp,10.10.3.108,51144,10.10.2.149,3389, +IT-WS-008,2026-02-16T18:55:31.623Z,3,C:\Windows\System32\OneDrive.exe,ACME\hbrown,udp,10.10.3.108,63063,10.10.3.159,53, +IT-WS-008,2026-02-14T14:19:45.199Z,3,C:\Windows\System32\taskhostw.exe,ACME\hbrown,tcp,10.10.3.108,64965,132.66.112.229,80, +IT-WS-008,2026-02-12T19:13:17.206Z,3,C:\Program Files\msedge.exe,ACME\hbrown,tcp,10.10.3.108,56906,73.60.185.107,80, +IT-WS-008,2026-02-19T22:14:13.251Z,3,C:\Windows\System32\teams.exe,ACME\hbrown,udp,10.10.3.108,65251,149.24.17.61,8080,akamai.net +IT-WS-008,2026-02-20T11:22:39.601Z,3,C:\Windows\System32\smss.exe,ACME\hbrown,tcp,10.10.3.108,50869,10.10.1.12,445, +IT-WS-008,2026-02-17T00:01:39.195Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\hbrown,udp,10.10.3.108,64820,38.17.4.51,3389, +IT-WS-008,2026-02-12T20:31:47.285Z,3,C:\Windows\System32\explorer.exe,ACME\hbrown,tcp,10.10.3.108,55894,10.10.3.120,80, +IT-WS-008,2026-02-11T20:53:29.074Z,3,C:\Program Files\chrome.exe,ACME\hbrown,udp,10.10.3.108,62348,10.10.3.153,80, +IT-WS-008,2026-02-12T07:28:15.973Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\hbrown,tcp,10.10.3.108,62970,166.250.62.217,80, +IT-WS-008,2026-02-20T14:15:22.302Z,3,C:\Windows\System32\explorer.exe,ACME\hbrown,udp,10.10.3.108,49856,139.94.190.104,8080, +IT-WS-008,2026-02-10T21:49:37.113Z,3,C:\Program Files\msedge.exe,ACME\hbrown,udp,10.10.3.108,62677,10.10.3.102,80, +IT-WS-008,2026-02-12T21:20:48.222Z,3,C:\Windows\System32\winlogon.exe,ACME\hbrown,tcp,10.10.3.108,58184,140.51.86.212,53, +IT-WS-008,2026-02-15T17:13:17.195Z,3,C:\Windows\System32\MsMpEng.exe,ACME\hbrown,udp,10.10.3.108,54974,10.10.3.162,8080, +IT-WS-008,2026-02-14T21:29:41.660Z,3,C:\Windows\System32\cmd.exe,ACME\hbrown,tcp,10.10.3.108,64806,10.10.3.156,445, +IT-WS-008,2026-02-17T09:35:30.069Z,3,C:\Windows\System32\OneDrive.exe,ACME\hbrown,tcp,10.10.3.108,58451,66.61.209.56,443,login.microsoftonline.com +IT-WS-008,2026-02-20T13:16:29.035Z,3,C:\Windows\System32\SearchHost.exe,ACME\hbrown,udp,10.10.3.108,58429,167.61.62.219,53, +IT-WS-008,2026-02-18T05:07:47.218Z,3,C:\Windows\System32\dwm.exe,ACME\hbrown,tcp,10.10.3.108,58013,10.10.3.174,53, +IT-WS-008,2026-02-10T08:36:38.517Z,3,C:\Windows\System32\SearchHost.exe,ACME\hbrown,tcp,10.10.3.108,56288,10.10.3.132,3389, +IT-WS-008,2026-02-18T04:13:21.452Z,3,C:\Windows\System32\winlogon.exe,ACME\hbrown,tcp,10.10.3.108,61621,156.120.93.161,445, +IT-WS-008,2026-02-14T00:31:09.804Z,3,C:\Windows\System32\svchost.exe,ACME\hbrown,tcp,10.10.3.108,65413,153.189.104.222,80, +IT-WS-008,2026-02-14T05:20:58.482Z,3,C:\Program Files\chrome.exe,ACME\hbrown,udp,10.10.3.108,53566,182.162.46.174,53, +IT-WS-008,2026-02-18T05:52:36.140Z,3,C:\Windows\System32\services.exe,ACME\hbrown,udp,10.10.3.108,52157,64.0.241.32,8080, +IT-WS-008,2026-02-17T05:08:40.902Z,3,C:\Windows\System32\svchost.exe,ACME\hbrown,udp,10.10.3.108,53169,80.35.53.180,80, +IT-WS-008,2026-02-17T16:49:11.484Z,3,C:\Windows\System32\OneDrive.exe,ACME\hbrown,tcp,10.10.3.108,61927,164.2.217.177,445, +IT-WS-008,2026-02-13T07:02:42.440Z,3,C:\Windows\System32\lsass.exe,ACME\hbrown,tcp,10.10.3.108,52585,221.240.224.131,445, +IT-WS-008,2026-02-14T02:49:07.106Z,3,C:\Program Files\chrome.exe,ACME\hbrown,udp,10.10.3.108,50119,10.10.2.131,389, +IT-WS-008,2026-02-13T19:35:22.423Z,3,C:\Windows\System32\notepad.exe,ACME\hbrown,udp,10.10.3.108,61482,10.10.3.114,53, +IT-WS-008,2026-02-11T10:42:26.979Z,3,C:\Windows\System32\outlook.exe,ACME\hbrown,tcp,10.10.3.108,59811,183.134.200.151,389, +IT-WS-008,2026-02-12T09:04:16.891Z,3,C:\Windows\System32\lsass.exe,ACME\hbrown,tcp,10.10.3.108,63264,10.10.3.126,443,dc-02.acme.local +IT-WS-008,2026-02-11T01:34:14.907Z,3,C:\Windows\System32\dwm.exe,ACME\hbrown,tcp,10.10.3.108,52766,35.128.10.29,80,npmjs.com +IT-WS-008,2026-02-13T07:10:47.820Z,3,C:\Program Files\msedge.exe,ACME\hbrown,udp,10.10.3.108,52379,158.227.122.190,53, +IT-WS-008,2026-02-12T07:28:53.908Z,3,C:\Windows\System32\taskhostw.exe,ACME\hbrown,udp,10.10.3.108,63752,143.204.243.226,8080, +IT-WS-008,2026-02-18T14:14:01.404Z,3,C:\Windows\System32\dwm.exe,ACME\hbrown,udp,10.10.3.108,56651,27.189.128.10,80, +IT-WS-008,2026-02-14T10:37:18.506Z,3,C:\Program Files\chrome.exe,ACME\hbrown,udp,10.10.3.108,64267,10.10.2.128,53, +IT-WS-008,2026-02-19T22:58:13.097Z,3,C:\Program Files\msedge.exe,ACME\hbrown,tcp,10.10.3.108,65310,10.10.2.143,80, +IT-WS-008,2026-02-10T16:41:49.069Z,3,C:\Program Files\chrome.exe,ACME\hbrown,tcp,10.10.3.108,59675,220.188.191.122,3389, +IT-WS-008,2026-02-19T20:16:52.056Z,3,C:\Program Files\msedge.exe,ACME\hbrown,tcp,10.10.3.108,54926,10.10.3.129,80, +IT-WS-008,2026-02-19T10:40:26.627Z,3,C:\Windows\System32\winlogon.exe,ACME\hbrown,udp,10.10.3.108,57418,126.211.231.179,3389,teams.microsoft.com +IT-WS-008,2026-02-18T17:13:57.715Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\hbrown,tcp,10.10.3.108,61790,57.1.55.39,445, +IT-WS-008,2026-02-15T01:33:44.282Z,3,C:\Windows\System32\lsass.exe,ACME\hbrown,tcp,10.10.3.108,63207,10.10.2.134,445, +IT-WS-008,2026-02-19T15:33:32.592Z,3,C:\Windows\System32\svchost.exe,ACME\hbrown,udp,10.10.3.108,53512,117.33.221.38,445, +IT-WS-008,2026-02-20T04:24:53.575Z,3,C:\Windows\System32\MsMpEng.exe,ACME\hbrown,udp,10.10.3.108,62513,10.10.2.11,3389, +IT-WS-008,2026-02-19T01:56:22.230Z,3,C:\Program Files\msedge.exe,ACME\hbrown,udp,10.10.3.108,60487,10.10.2.146,443,akamai.net +IT-WS-008,2026-02-15T20:42:06.420Z,3,C:\Windows\System32\cmd.exe,ACME\hbrown,tcp,10.10.3.108,63877,6.246.142.51,8080,aws.amazon.com +IT-WS-008,2026-02-13T07:30:13.236Z,3,C:\Program Files\msedge.exe,ACME\hbrown,tcp,10.10.3.108,58971,93.109.116.91,53, +HR-WS-009,2026-02-10T17:10:17.626Z,3,C:\Windows\System32\OneDrive.exe,ACME\cjohnson,tcp,10.10.1.109,65103,39.6.49.191,389, +HR-WS-009,2026-02-15T23:53:26.360Z,3,C:\Windows\System32\OneDrive.exe,ACME\cjohnson,udp,10.10.1.109,57686,207.62.220.134,443, +HR-WS-009,2026-02-10T21:51:08.842Z,3,C:\Windows\System32\taskhostw.exe,ACME\cjohnson,tcp,10.10.1.109,57765,10.10.1.172,8080,exch-01.acme.local +HR-WS-009,2026-02-16T05:50:56.515Z,3,C:\Windows\System32\System,ACME\cjohnson,tcp,10.10.1.109,64269,136.237.3.65,443, +HR-WS-009,2026-02-16T17:50:49.476Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.1.109,55345,50.167.52.146,8080, +HR-WS-009,2026-02-12T20:45:53.101Z,3,C:\Windows\System32\cmd.exe,ACME\cjohnson,tcp,10.10.1.109,56034,7.186.125.242,445, +HR-WS-009,2026-02-13T17:34:28.318Z,3,C:\Windows\System32\winlogon.exe,ACME\cjohnson,tcp,10.10.1.109,60278,53.117.167.191,389, +HR-WS-009,2026-02-11T00:43:19.803Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,udp,10.10.1.109,62604,10.10.1.12,445, +HR-WS-009,2026-02-14T15:46:10.341Z,3,C:\Windows\System32\notepad.exe,ACME\cjohnson,udp,10.10.1.109,58754,35.93.236.51,445,draftkings.com +HR-WS-009,2026-02-20T10:07:46.942Z,3,C:\Windows\System32\dwm.exe,ACME\cjohnson,tcp,10.10.1.109,53769,123.30.150.214,389, +HR-WS-009,2026-02-15T10:08:59.683Z,3,C:\Windows\System32\spoolsv.exe,ACME\cjohnson,tcp,10.10.1.109,49772,10.10.3.126,53, +HR-WS-009,2026-02-20T15:31:55.158Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,udp,10.10.1.109,49510,11.58.124.216,53, +HR-WS-009,2026-02-16T08:53:32.022Z,3,C:\Windows\System32\smss.exe,ACME\cjohnson,udp,10.10.1.109,56245,10.10.2.143,80,outlook.office365.com +HR-WS-009,2026-02-12T01:31:57.131Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.1.109,59558,10.10.1.130,53, +HR-WS-009,2026-02-11T02:31:55.202Z,3,C:\Windows\System32\notepad.exe,ACME\cjohnson,tcp,10.10.1.109,63129,19.4.127.39,389, +HR-WS-009,2026-02-10T11:37:29.782Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,udp,10.10.1.109,51767,10.10.2.104,3389, +HR-WS-009,2026-02-18T01:29:40.871Z,3,C:\Windows\System32\taskhostw.exe,ACME\cjohnson,udp,10.10.1.109,60631,10.10.3.153,3389, +HR-WS-009,2026-02-17T22:26:44.603Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,udp,10.10.1.109,49458,100.37.19.249,53, +FIN-WS-010,2026-02-18T08:13:39.468Z,3,C:\Windows\System32\notepad.exe,ACME\svc_web,udp,10.10.2.110,56764,146.93.108.11,53, +FIN-WS-010,2026-02-14T09:02:50.715Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_web,udp,10.10.2.110,59714,19.114.13.215,8080, +FIN-WS-010,2026-02-14T22:10:46.563Z,3,C:\Windows\System32\powershell.exe,ACME\svc_web,tcp,10.10.2.110,55124,158.192.67.82,445,windowsupdate.com +FIN-WS-010,2026-02-19T19:41:24.103Z,3,C:\Program Files\chrome.exe,ACME\svc_web,tcp,10.10.2.110,62985,36.231.120.124,80, +FIN-WS-010,2026-02-13T20:48:16.758Z,3,C:\Windows\System32\csrss.exe,ACME\svc_web,tcp,10.10.2.110,65280,29.194.32.50,389,pokerstars.com +FIN-WS-010,2026-02-15T01:24:40.860Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_web,tcp,10.10.2.110,61159,10.10.2.125,53, +FIN-WS-010,2026-02-11T06:54:49.979Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.2.110,58876,10.10.3.10,80,cdn.jsdelivr.net +FIN-WS-010,2026-02-12T02:51:01.707Z,3,C:\Windows\System32\smss.exe,ACME\svc_web,udp,10.10.2.110,51914,10.10.3.111,80,cdn.jsdelivr.net +FIN-WS-010,2026-02-14T04:22:19.863Z,3,C:\Windows\System32\notepad.exe,ACME\svc_web,tcp,10.10.2.110,49469,10.10.1.106,443, +FIN-WS-010,2026-02-17T02:54:29.548Z,3,C:\Program Files\chrome.exe,ACME\svc_web,tcp,10.10.2.110,54279,10.10.2.152,80, +FIN-WS-010,2026-02-19T17:10:38.732Z,3,C:\Program Files\msedge.exe,ACME\svc_web,tcp,10.10.2.110,57724,10.10.1.136,443, +FIN-WS-010,2026-02-14T12:52:07.222Z,3,C:\Windows\System32\notepad.exe,ACME\svc_web,tcp,10.10.2.110,58841,129.161.24.254,53,cloudflare.com +FIN-WS-010,2026-02-13T16:45:37.899Z,3,C:\Windows\System32\powershell.exe,ACME\svc_web,tcp,10.10.2.110,56563,10.10.3.141,443, +FIN-WS-010,2026-02-11T15:28:50.389Z,3,C:\Windows\System32\notepad.exe,ACME\svc_web,tcp,10.10.2.110,53564,71.192.156.57,80, +FIN-WS-010,2026-02-11T12:31:00.380Z,3,C:\Windows\System32\lsass.exe,ACME\svc_web,udp,10.10.2.110,63026,10.10.2.146,443,www.bet365.com +FIN-WS-010,2026-02-16T03:04:40.407Z,3,C:\Windows\System32\services.exe,ACME\svc_web,tcp,10.10.2.110,57417,10.10.2.125,389,dc-01.acme.local +FIN-WS-010,2026-02-11T07:49:44.691Z,3,C:\Windows\System32\outlook.exe,ACME\svc_web,udp,10.10.2.110,60560,103.4.61.115,53, +FIN-WS-010,2026-02-14T01:25:13.726Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_web,tcp,10.10.2.110,63157,9.112.38.108,445, +FIN-WS-010,2026-02-10T12:43:39.462Z,3,C:\Windows\System32\svchost.exe,ACME\svc_web,tcp,10.10.2.110,53150,172.213.3.30,3389, +FIN-WS-010,2026-02-13T10:11:55.428Z,3,C:\Program Files\chrome.exe,ACME\svc_web,udp,10.10.2.110,50388,10.10.3.144,389, +FIN-WS-010,2026-02-11T00:52:25.341Z,3,C:\Windows\System32\dwm.exe,ACME\svc_web,tcp,10.10.2.110,50038,86.5.100.206,53, +FIN-WS-010,2026-02-10T12:16:59.930Z,3,C:\Windows\System32\System,ACME\svc_web,udp,10.10.2.110,62910,10.10.3.117,443,draftkings.com +FIN-WS-010,2026-02-11T08:55:41.304Z,3,C:\Windows\System32\System,ACME\svc_web,udp,10.10.2.110,56709,128.118.156.57,8080, +FIN-WS-010,2026-02-16T21:06:24.026Z,3,C:\Program Files\msedge.exe,ACME\svc_web,tcp,10.10.2.110,57146,51.248.215.218,389,pokerstars.com +FIN-WS-010,2026-02-20T07:30:25.346Z,3,C:\Windows\System32\notepad.exe,ACME\svc_web,udp,10.10.2.110,60745,10.10.2.122,53, +FIN-WS-010,2026-02-17T13:40:41.066Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.2.110,51508,10.10.3.156,443, +FIN-WS-010,2026-02-11T15:52:35.124Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.2.110,53482,8.241.140.224,3389, +FIN-WS-010,2026-02-17T09:34:01.084Z,3,C:\Windows\System32\teams.exe,ACME\svc_web,udp,10.10.2.110,49422,193.70.95.32,3389, +FIN-WS-010,2026-02-20T16:51:42.843Z,3,C:\Windows\System32\spoolsv.exe,ACME\svc_web,udp,10.10.2.110,50146,209.70.242.204,80, +FIN-WS-010,2026-02-11T11:18:39.689Z,3,C:\Windows\System32\outlook.exe,ACME\svc_web,tcp,10.10.2.110,61795,10.10.3.168,8080, +FIN-WS-010,2026-02-12T07:01:55.113Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_web,tcp,10.10.2.110,57089,10.10.1.160,389, +FIN-WS-010,2026-02-11T20:20:51.138Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_web,udp,10.10.2.110,60117,10.10.2.152,3389, +FIN-WS-010,2026-02-18T19:20:47.814Z,3,C:\Program Files\chrome.exe,ACME\svc_web,udp,10.10.2.110,56474,170.241.82.220,445, +FIN-WS-010,2026-02-18T05:35:56.030Z,3,C:\Windows\System32\csrss.exe,ACME\svc_web,udp,10.10.2.110,52062,190.150.95.189,389, +FIN-WS-010,2026-02-17T15:26:41.698Z,3,C:\Windows\System32\dwm.exe,ACME\svc_web,udp,10.10.2.110,59639,10.10.3.141,3389, +FIN-WS-010,2026-02-12T03:19:16.290Z,3,C:\Program Files\chrome.exe,ACME\svc_web,tcp,10.10.2.110,56335,3.12.128.238,8080, +FIN-WS-010,2026-02-14T10:01:40.237Z,3,C:\Windows\System32\teams.exe,ACME\svc_web,tcp,10.10.2.110,65232,144.193.146.241,445, +FIN-WS-010,2026-02-17T03:58:22.908Z,3,C:\Windows\System32\powershell.exe,ACME\svc_web,tcp,10.10.2.110,57143,10.10.3.129,445, +FIN-WS-010,2026-02-11T02:01:06.526Z,3,C:\Windows\System32\csrss.exe,ACME\svc_web,tcp,10.10.2.110,51622,20.216.250.38,80, +FIN-WS-010,2026-02-18T04:24:22.479Z,3,C:\Windows\System32\System,ACME\svc_web,udp,10.10.2.110,65078,10.10.1.148,8080,acme.local +FIN-WS-010,2026-02-15T08:53:29.537Z,3,C:\Program Files\msedge.exe,ACME\svc_web,tcp,10.10.2.110,64690,10.10.3.162,389, +SLS-WS-011,2026-02-12T09:41:58.267Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\hbrown,udp,10.10.3.111,63723,52.120.247.64,445, +SLS-WS-011,2026-02-18T20:35:26.461Z,3,C:\Program Files\chrome.exe,ACME\hbrown,tcp,10.10.3.111,53155,10.10.3.150,389, +SLS-WS-011,2026-02-11T19:30:22.302Z,3,C:\Program Files\chrome.exe,ACME\hbrown,tcp,10.10.3.111,60886,10.10.2.113,445, +SLS-WS-011,2026-02-12T10:57:44.301Z,3,C:\Windows\System32\cmd.exe,ACME\hbrown,udp,10.10.3.111,51031,10.10.1.118,389, +SLS-WS-011,2026-02-14T14:18:49.345Z,3,C:\Program Files\chrome.exe,ACME\hbrown,udp,10.10.3.111,57497,52.130.72.99,53, +SLS-WS-011,2026-02-13T20:19:19.157Z,3,C:\Windows\System32\svchost.exe,ACME\hbrown,udp,10.10.3.111,49508,10.10.1.148,80, +SLS-WS-011,2026-02-13T15:14:27.175Z,3,C:\Windows\System32\spoolsv.exe,ACME\hbrown,udp,10.10.3.111,62395,10.10.3.150,3389, +SLS-WS-011,2026-02-18T23:59:26.817Z,3,C:\Windows\System32\svchost.exe,ACME\hbrown,tcp,10.10.3.111,64360,10.10.3.144,80, +SLS-WS-011,2026-02-14T18:51:02.107Z,3,C:\Windows\System32\svchost.exe,ACME\hbrown,udp,10.10.3.111,53548,105.180.165.217,443, +SLS-WS-011,2026-02-19T20:56:44.839Z,3,C:\Windows\System32\cmd.exe,ACME\hbrown,udp,10.10.3.111,60893,106.150.78.12,445, +SLS-WS-011,2026-02-13T10:51:27.717Z,3,C:\Windows\System32\SearchHost.exe,ACME\hbrown,udp,10.10.3.111,58032,194.233.178.134,445, +SLS-WS-011,2026-02-14T13:58:16.370Z,3,C:\Windows\System32\csrss.exe,ACME\hbrown,tcp,10.10.3.111,63781,10.10.1.151,389, +SLS-WS-011,2026-02-20T14:13:09.945Z,3,C:\Windows\System32\lsass.exe,ACME\hbrown,udp,10.10.3.111,65439,10.10.2.134,8080, +SLS-WS-011,2026-02-19T20:45:22.702Z,3,C:\Program Files\chrome.exe,ACME\hbrown,tcp,10.10.3.111,62124,10.10.3.10,8080, +SLS-WS-011,2026-02-11T05:42:46.030Z,3,C:\Windows\System32\spoolsv.exe,ACME\hbrown,udp,10.10.3.111,63203,154.85.178.213,53, +SLS-WS-011,2026-02-16T21:33:21.290Z,3,C:\Program Files\chrome.exe,ACME\hbrown,udp,10.10.3.111,53863,46.72.233.172,53, +SLS-WS-011,2026-02-19T17:18:26.625Z,3,C:\Windows\System32\svchost.exe,ACME\hbrown,tcp,10.10.3.111,60282,198.136.221.124,8080, +SLS-WS-011,2026-02-12T10:26:15.973Z,3,C:\Windows\System32\outlook.exe,ACME\hbrown,tcp,10.10.3.111,57810,10.10.1.121,80, +SLS-WS-011,2026-02-13T10:56:32.540Z,3,C:\Program Files\chrome.exe,ACME\hbrown,tcp,10.10.3.111,54939,9.98.230.135,80, +ENG-WS-012,2026-02-19T10:44:47.101Z,3,C:\Program Files\msedge.exe,ACME\agarcia,udp,10.10.1.112,54883,149.12.197.127,3389, +ENG-WS-012,2026-02-13T19:33:29.763Z,3,C:\Program Files\msedge.exe,ACME\agarcia,udp,10.10.1.112,64805,165.158.237.107,8080, +ENG-WS-012,2026-02-18T23:03:02.264Z,3,C:\Program Files\chrome.exe,ACME\agarcia,udp,10.10.1.112,53778,78.4.1.133,80, +ENG-WS-012,2026-02-15T18:42:42.473Z,3,C:\Windows\System32\svchost.exe,ACME\agarcia,tcp,10.10.1.112,61895,10.10.3.153,8080, +ENG-WS-012,2026-02-12T16:45:39.575Z,3,C:\Windows\System32\notepad.exe,ACME\agarcia,tcp,10.10.1.112,50649,10.10.3.126,8080, +ENG-WS-012,2026-02-11T05:33:28.685Z,3,C:\Windows\System32\spoolsv.exe,ACME\agarcia,udp,10.10.1.112,63686,212.154.224.103,445, +ENG-WS-012,2026-02-19T17:56:14.427Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\agarcia,tcp,10.10.1.112,54550,10.10.3.111,445, +ENG-WS-012,2026-02-16T17:33:42.466Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\agarcia,tcp,10.10.1.112,60000,123.7.89.118,443, +ENG-WS-012,2026-02-13T14:03:09.080Z,3,C:\Program Files\chrome.exe,ACME\agarcia,udp,10.10.1.112,65489,10.10.2.146,8080, +ENG-WS-012,2026-02-10T18:49:55.951Z,3,C:\Windows\System32\svchost.exe,ACME\agarcia,tcp,10.10.1.112,53502,10.10.3.171,8080, +ENG-WS-012,2026-02-19T23:53:19.260Z,3,C:\Windows\System32\svchost.exe,ACME\agarcia,tcp,10.10.1.112,61993,144.234.16.50,443, +ENG-WS-012,2026-02-11T09:49:45.396Z,3,C:\Program Files\chrome.exe,ACME\agarcia,tcp,10.10.1.112,60395,10.46.4.136,8080, +ENG-WS-012,2026-02-19T15:16:31.757Z,3,C:\Windows\System32\spoolsv.exe,ACME\agarcia,udp,10.10.1.112,55466,10.10.1.142,8080, +ENG-WS-012,2026-02-19T09:14:22.891Z,3,C:\Windows\System32\MsMpEng.exe,ACME\agarcia,udp,10.10.1.112,52622,205.147.43.154,8080, +LEG-WS-013,2026-02-12T22:09:50.036Z,3,C:\Windows\System32\notepad.exe,ACME\gwhite,tcp,10.10.2.113,55632,100.14.184.127,389, +LEG-WS-013,2026-02-12T07:24:28.150Z,3,C:\Windows\System32\lsass.exe,ACME\gwhite,udp,10.10.2.113,53281,181.176.100.136,3389, +LEG-WS-013,2026-02-12T18:41:14.634Z,3,C:\Windows\System32\services.exe,ACME\gwhite,tcp,10.10.2.113,64320,10.10.1.172,389, +LEG-WS-013,2026-02-19T13:39:52.424Z,3,C:\Program Files\msedge.exe,ACME\gwhite,udp,10.10.2.113,55781,10.10.2.161,445, +LEG-WS-013,2026-02-17T22:39:42.183Z,3,C:\Program Files\chrome.exe,ACME\gwhite,udp,10.10.2.113,62523,215.185.196.137,445, +LEG-WS-013,2026-02-18T03:12:27.489Z,3,C:\Program Files\msedge.exe,ACME\gwhite,tcp,10.10.2.113,53247,10.10.2.161,80, +LEG-WS-013,2026-02-19T22:45:19.569Z,3,C:\Program Files\msedge.exe,ACME\gwhite,tcp,10.10.2.113,49309,10.10.1.118,443, +LEG-WS-013,2026-02-16T22:58:20.493Z,3,C:\Program Files\msedge.exe,ACME\gwhite,tcp,10.10.2.113,56471,10.10.1.175,53, +LEG-WS-013,2026-02-14T22:28:23.169Z,3,C:\Program Files\chrome.exe,ACME\gwhite,tcp,10.10.2.113,63449,45.229.125.245,3389, +LEG-WS-013,2026-02-19T10:44:06.380Z,3,C:\Windows\System32\explorer.exe,ACME\gwhite,udp,10.10.2.113,54648,102.74.187.2,8080, +LEG-WS-013,2026-02-18T12:46:56.933Z,3,C:\Program Files\msedge.exe,ACME\gwhite,tcp,10.10.2.113,55073,25.31.166.234,443, +LEG-WS-013,2026-02-17T20:21:00.522Z,3,C:\Windows\System32\code.exe,ACME\gwhite,tcp,10.10.2.113,51837,10.10.3.144,8080, +LEG-WS-013,2026-02-10T13:38:45.832Z,3,C:\Program Files\chrome.exe,ACME\gwhite,tcp,10.10.2.113,64362,123.109.61.18,443, +LEG-WS-013,2026-02-16T18:35:29.192Z,3,C:\Windows\System32\SearchHost.exe,ACME\gwhite,tcp,10.10.2.113,53353,62.34.250.76,3389, +LEG-WS-013,2026-02-13T16:03:14.220Z,3,C:\Windows\System32\powershell.exe,ACME\gwhite,udp,10.10.2.113,55220,72.8.171.138,443, +LEG-WS-013,2026-02-20T12:26:25.878Z,3,C:\Windows\System32\SearchHost.exe,ACME\gwhite,udp,10.10.2.113,56458,10.10.3.120,389,cdn.jsdelivr.net +LEG-WS-013,2026-02-12T03:35:57.032Z,3,C:\Windows\System32\cmd.exe,ACME\gwhite,tcp,10.10.2.113,49456,34.197.216.53,443, +LEG-WS-013,2026-02-11T01:49:53.135Z,3,C:\Windows\System32\spoolsv.exe,ACME\gwhite,tcp,10.10.2.113,64168,121.28.209.6,3389, +LEG-WS-013,2026-02-12T10:27:37.671Z,3,C:\Program Files\chrome.exe,ACME\gwhite,tcp,10.10.2.113,57570,64.199.57.41,53, +LEG-WS-013,2026-02-11T23:26:30.413Z,3,C:\Windows\System32\cmd.exe,ACME\gwhite,udp,10.10.2.113,63549,10.10.3.111,443, +LEG-WS-013,2026-02-11T19:25:42.901Z,3,C:\Program Files\chrome.exe,ACME\gwhite,tcp,10.10.2.113,63912,198.195.233.183,8080, +LEG-WS-013,2026-02-20T00:14:01.642Z,3,C:\Program Files\chrome.exe,ACME\gwhite,udp,10.10.2.113,58707,10.10.2.131,443, +LEG-WS-013,2026-02-16T04:07:34.068Z,3,C:\Windows\System32\OneDrive.exe,ACME\gwhite,tcp,10.10.2.113,53529,10.10.3.174,8080, +LEG-WS-013,2026-02-15T14:19:23.913Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\gwhite,tcp,10.10.2.113,61849,11.6.60.45,53, +LEG-WS-013,2026-02-14T08:51:46.138Z,3,C:\Program Files\chrome.exe,ACME\gwhite,tcp,10.10.2.113,55800,207.31.126.224,53, +LEG-WS-013,2026-02-11T00:08:41.049Z,3,C:\Program Files\chrome.exe,ACME\gwhite,tcp,10.10.2.113,65305,10.10.1.145,8080, +MKT-WS-014,2026-02-15T22:51:33.253Z,3,C:\Windows\System32\winlogon.exe,ACME\fthompson,udp,10.10.3.114,65409,10.10.3.105,443, +MKT-WS-014,2026-02-17T16:52:41.087Z,3,C:\Program Files\msedge.exe,ACME\fthompson,udp,10.10.3.114,55972,10.10.3.171,8080, +MKT-WS-014,2026-02-11T11:09:49.501Z,3,C:\Windows\System32\spoolsv.exe,ACME\fthompson,tcp,10.10.3.114,55687,33.52.8.187,3389, +MKT-WS-014,2026-02-17T09:58:06.331Z,3,C:\Program Files\msedge.exe,ACME\fthompson,tcp,10.10.3.114,59947,152.190.125.249,445, +MKT-WS-014,2026-02-15T00:36:49.792Z,3,C:\Windows\System32\svchost.exe,ACME\fthompson,udp,10.10.3.114,60704,10.10.2.122,443, +MKT-WS-014,2026-02-14T11:18:52.883Z,3,C:\Program Files\chrome.exe,ACME\fthompson,tcp,10.10.3.114,49693,194.3.191.63,53, +MKT-WS-014,2026-02-19T16:42:42.403Z,3,C:\Windows\System32\spoolsv.exe,ACME\fthompson,udp,10.10.3.114,49259,6.170.55.1,80, +MKT-WS-014,2026-02-11T19:50:45.135Z,3,C:\Program Files\chrome.exe,ACME\fthompson,tcp,10.10.3.114,62838,10.10.3.135,445, +MKT-WS-014,2026-02-19T01:04:16.906Z,3,C:\Windows\System32\outlook.exe,ACME\fthompson,tcp,10.10.3.114,61250,10.10.3.132,8080, +MKT-WS-014,2026-02-20T16:14:25.837Z,3,C:\Windows\System32\teams.exe,ACME\fthompson,tcp,10.10.3.114,59812,10.10.1.133,389, +MKT-WS-014,2026-02-20T15:53:09.817Z,3,C:\Windows\System32\services.exe,ACME\fthompson,tcp,10.10.3.114,58865,10.10.2.140,445, +MKT-WS-014,2026-02-18T14:20:29.522Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\fthompson,tcp,10.10.3.114,57608,97.108.56.202,3389, +MKT-WS-014,2026-02-14T19:38:14.570Z,3,C:\Windows\System32\smss.exe,ACME\fthompson,tcp,10.10.3.114,60826,124.155.53.178,443, +MKT-WS-014,2026-02-13T14:00:11.440Z,3,C:\Windows\System32\outlook.exe,ACME\fthompson,tcp,10.10.3.114,54135,129.5.82.221,53, +MKT-WS-014,2026-02-16T07:28:26.409Z,3,C:\Windows\System32\svchost.exe,ACME\fthompson,tcp,10.10.3.114,64826,10.10.1.121,389, +MKT-WS-014,2026-02-19T12:16:35.917Z,3,C:\Windows\System32\taskhostw.exe,ACME\fthompson,udp,10.10.3.114,50363,10.10.2.101,8080, +MKT-WS-014,2026-02-15T02:49:54.002Z,3,C:\Windows\System32\SearchHost.exe,ACME\fthompson,tcp,10.10.3.114,63391,18.127.60.167,3389, +MKT-WS-014,2026-02-19T11:52:37.815Z,3,C:\Windows\System32\lsass.exe,ACME\fthompson,tcp,10.10.3.114,58566,104.243.137.194,53, +EXEC-WS-015,2026-02-18T20:09:20.514Z,3,C:\Program Files\chrome.exe,ACME\agarcia,tcp,10.10.1.115,63605,10.10.1.148,8080,cloudflare.com +EXEC-WS-015,2026-02-20T17:28:25.375Z,3,C:\Windows\System32\cmd.exe,ACME\agarcia,udp,10.10.1.115,60126,10.10.2.125,8080,akamai.net +EXEC-WS-015,2026-02-11T07:40:24.709Z,3,C:\Windows\System32\spoolsv.exe,ACME\agarcia,tcp,10.10.1.115,61505,223.111.37.235,8080, +EXEC-WS-015,2026-02-20T15:19:53.494Z,3,C:\Windows\System32\explorer.exe,ACME\agarcia,udp,10.10.1.115,53343,78.53.184.101,445,github.com +EXEC-WS-015,2026-02-17T00:12:01.144Z,3,C:\Windows\System32\dwm.exe,ACME\agarcia,udp,10.10.1.115,58587,175.180.36.108,80, +EXEC-WS-015,2026-02-15T13:39:21.959Z,3,C:\Windows\System32\explorer.exe,ACME\agarcia,tcp,10.10.1.115,64955,87.147.150.89,8080, +EXEC-WS-015,2026-02-18T17:53:01.485Z,3,C:\Windows\System32\services.exe,ACME\agarcia,udp,10.10.1.115,64739,10.10.2.155,443, +EXEC-WS-015,2026-02-15T11:49:28.830Z,3,C:\Windows\System32\dwm.exe,ACME\agarcia,udp,10.10.1.115,52708,10.10.2.10,8080, +EXEC-WS-015,2026-02-12T15:53:50.989Z,3,C:\Windows\System32\powershell.exe,ACME\agarcia,udp,10.10.1.115,55280,53.255.180.149,8080, +EXEC-WS-015,2026-02-14T07:48:33.597Z,3,C:\Windows\System32\System,ACME\agarcia,udp,10.10.1.115,60441,10.10.1.151,445, +EXEC-WS-015,2026-02-15T17:47:17.471Z,3,C:\Program Files\msedge.exe,ACME\agarcia,udp,10.10.1.115,53615,10.10.3.159,53, +EXEC-WS-015,2026-02-18T02:27:35.403Z,3,C:\Windows\System32\smss.exe,ACME\agarcia,udp,10.10.1.115,55300,10.10.1.112,445, +EXEC-WS-015,2026-02-14T20:19:44.836Z,3,C:\Windows\System32\lsass.exe,ACME\agarcia,udp,10.10.1.115,58183,39.53.111.176,53, +EXEC-WS-015,2026-02-17T06:43:41.591Z,3,C:\Windows\System32\teams.exe,ACME\agarcia,udp,10.10.1.115,65519,10.10.2.146,53,cloudflare.com +EXEC-WS-015,2026-02-18T04:03:27.277Z,3,C:\Windows\System32\notepad.exe,ACME\agarcia,tcp,10.10.1.115,63295,10.10.3.129,80, +EXEC-WS-015,2026-02-15T11:55:41.224Z,3,C:\Windows\System32\notepad.exe,ACME\agarcia,tcp,10.10.1.115,57624,10.10.3.174,3389, +EXEC-WS-015,2026-02-15T01:25:28.696Z,3,C:\Windows\System32\services.exe,ACME\agarcia,udp,10.10.1.115,51912,10.10.3.105,389, +EXEC-WS-015,2026-02-19T04:23:27.298Z,3,C:\Program Files\msedge.exe,ACME\agarcia,tcp,10.10.1.115,61014,10.10.2.104,443, +EXEC-WS-015,2026-02-12T07:37:11.120Z,3,C:\Windows\System32\powershell.exe,ACME\agarcia,tcp,10.10.1.115,59820,10.10.2.152,8080, +EXEC-WS-015,2026-02-17T04:20:57.606Z,3,C:\Program Files\msedge.exe,ACME\agarcia,tcp,10.10.1.115,62326,131.220.142.87,389,draftkings.com +EXEC-WS-015,2026-02-14T23:45:15.612Z,3,C:\Windows\System32\cmd.exe,ACME\agarcia,tcp,10.10.1.115,49505,147.113.142.89,53, +EXEC-WS-015,2026-02-20T08:32:31.892Z,3,C:\Windows\System32\cmd.exe,ACME\agarcia,tcp,10.10.1.115,53756,10.10.1.154,8080, +EXEC-WS-015,2026-02-12T18:08:22.485Z,3,C:\Windows\System32\spoolsv.exe,ACME\agarcia,udp,10.10.1.115,57639,34.12.176.189,80, +EXEC-WS-015,2026-02-18T02:38:20.773Z,3,C:\Windows\System32\csrss.exe,ACME\agarcia,tcp,10.10.1.115,62592,105.75.82.114,443, +EXEC-WS-015,2026-02-20T06:49:10.724Z,3,C:\Program Files\chrome.exe,ACME\agarcia,udp,10.10.1.115,50676,10.10.3.123,445, +EXEC-WS-015,2026-02-20T00:53:03.784Z,3,C:\Program Files\chrome.exe,ACME\agarcia,udp,10.10.1.115,56227,65.37.212.222,443, +EXEC-WS-015,2026-02-18T04:56:37.527Z,3,C:\Program Files\chrome.exe,ACME\agarcia,udp,10.10.1.115,54667,10.10.1.115,3389, +EXEC-WS-015,2026-02-12T00:00:39.091Z,3,C:\Windows\System32\services.exe,ACME\agarcia,tcp,10.10.1.115,64265,10.10.2.170,53, +EXEC-WS-015,2026-02-16T00:30:18.738Z,3,C:\Program Files\chrome.exe,ACME\agarcia,udp,10.10.1.115,56176,10.10.3.108,80, +EXEC-WS-015,2026-02-16T01:28:30.524Z,3,C:\Windows\System32\notepad.exe,ACME\agarcia,udp,10.10.1.115,60239,10.10.1.13,443, +EXEC-WS-015,2026-02-13T22:13:27.887Z,3,C:\Windows\System32\explorer.exe,ACME\agarcia,tcp,10.10.1.115,53856,10.10.1.13,443, +EXEC-WS-015,2026-02-11T19:45:23.059Z,3,C:\Windows\System32\dwm.exe,ACME\agarcia,tcp,10.10.1.115,57931,17.245.44.215,80, +EXEC-WS-015,2026-02-12T12:45:41.914Z,3,C:\Windows\System32\cmd.exe,ACME\agarcia,udp,10.10.1.115,56738,146.245.234.92,53, +EXEC-WS-015,2026-02-15T10:01:37.527Z,3,C:\Program Files\chrome.exe,ACME\agarcia,tcp,10.10.1.115,56016,10.10.3.105,389, +EXEC-WS-015,2026-02-18T18:18:00.336Z,3,C:\Program Files\msedge.exe,ACME\agarcia,udp,10.10.1.115,62175,10.10.2.113,3389, +IT-WS-016,2026-02-12T21:33:24.756Z,3,C:\Windows\System32\dwm.exe,ACME\admin,tcp,10.10.2.116,54572,10.10.2.149,443, +IT-WS-016,2026-02-10T16:17:39.286Z,3,C:\Windows\System32\SearchHost.exe,ACME\admin,udp,10.10.2.116,55060,174.241.255.117,389, +IT-WS-016,2026-02-12T13:03:51.347Z,3,C:\Windows\System32\taskhostw.exe,ACME\admin,tcp,10.10.2.116,50903,16.230.224.10,3389, +IT-WS-016,2026-02-18T01:57:17.038Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.2.116,60439,109.118.198.171,8080, +IT-WS-016,2026-02-17T23:27:53.499Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.2.116,62741,34.37.131.188,3389, +IT-WS-016,2026-02-18T19:38:39.174Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.2.116,62760,10.10.1.13,3389, +IT-WS-016,2026-02-19T02:07:29.039Z,3,C:\Windows\System32\MsMpEng.exe,ACME\admin,tcp,10.10.2.116,55087,27.60.169.180,3389, +IT-WS-016,2026-02-16T06:20:37.607Z,3,C:\Windows\System32\taskhostw.exe,ACME\admin,udp,10.10.2.116,51440,162.85.51.171,443, +IT-WS-016,2026-02-13T17:08:13.277Z,3,C:\Windows\System32\services.exe,ACME\admin,udp,10.10.2.116,56511,40.31.57.141,80, +IT-WS-016,2026-02-19T12:16:52.792Z,3,C:\Windows\System32\dwm.exe,ACME\admin,tcp,10.10.2.116,52540,10.10.2.119,445, +IT-WS-016,2026-02-19T00:28:36.698Z,3,C:\Windows\System32\System,ACME\admin,udp,10.10.2.116,49378,10.10.1.124,3389, +IT-WS-016,2026-02-18T04:08:57.869Z,3,C:\Windows\System32\lsass.exe,ACME\admin,udp,10.10.2.116,49425,1.204.167.109,8080, +IT-WS-016,2026-02-16T22:12:14.608Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.2.116,53415,94.80.49.116,443, +IT-WS-016,2026-02-13T04:02:26.793Z,3,C:\Windows\System32\powershell.exe,ACME\admin,tcp,10.10.2.116,63573,10.10.3.114,443, +IT-WS-016,2026-02-14T23:31:55.678Z,3,C:\Windows\System32\notepad.exe,ACME\admin,udp,10.10.2.116,49325,10.10.2.11,80,npmjs.com +IT-WS-016,2026-02-16T10:27:31.707Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.2.116,55412,10.10.2.155,53, +IT-WS-016,2026-02-17T07:46:37.397Z,3,C:\Windows\System32\svchost.exe,ACME\admin,udp,10.10.2.116,60904,10.10.2.107,3389, +IT-WS-016,2026-02-18T06:22:48.061Z,3,C:\Windows\System32\svchost.exe,ACME\admin,tcp,10.10.2.116,51092,10.10.1.124,443, +IT-WS-016,2026-02-11T09:48:42.643Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.2.116,59540,10.10.2.131,3389, +IT-WS-016,2026-02-13T14:50:52.051Z,3,C:\Windows\System32\SearchHost.exe,ACME\admin,udp,10.10.2.116,64029,10.10.2.104,53, +IT-WS-016,2026-02-14T14:21:51.140Z,3,C:\Windows\System32\outlook.exe,ACME\admin,udp,10.10.2.116,59123,10.10.3.102,8080, +IT-WS-016,2026-02-14T11:42:20.011Z,3,C:\Windows\System32\dwm.exe,ACME\admin,udp,10.10.2.116,58051,149.102.5.181,443, +IT-WS-016,2026-02-20T11:39:10.953Z,3,C:\Windows\System32\lsass.exe,ACME\admin,udp,10.10.2.116,60315,62.108.223.21,389, +IT-WS-016,2026-02-16T01:29:54.817Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.2.116,57528,112.186.234.42,3389, +IT-WS-016,2026-02-11T23:27:10.426Z,3,C:\Windows\System32\notepad.exe,ACME\admin,udp,10.10.2.116,51050,219.237.194.48,8080, +IT-WS-016,2026-02-19T11:40:08.583Z,3,C:\Windows\System32\notepad.exe,ACME\admin,udp,10.10.2.116,58276,105.35.218.119,80, +IT-WS-016,2026-02-11T21:50:25.376Z,3,C:\Windows\System32\cmd.exe,ACME\admin,tcp,10.10.2.116,63216,108.26.130.227,443, +IT-WS-016,2026-02-18T12:10:10.103Z,3,C:\Windows\System32\outlook.exe,ACME\admin,tcp,10.10.2.116,56114,133.15.85.156,8080, +IT-WS-016,2026-02-14T08:49:54.424Z,3,C:\Windows\System32\outlook.exe,ACME\admin,udp,10.10.2.116,51364,10.10.3.132,389, +IT-WS-016,2026-02-15T08:14:35.177Z,3,C:\Windows\System32\code.exe,ACME\admin,tcp,10.10.2.116,58881,114.198.234.7,443, +HR-WS-017,2026-02-16T01:36:23.452Z,3,C:\Windows\System32\csrss.exe,ACME\idavis,tcp,10.10.3.117,56119,173.163.0.88,8080, +HR-WS-017,2026-02-13T23:36:45.907Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.3.117,55181,10.52.150.110,445,windowsupdate.com +HR-WS-017,2026-02-12T19:09:59.705Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.3.117,59169,214.86.151.185,443, +HR-WS-017,2026-02-10T12:27:16.602Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,tcp,10.10.3.117,53420,10.10.3.132,445, +HR-WS-017,2026-02-16T12:12:52.149Z,3,C:\Windows\System32\dwm.exe,ACME\idavis,udp,10.10.3.117,55246,10.10.1.157,8080, +HR-WS-017,2026-02-12T23:43:52.441Z,3,C:\Windows\System32\MsMpEng.exe,ACME\idavis,udp,10.10.3.117,64333,206.26.42.247,53, +HR-WS-017,2026-02-20T12:34:09.082Z,3,C:\Windows\System32\winlogon.exe,ACME\idavis,tcp,10.10.3.117,55733,214.196.105.63,53, +HR-WS-017,2026-02-15T20:04:22.316Z,3,C:\Windows\System32\csrss.exe,ACME\idavis,tcp,10.10.3.117,64479,8.233.56.107,80, +HR-WS-017,2026-02-13T07:57:52.598Z,3,C:\Windows\System32\MsMpEng.exe,ACME\idavis,tcp,10.10.3.117,63177,113.202.34.56,389, +HR-WS-017,2026-02-16T22:52:50.468Z,3,C:\Windows\System32\taskhostw.exe,ACME\idavis,udp,10.10.3.117,53527,62.132.161.88,53, +HR-WS-017,2026-02-16T21:30:11.211Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.3.117,50257,10.10.3.10,80, +HR-WS-017,2026-02-14T03:47:30.421Z,3,C:\Windows\System32\dwm.exe,ACME\idavis,udp,10.10.3.117,62601,38.85.101.248,3389, +HR-WS-017,2026-02-13T22:20:37.832Z,3,C:\Windows\System32\SearchHost.exe,ACME\idavis,udp,10.10.3.117,60746,10.10.3.111,80,login.microsoftonline.com +HR-WS-017,2026-02-17T08:26:20.389Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,tcp,10.10.3.117,62783,83.186.189.142,445, +HR-WS-017,2026-02-12T06:57:00.037Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,udp,10.10.3.117,49732,109.247.245.169,80, +HR-WS-017,2026-02-20T12:01:43.618Z,3,C:\Windows\System32\cmd.exe,ACME\idavis,tcp,10.10.3.117,65340,10.10.2.104,389, +HR-WS-017,2026-02-17T05:37:36.898Z,3,C:\Program Files\chrome.exe,ACME\idavis,udp,10.10.3.117,54686,10.10.1.11,8080, +HR-WS-017,2026-02-14T20:00:39.239Z,3,C:\Windows\System32\smss.exe,ACME\idavis,tcp,10.10.3.117,62881,26.196.101.172,389,dc-01.acme.local +HR-WS-017,2026-02-15T05:56:21.462Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.3.117,49820,10.10.3.126,389, +HR-WS-017,2026-02-10T10:28:23.559Z,3,C:\Windows\System32\dwm.exe,ACME\idavis,udp,10.10.3.117,59886,116.41.248.232,3389, +HR-WS-017,2026-02-20T00:36:08.395Z,3,C:\Windows\System32\spoolsv.exe,ACME\idavis,udp,10.10.3.117,53887,10.10.3.108,443, +HR-WS-017,2026-02-16T16:17:21.505Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,tcp,10.10.3.117,54857,10.10.3.126,3389, +HR-WS-017,2026-02-13T18:45:43.944Z,3,C:\Windows\System32\teams.exe,ACME\idavis,tcp,10.10.3.117,57217,174.154.101.204,3389,github.com +HR-WS-017,2026-02-17T23:30:05.412Z,3,C:\Windows\System32\spoolsv.exe,ACME\idavis,tcp,10.10.3.117,57516,10.10.1.163,8080, +HR-WS-017,2026-02-16T15:16:13.534Z,3,C:\Windows\System32\OneDrive.exe,ACME\idavis,tcp,10.10.3.117,53117,124.134.152.128,8080,www.bet365.com +FIN-WS-018,2026-02-15T19:54:53.644Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.1.118,55905,10.10.2.149,443, +FIN-WS-018,2026-02-12T14:46:33.763Z,3,C:\Windows\System32\spoolsv.exe,ACME\admin,tcp,10.10.1.118,51438,10.10.3.159,3389,pokerstars.com +FIN-WS-018,2026-02-12T11:09:06.499Z,3,C:\Windows\System32\MsMpEng.exe,ACME\admin,tcp,10.10.1.118,64907,12.101.101.190,3389, +FIN-WS-018,2026-02-20T07:17:20.682Z,3,C:\Windows\System32\svchost.exe,ACME\admin,udp,10.10.1.118,52347,108.11.160.16,8080, +FIN-WS-018,2026-02-16T20:17:42.689Z,3,C:\Windows\System32\SearchHost.exe,ACME\admin,tcp,10.10.1.118,62668,10.10.2.146,8080, +FIN-WS-018,2026-02-18T17:44:14.858Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\admin,tcp,10.10.1.118,54683,217.123.6.63,445, +FIN-WS-018,2026-02-16T23:09:21.999Z,3,C:\Windows\System32\teams.exe,ACME\admin,udp,10.10.1.118,50005,33.205.66.242,443, +FIN-WS-018,2026-02-11T04:19:28.548Z,3,C:\Windows\System32\notepad.exe,ACME\admin,tcp,10.10.1.118,49272,10.10.1.163,8080, +FIN-WS-018,2026-02-13T23:59:35.197Z,3,C:\Windows\System32\powershell.exe,ACME\admin,udp,10.10.1.118,60892,10.10.3.174,3389, +FIN-WS-018,2026-02-12T12:43:19.170Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.1.118,56433,190.181.46.195,443, +FIN-WS-018,2026-02-12T13:00:16.235Z,3,C:\Windows\System32\outlook.exe,ACME\admin,udp,10.10.1.118,55833,201.149.152.45,443, +FIN-WS-018,2026-02-13T08:19:47.689Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.1.118,59993,63.117.19.227,445,login.microsoftonline.com +FIN-WS-018,2026-02-17T00:34:59.480Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.1.118,54715,10.10.3.144,80, +FIN-WS-018,2026-02-14T01:17:54.910Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\admin,tcp,10.10.1.118,51898,10.10.3.123,389, +FIN-WS-018,2026-02-13T02:25:07.824Z,3,C:\Windows\System32\svchost.exe,ACME\admin,udp,10.10.1.118,58375,112.82.114.209,53, +FIN-WS-018,2026-02-11T17:01:21.558Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.1.118,62706,10.10.2.146,443,www.bet365.com +FIN-WS-018,2026-02-13T17:19:35.828Z,3,C:\Windows\System32\smss.exe,ACME\admin,udp,10.10.1.118,57153,126.195.117.239,389, +FIN-WS-018,2026-02-13T04:33:58.560Z,3,C:\Windows\System32\SearchHost.exe,ACME\admin,tcp,10.10.1.118,56721,125.132.45.60,445, +FIN-WS-018,2026-02-11T01:28:57.396Z,3,C:\Windows\System32\SearchHost.exe,ACME\admin,udp,10.10.1.118,50102,158.158.32.204,80, +FIN-WS-018,2026-02-12T20:14:23.322Z,3,C:\Windows\System32\dwm.exe,ACME\admin,tcp,10.10.1.118,64289,10.10.1.12,80, +FIN-WS-018,2026-02-14T14:53:51.509Z,3,C:\Windows\System32\smss.exe,ACME\admin,tcp,10.10.1.118,49417,10.10.1.169,443, +FIN-WS-018,2026-02-18T22:07:53.519Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.1.118,62394,86.76.35.39,53, +FIN-WS-018,2026-02-16T05:51:25.883Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.1.118,57726,10.10.1.148,389, +FIN-WS-018,2026-02-10T11:43:51.404Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.1.118,50491,10.10.2.116,3389, +FIN-WS-018,2026-02-16T18:25:20.502Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.1.118,53582,10.10.1.130,3389, +FIN-WS-018,2026-02-13T21:37:34.705Z,3,C:\Windows\System32\lsass.exe,ACME\admin,udp,10.10.1.118,55837,148.23.217.142,3389, +FIN-WS-018,2026-02-18T08:39:12.961Z,3,C:\Windows\System32\SearchHost.exe,ACME\admin,udp,10.10.1.118,60082,10.10.2.137,53, +FIN-WS-018,2026-02-17T04:48:52.115Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\admin,tcp,10.10.1.118,64873,10.10.1.130,443, +FIN-WS-018,2026-02-15T04:47:45.700Z,3,C:\Windows\System32\OneDrive.exe,ACME\admin,udp,10.10.1.118,57849,141.151.233.238,53, +FIN-WS-018,2026-02-17T16:35:33.616Z,3,C:\Windows\System32\csrss.exe,ACME\admin,udp,10.10.1.118,58676,10.10.3.108,445, +FIN-WS-018,2026-02-17T10:54:09.745Z,3,C:\Windows\System32\svchost.exe,ACME\admin,udp,10.10.1.118,50131,109.250.157.2,443, +FIN-WS-018,2026-02-11T10:54:16.901Z,3,C:\Windows\System32\csrss.exe,ACME\admin,udp,10.10.1.118,58860,164.27.11.186,389,pokerstars.com +FIN-WS-018,2026-02-16T04:47:23.074Z,3,C:\Windows\System32\outlook.exe,ACME\admin,tcp,10.10.1.118,51182,10.10.2.146,8080, +FIN-WS-018,2026-02-14T08:50:59.221Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.1.118,57741,10.10.1.13,80, +FIN-WS-018,2026-02-14T18:07:24.140Z,3,C:\Windows\System32\teams.exe,ACME\admin,tcp,10.10.1.118,57332,71.89.73.154,8080, +FIN-WS-018,2026-02-18T21:47:52.680Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.1.118,62647,10.10.1.121,445, +FIN-WS-018,2026-02-17T19:51:18.433Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.1.118,61304,10.10.1.142,389, +FIN-WS-018,2026-02-18T21:55:35.331Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.1.118,60099,10.10.1.172,389, +SLS-WS-019,2026-02-15T20:32:25.214Z,3,C:\Program Files\chrome.exe,ACME\svc_web,udp,10.10.2.119,49744,198.246.67.73,445, +SLS-WS-019,2026-02-17T17:08:09.891Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_web,udp,10.10.2.119,56088,162.233.133.244,443, +SLS-WS-019,2026-02-20T06:58:17.215Z,3,C:\Program Files\chrome.exe,ACME\svc_web,tcp,10.10.2.119,62224,10.10.1.109,53,time.windows.com +SLS-WS-019,2026-02-20T05:21:26.794Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_web,tcp,10.10.2.119,64933,35.23.90.243,53, +SLS-WS-019,2026-02-17T00:11:50.264Z,3,C:\Windows\System32\smss.exe,ACME\svc_web,tcp,10.10.2.119,58317,83.209.92.190,53, +SLS-WS-019,2026-02-17T05:05:23.764Z,3,C:\Program Files\chrome.exe,ACME\svc_web,tcp,10.10.2.119,57985,10.10.2.110,443,exch-01.acme.local +SLS-WS-019,2026-02-12T22:45:29.950Z,3,C:\Windows\System32\dwm.exe,ACME\svc_web,udp,10.10.2.119,56288,38.175.130.246,389, +SLS-WS-019,2026-02-20T12:28:05.000Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_web,udp,10.10.2.119,51419,16.28.195.243,80, +SLS-WS-019,2026-02-17T19:30:31.739Z,3,C:\Windows\System32\OneDrive.exe,ACME\svc_web,tcp,10.10.2.119,58414,199.38.184.152,389, +SLS-WS-019,2026-02-10T10:42:16.616Z,3,C:\Windows\System32\dwm.exe,ACME\svc_web,udp,10.10.2.119,51587,10.10.3.108,53, +SLS-WS-019,2026-02-15T11:10:19.051Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_web,tcp,10.10.2.119,56837,102.149.73.60,8080, +SLS-WS-019,2026-02-20T05:55:22.509Z,3,C:\Windows\System32\notepad.exe,ACME\svc_web,udp,10.10.2.119,54130,10.10.1.109,8080, +SLS-WS-019,2026-02-12T00:39:04.423Z,3,C:\Program Files\chrome.exe,ACME\svc_web,udp,10.10.2.119,62043,10.10.3.105,80, +SLS-WS-019,2026-02-16T04:45:27.987Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.2.119,49681,41.241.61.124,443, +SLS-WS-019,2026-02-11T13:16:59.827Z,3,C:\Windows\System32\explorer.exe,ACME\svc_web,udp,10.10.2.119,53172,165.138.100.24,445, +SLS-WS-019,2026-02-14T04:01:59.287Z,3,C:\Program Files\msedge.exe,ACME\svc_web,tcp,10.10.2.119,63004,107.93.176.229,389, +SLS-WS-019,2026-02-18T05:50:38.090Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_web,udp,10.10.2.119,61838,10.10.1.103,80, +ENG-WS-020,2026-02-18T21:01:38.707Z,3,C:\Windows\System32\dwm.exe,ACME\bwilson,tcp,10.10.3.120,51352,10.10.2.11,389, +ENG-WS-020,2026-02-13T23:41:06.340Z,3,C:\Windows\System32\winlogon.exe,ACME\bwilson,udp,10.10.3.120,55414,20.37.103.235,80, +ENG-WS-020,2026-02-17T20:10:57.011Z,3,C:\Program Files\msedge.exe,ACME\bwilson,udp,10.10.3.120,59638,10.10.2.107,53, +ENG-WS-020,2026-02-16T15:46:14.591Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.3.120,49745,10.10.1.175,443,acme.sharepoint.com +ENG-WS-020,2026-02-17T19:01:11.573Z,3,C:\Windows\System32\powershell.exe,ACME\bwilson,tcp,10.10.3.120,64317,10.10.2.110,445, +ENG-WS-020,2026-02-18T05:54:44.597Z,3,C:\Program Files\msedge.exe,ACME\bwilson,udp,10.10.3.120,64919,110.131.144.217,445, +ENG-WS-020,2026-02-16T10:28:04.028Z,3,C:\Windows\System32\OneDrive.exe,ACME\bwilson,tcp,10.10.3.120,61990,10.10.3.102,80,dc-02.acme.local +ENG-WS-020,2026-02-10T17:34:24.319Z,3,C:\Windows\System32\outlook.exe,ACME\bwilson,udp,10.10.3.120,52654,10.10.1.163,445, +ENG-WS-020,2026-02-13T14:59:51.467Z,3,C:\Windows\System32\notepad.exe,ACME\bwilson,tcp,10.10.3.120,57193,75.38.124.253,8080, +ENG-WS-020,2026-02-15T21:50:16.489Z,3,C:\Windows\System32\taskhostw.exe,ACME\bwilson,tcp,10.10.3.120,61713,38.200.116.118,8080, +ENG-WS-020,2026-02-19T20:20:42.292Z,3,C:\Windows\System32\winlogon.exe,ACME\bwilson,tcp,10.10.3.120,62149,159.22.144.218,443, +ENG-WS-020,2026-02-12T23:48:33.774Z,3,C:\Windows\System32\taskhostw.exe,ACME\bwilson,udp,10.10.3.120,63209,153.180.14.119,389, +ENG-WS-020,2026-02-16T03:05:28.921Z,3,C:\Program Files\chrome.exe,ACME\bwilson,tcp,10.10.3.120,51016,169.222.30.124,389, +ENG-WS-020,2026-02-11T13:15:05.012Z,3,C:\Windows\System32\explorer.exe,ACME\bwilson,udp,10.10.3.120,60588,160.55.59.72,80, +ENG-WS-020,2026-02-17T07:55:31.974Z,3,C:\Program Files\msedge.exe,ACME\bwilson,udp,10.10.3.120,61961,131.143.236.160,389,stackoverflow.com +ENG-WS-020,2026-02-15T17:57:22.515Z,3,C:\Windows\System32\spoolsv.exe,ACME\bwilson,tcp,10.10.3.120,53989,29.7.218.10,3389, +ENG-WS-020,2026-02-15T02:35:04.141Z,3,C:\Windows\System32\System,ACME\bwilson,udp,10.10.3.120,65431,162.84.93.62,443, +ENG-WS-020,2026-02-11T21:54:32.866Z,3,C:\Windows\System32\explorer.exe,ACME\bwilson,udp,10.10.3.120,62306,10.10.1.109,53, +ENG-WS-020,2026-02-16T00:41:33.018Z,3,C:\Program Files\msedge.exe,ACME\bwilson,udp,10.10.3.120,53176,10.10.1.163,443, +ENG-WS-020,2026-02-10T08:22:41.327Z,3,C:\Windows\System32\dwm.exe,ACME\bwilson,tcp,10.10.3.120,61991,161.130.107.155,3389, +ENG-WS-020,2026-02-14T00:26:44.840Z,3,C:\Windows\System32\outlook.exe,ACME\bwilson,udp,10.10.3.120,57094,10.10.2.173,445, +ENG-WS-020,2026-02-19T21:29:24.601Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.3.120,49230,10.10.1.109,443, +ENG-WS-020,2026-02-11T06:04:40.493Z,3,C:\Program Files\chrome.exe,ACME\bwilson,tcp,10.10.3.120,51449,185.152.28.66,53, +ENG-WS-020,2026-02-17T11:52:35.388Z,3,C:\Windows\System32\svchost.exe,ACME\bwilson,udp,10.10.3.120,58763,10.10.2.125,8080, +ENG-WS-020,2026-02-20T04:37:17.782Z,3,C:\Windows\System32\taskhostw.exe,ACME\bwilson,udp,10.10.3.120,56313,10.10.1.109,8080, +ENG-WS-020,2026-02-17T09:49:10.674Z,3,C:\Windows\System32\SearchHost.exe,ACME\bwilson,tcp,10.10.3.120,61748,10.10.2.146,389, +ENG-WS-020,2026-02-18T06:07:02.518Z,3,C:\Windows\System32\MsMpEng.exe,ACME\bwilson,tcp,10.10.3.120,63162,10.10.2.134,80, +ENG-WS-020,2026-02-16T17:35:43.067Z,3,C:\Windows\System32\OneDrive.exe,ACME\bwilson,tcp,10.10.3.120,59400,48.167.10.67,3389, +ENG-WS-020,2026-02-18T19:53:05.678Z,3,C:\Windows\System32\smss.exe,ACME\bwilson,udp,10.10.3.120,61015,10.10.1.124,445, +ENG-WS-020,2026-02-16T21:34:57.614Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.3.120,54263,10.10.1.10,389, +ENG-WS-020,2026-02-11T09:45:26.024Z,3,C:\Windows\System32\smss.exe,ACME\bwilson,tcp,10.10.3.120,63413,86.72.113.224,443, +ENG-WS-020,2026-02-17T15:51:44.655Z,3,C:\Windows\System32\System,ACME\bwilson,tcp,10.10.3.120,60168,203.177.69.26,389,acme.sharepoint.com +ENG-WS-020,2026-02-18T15:35:22.307Z,3,C:\Windows\System32\teams.exe,ACME\bwilson,tcp,10.10.3.120,57655,10.10.1.139,389, +ENG-WS-020,2026-02-15T14:04:42.594Z,3,C:\Windows\System32\cmd.exe,ACME\bwilson,udp,10.10.3.120,59830,10.10.3.144,445, +ENG-WS-020,2026-02-10T09:52:17.048Z,3,C:\Program Files\chrome.exe,ACME\bwilson,udp,10.10.3.120,60782,10.10.1.13,80, +ENG-WS-020,2026-02-13T02:27:43.322Z,3,C:\Windows\System32\MsMpEng.exe,ACME\bwilson,tcp,10.10.3.120,59535,101.80.191.203,443, +LEG-WS-021,2026-02-15T05:48:38.876Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.1.121,63418,82.208.62.120,3389, +LEG-WS-021,2026-02-19T16:38:07.693Z,3,C:\Windows\System32\System,ACME\idavis,tcp,10.10.1.121,52304,211.104.242.50,53, +LEG-WS-021,2026-02-11T14:43:47.137Z,3,C:\Windows\System32\teams.exe,ACME\idavis,udp,10.10.1.121,58163,121.247.102.120,389, +LEG-WS-021,2026-02-15T23:40:15.072Z,3,C:\Windows\System32\smss.exe,ACME\idavis,udp,10.10.1.121,58635,219.8.182.39,80, +LEG-WS-021,2026-02-15T15:37:38.187Z,3,C:\Windows\System32\explorer.exe,ACME\idavis,udp,10.10.1.121,64340,10.10.1.142,443, +LEG-WS-021,2026-02-15T01:10:57.742Z,3,C:\Windows\System32\code.exe,ACME\idavis,tcp,10.10.1.121,60495,6.91.80.222,53,draftkings.com +LEG-WS-021,2026-02-18T16:35:33.090Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,tcp,10.10.1.121,62833,164.119.102.176,53, +LEG-WS-021,2026-02-20T01:41:52.442Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.1.121,55639,10.10.3.108,445,google.com +LEG-WS-021,2026-02-18T19:20:14.380Z,3,C:\Windows\System32\SearchHost.exe,ACME\idavis,udp,10.10.1.121,62282,91.163.36.6,53, +LEG-WS-021,2026-02-18T13:37:24.232Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.1.121,51349,27.105.88.248,53, +LEG-WS-021,2026-02-15T08:35:15.734Z,3,C:\Windows\System32\taskhostw.exe,ACME\idavis,udp,10.10.1.121,59431,10.10.3.111,80, +LEG-WS-021,2026-02-11T19:06:11.958Z,3,C:\Windows\System32\notepad.exe,ACME\idavis,tcp,10.10.1.121,51641,120.16.5.221,445, +LEG-WS-021,2026-02-20T12:29:08.512Z,3,C:\Windows\System32\taskhostw.exe,ACME\idavis,tcp,10.10.1.121,55679,157.39.238.176,8080, +LEG-WS-021,2026-02-15T09:12:03.892Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.1.121,49775,10.10.2.140,445, +LEG-WS-021,2026-02-15T06:08:37.261Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.1.121,51465,92.252.194.230,3389,www.bet365.com +LEG-WS-021,2026-02-18T13:39:07.089Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.1.121,63302,10.10.3.111,443, +LEG-WS-021,2026-02-11T04:35:34.367Z,3,C:\Windows\System32\MsMpEng.exe,ACME\idavis,udp,10.10.1.121,49627,10.10.1.151,443, +LEG-WS-021,2026-02-11T14:27:40.327Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.1.121,53702,139.144.243.134,3389, +LEG-WS-021,2026-02-17T10:55:07.671Z,3,C:\Windows\System32\notepad.exe,ACME\idavis,udp,10.10.1.121,60699,62.124.59.220,53, +LEG-WS-021,2026-02-18T15:41:49.458Z,3,C:\Windows\System32\cmd.exe,ACME\idavis,udp,10.10.1.121,60108,10.10.3.108,389, +LEG-WS-021,2026-02-19T02:12:36.224Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.1.121,55381,102.30.229.41,3389, +LEG-WS-021,2026-02-18T15:30:26.548Z,3,C:\Windows\System32\OneDrive.exe,ACME\idavis,tcp,10.10.1.121,59677,57.11.75.13,443, +LEG-WS-021,2026-02-12T22:33:59.223Z,3,C:\Windows\System32\dwm.exe,ACME\idavis,udp,10.10.1.121,59532,73.172.82.143,8080, +LEG-WS-021,2026-02-11T05:27:17.916Z,3,C:\Windows\System32\taskhostw.exe,ACME\idavis,tcp,10.10.1.121,56027,10.10.2.149,389, +LEG-WS-021,2026-02-17T07:59:31.909Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.1.121,59607,135.211.88.2,80, +LEG-WS-021,2026-02-18T11:43:21.373Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.1.121,58679,145.200.88.156,3389, +LEG-WS-021,2026-02-13T20:26:32.224Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.1.121,51519,10.10.2.128,53, +LEG-WS-021,2026-02-16T06:25:10.736Z,3,C:\Windows\System32\outlook.exe,ACME\idavis,tcp,10.10.1.121,60841,10.10.1.115,8080, +LEG-WS-021,2026-02-12T22:43:14.961Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.1.121,50760,146.155.58.170,445, +LEG-WS-021,2026-02-10T22:00:58.504Z,3,C:\Program Files\chrome.exe,ACME\idavis,udp,10.10.1.121,63161,10.10.2.119,445,akamai.net +LEG-WS-021,2026-02-13T03:21:17.284Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.1.121,49590,10.10.3.102,445,outlook.office365.com +LEG-WS-021,2026-02-19T17:05:42.117Z,3,C:\Windows\System32\outlook.exe,ACME\idavis,udp,10.10.1.121,59538,10.10.1.148,443, +LEG-WS-021,2026-02-17T23:33:15.740Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.1.121,60796,10.10.1.121,80, +MKT-WS-022,2026-02-16T19:41:09.745Z,3,C:\Windows\System32\csrss.exe,ACME\dlee,udp,10.10.2.122,65245,136.49.162.204,53, +MKT-WS-022,2026-02-15T12:18:07.693Z,3,C:\Windows\System32\MsMpEng.exe,ACME\dlee,udp,10.10.2.122,53904,171.60.157.35,443, +MKT-WS-022,2026-02-10T11:02:31.010Z,3,C:\Windows\System32\svchost.exe,ACME\dlee,tcp,10.10.2.122,59047,10.10.2.128,53, +MKT-WS-022,2026-02-18T05:38:34.826Z,3,C:\Windows\System32\powershell.exe,ACME\dlee,tcp,10.10.2.122,50260,46.125.67.195,53, +MKT-WS-022,2026-02-12T08:03:04.584Z,3,C:\Windows\System32\winlogon.exe,ACME\dlee,udp,10.10.2.122,51471,10.10.1.166,3389, +MKT-WS-022,2026-02-17T02:17:16.382Z,3,C:\Windows\System32\lsass.exe,ACME\dlee,tcp,10.10.2.122,55977,111.5.13.63,443, +MKT-WS-022,2026-02-17T14:24:35.575Z,3,C:\Program Files\msedge.exe,ACME\dlee,tcp,10.10.2.122,50879,10.10.3.105,3389, +MKT-WS-022,2026-02-20T01:19:08.701Z,3,C:\Program Files\chrome.exe,ACME\dlee,udp,10.10.2.122,60912,19.184.211.126,389, +MKT-WS-022,2026-02-12T07:13:47.093Z,3,C:\Windows\System32\powershell.exe,ACME\dlee,tcp,10.10.2.122,63499,7.49.192.221,8080, +MKT-WS-022,2026-02-17T23:00:34.704Z,3,C:\Program Files\msedge.exe,ACME\dlee,udp,10.10.2.122,65309,71.80.203.55,53, +MKT-WS-022,2026-02-16T16:15:25.852Z,3,C:\Windows\System32\taskhostw.exe,ACME\dlee,tcp,10.10.2.122,51346,215.205.115.240,443, +MKT-WS-022,2026-02-11T04:01:50.502Z,3,C:\Windows\System32\spoolsv.exe,ACME\dlee,tcp,10.10.2.122,65125,2.34.43.120,445, +MKT-WS-022,2026-02-20T06:38:21.614Z,3,C:\Program Files\chrome.exe,ACME\dlee,udp,10.10.2.122,62152,10.10.2.164,445, +MKT-WS-022,2026-02-13T13:38:57.517Z,3,C:\Program Files\chrome.exe,ACME\dlee,udp,10.10.2.122,61525,10.10.2.137,53, +MKT-WS-022,2026-02-13T09:14:54.284Z,3,C:\Windows\System32\code.exe,ACME\dlee,tcp,10.10.2.122,56218,217.246.171.248,443, +MKT-WS-022,2026-02-13T23:56:25.384Z,3,C:\Program Files\chrome.exe,ACME\dlee,udp,10.10.2.122,58152,10.10.1.124,53, +MKT-WS-022,2026-02-11T11:01:30.504Z,3,C:\Windows\System32\code.exe,ACME\dlee,udp,10.10.2.122,51898,10.10.3.105,443, +MKT-WS-022,2026-02-20T11:02:21.138Z,3,C:\Windows\System32\cmd.exe,ACME\dlee,udp,10.10.2.122,60811,111.190.73.128,445, +MKT-WS-022,2026-02-12T19:27:32.473Z,3,C:\Windows\System32\cmd.exe,ACME\dlee,tcp,10.10.2.122,62989,204.108.34.163,53,pokerstars.com +MKT-WS-022,2026-02-14T13:20:46.728Z,3,C:\Windows\System32\smss.exe,ACME\dlee,tcp,10.10.2.122,55544,66.230.94.147,445,aws.amazon.com +MKT-WS-022,2026-02-17T09:47:19.619Z,3,C:\Windows\System32\explorer.exe,ACME\dlee,tcp,10.10.2.122,53921,154.178.62.18,443, +MKT-WS-022,2026-02-17T14:30:42.740Z,3,C:\Windows\System32\lsass.exe,ACME\dlee,tcp,10.10.2.122,64682,10.10.3.120,3389, +MKT-WS-022,2026-02-20T12:16:33.621Z,3,C:\Windows\System32\teams.exe,ACME\dlee,tcp,10.10.2.122,54765,41.122.61.144,389, +MKT-WS-022,2026-02-19T05:32:53.762Z,3,C:\Windows\System32\winlogon.exe,ACME\dlee,tcp,10.10.2.122,57924,10.10.2.104,8080, +MKT-WS-022,2026-02-15T18:07:54.263Z,3,C:\Windows\System32\notepad.exe,ACME\dlee,tcp,10.10.2.122,64375,10.10.1.157,443, +MKT-WS-022,2026-02-13T08:39:40.899Z,3,C:\Program Files\chrome.exe,ACME\dlee,udp,10.10.2.122,61939,10.10.3.162,389, +MKT-WS-022,2026-02-19T00:05:14.924Z,3,C:\Windows\System32\smss.exe,ACME\dlee,tcp,10.10.2.122,63914,10.10.2.146,3389, +MKT-WS-022,2026-02-14T10:04:55.001Z,3,C:\Windows\System32\teams.exe,ACME\dlee,tcp,10.10.2.122,53673,169.25.27.58,389,graph.microsoft.com +MKT-WS-022,2026-02-16T00:02:12.558Z,3,C:\Program Files\msedge.exe,ACME\dlee,udp,10.10.2.122,56694,10.10.3.138,445, +MKT-WS-022,2026-02-11T16:06:02.962Z,3,C:\Windows\System32\explorer.exe,ACME\dlee,udp,10.10.2.122,57080,96.69.60.186,389, +EXEC-WS-023,2026-02-15T16:36:46.721Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.3.123,50849,10.10.3.117,8080, +EXEC-WS-023,2026-02-11T00:34:30.089Z,3,C:\Windows\System32\winlogon.exe,ACME\admin,udp,10.10.3.123,61758,10.10.1.163,8080,dc-01.acme.local +EXEC-WS-023,2026-02-13T21:18:35.668Z,3,C:\Windows\System32\System,ACME\admin,udp,10.10.3.123,62391,10.10.1.118,53, +EXEC-WS-023,2026-02-14T16:13:07.519Z,3,C:\Windows\System32\powershell.exe,ACME\admin,tcp,10.10.3.123,65321,129.216.149.81,445, +EXEC-WS-023,2026-02-19T01:29:26.748Z,3,C:\Windows\System32\csrss.exe,ACME\admin,tcp,10.10.3.123,64427,10.10.3.123,8080, +EXEC-WS-023,2026-02-16T02:11:55.724Z,3,C:\Windows\System32\code.exe,ACME\admin,udp,10.10.3.123,49934,47.45.40.39,8080, +EXEC-WS-023,2026-02-19T21:39:34.141Z,3,C:\Windows\System32\code.exe,ACME\admin,tcp,10.10.3.123,49194,10.10.1.10,53, +EXEC-WS-023,2026-02-12T04:08:40.514Z,3,C:\Windows\System32\SearchHost.exe,ACME\admin,udp,10.10.3.123,55141,10.10.2.131,443, +EXEC-WS-023,2026-02-11T17:55:46.493Z,3,C:\Windows\System32\teams.exe,ACME\admin,tcp,10.10.3.123,56023,10.10.1.103,445, +EXEC-WS-023,2026-02-11T08:37:58.819Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.3.123,49493,46.167.206.31,3389, +EXEC-WS-023,2026-02-13T22:44:26.908Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.3.123,64476,129.239.132.40,80, +EXEC-WS-023,2026-02-16T21:39:23.643Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.3.123,55183,10.10.1.148,80,graph.microsoft.com +EXEC-WS-023,2026-02-20T01:34:01.292Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.3.123,58447,10.10.1.12,8080, +IT-WS-024,2026-02-12T19:58:11.314Z,3,C:\Program Files\chrome.exe,ACME\bwilson,udp,10.10.1.124,61396,184.99.118.163,389, +IT-WS-024,2026-02-13T08:06:08.112Z,3,C:\Program Files\chrome.exe,ACME\bwilson,tcp,10.10.1.124,62033,10.10.3.108,3389, +IT-WS-024,2026-02-11T09:28:53.541Z,3,C:\Windows\System32\dwm.exe,ACME\bwilson,udp,10.10.1.124,50835,10.10.1.142,8080, +IT-WS-024,2026-02-13T08:34:24.157Z,3,C:\Windows\System32\winlogon.exe,ACME\bwilson,udp,10.10.1.124,53644,166.165.59.219,53, +IT-WS-024,2026-02-15T07:12:56.127Z,3,C:\Windows\System32\cmd.exe,ACME\bwilson,udp,10.10.1.124,63332,10.10.3.132,389, +IT-WS-024,2026-02-18T01:17:17.711Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\bwilson,udp,10.10.1.124,53990,10.10.2.167,445, +IT-WS-024,2026-02-13T10:14:54.949Z,3,C:\Windows\System32\csrss.exe,ACME\bwilson,tcp,10.10.1.124,58488,40.12.71.128,8080, +IT-WS-024,2026-02-14T20:00:38.842Z,3,C:\Windows\System32\cmd.exe,ACME\bwilson,udp,10.10.1.124,63898,14.254.51.245,3389, +IT-WS-024,2026-02-17T02:09:51.972Z,3,C:\Windows\System32\cmd.exe,ACME\bwilson,tcp,10.10.1.124,52785,94.82.58.100,3389, +IT-WS-024,2026-02-11T17:24:10.370Z,3,C:\Windows\System32\dwm.exe,ACME\bwilson,tcp,10.10.1.124,53646,10.10.1.172,80, +HR-WS-025,2026-02-18T03:38:41.058Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.2.125,57422,80.216.125.49,443, +HR-WS-025,2026-02-19T13:45:26.108Z,3,C:\Windows\System32\lsass.exe,ACME\idavis,tcp,10.10.2.125,59954,152.23.51.120,443, +HR-WS-025,2026-02-17T23:38:59.921Z,3,C:\Windows\System32\csrss.exe,ACME\idavis,tcp,10.10.2.125,57660,10.10.1.130,3389, +HR-WS-025,2026-02-17T18:15:43.798Z,3,C:\Windows\System32\code.exe,ACME\idavis,tcp,10.10.2.125,60451,10.10.2.173,53, +HR-WS-025,2026-02-12T06:40:47.160Z,3,C:\Windows\System32\teams.exe,ACME\idavis,udp,10.10.2.125,58155,20.20.85.102,80, +HR-WS-025,2026-02-12T21:43:47.168Z,3,C:\Windows\System32\winlogon.exe,ACME\idavis,udp,10.10.2.125,62924,10.10.2.104,80,pypi.org +HR-WS-025,2026-02-15T17:01:12.752Z,3,C:\Windows\System32\smss.exe,ACME\idavis,udp,10.10.2.125,57991,10.10.2.161,53, +HR-WS-025,2026-02-12T21:42:54.616Z,3,C:\Windows\System32\services.exe,ACME\idavis,udp,10.10.2.125,59611,177.77.160.204,53, +HR-WS-025,2026-02-14T17:28:53.193Z,3,C:\Windows\System32\explorer.exe,ACME\idavis,udp,10.10.2.125,61049,10.10.3.102,443,www.bet365.com +HR-WS-025,2026-02-17T11:36:39.570Z,3,C:\Windows\System32\winlogon.exe,ACME\idavis,udp,10.10.2.125,57808,171.191.173.145,443, +HR-WS-025,2026-02-18T21:22:13.513Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,tcp,10.10.2.125,64573,10.10.2.131,80, +HR-WS-025,2026-02-14T01:04:28.046Z,3,C:\Windows\System32\taskhostw.exe,ACME\idavis,tcp,10.10.2.125,61694,10.10.1.148,3389, +HR-WS-025,2026-02-12T18:46:55.006Z,3,C:\Windows\System32\code.exe,ACME\idavis,udp,10.10.2.125,61976,160.134.194.142,445, +HR-WS-025,2026-02-15T02:38:04.794Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.2.125,60232,97.111.143.135,80, +HR-WS-025,2026-02-12T04:53:52.069Z,3,C:\Windows\System32\taskhostw.exe,ACME\idavis,udp,10.10.2.125,50851,124.156.60.221,3389, +HR-WS-025,2026-02-13T03:56:12.516Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,tcp,10.10.2.125,61981,10.10.2.143,80, +HR-WS-025,2026-02-16T00:55:42.036Z,3,C:\Windows\System32\services.exe,ACME\idavis,udp,10.10.2.125,56183,10.10.3.108,53, +HR-WS-025,2026-02-19T16:03:49.122Z,3,C:\Windows\System32\svchost.exe,ACME\idavis,tcp,10.10.2.125,50190,103.50.249.117,445, +HR-WS-025,2026-02-17T16:36:52.067Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.2.125,49544,10.10.2.158,443, +HR-WS-025,2026-02-17T09:44:08.943Z,3,C:\Windows\System32\outlook.exe,ACME\idavis,tcp,10.10.2.125,59610,42.132.1.26,389, +HR-WS-025,2026-02-13T00:58:37.832Z,3,C:\Windows\System32\spoolsv.exe,ACME\idavis,udp,10.10.2.125,65159,83.157.107.241,53,login.microsoftonline.com +HR-WS-025,2026-02-15T00:08:05.965Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.2.125,58480,159.147.3.253,80, +HR-WS-025,2026-02-17T14:28:34.502Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,tcp,10.10.2.125,57814,10.10.2.107,80, +HR-WS-025,2026-02-12T06:32:08.074Z,3,C:\Program Files\chrome.exe,ACME\idavis,udp,10.10.2.125,55903,10.10.1.145,443, +HR-WS-025,2026-02-15T09:33:35.779Z,3,C:\Windows\System32\smss.exe,ACME\idavis,udp,10.10.2.125,53641,10.10.2.116,389, +HR-WS-025,2026-02-16T02:56:18.350Z,3,C:\Windows\System32\lsass.exe,ACME\idavis,tcp,10.10.2.125,58562,10.10.2.143,53, +HR-WS-025,2026-02-13T14:47:21.460Z,3,C:\Windows\System32\spoolsv.exe,ACME\idavis,tcp,10.10.2.125,53763,184.126.112.89,443, +HR-WS-025,2026-02-20T10:37:24.149Z,3,C:\Windows\System32\teams.exe,ACME\idavis,tcp,10.10.2.125,65333,10.10.1.151,80, +HR-WS-025,2026-02-17T15:41:10.708Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,udp,10.10.2.125,64131,189.36.117.120,8080, +HR-WS-025,2026-02-20T16:58:53.198Z,3,C:\Program Files\chrome.exe,ACME\idavis,udp,10.10.2.125,56487,10.10.3.159,389, +HR-WS-025,2026-02-18T18:31:23.891Z,3,C:\Windows\System32\code.exe,ACME\idavis,tcp,10.10.2.125,50129,10.10.2.10,443,file-01.acme.local +HR-WS-025,2026-02-18T23:45:20.363Z,3,C:\Windows\System32\teams.exe,ACME\idavis,udp,10.10.2.125,62829,32.31.154.139,389, +HR-WS-025,2026-02-12T09:43:34.704Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,udp,10.10.2.125,53597,10.10.2.128,443, +FIN-WS-026,2026-02-19T19:21:57.321Z,3,C:\Windows\System32\cmd.exe,ACME\svc_backup,tcp,10.10.3.126,64383,156.100.249.192,445, +FIN-WS-026,2026-02-14T14:56:35.805Z,3,C:\Windows\System32\System,ACME\svc_backup,tcp,10.10.3.126,57911,86.53.3.64,80, +FIN-WS-026,2026-02-15T20:04:23.275Z,3,C:\Windows\System32\services.exe,ACME\svc_backup,tcp,10.10.3.126,63463,179.239.204.34,389,acme.local +FIN-WS-026,2026-02-11T01:28:57.837Z,3,C:\Program Files\msedge.exe,ACME\svc_backup,tcp,10.10.3.126,54709,129.40.55.78,80, +FIN-WS-026,2026-02-11T01:17:32.164Z,3,C:\Program Files\msedge.exe,ACME\svc_backup,udp,10.10.3.126,62901,65.147.32.136,3389, +FIN-WS-026,2026-02-20T03:45:19.660Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_backup,udp,10.10.3.126,61795,10.10.1.12,389, +FIN-WS-026,2026-02-12T15:43:43.929Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,tcp,10.10.3.126,56433,10.10.2.110,8080,googleapis.com +FIN-WS-026,2026-02-14T03:45:27.422Z,3,C:\Windows\System32\powershell.exe,ACME\svc_backup,udp,10.10.3.126,57088,155.68.79.200,53, +FIN-WS-026,2026-02-11T10:02:19.865Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_backup,tcp,10.10.3.126,52249,10.10.3.135,445, +FIN-WS-026,2026-02-17T15:22:34.981Z,3,C:\Windows\System32\teams.exe,ACME\svc_backup,udp,10.10.3.126,49484,10.10.2.170,443, +FIN-WS-026,2026-02-18T21:48:56.744Z,3,C:\Windows\System32\dwm.exe,ACME\svc_backup,udp,10.10.3.126,49453,10.10.2.122,445, +FIN-WS-026,2026-02-15T10:59:45.770Z,3,C:\Program Files\msedge.exe,ACME\svc_backup,udp,10.10.3.126,65511,191.195.232.109,3389, +FIN-WS-026,2026-02-13T17:07:15.790Z,3,C:\Windows\System32\powershell.exe,ACME\svc_backup,udp,10.10.3.126,63419,10.10.1.13,53, +FIN-WS-026,2026-02-16T18:13:40.444Z,3,C:\Windows\System32\cmd.exe,ACME\svc_backup,tcp,10.10.3.126,55129,10.10.2.110,53, +FIN-WS-026,2026-02-18T11:31:57.433Z,3,C:\Windows\System32\powershell.exe,ACME\svc_backup,tcp,10.10.3.126,61806,13.84.70.246,53, +FIN-WS-026,2026-02-14T06:42:57.392Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_backup,udp,10.10.3.126,50891,99.217.102.6,3389, +FIN-WS-026,2026-02-13T13:49:27.235Z,3,C:\Windows\System32\services.exe,ACME\svc_backup,udp,10.10.3.126,51334,10.10.3.153,53, +FIN-WS-026,2026-02-20T14:15:47.844Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_backup,tcp,10.10.3.126,58255,170.77.118.252,389, +SLS-WS-027,2026-02-13T13:31:26.019Z,3,C:\Windows\System32\cmd.exe,ACME\hbrown,tcp,10.10.1.127,53792,10.10.1.106,8080, +SLS-WS-027,2026-02-10T10:32:13.954Z,3,C:\Windows\System32\code.exe,ACME\hbrown,tcp,10.10.1.127,59931,183.249.140.69,445, +SLS-WS-027,2026-02-20T02:38:48.409Z,3,C:\Program Files\msedge.exe,ACME\hbrown,udp,10.10.1.127,57587,148.247.242.153,389, +SLS-WS-027,2026-02-18T23:35:30.652Z,3,C:\Windows\System32\notepad.exe,ACME\hbrown,tcp,10.10.1.127,63322,10.10.2.152,389, +SLS-WS-027,2026-02-20T09:53:38.738Z,3,C:\Program Files\chrome.exe,ACME\hbrown,tcp,10.10.1.127,60976,10.10.3.141,445, +SLS-WS-027,2026-02-10T16:19:59.048Z,3,C:\Program Files\chrome.exe,ACME\hbrown,udp,10.10.1.127,58514,10.10.3.117,389,cdn.jsdelivr.net +SLS-WS-027,2026-02-13T12:41:25.596Z,3,C:\Windows\System32\taskhostw.exe,ACME\hbrown,udp,10.10.1.127,60941,10.10.2.110,80, +SLS-WS-027,2026-02-15T15:45:11.512Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\hbrown,tcp,10.10.1.127,51020,10.10.2.173,443, +SLS-WS-027,2026-02-19T04:54:45.265Z,3,C:\Program Files\chrome.exe,ACME\hbrown,tcp,10.10.1.127,63629,10.10.2.167,389, +SLS-WS-027,2026-02-17T05:44:56.963Z,3,C:\Program Files\chrome.exe,ACME\hbrown,tcp,10.10.1.127,61376,99.34.245.135,3389,time.windows.com +SLS-WS-027,2026-02-12T04:26:03.545Z,3,C:\Program Files\msedge.exe,ACME\hbrown,tcp,10.10.1.127,55189,202.188.184.116,443, +SLS-WS-027,2026-02-11T19:58:43.279Z,3,C:\Windows\System32\SearchHost.exe,ACME\hbrown,tcp,10.10.1.127,54627,10.10.2.146,80, +SLS-WS-027,2026-02-13T13:43:03.479Z,3,C:\Windows\System32\services.exe,ACME\hbrown,tcp,10.10.1.127,50384,148.40.69.70,3389, +SLS-WS-027,2026-02-14T21:36:33.967Z,3,C:\Windows\System32\OneDrive.exe,ACME\hbrown,udp,10.10.1.127,64866,133.138.169.104,443,time.windows.com +SLS-WS-027,2026-02-13T03:09:53.822Z,3,C:\Windows\System32\OneDrive.exe,ACME\hbrown,udp,10.10.1.127,56810,54.148.149.123,443, +SLS-WS-027,2026-02-10T17:55:17.409Z,3,C:\Program Files\chrome.exe,ACME\hbrown,tcp,10.10.1.127,54274,10.10.3.132,445, +SLS-WS-027,2026-02-18T15:34:45.711Z,3,C:\Program Files\chrome.exe,ACME\hbrown,tcp,10.10.1.127,57682,10.10.2.137,80, +SLS-WS-027,2026-02-20T11:45:28.909Z,3,C:\Program Files\msedge.exe,ACME\hbrown,udp,10.10.1.127,51145,10.10.2.155,443,github.com +ENG-WS-028,2026-02-14T03:14:10.850Z,3,C:\Windows\System32\services.exe,ACME\emartinez,udp,10.10.2.128,62528,144.71.44.148,8080, +ENG-WS-028,2026-02-19T21:57:04.625Z,3,C:\Windows\System32\dwm.exe,ACME\emartinez,tcp,10.10.2.128,51170,10.10.1.145,443, +ENG-WS-028,2026-02-12T08:58:50.550Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\emartinez,udp,10.10.2.128,55084,10.10.1.10,80, +ENG-WS-028,2026-02-17T17:08:46.774Z,3,C:\Windows\System32\OneDrive.exe,ACME\emartinez,udp,10.10.2.128,53739,10.10.2.101,80, +ENG-WS-028,2026-02-15T03:57:12.851Z,3,C:\Program Files\chrome.exe,ACME\emartinez,tcp,10.10.2.128,63758,10.10.3.132,8080, +ENG-WS-028,2026-02-17T15:48:33.339Z,3,C:\Program Files\chrome.exe,ACME\emartinez,tcp,10.10.2.128,56490,11.199.11.240,443, +ENG-WS-028,2026-02-12T09:42:15.693Z,3,C:\Windows\System32\MsMpEng.exe,ACME\emartinez,udp,10.10.2.128,57653,41.127.181.182,53, +ENG-WS-028,2026-02-15T06:53:35.084Z,3,C:\Windows\System32\lsass.exe,ACME\emartinez,udp,10.10.2.128,52423,10.10.1.118,8080, +ENG-WS-028,2026-02-19T21:55:22.796Z,3,C:\Program Files\chrome.exe,ACME\emartinez,tcp,10.10.2.128,56586,10.10.3.141,389, +ENG-WS-028,2026-02-16T13:19:16.260Z,3,C:\Windows\System32\outlook.exe,ACME\emartinez,udp,10.10.2.128,50928,72.134.111.147,8080, +ENG-WS-028,2026-02-16T21:29:53.297Z,3,C:\Windows\System32\code.exe,ACME\emartinez,udp,10.10.2.128,51437,10.10.2.113,3389, +ENG-WS-028,2026-02-17T12:49:42.334Z,3,C:\Windows\System32\dwm.exe,ACME\emartinez,udp,10.10.2.128,61016,212.39.211.194,3389, +ENG-WS-028,2026-02-16T03:36:21.302Z,3,C:\Program Files\msedge.exe,ACME\emartinez,udp,10.10.2.128,56937,94.102.79.16,53, +ENG-WS-028,2026-02-20T06:31:40.270Z,3,C:\Windows\System32\cmd.exe,ACME\emartinez,tcp,10.10.2.128,49629,10.10.3.111,80, +ENG-WS-028,2026-02-14T23:43:03.660Z,3,C:\Windows\System32\lsass.exe,ACME\emartinez,udp,10.10.2.128,56088,10.10.2.11,8080, +ENG-WS-028,2026-02-12T10:17:16.151Z,3,C:\Windows\System32\cmd.exe,ACME\emartinez,udp,10.10.2.128,49507,10.10.2.122,80, +ENG-WS-028,2026-02-14T23:31:00.649Z,3,C:\Windows\System32\lsass.exe,ACME\emartinez,udp,10.10.2.128,54682,10.10.3.141,3389, +ENG-WS-028,2026-02-19T16:20:27.051Z,3,C:\Windows\System32\cmd.exe,ACME\emartinez,tcp,10.10.2.128,54217,79.72.91.216,53, +ENG-WS-028,2026-02-15T09:05:18.494Z,3,C:\Program Files\msedge.exe,ACME\emartinez,tcp,10.10.2.128,63535,41.192.202.203,443, +ENG-WS-028,2026-02-16T03:13:20.703Z,3,C:\Program Files\chrome.exe,ACME\emartinez,udp,10.10.2.128,49784,48.57.122.112,443, +ENG-WS-028,2026-02-11T13:17:46.816Z,3,C:\Windows\System32\smss.exe,ACME\emartinez,tcp,10.10.2.128,58165,103.117.37.106,8080,akamai.net +ENG-WS-028,2026-02-14T16:25:49.345Z,3,C:\Windows\System32\svchost.exe,ACME\emartinez,udp,10.10.2.128,52892,10.10.2.113,443, +ENG-WS-028,2026-02-15T04:25:25.982Z,3,C:\Windows\System32\winlogon.exe,ACME\emartinez,tcp,10.10.2.128,58055,10.10.1.103,8080, +ENG-WS-028,2026-02-18T01:46:09.714Z,3,C:\Windows\System32\explorer.exe,ACME\emartinez,udp,10.10.2.128,55330,10.10.1.139,53, +ENG-WS-028,2026-02-11T16:21:45.633Z,3,C:\Windows\System32\MsMpEng.exe,ACME\emartinez,udp,10.10.2.128,53014,69.127.7.180,53, +ENG-WS-028,2026-02-17T01:33:56.763Z,3,C:\Windows\System32\taskhostw.exe,ACME\emartinez,udp,10.10.2.128,50470,65.101.62.130,389, +LEG-WS-029,2026-02-12T03:22:56.876Z,3,C:\Program Files\chrome.exe,ACME\bwilson,tcp,10.10.3.129,58154,194.208.71.186,80, +LEG-WS-029,2026-02-16T07:32:58.214Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.3.129,57835,10.10.2.164,80, +LEG-WS-029,2026-02-13T05:04:24.347Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.3.129,53746,10.10.1.118,389, +LEG-WS-029,2026-02-19T07:21:35.829Z,3,C:\Windows\System32\code.exe,ACME\bwilson,tcp,10.10.3.129,53187,54.69.77.123,389, +LEG-WS-029,2026-02-19T18:29:37.335Z,3,C:\Windows\System32\lsass.exe,ACME\bwilson,udp,10.10.3.129,60020,205.167.19.100,3389,cloudflare.com +LEG-WS-029,2026-02-15T17:12:31.025Z,3,C:\Windows\System32\smss.exe,ACME\bwilson,tcp,10.10.3.129,59734,130.217.206.180,389, +LEG-WS-029,2026-02-18T12:23:31.773Z,3,C:\Program Files\chrome.exe,ACME\bwilson,udp,10.10.3.129,61461,218.4.231.101,443, +LEG-WS-029,2026-02-19T14:05:24.742Z,3,C:\Windows\System32\svchost.exe,ACME\bwilson,tcp,10.10.3.129,64483,10.10.3.114,445, +LEG-WS-029,2026-02-20T17:20:03.901Z,3,C:\Windows\System32\code.exe,ACME\bwilson,tcp,10.10.3.129,54708,90.131.22.146,3389, +LEG-WS-029,2026-02-14T10:18:27.451Z,3,C:\Windows\System32\spoolsv.exe,ACME\bwilson,udp,10.10.3.129,59112,190.126.100.218,443, +LEG-WS-029,2026-02-18T02:57:05.807Z,3,C:\Windows\System32\dwm.exe,ACME\bwilson,tcp,10.10.3.129,64662,10.10.3.135,389,draftkings.com +LEG-WS-029,2026-02-18T18:38:36.853Z,3,C:\Windows\System32\SearchHost.exe,ACME\bwilson,udp,10.10.3.129,54744,10.10.3.147,445, +LEG-WS-029,2026-02-18T00:59:32.181Z,3,C:\Windows\System32\dwm.exe,ACME\bwilson,tcp,10.10.3.129,55829,92.161.56.38,445,acme.local +LEG-WS-029,2026-02-13T12:57:11.584Z,3,C:\Program Files\chrome.exe,ACME\bwilson,udp,10.10.3.129,60188,10.10.1.142,80, +LEG-WS-029,2026-02-11T02:59:48.182Z,3,C:\Windows\System32\spoolsv.exe,ACME\bwilson,udp,10.10.3.129,59475,10.10.3.129,80, +LEG-WS-029,2026-02-13T02:48:59.355Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.3.129,51929,58.87.79.205,3389,graph.microsoft.com +LEG-WS-029,2026-02-17T23:18:15.496Z,3,C:\Windows\System32\MsMpEng.exe,ACME\bwilson,tcp,10.10.3.129,62903,10.10.1.139,53, +LEG-WS-029,2026-02-17T15:03:58.787Z,3,C:\Windows\System32\dwm.exe,ACME\bwilson,udp,10.10.3.129,60834,10.10.1.13,80, +LEG-WS-029,2026-02-13T15:36:20.732Z,3,C:\Program Files\chrome.exe,ACME\bwilson,udp,10.10.3.129,54349,10.10.3.135,53, +LEG-WS-029,2026-02-11T17:14:55.945Z,3,C:\Windows\System32\System,ACME\bwilson,tcp,10.10.3.129,61293,10.10.1.10,80, +MKT-WS-030,2026-02-15T06:55:52.290Z,3,C:\Windows\System32\svchost.exe,ACME\fthompson,udp,10.10.1.130,63340,10.10.1.139,3389, +MKT-WS-030,2026-02-14T23:36:05.542Z,3,C:\Windows\System32\teams.exe,ACME\fthompson,udp,10.10.1.130,60990,10.10.3.132,3389, +MKT-WS-030,2026-02-19T04:52:39.582Z,3,C:\Windows\System32\services.exe,ACME\fthompson,udp,10.10.1.130,63720,220.152.118.27,80,windowsupdate.com +MKT-WS-030,2026-02-20T11:03:42.128Z,3,C:\Program Files\chrome.exe,ACME\fthompson,udp,10.10.1.130,54620,92.103.171.46,8080, +MKT-WS-030,2026-02-16T15:34:54.262Z,3,C:\Windows\System32\spoolsv.exe,ACME\fthompson,tcp,10.10.1.130,64030,10.10.1.160,3389, +MKT-WS-030,2026-02-11T19:40:12.660Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\fthompson,tcp,10.10.1.130,64611,10.10.1.142,80, +MKT-WS-030,2026-02-13T10:51:46.421Z,3,C:\Program Files\chrome.exe,ACME\fthompson,tcp,10.10.1.130,63700,10.10.1.160,389, +MKT-WS-030,2026-02-20T05:26:24.683Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\fthompson,udp,10.10.1.130,58974,64.108.140.22,8080, +MKT-WS-030,2026-02-15T02:04:00.746Z,3,C:\Windows\System32\teams.exe,ACME\fthompson,tcp,10.10.1.130,49353,10.10.3.174,445, +MKT-WS-030,2026-02-17T17:01:14.267Z,3,C:\Program Files\chrome.exe,ACME\fthompson,tcp,10.10.1.130,64741,10.10.3.144,53,www.bet365.com +MKT-WS-030,2026-02-19T04:49:31.620Z,3,C:\Windows\System32\lsass.exe,ACME\fthompson,udp,10.10.1.130,51216,10.10.1.106,443, +MKT-WS-030,2026-02-15T10:14:47.651Z,3,C:\Program Files\chrome.exe,ACME\fthompson,udp,10.10.1.130,63368,10.10.2.131,53, +MKT-WS-030,2026-02-15T05:51:46.476Z,3,C:\Windows\System32\lsass.exe,ACME\fthompson,udp,10.10.1.130,63520,10.10.3.141,8080, +MKT-WS-030,2026-02-15T19:22:14.433Z,3,C:\Program Files\chrome.exe,ACME\fthompson,udp,10.10.1.130,53051,10.10.2.137,3389, +MKT-WS-030,2026-02-12T23:40:35.558Z,3,C:\Windows\System32\taskhostw.exe,ACME\fthompson,tcp,10.10.1.130,61070,217.52.221.4,3389, +EXEC-WS-031,2026-02-18T13:34:41.040Z,3,C:\Program Files\msedge.exe,ACME\svc_backup,udp,10.10.2.131,63296,28.0.24.107,80, +EXEC-WS-031,2026-02-17T03:43:02.009Z,3,C:\Windows\System32\OneDrive.exe,ACME\svc_backup,udp,10.10.2.131,55354,176.135.187.57,53,update.microsoft.com +EXEC-WS-031,2026-02-12T21:26:15.499Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_backup,tcp,10.10.2.131,58849,71.78.43.254,443, +EXEC-WS-031,2026-02-18T08:40:11.977Z,3,C:\Windows\System32\dwm.exe,ACME\svc_backup,udp,10.10.2.131,58893,10.10.1.163,80, +EXEC-WS-031,2026-02-16T22:08:37.242Z,3,C:\Windows\System32\teams.exe,ACME\svc_backup,udp,10.10.2.131,57884,10.10.1.121,53, +EXEC-WS-031,2026-02-11T21:37:26.370Z,3,C:\Windows\System32\dwm.exe,ACME\svc_backup,udp,10.10.2.131,64125,10.10.2.104,389, +EXEC-WS-031,2026-02-13T22:55:52.777Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_backup,udp,10.10.2.131,54044,10.10.2.125,443,acme.sharepoint.com +EXEC-WS-031,2026-02-20T06:27:07.955Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,tcp,10.10.2.131,60427,138.146.31.60,445, +EXEC-WS-031,2026-02-15T02:17:18.217Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_backup,tcp,10.10.2.131,49645,10.10.1.139,8080, +EXEC-WS-031,2026-02-11T01:30:08.501Z,3,C:\Windows\System32\notepad.exe,ACME\svc_backup,tcp,10.10.2.131,55948,10.10.3.105,389, +EXEC-WS-031,2026-02-14T02:13:01.369Z,3,C:\Program Files\msedge.exe,ACME\svc_backup,udp,10.10.2.131,62249,168.176.34.67,53, +EXEC-WS-031,2026-02-12T04:32:56.934Z,3,C:\Windows\System32\System,ACME\svc_backup,udp,10.10.2.131,56730,10.10.3.159,3389, +EXEC-WS-031,2026-02-19T20:33:01.748Z,3,C:\Windows\System32\notepad.exe,ACME\svc_backup,tcp,10.10.2.131,52710,200.199.248.55,3389, +EXEC-WS-031,2026-02-11T18:36:34.836Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_backup,udp,10.10.2.131,59093,204.61.244.212,3389, +EXEC-WS-031,2026-02-13T23:24:03.881Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_backup,udp,10.10.2.131,49882,10.10.2.116,80, +EXEC-WS-031,2026-02-12T02:39:34.841Z,3,C:\Windows\System32\smss.exe,ACME\svc_backup,tcp,10.10.2.131,50445,150.7.47.3,80, +EXEC-WS-031,2026-02-16T04:14:27.011Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,tcp,10.10.2.131,59154,10.10.1.130,80, +EXEC-WS-031,2026-02-19T18:08:25.894Z,3,C:\Windows\System32\services.exe,ACME\svc_backup,udp,10.10.2.131,54919,10.216.0.116,8080, +EXEC-WS-031,2026-02-16T00:19:16.514Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_backup,tcp,10.10.2.131,50572,10.10.3.108,443, +EXEC-WS-031,2026-02-13T08:37:41.159Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_backup,tcp,10.10.2.131,59781,10.10.2.11,445, +EXEC-WS-031,2026-02-13T04:36:57.169Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,tcp,10.10.2.131,54402,131.113.4.80,8080, +EXEC-WS-031,2026-02-16T01:16:10.831Z,3,C:\Windows\System32\teams.exe,ACME\svc_backup,udp,10.10.2.131,54478,24.110.18.18,443, +EXEC-WS-031,2026-02-12T08:00:11.752Z,3,C:\Windows\System32\teams.exe,ACME\svc_backup,tcp,10.10.2.131,58419,10.10.1.109,445, +EXEC-WS-031,2026-02-20T04:09:33.514Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_backup,tcp,10.10.2.131,51470,10.10.2.146,389, +EXEC-WS-031,2026-02-16T13:55:08.492Z,3,C:\Windows\System32\spoolsv.exe,ACME\svc_backup,udp,10.10.2.131,55732,10.10.2.140,53, +EXEC-WS-031,2026-02-11T10:36:15.681Z,3,C:\Windows\System32\notepad.exe,ACME\svc_backup,udp,10.10.2.131,64148,126.50.220.142,80,google.com +EXEC-WS-031,2026-02-14T02:33:26.599Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,tcp,10.10.2.131,50847,10.10.1.106,443, +EXEC-WS-031,2026-02-15T01:22:26.844Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_backup,udp,10.10.2.131,53847,10.10.3.105,80, +EXEC-WS-031,2026-02-14T22:36:31.510Z,3,C:\Windows\System32\svchost.exe,ACME\svc_backup,tcp,10.10.2.131,57702,82.157.125.85,8080, +EXEC-WS-031,2026-02-17T19:39:43.871Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_backup,tcp,10.10.2.131,63611,180.76.78.157,445, +EXEC-WS-031,2026-02-15T16:33:52.617Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_backup,tcp,10.10.2.131,53011,172.165.43.174,8080, +IT-WS-032,2026-02-13T01:24:36.725Z,3,C:\Windows\System32\smss.exe,ACME\svc_web,udp,10.10.3.132,54035,216.219.29.240,445, +IT-WS-032,2026-02-15T21:03:14.910Z,3,C:\Program Files\chrome.exe,ACME\svc_web,tcp,10.10.3.132,60211,22.202.60.85,80, +IT-WS-032,2026-02-20T06:01:00.945Z,3,C:\Windows\System32\explorer.exe,ACME\svc_web,tcp,10.10.3.132,57509,210.6.255.137,80, +IT-WS-032,2026-02-10T16:31:34.418Z,3,C:\Windows\System32\lsass.exe,ACME\svc_web,tcp,10.10.3.132,62110,116.10.118.78,443, +IT-WS-032,2026-02-17T05:42:17.714Z,3,C:\Windows\System32\notepad.exe,ACME\svc_web,udp,10.10.3.132,50569,173.209.144.97,3389, +IT-WS-032,2026-02-20T03:36:04.424Z,3,C:\Windows\System32\csrss.exe,ACME\svc_web,tcp,10.10.3.132,59611,112.85.47.145,389, +IT-WS-032,2026-02-16T11:29:48.788Z,3,C:\Program Files\chrome.exe,ACME\svc_web,tcp,10.10.3.132,60998,101.130.226.16,445, +IT-WS-032,2026-02-13T07:21:42.429Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.3.132,59611,118.39.129.76,8080, +IT-WS-032,2026-02-15T04:16:28.713Z,3,C:\Windows\System32\csrss.exe,ACME\svc_web,udp,10.10.3.132,49231,52.57.54.197,8080, +IT-WS-032,2026-02-10T17:10:55.999Z,3,C:\Windows\System32\services.exe,ACME\svc_web,udp,10.10.3.132,62284,10.10.1.145,389, +IT-WS-032,2026-02-10T22:45:00.987Z,3,C:\Windows\System32\svchost.exe,ACME\svc_web,tcp,10.10.3.132,59379,59.103.152.144,3389, +IT-WS-032,2026-02-17T20:19:17.768Z,3,C:\Program Files\msedge.exe,ACME\svc_web,tcp,10.10.3.132,52199,10.10.2.161,445, +IT-WS-032,2026-02-20T02:37:47.611Z,3,C:\Windows\System32\smss.exe,ACME\svc_web,udp,10.10.3.132,63692,129.49.43.93,3389, +IT-WS-032,2026-02-20T14:01:14.023Z,3,C:\Windows\System32\spoolsv.exe,ACME\svc_web,tcp,10.10.3.132,61936,154.174.126.212,443, +IT-WS-032,2026-02-18T18:48:03.559Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_web,tcp,10.10.3.132,65298,10.10.2.110,80, +IT-WS-032,2026-02-18T15:44:50.059Z,3,C:\Program Files\chrome.exe,ACME\svc_web,udp,10.10.3.132,55180,10.10.2.107,80, +IT-WS-032,2026-02-16T10:48:25.100Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.3.132,60612,41.48.93.138,53, +IT-WS-032,2026-02-12T04:24:47.049Z,3,C:\Windows\System32\csrss.exe,ACME\svc_web,tcp,10.10.3.132,59660,12.163.144.234,389, +IT-WS-032,2026-02-17T17:03:02.670Z,3,C:\Windows\System32\spoolsv.exe,ACME\svc_web,tcp,10.10.3.132,54848,10.10.1.136,80, +IT-WS-032,2026-02-17T22:44:43.923Z,3,C:\Windows\System32\dwm.exe,ACME\svc_web,tcp,10.10.3.132,51859,10.10.2.104,445, +IT-WS-032,2026-02-14T05:03:04.611Z,3,C:\Windows\System32\csrss.exe,ACME\svc_web,tcp,10.10.3.132,64358,42.124.109.103,443, +IT-WS-032,2026-02-14T18:03:22.693Z,3,C:\Program Files\chrome.exe,ACME\svc_web,udp,10.10.3.132,51491,10.10.2.128,53, +IT-WS-032,2026-02-14T03:49:06.636Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_web,udp,10.10.3.132,55554,10.10.1.157,8080, +IT-WS-032,2026-02-11T06:24:07.777Z,3,C:\Program Files\msedge.exe,ACME\svc_web,tcp,10.10.3.132,49324,10.10.2.113,445, +IT-WS-032,2026-02-14T06:14:21.217Z,3,C:\Windows\System32\explorer.exe,ACME\svc_web,tcp,10.10.3.132,56619,152.214.49.45,8080, +IT-WS-032,2026-02-14T22:42:33.061Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.3.132,53469,10.10.1.10,443, +IT-WS-032,2026-02-17T00:14:15.917Z,3,C:\Windows\System32\OneDrive.exe,ACME\svc_web,udp,10.10.3.132,64251,129.161.18.116,53, +IT-WS-032,2026-02-16T22:03:19.373Z,3,C:\Windows\System32\code.exe,ACME\svc_web,tcp,10.10.3.132,52604,10.10.1.127,443, +IT-WS-032,2026-02-18T17:41:28.714Z,3,C:\Windows\System32\smss.exe,ACME\svc_web,tcp,10.10.3.132,58331,2.25.52.193,80, +IT-WS-032,2026-02-18T04:16:24.099Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_web,udp,10.10.3.132,51643,176.77.71.22,80,google.com +IT-WS-032,2026-02-14T13:47:30.964Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.3.132,56575,10.10.2.107,53, +IT-WS-032,2026-02-13T11:19:26.595Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.3.132,53376,182.138.29.7,3389, +IT-WS-032,2026-02-18T17:48:03.560Z,3,C:\Program Files\chrome.exe,ACME\svc_web,udp,10.10.3.132,59209,142.200.5.104,53, +IT-WS-032,2026-02-16T15:51:11.633Z,3,C:\Windows\System32\svchost.exe,ACME\svc_web,udp,10.10.3.132,63663,10.10.1.118,445, +IT-WS-032,2026-02-16T06:12:41.652Z,3,C:\Windows\System32\smss.exe,ACME\svc_web,tcp,10.10.3.132,62851,10.10.2.158,53, +IT-WS-032,2026-02-10T21:04:35.871Z,3,C:\Windows\System32\csrss.exe,ACME\svc_web,udp,10.10.3.132,57173,10.10.3.10,8080, +IT-WS-032,2026-02-12T15:38:28.167Z,3,C:\Windows\System32\notepad.exe,ACME\svc_web,udp,10.10.3.132,59125,10.10.2.11,53, +HR-WS-033,2026-02-18T05:17:04.331Z,3,C:\Windows\System32\smss.exe,ACME\admin,tcp,10.10.1.133,55667,10.10.1.118,53,google.com +HR-WS-033,2026-02-19T18:26:19.870Z,3,C:\Windows\System32\spoolsv.exe,ACME\admin,tcp,10.10.1.133,61718,10.10.1.160,443, +HR-WS-033,2026-02-14T18:54:13.754Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.1.133,49378,10.10.2.104,53, +HR-WS-033,2026-02-18T07:54:31.088Z,3,C:\Windows\System32\smss.exe,ACME\admin,udp,10.10.1.133,61431,10.10.1.109,445, +HR-WS-033,2026-02-11T23:21:20.622Z,3,C:\Windows\System32\spoolsv.exe,ACME\admin,udp,10.10.1.133,62047,136.75.190.105,80, +HR-WS-033,2026-02-10T13:22:34.720Z,3,C:\Windows\System32\services.exe,ACME\admin,tcp,10.10.1.133,65517,113.211.47.57,3389, +HR-WS-033,2026-02-18T00:07:38.784Z,3,C:\Windows\System32\teams.exe,ACME\admin,tcp,10.10.1.133,51259,137.119.214.86,389,file-01.acme.local +HR-WS-033,2026-02-12T06:03:34.013Z,3,C:\Windows\System32\csrss.exe,ACME\admin,udp,10.10.1.133,60803,143.81.162.135,443, +HR-WS-033,2026-02-18T03:40:29.570Z,3,C:\Windows\System32\csrss.exe,ACME\admin,tcp,10.10.1.133,64719,10.10.1.124,8080, +HR-WS-033,2026-02-11T21:13:13.324Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.1.133,57115,10.10.1.11,443, +HR-WS-033,2026-02-16T02:59:05.813Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\admin,udp,10.10.1.133,49175,10.10.2.161,389, +HR-WS-033,2026-02-14T21:47:27.605Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.1.133,49364,211.92.213.23,445, +HR-WS-033,2026-02-18T20:51:22.594Z,3,C:\Windows\System32\lsass.exe,ACME\admin,udp,10.10.1.133,52578,131.81.223.121,8080, +HR-WS-033,2026-02-12T02:07:32.624Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.1.133,54454,10.10.1.106,53, +HR-WS-033,2026-02-19T17:24:37.450Z,3,C:\Windows\System32\dwm.exe,ACME\admin,udp,10.10.1.133,58610,102.225.79.178,80, +HR-WS-033,2026-02-15T03:41:32.509Z,3,C:\Windows\System32\winlogon.exe,ACME\admin,tcp,10.10.1.133,53642,10.10.2.152,53, +HR-WS-033,2026-02-13T01:49:33.947Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.1.133,56668,196.178.170.219,80, +HR-WS-033,2026-02-11T10:29:05.850Z,3,C:\Windows\System32\explorer.exe,ACME\admin,udp,10.10.1.133,57299,153.176.117.41,80, +HR-WS-033,2026-02-18T19:11:02.419Z,3,C:\Windows\System32\dwm.exe,ACME\admin,tcp,10.10.1.133,63085,185.194.188.68,445, +HR-WS-033,2026-02-16T19:59:55.381Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.1.133,62630,10.10.3.111,445, +HR-WS-033,2026-02-13T11:03:15.227Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.1.133,64123,122.51.231.168,3389, +HR-WS-033,2026-02-17T06:22:49.698Z,3,C:\Windows\System32\SearchHost.exe,ACME\admin,udp,10.10.1.133,50546,10.10.2.161,80, +HR-WS-033,2026-02-12T08:24:42.988Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.1.133,59217,17.183.28.3,443, +HR-WS-033,2026-02-13T15:58:25.777Z,3,C:\Windows\System32\powershell.exe,ACME\admin,udp,10.10.1.133,55477,10.10.1.142,53, +HR-WS-033,2026-02-11T01:51:42.670Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.1.133,49691,10.10.3.132,445, +HR-WS-033,2026-02-11T00:33:21.414Z,3,C:\Windows\System32\svchost.exe,ACME\admin,tcp,10.10.1.133,61851,10.10.1.112,3389,time.windows.com +HR-WS-033,2026-02-16T18:47:17.482Z,3,C:\Windows\System32\explorer.exe,ACME\admin,udp,10.10.1.133,58108,10.10.3.111,8080, +HR-WS-033,2026-02-19T17:03:13.514Z,3,C:\Windows\System32\SearchHost.exe,ACME\admin,tcp,10.10.1.133,60428,10.10.2.164,80, +HR-WS-033,2026-02-14T16:35:17.933Z,3,C:\Windows\System32\System,ACME\admin,tcp,10.10.1.133,62239,10.4.18.17,443,graph.microsoft.com +HR-WS-033,2026-02-19T12:43:40.252Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.1.133,50926,10.10.1.169,8080, +HR-WS-033,2026-02-14T12:13:42.305Z,3,C:\Windows\System32\powershell.exe,ACME\admin,udp,10.10.1.133,50323,10.10.1.136,3389, +HR-WS-033,2026-02-19T03:50:41.498Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.1.133,53273,10.10.2.119,80, +FIN-WS-034,2026-02-19T17:22:27.964Z,3,C:\Windows\System32\spoolsv.exe,ACME\idavis,tcp,10.10.2.134,60412,10.10.2.161,389, +FIN-WS-034,2026-02-11T15:04:38.658Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,udp,10.10.2.134,64031,108.62.103.177,8080, +FIN-WS-034,2026-02-11T13:15:26.635Z,3,C:\Windows\System32\notepad.exe,ACME\idavis,udp,10.10.2.134,59175,80.43.215.235,3389, +FIN-WS-034,2026-02-17T00:08:08.274Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.2.134,62956,10.10.3.111,3389,akamai.net +FIN-WS-034,2026-02-17T07:14:54.233Z,3,C:\Windows\System32\taskhostw.exe,ACME\idavis,udp,10.10.2.134,59913,10.10.1.109,3389,teams.microsoft.com +FIN-WS-034,2026-02-17T08:38:15.272Z,3,C:\Windows\System32\spoolsv.exe,ACME\idavis,tcp,10.10.2.134,65049,10.10.3.102,443, +FIN-WS-034,2026-02-17T14:51:48.045Z,3,C:\Windows\System32\csrss.exe,ACME\idavis,tcp,10.10.2.134,53073,10.10.2.122,8080, +FIN-WS-034,2026-02-14T16:59:24.496Z,3,C:\Windows\System32\dwm.exe,ACME\idavis,tcp,10.10.2.134,63148,54.173.168.115,80, +FIN-WS-034,2026-02-17T13:20:00.761Z,3,C:\Windows\System32\services.exe,ACME\idavis,udp,10.10.2.134,53648,10.10.2.122,8080, +FIN-WS-034,2026-02-16T19:54:40.411Z,3,C:\Windows\System32\csrss.exe,ACME\idavis,udp,10.10.2.134,58337,10.10.3.150,53,login.microsoftonline.com +FIN-WS-034,2026-02-18T20:25:15.703Z,3,C:\Program Files\chrome.exe,ACME\idavis,udp,10.10.2.134,59198,150.162.79.168,8080, +FIN-WS-034,2026-02-16T16:05:41.861Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.2.134,64819,165.218.96.254,443, +FIN-WS-034,2026-02-12T20:57:51.573Z,3,C:\Windows\System32\taskhostw.exe,ACME\idavis,tcp,10.10.2.134,50262,10.10.2.11,443, +FIN-WS-034,2026-02-13T09:39:01.465Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,udp,10.10.2.134,49550,10.10.3.129,445, +FIN-WS-034,2026-02-11T22:57:07.840Z,3,C:\Windows\System32\taskhostw.exe,ACME\idavis,udp,10.10.2.134,50141,75.185.97.137,389, +FIN-WS-034,2026-02-20T14:56:30.903Z,3,C:\Windows\System32\explorer.exe,ACME\idavis,tcp,10.10.2.134,63177,199.164.248.254,445, +FIN-WS-034,2026-02-14T06:05:36.689Z,3,C:\Windows\System32\System,ACME\idavis,tcp,10.10.2.134,64414,10.10.2.167,389, +FIN-WS-034,2026-02-13T12:41:58.179Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.2.134,56329,12.182.62.178,443, +FIN-WS-034,2026-02-12T02:26:34.874Z,3,C:\Windows\System32\dwm.exe,ACME\idavis,udp,10.10.2.134,57280,10.10.3.165,3389, +FIN-WS-034,2026-02-19T02:49:15.330Z,3,C:\Windows\System32\dwm.exe,ACME\idavis,udp,10.10.2.134,60982,10.10.1.13,389, +FIN-WS-034,2026-02-13T11:23:15.123Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,tcp,10.10.2.134,53191,10.10.2.107,53, +FIN-WS-034,2026-02-17T03:24:24.381Z,3,C:\Windows\System32\csrss.exe,ACME\idavis,tcp,10.10.2.134,55652,209.38.225.192,80, +FIN-WS-034,2026-02-16T22:48:26.583Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,udp,10.10.2.134,56421,10.10.2.113,443, +FIN-WS-034,2026-02-19T16:02:47.958Z,3,C:\Windows\System32\notepad.exe,ACME\idavis,udp,10.10.2.134,61242,205.252.122.109,3389, +SLS-WS-035,2026-02-15T04:23:41.236Z,3,C:\Program Files\chrome.exe,ACME\bwilson,tcp,10.10.3.135,64539,130.36.151.193,80,googleapis.com +SLS-WS-035,2026-02-17T11:19:50.696Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.3.135,62350,54.253.64.30,80, +SLS-WS-035,2026-02-16T16:26:58.469Z,3,C:\Windows\System32\SearchHost.exe,ACME\bwilson,tcp,10.10.3.135,63959,10.10.2.164,443, +SLS-WS-035,2026-02-20T12:57:24.172Z,3,C:\Windows\System32\outlook.exe,ACME\bwilson,tcp,10.10.3.135,64343,10.10.3.123,443, +SLS-WS-035,2026-02-19T06:04:59.546Z,3,C:\Windows\System32\notepad.exe,ACME\bwilson,tcp,10.10.3.135,65182,56.171.186.99,3389, +SLS-WS-035,2026-02-10T12:12:12.440Z,3,C:\Windows\System32\cmd.exe,ACME\bwilson,udp,10.10.3.135,50966,10.10.2.107,8080, +SLS-WS-035,2026-02-10T22:12:41.274Z,3,C:\Windows\System32\svchost.exe,ACME\bwilson,udp,10.10.3.135,56790,10.10.2.137,53,windowsupdate.com +SLS-WS-035,2026-02-11T00:58:51.382Z,3,C:\Program Files\msedge.exe,ACME\bwilson,udp,10.10.3.135,51892,10.10.1.121,53, +SLS-WS-035,2026-02-10T15:59:59.421Z,3,C:\Program Files\chrome.exe,ACME\bwilson,tcp,10.10.3.135,51374,10.10.3.165,8080, +SLS-WS-035,2026-02-12T12:05:28.488Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.3.135,63708,167.45.110.155,8080, +SLS-WS-035,2026-02-15T04:46:56.692Z,3,C:\Windows\System32\MsMpEng.exe,ACME\bwilson,tcp,10.10.3.135,63923,165.148.168.25,8080, +SLS-WS-035,2026-02-18T06:27:53.649Z,3,C:\Windows\System32\lsass.exe,ACME\bwilson,udp,10.10.3.135,50383,2.228.206.75,445, +SLS-WS-035,2026-02-11T06:00:25.052Z,3,C:\Windows\System32\powershell.exe,ACME\bwilson,udp,10.10.3.135,52983,166.189.79.185,80, +SLS-WS-035,2026-02-20T17:09:11.026Z,3,C:\Windows\System32\lsass.exe,ACME\bwilson,tcp,10.10.3.135,54550,189.1.177.69,445, +SLS-WS-035,2026-02-14T10:51:09.345Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\bwilson,udp,10.10.3.135,59161,10.10.1.166,445, +SLS-WS-035,2026-02-12T18:02:30.507Z,3,C:\Windows\System32\taskhostw.exe,ACME\bwilson,tcp,10.10.3.135,60169,10.10.1.109,53, +SLS-WS-035,2026-02-14T02:05:24.535Z,3,C:\Windows\System32\spoolsv.exe,ACME\bwilson,udp,10.10.3.135,63908,82.4.186.190,3389, +SLS-WS-035,2026-02-12T23:58:15.008Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\bwilson,tcp,10.10.3.135,60324,221.4.151.109,53, +SLS-WS-035,2026-02-10T08:42:54.526Z,3,C:\Windows\System32\outlook.exe,ACME\bwilson,udp,10.10.3.135,58634,10.10.3.120,8080, +SLS-WS-035,2026-02-17T07:19:12.461Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.3.135,55937,10.10.1.13,8080, +SLS-WS-035,2026-02-10T20:57:07.056Z,3,C:\Windows\System32\explorer.exe,ACME\bwilson,udp,10.10.3.135,63337,26.232.202.222,443, +SLS-WS-035,2026-02-14T03:10:31.036Z,3,C:\Windows\System32\teams.exe,ACME\bwilson,tcp,10.10.3.135,60759,211.216.217.224,8080, +SLS-WS-035,2026-02-15T18:07:17.735Z,3,C:\Windows\System32\csrss.exe,ACME\bwilson,tcp,10.10.3.135,56865,10.10.3.111,389, +SLS-WS-035,2026-02-19T15:26:48.553Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\bwilson,udp,10.10.3.135,63013,89.61.176.27,445, +SLS-WS-035,2026-02-12T03:08:58.892Z,3,C:\Windows\System32\dwm.exe,ACME\bwilson,udp,10.10.3.135,53357,209.3.133.139,8080, +SLS-WS-035,2026-02-14T03:24:38.268Z,3,C:\Windows\System32\cmd.exe,ACME\bwilson,udp,10.10.3.135,56867,111.7.21.21,3389, +SLS-WS-035,2026-02-16T00:09:56.471Z,3,C:\Program Files\chrome.exe,ACME\bwilson,udp,10.10.3.135,64105,10.10.1.166,3389, +SLS-WS-035,2026-02-10T12:49:25.895Z,3,C:\Program Files\msedge.exe,ACME\bwilson,udp,10.10.3.135,65244,10.10.2.119,445, +SLS-WS-035,2026-02-10T14:48:48.755Z,3,C:\Windows\System32\SearchHost.exe,ACME\bwilson,udp,10.10.3.135,59639,71.135.220.23,443, +SLS-WS-035,2026-02-13T04:23:52.454Z,3,C:\Windows\System32\csrss.exe,ACME\bwilson,tcp,10.10.3.135,51439,168.52.233.170,443, +SLS-WS-035,2026-02-17T23:30:49.560Z,3,C:\Windows\System32\csrss.exe,ACME\bwilson,tcp,10.10.3.135,64941,83.3.97.19,443, +SLS-WS-035,2026-02-14T22:25:18.960Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\bwilson,tcp,10.10.3.135,63202,10.10.3.162,445, +SLS-WS-035,2026-02-16T04:56:38.323Z,3,C:\Windows\System32\explorer.exe,ACME\bwilson,tcp,10.10.3.135,57521,10.10.3.123,53, +SLS-WS-035,2026-02-15T11:44:14.186Z,3,C:\Windows\System32\services.exe,ACME\bwilson,udp,10.10.3.135,60550,193.242.71.137,8080, +SLS-WS-035,2026-02-11T10:28:12.189Z,3,C:\Windows\System32\SearchHost.exe,ACME\bwilson,tcp,10.10.3.135,50659,185.102.254.172,443, +SLS-WS-035,2026-02-14T00:06:54.137Z,3,C:\Program Files\msedge.exe,ACME\bwilson,udp,10.10.3.135,62192,10.10.1.136,80, +SLS-WS-035,2026-02-12T07:23:09.751Z,3,C:\Program Files\chrome.exe,ACME\bwilson,udp,10.10.3.135,60452,12.184.71.209,53, +SLS-WS-035,2026-02-11T13:45:11.732Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.3.135,63277,84.156.241.124,8080, +SLS-WS-035,2026-02-16T06:36:42.509Z,3,C:\Windows\System32\winlogon.exe,ACME\bwilson,udp,10.10.3.135,63816,76.197.110.87,389, +SLS-WS-035,2026-02-13T06:49:57.096Z,3,C:\Windows\System32\OneDrive.exe,ACME\bwilson,udp,10.10.3.135,60707,176.206.204.246,80, +SLS-WS-035,2026-02-18T06:41:25.073Z,3,C:\Windows\System32\powershell.exe,ACME\bwilson,tcp,10.10.3.135,65160,46.100.63.39,53, +SLS-WS-035,2026-02-13T16:05:48.997Z,3,C:\Windows\System32\MsMpEng.exe,ACME\bwilson,udp,10.10.3.135,54087,10.10.2.10,8080, +SLS-WS-035,2026-02-15T14:53:50.331Z,3,C:\Windows\System32\code.exe,ACME\bwilson,tcp,10.10.3.135,57894,10.10.1.115,443, +SLS-WS-035,2026-02-10T10:51:27.313Z,3,C:\Windows\System32\dwm.exe,ACME\bwilson,tcp,10.10.3.135,62080,82.9.148.135,445,npmjs.com +ENG-WS-036,2026-02-16T22:10:33.469Z,3,C:\Windows\System32\outlook.exe,ACME\fthompson,tcp,10.10.1.136,50165,69.15.65.144,3389, +ENG-WS-036,2026-02-19T03:31:36.461Z,3,C:\Windows\System32\winlogon.exe,ACME\fthompson,udp,10.10.1.136,49961,56.118.164.40,8080, +ENG-WS-036,2026-02-14T00:08:08.545Z,3,C:\Windows\System32\SearchHost.exe,ACME\fthompson,tcp,10.10.1.136,60946,174.254.80.18,445, +ENG-WS-036,2026-02-16T16:12:50.771Z,3,C:\Program Files\chrome.exe,ACME\fthompson,udp,10.10.1.136,50557,32.245.168.62,443, +ENG-WS-036,2026-02-11T23:57:44.496Z,3,C:\Program Files\msedge.exe,ACME\fthompson,tcp,10.10.1.136,55952,220.143.122.158,445, +ENG-WS-036,2026-02-10T10:33:51.788Z,3,C:\Windows\System32\smss.exe,ACME\fthompson,tcp,10.10.1.136,50075,87.225.55.122,3389, +ENG-WS-036,2026-02-16T01:05:46.076Z,3,C:\Windows\System32\notepad.exe,ACME\fthompson,udp,10.10.1.136,59187,10.10.2.10,389, +ENG-WS-036,2026-02-19T20:50:47.805Z,3,C:\Program Files\msedge.exe,ACME\fthompson,tcp,10.10.1.136,52338,140.232.162.232,389, +ENG-WS-036,2026-02-17T16:35:12.802Z,3,C:\Windows\System32\spoolsv.exe,ACME\fthompson,tcp,10.10.1.136,54215,10.10.1.112,80, +ENG-WS-036,2026-02-11T19:30:35.298Z,3,C:\Windows\System32\code.exe,ACME\fthompson,udp,10.10.1.136,58621,180.210.51.219,445, +ENG-WS-036,2026-02-14T13:36:20.595Z,3,C:\Program Files\chrome.exe,ACME\fthompson,tcp,10.10.1.136,55347,17.7.65.16,443, +ENG-WS-036,2026-02-14T05:08:42.324Z,3,C:\Windows\System32\teams.exe,ACME\fthompson,udp,10.10.1.136,64632,143.189.244.202,80, +ENG-WS-036,2026-02-17T07:41:03.947Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\fthompson,udp,10.10.1.136,62942,41.221.122.219,389, +ENG-WS-036,2026-02-14T20:37:46.767Z,3,C:\Program Files\chrome.exe,ACME\fthompson,tcp,10.10.1.136,49827,10.10.1.127,389,cdn.jsdelivr.net +ENG-WS-036,2026-02-17T04:11:01.291Z,3,C:\Windows\System32\notepad.exe,ACME\fthompson,udp,10.10.1.136,61537,18.81.107.185,445, +ENG-WS-036,2026-02-15T11:28:25.070Z,3,C:\Windows\System32\taskhostw.exe,ACME\fthompson,tcp,10.10.1.136,49875,10.10.3.102,80, +ENG-WS-036,2026-02-13T05:34:43.366Z,3,C:\Windows\System32\cmd.exe,ACME\fthompson,tcp,10.10.1.136,56243,148.14.228.72,53, +ENG-WS-036,2026-02-11T11:20:36.133Z,3,C:\Windows\System32\outlook.exe,ACME\fthompson,udp,10.10.1.136,56466,8.242.32.207,3389, +ENG-WS-036,2026-02-15T22:25:17.664Z,3,C:\Windows\System32\outlook.exe,ACME\fthompson,tcp,10.10.1.136,49996,10.10.2.167,3389, +ENG-WS-036,2026-02-11T17:07:45.571Z,3,C:\Program Files\chrome.exe,ACME\fthompson,tcp,10.10.1.136,62496,10.10.2.170,389, +ENG-WS-036,2026-02-10T23:56:53.513Z,3,C:\Windows\System32\winlogon.exe,ACME\fthompson,udp,10.10.1.136,54500,10.10.2.11,443, +ENG-WS-036,2026-02-11T01:31:27.909Z,3,C:\Windows\System32\dwm.exe,ACME\fthompson,udp,10.10.1.136,62275,197.93.31.224,53, +ENG-WS-036,2026-02-12T20:42:23.169Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\fthompson,udp,10.10.1.136,56005,18.237.134.126,3389, +ENG-WS-036,2026-02-16T22:09:27.430Z,3,C:\Windows\System32\spoolsv.exe,ACME\fthompson,udp,10.10.1.136,49406,10.10.3.168,443, +ENG-WS-036,2026-02-17T12:51:07.067Z,3,C:\Windows\System32\svchost.exe,ACME\fthompson,udp,10.10.1.136,62452,10.10.3.114,53,draftkings.com +ENG-WS-036,2026-02-14T14:07:21.039Z,3,C:\Windows\System32\SearchHost.exe,ACME\fthompson,tcp,10.10.1.136,62730,10.10.3.147,443, +ENG-WS-036,2026-02-17T12:58:21.467Z,3,C:\Windows\System32\outlook.exe,ACME\fthompson,udp,10.10.1.136,56873,10.10.2.134,3389, +ENG-WS-036,2026-02-14T15:29:00.923Z,3,C:\Windows\System32\code.exe,ACME\fthompson,tcp,10.10.1.136,63447,223.126.254.18,80, +ENG-WS-036,2026-02-19T09:27:30.843Z,3,C:\Program Files\msedge.exe,ACME\fthompson,tcp,10.10.1.136,51788,10.10.2.116,389, +ENG-WS-036,2026-02-13T02:44:40.314Z,3,C:\Windows\System32\MsMpEng.exe,ACME\fthompson,tcp,10.10.1.136,50947,17.210.196.168,53, +ENG-WS-036,2026-02-18T18:38:45.623Z,3,C:\Windows\System32\taskhostw.exe,ACME\fthompson,tcp,10.10.1.136,50291,10.10.3.117,3389, +ENG-WS-036,2026-02-18T06:28:06.661Z,3,C:\Program Files\msedge.exe,ACME\fthompson,tcp,10.10.1.136,55447,210.151.91.163,445, +ENG-WS-036,2026-02-13T01:54:45.354Z,3,C:\Program Files\msedge.exe,ACME\fthompson,tcp,10.10.1.136,62680,103.156.214.212,53, +ENG-WS-036,2026-02-19T16:07:56.921Z,3,C:\Windows\System32\smss.exe,ACME\fthompson,tcp,10.10.1.136,64797,10.10.1.160,3389, +ENG-WS-036,2026-02-16T03:28:53.151Z,3,C:\Windows\System32\svchost.exe,ACME\fthompson,udp,10.10.1.136,50635,16.79.188.28,443, +ENG-WS-036,2026-02-12T02:55:46.329Z,3,C:\Windows\System32\powershell.exe,ACME\fthompson,tcp,10.10.1.136,51560,61.134.149.18,443, +ENG-WS-036,2026-02-15T02:38:53.884Z,3,C:\Program Files\chrome.exe,ACME\fthompson,udp,10.10.1.136,54856,106.12.71.39,445, +ENG-WS-036,2026-02-11T22:13:12.271Z,3,C:\Windows\System32\outlook.exe,ACME\fthompson,tcp,10.10.1.136,54729,145.100.113.171,389, +ENG-WS-036,2026-02-19T01:50:10.474Z,3,C:\Windows\System32\teams.exe,ACME\fthompson,tcp,10.10.1.136,58017,10.10.1.106,80, +ENG-WS-036,2026-02-18T16:01:31.667Z,3,C:\Windows\System32\notepad.exe,ACME\fthompson,tcp,10.10.1.136,57365,10.10.2.152,445, +ENG-WS-036,2026-02-14T12:16:00.816Z,3,C:\Windows\System32\services.exe,ACME\fthompson,tcp,10.10.1.136,57943,10.10.3.123,53,google.com +LEG-WS-037,2026-02-15T02:17:53.846Z,3,C:\Program Files\msedge.exe,ACME\jsmith,tcp,10.10.2.137,65243,163.86.221.185,443, +LEG-WS-037,2026-02-13T15:04:43.336Z,3,C:\Program Files\msedge.exe,ACME\jsmith,udp,10.10.2.137,57886,10.10.1.163,80,windowsupdate.com +LEG-WS-037,2026-02-14T16:06:14.955Z,3,C:\Windows\System32\SearchHost.exe,ACME\jsmith,tcp,10.10.2.137,53824,10.10.1.169,3389,draftkings.com +LEG-WS-037,2026-02-18T06:12:29.285Z,3,C:\Windows\System32\taskhostw.exe,ACME\jsmith,tcp,10.10.2.137,63872,160.116.60.38,389,aws.amazon.com +LEG-WS-037,2026-02-17T07:51:44.564Z,3,C:\Windows\System32\taskhostw.exe,ACME\jsmith,udp,10.10.2.137,58080,10.10.2.131,80, +LEG-WS-037,2026-02-12T05:50:00.632Z,3,C:\Program Files\msedge.exe,ACME\jsmith,udp,10.10.2.137,55121,10.10.2.110,443,akamai.net +LEG-WS-037,2026-02-16T17:46:45.434Z,3,C:\Program Files\msedge.exe,ACME\jsmith,udp,10.10.2.137,53897,10.10.2.125,8080,exch-01.acme.local +LEG-WS-037,2026-02-12T01:35:18.703Z,3,C:\Program Files\msedge.exe,ACME\jsmith,udp,10.10.2.137,55762,10.10.3.108,389, +LEG-WS-037,2026-02-12T22:09:39.133Z,3,C:\Windows\System32\dwm.exe,ACME\jsmith,udp,10.10.2.137,61727,157.6.231.197,443, +LEG-WS-037,2026-02-18T18:54:09.072Z,3,C:\Windows\System32\MsMpEng.exe,ACME\jsmith,tcp,10.10.2.137,53659,209.173.148.184,80, +LEG-WS-037,2026-02-16T10:14:30.036Z,3,C:\Program Files\msedge.exe,ACME\jsmith,tcp,10.10.2.137,54301,10.10.1.172,445, +LEG-WS-037,2026-02-12T07:38:52.212Z,3,C:\Program Files\chrome.exe,ACME\jsmith,tcp,10.10.2.137,56769,10.10.1.121,389, +LEG-WS-037,2026-02-19T02:22:05.517Z,3,C:\Windows\System32\explorer.exe,ACME\jsmith,tcp,10.10.2.137,51153,14.4.19.56,389,googleapis.com +LEG-WS-037,2026-02-19T05:02:00.221Z,3,C:\Windows\System32\teams.exe,ACME\jsmith,udp,10.10.2.137,52595,210.86.57.198,53, +LEG-WS-037,2026-02-20T12:02:12.457Z,3,C:\Windows\System32\notepad.exe,ACME\jsmith,tcp,10.10.2.137,62060,10.10.3.147,443, +LEG-WS-037,2026-02-10T20:20:49.491Z,3,C:\Program Files\chrome.exe,ACME\jsmith,udp,10.10.2.137,52076,10.10.3.129,53, +LEG-WS-037,2026-02-17T17:10:17.666Z,3,C:\Windows\System32\teams.exe,ACME\jsmith,tcp,10.10.2.137,64536,45.26.184.141,80, +LEG-WS-037,2026-02-12T13:36:24.819Z,3,C:\Windows\System32\dwm.exe,ACME\jsmith,udp,10.10.2.137,54084,10.10.1.12,53, +LEG-WS-037,2026-02-15T15:40:03.537Z,3,C:\Windows\System32\SearchHost.exe,ACME\jsmith,tcp,10.10.2.137,55172,10.10.1.124,80, +LEG-WS-037,2026-02-20T08:47:40.919Z,3,C:\Windows\System32\svchost.exe,ACME\jsmith,udp,10.10.2.137,51137,4.54.149.58,389, +LEG-WS-037,2026-02-17T19:46:49.473Z,3,C:\Windows\System32\svchost.exe,ACME\jsmith,tcp,10.10.2.137,54412,10.10.1.106,53, +MKT-WS-038,2026-02-12T15:08:42.686Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\cjohnson,udp,10.10.3.138,65531,9.6.189.69,53,graph.microsoft.com +MKT-WS-038,2026-02-17T11:16:45.161Z,3,C:\Windows\System32\System,ACME\cjohnson,tcp,10.10.3.138,61023,195.62.120.240,80, +MKT-WS-038,2026-02-16T09:00:22.072Z,3,C:\Windows\System32\csrss.exe,ACME\cjohnson,tcp,10.10.3.138,60479,10.10.3.129,3389, +MKT-WS-038,2026-02-17T02:05:45.314Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,tcp,10.10.3.138,52505,10.10.3.171,445, +MKT-WS-038,2026-02-11T19:38:27.439Z,3,C:\Windows\System32\System,ACME\cjohnson,tcp,10.10.3.138,58719,10.10.3.126,3389, +MKT-WS-038,2026-02-16T12:11:33.011Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,udp,10.10.3.138,57879,119.101.163.145,3389, +MKT-WS-038,2026-02-12T19:05:48.793Z,3,C:\Windows\System32\svchost.exe,ACME\cjohnson,tcp,10.10.3.138,51995,10.10.2.11,389, +MKT-WS-038,2026-02-11T07:41:19.111Z,3,C:\Windows\System32\svchost.exe,ACME\cjohnson,tcp,10.10.3.138,58959,10.10.3.171,53, +MKT-WS-038,2026-02-17T11:04:56.202Z,3,C:\Windows\System32\lsass.exe,ACME\cjohnson,tcp,10.10.3.138,62704,10.10.1.166,445, +MKT-WS-038,2026-02-18T05:34:58.469Z,3,C:\Windows\System32\code.exe,ACME\cjohnson,tcp,10.10.3.138,59206,10.10.3.120,389, +MKT-WS-038,2026-02-19T10:18:20.030Z,3,C:\Windows\System32\OneDrive.exe,ACME\cjohnson,tcp,10.10.3.138,59878,42.182.85.91,443, +MKT-WS-038,2026-02-12T13:01:27.031Z,3,C:\Windows\System32\taskhostw.exe,ACME\cjohnson,tcp,10.10.3.138,51337,206.110.33.251,53, +MKT-WS-038,2026-02-12T18:41:13.150Z,3,C:\Windows\System32\taskhostw.exe,ACME\cjohnson,tcp,10.10.3.138,55227,10.10.2.158,3389, +MKT-WS-038,2026-02-15T00:57:58.074Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,udp,10.10.3.138,61192,10.10.1.139,53, +MKT-WS-038,2026-02-20T10:46:07.695Z,3,C:\Windows\System32\dwm.exe,ACME\cjohnson,tcp,10.10.3.138,53109,10.10.2.116,445,graph.microsoft.com +MKT-WS-038,2026-02-14T00:38:00.126Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,udp,10.10.3.138,53009,5.248.152.171,3389, +MKT-WS-038,2026-02-13T17:36:33.512Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,tcp,10.10.3.138,50757,10.10.3.168,8080, +MKT-WS-038,2026-02-13T22:40:47.159Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,udp,10.10.3.138,52216,138.9.99.4,80, +MKT-WS-038,2026-02-11T10:07:51.736Z,3,C:\Windows\System32\csrss.exe,ACME\cjohnson,tcp,10.10.3.138,52047,10.10.2.11,8080, +MKT-WS-038,2026-02-14T16:41:43.634Z,3,C:\Windows\System32\spoolsv.exe,ACME\cjohnson,udp,10.10.3.138,63277,35.233.39.12,80, +MKT-WS-038,2026-02-17T18:02:29.865Z,3,C:\Windows\System32\outlook.exe,ACME\cjohnson,udp,10.10.3.138,63199,10.10.1.145,3389,googleapis.com +MKT-WS-038,2026-02-13T18:35:28.972Z,3,C:\Windows\System32\spoolsv.exe,ACME\cjohnson,udp,10.10.3.138,55061,222.173.165.167,445, +MKT-WS-038,2026-02-13T20:10:22.591Z,3,C:\Windows\System32\MsMpEng.exe,ACME\cjohnson,udp,10.10.3.138,57550,16.15.52.97,53, +MKT-WS-038,2026-02-19T01:44:51.466Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,tcp,10.10.3.138,50122,17.195.84.57,53, +MKT-WS-038,2026-02-13T14:08:13.083Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,udp,10.10.3.138,56696,167.87.22.135,80,googleapis.com +MKT-WS-038,2026-02-19T19:51:55.022Z,3,C:\Windows\System32\SearchHost.exe,ACME\cjohnson,udp,10.10.3.138,58141,10.10.2.170,80, +MKT-WS-038,2026-02-11T20:57:01.607Z,3,C:\Windows\System32\outlook.exe,ACME\cjohnson,tcp,10.10.3.138,52789,10.10.2.107,445, +MKT-WS-038,2026-02-11T21:46:11.669Z,3,C:\Windows\System32\smss.exe,ACME\cjohnson,tcp,10.10.3.138,56088,79.64.211.188,3389, +MKT-WS-038,2026-02-16T16:06:52.414Z,3,C:\Windows\System32\teams.exe,ACME\cjohnson,tcp,10.10.3.138,57269,10.10.1.118,8080, +MKT-WS-038,2026-02-16T11:35:48.727Z,3,C:\Windows\System32\System,ACME\cjohnson,tcp,10.10.3.138,51961,10.10.3.105,443, +MKT-WS-038,2026-02-13T15:45:44.579Z,3,C:\Windows\System32\MsMpEng.exe,ACME\cjohnson,udp,10.10.3.138,56861,72.77.101.102,443, +MKT-WS-038,2026-02-10T21:07:44.438Z,3,C:\Windows\System32\services.exe,ACME\cjohnson,udp,10.10.3.138,59977,32.231.52.43,53,acme.sharepoint.com +MKT-WS-038,2026-02-16T01:35:05.179Z,3,C:\Windows\System32\cmd.exe,ACME\cjohnson,tcp,10.10.3.138,50058,10.10.3.114,445, +MKT-WS-038,2026-02-12T21:54:15.993Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\cjohnson,udp,10.10.3.138,59634,221.203.101.6,3389, +MKT-WS-038,2026-02-16T03:06:26.381Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.3.138,55476,116.196.41.60,53, +MKT-WS-038,2026-02-12T03:01:11.536Z,3,C:\Windows\System32\cmd.exe,ACME\cjohnson,tcp,10.10.3.138,49527,10.10.1.112,53,acme.sharepoint.com +MKT-WS-038,2026-02-18T05:13:11.339Z,3,C:\Windows\System32\services.exe,ACME\cjohnson,tcp,10.10.3.138,52066,92.145.50.75,80, +MKT-WS-038,2026-02-18T22:29:20.986Z,3,C:\Windows\System32\cmd.exe,ACME\cjohnson,tcp,10.10.3.138,53561,10.10.1.112,3389, +MKT-WS-038,2026-02-15T07:13:18.128Z,3,C:\Windows\System32\System,ACME\cjohnson,udp,10.10.3.138,62132,10.10.2.125,3389, +MKT-WS-038,2026-02-17T04:59:27.170Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\cjohnson,tcp,10.10.3.138,52676,10.10.1.166,80, +MKT-WS-038,2026-02-13T06:31:46.052Z,3,C:\Windows\System32\cmd.exe,ACME\cjohnson,tcp,10.10.3.138,50700,10.10.3.108,389, +MKT-WS-038,2026-02-19T15:12:47.100Z,3,C:\Windows\System32\winlogon.exe,ACME\cjohnson,tcp,10.10.3.138,55033,199.207.38.38,443, +MKT-WS-038,2026-02-19T03:14:50.884Z,3,C:\Windows\System32\services.exe,ACME\cjohnson,udp,10.10.3.138,54718,145.180.45.242,389, +MKT-WS-038,2026-02-10T17:20:41.750Z,3,C:\Windows\System32\notepad.exe,ACME\cjohnson,udp,10.10.3.138,65088,37.13.189.45,8080, +MKT-WS-038,2026-02-20T13:26:08.295Z,3,C:\Windows\System32\outlook.exe,ACME\cjohnson,udp,10.10.3.138,49806,144.255.181.184,3389, +MKT-WS-038,2026-02-18T20:47:37.892Z,3,C:\Windows\System32\System,ACME\cjohnson,udp,10.10.3.138,58807,198.9.37.51,445, +MKT-WS-038,2026-02-13T01:37:55.220Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.3.138,64017,10.10.3.123,80, +MKT-WS-038,2026-02-16T09:54:41.333Z,3,C:\Windows\System32\smss.exe,ACME\cjohnson,tcp,10.10.3.138,63111,10.10.3.159,443, +MKT-WS-038,2026-02-15T08:16:15.816Z,3,C:\Windows\System32\System,ACME\cjohnson,tcp,10.10.3.138,52943,180.152.243.240,445, +EXEC-WS-039,2026-02-13T01:33:22.336Z,3,C:\Windows\System32\MsMpEng.exe,ACME\admin,tcp,10.10.1.139,51986,151.186.28.91,3389, +EXEC-WS-039,2026-02-16T19:13:47.492Z,3,C:\Windows\System32\csrss.exe,ACME\admin,tcp,10.10.1.139,64867,10.10.3.10,80, +EXEC-WS-039,2026-02-16T06:08:20.087Z,3,C:\Windows\System32\services.exe,ACME\admin,udp,10.10.1.139,56277,114.146.31.120,53, +EXEC-WS-039,2026-02-15T18:11:45.124Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.1.139,59733,7.3.102.171,389,dc-01.acme.local +EXEC-WS-039,2026-02-16T09:52:11.122Z,3,C:\Windows\System32\OneDrive.exe,ACME\admin,tcp,10.10.1.139,50533,99.124.201.97,389, +EXEC-WS-039,2026-02-15T17:46:12.773Z,3,C:\Windows\System32\OneDrive.exe,ACME\admin,udp,10.10.1.139,53214,1.244.119.161,53, +EXEC-WS-039,2026-02-10T16:02:12.951Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.1.139,64051,10.10.3.168,8080, +EXEC-WS-039,2026-02-20T00:59:20.807Z,3,C:\Windows\System32\taskhostw.exe,ACME\admin,udp,10.10.1.139,63151,10.10.1.13,389,pokerstars.com +EXEC-WS-039,2026-02-16T04:00:48.173Z,3,C:\Windows\System32\winlogon.exe,ACME\admin,udp,10.10.1.139,63719,128.27.29.23,3389, +EXEC-WS-039,2026-02-11T13:24:05.224Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.1.139,50955,149.46.127.160,3389, +EXEC-WS-039,2026-02-20T11:30:06.502Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.1.139,64689,76.199.192.151,389, +EXEC-WS-039,2026-02-15T19:10:42.755Z,3,C:\Windows\System32\MsMpEng.exe,ACME\admin,tcp,10.10.1.139,57257,10.10.2.10,3389, +EXEC-WS-039,2026-02-13T23:23:26.184Z,3,C:\Windows\System32\outlook.exe,ACME\admin,udp,10.10.1.139,59968,151.181.142.162,443,update.microsoft.com +EXEC-WS-039,2026-02-18T02:57:16.002Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.1.139,52901,10.10.3.111,389, +EXEC-WS-039,2026-02-10T19:15:09.893Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.1.139,63346,10.10.1.151,389, +EXEC-WS-039,2026-02-11T14:36:13.498Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.1.139,56529,212.111.108.48,3389, +EXEC-WS-039,2026-02-19T01:18:28.883Z,3,C:\Windows\System32\taskhostw.exe,ACME\admin,udp,10.10.1.139,52447,131.136.243.34,53, +EXEC-WS-039,2026-02-19T20:18:53.271Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.1.139,51788,151.99.208.179,8080, +EXEC-WS-039,2026-02-11T06:10:58.140Z,3,C:\Windows\System32\outlook.exe,ACME\admin,udp,10.10.1.139,53371,10.10.3.162,80, +EXEC-WS-039,2026-02-11T22:36:47.859Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.1.139,58265,10.10.3.108,8080, +EXEC-WS-039,2026-02-19T14:57:12.627Z,3,C:\Windows\System32\explorer.exe,ACME\admin,tcp,10.10.1.139,61644,204.61.89.99,445, +EXEC-WS-039,2026-02-18T14:35:42.170Z,3,C:\Windows\System32\dwm.exe,ACME\admin,tcp,10.10.1.139,60357,168.212.188.105,8080, +EXEC-WS-039,2026-02-18T02:46:21.314Z,3,C:\Windows\System32\winlogon.exe,ACME\admin,tcp,10.10.1.139,58000,10.10.2.125,80, +EXEC-WS-039,2026-02-19T14:01:17.904Z,3,C:\Windows\System32\explorer.exe,ACME\admin,tcp,10.10.1.139,60889,123.251.201.122,443,npmjs.com +EXEC-WS-039,2026-02-13T00:22:24.073Z,3,C:\Windows\System32\notepad.exe,ACME\admin,udp,10.10.1.139,58969,10.10.1.157,8080, +EXEC-WS-039,2026-02-16T17:05:27.554Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.1.139,54950,51.111.154.175,389,windowsupdate.com +EXEC-WS-039,2026-02-20T07:48:54.356Z,3,C:\Windows\System32\smss.exe,ACME\admin,tcp,10.10.1.139,50922,10.10.3.174,445, +EXEC-WS-039,2026-02-10T22:09:41.298Z,3,C:\Windows\System32\explorer.exe,ACME\admin,udp,10.10.1.139,59455,18.171.184.155,443, +EXEC-WS-039,2026-02-15T04:00:46.808Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.1.139,50913,21.70.214.162,389, +EXEC-WS-039,2026-02-14T19:11:50.403Z,3,C:\Windows\System32\csrss.exe,ACME\admin,udp,10.10.1.139,56869,2.120.105.228,8080, +EXEC-WS-039,2026-02-12T09:18:06.021Z,3,C:\Windows\System32\dwm.exe,ACME\admin,udp,10.10.1.139,55114,33.247.40.176,389, +EXEC-WS-039,2026-02-15T14:27:46.594Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.1.139,49965,92.49.97.111,80, +EXEC-WS-039,2026-02-12T15:15:53.759Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.1.139,58712,10.10.1.103,53, +EXEC-WS-039,2026-02-12T04:35:45.655Z,3,C:\Windows\System32\OneDrive.exe,ACME\admin,udp,10.10.1.139,52916,95.32.208.53,80, +EXEC-WS-039,2026-02-16T17:51:38.011Z,3,C:\Windows\System32\taskhostw.exe,ACME\admin,tcp,10.10.1.139,62570,68.39.59.20,445, +EXEC-WS-039,2026-02-13T10:53:34.349Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.1.139,52380,3.55.60.40,53, +EXEC-WS-039,2026-02-18T19:55:52.529Z,3,C:\Windows\System32\MsMpEng.exe,ACME\admin,udp,10.10.1.139,50106,10.10.1.112,3389, +EXEC-WS-039,2026-02-10T23:09:49.684Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.1.139,50436,52.100.174.157,53, +EXEC-WS-039,2026-02-20T14:39:12.885Z,3,C:\Windows\System32\svchost.exe,ACME\admin,udp,10.10.1.139,62597,10.10.1.163,389, +EXEC-WS-039,2026-02-10T21:19:58.074Z,3,C:\Windows\System32\explorer.exe,ACME\admin,udp,10.10.1.139,53927,10.10.3.123,3389, +EXEC-WS-039,2026-02-18T04:39:49.360Z,3,C:\Windows\System32\MsMpEng.exe,ACME\admin,udp,10.10.1.139,62806,10.10.2.10,389, +EXEC-WS-039,2026-02-13T12:43:35.648Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.1.139,61390,177.29.206.155,389, +EXEC-WS-039,2026-02-10T14:48:56.546Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.1.139,63700,56.21.121.58,445, +EXEC-WS-039,2026-02-17T09:37:24.984Z,3,C:\Windows\System32\explorer.exe,ACME\admin,tcp,10.10.1.139,49366,10.10.1.127,445, +EXEC-WS-039,2026-02-12T21:54:07.080Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.1.139,54035,10.10.2.110,443, +EXEC-WS-039,2026-02-19T00:49:42.537Z,3,C:\Windows\System32\explorer.exe,ACME\admin,udp,10.10.1.139,60783,10.10.3.138,3389, +EXEC-WS-039,2026-02-10T13:37:46.763Z,3,C:\Windows\System32\svchost.exe,ACME\admin,tcp,10.10.1.139,61462,28.84.5.216,443, +EXEC-WS-039,2026-02-11T17:37:47.617Z,3,C:\Windows\System32\dwm.exe,ACME\admin,udp,10.10.1.139,54631,30.42.10.196,8080, +IT-WS-040,2026-02-15T20:52:58.580Z,3,C:\Windows\System32\csrss.exe,ACME\admin,udp,10.10.2.140,57094,10.10.3.111,445, +IT-WS-040,2026-02-13T08:31:23.108Z,3,C:\Windows\System32\teams.exe,ACME\admin,udp,10.10.2.140,54160,128.97.179.144,443, +IT-WS-040,2026-02-14T08:13:18.893Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.2.140,51852,2.169.229.98,445, +IT-WS-040,2026-02-20T03:40:36.797Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.2.140,54941,10.10.2.140,53, +IT-WS-040,2026-02-19T05:22:04.290Z,3,C:\Windows\System32\dwm.exe,ACME\admin,udp,10.10.2.140,53810,10.10.1.127,8080, +IT-WS-040,2026-02-11T07:22:16.694Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.2.140,54788,10.10.1.145,389, +IT-WS-040,2026-02-11T11:38:44.677Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.2.140,60103,46.224.42.103,8080, +IT-WS-040,2026-02-10T16:32:16.243Z,3,C:\Windows\System32\explorer.exe,ACME\admin,tcp,10.10.2.140,50929,10.10.2.110,8080, +IT-WS-040,2026-02-15T22:51:17.658Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.2.140,65244,10.10.1.118,8080, +IT-WS-040,2026-02-18T06:27:50.804Z,3,C:\Windows\System32\dwm.exe,ACME\admin,udp,10.10.2.140,49660,118.159.146.130,3389, +IT-WS-040,2026-02-12T13:49:01.820Z,3,C:\Windows\System32\taskhostw.exe,ACME\admin,udp,10.10.2.140,55103,12.53.111.96,8080, +IT-WS-040,2026-02-16T05:54:46.772Z,3,C:\Windows\System32\notepad.exe,ACME\admin,udp,10.10.2.140,53489,202.40.162.193,8080, +IT-WS-040,2026-02-14T13:05:10.740Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.2.140,49951,69.206.2.88,3389, +IT-WS-040,2026-02-16T07:04:16.314Z,3,C:\Windows\System32\notepad.exe,ACME\admin,udp,10.10.2.140,55692,10.10.3.114,53,outlook.office365.com +IT-WS-040,2026-02-19T06:01:36.596Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.2.140,64043,10.10.1.11,8080, +IT-WS-040,2026-02-18T04:17:30.427Z,3,C:\Windows\System32\cmd.exe,ACME\admin,udp,10.10.2.140,53266,10.10.3.141,389, +IT-WS-040,2026-02-11T01:07:39.855Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\admin,tcp,10.10.2.140,65099,10.10.2.119,3389, +IT-WS-040,2026-02-13T08:20:50.631Z,3,C:\Windows\System32\taskhostw.exe,ACME\admin,udp,10.10.2.140,54653,79.5.86.45,389, +IT-WS-040,2026-02-17T19:01:54.110Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\admin,udp,10.10.2.140,64038,10.10.1.136,443, +IT-WS-040,2026-02-11T22:38:28.963Z,3,C:\Windows\System32\notepad.exe,ACME\admin,tcp,10.10.2.140,64277,133.191.171.170,443, +IT-WS-040,2026-02-11T03:49:50.181Z,3,C:\Windows\System32\SearchHost.exe,ACME\admin,tcp,10.10.2.140,59887,10.10.1.151,389,outlook.office365.com +IT-WS-040,2026-02-11T12:47:02.176Z,3,C:\Windows\System32\lsass.exe,ACME\admin,tcp,10.10.2.140,56807,10.10.3.129,3389, +IT-WS-040,2026-02-12T21:03:53.127Z,3,C:\Windows\System32\svchost.exe,ACME\admin,udp,10.10.2.140,57080,28.100.26.190,443, +IT-WS-040,2026-02-15T08:38:58.214Z,3,C:\Windows\System32\System,ACME\admin,udp,10.10.2.140,53245,10.10.1.154,8080, +IT-WS-040,2026-02-12T23:31:23.317Z,3,C:\Windows\System32\powershell.exe,ACME\admin,udp,10.10.2.140,50214,147.44.93.44,53, +IT-WS-040,2026-02-13T00:19:01.785Z,3,C:\Windows\System32\explorer.exe,ACME\admin,udp,10.10.2.140,57682,10.10.1.139,53, +IT-WS-040,2026-02-16T17:50:57.564Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.2.140,60947,184.38.7.106,443, +IT-WS-040,2026-02-19T08:21:16.318Z,3,C:\Windows\System32\explorer.exe,ACME\admin,tcp,10.10.2.140,64261,59.87.209.199,80,login.microsoftonline.com +IT-WS-040,2026-02-18T05:59:17.624Z,3,C:\Windows\System32\MsMpEng.exe,ACME\admin,udp,10.10.2.140,56651,10.10.2.155,389, +IT-WS-040,2026-02-17T22:02:17.056Z,3,C:\Windows\System32\smss.exe,ACME\admin,udp,10.10.2.140,50649,10.10.1.109,3389, +IT-WS-040,2026-02-13T19:05:12.908Z,3,C:\Windows\System32\MsMpEng.exe,ACME\admin,udp,10.10.2.140,52743,87.252.112.84,445, +HR-WS-041,2026-02-17T04:37:26.384Z,3,C:\Windows\System32\OneDrive.exe,ACME\idavis,tcp,10.10.3.141,52514,10.10.2.101,53, +HR-WS-041,2026-02-20T09:11:50.764Z,3,C:\Windows\System32\spoolsv.exe,ACME\idavis,udp,10.10.3.141,58497,10.10.2.104,8080, +HR-WS-041,2026-02-12T10:24:02.868Z,3,C:\Windows\System32\spoolsv.exe,ACME\idavis,tcp,10.10.3.141,50221,196.63.228.158,443, +HR-WS-041,2026-02-17T12:33:10.710Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,tcp,10.10.3.141,52091,124.183.53.199,445,googleapis.com +HR-WS-041,2026-02-15T22:45:54.976Z,3,C:\Windows\System32\OneDrive.exe,ACME\idavis,tcp,10.10.3.141,57498,73.145.165.225,80,cloudflare.com +HR-WS-041,2026-02-12T13:12:13.933Z,3,C:\Windows\System32\svchost.exe,ACME\idavis,tcp,10.10.3.141,51021,10.10.2.113,445, +HR-WS-041,2026-02-13T17:04:38.519Z,3,C:\Windows\System32\csrss.exe,ACME\idavis,tcp,10.10.3.141,53388,102.193.246.252,445, +HR-WS-041,2026-02-17T18:15:57.224Z,3,C:\Windows\System32\winlogon.exe,ACME\idavis,udp,10.10.3.141,51473,10.10.1.169,80, +HR-WS-041,2026-02-18T15:25:11.423Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.3.141,60801,10.10.3.171,53, +HR-WS-041,2026-02-16T16:34:19.742Z,3,C:\Windows\System32\taskhostw.exe,ACME\idavis,tcp,10.10.3.141,59680,10.10.1.163,3389, +HR-WS-041,2026-02-11T05:36:16.718Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.3.141,55947,32.41.216.171,53,aws.amazon.com +HR-WS-041,2026-02-17T05:25:36.191Z,3,C:\Windows\System32\taskhostw.exe,ACME\idavis,udp,10.10.3.141,63768,10.10.1.11,445, +HR-WS-041,2026-02-15T13:47:53.630Z,3,C:\Windows\System32\services.exe,ACME\idavis,tcp,10.10.3.141,62267,202.5.26.253,8080, +HR-WS-041,2026-02-17T07:36:12.144Z,3,C:\Windows\System32\cmd.exe,ACME\idavis,udp,10.10.3.141,64918,10.10.2.155,80, +HR-WS-041,2026-02-11T02:09:49.294Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,udp,10.10.3.141,65034,79.48.1.62,8080, +HR-WS-041,2026-02-16T17:06:34.092Z,3,C:\Windows\System32\winlogon.exe,ACME\idavis,tcp,10.10.3.141,55078,10.10.2.161,8080, +HR-WS-041,2026-02-10T14:08:22.998Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,tcp,10.10.3.141,50597,97.7.148.236,443, +HR-WS-041,2026-02-10T20:51:37.095Z,3,C:\Program Files\chrome.exe,ACME\idavis,udp,10.10.3.141,63928,10.10.1.145,80, +HR-WS-041,2026-02-16T02:00:49.387Z,3,C:\Windows\System32\code.exe,ACME\idavis,tcp,10.10.3.141,52798,10.10.1.121,389, +HR-WS-041,2026-02-13T16:30:56.395Z,3,C:\Windows\System32\spoolsv.exe,ACME\idavis,udp,10.10.3.141,61605,183.160.245.60,80, +HR-WS-041,2026-02-11T06:32:22.060Z,3,C:\Windows\System32\lsass.exe,ACME\idavis,udp,10.10.3.141,56009,10.10.3.135,53, +HR-WS-041,2026-02-16T12:11:52.055Z,3,C:\Windows\System32\SearchHost.exe,ACME\idavis,udp,10.10.3.141,52664,10.10.1.142,3389, +HR-WS-041,2026-02-11T20:59:32.947Z,3,C:\Windows\System32\winlogon.exe,ACME\idavis,udp,10.10.3.141,56957,153.21.12.81,445,acme.local +HR-WS-041,2026-02-18T20:45:31.083Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.3.141,50492,16.36.224.215,389, +HR-WS-041,2026-02-16T20:06:14.949Z,3,C:\Windows\System32\teams.exe,ACME\idavis,udp,10.10.3.141,56678,10.10.1.169,53, +HR-WS-041,2026-02-11T06:53:30.847Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.3.141,56253,10.10.3.150,389, +HR-WS-041,2026-02-14T06:44:02.700Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.3.141,56670,44.84.212.40,8080, +HR-WS-041,2026-02-17T20:34:47.152Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.3.141,53791,158.197.24.85,53, +HR-WS-041,2026-02-11T06:46:19.273Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.3.141,58492,10.10.2.125,80, +HR-WS-041,2026-02-16T12:48:42.130Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.3.141,64450,132.238.39.136,389,pokerstars.com +HR-WS-041,2026-02-14T01:22:58.035Z,3,C:\Windows\System32\winlogon.exe,ACME\idavis,tcp,10.10.3.141,63154,10.10.3.147,80, +HR-WS-041,2026-02-13T14:26:11.948Z,3,C:\Windows\System32\csrss.exe,ACME\idavis,tcp,10.10.3.141,55203,10.10.2.128,80,acme.sharepoint.com +HR-WS-041,2026-02-17T01:23:29.102Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,tcp,10.10.3.141,60030,10.10.2.152,389, +HR-WS-041,2026-02-11T16:28:04.107Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,udp,10.10.3.141,55969,98.138.90.208,8080, +HR-WS-041,2026-02-16T23:37:07.486Z,3,C:\Windows\System32\cmd.exe,ACME\idavis,udp,10.10.3.141,55006,210.52.133.63,445, +HR-WS-041,2026-02-19T16:34:43.302Z,3,C:\Windows\System32\csrss.exe,ACME\idavis,tcp,10.10.3.141,60763,10.10.3.120,443,time.windows.com +HR-WS-041,2026-02-13T16:07:08.987Z,3,C:\Windows\System32\cmd.exe,ACME\idavis,tcp,10.10.3.141,50248,10.10.2.104,8080,file-01.acme.local +HR-WS-041,2026-02-14T21:03:28.475Z,3,C:\Windows\System32\services.exe,ACME\idavis,tcp,10.10.3.141,64413,10.10.3.138,80, +HR-WS-041,2026-02-20T12:35:52.746Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,tcp,10.10.3.141,64660,10.10.3.165,443, +HR-WS-041,2026-02-15T10:17:02.202Z,3,C:\Windows\System32\winlogon.exe,ACME\idavis,udp,10.10.3.141,51967,211.43.73.116,389, +HR-WS-041,2026-02-14T17:51:28.145Z,3,C:\Windows\System32\OneDrive.exe,ACME\idavis,udp,10.10.3.141,63911,125.102.122.60,8080, +HR-WS-041,2026-02-17T14:28:42.314Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,tcp,10.10.3.141,53380,92.175.67.181,8080, +FIN-WS-042,2026-02-15T21:28:35.183Z,3,C:\Windows\System32\MsMpEng.exe,ACME\agarcia,udp,10.10.1.142,60368,126.233.14.9,3389,windowsupdate.com +FIN-WS-042,2026-02-16T04:51:07.755Z,3,C:\Windows\System32\spoolsv.exe,ACME\agarcia,udp,10.10.1.142,57209,152.138.126.57,53, +FIN-WS-042,2026-02-18T01:25:27.284Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\agarcia,udp,10.10.1.142,49940,36.165.203.202,3389, +FIN-WS-042,2026-02-20T04:52:21.918Z,3,C:\Windows\System32\notepad.exe,ACME\agarcia,tcp,10.10.1.142,60099,10.10.1.166,445, +FIN-WS-042,2026-02-12T02:33:26.116Z,3,C:\Windows\System32\winlogon.exe,ACME\agarcia,tcp,10.10.1.142,54449,10.10.3.132,53,acme.local +FIN-WS-042,2026-02-13T15:01:49.417Z,3,C:\Windows\System32\dwm.exe,ACME\agarcia,udp,10.10.1.142,57853,101.163.97.24,443, +FIN-WS-042,2026-02-17T17:57:24.535Z,3,C:\Windows\System32\smss.exe,ACME\agarcia,tcp,10.10.1.142,50600,10.10.1.136,53, +FIN-WS-042,2026-02-12T06:40:57.637Z,3,C:\Windows\System32\teams.exe,ACME\agarcia,tcp,10.10.1.142,52014,10.10.1.175,8080, +FIN-WS-042,2026-02-15T15:30:06.790Z,3,C:\Windows\System32\MsMpEng.exe,ACME\agarcia,tcp,10.10.1.142,56426,219.83.45.28,8080, +FIN-WS-042,2026-02-19T00:32:41.086Z,3,C:\Windows\System32\explorer.exe,ACME\agarcia,tcp,10.10.1.142,56777,10.10.3.144,443, +FIN-WS-042,2026-02-14T18:44:38.480Z,3,C:\Windows\System32\MsMpEng.exe,ACME\agarcia,udp,10.10.1.142,56915,10.10.3.141,3389, +FIN-WS-042,2026-02-15T04:57:22.942Z,3,C:\Windows\System32\SearchHost.exe,ACME\agarcia,udp,10.10.1.142,62843,10.10.1.118,3389, +FIN-WS-042,2026-02-10T14:43:17.443Z,3,C:\Windows\System32\spoolsv.exe,ACME\agarcia,udp,10.10.1.142,50317,10.10.3.138,53,update.microsoft.com +FIN-WS-042,2026-02-15T15:45:48.352Z,3,C:\Windows\System32\OneDrive.exe,ACME\agarcia,tcp,10.10.1.142,62140,10.10.3.102,3389, +FIN-WS-042,2026-02-13T05:55:04.065Z,3,C:\Windows\System32\teams.exe,ACME\agarcia,udp,10.10.1.142,61282,85.33.234.198,3389, +FIN-WS-042,2026-02-20T08:24:08.811Z,3,C:\Windows\System32\outlook.exe,ACME\agarcia,udp,10.10.1.142,55366,97.232.130.112,443, +FIN-WS-042,2026-02-20T00:20:00.648Z,3,C:\Windows\System32\teams.exe,ACME\agarcia,tcp,10.10.1.142,55219,142.98.228.214,3389, +FIN-WS-042,2026-02-10T10:20:24.588Z,3,C:\Windows\System32\teams.exe,ACME\agarcia,tcp,10.10.1.142,49546,10.10.3.171,53, +FIN-WS-042,2026-02-15T12:59:54.447Z,3,C:\Windows\System32\notepad.exe,ACME\agarcia,tcp,10.10.1.142,51488,74.140.201.209,445, +FIN-WS-042,2026-02-12T01:50:33.084Z,3,C:\Windows\System32\teams.exe,ACME\agarcia,tcp,10.10.1.142,57855,10.10.1.160,8080, +FIN-WS-042,2026-02-19T19:25:59.649Z,3,C:\Program Files\chrome.exe,ACME\agarcia,tcp,10.10.1.142,54081,10.10.1.163,53, +FIN-WS-042,2026-02-13T23:20:16.262Z,3,C:\Windows\System32\smss.exe,ACME\agarcia,udp,10.10.1.142,61096,10.10.1.121,53, +FIN-WS-042,2026-02-10T08:46:23.143Z,3,C:\Windows\System32\winlogon.exe,ACME\agarcia,udp,10.10.1.142,52208,112.128.54.248,80, +FIN-WS-042,2026-02-15T14:13:30.209Z,3,C:\Windows\System32\powershell.exe,ACME\agarcia,udp,10.10.1.142,58214,86.56.201.145,8080, +FIN-WS-042,2026-02-17T07:52:39.986Z,3,C:\Windows\System32\SearchHost.exe,ACME\agarcia,udp,10.10.1.142,62323,10.10.2.152,3389, +FIN-WS-042,2026-02-18T15:44:59.155Z,3,C:\Windows\System32\teams.exe,ACME\agarcia,udp,10.10.1.142,51757,10.10.2.119,443, +FIN-WS-042,2026-02-17T16:39:18.707Z,3,C:\Windows\System32\smss.exe,ACME\agarcia,udp,10.10.1.142,64905,10.10.3.129,8080, +FIN-WS-042,2026-02-17T12:05:07.424Z,3,C:\Windows\System32\MsMpEng.exe,ACME\agarcia,tcp,10.10.1.142,63430,10.10.1.172,53, +FIN-WS-042,2026-02-15T05:49:08.996Z,3,C:\Windows\System32\smss.exe,ACME\agarcia,udp,10.10.1.142,58056,10.10.1.106,389, +FIN-WS-042,2026-02-13T21:15:06.674Z,3,C:\Windows\System32\taskhostw.exe,ACME\agarcia,tcp,10.10.1.142,54824,132.236.157.70,443, +FIN-WS-042,2026-02-20T02:27:01.810Z,3,C:\Windows\System32\services.exe,ACME\agarcia,tcp,10.10.1.142,51602,10.10.1.172,445, +FIN-WS-042,2026-02-14T17:30:22.700Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\agarcia,tcp,10.10.1.142,61314,10.10.3.108,445, +FIN-WS-042,2026-02-20T02:19:58.876Z,3,C:\Program Files\msedge.exe,ACME\agarcia,tcp,10.10.1.142,49585,10.10.3.165,8080, +FIN-WS-042,2026-02-17T23:22:20.500Z,3,C:\Windows\System32\SearchHost.exe,ACME\agarcia,tcp,10.10.1.142,59316,210.254.73.42,443, +FIN-WS-042,2026-02-12T01:03:59.609Z,3,C:\Windows\System32\winlogon.exe,ACME\agarcia,tcp,10.10.1.142,61296,69.230.151.118,53,github.com +FIN-WS-042,2026-02-16T12:03:28.398Z,3,C:\Windows\System32\teams.exe,ACME\agarcia,udp,10.10.1.142,53596,214.152.119.190,80, +FIN-WS-042,2026-02-19T06:22:51.688Z,3,C:\Windows\System32\explorer.exe,ACME\agarcia,udp,10.10.1.142,61282,10.10.1.118,389, +SLS-WS-043,2026-02-15T15:11:16.808Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,udp,10.10.2.143,64141,10.10.2.167,445, +SLS-WS-043,2026-02-14T02:06:17.169Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_backup,tcp,10.10.2.143,54496,10.10.2.10,8080, +SLS-WS-043,2026-02-15T13:11:12.785Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,udp,10.10.2.143,62706,10.10.1.145,3389, +SLS-WS-043,2026-02-14T03:19:28.280Z,3,C:\Windows\System32\teams.exe,ACME\svc_backup,tcp,10.10.2.143,50805,149.41.99.93,445, +SLS-WS-043,2026-02-10T13:54:31.199Z,3,C:\Windows\System32\System,ACME\svc_backup,udp,10.10.2.143,58182,10.10.1.118,443, +SLS-WS-043,2026-02-17T23:08:40.130Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,udp,10.10.2.143,57320,124.116.144.158,3389, +SLS-WS-043,2026-02-11T00:39:22.547Z,3,C:\Windows\System32\lsass.exe,ACME\svc_backup,udp,10.10.2.143,53708,144.157.186.9,8080, +SLS-WS-043,2026-02-14T04:52:09.947Z,3,C:\Windows\System32\taskhostw.exe,ACME\svc_backup,tcp,10.10.2.143,50873,186.162.12.71,8080, +SLS-WS-043,2026-02-17T02:26:25.161Z,3,C:\Windows\System32\lsass.exe,ACME\svc_backup,tcp,10.10.2.143,57563,34.16.16.40,80, +SLS-WS-043,2026-02-10T08:03:44.857Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_backup,tcp,10.10.2.143,59418,10.10.2.10,80, +SLS-WS-043,2026-02-13T20:00:23.426Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_backup,udp,10.10.2.143,51938,10.10.2.170,445, +SLS-WS-043,2026-02-20T03:46:20.061Z,3,C:\Program Files\msedge.exe,ACME\svc_backup,tcp,10.10.2.143,61398,10.10.3.117,389, +SLS-WS-043,2026-02-10T19:22:34.476Z,3,C:\Windows\System32\csrss.exe,ACME\svc_backup,udp,10.10.2.143,52747,10.10.2.101,389, +SLS-WS-043,2026-02-20T12:55:05.923Z,3,C:\Program Files\msedge.exe,ACME\svc_backup,udp,10.10.2.143,53952,10.10.2.107,53, +SLS-WS-043,2026-02-13T05:19:07.863Z,3,C:\Windows\System32\explorer.exe,ACME\svc_backup,udp,10.10.2.143,65298,221.4.108.94,445, +SLS-WS-043,2026-02-16T19:13:10.083Z,3,C:\Windows\System32\notepad.exe,ACME\svc_backup,udp,10.10.2.143,51466,10.10.1.10,80, +SLS-WS-043,2026-02-14T07:29:25.260Z,3,C:\Program Files\msedge.exe,ACME\svc_backup,tcp,10.10.2.143,55188,10.10.2.134,445, +SLS-WS-043,2026-02-14T07:32:09.815Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_backup,tcp,10.10.2.143,58745,10.10.1.157,53, +SLS-WS-043,2026-02-20T02:05:36.607Z,3,C:\Windows\System32\notepad.exe,ACME\svc_backup,udp,10.10.2.143,56457,130.163.44.101,53, +SLS-WS-043,2026-02-18T22:39:58.374Z,3,C:\Windows\System32\taskhostw.exe,ACME\svc_backup,udp,10.10.2.143,52835,76.150.168.45,445, +SLS-WS-043,2026-02-11T12:34:08.196Z,3,C:\Windows\System32\code.exe,ACME\svc_backup,udp,10.10.2.143,64467,198.102.61.225,443, +SLS-WS-043,2026-02-19T23:43:56.589Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,udp,10.10.2.143,58944,133.16.97.41,53,pypi.org +SLS-WS-043,2026-02-20T07:34:40.702Z,3,C:\Windows\System32\notepad.exe,ACME\svc_backup,udp,10.10.2.143,54370,24.88.128.58,80, +SLS-WS-043,2026-02-20T01:18:28.773Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_backup,udp,10.10.2.143,52316,10.10.3.120,3389, +SLS-WS-043,2026-02-11T17:05:04.415Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_backup,udp,10.10.2.143,53948,10.10.2.140,389, +SLS-WS-043,2026-02-10T14:25:03.006Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,tcp,10.10.2.143,54669,132.3.106.179,3389, +SLS-WS-043,2026-02-13T16:33:17.834Z,3,C:\Windows\System32\services.exe,ACME\svc_backup,tcp,10.10.2.143,51682,10.10.2.173,3389,pypi.org +SLS-WS-043,2026-02-19T08:18:33.834Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,udp,10.10.2.143,56100,185.8.5.43,389,acme.local +SLS-WS-043,2026-02-12T01:15:08.084Z,3,C:\Windows\System32\explorer.exe,ACME\svc_backup,tcp,10.10.2.143,59031,97.159.62.97,389, +SLS-WS-043,2026-02-10T08:15:59.976Z,3,C:\Windows\System32\spoolsv.exe,ACME\svc_backup,tcp,10.10.2.143,64284,10.10.2.125,445, +SLS-WS-043,2026-02-16T09:56:56.168Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_backup,tcp,10.10.2.143,63247,10.10.1.106,3389,npmjs.com +SLS-WS-043,2026-02-18T11:48:27.097Z,3,C:\Windows\System32\cmd.exe,ACME\svc_backup,udp,10.10.2.143,52103,51.75.46.63,3389, +SLS-WS-043,2026-02-20T16:45:18.377Z,3,C:\Program Files\msedge.exe,ACME\svc_backup,tcp,10.10.2.143,56705,132.247.73.120,8080,exch-01.acme.local +SLS-WS-043,2026-02-11T12:29:33.026Z,3,C:\Windows\System32\lsass.exe,ACME\svc_backup,udp,10.10.2.143,60597,209.35.97.111,3389, +SLS-WS-043,2026-02-19T19:51:00.074Z,3,C:\Windows\System32\notepad.exe,ACME\svc_backup,udp,10.10.2.143,62027,10.10.3.108,443, +SLS-WS-043,2026-02-19T17:17:08.206Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,udp,10.10.2.143,50092,181.221.94.96,3389, +SLS-WS-043,2026-02-14T03:59:17.385Z,3,C:\Windows\System32\code.exe,ACME\svc_backup,udp,10.10.2.143,58299,10.10.2.107,80, +SLS-WS-043,2026-02-15T08:03:03.506Z,3,C:\Windows\System32\services.exe,ACME\svc_backup,tcp,10.10.2.143,60140,10.10.3.132,53, +SLS-WS-043,2026-02-15T11:20:38.357Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,udp,10.10.2.143,54810,57.42.243.163,80, +SLS-WS-043,2026-02-15T15:06:20.646Z,3,C:\Windows\System32\spoolsv.exe,ACME\svc_backup,tcp,10.10.2.143,61869,10.10.3.120,53,aws.amazon.com +ENG-WS-044,2026-02-14T20:43:39.625Z,3,C:\Program Files\chrome.exe,ACME\agarcia,tcp,10.10.3.144,59585,44.106.191.223,443, +ENG-WS-044,2026-02-12T09:20:56.650Z,3,C:\Windows\System32\winlogon.exe,ACME\agarcia,tcp,10.10.3.144,51467,10.10.2.128,53, +ENG-WS-044,2026-02-20T02:29:02.857Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\agarcia,udp,10.10.3.144,51755,48.79.109.232,80, +ENG-WS-044,2026-02-18T12:42:37.944Z,3,C:\Program Files\chrome.exe,ACME\agarcia,tcp,10.10.3.144,52470,10.10.3.162,80, +ENG-WS-044,2026-02-10T20:08:32.979Z,3,C:\Windows\System32\smss.exe,ACME\agarcia,tcp,10.10.3.144,56383,10.10.2.167,389, +ENG-WS-044,2026-02-19T15:13:06.407Z,3,C:\Windows\System32\spoolsv.exe,ACME\agarcia,tcp,10.10.3.144,62236,157.51.51.191,80, +ENG-WS-044,2026-02-19T07:21:30.283Z,3,C:\Windows\System32\svchost.exe,ACME\agarcia,tcp,10.10.3.144,62323,10.10.2.173,389, +ENG-WS-044,2026-02-19T01:26:05.247Z,3,C:\Windows\System32\csrss.exe,ACME\agarcia,udp,10.10.3.144,61527,10.10.3.132,389,googleapis.com +ENG-WS-044,2026-02-14T22:39:57.930Z,3,C:\Program Files\msedge.exe,ACME\agarcia,tcp,10.10.3.144,58018,13.80.110.21,53, +ENG-WS-044,2026-02-16T10:34:12.164Z,3,C:\Windows\System32\svchost.exe,ACME\agarcia,tcp,10.10.3.144,59976,10.10.1.11,389, +ENG-WS-044,2026-02-18T13:30:01.463Z,3,C:\Windows\System32\MsMpEng.exe,ACME\agarcia,udp,10.10.3.144,50267,41.30.90.125,53, +ENG-WS-044,2026-02-11T10:05:55.628Z,3,C:\Windows\System32\explorer.exe,ACME\agarcia,tcp,10.10.3.144,63223,28.152.142.57,445,exch-01.acme.local +ENG-WS-044,2026-02-12T21:19:49.172Z,3,C:\Program Files\msedge.exe,ACME\agarcia,udp,10.10.3.144,55624,10.10.2.161,53, +ENG-WS-044,2026-02-20T00:02:22.600Z,3,C:\Windows\System32\notepad.exe,ACME\agarcia,udp,10.10.3.144,60549,175.85.126.110,53, +ENG-WS-044,2026-02-13T12:19:46.999Z,3,C:\Windows\System32\services.exe,ACME\agarcia,tcp,10.10.3.144,57963,25.64.91.99,8080, +ENG-WS-044,2026-02-18T23:52:03.651Z,3,C:\Program Files\chrome.exe,ACME\agarcia,udp,10.10.3.144,60237,10.10.1.12,53, +ENG-WS-044,2026-02-20T10:44:42.554Z,3,C:\Windows\System32\powershell.exe,ACME\agarcia,udp,10.10.3.144,53809,211.123.7.22,53, +ENG-WS-044,2026-02-15T00:18:02.566Z,3,C:\Windows\System32\outlook.exe,ACME\agarcia,udp,10.10.3.144,53307,132.40.33.212,443, +ENG-WS-044,2026-02-19T23:33:34.585Z,3,C:\Program Files\msedge.exe,ACME\agarcia,udp,10.10.3.144,56012,10.10.1.136,80,file-01.acme.local +ENG-WS-044,2026-02-19T02:46:19.878Z,3,C:\Program Files\msedge.exe,ACME\agarcia,udp,10.10.3.144,57179,125.29.169.91,8080, +ENG-WS-044,2026-02-17T07:45:11.091Z,3,C:\Windows\System32\svchost.exe,ACME\agarcia,tcp,10.10.3.144,58139,38.226.200.116,8080, +ENG-WS-044,2026-02-20T14:33:44.797Z,3,C:\Windows\System32\svchost.exe,ACME\agarcia,tcp,10.10.3.144,59989,72.72.115.33,53,npmjs.com +ENG-WS-044,2026-02-14T09:57:34.905Z,3,C:\Program Files\chrome.exe,ACME\agarcia,tcp,10.10.3.144,62616,10.10.3.153,443, +LEG-WS-045,2026-02-19T12:10:30.818Z,3,C:\Windows\System32\code.exe,ACME\agarcia,udp,10.10.1.145,58150,41.182.212.212,80, +LEG-WS-045,2026-02-11T09:15:40.312Z,3,C:\Program Files\chrome.exe,ACME\agarcia,tcp,10.10.1.145,64498,10.10.2.143,445, +LEG-WS-045,2026-02-20T00:27:10.302Z,3,C:\Windows\System32\outlook.exe,ACME\agarcia,udp,10.10.1.145,62844,157.35.207.32,80, +LEG-WS-045,2026-02-10T22:04:50.306Z,3,C:\Windows\System32\notepad.exe,ACME\agarcia,udp,10.10.1.145,54048,102.129.231.161,80, +LEG-WS-045,2026-02-19T12:49:00.225Z,3,C:\Windows\System32\winlogon.exe,ACME\agarcia,udp,10.10.1.145,51785,5.136.196.71,53, +LEG-WS-045,2026-02-20T11:15:43.476Z,3,C:\Windows\System32\explorer.exe,ACME\agarcia,udp,10.10.1.145,52580,10.10.1.115,3389, +LEG-WS-045,2026-02-18T00:00:26.109Z,3,C:\Windows\System32\csrss.exe,ACME\agarcia,tcp,10.10.1.145,64214,65.115.52.203,443, +LEG-WS-045,2026-02-13T15:18:56.759Z,3,C:\Program Files\chrome.exe,ACME\agarcia,tcp,10.10.1.145,52579,10.10.3.138,445, +LEG-WS-045,2026-02-19T14:16:57.155Z,3,C:\Windows\System32\notepad.exe,ACME\agarcia,udp,10.10.1.145,61480,10.10.1.133,80, +LEG-WS-045,2026-02-20T15:39:10.190Z,3,C:\Windows\System32\services.exe,ACME\agarcia,udp,10.10.1.145,64036,10.10.1.148,389, +LEG-WS-045,2026-02-17T14:48:28.807Z,3,C:\Windows\System32\MsMpEng.exe,ACME\agarcia,tcp,10.10.1.145,51110,67.77.93.60,389, +LEG-WS-045,2026-02-19T05:48:43.433Z,3,C:\Windows\System32\dwm.exe,ACME\agarcia,tcp,10.10.1.145,54062,109.64.78.64,80, +LEG-WS-045,2026-02-12T14:37:46.734Z,3,C:\Windows\System32\spoolsv.exe,ACME\agarcia,udp,10.10.1.145,61866,10.10.1.175,80, +LEG-WS-045,2026-02-16T18:56:11.074Z,3,C:\Program Files\chrome.exe,ACME\agarcia,tcp,10.10.1.145,59055,10.10.2.146,53, +LEG-WS-045,2026-02-16T18:35:39.073Z,3,C:\Program Files\chrome.exe,ACME\agarcia,udp,10.10.1.145,51566,132.22.50.153,445, +LEG-WS-045,2026-02-18T20:32:07.445Z,3,C:\Windows\System32\svchost.exe,ACME\agarcia,udp,10.10.1.145,59626,10.10.1.145,80, +LEG-WS-045,2026-02-17T07:40:16.621Z,3,C:\Windows\System32\MsMpEng.exe,ACME\agarcia,udp,10.10.1.145,62810,10.10.2.131,389, +LEG-WS-045,2026-02-15T13:33:09.232Z,3,C:\Windows\System32\lsass.exe,ACME\agarcia,udp,10.10.1.145,63471,10.10.1.103,53, +LEG-WS-045,2026-02-13T08:07:50.948Z,3,C:\Program Files\chrome.exe,ACME\agarcia,udp,10.10.1.145,61633,36.34.168.222,3389, +LEG-WS-045,2026-02-17T11:35:25.051Z,3,C:\Windows\System32\cmd.exe,ACME\agarcia,tcp,10.10.1.145,49285,10.10.1.166,3389, +LEG-WS-045,2026-02-17T19:46:45.406Z,3,C:\Windows\System32\svchost.exe,ACME\agarcia,udp,10.10.1.145,54520,1.143.203.105,443, +LEG-WS-045,2026-02-11T11:50:16.469Z,3,C:\Windows\System32\lsass.exe,ACME\agarcia,tcp,10.10.1.145,59978,10.10.1.139,443,dc-01.acme.local +LEG-WS-045,2026-02-14T11:35:19.221Z,3,C:\Windows\System32\OneDrive.exe,ACME\agarcia,tcp,10.10.1.145,59566,7.32.40.186,53, +MKT-WS-046,2026-02-13T02:17:48.488Z,3,C:\Windows\System32\OneDrive.exe,ACME\agarcia,tcp,10.10.2.146,51975,168.11.82.202,53, +MKT-WS-046,2026-02-12T17:59:47.552Z,3,C:\Windows\System32\System,ACME\agarcia,udp,10.10.2.146,49214,27.205.250.231,8080, +MKT-WS-046,2026-02-15T06:48:51.184Z,3,C:\Windows\System32\services.exe,ACME\agarcia,tcp,10.10.2.146,56167,211.99.163.105,445,draftkings.com +MKT-WS-046,2026-02-15T05:04:08.008Z,3,C:\Windows\System32\smss.exe,ACME\agarcia,udp,10.10.2.146,60545,10.10.1.118,3389, +MKT-WS-046,2026-02-17T23:30:41.393Z,3,C:\Windows\System32\cmd.exe,ACME\agarcia,tcp,10.10.2.146,60173,10.10.1.10,53, +MKT-WS-046,2026-02-16T06:12:02.446Z,3,C:\Windows\System32\csrss.exe,ACME\agarcia,tcp,10.10.2.146,61538,10.10.3.135,443, +MKT-WS-046,2026-02-13T17:26:46.628Z,3,C:\Program Files\msedge.exe,ACME\agarcia,tcp,10.10.2.146,64383,80.150.160.209,53, +MKT-WS-046,2026-02-17T16:03:43.224Z,3,C:\Windows\System32\spoolsv.exe,ACME\agarcia,tcp,10.10.2.146,57515,10.10.1.11,80, +MKT-WS-046,2026-02-13T23:46:20.086Z,3,C:\Program Files\chrome.exe,ACME\agarcia,udp,10.10.2.146,63885,2.237.85.97,80, +MKT-WS-046,2026-02-20T10:07:24.535Z,3,C:\Windows\System32\code.exe,ACME\agarcia,udp,10.10.2.146,51484,10.10.2.149,3389, +MKT-WS-046,2026-02-18T00:34:44.749Z,3,C:\Program Files\msedge.exe,ACME\agarcia,tcp,10.10.2.146,55225,10.10.3.135,8080, +MKT-WS-046,2026-02-11T07:52:22.109Z,3,C:\Windows\System32\taskhostw.exe,ACME\agarcia,udp,10.10.2.146,62895,10.10.2.164,445, +MKT-WS-046,2026-02-18T14:17:39.663Z,3,C:\Windows\System32\explorer.exe,ACME\agarcia,udp,10.10.2.146,56988,10.10.2.113,8080,npmjs.com +MKT-WS-046,2026-02-19T04:39:09.507Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\agarcia,udp,10.10.2.146,61782,12.138.243.137,3389, +MKT-WS-046,2026-02-16T02:42:22.264Z,3,C:\Windows\System32\teams.exe,ACME\agarcia,udp,10.10.2.146,53500,139.85.152.13,445, +MKT-WS-046,2026-02-10T16:25:09.204Z,3,C:\Windows\System32\notepad.exe,ACME\agarcia,udp,10.10.2.146,51827,10.10.1.106,3389, +MKT-WS-046,2026-02-17T14:04:23.347Z,3,C:\Windows\System32\svchost.exe,ACME\agarcia,udp,10.10.2.146,65434,10.10.3.120,389, +MKT-WS-046,2026-02-18T10:42:54.141Z,3,C:\Windows\System32\code.exe,ACME\agarcia,udp,10.10.2.146,56286,37.5.183.12,445, +MKT-WS-046,2026-02-13T01:54:09.452Z,3,C:\Windows\System32\lsass.exe,ACME\agarcia,tcp,10.10.2.146,54844,10.10.1.136,443, +MKT-WS-046,2026-02-11T17:28:17.452Z,3,C:\Windows\System32\lsass.exe,ACME\agarcia,udp,10.10.2.146,56320,10.10.1.139,443, +MKT-WS-046,2026-02-18T02:00:56.347Z,3,C:\Program Files\chrome.exe,ACME\agarcia,udp,10.10.2.146,50304,85.66.184.147,389, +MKT-WS-046,2026-02-19T22:52:58.718Z,3,C:\Program Files\msedge.exe,ACME\agarcia,udp,10.10.2.146,51912,69.57.70.111,3389, +MKT-WS-046,2026-02-12T13:30:47.456Z,3,C:\Program Files\msedge.exe,ACME\agarcia,tcp,10.10.2.146,59064,79.247.71.77,53, +MKT-WS-046,2026-02-12T21:43:19.503Z,3,C:\Program Files\chrome.exe,ACME\agarcia,udp,10.10.2.146,62619,10.10.1.106,445, +MKT-WS-046,2026-02-18T14:24:50.532Z,3,C:\Windows\System32\winlogon.exe,ACME\agarcia,udp,10.10.2.146,53012,221.19.170.80,443, +MKT-WS-046,2026-02-17T13:20:10.623Z,3,C:\Program Files\chrome.exe,ACME\agarcia,udp,10.10.2.146,53206,10.10.3.147,443,npmjs.com +MKT-WS-046,2026-02-17T20:59:36.552Z,3,C:\Windows\System32\svchost.exe,ACME\agarcia,udp,10.10.2.146,50175,40.245.163.41,8080, +MKT-WS-046,2026-02-11T15:10:06.806Z,3,C:\Windows\System32\taskhostw.exe,ACME\agarcia,tcp,10.10.2.146,53333,10.10.3.111,443,acme.local +MKT-WS-046,2026-02-11T15:25:24.813Z,3,C:\Program Files\msedge.exe,ACME\agarcia,tcp,10.10.2.146,49848,114.74.118.97,80, +MKT-WS-046,2026-02-12T23:10:27.812Z,3,C:\Windows\System32\services.exe,ACME\agarcia,udp,10.10.2.146,50153,10.10.1.13,443, +MKT-WS-046,2026-02-14T10:15:45.621Z,3,C:\Windows\System32\lsass.exe,ACME\agarcia,udp,10.10.2.146,52843,114.14.188.118,53,windowsupdate.com +MKT-WS-046,2026-02-16T20:08:44.143Z,3,C:\Windows\System32\teams.exe,ACME\agarcia,udp,10.10.2.146,62008,100.178.217.207,80, +MKT-WS-046,2026-02-12T08:19:29.521Z,3,C:\Windows\System32\System,ACME\agarcia,udp,10.10.2.146,53262,10.10.2.128,80,acme.sharepoint.com +MKT-WS-046,2026-02-13T14:18:13.265Z,3,C:\Windows\System32\spoolsv.exe,ACME\agarcia,tcp,10.10.2.146,50244,10.10.3.111,389, +MKT-WS-046,2026-02-16T00:58:12.894Z,3,C:\Windows\System32\teams.exe,ACME\agarcia,tcp,10.10.2.146,58364,176.9.132.129,80, +MKT-WS-046,2026-02-12T04:26:08.360Z,3,C:\Program Files\msedge.exe,ACME\agarcia,udp,10.10.2.146,58176,153.71.169.11,53, +MKT-WS-046,2026-02-20T05:52:03.991Z,3,C:\Windows\System32\spoolsv.exe,ACME\agarcia,udp,10.10.2.146,49352,10.10.2.140,53, +MKT-WS-046,2026-02-16T09:56:40.632Z,3,C:\Program Files\chrome.exe,ACME\agarcia,udp,10.10.2.146,55678,10.10.1.154,389, +MKT-WS-046,2026-02-18T23:55:57.720Z,3,C:\Program Files\chrome.exe,ACME\agarcia,udp,10.10.2.146,50701,10.10.1.118,445, +MKT-WS-046,2026-02-12T18:41:38.619Z,3,C:\Program Files\chrome.exe,ACME\agarcia,tcp,10.10.2.146,54607,10.10.1.160,443, +MKT-WS-046,2026-02-12T08:58:50.346Z,3,C:\Windows\System32\outlook.exe,ACME\agarcia,udp,10.10.2.146,53153,31.3.70.31,445, +MKT-WS-046,2026-02-14T23:54:40.038Z,3,C:\Program Files\msedge.exe,ACME\agarcia,tcp,10.10.2.146,63542,10.10.1.121,445, +MKT-WS-046,2026-02-17T13:58:13.528Z,3,C:\Windows\System32\dwm.exe,ACME\agarcia,tcp,10.10.2.146,53426,10.10.3.114,80, +MKT-WS-046,2026-02-10T17:26:00.459Z,3,C:\Windows\System32\svchost.exe,ACME\agarcia,tcp,10.10.2.146,63977,10.10.2.167,8080, +MKT-WS-046,2026-02-17T06:07:00.181Z,3,C:\Windows\System32\OneDrive.exe,ACME\agarcia,udp,10.10.2.146,56190,10.10.1.13,80, +MKT-WS-046,2026-02-16T18:17:49.277Z,3,C:\Program Files\msedge.exe,ACME\agarcia,tcp,10.10.2.146,55255,180.106.51.183,443, +MKT-WS-046,2026-02-14T00:06:23.775Z,3,C:\Windows\System32\smss.exe,ACME\agarcia,udp,10.10.2.146,63490,77.252.18.211,80, +MKT-WS-046,2026-02-14T19:35:34.038Z,3,C:\Windows\System32\SearchHost.exe,ACME\agarcia,tcp,10.10.2.146,51221,10.10.1.169,80, +EXEC-WS-047,2026-02-20T12:28:15.912Z,3,C:\Windows\System32\services.exe,ACME\svc_web,udp,10.10.3.147,49502,126.105.134.137,53, +EXEC-WS-047,2026-02-14T15:55:52.970Z,3,C:\Windows\System32\outlook.exe,ACME\svc_web,udp,10.10.3.147,63657,10.10.3.108,443, +EXEC-WS-047,2026-02-11T23:57:56.948Z,3,C:\Windows\System32\code.exe,ACME\svc_web,udp,10.10.3.147,60177,10.10.3.135,8080, +EXEC-WS-047,2026-02-18T06:03:14.021Z,3,C:\Windows\System32\code.exe,ACME\svc_web,tcp,10.10.3.147,52705,10.10.2.10,443, +EXEC-WS-047,2026-02-16T12:55:01.981Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.3.147,60563,127.236.87.225,80, +EXEC-WS-047,2026-02-18T17:59:22.110Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_web,tcp,10.10.3.147,53724,10.10.1.139,3389, +EXEC-WS-047,2026-02-13T22:33:07.360Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_web,tcp,10.10.3.147,62945,160.191.98.155,445, +EXEC-WS-047,2026-02-17T03:21:42.371Z,3,C:\Windows\System32\csrss.exe,ACME\svc_web,tcp,10.10.3.147,58337,10.10.1.112,53, +EXEC-WS-047,2026-02-14T14:40:17.131Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_web,tcp,10.10.3.147,51678,10.10.1.115,3389,www.bet365.com +EXEC-WS-047,2026-02-18T13:11:29.714Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_web,tcp,10.10.3.147,57209,89.236.143.48,443, +EXEC-WS-047,2026-02-16T17:48:31.281Z,3,C:\Windows\System32\lsass.exe,ACME\svc_web,udp,10.10.3.147,59731,177.84.108.97,3389, +EXEC-WS-047,2026-02-14T07:30:32.032Z,3,C:\Windows\System32\OneDrive.exe,ACME\svc_web,udp,10.10.3.147,55480,10.10.1.145,389, +EXEC-WS-047,2026-02-15T04:51:36.477Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_web,tcp,10.10.3.147,64999,10.10.1.151,445, +EXEC-WS-047,2026-02-11T16:28:56.812Z,3,C:\Windows\System32\services.exe,ACME\svc_web,udp,10.10.3.147,61483,68.49.88.1,443, +EXEC-WS-047,2026-02-20T14:28:54.132Z,3,C:\Windows\System32\teams.exe,ACME\svc_web,tcp,10.10.3.147,63420,21.210.243.8,445, +EXEC-WS-047,2026-02-16T15:04:36.393Z,3,C:\Program Files\msedge.exe,ACME\svc_web,tcp,10.10.3.147,56153,10.10.1.127,8080, +EXEC-WS-047,2026-02-12T14:06:18.229Z,3,C:\Program Files\chrome.exe,ACME\svc_web,tcp,10.10.3.147,53928,205.81.246.19,445, +EXEC-WS-047,2026-02-15T12:27:58.628Z,3,C:\Program Files\chrome.exe,ACME\svc_web,tcp,10.10.3.147,64938,140.250.97.201,8080, +EXEC-WS-047,2026-02-16T19:45:40.927Z,3,C:\Windows\System32\explorer.exe,ACME\svc_web,tcp,10.10.3.147,58987,139.204.24.10,8080, +EXEC-WS-047,2026-02-19T08:19:38.277Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_web,tcp,10.10.3.147,57538,10.10.3.159,389, +EXEC-WS-047,2026-02-19T01:07:39.482Z,3,C:\Windows\System32\outlook.exe,ACME\svc_web,udp,10.10.3.147,64573,10.10.2.11,3389, +EXEC-WS-047,2026-02-14T05:30:17.492Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_web,udp,10.10.3.147,49958,10.10.1.139,8080, +EXEC-WS-047,2026-02-18T11:59:56.001Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_web,udp,10.10.3.147,65146,10.10.2.131,80, +EXEC-WS-047,2026-02-11T22:37:27.601Z,3,C:\Windows\System32\code.exe,ACME\svc_web,udp,10.10.3.147,57223,10.10.3.138,8080, +EXEC-WS-047,2026-02-20T14:52:49.956Z,3,C:\Windows\System32\taskhostw.exe,ACME\svc_web,tcp,10.10.3.147,55361,10.10.2.101,443, +EXEC-WS-047,2026-02-19T08:44:41.224Z,3,C:\Windows\System32\smss.exe,ACME\svc_web,tcp,10.10.3.147,62790,189.70.163.28,389, +EXEC-WS-047,2026-02-10T16:39:06.556Z,3,C:\Windows\System32\powershell.exe,ACME\svc_web,udp,10.10.3.147,51960,10.10.3.168,443, +EXEC-WS-047,2026-02-11T05:38:43.464Z,3,C:\Windows\System32\services.exe,ACME\svc_web,tcp,10.10.3.147,59610,10.10.1.151,443, +EXEC-WS-047,2026-02-10T11:42:42.594Z,3,C:\Program Files\chrome.exe,ACME\svc_web,udp,10.10.3.147,51368,215.196.93.29,443, +EXEC-WS-047,2026-02-18T10:27:30.957Z,3,C:\Windows\System32\services.exe,ACME\svc_web,tcp,10.10.3.147,64247,150.40.48.216,389, +EXEC-WS-047,2026-02-18T06:15:14.345Z,3,C:\Windows\System32\notepad.exe,ACME\svc_web,udp,10.10.3.147,60773,10.10.1.130,3389, +EXEC-WS-047,2026-02-13T03:02:20.397Z,3,C:\Windows\System32\smss.exe,ACME\svc_web,udp,10.10.3.147,60043,137.91.29.141,8080,acme.sharepoint.com +EXEC-WS-047,2026-02-20T04:50:08.214Z,3,C:\Windows\System32\spoolsv.exe,ACME\svc_web,tcp,10.10.3.147,55952,10.10.1.106,53, +EXEC-WS-047,2026-02-11T02:04:34.629Z,3,C:\Windows\System32\smss.exe,ACME\svc_web,tcp,10.10.3.147,60591,10.10.2.11,8080, +EXEC-WS-047,2026-02-17T07:59:36.705Z,3,C:\Windows\System32\lsass.exe,ACME\svc_web,tcp,10.10.3.147,51182,165.158.73.229,3389, +EXEC-WS-047,2026-02-20T12:30:36.362Z,3,C:\Windows\System32\outlook.exe,ACME\svc_web,udp,10.10.3.147,62878,5.228.47.214,443, +EXEC-WS-047,2026-02-20T08:24:34.534Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.3.147,58581,10.10.2.11,389, +EXEC-WS-047,2026-02-12T00:36:52.959Z,3,C:\Windows\System32\teams.exe,ACME\svc_web,tcp,10.10.3.147,54033,10.10.2.164,389, +EXEC-WS-047,2026-02-14T16:49:52.109Z,3,C:\Program Files\chrome.exe,ACME\svc_web,udp,10.10.3.147,58016,198.20.159.147,80, +EXEC-WS-047,2026-02-14T19:34:21.231Z,3,C:\Windows\System32\code.exe,ACME\svc_web,tcp,10.10.3.147,61330,10.10.2.128,389, +EXEC-WS-047,2026-02-15T18:27:47.781Z,3,C:\Windows\System32\System,ACME\svc_web,udp,10.10.3.147,61518,42.92.138.151,389, +EXEC-WS-047,2026-02-17T07:32:24.172Z,3,C:\Windows\System32\lsass.exe,ACME\svc_web,tcp,10.10.3.147,57095,10.10.3.141,443,graph.microsoft.com +EXEC-WS-047,2026-02-10T17:34:55.153Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_web,tcp,10.10.3.147,60056,174.34.35.167,389, +EXEC-WS-047,2026-02-18T13:25:35.789Z,3,C:\Program Files\chrome.exe,ACME\svc_web,udp,10.10.3.147,53650,10.10.1.133,53, +EXEC-WS-047,2026-02-19T07:38:01.166Z,3,C:\Windows\System32\cmd.exe,ACME\svc_web,udp,10.10.3.147,61498,10.10.2.125,443, +EXEC-WS-047,2026-02-11T14:14:47.961Z,3,C:\Windows\System32\csrss.exe,ACME\svc_web,tcp,10.10.3.147,52204,10.10.3.141,8080, +EXEC-WS-047,2026-02-11T19:59:22.326Z,3,C:\Windows\System32\services.exe,ACME\svc_web,tcp,10.10.3.147,59173,76.2.151.192,3389, +EXEC-WS-047,2026-02-12T09:30:31.945Z,3,C:\Program Files\chrome.exe,ACME\svc_web,tcp,10.10.3.147,63715,10.10.3.120,53, +IT-WS-048,2026-02-14T22:07:49.521Z,3,C:\Windows\System32\OneDrive.exe,ACME\hbrown,udp,10.10.1.148,64353,10.10.1.160,389, +IT-WS-048,2026-02-17T16:34:06.283Z,3,C:\Windows\System32\code.exe,ACME\hbrown,tcp,10.10.1.148,61596,44.36.197.116,53, +IT-WS-048,2026-02-13T08:13:59.790Z,3,C:\Windows\System32\MsMpEng.exe,ACME\hbrown,tcp,10.10.1.148,62053,135.102.231.44,8080, +IT-WS-048,2026-02-14T21:55:18.488Z,3,C:\Program Files\msedge.exe,ACME\hbrown,tcp,10.10.1.148,60263,157.32.167.18,80, +IT-WS-048,2026-02-12T14:56:40.983Z,3,C:\Windows\System32\notepad.exe,ACME\hbrown,udp,10.10.1.148,53637,42.51.248.35,443, +IT-WS-048,2026-02-19T18:46:01.255Z,3,C:\Windows\System32\dwm.exe,ACME\hbrown,tcp,10.10.1.148,54864,37.100.150.66,443, +IT-WS-048,2026-02-18T16:22:16.112Z,3,C:\Windows\System32\powershell.exe,ACME\hbrown,udp,10.10.1.148,54145,8.80.173.55,443, +IT-WS-048,2026-02-10T23:03:44.482Z,3,C:\Windows\System32\notepad.exe,ACME\hbrown,udp,10.10.1.148,52479,10.10.1.133,443, +IT-WS-048,2026-02-12T23:44:23.871Z,3,C:\Windows\System32\csrss.exe,ACME\hbrown,tcp,10.10.1.148,50640,10.10.2.146,53, +IT-WS-048,2026-02-13T12:35:11.162Z,3,C:\Windows\System32\teams.exe,ACME\hbrown,tcp,10.10.1.148,50876,10.10.3.174,389, +IT-WS-048,2026-02-13T23:21:58.801Z,3,C:\Windows\System32\dwm.exe,ACME\hbrown,tcp,10.10.1.148,55147,180.82.101.51,8080, +IT-WS-048,2026-02-20T13:55:40.661Z,3,C:\Windows\System32\powershell.exe,ACME\hbrown,udp,10.10.1.148,54782,39.24.43.130,445, +IT-WS-048,2026-02-11T15:43:26.419Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\hbrown,tcp,10.10.1.148,51247,10.10.2.167,443, +IT-WS-048,2026-02-10T21:35:24.774Z,3,C:\Program Files\msedge.exe,ACME\hbrown,tcp,10.10.1.148,65145,10.10.3.108,53, +IT-WS-048,2026-02-19T13:02:42.607Z,3,C:\Windows\System32\code.exe,ACME\hbrown,tcp,10.10.1.148,61661,10.10.1.121,3389, +IT-WS-048,2026-02-16T02:57:44.058Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\hbrown,udp,10.10.1.148,63925,186.236.120.117,445, +IT-WS-048,2026-02-14T17:43:47.964Z,3,C:\Windows\System32\lsass.exe,ACME\hbrown,udp,10.10.1.148,50051,1.104.109.49,8080, +IT-WS-048,2026-02-18T08:03:04.403Z,3,C:\Windows\System32\spoolsv.exe,ACME\hbrown,tcp,10.10.1.148,52395,10.10.2.113,80, +IT-WS-048,2026-02-20T05:21:58.697Z,3,C:\Windows\System32\taskhostw.exe,ACME\hbrown,udp,10.10.1.148,60863,35.53.222.246,443, +IT-WS-048,2026-02-11T04:53:59.102Z,3,C:\Program Files\msedge.exe,ACME\hbrown,tcp,10.10.1.148,58251,10.10.3.135,80, +IT-WS-048,2026-02-19T15:24:43.313Z,3,C:\Windows\System32\teams.exe,ACME\hbrown,udp,10.10.1.148,55081,10.10.2.170,53, +IT-WS-048,2026-02-20T01:53:04.837Z,3,C:\Windows\System32\lsass.exe,ACME\hbrown,udp,10.10.1.148,63987,204.36.105.170,389, +IT-WS-048,2026-02-19T09:44:54.323Z,3,C:\Windows\System32\SearchHost.exe,ACME\hbrown,tcp,10.10.1.148,57099,128.240.237.19,443, +IT-WS-048,2026-02-14T03:02:41.729Z,3,C:\Program Files\msedge.exe,ACME\hbrown,udp,10.10.1.148,56128,42.5.231.161,80, +IT-WS-048,2026-02-20T16:35:37.602Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\hbrown,tcp,10.10.1.148,60898,10.10.3.111,389, +IT-WS-048,2026-02-18T16:22:25.553Z,3,C:\Program Files\chrome.exe,ACME\hbrown,udp,10.10.1.148,63307,7.47.8.232,445, +IT-WS-048,2026-02-15T01:52:40.403Z,3,C:\Windows\System32\System,ACME\hbrown,udp,10.10.1.148,55846,10.10.3.129,80, +IT-WS-048,2026-02-17T00:29:02.118Z,3,C:\Program Files\msedge.exe,ACME\hbrown,udp,10.10.1.148,62402,10.10.2.161,389, +IT-WS-048,2026-02-19T11:18:00.511Z,3,C:\Program Files\msedge.exe,ACME\hbrown,tcp,10.10.1.148,56441,10.10.2.161,389, +IT-WS-048,2026-02-11T20:44:47.471Z,3,C:\Windows\System32\OneDrive.exe,ACME\hbrown,tcp,10.10.1.148,52722,10.10.3.114,80, +IT-WS-048,2026-02-19T07:22:25.233Z,3,C:\Windows\System32\lsass.exe,ACME\hbrown,tcp,10.10.1.148,65184,187.214.95.225,53, +IT-WS-048,2026-02-16T15:41:49.576Z,3,C:\Windows\System32\notepad.exe,ACME\hbrown,udp,10.10.1.148,54647,10.10.2.149,443, +IT-WS-048,2026-02-17T08:11:19.960Z,3,C:\Windows\System32\outlook.exe,ACME\hbrown,tcp,10.10.1.148,51139,10.10.1.10,80, +IT-WS-048,2026-02-19T15:59:42.290Z,3,C:\Windows\System32\svchost.exe,ACME\hbrown,udp,10.10.1.148,62371,58.7.51.46,3389, +IT-WS-048,2026-02-16T10:36:02.949Z,3,C:\Windows\System32\explorer.exe,ACME\hbrown,tcp,10.10.1.148,65206,10.10.3.174,3389, +IT-WS-048,2026-02-19T00:56:59.091Z,3,C:\Windows\System32\code.exe,ACME\hbrown,tcp,10.10.1.148,62594,59.81.37.60,3389, +IT-WS-048,2026-02-11T06:51:34.674Z,3,C:\Program Files\chrome.exe,ACME\hbrown,udp,10.10.1.148,55860,10.10.3.108,389, +IT-WS-048,2026-02-18T22:54:24.849Z,3,C:\Program Files\msedge.exe,ACME\hbrown,tcp,10.10.1.148,50549,10.10.1.11,3389, +IT-WS-048,2026-02-12T02:26:03.239Z,3,C:\Windows\System32\code.exe,ACME\hbrown,udp,10.10.1.148,52252,222.96.25.53,389, +IT-WS-048,2026-02-13T20:48:50.222Z,3,C:\Windows\System32\teams.exe,ACME\hbrown,udp,10.10.1.148,58785,10.10.1.148,445, +IT-WS-048,2026-02-12T13:30:58.928Z,3,C:\Windows\System32\notepad.exe,ACME\hbrown,tcp,10.10.1.148,62218,204.184.184.108,8080, +IT-WS-048,2026-02-13T11:09:45.412Z,3,C:\Windows\System32\taskhostw.exe,ACME\hbrown,udp,10.10.1.148,61293,63.63.174.123,445, +IT-WS-048,2026-02-10T21:41:33.196Z,3,C:\Windows\System32\powershell.exe,ACME\hbrown,tcp,10.10.1.148,54809,10.10.3.120,80, +IT-WS-048,2026-02-13T03:40:07.984Z,3,C:\Program Files\msedge.exe,ACME\hbrown,tcp,10.10.1.148,64678,204.46.78.31,389, +IT-WS-048,2026-02-12T22:36:58.002Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\hbrown,tcp,10.10.1.148,63939,7.144.102.49,53, +IT-WS-048,2026-02-20T01:24:15.265Z,3,C:\Windows\System32\services.exe,ACME\hbrown,tcp,10.10.1.148,62859,214.225.83.124,53, +IT-WS-048,2026-02-17T10:24:58.657Z,3,C:\Windows\System32\spoolsv.exe,ACME\hbrown,udp,10.10.1.148,64719,10.10.1.160,445, +IT-WS-048,2026-02-14T20:11:18.483Z,3,C:\Windows\System32\notepad.exe,ACME\hbrown,udp,10.10.1.148,63724,34.187.60.12,80,github.com +IT-WS-048,2026-02-13T21:15:22.829Z,3,C:\Program Files\msedge.exe,ACME\hbrown,tcp,10.10.1.148,51736,10.10.1.163,445, +HR-WS-049,2026-02-13T23:45:40.525Z,3,C:\Windows\System32\winlogon.exe,ACME\idavis,udp,10.10.2.149,58514,10.10.2.173,80, +HR-WS-049,2026-02-13T19:08:20.249Z,3,C:\Windows\System32\outlook.exe,ACME\idavis,udp,10.10.2.149,62606,10.10.3.138,8080, +HR-WS-049,2026-02-18T18:55:15.861Z,3,C:\Windows\System32\MsMpEng.exe,ACME\idavis,udp,10.10.2.149,58087,10.10.2.113,53, +HR-WS-049,2026-02-15T16:50:40.387Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.2.149,52211,10.10.1.175,53, +HR-WS-049,2026-02-20T10:44:09.826Z,3,C:\Windows\System32\smss.exe,ACME\idavis,udp,10.10.2.149,55190,10.10.1.118,443, +HR-WS-049,2026-02-17T23:31:50.514Z,3,C:\Windows\System32\dwm.exe,ACME\idavis,udp,10.10.2.149,58347,84.164.141.166,389, +HR-WS-049,2026-02-18T01:49:11.705Z,3,C:\Windows\System32\notepad.exe,ACME\idavis,udp,10.10.2.149,55808,10.10.1.172,389, +HR-WS-049,2026-02-11T14:11:22.685Z,3,C:\Windows\System32\MsMpEng.exe,ACME\idavis,udp,10.10.2.149,63488,10.10.1.175,3389, +HR-WS-049,2026-02-18T05:12:58.128Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.2.149,60180,10.10.2.104,3389, +HR-WS-049,2026-02-15T05:04:32.043Z,3,C:\Windows\System32\MsMpEng.exe,ACME\idavis,udp,10.10.2.149,50894,10.10.2.152,389, +HR-WS-049,2026-02-15T02:17:37.625Z,3,C:\Windows\System32\OneDrive.exe,ACME\idavis,tcp,10.10.2.149,51142,213.222.233.98,3389, +HR-WS-049,2026-02-10T20:26:51.914Z,3,C:\Windows\System32\teams.exe,ACME\idavis,tcp,10.10.2.149,58273,59.57.120.155,53,pokerstars.com +HR-WS-049,2026-02-20T14:32:33.066Z,3,C:\Windows\System32\lsass.exe,ACME\idavis,tcp,10.10.2.149,50191,35.144.152.218,443, +HR-WS-049,2026-02-18T19:24:46.742Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.2.149,50899,34.155.234.42,53, +HR-WS-049,2026-02-16T04:22:15.153Z,3,C:\Windows\System32\smss.exe,ACME\idavis,tcp,10.10.2.149,51066,107.10.163.166,80, +HR-WS-049,2026-02-20T00:15:56.802Z,3,C:\Windows\System32\smss.exe,ACME\idavis,udp,10.10.2.149,61688,10.10.3.126,53, +HR-WS-049,2026-02-20T13:31:39.601Z,3,C:\Windows\System32\outlook.exe,ACME\idavis,udp,10.10.2.149,49273,10.10.2.158,80, +HR-WS-049,2026-02-16T13:58:08.795Z,3,C:\Program Files\chrome.exe,ACME\idavis,udp,10.10.2.149,50583,10.10.1.136,53,exch-01.acme.local +HR-WS-049,2026-02-18T07:53:22.708Z,3,C:\Windows\System32\dwm.exe,ACME\idavis,tcp,10.10.2.149,55266,73.66.190.130,445, +HR-WS-049,2026-02-15T16:35:40.750Z,3,C:\Program Files\chrome.exe,ACME\idavis,udp,10.10.2.149,50369,10.10.3.114,8080, +HR-WS-049,2026-02-11T06:07:24.457Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,udp,10.10.2.149,53686,10.10.3.123,389, +HR-WS-049,2026-02-17T01:05:26.295Z,3,C:\Windows\System32\spoolsv.exe,ACME\idavis,tcp,10.10.2.149,54844,34.200.210.122,443, +HR-WS-049,2026-02-16T00:47:49.425Z,3,C:\Program Files\chrome.exe,ACME\idavis,udp,10.10.2.149,49968,181.193.76.142,445, +HR-WS-049,2026-02-17T23:11:46.960Z,3,C:\Windows\System32\notepad.exe,ACME\idavis,udp,10.10.2.149,60689,126.80.27.88,3389,github.com +HR-WS-049,2026-02-18T14:59:17.408Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,tcp,10.10.2.149,53218,10.10.1.151,80, +HR-WS-049,2026-02-14T11:44:07.253Z,3,C:\Windows\System32\spoolsv.exe,ACME\idavis,udp,10.10.2.149,65327,12.198.2.168,80, +HR-WS-049,2026-02-11T15:24:33.283Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.2.149,62062,10.10.2.155,8080, +HR-WS-049,2026-02-17T10:33:21.623Z,3,C:\Windows\System32\teams.exe,ACME\idavis,tcp,10.10.2.149,49468,10.10.2.140,3389, +HR-WS-049,2026-02-20T01:45:00.412Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.2.149,54607,10.10.2.158,53,pypi.org +HR-WS-049,2026-02-15T15:11:12.774Z,3,C:\Windows\System32\OneDrive.exe,ACME\idavis,udp,10.10.2.149,60099,10.10.1.118,80, +HR-WS-049,2026-02-11T04:28:25.733Z,3,C:\Windows\System32\SearchHost.exe,ACME\idavis,udp,10.10.2.149,63923,10.10.2.128,443,cloudflare.com +HR-WS-049,2026-02-13T10:48:36.346Z,3,C:\Windows\System32\winlogon.exe,ACME\idavis,tcp,10.10.2.149,51950,75.210.186.34,80, +HR-WS-049,2026-02-13T10:52:53.255Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,udp,10.10.2.149,62508,5.205.158.81,389, +HR-WS-049,2026-02-19T19:19:48.935Z,3,C:\Windows\System32\cmd.exe,ACME\idavis,udp,10.10.2.149,62922,10.10.3.144,389, +HR-WS-049,2026-02-15T23:58:54.560Z,3,C:\Windows\System32\notepad.exe,ACME\idavis,tcp,10.10.2.149,59024,134.6.183.233,389, +HR-WS-049,2026-02-20T03:35:47.921Z,3,C:\Windows\System32\spoolsv.exe,ACME\idavis,tcp,10.10.2.149,59419,204.97.72.58,389, +HR-WS-049,2026-02-14T06:02:59.049Z,3,C:\Windows\System32\spoolsv.exe,ACME\idavis,udp,10.10.2.149,50873,85.43.49.245,80, +HR-WS-049,2026-02-20T06:09:48.234Z,3,C:\Windows\System32\svchost.exe,ACME\idavis,tcp,10.10.2.149,50303,100.242.145.120,8080, +HR-WS-049,2026-02-19T09:39:49.129Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.2.149,60561,18.55.222.176,53, +FIN-WS-050,2026-02-18T01:01:12.392Z,3,C:\Program Files\chrome.exe,ACME\agarcia,udp,10.10.3.150,50395,153.2.118.149,53, +FIN-WS-050,2026-02-11T09:05:48.404Z,3,C:\Windows\System32\teams.exe,ACME\agarcia,udp,10.10.3.150,60581,25.7.168.106,443, +FIN-WS-050,2026-02-14T03:02:07.060Z,3,C:\Windows\System32\cmd.exe,ACME\agarcia,udp,10.10.3.150,58070,125.31.225.137,445, +FIN-WS-050,2026-02-16T01:34:30.779Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\agarcia,udp,10.10.3.150,61005,26.67.61.220,3389, +FIN-WS-050,2026-02-12T12:51:34.434Z,3,C:\Windows\System32\svchost.exe,ACME\agarcia,udp,10.10.3.150,59083,10.10.3.114,445,acme.sharepoint.com +FIN-WS-050,2026-02-20T05:47:38.371Z,3,C:\Program Files\msedge.exe,ACME\agarcia,tcp,10.10.3.150,54218,72.132.61.82,3389, +FIN-WS-050,2026-02-20T07:38:28.344Z,3,C:\Program Files\msedge.exe,ACME\agarcia,udp,10.10.3.150,55092,9.103.217.238,445,graph.microsoft.com +FIN-WS-050,2026-02-11T16:46:59.058Z,3,C:\Windows\System32\winlogon.exe,ACME\agarcia,udp,10.10.3.150,56891,110.23.84.235,8080, +FIN-WS-050,2026-02-10T16:14:44.248Z,3,C:\Program Files\msedge.exe,ACME\agarcia,udp,10.10.3.150,53617,109.235.191.88,8080, +FIN-WS-050,2026-02-11T19:30:15.849Z,3,C:\Program Files\chrome.exe,ACME\agarcia,tcp,10.10.3.150,64151,109.220.246.230,389, +FIN-WS-050,2026-02-18T09:34:36.128Z,3,C:\Program Files\msedge.exe,ACME\agarcia,tcp,10.10.3.150,51934,91.3.98.174,8080, +FIN-WS-050,2026-02-19T07:11:19.165Z,3,C:\Windows\System32\notepad.exe,ACME\agarcia,tcp,10.10.3.150,61458,115.205.146.11,80, +FIN-WS-050,2026-02-13T01:11:20.153Z,3,C:\Windows\System32\code.exe,ACME\agarcia,tcp,10.10.3.150,63884,10.10.1.124,53, +FIN-WS-050,2026-02-15T08:39:49.396Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\agarcia,udp,10.10.3.150,53716,10.10.3.129,8080, +FIN-WS-050,2026-02-15T19:46:35.728Z,3,C:\Windows\System32\lsass.exe,ACME\agarcia,udp,10.10.3.150,53455,10.10.2.167,8080,akamai.net +FIN-WS-050,2026-02-12T17:42:16.058Z,3,C:\Windows\System32\taskhostw.exe,ACME\agarcia,tcp,10.10.3.150,56890,8.193.247.36,53, +FIN-WS-050,2026-02-18T11:08:02.139Z,3,C:\Windows\System32\code.exe,ACME\agarcia,tcp,10.10.3.150,53670,10.10.3.162,389, +FIN-WS-050,2026-02-11T03:48:33.124Z,3,C:\Program Files\msedge.exe,ACME\agarcia,udp,10.10.3.150,52259,141.88.95.63,443, +FIN-WS-050,2026-02-14T00:14:08.562Z,3,C:\Windows\System32\lsass.exe,ACME\agarcia,udp,10.10.3.150,58962,162.179.177.221,389, +FIN-WS-050,2026-02-11T10:10:09.404Z,3,C:\Windows\System32\notepad.exe,ACME\agarcia,udp,10.10.3.150,64071,10.10.3.156,80, +FIN-WS-050,2026-02-17T02:17:33.579Z,3,C:\Windows\System32\powershell.exe,ACME\agarcia,udp,10.10.3.150,54675,169.190.46.169,53, +FIN-WS-050,2026-02-19T01:53:09.176Z,3,C:\Windows\System32\taskhostw.exe,ACME\agarcia,tcp,10.10.3.150,56586,63.128.234.116,3389, +FIN-WS-050,2026-02-19T18:11:54.360Z,3,C:\Windows\System32\SearchHost.exe,ACME\agarcia,udp,10.10.3.150,65359,10.10.3.141,80, +FIN-WS-050,2026-02-17T15:17:14.959Z,3,C:\Program Files\chrome.exe,ACME\agarcia,tcp,10.10.3.150,55992,88.96.190.184,53, +FIN-WS-050,2026-02-16T09:44:45.131Z,3,C:\Program Files\chrome.exe,ACME\agarcia,udp,10.10.3.150,50254,98.5.155.220,389, +FIN-WS-050,2026-02-17T00:26:18.547Z,3,C:\Windows\System32\explorer.exe,ACME\agarcia,tcp,10.10.3.150,62405,10.10.3.141,443, +FIN-WS-050,2026-02-17T21:34:07.287Z,3,C:\Windows\System32\explorer.exe,ACME\agarcia,tcp,10.10.3.150,62615,199.170.254.205,443, +SLS-WS-051,2026-02-16T09:42:25.223Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,udp,10.10.1.151,51762,10.10.1.112,8080, +SLS-WS-051,2026-02-20T16:36:42.168Z,3,C:\Windows\System32\System,ACME\idavis,tcp,10.10.1.151,64829,34.174.29.67,80, +SLS-WS-051,2026-02-14T09:18:25.350Z,3,C:\Windows\System32\winlogon.exe,ACME\idavis,tcp,10.10.1.151,62892,10.10.3.111,389, +SLS-WS-051,2026-02-11T12:36:03.498Z,3,C:\Windows\System32\lsass.exe,ACME\idavis,tcp,10.10.1.151,64152,173.222.43.50,53, +SLS-WS-051,2026-02-11T17:25:05.186Z,3,C:\Windows\System32\SearchHost.exe,ACME\idavis,tcp,10.10.1.151,58419,218.121.165.27,8080, +SLS-WS-051,2026-02-16T12:29:49.105Z,3,C:\Windows\System32\OneDrive.exe,ACME\idavis,tcp,10.10.1.151,50392,30.39.69.101,389,stackoverflow.com +SLS-WS-051,2026-02-19T06:36:26.366Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.1.151,49362,168.177.72.39,389, +SLS-WS-051,2026-02-13T15:22:48.298Z,3,C:\Windows\System32\SearchHost.exe,ACME\idavis,udp,10.10.1.151,52011,10.10.1.154,445, +SLS-WS-051,2026-02-17T13:17:25.731Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.1.151,51216,142.41.136.187,443, +SLS-WS-051,2026-02-17T22:03:25.550Z,3,C:\Windows\System32\code.exe,ACME\idavis,udp,10.10.1.151,55712,191.6.89.176,3389, +SLS-WS-051,2026-02-14T00:14:01.647Z,3,C:\Windows\System32\taskhostw.exe,ACME\idavis,udp,10.10.1.151,55049,10.10.1.10,80, +SLS-WS-051,2026-02-19T16:59:30.357Z,3,C:\Windows\System32\taskhostw.exe,ACME\idavis,udp,10.10.1.151,58567,142.78.83.116,445, +SLS-WS-051,2026-02-18T09:29:08.727Z,3,C:\Program Files\chrome.exe,ACME\idavis,udp,10.10.1.151,59124,10.10.1.115,389, +SLS-WS-051,2026-02-13T08:32:24.074Z,3,C:\Program Files\chrome.exe,ACME\idavis,udp,10.10.1.151,61581,10.10.1.109,80, +SLS-WS-051,2026-02-10T10:57:18.178Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,tcp,10.10.1.151,55933,10.10.1.136,389, +SLS-WS-051,2026-02-19T08:45:42.396Z,3,C:\Windows\System32\cmd.exe,ACME\idavis,udp,10.10.1.151,54272,10.10.1.109,443,google.com +SLS-WS-051,2026-02-13T04:48:09.113Z,3,C:\Program Files\chrome.exe,ACME\idavis,udp,10.10.1.151,58589,10.10.2.101,8080, +SLS-WS-051,2026-02-17T02:19:56.342Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,tcp,10.10.1.151,53970,10.10.3.108,3389, +SLS-WS-051,2026-02-15T23:12:50.080Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.1.151,59052,127.97.191.149,445, +SLS-WS-051,2026-02-14T06:07:57.048Z,3,C:\Windows\System32\notepad.exe,ACME\idavis,udp,10.10.1.151,57570,107.151.127.35,443, +SLS-WS-051,2026-02-15T17:17:06.889Z,3,C:\Windows\System32\svchost.exe,ACME\idavis,tcp,10.10.1.151,62299,10.10.3.129,445, +SLS-WS-051,2026-02-12T21:31:25.671Z,3,C:\Windows\System32\taskhostw.exe,ACME\idavis,udp,10.10.1.151,63165,38.135.184.251,8080, +SLS-WS-051,2026-02-16T20:02:11.341Z,3,C:\Windows\System32\code.exe,ACME\idavis,tcp,10.10.1.151,61445,7.129.27.236,53, +SLS-WS-051,2026-02-14T15:18:43.447Z,3,C:\Windows\System32\lsass.exe,ACME\idavis,udp,10.10.1.151,61773,121.102.255.48,80, +SLS-WS-051,2026-02-14T03:58:17.702Z,3,C:\Windows\System32\outlook.exe,ACME\idavis,tcp,10.10.1.151,62912,197.137.139.29,80, +SLS-WS-051,2026-02-15T07:59:34.169Z,3,C:\Windows\System32\System,ACME\idavis,udp,10.10.1.151,65144,10.10.1.172,443, +ENG-WS-052,2026-02-12T03:33:24.376Z,3,C:\Windows\System32\cmd.exe,ACME\svc_web,udp,10.10.2.152,56700,10.10.2.131,53, +ENG-WS-052,2026-02-19T15:17:48.082Z,3,C:\Program Files\chrome.exe,ACME\svc_web,udp,10.10.2.152,54199,10.10.2.107,445, +ENG-WS-052,2026-02-18T07:12:00.829Z,3,C:\Windows\System32\OneDrive.exe,ACME\svc_web,tcp,10.10.2.152,65496,153.194.165.92,3389, +ENG-WS-052,2026-02-17T17:19:57.984Z,3,C:\Program Files\chrome.exe,ACME\svc_web,tcp,10.10.2.152,59662,10.10.2.155,445, +ENG-WS-052,2026-02-18T15:18:30.722Z,3,C:\Windows\System32\code.exe,ACME\svc_web,udp,10.10.2.152,64492,10.10.1.118,3389, +ENG-WS-052,2026-02-15T00:05:57.880Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_web,tcp,10.10.2.152,56987,217.24.17.204,445, +ENG-WS-052,2026-02-13T14:09:18.043Z,3,C:\Windows\System32\lsass.exe,ACME\svc_web,udp,10.10.2.152,64528,10.10.1.118,389, +ENG-WS-052,2026-02-12T05:21:10.487Z,3,C:\Program Files\msedge.exe,ACME\svc_web,tcp,10.10.2.152,53103,96.66.126.68,389, +ENG-WS-052,2026-02-15T02:28:09.267Z,3,C:\Windows\System32\explorer.exe,ACME\svc_web,udp,10.10.2.152,57570,10.10.2.155,8080, +ENG-WS-052,2026-02-12T13:30:30.398Z,3,C:\Windows\System32\csrss.exe,ACME\svc_web,tcp,10.10.2.152,64963,74.83.22.224,8080, +ENG-WS-052,2026-02-17T19:59:48.812Z,3,C:\Windows\System32\smss.exe,ACME\svc_web,udp,10.10.2.152,64322,10.10.2.113,80, +ENG-WS-052,2026-02-19T22:04:55.356Z,3,C:\Windows\System32\dwm.exe,ACME\svc_web,tcp,10.10.2.152,53335,102.201.141.115,389, +ENG-WS-052,2026-02-17T08:03:24.712Z,3,C:\Windows\System32\outlook.exe,ACME\svc_web,udp,10.10.2.152,63351,10.10.1.175,389,acme.sharepoint.com +ENG-WS-052,2026-02-16T10:35:19.580Z,3,C:\Windows\System32\svchost.exe,ACME\svc_web,udp,10.10.2.152,52493,163.12.159.89,3389, +ENG-WS-052,2026-02-11T09:35:56.862Z,3,C:\Windows\System32\csrss.exe,ACME\svc_web,tcp,10.10.2.152,52351,24.198.38.64,80, +ENG-WS-052,2026-02-15T16:32:20.367Z,3,C:\Windows\System32\code.exe,ACME\svc_web,udp,10.10.2.152,53086,10.10.2.122,443, +ENG-WS-052,2026-02-13T13:07:06.870Z,3,C:\Windows\System32\OneDrive.exe,ACME\svc_web,udp,10.10.2.152,64368,17.1.189.229,389, +ENG-WS-052,2026-02-16T12:11:24.174Z,3,C:\Windows\System32\services.exe,ACME\svc_web,tcp,10.10.2.152,63376,10.10.3.150,389, +ENG-WS-052,2026-02-12T09:16:08.797Z,3,C:\Windows\System32\lsass.exe,ACME\svc_web,udp,10.10.2.152,51538,33.173.205.116,3389, +ENG-WS-052,2026-02-10T23:07:01.935Z,3,C:\Windows\System32\smss.exe,ACME\svc_web,udp,10.10.2.152,63376,25.251.244.22,53, +ENG-WS-052,2026-02-15T02:25:50.253Z,3,C:\Program Files\msedge.exe,ACME\svc_web,tcp,10.10.2.152,62352,139.151.231.70,389, +ENG-WS-052,2026-02-14T09:34:53.384Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_web,udp,10.10.2.152,52115,10.10.1.121,3389, +ENG-WS-052,2026-02-12T00:51:59.623Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_web,udp,10.10.2.152,56146,196.179.34.223,80, +ENG-WS-052,2026-02-19T01:18:37.519Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.2.152,52246,10.10.2.101,3389, +ENG-WS-052,2026-02-12T12:57:10.767Z,3,C:\Windows\System32\smss.exe,ACME\svc_web,udp,10.10.2.152,60305,10.10.2.116,80, +ENG-WS-052,2026-02-18T02:52:43.604Z,3,C:\Program Files\chrome.exe,ACME\svc_web,tcp,10.10.2.152,53059,140.173.38.50,8080, +ENG-WS-052,2026-02-13T08:16:46.569Z,3,C:\Windows\System32\taskhostw.exe,ACME\svc_web,tcp,10.10.2.152,62568,156.228.73.207,445, +ENG-WS-052,2026-02-20T06:06:28.378Z,3,C:\Program Files\chrome.exe,ACME\svc_web,udp,10.10.2.152,61949,102.250.59.33,389, +ENG-WS-052,2026-02-18T22:35:07.080Z,3,C:\Windows\System32\dwm.exe,ACME\svc_web,tcp,10.10.2.152,59303,158.253.90.202,3389, +ENG-WS-052,2026-02-11T15:40:19.291Z,3,C:\Windows\System32\OneDrive.exe,ACME\svc_web,udp,10.10.2.152,62766,10.10.1.160,443, +ENG-WS-052,2026-02-20T05:27:25.662Z,3,C:\Program Files\msedge.exe,ACME\svc_web,tcp,10.10.2.152,49451,10.10.3.144,389, +ENG-WS-052,2026-02-20T10:05:59.218Z,3,C:\Windows\System32\notepad.exe,ACME\svc_web,tcp,10.10.2.152,64065,10.10.1.130,445, +ENG-WS-052,2026-02-13T09:01:20.410Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.2.152,57852,220.61.238.28,389, +ENG-WS-052,2026-02-12T18:11:31.776Z,3,C:\Windows\System32\smss.exe,ACME\svc_web,tcp,10.10.2.152,55344,10.10.2.128,3389, +ENG-WS-052,2026-02-14T22:43:01.971Z,3,C:\Windows\System32\lsass.exe,ACME\svc_web,tcp,10.10.2.152,51489,163.85.251.224,443, +ENG-WS-052,2026-02-17T01:56:15.010Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_web,tcp,10.10.2.152,56381,31.30.47.13,80,googleapis.com +ENG-WS-052,2026-02-12T03:13:17.878Z,3,C:\Windows\System32\csrss.exe,ACME\svc_web,udp,10.10.2.152,62673,10.10.1.133,445, +ENG-WS-052,2026-02-14T12:34:41.568Z,3,C:\Windows\System32\spoolsv.exe,ACME\svc_web,udp,10.10.2.152,57316,10.10.1.163,80, +ENG-WS-052,2026-02-17T13:18:55.618Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.2.152,57360,110.215.247.27,8080, +ENG-WS-052,2026-02-17T15:23:26.270Z,3,C:\Windows\System32\System,ACME\svc_web,tcp,10.10.2.152,63694,10.10.2.146,443, +ENG-WS-052,2026-02-16T04:48:53.403Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_web,udp,10.10.2.152,52321,10.10.2.113,80, +ENG-WS-052,2026-02-16T18:47:11.793Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.2.152,60554,200.83.221.130,389,dc-01.acme.local +ENG-WS-052,2026-02-12T19:15:33.826Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_web,udp,10.10.2.152,53993,10.10.1.145,53, +ENG-WS-052,2026-02-17T04:19:07.701Z,3,C:\Windows\System32\OneDrive.exe,ACME\svc_web,tcp,10.10.2.152,53846,176.187.66.229,8080, +ENG-WS-052,2026-02-12T18:42:51.777Z,3,C:\Program Files\msedge.exe,ACME\svc_web,tcp,10.10.2.152,55774,10.10.2.107,80, +ENG-WS-052,2026-02-16T10:52:32.006Z,3,C:\Windows\System32\outlook.exe,ACME\svc_web,tcp,10.10.2.152,57480,172.171.212.199,389, +ENG-WS-052,2026-02-10T08:32:22.630Z,3,C:\Windows\System32\lsass.exe,ACME\svc_web,udp,10.10.2.152,54591,10.10.1.145,445, +LEG-WS-053,2026-02-12T13:04:33.127Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,udp,10.10.3.153,57892,10.10.3.144,80, +LEG-WS-053,2026-02-16T03:45:22.375Z,3,C:\Windows\System32\outlook.exe,ACME\cjohnson,tcp,10.10.3.153,49700,137.206.144.170,80, +LEG-WS-053,2026-02-14T23:13:32.872Z,3,C:\Windows\System32\smss.exe,ACME\cjohnson,udp,10.10.3.153,57140,7.24.94.187,445, +LEG-WS-053,2026-02-12T06:08:46.603Z,3,C:\Windows\System32\svchost.exe,ACME\cjohnson,tcp,10.10.3.153,52561,35.2.171.25,443, +LEG-WS-053,2026-02-18T11:18:34.060Z,3,C:\Windows\System32\outlook.exe,ACME\cjohnson,tcp,10.10.3.153,56246,144.178.183.47,53, +LEG-WS-053,2026-02-15T23:36:35.539Z,3,C:\Windows\System32\System,ACME\cjohnson,udp,10.10.3.153,59596,167.127.125.133,3389, +LEG-WS-053,2026-02-17T22:21:07.216Z,3,C:\Windows\System32\spoolsv.exe,ACME\cjohnson,tcp,10.10.3.153,56703,125.215.244.158,8080, +LEG-WS-053,2026-02-10T12:48:52.939Z,3,C:\Windows\System32\smss.exe,ACME\cjohnson,udp,10.10.3.153,55785,133.203.0.15,53, +LEG-WS-053,2026-02-14T01:46:34.278Z,3,C:\Windows\System32\OneDrive.exe,ACME\cjohnson,tcp,10.10.3.153,55753,10.10.3.159,53, +LEG-WS-053,2026-02-16T13:42:49.989Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.3.153,62385,29.52.214.82,8080, +LEG-WS-053,2026-02-17T03:55:18.720Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,udp,10.10.3.153,58197,90.68.229.238,80, +LEG-WS-053,2026-02-11T17:34:19.904Z,3,C:\Windows\System32\outlook.exe,ACME\cjohnson,udp,10.10.3.153,58997,10.10.1.154,445, +LEG-WS-053,2026-02-15T23:10:50.507Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.3.153,54578,10.10.1.139,80, +LEG-WS-053,2026-02-19T03:55:59.205Z,3,C:\Windows\System32\powershell.exe,ACME\cjohnson,udp,10.10.3.153,52303,176.71.177.140,3389, +LEG-WS-053,2026-02-17T01:22:40.788Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,udp,10.10.3.153,52602,34.244.0.110,443, +LEG-WS-053,2026-02-15T13:40:27.418Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.3.153,57846,30.70.110.216,3389, +LEG-WS-053,2026-02-13T01:55:15.768Z,3,C:\Windows\System32\explorer.exe,ACME\cjohnson,udp,10.10.3.153,57929,10.10.3.144,80, +LEG-WS-053,2026-02-12T06:43:26.099Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,tcp,10.10.3.153,57006,10.10.1.169,8080, +LEG-WS-053,2026-02-15T06:53:00.617Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.3.153,54294,171.39.41.91,53, +LEG-WS-053,2026-02-12T14:57:58.604Z,3,C:\Windows\System32\OneDrive.exe,ACME\cjohnson,udp,10.10.3.153,62938,190.185.84.134,8080, +LEG-WS-053,2026-02-15T08:20:23.936Z,3,C:\Windows\System32\code.exe,ACME\cjohnson,tcp,10.10.3.153,51469,10.10.1.12,445, +LEG-WS-053,2026-02-17T18:20:09.264Z,3,C:\Windows\System32\MsMpEng.exe,ACME\cjohnson,tcp,10.10.3.153,52611,61.195.114.209,3389, +LEG-WS-053,2026-02-19T16:06:39.657Z,3,C:\Windows\System32\spoolsv.exe,ACME\cjohnson,udp,10.10.3.153,60480,10.10.2.131,445, +LEG-WS-053,2026-02-20T01:40:21.842Z,3,C:\Windows\System32\teams.exe,ACME\cjohnson,tcp,10.10.3.153,50254,10.10.2.164,443, +LEG-WS-053,2026-02-18T01:03:33.139Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,udp,10.10.3.153,56809,33.14.223.104,389, +LEG-WS-053,2026-02-13T10:17:35.108Z,3,C:\Windows\System32\dwm.exe,ACME\cjohnson,udp,10.10.3.153,58022,10.10.3.120,80, +LEG-WS-053,2026-02-18T10:08:15.738Z,3,C:\Windows\System32\lsass.exe,ACME\cjohnson,tcp,10.10.3.153,54118,64.14.172.152,443, +LEG-WS-053,2026-02-12T12:33:14.308Z,3,C:\Windows\System32\winlogon.exe,ACME\cjohnson,udp,10.10.3.153,62085,121.253.118.111,389,aws.amazon.com +LEG-WS-053,2026-02-16T02:46:39.043Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.3.153,61652,10.10.3.10,445, +LEG-WS-053,2026-02-19T13:19:35.345Z,3,C:\Windows\System32\SearchHost.exe,ACME\cjohnson,tcp,10.10.3.153,65002,10.10.3.171,53, +LEG-WS-053,2026-02-12T08:47:22.254Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,udp,10.10.3.153,51645,108.107.200.186,8080, +LEG-WS-053,2026-02-20T02:24:05.337Z,3,C:\Windows\System32\explorer.exe,ACME\cjohnson,udp,10.10.3.153,61267,170.36.239.147,445, +MKT-WS-054,2026-02-11T22:29:45.222Z,3,C:\Windows\System32\taskhostw.exe,ACME\cjohnson,udp,10.10.1.154,61334,110.92.98.174,445, +MKT-WS-054,2026-02-11T13:15:32.707Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,udp,10.10.1.154,62585,10.10.3.120,445, +MKT-WS-054,2026-02-19T11:18:17.485Z,3,C:\Windows\System32\explorer.exe,ACME\cjohnson,tcp,10.10.1.154,50482,10.10.3.147,53, +MKT-WS-054,2026-02-14T18:28:10.577Z,3,C:\Windows\System32\cmd.exe,ACME\cjohnson,udp,10.10.1.154,58063,164.207.64.190,389, +MKT-WS-054,2026-02-18T12:57:13.076Z,3,C:\Windows\System32\dwm.exe,ACME\cjohnson,tcp,10.10.1.154,52827,204.183.117.145,389, +MKT-WS-054,2026-02-15T17:36:56.190Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,udp,10.10.1.154,50194,10.10.2.116,445, +MKT-WS-054,2026-02-14T13:55:54.924Z,3,C:\Windows\System32\System,ACME\cjohnson,tcp,10.10.1.154,54989,113.218.127.65,53, +MKT-WS-054,2026-02-15T21:04:11.447Z,3,C:\Windows\System32\smss.exe,ACME\cjohnson,tcp,10.10.1.154,49829,10.10.1.12,3389, +MKT-WS-054,2026-02-17T10:00:08.624Z,3,C:\Windows\System32\OneDrive.exe,ACME\cjohnson,tcp,10.10.1.154,51192,149.42.228.241,3389, +MKT-WS-054,2026-02-17T10:07:57.563Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\cjohnson,udp,10.10.1.154,50230,10.10.3.162,53, +MKT-WS-054,2026-02-18T09:40:49.451Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,udp,10.10.1.154,53832,13.107.238.24,53, +MKT-WS-054,2026-02-13T20:36:37.542Z,3,C:\Windows\System32\winlogon.exe,ACME\cjohnson,tcp,10.10.1.154,57917,110.208.161.182,8080, +MKT-WS-054,2026-02-10T21:43:46.742Z,3,C:\Windows\System32\winlogon.exe,ACME\cjohnson,udp,10.10.1.154,57391,92.224.128.75,53, +EXEC-WS-055,2026-02-16T06:32:37.292Z,3,C:\Program Files\msedge.exe,ACME\emartinez,udp,10.10.2.155,49580,10.10.1.109,80, +EXEC-WS-055,2026-02-11T02:40:13.988Z,3,C:\Windows\System32\spoolsv.exe,ACME\emartinez,tcp,10.10.2.155,65478,10.10.1.145,80, +EXEC-WS-055,2026-02-19T02:14:24.237Z,3,C:\Windows\System32\services.exe,ACME\emartinez,tcp,10.10.2.155,57590,121.91.255.237,53, +EXEC-WS-055,2026-02-13T02:04:46.191Z,3,C:\Windows\System32\MsMpEng.exe,ACME\emartinez,udp,10.10.2.155,59256,74.222.240.45,389, +EXEC-WS-055,2026-02-12T13:59:11.464Z,3,C:\Windows\System32\services.exe,ACME\emartinez,udp,10.10.2.155,51345,66.51.231.94,3389, +EXEC-WS-055,2026-02-19T23:20:16.489Z,3,C:\Windows\System32\spoolsv.exe,ACME\emartinez,udp,10.10.2.155,52189,10.10.3.150,445, +EXEC-WS-055,2026-02-12T10:33:43.739Z,3,C:\Windows\System32\winlogon.exe,ACME\emartinez,tcp,10.10.2.155,60083,35.127.145.35,445, +EXEC-WS-055,2026-02-15T19:50:41.289Z,3,C:\Windows\System32\cmd.exe,ACME\emartinez,udp,10.10.2.155,54177,111.194.101.124,3389, +EXEC-WS-055,2026-02-16T06:01:47.470Z,3,C:\Windows\System32\services.exe,ACME\emartinez,tcp,10.10.2.155,51239,10.10.3.132,53, +EXEC-WS-055,2026-02-16T20:52:27.504Z,3,C:\Windows\System32\dwm.exe,ACME\emartinez,udp,10.10.2.155,56534,10.10.2.155,389, +EXEC-WS-055,2026-02-12T05:22:45.506Z,3,C:\Windows\System32\cmd.exe,ACME\emartinez,udp,10.10.2.155,56592,141.208.97.82,443, +EXEC-WS-055,2026-02-12T10:53:06.669Z,3,C:\Windows\System32\MsMpEng.exe,ACME\emartinez,udp,10.10.2.155,61305,10.10.3.111,443, +EXEC-WS-055,2026-02-16T14:49:24.780Z,3,C:\Windows\System32\lsass.exe,ACME\emartinez,udp,10.10.2.155,52982,132.78.149.14,443, +EXEC-WS-055,2026-02-16T21:17:10.902Z,3,C:\Windows\System32\smss.exe,ACME\emartinez,tcp,10.10.2.155,52017,10.10.3.132,389, +EXEC-WS-055,2026-02-19T11:53:40.168Z,3,C:\Windows\System32\SearchHost.exe,ACME\emartinez,udp,10.10.2.155,57382,178.158.84.142,8080, +EXEC-WS-055,2026-02-18T01:01:28.133Z,3,C:\Windows\System32\cmd.exe,ACME\emartinez,tcp,10.10.2.155,53734,92.202.247.56,80, +EXEC-WS-055,2026-02-11T02:04:40.931Z,3,C:\Program Files\chrome.exe,ACME\emartinez,tcp,10.10.2.155,55208,134.238.95.191,445, +EXEC-WS-055,2026-02-13T22:02:17.406Z,3,C:\Windows\System32\outlook.exe,ACME\emartinez,udp,10.10.2.155,61156,10.10.2.149,80, +EXEC-WS-055,2026-02-12T23:06:05.109Z,3,C:\Program Files\msedge.exe,ACME\emartinez,tcp,10.10.2.155,58335,69.206.36.182,80,pypi.org +EXEC-WS-055,2026-02-15T12:47:04.082Z,3,C:\Windows\System32\code.exe,ACME\emartinez,udp,10.10.2.155,51785,10.10.1.106,53, +EXEC-WS-055,2026-02-19T21:39:38.045Z,3,C:\Program Files\msedge.exe,ACME\emartinez,udp,10.10.2.155,56057,10.10.1.160,389,login.microsoftonline.com +EXEC-WS-055,2026-02-11T22:31:00.586Z,3,C:\Windows\System32\services.exe,ACME\emartinez,tcp,10.10.2.155,62576,10.10.2.125,445, +EXEC-WS-055,2026-02-12T23:17:33.385Z,3,C:\Windows\System32\code.exe,ACME\emartinez,udp,10.10.2.155,53645,10.10.2.134,8080, +EXEC-WS-055,2026-02-18T16:46:28.580Z,3,C:\Windows\System32\cmd.exe,ACME\emartinez,tcp,10.10.2.155,65195,49.116.226.203,80, +EXEC-WS-055,2026-02-11T10:12:44.186Z,3,C:\Windows\System32\code.exe,ACME\emartinez,tcp,10.10.2.155,60037,10.10.3.108,8080, +EXEC-WS-055,2026-02-15T06:07:51.453Z,3,C:\Windows\System32\services.exe,ACME\emartinez,tcp,10.10.2.155,57075,112.133.143.120,8080, +IT-WS-056,2026-02-15T01:40:13.584Z,3,C:\Program Files\msedge.exe,ACME\emartinez,tcp,10.10.3.156,54620,10.10.1.133,445, +IT-WS-056,2026-02-11T16:26:37.456Z,3,C:\Windows\System32\services.exe,ACME\emartinez,tcp,10.10.3.156,58354,10.10.3.159,443, +IT-WS-056,2026-02-14T22:54:14.324Z,3,C:\Windows\System32\code.exe,ACME\emartinez,tcp,10.10.3.156,62847,26.22.147.204,53, +IT-WS-056,2026-02-16T00:40:46.403Z,3,C:\Windows\System32\code.exe,ACME\emartinez,udp,10.10.3.156,61716,132.229.163.144,445, +IT-WS-056,2026-02-13T13:44:33.761Z,3,C:\Windows\System32\outlook.exe,ACME\emartinez,tcp,10.10.3.156,60543,113.57.166.208,8080, +IT-WS-056,2026-02-14T20:52:11.389Z,3,C:\Windows\System32\explorer.exe,ACME\emartinez,tcp,10.10.3.156,55051,141.7.186.164,3389, +IT-WS-056,2026-02-13T02:56:59.062Z,3,C:\Windows\System32\System,ACME\emartinez,tcp,10.10.3.156,49859,43.47.37.136,3389, +IT-WS-056,2026-02-13T19:48:38.319Z,3,C:\Program Files\msedge.exe,ACME\emartinez,tcp,10.10.3.156,50328,10.10.3.168,445, +IT-WS-056,2026-02-11T08:25:07.908Z,3,C:\Windows\System32\SearchHost.exe,ACME\emartinez,udp,10.10.3.156,53494,10.10.2.164,443, +IT-WS-056,2026-02-14T12:39:12.245Z,3,C:\Windows\System32\spoolsv.exe,ACME\emartinez,udp,10.10.3.156,57083,214.43.157.158,8080, +IT-WS-056,2026-02-12T11:48:03.886Z,3,C:\Windows\System32\outlook.exe,ACME\emartinez,udp,10.10.3.156,65287,94.56.223.2,389, +IT-WS-056,2026-02-12T01:38:52.746Z,3,C:\Windows\System32\cmd.exe,ACME\emartinez,tcp,10.10.3.156,53456,10.10.1.133,53, +IT-WS-056,2026-02-11T23:59:25.967Z,3,C:\Program Files\chrome.exe,ACME\emartinez,tcp,10.10.3.156,60995,10.10.3.10,3389, +IT-WS-056,2026-02-12T18:01:33.287Z,3,C:\Windows\System32\smss.exe,ACME\emartinez,tcp,10.10.3.156,65042,44.251.240.199,443, +IT-WS-056,2026-02-10T23:34:11.307Z,3,C:\Program Files\msedge.exe,ACME\emartinez,tcp,10.10.3.156,54049,10.10.1.112,445, +IT-WS-056,2026-02-20T07:04:26.530Z,3,C:\Windows\System32\explorer.exe,ACME\emartinez,udp,10.10.3.156,59962,139.61.147.206,8080,github.com +IT-WS-056,2026-02-16T11:07:48.052Z,3,C:\Windows\System32\spoolsv.exe,ACME\emartinez,tcp,10.10.3.156,64275,10.10.1.106,80, +IT-WS-056,2026-02-17T02:45:08.972Z,3,C:\Windows\System32\spoolsv.exe,ACME\emartinez,tcp,10.10.3.156,56818,10.10.2.122,53, +IT-WS-056,2026-02-18T00:30:15.555Z,3,C:\Windows\System32\lsass.exe,ACME\emartinez,udp,10.10.3.156,58548,43.166.235.143,53, +IT-WS-056,2026-02-12T09:44:01.228Z,3,C:\Windows\System32\SearchHost.exe,ACME\emartinez,tcp,10.10.3.156,61126,84.166.79.14,445, +IT-WS-056,2026-02-10T18:06:27.767Z,3,C:\Program Files\chrome.exe,ACME\emartinez,tcp,10.10.3.156,65260,10.10.3.174,80, +IT-WS-056,2026-02-10T22:24:45.134Z,3,C:\Program Files\msedge.exe,ACME\emartinez,udp,10.10.3.156,57456,222.241.254.253,3389, +IT-WS-056,2026-02-14T23:14:13.592Z,3,C:\Windows\System32\dwm.exe,ACME\emartinez,udp,10.10.3.156,60714,37.71.57.173,3389, +IT-WS-056,2026-02-15T10:19:41.111Z,3,C:\Windows\System32\taskhostw.exe,ACME\emartinez,udp,10.10.3.156,56948,202.186.88.157,443, +IT-WS-056,2026-02-20T02:33:26.366Z,3,C:\Windows\System32\explorer.exe,ACME\emartinez,udp,10.10.3.156,52102,10.10.2.101,3389, +IT-WS-056,2026-02-14T20:30:15.243Z,3,C:\Program Files\chrome.exe,ACME\emartinez,udp,10.10.3.156,54926,104.14.192.166,80, +IT-WS-056,2026-02-13T14:03:35.489Z,3,C:\Windows\System32\outlook.exe,ACME\emartinez,udp,10.10.3.156,55819,114.36.113.48,80, +IT-WS-056,2026-02-15T10:01:13.624Z,3,C:\Windows\System32\teams.exe,ACME\emartinez,tcp,10.10.3.156,53516,10.10.2.143,80,dc-01.acme.local +IT-WS-056,2026-02-19T23:13:00.220Z,3,C:\Windows\System32\dwm.exe,ACME\emartinez,udp,10.10.3.156,58551,217.157.156.30,53, +IT-WS-056,2026-02-15T10:16:33.258Z,3,C:\Program Files\msedge.exe,ACME\emartinez,tcp,10.10.3.156,51353,207.96.193.17,53, +IT-WS-056,2026-02-16T11:24:40.871Z,3,C:\Windows\System32\cmd.exe,ACME\emartinez,udp,10.10.3.156,52390,10.10.1.118,8080, +HR-WS-057,2026-02-18T13:48:33.967Z,3,C:\Windows\System32\teams.exe,ACME\cjohnson,udp,10.10.1.157,50775,10.10.1.163,53, +HR-WS-057,2026-02-20T03:09:27.923Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,tcp,10.10.1.157,62514,161.236.203.164,389, +HR-WS-057,2026-02-10T14:01:28.603Z,3,C:\Windows\System32\svchost.exe,ACME\cjohnson,tcp,10.10.1.157,51727,214.57.153.186,443, +HR-WS-057,2026-02-15T02:51:24.572Z,3,C:\Windows\System32\powershell.exe,ACME\cjohnson,tcp,10.10.1.157,56066,10.10.2.143,389, +HR-WS-057,2026-02-18T00:53:35.000Z,3,C:\Windows\System32\explorer.exe,ACME\cjohnson,tcp,10.10.1.157,60387,10.10.2.146,3389, +HR-WS-057,2026-02-13T20:52:26.991Z,3,C:\Windows\System32\code.exe,ACME\cjohnson,tcp,10.10.1.157,63046,10.10.3.147,445,acme.local +HR-WS-057,2026-02-13T09:42:09.419Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,udp,10.10.1.157,54370,71.160.171.124,445,outlook.office365.com +HR-WS-057,2026-02-20T14:09:39.258Z,3,C:\Windows\System32\MsMpEng.exe,ACME\cjohnson,tcp,10.10.1.157,57765,10.10.3.108,80, +HR-WS-057,2026-02-19T03:14:04.567Z,3,C:\Windows\System32\dwm.exe,ACME\cjohnson,udp,10.10.1.157,51006,10.10.3.126,3389,graph.microsoft.com +HR-WS-057,2026-02-19T11:22:30.963Z,3,C:\Windows\System32\MsMpEng.exe,ACME\cjohnson,tcp,10.10.1.157,55275,10.10.3.105,8080, +HR-WS-057,2026-02-18T14:41:21.081Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,tcp,10.10.1.157,53399,92.196.100.212,53, +HR-WS-057,2026-02-16T06:23:22.398Z,3,C:\Windows\System32\OneDrive.exe,ACME\cjohnson,udp,10.10.1.157,53456,10.10.3.111,389, +HR-WS-057,2026-02-10T10:46:43.493Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.1.157,61433,10.10.2.131,443, +HR-WS-057,2026-02-18T21:59:24.699Z,3,C:\Windows\System32\teams.exe,ACME\cjohnson,udp,10.10.1.157,60814,10.10.2.173,445, +HR-WS-057,2026-02-19T18:50:39.008Z,3,C:\Windows\System32\notepad.exe,ACME\cjohnson,tcp,10.10.1.157,59686,184.157.111.104,3389,update.microsoft.com +HR-WS-057,2026-02-15T12:58:33.415Z,3,C:\Windows\System32\OneDrive.exe,ACME\cjohnson,tcp,10.10.1.157,53274,220.148.203.116,443, +HR-WS-057,2026-02-12T12:02:03.270Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\cjohnson,udp,10.10.1.157,65362,10.10.3.111,445, +FIN-WS-058,2026-02-10T16:35:23.543Z,3,C:\Windows\System32\SearchHost.exe,ACME\bwilson,udp,10.10.2.158,52356,81.236.158.59,3389, +FIN-WS-058,2026-02-16T03:09:41.110Z,3,C:\Program Files\chrome.exe,ACME\bwilson,udp,10.10.2.158,53917,66.95.126.15,8080, +FIN-WS-058,2026-02-14T11:54:33.626Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.2.158,53211,10.10.1.130,445, +FIN-WS-058,2026-02-16T22:03:59.397Z,3,C:\Windows\System32\svchost.exe,ACME\bwilson,udp,10.10.2.158,56425,47.126.206.216,445, +FIN-WS-058,2026-02-10T12:17:28.357Z,3,C:\Windows\System32\lsass.exe,ACME\bwilson,udp,10.10.2.158,57886,156.62.225.142,53, +FIN-WS-058,2026-02-19T06:29:24.726Z,3,C:\Windows\System32\OneDrive.exe,ACME\bwilson,tcp,10.10.2.158,54198,10.10.1.112,389, +FIN-WS-058,2026-02-13T23:53:32.586Z,3,C:\Windows\System32\powershell.exe,ACME\bwilson,tcp,10.10.2.158,51706,20.206.137.64,389,teams.microsoft.com +FIN-WS-058,2026-02-13T16:06:04.813Z,3,C:\Windows\System32\svchost.exe,ACME\bwilson,tcp,10.10.2.158,51455,41.63.25.90,443, +FIN-WS-058,2026-02-18T18:41:01.944Z,3,C:\Windows\System32\svchost.exe,ACME\bwilson,udp,10.10.2.158,59905,10.10.2.11,389, +FIN-WS-058,2026-02-19T15:43:00.871Z,3,C:\Windows\System32\SearchHost.exe,ACME\bwilson,tcp,10.10.2.158,51361,10.10.2.146,8080, +FIN-WS-058,2026-02-13T09:51:24.374Z,3,C:\Program Files\msedge.exe,ACME\bwilson,udp,10.10.2.158,63373,10.10.1.175,443, +FIN-WS-058,2026-02-14T10:19:16.483Z,3,C:\Windows\System32\winlogon.exe,ACME\bwilson,tcp,10.10.2.158,52658,17.113.92.152,80, +FIN-WS-058,2026-02-11T05:55:02.841Z,3,C:\Windows\System32\smss.exe,ACME\bwilson,tcp,10.10.2.158,54842,10.10.3.162,53, +FIN-WS-058,2026-02-11T15:34:04.900Z,3,C:\Windows\System32\outlook.exe,ACME\bwilson,udp,10.10.2.158,56297,10.10.3.111,53, +FIN-WS-058,2026-02-16T13:53:42.116Z,3,C:\Program Files\chrome.exe,ACME\bwilson,udp,10.10.2.158,55635,67.56.149.140,80, +FIN-WS-058,2026-02-19T20:18:47.768Z,3,C:\Windows\System32\smss.exe,ACME\bwilson,udp,10.10.2.158,53452,44.143.123.72,53, +FIN-WS-058,2026-02-14T02:47:51.154Z,3,C:\Windows\System32\csrss.exe,ACME\bwilson,udp,10.10.2.158,51383,10.10.1.130,3389, +FIN-WS-058,2026-02-12T00:14:54.317Z,3,C:\Windows\System32\explorer.exe,ACME\bwilson,udp,10.10.2.158,64677,10.10.2.11,8080, +FIN-WS-058,2026-02-11T22:49:19.371Z,3,C:\Windows\System32\csrss.exe,ACME\bwilson,udp,10.10.2.158,54476,10.10.1.163,53, +FIN-WS-058,2026-02-17T18:43:26.795Z,3,C:\Program Files\msedge.exe,ACME\bwilson,udp,10.10.2.158,54776,24.70.153.83,53, +FIN-WS-058,2026-02-11T22:57:52.313Z,3,C:\Windows\System32\explorer.exe,ACME\bwilson,tcp,10.10.2.158,65525,10.10.1.11,80, +FIN-WS-058,2026-02-13T21:10:23.674Z,3,C:\Windows\System32\MsMpEng.exe,ACME\bwilson,udp,10.10.2.158,54542,216.234.35.134,443, +FIN-WS-058,2026-02-14T01:29:59.322Z,3,C:\Windows\System32\smss.exe,ACME\bwilson,tcp,10.10.2.158,62956,10.10.2.119,53, +FIN-WS-058,2026-02-12T17:18:18.964Z,3,C:\Windows\System32\code.exe,ACME\bwilson,tcp,10.10.2.158,52272,10.10.3.108,3389,update.microsoft.com +FIN-WS-058,2026-02-18T19:00:07.610Z,3,C:\Program Files\chrome.exe,ACME\bwilson,tcp,10.10.2.158,50486,131.47.53.5,53, +FIN-WS-058,2026-02-12T21:52:26.778Z,3,C:\Windows\System32\svchost.exe,ACME\bwilson,udp,10.10.2.158,50182,10.10.1.118,53, +FIN-WS-058,2026-02-19T00:33:40.884Z,3,C:\Windows\System32\System,ACME\bwilson,udp,10.10.2.158,54927,10.10.1.112,80, +FIN-WS-058,2026-02-14T20:45:32.320Z,3,C:\Program Files\chrome.exe,ACME\bwilson,udp,10.10.2.158,57272,10.10.1.118,389,pypi.org +FIN-WS-058,2026-02-18T22:45:05.998Z,3,C:\Windows\System32\teams.exe,ACME\bwilson,udp,10.10.2.158,49410,43.118.228.84,8080, +SLS-WS-059,2026-02-19T21:25:30.616Z,3,C:\Windows\System32\services.exe,ACME\emartinez,udp,10.10.3.159,52592,89.101.254.142,389, +SLS-WS-059,2026-02-17T15:41:08.161Z,3,C:\Windows\System32\lsass.exe,ACME\emartinez,udp,10.10.3.159,57834,10.10.2.152,8080, +SLS-WS-059,2026-02-12T01:45:20.358Z,3,C:\Program Files\chrome.exe,ACME\emartinez,udp,10.10.3.159,57644,10.10.2.164,389, +SLS-WS-059,2026-02-18T15:50:04.098Z,3,C:\Windows\System32\services.exe,ACME\emartinez,tcp,10.10.3.159,55014,10.10.1.115,3389, +SLS-WS-059,2026-02-18T06:38:47.188Z,3,C:\Windows\System32\lsass.exe,ACME\emartinez,udp,10.10.3.159,65130,208.125.7.152,443, +SLS-WS-059,2026-02-12T10:14:19.592Z,3,C:\Windows\System32\notepad.exe,ACME\emartinez,tcp,10.10.3.159,65108,92.75.96.233,53, +SLS-WS-059,2026-02-14T06:54:26.559Z,3,C:\Program Files\chrome.exe,ACME\emartinez,udp,10.10.3.159,53931,10.10.1.163,80, +SLS-WS-059,2026-02-20T07:46:23.984Z,3,C:\Windows\System32\System,ACME\emartinez,tcp,10.10.3.159,63551,10.10.2.137,80, +SLS-WS-059,2026-02-10T14:30:15.980Z,3,C:\Program Files\msedge.exe,ACME\emartinez,tcp,10.10.3.159,50380,132.32.156.69,3389,pypi.org +SLS-WS-059,2026-02-13T17:16:39.192Z,3,C:\Windows\System32\notepad.exe,ACME\emartinez,udp,10.10.3.159,53324,209.156.107.98,53,npmjs.com +SLS-WS-059,2026-02-19T22:29:10.617Z,3,C:\Windows\System32\taskhostw.exe,ACME\emartinez,tcp,10.10.3.159,57458,10.10.3.126,445, +SLS-WS-059,2026-02-10T22:28:46.292Z,3,C:\Windows\System32\cmd.exe,ACME\emartinez,udp,10.10.3.159,55781,10.10.3.162,389, +SLS-WS-059,2026-02-19T03:57:19.413Z,3,C:\Windows\System32\OneDrive.exe,ACME\emartinez,tcp,10.10.3.159,55071,62.218.254.199,3389, +SLS-WS-059,2026-02-19T08:45:16.532Z,3,C:\Windows\System32\outlook.exe,ACME\emartinez,udp,10.10.3.159,51210,218.4.201.147,445, +SLS-WS-059,2026-02-14T01:16:33.316Z,3,C:\Windows\System32\services.exe,ACME\emartinez,udp,10.10.3.159,62805,27.136.189.94,80, +SLS-WS-059,2026-02-11T18:38:45.986Z,3,C:\Program Files\chrome.exe,ACME\emartinez,udp,10.10.3.159,52700,10.10.1.10,443, +SLS-WS-059,2026-02-19T00:28:23.577Z,3,C:\Windows\System32\csrss.exe,ACME\emartinez,tcp,10.10.3.159,54014,10.10.1.133,53, +SLS-WS-059,2026-02-18T18:14:15.220Z,3,C:\Windows\System32\powershell.exe,ACME\emartinez,tcp,10.10.3.159,55459,10.10.2.155,80, +SLS-WS-059,2026-02-15T07:31:52.901Z,3,C:\Program Files\msedge.exe,ACME\emartinez,tcp,10.10.3.159,61088,10.10.3.108,8080, +SLS-WS-059,2026-02-16T19:38:12.780Z,3,C:\Windows\System32\svchost.exe,ACME\emartinez,udp,10.10.3.159,52139,111.126.165.25,3389, +SLS-WS-059,2026-02-10T23:25:59.020Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\emartinez,udp,10.10.3.159,59785,10.10.3.126,3389, +SLS-WS-059,2026-02-10T22:24:47.920Z,3,C:\Windows\System32\outlook.exe,ACME\emartinez,udp,10.10.3.159,62436,10.10.3.168,445, +SLS-WS-059,2026-02-13T12:19:25.915Z,3,C:\Windows\System32\smss.exe,ACME\emartinez,tcp,10.10.3.159,62311,9.149.6.115,8080, +SLS-WS-059,2026-02-16T02:02:01.611Z,3,C:\Windows\System32\SearchHost.exe,ACME\emartinez,tcp,10.10.3.159,61865,10.10.3.123,8080, +SLS-WS-059,2026-02-18T00:40:09.480Z,3,C:\Windows\System32\SearchHost.exe,ACME\emartinez,tcp,10.10.3.159,58514,203.76.145.15,3389, +SLS-WS-059,2026-02-12T16:50:01.294Z,3,C:\Windows\System32\lsass.exe,ACME\emartinez,udp,10.10.3.159,62385,10.10.3.10,445, +SLS-WS-059,2026-02-11T06:03:33.032Z,3,C:\Windows\System32\services.exe,ACME\emartinez,tcp,10.10.3.159,59422,116.210.155.73,53, +SLS-WS-059,2026-02-17T10:05:17.931Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\emartinez,udp,10.10.3.159,54692,98.9.11.6,443, +SLS-WS-059,2026-02-13T14:36:26.294Z,3,C:\Windows\System32\notepad.exe,ACME\emartinez,udp,10.10.3.159,59655,161.37.53.188,443, +SLS-WS-059,2026-02-14T19:55:55.677Z,3,C:\Windows\System32\OneDrive.exe,ACME\emartinez,tcp,10.10.3.159,55744,199.122.166.2,3389, +SLS-WS-059,2026-02-18T09:28:28.456Z,3,C:\Windows\System32\outlook.exe,ACME\emartinez,udp,10.10.3.159,64532,10.10.2.10,80, +SLS-WS-059,2026-02-15T18:10:52.595Z,3,C:\Windows\System32\dwm.exe,ACME\emartinez,udp,10.10.3.159,55575,10.10.3.171,389,update.microsoft.com +SLS-WS-059,2026-02-19T23:54:37.243Z,3,C:\Windows\System32\smss.exe,ACME\emartinez,tcp,10.10.3.159,53597,10.10.1.163,53, +SLS-WS-059,2026-02-18T07:47:44.487Z,3,C:\Windows\System32\outlook.exe,ACME\emartinez,tcp,10.10.3.159,63377,10.10.3.147,445, +SLS-WS-059,2026-02-19T21:41:42.827Z,3,C:\Windows\System32\svchost.exe,ACME\emartinez,tcp,10.10.3.159,52929,21.249.136.141,3389, +SLS-WS-059,2026-02-17T01:32:07.027Z,3,C:\Windows\System32\MsMpEng.exe,ACME\emartinez,udp,10.10.3.159,63533,48.247.115.236,3389, +SLS-WS-059,2026-02-11T17:11:59.404Z,3,C:\Windows\System32\notepad.exe,ACME\emartinez,udp,10.10.3.159,51926,110.245.31.247,3389, +SLS-WS-059,2026-02-20T17:10:40.144Z,3,C:\Windows\System32\outlook.exe,ACME\emartinez,tcp,10.10.3.159,59064,32.143.253.188,8080, +SLS-WS-059,2026-02-20T07:32:47.769Z,3,C:\Windows\System32\System,ACME\emartinez,udp,10.10.3.159,51042,110.99.94.220,3389, +SLS-WS-059,2026-02-13T02:43:55.433Z,3,C:\Windows\System32\explorer.exe,ACME\emartinez,udp,10.10.3.159,51264,114.170.235.188,443, +SLS-WS-059,2026-02-11T19:50:27.171Z,3,C:\Windows\System32\cmd.exe,ACME\emartinez,udp,10.10.3.159,62735,33.224.231.14,445, +SLS-WS-059,2026-02-15T05:00:36.271Z,3,C:\Program Files\msedge.exe,ACME\emartinez,udp,10.10.3.159,53666,10.10.2.113,443, +SLS-WS-059,2026-02-11T16:18:09.615Z,3,C:\Windows\System32\cmd.exe,ACME\emartinez,udp,10.10.3.159,60554,10.10.3.174,443, +ENG-WS-060,2026-02-13T00:12:09.273Z,3,C:\Windows\System32\csrss.exe,ACME\svc_web,udp,10.10.1.160,60784,10.10.1.142,445, +ENG-WS-060,2026-02-19T12:05:30.282Z,3,C:\Windows\System32\outlook.exe,ACME\svc_web,udp,10.10.1.160,59417,84.132.80.120,80, +ENG-WS-060,2026-02-16T00:21:53.794Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_web,udp,10.10.1.160,63251,10.10.1.109,53, +ENG-WS-060,2026-02-18T00:31:25.831Z,3,C:\Windows\System32\dwm.exe,ACME\svc_web,tcp,10.10.1.160,51574,10.10.2.152,53, +ENG-WS-060,2026-02-12T00:34:09.765Z,3,C:\Program Files\msedge.exe,ACME\svc_web,tcp,10.10.1.160,60926,15.162.252.55,443, +ENG-WS-060,2026-02-12T22:53:58.575Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_web,tcp,10.10.1.160,50842,30.63.227.197,389, +ENG-WS-060,2026-02-16T02:22:21.455Z,3,C:\Windows\System32\explorer.exe,ACME\svc_web,udp,10.10.1.160,53066,187.88.25.250,443, +ENG-WS-060,2026-02-12T13:41:48.088Z,3,C:\Windows\System32\services.exe,ACME\svc_web,udp,10.10.1.160,54187,10.10.3.132,53, +ENG-WS-060,2026-02-13T00:15:43.685Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.1.160,50345,178.16.70.77,3389, +ENG-WS-060,2026-02-18T03:26:27.937Z,3,C:\Windows\System32\smss.exe,ACME\svc_web,tcp,10.10.1.160,51750,23.50.127.203,443, +ENG-WS-060,2026-02-19T16:47:15.692Z,3,C:\Windows\System32\smss.exe,ACME\svc_web,udp,10.10.1.160,55137,120.76.143.247,443, +ENG-WS-060,2026-02-10T08:15:58.741Z,3,C:\Windows\System32\lsass.exe,ACME\svc_web,tcp,10.10.1.160,51229,82.129.175.29,8080, +ENG-WS-060,2026-02-15T14:25:23.193Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.1.160,55026,10.10.1.106,445, +ENG-WS-060,2026-02-19T14:37:15.396Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_web,udp,10.10.1.160,64678,64.88.251.81,53, +ENG-WS-060,2026-02-12T20:47:18.926Z,3,C:\Windows\System32\powershell.exe,ACME\svc_web,tcp,10.10.1.160,63480,10.10.2.158,445, +ENG-WS-060,2026-02-13T06:09:46.085Z,3,C:\Windows\System32\teams.exe,ACME\svc_web,tcp,10.10.1.160,63683,147.233.133.162,53, +ENG-WS-060,2026-02-14T15:11:14.703Z,3,C:\Program Files\chrome.exe,ACME\svc_web,tcp,10.10.1.160,53056,191.217.247.120,8080,pypi.org +ENG-WS-060,2026-02-11T21:21:15.642Z,3,C:\Windows\System32\powershell.exe,ACME\svc_web,udp,10.10.1.160,61248,192.171.32.16,445, +ENG-WS-060,2026-02-12T06:14:42.378Z,3,C:\Program Files\chrome.exe,ACME\svc_web,tcp,10.10.1.160,57760,161.2.240.224,445, +ENG-WS-060,2026-02-17T02:20:45.413Z,3,C:\Windows\System32\cmd.exe,ACME\svc_web,tcp,10.10.1.160,55877,194.184.161.216,8080, +ENG-WS-060,2026-02-17T06:28:33.430Z,3,C:\Windows\System32\csrss.exe,ACME\svc_web,udp,10.10.1.160,59777,10.10.3.135,53, +ENG-WS-060,2026-02-20T15:24:25.600Z,3,C:\Windows\System32\csrss.exe,ACME\svc_web,udp,10.10.1.160,63093,15.219.253.203,80, +ENG-WS-060,2026-02-12T20:28:42.957Z,3,C:\Windows\System32\smss.exe,ACME\svc_web,tcp,10.10.1.160,54759,10.10.2.167,53, +ENG-WS-060,2026-02-10T23:51:03.228Z,3,C:\Program Files\msedge.exe,ACME\svc_web,udp,10.10.1.160,49393,57.18.9.90,53,googleapis.com +ENG-WS-060,2026-02-17T18:26:23.422Z,3,C:\Windows\System32\outlook.exe,ACME\svc_web,tcp,10.10.1.160,62420,10.10.3.156,53,github.com +ENG-WS-060,2026-02-14T13:46:11.701Z,3,C:\Windows\System32\cmd.exe,ACME\svc_web,tcp,10.10.1.160,49297,10.10.3.171,443, +ENG-WS-060,2026-02-15T03:16:47.629Z,3,C:\Windows\System32\code.exe,ACME\svc_web,udp,10.10.1.160,63719,219.241.188.136,445, +ENG-WS-060,2026-02-11T20:06:11.591Z,3,C:\Windows\System32\System,ACME\svc_web,udp,10.10.1.160,61001,62.56.104.173,53, +ENG-WS-060,2026-02-20T06:36:47.733Z,3,C:\Windows\System32\lsass.exe,ACME\svc_web,udp,10.10.1.160,59724,68.111.208.254,53, +ENG-WS-060,2026-02-20T04:09:09.133Z,3,C:\Windows\System32\explorer.exe,ACME\svc_web,udp,10.10.1.160,50990,10.10.1.124,8080, +ENG-WS-060,2026-02-19T19:07:05.530Z,3,C:\Program Files\chrome.exe,ACME\svc_web,tcp,10.10.1.160,64101,10.10.1.163,8080, +ENG-WS-060,2026-02-20T13:34:58.766Z,3,C:\Windows\System32\svchost.exe,ACME\svc_web,udp,10.10.1.160,56865,10.10.3.126,389, +ENG-WS-060,2026-02-12T08:22:08.580Z,3,C:\Windows\System32\taskhostw.exe,ACME\svc_web,tcp,10.10.1.160,50190,10.10.2.104,389, +ENG-WS-060,2026-02-14T09:29:19.652Z,3,C:\Windows\System32\spoolsv.exe,ACME\svc_web,udp,10.10.1.160,56524,10.10.2.110,445, +ENG-WS-060,2026-02-10T10:47:33.357Z,3,C:\Program Files\msedge.exe,ACME\svc_web,tcp,10.10.1.160,60133,82.25.46.9,389, +LEG-WS-061,2026-02-20T09:00:20.807Z,3,C:\Windows\System32\svchost.exe,ACME\cjohnson,tcp,10.10.2.161,56970,32.92.153.169,53, +LEG-WS-061,2026-02-17T15:08:42.873Z,3,C:\Windows\System32\outlook.exe,ACME\cjohnson,udp,10.10.2.161,52214,10.10.1.145,53, +LEG-WS-061,2026-02-16T18:16:40.531Z,3,C:\Windows\System32\teams.exe,ACME\cjohnson,udp,10.10.2.161,52213,10.10.1.175,80, +LEG-WS-061,2026-02-15T23:40:51.648Z,3,C:\Windows\System32\lsass.exe,ACME\cjohnson,tcp,10.10.2.161,52531,10.10.3.129,3389, +LEG-WS-061,2026-02-18T01:07:34.981Z,3,C:\Windows\System32\System,ACME\cjohnson,tcp,10.10.2.161,53879,60.156.255.200,389, +LEG-WS-061,2026-02-15T12:27:35.044Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,udp,10.10.2.161,52601,3.143.80.74,389, +LEG-WS-061,2026-02-12T10:27:34.811Z,3,C:\Windows\System32\lsass.exe,ACME\cjohnson,tcp,10.10.2.161,50245,10.10.1.127,389,windowsupdate.com +LEG-WS-061,2026-02-11T08:59:05.183Z,3,C:\Windows\System32\services.exe,ACME\cjohnson,udp,10.10.2.161,50881,10.10.2.107,445, +LEG-WS-061,2026-02-10T20:20:31.259Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,tcp,10.10.2.161,62455,72.238.201.128,53, +LEG-WS-061,2026-02-19T14:41:32.004Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,udp,10.10.2.161,64409,221.38.160.144,53, +LEG-WS-061,2026-02-17T21:35:46.218Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.2.161,52586,206.149.175.198,389,stackoverflow.com +LEG-WS-061,2026-02-12T23:22:09.065Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.2.161,63421,10.10.3.129,443, +LEG-WS-061,2026-02-20T15:08:34.903Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,udp,10.10.2.161,59859,10.10.3.162,389, +LEG-WS-061,2026-02-13T19:10:02.646Z,3,C:\Windows\System32\teams.exe,ACME\cjohnson,tcp,10.10.2.161,54646,215.221.104.229,445, +LEG-WS-061,2026-02-19T18:39:46.540Z,3,C:\Windows\System32\cmd.exe,ACME\cjohnson,tcp,10.10.2.161,62496,10.10.1.151,53, +LEG-WS-061,2026-02-18T00:32:15.757Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\cjohnson,tcp,10.10.2.161,63995,10.10.2.137,445, +LEG-WS-061,2026-02-15T20:49:34.184Z,3,C:\Windows\System32\notepad.exe,ACME\cjohnson,udp,10.10.2.161,62888,10.10.2.131,80,outlook.office365.com +LEG-WS-061,2026-02-18T07:00:44.881Z,3,C:\Windows\System32\MsMpEng.exe,ACME\cjohnson,tcp,10.10.2.161,64190,81.128.72.244,3389, +LEG-WS-061,2026-02-15T16:05:39.749Z,3,C:\Windows\System32\code.exe,ACME\cjohnson,tcp,10.10.2.161,54136,10.10.1.166,8080, +LEG-WS-061,2026-02-20T01:18:07.335Z,3,C:\Windows\System32\dwm.exe,ACME\cjohnson,tcp,10.10.2.161,55582,41.24.206.75,445, +LEG-WS-061,2026-02-18T20:40:06.811Z,3,C:\Windows\System32\winlogon.exe,ACME\cjohnson,tcp,10.10.2.161,57540,10.10.1.112,443, +LEG-WS-061,2026-02-15T05:26:06.253Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,tcp,10.10.2.161,58914,10.10.1.175,53, +LEG-WS-061,2026-02-20T04:22:13.036Z,3,C:\Windows\System32\cmd.exe,ACME\cjohnson,udp,10.10.2.161,50708,162.107.26.127,8080, +LEG-WS-061,2026-02-16T08:37:33.400Z,3,C:\Windows\System32\teams.exe,ACME\cjohnson,udp,10.10.2.161,56542,179.235.115.146,445, +LEG-WS-061,2026-02-18T20:48:16.430Z,3,C:\Windows\System32\csrss.exe,ACME\cjohnson,tcp,10.10.2.161,61029,10.10.2.137,389, +LEG-WS-061,2026-02-19T10:39:36.136Z,3,C:\Windows\System32\code.exe,ACME\cjohnson,udp,10.10.2.161,53726,10.10.3.108,53,npmjs.com +LEG-WS-061,2026-02-15T05:40:58.759Z,3,C:\Windows\System32\lsass.exe,ACME\cjohnson,udp,10.10.2.161,56596,10.10.1.103,389, +LEG-WS-061,2026-02-16T17:13:09.864Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,tcp,10.10.2.161,59949,10.10.3.111,80, +LEG-WS-061,2026-02-16T07:03:44.249Z,3,C:\Windows\System32\teams.exe,ACME\cjohnson,tcp,10.10.2.161,59664,10.10.3.168,389, +LEG-WS-061,2026-02-10T20:04:42.762Z,3,C:\Windows\System32\svchost.exe,ACME\cjohnson,tcp,10.10.2.161,57174,191.229.226.125,80, +LEG-WS-061,2026-02-14T15:12:52.979Z,3,C:\Windows\System32\taskhostw.exe,ACME\cjohnson,udp,10.10.2.161,54269,70.51.10.3,80, +LEG-WS-061,2026-02-14T12:31:00.213Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.2.161,57643,186.104.90.51,443, +LEG-WS-061,2026-02-15T18:50:56.894Z,3,C:\Windows\System32\code.exe,ACME\cjohnson,udp,10.10.2.161,49454,38.140.81.164,445, +LEG-WS-061,2026-02-17T21:06:47.809Z,3,C:\Windows\System32\code.exe,ACME\cjohnson,udp,10.10.2.161,52654,10.10.1.139,389, +LEG-WS-061,2026-02-12T11:23:50.648Z,3,C:\Windows\System32\taskhostw.exe,ACME\cjohnson,tcp,10.10.2.161,55774,10.10.2.167,8080, +LEG-WS-061,2026-02-13T03:22:52.873Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,udp,10.10.2.161,65085,10.10.2.113,80, +LEG-WS-061,2026-02-17T09:17:11.921Z,3,C:\Windows\System32\notepad.exe,ACME\cjohnson,tcp,10.10.2.161,57948,200.197.249.68,443, +LEG-WS-061,2026-02-12T18:55:49.316Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,tcp,10.10.2.161,52737,98.126.32.253,80, +LEG-WS-061,2026-02-17T01:30:46.038Z,3,C:\Windows\System32\svchost.exe,ACME\cjohnson,tcp,10.10.2.161,58882,10.10.1.166,80, +LEG-WS-061,2026-02-20T02:26:49.202Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\cjohnson,udp,10.10.2.161,60527,10.10.3.168,8080, +MKT-WS-062,2026-02-15T12:39:45.779Z,3,C:\Windows\System32\winlogon.exe,ACME\dlee,udp,10.10.3.162,51708,10.10.3.159,445, +MKT-WS-062,2026-02-15T02:49:19.426Z,3,C:\Program Files\chrome.exe,ACME\dlee,udp,10.10.3.162,56852,10.10.3.135,443,pokerstars.com +MKT-WS-062,2026-02-12T22:18:51.674Z,3,C:\Program Files\chrome.exe,ACME\dlee,udp,10.10.3.162,59815,10.10.2.158,443, +MKT-WS-062,2026-02-12T13:07:34.022Z,3,C:\Windows\System32\explorer.exe,ACME\dlee,udp,10.10.3.162,56271,215.255.138.233,389, +MKT-WS-062,2026-02-19T18:05:16.926Z,3,C:\Windows\System32\outlook.exe,ACME\dlee,udp,10.10.3.162,56753,216.210.43.146,80, +MKT-WS-062,2026-02-18T11:11:17.859Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\dlee,udp,10.10.3.162,59143,12.133.225.86,3389, +MKT-WS-062,2026-02-11T08:24:02.691Z,3,C:\Program Files\msedge.exe,ACME\dlee,tcp,10.10.3.162,60066,68.63.253.79,389, +MKT-WS-062,2026-02-15T08:42:08.166Z,3,C:\Windows\System32\services.exe,ACME\dlee,tcp,10.10.3.162,63690,10.10.3.171,53, +MKT-WS-062,2026-02-17T21:50:03.310Z,3,C:\Windows\System32\SearchHost.exe,ACME\dlee,tcp,10.10.3.162,64296,10.10.1.142,8080, +MKT-WS-062,2026-02-19T14:58:20.710Z,3,C:\Windows\System32\teams.exe,ACME\dlee,udp,10.10.3.162,59312,10.10.2.173,443,www.bet365.com +MKT-WS-062,2026-02-11T11:07:58.621Z,3,C:\Program Files\msedge.exe,ACME\dlee,tcp,10.10.3.162,58367,10.10.3.174,445, +MKT-WS-062,2026-02-18T02:10:37.576Z,3,C:\Windows\System32\dwm.exe,ACME\dlee,udp,10.10.3.162,54903,10.10.2.167,445, +MKT-WS-062,2026-02-12T20:19:32.467Z,3,C:\Windows\System32\services.exe,ACME\dlee,udp,10.10.3.162,50502,164.92.136.23,80, +MKT-WS-062,2026-02-13T00:47:49.445Z,3,C:\Windows\System32\services.exe,ACME\dlee,tcp,10.10.3.162,59668,10.10.1.13,3389, +MKT-WS-062,2026-02-10T12:31:01.070Z,3,C:\Program Files\msedge.exe,ACME\dlee,tcp,10.10.3.162,62217,10.10.1.10,53, +MKT-WS-062,2026-02-16T23:17:52.558Z,3,C:\Windows\System32\OneDrive.exe,ACME\dlee,udp,10.10.3.162,59451,10.10.2.10,80, +MKT-WS-062,2026-02-18T20:00:11.568Z,3,C:\Windows\System32\code.exe,ACME\dlee,udp,10.10.3.162,49502,10.10.2.119,53, +MKT-WS-062,2026-02-20T05:26:04.762Z,3,C:\Windows\System32\taskhostw.exe,ACME\dlee,tcp,10.10.3.162,60957,10.10.1.13,8080, +MKT-WS-062,2026-02-14T09:45:48.040Z,3,C:\Windows\System32\System,ACME\dlee,tcp,10.10.3.162,54960,165.226.91.146,80, +MKT-WS-062,2026-02-18T05:08:28.522Z,3,C:\Windows\System32\code.exe,ACME\dlee,tcp,10.10.3.162,54743,10.10.1.148,8080, +MKT-WS-062,2026-02-11T00:43:44.806Z,3,C:\Windows\System32\taskhostw.exe,ACME\dlee,udp,10.10.3.162,57535,129.248.254.4,8080, +MKT-WS-062,2026-02-17T04:30:11.361Z,3,C:\Program Files\chrome.exe,ACME\dlee,udp,10.10.3.162,57926,199.159.52.189,53, +MKT-WS-062,2026-02-16T09:56:41.304Z,3,C:\Windows\System32\dwm.exe,ACME\dlee,tcp,10.10.3.162,58822,54.15.244.71,3389, +MKT-WS-062,2026-02-13T02:22:22.532Z,3,C:\Windows\System32\OneDrive.exe,ACME\dlee,udp,10.10.3.162,65013,10.10.1.166,445, +MKT-WS-062,2026-02-18T19:07:52.817Z,3,C:\Windows\System32\smss.exe,ACME\dlee,tcp,10.10.3.162,61955,109.49.36.231,80, +MKT-WS-062,2026-02-17T17:03:23.655Z,3,C:\Windows\System32\code.exe,ACME\dlee,tcp,10.10.3.162,58261,133.65.35.112,80, +MKT-WS-062,2026-02-16T02:15:45.464Z,3,C:\Windows\System32\SearchHost.exe,ACME\dlee,tcp,10.10.3.162,59852,10.10.1.166,445,github.com +MKT-WS-062,2026-02-16T14:01:07.820Z,3,C:\Windows\System32\teams.exe,ACME\dlee,tcp,10.10.3.162,55918,10.10.1.124,443, +MKT-WS-062,2026-02-17T22:08:19.356Z,3,C:\Windows\System32\powershell.exe,ACME\dlee,udp,10.10.3.162,65488,10.10.2.140,445, +MKT-WS-062,2026-02-17T17:20:08.296Z,3,C:\Windows\System32\code.exe,ACME\dlee,tcp,10.10.3.162,58272,10.10.2.101,389, +MKT-WS-062,2026-02-17T07:00:29.938Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\dlee,tcp,10.10.3.162,58493,177.193.52.54,389, +MKT-WS-062,2026-02-12T13:26:14.913Z,3,C:\Windows\System32\code.exe,ACME\dlee,tcp,10.10.3.162,59366,10.10.3.120,53, +MKT-WS-062,2026-02-18T08:25:35.407Z,3,C:\Windows\System32\dwm.exe,ACME\dlee,tcp,10.10.3.162,63843,10.10.1.142,445, +MKT-WS-062,2026-02-20T04:29:47.277Z,3,C:\Program Files\chrome.exe,ACME\dlee,udp,10.10.3.162,50999,10.10.2.137,53, +MKT-WS-062,2026-02-12T17:23:40.096Z,3,C:\Program Files\msedge.exe,ACME\dlee,udp,10.10.3.162,62776,168.125.89.180,389,github.com +MKT-WS-062,2026-02-11T08:30:38.472Z,3,C:\Windows\System32\SearchHost.exe,ACME\dlee,udp,10.10.3.162,63633,10.10.1.13,445, +MKT-WS-062,2026-02-14T14:37:08.162Z,3,C:\Windows\System32\lsass.exe,ACME\dlee,udp,10.10.3.162,51172,10.10.2.125,389, +MKT-WS-062,2026-02-10T20:30:10.949Z,3,C:\Program Files\msedge.exe,ACME\dlee,udp,10.10.3.162,62686,98.251.189.205,8080, +MKT-WS-062,2026-02-17T01:21:24.239Z,3,C:\Windows\System32\outlook.exe,ACME\dlee,tcp,10.10.3.162,62447,10.10.2.116,389, +EXEC-WS-063,2026-02-19T07:29:29.319Z,3,C:\Program Files\chrome.exe,ACME\svc_sql,udp,10.10.1.163,62156,10.10.3.165,3389, +EXEC-WS-063,2026-02-16T01:34:25.542Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,tcp,10.10.1.163,54769,10.10.1.142,445, +EXEC-WS-063,2026-02-14T10:45:20.664Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_sql,tcp,10.10.1.163,65292,28.140.58.185,445, +EXEC-WS-063,2026-02-14T01:53:09.646Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,udp,10.10.1.163,58192,100.2.49.236,80, +EXEC-WS-063,2026-02-10T10:06:04.659Z,3,C:\Windows\System32\csrss.exe,ACME\svc_sql,udp,10.10.1.163,60932,10.10.2.134,389, +EXEC-WS-063,2026-02-13T15:29:14.257Z,3,C:\Windows\System32\notepad.exe,ACME\svc_sql,tcp,10.10.1.163,61582,10.10.2.143,3389, +EXEC-WS-063,2026-02-10T11:43:12.543Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_sql,tcp,10.10.1.163,50843,10.10.2.146,8080, +EXEC-WS-063,2026-02-13T02:25:30.459Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,tcp,10.10.1.163,51647,10.10.2.110,8080, +EXEC-WS-063,2026-02-18T11:10:16.903Z,3,C:\Windows\System32\svchost.exe,ACME\svc_sql,udp,10.10.1.163,57728,10.10.2.143,3389, +EXEC-WS-063,2026-02-19T04:48:39.079Z,3,C:\Windows\System32\outlook.exe,ACME\svc_sql,udp,10.10.1.163,51974,10.10.2.164,3389, +EXEC-WS-063,2026-02-19T18:16:50.911Z,3,C:\Windows\System32\lsass.exe,ACME\svc_sql,tcp,10.10.1.163,55895,10.10.3.147,445, +EXEC-WS-063,2026-02-14T06:53:33.792Z,3,C:\Windows\System32\code.exe,ACME\svc_sql,tcp,10.10.1.163,55523,10.10.3.114,389, +EXEC-WS-063,2026-02-17T14:06:14.228Z,3,C:\Program Files\chrome.exe,ACME\svc_sql,udp,10.10.1.163,51320,10.10.3.117,53, +EXEC-WS-063,2026-02-14T18:26:29.935Z,3,C:\Windows\System32\outlook.exe,ACME\svc_sql,udp,10.10.1.163,60814,25.130.168.74,53, +EXEC-WS-063,2026-02-16T07:43:18.714Z,3,C:\Windows\System32\System,ACME\svc_sql,udp,10.10.1.163,53554,10.10.2.149,80, +EXEC-WS-063,2026-02-15T03:26:00.320Z,3,C:\Windows\System32\svchost.exe,ACME\svc_sql,udp,10.10.1.163,63907,10.10.2.170,389, +EXEC-WS-063,2026-02-12T19:38:47.399Z,3,C:\Program Files\chrome.exe,ACME\svc_sql,udp,10.10.1.163,50379,10.10.1.13,443,www.bet365.com +EXEC-WS-063,2026-02-10T08:56:02.737Z,3,C:\Windows\System32\lsass.exe,ACME\svc_sql,udp,10.10.1.163,60618,10.10.1.133,8080, +EXEC-WS-063,2026-02-11T08:08:59.811Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,udp,10.10.1.163,54903,10.10.1.172,80, +EXEC-WS-063,2026-02-11T00:12:43.694Z,3,C:\Windows\System32\spoolsv.exe,ACME\svc_sql,tcp,10.10.1.163,55263,10.10.2.113,445, +EXEC-WS-063,2026-02-14T22:58:46.127Z,3,C:\Windows\System32\outlook.exe,ACME\svc_sql,tcp,10.10.1.163,55649,189.185.228.92,389, +EXEC-WS-063,2026-02-13T04:09:29.104Z,3,C:\Windows\System32\notepad.exe,ACME\svc_sql,udp,10.10.1.163,64082,184.24.131.136,80, +EXEC-WS-063,2026-02-14T12:35:09.845Z,3,C:\Windows\System32\OneDrive.exe,ACME\svc_sql,udp,10.10.1.163,55564,10.10.1.127,80, +EXEC-WS-063,2026-02-17T00:30:08.204Z,3,C:\Windows\System32\svchost.exe,ACME\svc_sql,tcp,10.10.1.163,53758,211.95.186.222,53,stackoverflow.com +EXEC-WS-063,2026-02-17T22:47:23.192Z,3,C:\Program Files\chrome.exe,ACME\svc_sql,tcp,10.10.1.163,63731,10.10.1.151,389, +EXEC-WS-063,2026-02-11T02:02:20.264Z,3,C:\Program Files\chrome.exe,ACME\svc_sql,tcp,10.10.1.163,57827,103.140.36.210,53, +EXEC-WS-063,2026-02-15T15:15:46.158Z,3,C:\Windows\System32\teams.exe,ACME\svc_sql,udp,10.10.1.163,49809,16.249.119.218,3389, +EXEC-WS-063,2026-02-20T08:49:14.729Z,3,C:\Program Files\chrome.exe,ACME\svc_sql,udp,10.10.1.163,60910,10.10.2.164,443, +EXEC-WS-063,2026-02-19T11:25:29.574Z,3,C:\Windows\System32\notepad.exe,ACME\svc_sql,udp,10.10.1.163,64552,10.10.1.136,389, +EXEC-WS-063,2026-02-16T03:46:39.155Z,3,C:\Windows\System32\smss.exe,ACME\svc_sql,udp,10.10.1.163,49634,10.10.3.129,80,pokerstars.com +EXEC-WS-063,2026-02-11T04:45:09.201Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_sql,tcp,10.10.1.163,54887,10.10.2.146,80, +EXEC-WS-063,2026-02-13T14:57:03.129Z,3,C:\Windows\System32\System,ACME\svc_sql,tcp,10.10.1.163,61467,10.10.1.142,445, +EXEC-WS-063,2026-02-20T16:46:49.091Z,3,C:\Windows\System32\OneDrive.exe,ACME\svc_sql,udp,10.10.1.163,56705,67.102.229.221,445, +EXEC-WS-063,2026-02-18T02:03:02.064Z,3,C:\Windows\System32\code.exe,ACME\svc_sql,udp,10.10.1.163,54636,217.244.71.223,389, +EXEC-WS-063,2026-02-19T10:06:35.229Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_sql,udp,10.10.1.163,64481,10.10.1.172,445, +EXEC-WS-063,2026-02-14T06:39:08.624Z,3,C:\Windows\System32\powershell.exe,ACME\svc_sql,udp,10.10.1.163,58471,217.72.168.190,8080, +EXEC-WS-063,2026-02-15T19:58:58.823Z,3,C:\Windows\System32\svchost.exe,ACME\svc_sql,tcp,10.10.1.163,50295,160.69.180.173,389, +EXEC-WS-063,2026-02-11T19:58:15.208Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,udp,10.10.1.163,58494,10.10.2.131,445, +EXEC-WS-063,2026-02-15T08:45:20.927Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_sql,udp,10.10.1.163,54936,10.10.1.175,445, +EXEC-WS-063,2026-02-15T17:39:43.482Z,3,C:\Windows\System32\lsass.exe,ACME\svc_sql,tcp,10.10.1.163,49471,81.186.7.243,53, +EXEC-WS-063,2026-02-18T04:03:52.680Z,3,C:\Windows\System32\powershell.exe,ACME\svc_sql,tcp,10.10.1.163,54322,10.10.1.154,80, +EXEC-WS-063,2026-02-11T09:36:51.426Z,3,C:\Windows\System32\notepad.exe,ACME\svc_sql,udp,10.10.1.163,58796,144.21.180.233,443, +EXEC-WS-063,2026-02-18T12:55:37.130Z,3,C:\Windows\System32\System,ACME\svc_sql,udp,10.10.1.163,60376,10.10.2.122,389, +EXEC-WS-063,2026-02-15T02:11:29.634Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_sql,udp,10.10.1.163,64780,10.10.3.138,8080, +EXEC-WS-063,2026-02-11T10:47:49.616Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_sql,udp,10.10.1.163,55508,7.88.145.73,443, +IT-WS-064,2026-02-20T05:58:43.925Z,3,C:\Windows\System32\cmd.exe,ACME\svc_backup,tcp,10.10.2.164,65278,135.2.114.229,8080, +IT-WS-064,2026-02-14T03:31:20.305Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,tcp,10.10.2.164,61965,113.159.152.20,3389, +IT-WS-064,2026-02-15T03:08:19.218Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_backup,udp,10.10.2.164,60085,10.10.1.166,53, +IT-WS-064,2026-02-20T03:32:56.523Z,3,C:\Windows\System32\OneDrive.exe,ACME\svc_backup,tcp,10.10.2.164,52143,139.123.87.80,445, +IT-WS-064,2026-02-16T11:44:13.468Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,udp,10.10.2.164,54805,94.178.69.96,53, +IT-WS-064,2026-02-17T08:35:37.123Z,3,C:\Windows\System32\teams.exe,ACME\svc_backup,tcp,10.10.2.164,52712,197.117.228.76,443, +IT-WS-064,2026-02-13T01:22:24.877Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,udp,10.10.2.164,63275,10.10.3.126,8080, +IT-WS-064,2026-02-13T03:11:24.289Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,udp,10.10.2.164,53381,10.10.2.113,443, +IT-WS-064,2026-02-18T22:25:36.968Z,3,C:\Windows\System32\services.exe,ACME\svc_backup,udp,10.10.2.164,58308,10.10.2.170,80, +IT-WS-064,2026-02-16T14:08:24.778Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_backup,tcp,10.10.2.164,54533,168.8.194.163,445, +IT-WS-064,2026-02-13T00:41:39.698Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_backup,tcp,10.10.2.164,57397,143.172.183.39,443, +IT-WS-064,2026-02-13T04:04:40.275Z,3,C:\Windows\System32\smss.exe,ACME\svc_backup,tcp,10.10.2.164,54647,10.10.3.105,53, +IT-WS-064,2026-02-16T09:02:47.469Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_backup,udp,10.10.2.164,57883,100.37.32.32,8080, +IT-WS-064,2026-02-17T11:51:36.370Z,3,C:\Windows\System32\services.exe,ACME\svc_backup,tcp,10.10.2.164,57471,10.10.1.112,3389, +IT-WS-064,2026-02-15T11:41:44.371Z,3,C:\Windows\System32\svchost.exe,ACME\svc_backup,udp,10.10.2.164,52097,60.3.14.32,389,stackoverflow.com +IT-WS-064,2026-02-16T15:39:24.262Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,tcp,10.10.2.164,50561,10.10.2.134,443, +IT-WS-064,2026-02-14T09:16:48.708Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,udp,10.10.2.164,64589,10.10.3.111,80, +IT-WS-064,2026-02-10T15:57:15.194Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,tcp,10.10.2.164,50118,164.34.186.233,3389, +IT-WS-064,2026-02-19T16:26:12.508Z,3,C:\Windows\System32\powershell.exe,ACME\svc_backup,tcp,10.10.2.164,63452,199.185.182.132,443, +IT-WS-064,2026-02-10T17:03:07.479Z,3,C:\Windows\System32\teams.exe,ACME\svc_backup,udp,10.10.2.164,57025,10.10.1.10,3389, +IT-WS-064,2026-02-11T08:30:43.999Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,tcp,10.10.2.164,62970,185.11.80.159,80, +IT-WS-064,2026-02-13T21:25:05.177Z,3,C:\Windows\System32\services.exe,ACME\svc_backup,tcp,10.10.2.164,61151,10.10.3.150,445, +IT-WS-064,2026-02-17T10:28:58.936Z,3,C:\Windows\System32\cmd.exe,ACME\svc_backup,tcp,10.10.2.164,57906,84.172.172.51,443, +IT-WS-064,2026-02-19T15:16:59.660Z,3,C:\Windows\System32\dwm.exe,ACME\svc_backup,udp,10.10.2.164,65030,93.203.161.141,8080, +IT-WS-064,2026-02-12T17:27:50.801Z,3,C:\Windows\System32\taskhostw.exe,ACME\svc_backup,tcp,10.10.2.164,55466,10.10.3.111,8080, +IT-WS-064,2026-02-15T09:18:03.766Z,3,C:\Program Files\chrome.exe,ACME\svc_backup,udp,10.10.2.164,63000,222.146.178.156,443, +IT-WS-064,2026-02-19T02:42:47.208Z,3,C:\Windows\System32\lsass.exe,ACME\svc_backup,tcp,10.10.2.164,59965,10.10.2.143,389, +IT-WS-064,2026-02-11T22:12:08.802Z,3,C:\Program Files\msedge.exe,ACME\svc_backup,udp,10.10.2.164,58169,158.59.231.100,80, +IT-WS-064,2026-02-14T12:52:08.844Z,3,C:\Windows\System32\outlook.exe,ACME\svc_backup,udp,10.10.2.164,63170,25.143.189.168,443,google.com +IT-WS-064,2026-02-12T07:41:05.419Z,3,C:\Windows\System32\dwm.exe,ACME\svc_backup,udp,10.10.2.164,52852,126.58.242.153,389, +HR-WS-065,2026-02-20T13:49:03.334Z,3,C:\Windows\System32\smss.exe,ACME\svc_sql,tcp,10.10.3.165,58958,10.10.1.103,3389, +HR-WS-065,2026-02-13T19:38:19.945Z,3,C:\Windows\System32\spoolsv.exe,ACME\svc_sql,udp,10.10.3.165,56276,175.53.79.48,389,googleapis.com +HR-WS-065,2026-02-18T02:58:40.858Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,udp,10.10.3.165,52419,93.138.31.198,3389, +HR-WS-065,2026-02-17T09:39:00.195Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,tcp,10.10.3.165,59628,219.23.238.156,389, +HR-WS-065,2026-02-18T23:50:56.507Z,3,C:\Program Files\chrome.exe,ACME\svc_sql,udp,10.10.3.165,55877,9.149.8.192,8080, +HR-WS-065,2026-02-18T08:26:48.353Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_sql,udp,10.10.3.165,62336,9.5.90.138,8080, +HR-WS-065,2026-02-18T03:25:09.624Z,3,C:\Windows\System32\taskhostw.exe,ACME\svc_sql,tcp,10.10.3.165,53389,10.10.3.168,3389, +HR-WS-065,2026-02-10T10:59:58.477Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_sql,udp,10.10.3.165,52155,56.194.172.133,445, +HR-WS-065,2026-02-20T11:52:26.031Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\svc_sql,tcp,10.10.3.165,51851,10.10.1.154,445, +HR-WS-065,2026-02-20T01:20:50.393Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_sql,tcp,10.10.3.165,50728,51.103.52.145,8080, +HR-WS-065,2026-02-14T22:30:49.110Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_sql,tcp,10.10.3.165,58979,10.10.3.162,8080, +FIN-WS-066,2026-02-19T07:18:28.661Z,3,C:\Windows\System32\smss.exe,ACME\idavis,udp,10.10.1.166,62949,10.10.2.104,389, +FIN-WS-066,2026-02-13T16:54:44.908Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,tcp,10.10.1.166,65256,10.10.1.115,443, +FIN-WS-066,2026-02-13T08:56:38.899Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.1.166,49589,214.191.177.205,443, +FIN-WS-066,2026-02-10T21:45:59.552Z,3,C:\Program Files\chrome.exe,ACME\idavis,udp,10.10.1.166,62946,28.125.150.225,443, +FIN-WS-066,2026-02-17T10:29:14.843Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.1.166,56756,10.10.3.171,3389, +FIN-WS-066,2026-02-15T03:18:49.898Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.1.166,60986,28.226.120.196,389, +FIN-WS-066,2026-02-15T06:36:47.051Z,3,C:\Windows\System32\taskhostw.exe,ACME\idavis,udp,10.10.1.166,55539,10.10.1.172,443,graph.microsoft.com +FIN-WS-066,2026-02-13T19:35:28.926Z,3,C:\Windows\System32\lsass.exe,ACME\idavis,udp,10.10.1.166,49846,72.229.204.244,8080, +FIN-WS-066,2026-02-16T18:27:10.994Z,3,C:\Windows\System32\notepad.exe,ACME\idavis,udp,10.10.1.166,60463,182.97.121.148,80, +FIN-WS-066,2026-02-10T09:30:42.391Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,udp,10.10.1.166,53332,10.10.2.173,389,cloudflare.com +FIN-WS-066,2026-02-20T15:21:31.895Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,udp,10.10.1.166,49397,55.193.112.12,445, +FIN-WS-066,2026-02-20T01:49:11.145Z,3,C:\Windows\System32\SearchHost.exe,ACME\idavis,tcp,10.10.1.166,52879,10.10.1.163,389, +FIN-WS-066,2026-02-17T14:07:59.704Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.1.166,64423,151.87.61.129,53, +FIN-WS-066,2026-02-15T17:46:21.669Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,udp,10.10.1.166,64072,89.42.230.142,445, +FIN-WS-066,2026-02-12T14:16:39.311Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.1.166,50524,174.205.231.149,3389, +FIN-WS-066,2026-02-17T06:04:56.598Z,3,C:\Windows\System32\code.exe,ACME\idavis,udp,10.10.1.166,62015,10.10.1.145,389, +FIN-WS-066,2026-02-13T11:49:58.179Z,3,C:\Windows\System32\explorer.exe,ACME\idavis,udp,10.10.1.166,50928,79.93.91.207,443, +SLS-WS-067,2026-02-20T12:32:06.001Z,3,C:\Windows\System32\explorer.exe,ACME\svc_sql,tcp,10.10.2.167,64977,10.10.2.119,389, +SLS-WS-067,2026-02-18T08:47:36.020Z,3,C:\Windows\System32\dwm.exe,ACME\svc_sql,tcp,10.10.2.167,57485,10.10.3.156,389,stackoverflow.com +SLS-WS-067,2026-02-11T09:06:59.525Z,3,C:\Windows\System32\smss.exe,ACME\svc_sql,tcp,10.10.2.167,52495,10.10.3.174,389, +SLS-WS-067,2026-02-13T05:33:08.436Z,3,C:\Windows\System32\cmd.exe,ACME\svc_sql,udp,10.10.2.167,51542,10.10.1.124,445, +SLS-WS-067,2026-02-14T03:36:45.349Z,3,C:\Windows\System32\dwm.exe,ACME\svc_sql,udp,10.10.2.167,54014,10.10.2.113,80, +SLS-WS-067,2026-02-19T16:03:36.880Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_sql,udp,10.10.2.167,64766,39.26.254.215,445, +SLS-WS-067,2026-02-12T12:17:13.854Z,3,C:\Windows\System32\lsass.exe,ACME\svc_sql,tcp,10.10.2.167,54153,80.19.26.114,53, +SLS-WS-067,2026-02-15T16:33:22.614Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,udp,10.10.2.167,52520,138.189.228.230,443, +SLS-WS-067,2026-02-15T19:54:46.731Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_sql,tcp,10.10.2.167,58673,10.10.1.13,8080, +SLS-WS-067,2026-02-17T14:06:02.362Z,3,C:\Windows\System32\csrss.exe,ACME\svc_sql,udp,10.10.2.167,54830,210.174.12.156,80, +SLS-WS-067,2026-02-16T14:36:27.463Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_sql,tcp,10.10.2.167,50223,10.10.3.162,8080, +SLS-WS-067,2026-02-13T12:26:13.168Z,3,C:\Windows\System32\SearchHost.exe,ACME\svc_sql,udp,10.10.2.167,52011,10.10.1.12,3389, +SLS-WS-067,2026-02-17T21:50:50.051Z,3,C:\Windows\System32\spoolsv.exe,ACME\svc_sql,udp,10.10.2.167,56456,10.10.3.126,8080, +SLS-WS-067,2026-02-19T07:30:11.474Z,3,C:\Windows\System32\services.exe,ACME\svc_sql,tcp,10.10.2.167,52891,20.54.170.143,443, +SLS-WS-067,2026-02-13T04:06:49.859Z,3,C:\Windows\System32\powershell.exe,ACME\svc_sql,tcp,10.10.2.167,59872,10.10.3.117,443, +SLS-WS-067,2026-02-13T12:15:04.297Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,tcp,10.10.2.167,63968,75.116.138.5,53, +SLS-WS-067,2026-02-12T18:05:11.414Z,3,C:\Windows\System32\dwm.exe,ACME\svc_sql,udp,10.10.2.167,54815,10.10.3.159,389, +SLS-WS-067,2026-02-11T18:15:16.371Z,3,C:\Windows\System32\teams.exe,ACME\svc_sql,tcp,10.10.2.167,59169,10.10.1.12,53, +SLS-WS-067,2026-02-13T03:21:16.057Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,tcp,10.10.2.167,62509,150.42.130.49,443, +SLS-WS-067,2026-02-11T05:48:55.324Z,3,C:\Windows\System32\OneDrive.exe,ACME\svc_sql,udp,10.10.2.167,60270,10.10.1.142,8080, +SLS-WS-067,2026-02-17T02:25:14.123Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,tcp,10.10.2.167,62413,10.10.1.142,8080,file-01.acme.local +SLS-WS-067,2026-02-20T11:20:09.964Z,3,C:\Windows\System32\code.exe,ACME\svc_sql,udp,10.10.2.167,51399,10.10.3.138,443,stackoverflow.com +SLS-WS-067,2026-02-16T11:00:08.481Z,3,C:\Windows\System32\services.exe,ACME\svc_sql,udp,10.10.2.167,56050,188.107.188.120,3389, +SLS-WS-067,2026-02-13T09:07:40.506Z,3,C:\Windows\System32\teams.exe,ACME\svc_sql,udp,10.10.2.167,56098,219.227.26.134,80, +SLS-WS-067,2026-02-13T21:46:33.198Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,tcp,10.10.2.167,63820,10.10.2.119,443, +SLS-WS-067,2026-02-18T01:35:45.017Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_sql,tcp,10.10.2.167,60732,51.152.37.204,80, +SLS-WS-067,2026-02-14T10:06:31.075Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,udp,10.10.2.167,53869,10.10.3.135,8080, +SLS-WS-067,2026-02-18T19:46:20.623Z,3,C:\Windows\System32\code.exe,ACME\svc_sql,tcp,10.10.2.167,62148,17.69.144.13,53, +SLS-WS-067,2026-02-19T14:48:15.403Z,3,C:\Windows\System32\powershell.exe,ACME\svc_sql,tcp,10.10.2.167,57060,10.10.3.132,443, +SLS-WS-067,2026-02-15T03:55:38.819Z,3,C:\Program Files\chrome.exe,ACME\svc_sql,udp,10.10.2.167,50294,10.10.1.166,80, +SLS-WS-067,2026-02-17T12:33:54.064Z,3,C:\Windows\System32\code.exe,ACME\svc_sql,tcp,10.10.2.167,59807,10.10.3.156,443, +SLS-WS-067,2026-02-19T21:57:04.746Z,3,C:\Windows\System32\lsass.exe,ACME\svc_sql,udp,10.10.2.167,53555,10.10.2.167,443, +SLS-WS-067,2026-02-18T23:32:39.225Z,3,C:\Windows\System32\explorer.exe,ACME\svc_sql,tcp,10.10.2.167,57537,71.173.189.26,443, +SLS-WS-067,2026-02-14T01:57:33.314Z,3,C:\Windows\System32\OneDrive.exe,ACME\svc_sql,udp,10.10.2.167,60887,105.194.37.222,445, +SLS-WS-067,2026-02-18T22:31:16.637Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_sql,tcp,10.10.2.167,51170,10.10.2.122,80, +SLS-WS-067,2026-02-20T00:02:41.871Z,3,C:\Windows\System32\System,ACME\svc_sql,tcp,10.10.2.167,50583,10.10.2.122,389, +SLS-WS-067,2026-02-16T10:55:12.512Z,3,C:\Windows\System32\svchost.exe,ACME\svc_sql,tcp,10.10.2.167,65534,10.10.3.162,53, +SLS-WS-067,2026-02-10T23:12:03.300Z,3,C:\Windows\System32\powershell.exe,ACME\svc_sql,tcp,10.10.2.167,50385,71.240.122.114,445, +SLS-WS-067,2026-02-11T20:38:22.050Z,3,C:\Windows\System32\System,ACME\svc_sql,udp,10.10.2.167,54202,97.53.219.14,3389, +SLS-WS-067,2026-02-18T06:02:25.604Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_sql,tcp,10.10.2.167,51753,142.93.239.114,3389, +SLS-WS-067,2026-02-11T22:04:25.668Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,tcp,10.10.2.167,56212,60.86.181.181,80, +ENG-WS-068,2026-02-14T14:13:24.333Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.3.168,53798,50.109.146.111,53,outlook.office365.com +ENG-WS-068,2026-02-16T18:16:31.248Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.3.168,57735,10.10.2.122,445, +ENG-WS-068,2026-02-14T23:25:54.328Z,3,C:\Windows\System32\code.exe,ACME\idavis,tcp,10.10.3.168,49739,197.113.108.103,3389, +ENG-WS-068,2026-02-19T05:15:32.480Z,3,C:\Windows\System32\services.exe,ACME\idavis,udp,10.10.3.168,59386,175.177.208.5,80, +ENG-WS-068,2026-02-14T23:09:55.223Z,3,C:\Windows\System32\notepad.exe,ACME\idavis,udp,10.10.3.168,62706,128.226.55.5,389, +ENG-WS-068,2026-02-11T15:22:30.014Z,3,C:\Windows\System32\winlogon.exe,ACME\idavis,udp,10.10.3.168,55480,140.61.61.112,3389, +ENG-WS-068,2026-02-19T19:38:30.736Z,3,C:\Windows\System32\smss.exe,ACME\idavis,udp,10.10.3.168,56207,10.10.1.151,80, +ENG-WS-068,2026-02-16T22:43:11.725Z,3,C:\Windows\System32\OneDrive.exe,ACME\idavis,tcp,10.10.3.168,54981,10.10.2.146,3389, +ENG-WS-068,2026-02-16T03:38:11.261Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.3.168,63868,221.101.38.203,389, +ENG-WS-068,2026-02-20T14:45:57.395Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.3.168,53586,125.145.206.254,53, +ENG-WS-068,2026-02-14T06:48:26.151Z,3,C:\Windows\System32\SearchHost.exe,ACME\idavis,tcp,10.10.3.168,64957,206.126.206.224,445, +ENG-WS-068,2026-02-13T14:30:39.476Z,3,C:\Windows\System32\SearchHost.exe,ACME\idavis,udp,10.10.3.168,58004,51.100.1.47,389, +ENG-WS-068,2026-02-15T12:17:59.711Z,3,C:\Windows\System32\OneDrive.exe,ACME\idavis,udp,10.10.3.168,58552,10.10.3.114,8080, +ENG-WS-068,2026-02-16T01:34:08.672Z,3,C:\Windows\System32\spoolsv.exe,ACME\idavis,udp,10.10.3.168,59611,110.156.127.203,80, +ENG-WS-068,2026-02-17T10:26:34.969Z,3,C:\Program Files\chrome.exe,ACME\idavis,udp,10.10.3.168,58384,10.10.2.146,3389, +ENG-WS-068,2026-02-15T01:44:34.015Z,3,C:\Windows\System32\System,ACME\idavis,tcp,10.10.3.168,52436,10.10.1.139,445, +ENG-WS-068,2026-02-14T23:56:10.268Z,3,C:\Program Files\chrome.exe,ACME\idavis,udp,10.10.3.168,64248,10.10.1.118,445, +ENG-WS-068,2026-02-13T12:09:15.688Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.3.168,54260,19.254.199.117,53, +ENG-WS-068,2026-02-17T12:48:43.710Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.3.168,62138,152.190.218.11,53,cdn.jsdelivr.net +ENG-WS-068,2026-02-13T23:39:22.529Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.3.168,54088,36.12.92.65,445, +ENG-WS-068,2026-02-14T02:37:00.852Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.3.168,61526,100.127.166.188,443, +ENG-WS-068,2026-02-11T11:15:28.870Z,3,C:\Windows\System32\MsMpEng.exe,ACME\idavis,tcp,10.10.3.168,64842,102.189.144.134,80, +ENG-WS-068,2026-02-14T17:06:07.459Z,3,C:\Windows\System32\winlogon.exe,ACME\idavis,tcp,10.10.3.168,63367,10.10.3.114,80, +ENG-WS-068,2026-02-15T08:09:36.388Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,tcp,10.10.3.168,54871,36.135.237.178,389, +LEG-WS-069,2026-02-20T13:01:48.832Z,3,C:\Windows\System32\System,ACME\emartinez,udp,10.10.1.169,60737,189.243.54.63,53, +LEG-WS-069,2026-02-13T11:43:05.519Z,3,C:\Windows\System32\spoolsv.exe,ACME\emartinez,tcp,10.10.1.169,58956,10.10.1.151,3389, +LEG-WS-069,2026-02-15T05:47:48.469Z,3,C:\Windows\System32\taskhostw.exe,ACME\emartinez,tcp,10.10.1.169,50613,10.142.138.139,80, +LEG-WS-069,2026-02-13T05:49:44.300Z,3,C:\Program Files\chrome.exe,ACME\emartinez,udp,10.10.1.169,64671,83.247.237.148,53, +LEG-WS-069,2026-02-20T11:12:12.035Z,3,C:\Windows\System32\services.exe,ACME\emartinez,udp,10.10.1.169,62886,10.10.2.110,3389, +LEG-WS-069,2026-02-12T22:17:38.883Z,3,C:\Windows\System32\smss.exe,ACME\emartinez,tcp,10.10.1.169,63840,10.10.2.11,80, +LEG-WS-069,2026-02-20T13:53:23.352Z,3,C:\Windows\System32\code.exe,ACME\emartinez,tcp,10.10.1.169,50999,10.10.2.143,3389, +LEG-WS-069,2026-02-15T10:58:20.843Z,3,C:\Windows\System32\winlogon.exe,ACME\emartinez,tcp,10.10.1.169,61403,66.112.225.89,53, +LEG-WS-069,2026-02-20T12:16:48.073Z,3,C:\Program Files\chrome.exe,ACME\emartinez,udp,10.10.1.169,58678,98.201.178.15,445, +LEG-WS-069,2026-02-11T06:16:52.958Z,3,C:\Program Files\msedge.exe,ACME\emartinez,tcp,10.10.1.169,56908,10.10.1.157,80, +LEG-WS-069,2026-02-11T16:06:08.069Z,3,C:\Windows\System32\cmd.exe,ACME\emartinez,udp,10.10.1.169,53965,131.79.47.55,3389, +LEG-WS-069,2026-02-13T14:10:50.805Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\emartinez,udp,10.10.1.169,56461,123.172.84.47,80, +LEG-WS-069,2026-02-15T10:08:48.189Z,3,C:\Program Files\chrome.exe,ACME\emartinez,udp,10.10.1.169,61009,45.71.110.10,80, +LEG-WS-069,2026-02-11T19:00:13.417Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\emartinez,udp,10.10.1.169,63263,213.30.182.68,445, +LEG-WS-069,2026-02-11T12:49:23.128Z,3,C:\Windows\System32\explorer.exe,ACME\emartinez,tcp,10.10.1.169,64282,177.29.55.87,445,graph.microsoft.com +LEG-WS-069,2026-02-14T12:52:54.776Z,3,C:\Windows\System32\notepad.exe,ACME\emartinez,udp,10.10.1.169,60071,10.10.1.139,443,teams.microsoft.com +LEG-WS-069,2026-02-10T21:43:26.923Z,3,C:\Program Files\msedge.exe,ACME\emartinez,udp,10.10.1.169,50413,14.62.253.218,53, +LEG-WS-069,2026-02-12T13:44:50.768Z,3,C:\Windows\System32\winlogon.exe,ACME\emartinez,udp,10.10.1.169,62911,187.75.240.96,53, +LEG-WS-069,2026-02-17T23:02:54.927Z,3,C:\Program Files\msedge.exe,ACME\emartinez,udp,10.10.1.169,60356,40.156.199.8,443, +LEG-WS-069,2026-02-15T12:39:25.182Z,3,C:\Windows\System32\smss.exe,ACME\emartinez,tcp,10.10.1.169,63132,10.10.1.12,389, +MKT-WS-070,2026-02-12T20:19:42.642Z,3,C:\Windows\System32\winlogon.exe,ACME\jsmith,tcp,10.10.2.170,51894,10.10.3.102,3389, +MKT-WS-070,2026-02-17T13:06:30.380Z,3,C:\Windows\System32\winlogon.exe,ACME\jsmith,udp,10.10.2.170,60462,174.182.30.115,53, +MKT-WS-070,2026-02-14T11:32:01.590Z,3,C:\Windows\System32\services.exe,ACME\jsmith,udp,10.10.2.170,60418,10.10.1.142,443, +MKT-WS-070,2026-02-16T04:17:45.412Z,3,C:\Windows\System32\smss.exe,ACME\jsmith,udp,10.10.2.170,51171,10.10.3.132,80,windowsupdate.com +MKT-WS-070,2026-02-17T12:51:47.872Z,3,C:\Program Files\msedge.exe,ACME\jsmith,udp,10.10.2.170,52078,10.10.1.10,53, +MKT-WS-070,2026-02-15T03:38:34.528Z,3,C:\Program Files\msedge.exe,ACME\jsmith,udp,10.10.2.170,49685,10.10.3.117,8080, +MKT-WS-070,2026-02-10T08:42:32.129Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\jsmith,udp,10.10.2.170,53312,10.10.3.171,389, +MKT-WS-070,2026-02-16T05:25:06.698Z,3,C:\Windows\System32\taskhostw.exe,ACME\jsmith,tcp,10.10.2.170,64930,10.10.2.134,80, +MKT-WS-070,2026-02-17T18:26:14.015Z,3,C:\Program Files\chrome.exe,ACME\jsmith,udp,10.10.2.170,60072,104.63.73.170,443, +MKT-WS-070,2026-02-19T00:11:50.061Z,3,C:\Windows\System32\services.exe,ACME\jsmith,udp,10.10.2.170,49737,10.10.2.170,8080, +MKT-WS-070,2026-02-10T23:02:01.605Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\jsmith,tcp,10.10.2.170,50769,170.67.163.231,80,time.windows.com +MKT-WS-070,2026-02-14T20:22:50.039Z,3,C:\Windows\System32\System,ACME\jsmith,tcp,10.10.2.170,49448,29.12.231.70,8080, +MKT-WS-070,2026-02-17T06:54:57.516Z,3,C:\Windows\System32\explorer.exe,ACME\jsmith,tcp,10.10.2.170,59098,10.10.1.106,8080, +MKT-WS-070,2026-02-14T13:24:41.919Z,3,C:\Windows\System32\notepad.exe,ACME\jsmith,udp,10.10.2.170,58474,193.231.130.98,80, +MKT-WS-070,2026-02-19T08:51:10.426Z,3,C:\Windows\System32\powershell.exe,ACME\jsmith,udp,10.10.2.170,60135,10.10.1.112,3389, +MKT-WS-070,2026-02-15T13:03:08.023Z,3,C:\Program Files\msedge.exe,ACME\jsmith,udp,10.10.2.170,59336,10.10.3.105,80, +MKT-WS-070,2026-02-17T17:59:33.124Z,3,C:\Windows\System32\teams.exe,ACME\jsmith,tcp,10.10.2.170,51825,10.10.3.111,53, +MKT-WS-070,2026-02-17T04:57:10.500Z,3,C:\Windows\System32\dwm.exe,ACME\jsmith,tcp,10.10.2.170,57296,121.119.42.71,80, +MKT-WS-070,2026-02-10T16:37:46.273Z,3,C:\Windows\System32\code.exe,ACME\jsmith,tcp,10.10.2.170,55220,94.86.165.51,3389, +MKT-WS-070,2026-02-20T05:01:18.064Z,3,C:\Program Files\msedge.exe,ACME\jsmith,tcp,10.10.2.170,52196,210.159.123.153,443, +MKT-WS-070,2026-02-20T14:53:41.013Z,3,C:\Program Files\msedge.exe,ACME\jsmith,udp,10.10.2.170,62033,10.10.3.129,3389, +MKT-WS-070,2026-02-15T20:59:58.790Z,3,C:\Windows\System32\spoolsv.exe,ACME\jsmith,tcp,10.10.2.170,62374,180.187.83.196,8080, +MKT-WS-070,2026-02-16T09:34:22.134Z,3,C:\Program Files\chrome.exe,ACME\jsmith,udp,10.10.2.170,50531,208.162.134.39,3389, +MKT-WS-070,2026-02-11T13:10:02.668Z,3,C:\Program Files\chrome.exe,ACME\jsmith,udp,10.10.2.170,52892,178.36.34.124,389, +MKT-WS-070,2026-02-20T05:37:45.906Z,3,C:\Windows\System32\csrss.exe,ACME\jsmith,udp,10.10.2.170,64655,3.230.152.192,3389, +MKT-WS-070,2026-02-13T06:54:49.001Z,3,C:\Program Files\chrome.exe,ACME\jsmith,udp,10.10.2.170,49468,37.44.238.173,53, +MKT-WS-070,2026-02-14T17:22:56.895Z,3,C:\Windows\System32\OneDrive.exe,ACME\jsmith,tcp,10.10.2.170,60378,10.10.1.136,389, +MKT-WS-070,2026-02-20T05:52:36.649Z,3,C:\Windows\System32\outlook.exe,ACME\jsmith,udp,10.10.2.170,53629,181.174.84.240,3389,aws.amazon.com +MKT-WS-070,2026-02-15T21:01:12.565Z,3,C:\Windows\System32\smss.exe,ACME\jsmith,udp,10.10.2.170,56785,10.10.1.13,443, +MKT-WS-070,2026-02-15T07:54:44.780Z,3,C:\Windows\System32\smss.exe,ACME\jsmith,tcp,10.10.2.170,54253,24.96.244.222,53, +MKT-WS-070,2026-02-15T17:45:05.724Z,3,C:\Windows\System32\cmd.exe,ACME\jsmith,udp,10.10.2.170,59663,10.10.1.124,8080, +MKT-WS-070,2026-02-14T05:35:03.547Z,3,C:\Windows\System32\svchost.exe,ACME\jsmith,udp,10.10.2.170,54083,10.10.1.10,53, +MKT-WS-070,2026-02-14T16:24:53.295Z,3,C:\Windows\System32\teams.exe,ACME\jsmith,tcp,10.10.2.170,50567,10.10.3.165,8080, +MKT-WS-070,2026-02-18T22:49:43.132Z,3,C:\Windows\System32\smss.exe,ACME\jsmith,udp,10.10.2.170,58799,109.131.223.158,53, +MKT-WS-070,2026-02-13T20:25:36.961Z,3,C:\Program Files\chrome.exe,ACME\jsmith,udp,10.10.2.170,51310,61.231.4.21,3389,exch-01.acme.local +MKT-WS-070,2026-02-20T02:49:28.229Z,3,C:\Program Files\msedge.exe,ACME\jsmith,udp,10.10.2.170,51872,10.10.2.143,3389, +MKT-WS-070,2026-02-16T17:08:44.744Z,3,C:\Program Files\msedge.exe,ACME\jsmith,tcp,10.10.2.170,51901,10.10.1.121,389, +MKT-WS-070,2026-02-12T07:05:34.911Z,3,C:\Windows\System32\powershell.exe,ACME\jsmith,udp,10.10.2.170,56115,10.10.1.121,80, +MKT-WS-070,2026-02-15T19:48:18.459Z,3,C:\Windows\System32\explorer.exe,ACME\jsmith,tcp,10.10.2.170,57300,10.10.1.151,3389, +MKT-WS-070,2026-02-15T21:29:59.769Z,3,C:\Windows\System32\outlook.exe,ACME\jsmith,udp,10.10.2.170,51701,10.10.3.174,8080, +EXEC-WS-071,2026-02-18T14:09:05.363Z,3,C:\Windows\System32\taskhostw.exe,ACME\jsmith,udp,10.10.3.171,62848,10.10.3.108,80, +EXEC-WS-071,2026-02-10T23:45:35.605Z,3,C:\Windows\System32\services.exe,ACME\jsmith,tcp,10.10.3.171,51753,10.10.3.135,8080, +EXEC-WS-071,2026-02-18T17:52:28.992Z,3,C:\Windows\System32\smss.exe,ACME\jsmith,udp,10.10.3.171,52333,124.118.5.234,8080, +EXEC-WS-071,2026-02-10T10:21:27.082Z,3,C:\Program Files\msedge.exe,ACME\jsmith,udp,10.10.3.171,57771,137.42.159.189,443, +EXEC-WS-071,2026-02-13T06:52:58.674Z,3,C:\Program Files\msedge.exe,ACME\jsmith,udp,10.10.3.171,56356,188.75.205.216,389, +EXEC-WS-071,2026-02-20T10:21:34.248Z,3,C:\Windows\System32\outlook.exe,ACME\jsmith,udp,10.10.3.171,57027,66.141.95.147,389, +EXEC-WS-071,2026-02-13T14:19:05.524Z,3,C:\Windows\System32\explorer.exe,ACME\jsmith,udp,10.10.3.171,50005,10.10.2.10,3389, +EXEC-WS-071,2026-02-16T23:51:41.691Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\jsmith,tcp,10.10.3.171,62588,177.137.110.32,443, +EXEC-WS-071,2026-02-11T16:40:54.616Z,3,C:\Windows\System32\notepad.exe,ACME\jsmith,tcp,10.10.3.171,59355,10.10.1.121,8080, +EXEC-WS-071,2026-02-10T22:56:23.359Z,3,C:\Windows\System32\OneDrive.exe,ACME\jsmith,udp,10.10.3.171,50133,3.2.198.228,53, +EXEC-WS-071,2026-02-15T03:48:04.426Z,3,C:\Windows\System32\System,ACME\jsmith,tcp,10.10.3.171,58437,10.10.2.140,445, +EXEC-WS-071,2026-02-19T20:40:34.124Z,3,C:\Windows\System32\outlook.exe,ACME\jsmith,udp,10.10.3.171,52110,186.221.246.190,389, +EXEC-WS-071,2026-02-10T11:29:09.877Z,3,C:\Windows\System32\csrss.exe,ACME\jsmith,tcp,10.10.3.171,61243,10.10.3.156,389, +EXEC-WS-071,2026-02-13T02:06:08.955Z,3,C:\Windows\System32\csrss.exe,ACME\jsmith,tcp,10.10.3.171,60612,10.10.2.158,443, +EXEC-WS-071,2026-02-10T09:17:36.339Z,3,C:\Windows\System32\SearchHost.exe,ACME\jsmith,tcp,10.10.3.171,61165,10.10.2.140,80, +EXEC-WS-071,2026-02-13T15:09:00.876Z,3,C:\Windows\System32\notepad.exe,ACME\jsmith,tcp,10.10.3.171,51260,10.10.1.151,3389, +EXEC-WS-071,2026-02-14T04:10:38.207Z,3,C:\Windows\System32\notepad.exe,ACME\jsmith,tcp,10.10.3.171,55976,10.10.2.149,8080, +EXEC-WS-071,2026-02-12T07:54:30.133Z,3,C:\Program Files\msedge.exe,ACME\jsmith,udp,10.10.3.171,56618,10.10.3.147,3389, +EXEC-WS-071,2026-02-12T03:05:33.673Z,3,C:\Program Files\msedge.exe,ACME\jsmith,tcp,10.10.3.171,57785,125.10.49.150,443, +EXEC-WS-071,2026-02-13T04:26:40.674Z,3,C:\Program Files\msedge.exe,ACME\jsmith,udp,10.10.3.171,58026,26.90.169.62,3389, +EXEC-WS-071,2026-02-20T08:00:58.293Z,3,C:\Program Files\chrome.exe,ACME\jsmith,udp,10.10.3.171,61548,118.66.45.217,8080, +EXEC-WS-071,2026-02-16T16:37:17.690Z,3,C:\Program Files\chrome.exe,ACME\jsmith,udp,10.10.3.171,57014,116.180.210.26,80,acme.sharepoint.com +EXEC-WS-071,2026-02-20T02:43:03.298Z,3,C:\Program Files\chrome.exe,ACME\jsmith,udp,10.10.3.171,64756,10.10.2.143,445, +EXEC-WS-071,2026-02-18T23:55:55.812Z,3,C:\Program Files\msedge.exe,ACME\jsmith,udp,10.10.3.171,60958,10.10.2.122,80, +EXEC-WS-071,2026-02-10T23:05:13.249Z,3,C:\Windows\System32\cmd.exe,ACME\jsmith,udp,10.10.3.171,50307,178.81.159.187,80, +EXEC-WS-071,2026-02-10T16:47:38.491Z,3,C:\Program Files\chrome.exe,ACME\jsmith,udp,10.10.3.171,63122,132.34.123.106,80,windowsupdate.com +EXEC-WS-071,2026-02-14T03:30:38.789Z,3,C:\Program Files\msedge.exe,ACME\jsmith,tcp,10.10.3.171,57797,10.10.2.158,445, +EXEC-WS-071,2026-02-10T20:48:11.394Z,3,C:\Program Files\chrome.exe,ACME\jsmith,tcp,10.10.3.171,49349,10.10.2.104,3389, +EXEC-WS-071,2026-02-11T12:45:13.528Z,3,C:\Windows\System32\taskhostw.exe,ACME\jsmith,udp,10.10.3.171,59887,10.10.1.106,53, +EXEC-WS-071,2026-02-17T01:27:00.673Z,3,C:\Windows\System32\smss.exe,ACME\jsmith,udp,10.10.3.171,63326,94.32.113.251,8080, +EXEC-WS-071,2026-02-18T19:41:15.729Z,3,C:\Windows\System32\services.exe,ACME\jsmith,udp,10.10.3.171,62832,139.13.62.123,389, +EXEC-WS-071,2026-02-15T10:59:04.873Z,3,C:\Windows\System32\notepad.exe,ACME\jsmith,udp,10.10.3.171,56034,10.10.1.157,53,login.microsoftonline.com +EXEC-WS-071,2026-02-18T01:40:03.881Z,3,C:\Windows\System32\explorer.exe,ACME\jsmith,udp,10.10.3.171,56407,72.176.63.81,8080, +EXEC-WS-071,2026-02-13T02:09:50.659Z,3,C:\Windows\System32\lsass.exe,ACME\jsmith,tcp,10.10.3.171,50114,10.10.3.162,443, +EXEC-WS-071,2026-02-19T08:19:38.471Z,3,C:\Windows\System32\services.exe,ACME\jsmith,tcp,10.10.3.171,60035,10.10.2.140,80, +EXEC-WS-071,2026-02-13T23:30:34.331Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\jsmith,udp,10.10.3.171,63081,10.10.3.126,8080, +EXEC-WS-071,2026-02-13T06:58:58.637Z,3,C:\Program Files\msedge.exe,ACME\jsmith,udp,10.10.3.171,50304,88.156.34.58,445, +EXEC-WS-071,2026-02-16T17:58:28.063Z,3,C:\Program Files\chrome.exe,ACME\jsmith,udp,10.10.3.171,63597,20.145.104.245,3389, +EXEC-WS-071,2026-02-13T21:04:02.242Z,3,C:\Program Files\chrome.exe,ACME\jsmith,udp,10.10.3.171,61465,67.226.209.222,445, +EXEC-WS-071,2026-02-15T07:58:08.018Z,3,C:\Windows\System32\cmd.exe,ACME\jsmith,tcp,10.10.3.171,55687,10.10.3.132,445, +EXEC-WS-071,2026-02-17T05:30:38.767Z,3,C:\Windows\System32\MsMpEng.exe,ACME\jsmith,tcp,10.10.3.171,59414,10.10.3.126,3389,time.windows.com +IT-WS-072,2026-02-14T20:17:17.388Z,3,C:\Windows\System32\csrss.exe,ACME\svc_sql,tcp,10.10.1.172,52742,93.246.119.41,53, +IT-WS-072,2026-02-17T11:48:35.301Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_sql,tcp,10.10.1.172,55780,200.27.67.140,445, +IT-WS-072,2026-02-11T16:01:51.503Z,3,C:\Windows\System32\spoolsv.exe,ACME\svc_sql,udp,10.10.1.172,53297,86.199.79.149,389, +IT-WS-072,2026-02-15T17:52:26.355Z,3,C:\Windows\System32\lsass.exe,ACME\svc_sql,udp,10.10.1.172,49984,118.132.169.205,445, +IT-WS-072,2026-02-18T07:38:04.208Z,3,C:\Program Files\chrome.exe,ACME\svc_sql,udp,10.10.1.172,49991,216.54.228.195,80, +IT-WS-072,2026-02-14T16:56:29.387Z,3,C:\Windows\System32\outlook.exe,ACME\svc_sql,tcp,10.10.1.172,64563,74.7.97.110,389, +IT-WS-072,2026-02-16T09:57:24.823Z,3,C:\Program Files\chrome.exe,ACME\svc_sql,udp,10.10.1.172,60851,10.10.3.168,3389, +IT-WS-072,2026-02-11T11:06:03.620Z,3,C:\Program Files\chrome.exe,ACME\svc_sql,tcp,10.10.1.172,62317,162.81.35.205,443, +IT-WS-072,2026-02-12T04:00:11.233Z,3,C:\Windows\System32\teams.exe,ACME\svc_sql,udp,10.10.1.172,49771,10.10.2.143,443, +IT-WS-072,2026-02-17T03:16:24.333Z,3,C:\Windows\System32\taskhostw.exe,ACME\svc_sql,tcp,10.10.1.172,50714,10.10.3.135,80, +IT-WS-072,2026-02-11T10:03:34.897Z,3,C:\Windows\System32\code.exe,ACME\svc_sql,tcp,10.10.1.172,61840,38.29.0.13,3389, +IT-WS-072,2026-02-17T13:54:50.983Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_sql,udp,10.10.1.172,51509,10.10.1.148,53, +IT-WS-072,2026-02-13T03:07:54.854Z,3,C:\Windows\System32\explorer.exe,ACME\svc_sql,tcp,10.10.1.172,58733,99.64.57.68,3389, +IT-WS-072,2026-02-12T09:18:49.145Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_sql,tcp,10.10.1.172,58768,212.58.60.83,80, +HR-WS-073,2026-02-17T20:55:26.338Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.2.173,55095,10.10.2.149,53, +HR-WS-073,2026-02-14T01:19:19.964Z,3,C:\Windows\System32\outlook.exe,ACME\admin,udp,10.10.2.173,64615,10.10.3.135,445, +HR-WS-073,2026-02-13T17:58:41.863Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.2.173,53193,10.10.3.114,445,stackoverflow.com +HR-WS-073,2026-02-18T21:53:57.042Z,3,C:\Windows\System32\outlook.exe,ACME\admin,tcp,10.10.2.173,51792,10.10.3.120,445, +HR-WS-073,2026-02-17T06:21:45.314Z,3,C:\Windows\System32\outlook.exe,ACME\admin,udp,10.10.2.173,54752,14.117.153.177,443, +HR-WS-073,2026-02-18T11:45:58.725Z,3,C:\Windows\System32\spoolsv.exe,ACME\admin,udp,10.10.2.173,63457,214.164.40.154,389, +HR-WS-073,2026-02-16T08:49:48.759Z,3,C:\Windows\System32\outlook.exe,ACME\admin,udp,10.10.2.173,61323,84.16.188.86,389, +HR-WS-073,2026-02-11T12:25:11.943Z,3,C:\Windows\System32\code.exe,ACME\admin,udp,10.10.2.173,53070,142.130.59.149,53, +HR-WS-073,2026-02-13T23:15:35.973Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.2.173,58760,10.10.3.156,445, +HR-WS-073,2026-02-20T03:39:58.094Z,3,C:\Windows\System32\SearchHost.exe,ACME\admin,tcp,10.10.2.173,55758,10.10.3.156,80, +HR-WS-073,2026-02-14T03:28:24.696Z,3,C:\Windows\System32\SearchHost.exe,ACME\admin,tcp,10.10.2.173,58078,10.10.2.11,3389, +HR-WS-073,2026-02-10T18:39:07.790Z,3,C:\Windows\System32\winlogon.exe,ACME\admin,tcp,10.10.2.173,49537,10.10.2.167,445, +HR-WS-073,2026-02-14T01:30:40.211Z,3,C:\Windows\System32\OneDrive.exe,ACME\admin,tcp,10.10.2.173,54536,101.140.179.169,8080,time.windows.com +HR-WS-073,2026-02-18T02:30:44.077Z,3,C:\Windows\System32\MsMpEng.exe,ACME\admin,udp,10.10.2.173,51192,10.10.1.169,3389, +HR-WS-073,2026-02-15T16:11:29.215Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.2.173,56431,156.28.179.199,53, +HR-WS-073,2026-02-10T14:27:13.726Z,3,C:\Windows\System32\svchost.exe,ACME\admin,tcp,10.10.2.173,56558,197.103.77.75,80, +HR-WS-073,2026-02-12T18:16:00.445Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.2.173,56197,176.173.140.192,8080, +HR-WS-073,2026-02-16T22:06:17.348Z,3,C:\Windows\System32\spoolsv.exe,ACME\admin,tcp,10.10.2.173,65230,10.10.1.10,3389, +HR-WS-073,2026-02-12T22:38:36.864Z,3,C:\Windows\System32\OneDrive.exe,ACME\admin,tcp,10.10.2.173,51833,10.10.1.163,3389,outlook.office365.com +HR-WS-073,2026-02-18T07:31:06.023Z,3,C:\Windows\System32\System,ACME\admin,tcp,10.10.2.173,60779,10.10.3.111,389, +HR-WS-073,2026-02-13T14:46:50.331Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.2.173,49564,66.202.10.244,389, +HR-WS-073,2026-02-20T13:18:23.864Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\admin,tcp,10.10.2.173,61100,10.10.3.135,3389, +HR-WS-073,2026-02-13T09:16:00.320Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.2.173,49805,10.10.2.158,443, +HR-WS-073,2026-02-13T15:12:30.574Z,3,C:\Windows\System32\cmd.exe,ACME\admin,tcp,10.10.2.173,55388,66.64.160.233,53, +HR-WS-073,2026-02-16T02:57:49.845Z,3,C:\Windows\System32\teams.exe,ACME\admin,udp,10.10.2.173,60655,223.212.141.2,53, +HR-WS-073,2026-02-18T08:31:19.927Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.2.173,50139,10.10.2.152,445, +HR-WS-073,2026-02-17T00:20:21.685Z,3,C:\Windows\System32\dwm.exe,ACME\admin,tcp,10.10.2.173,61909,10.10.3.162,443, +HR-WS-073,2026-02-13T19:12:20.320Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.2.173,53046,10.10.3.159,80, +HR-WS-073,2026-02-12T04:32:40.447Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.2.173,51455,10.10.2.164,53, +HR-WS-073,2026-02-16T23:06:00.755Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\admin,tcp,10.10.2.173,54190,1.225.23.243,3389,update.microsoft.com +HR-WS-073,2026-02-10T18:09:31.018Z,3,C:\Windows\System32\spoolsv.exe,ACME\admin,udp,10.10.2.173,51860,10.10.3.123,389, +HR-WS-073,2026-02-19T04:43:22.141Z,3,C:\Program Files\msedge.exe,ACME\admin,tcp,10.10.2.173,54375,5.118.212.45,389, +HR-WS-073,2026-02-19T05:59:52.312Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.2.173,51598,10.10.1.118,3389, +FIN-WS-074,2026-02-11T16:02:53.771Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,udp,10.10.3.174,52339,151.49.30.164,445, +FIN-WS-074,2026-02-17T00:08:26.174Z,3,C:\Program Files\chrome.exe,ACME\svc_sql,tcp,10.10.3.174,61405,180.133.172.55,53, +FIN-WS-074,2026-02-11T14:35:13.397Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,tcp,10.10.3.174,50916,154.55.36.157,3389, +FIN-WS-074,2026-02-17T22:36:10.893Z,3,C:\Windows\System32\outlook.exe,ACME\svc_sql,udp,10.10.3.174,59186,10.10.1.133,8080,dc-02.acme.local +FIN-WS-074,2026-02-19T17:01:58.782Z,3,C:\Windows\System32\code.exe,ACME\svc_sql,tcp,10.10.3.174,60049,10.10.2.146,8080, +FIN-WS-074,2026-02-13T02:19:38.731Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,tcp,10.10.3.174,62282,10.10.2.149,53, +FIN-WS-074,2026-02-11T10:57:46.466Z,3,C:\Windows\System32\svchost.exe,ACME\svc_sql,tcp,10.10.3.174,63411,10.10.3.132,443, +FIN-WS-074,2026-02-12T15:00:21.796Z,3,C:\Windows\System32\dwm.exe,ACME\svc_sql,tcp,10.10.3.174,58958,10.10.1.163,389, +FIN-WS-074,2026-02-11T16:22:21.661Z,3,C:\Program Files\chrome.exe,ACME\svc_sql,tcp,10.10.3.174,55964,10.10.1.121,443, +FIN-WS-074,2026-02-14T23:24:28.471Z,3,C:\Windows\System32\lsass.exe,ACME\svc_sql,tcp,10.10.3.174,61862,22.124.10.3,8080, +FIN-WS-074,2026-02-18T01:13:39.597Z,3,C:\Windows\System32\code.exe,ACME\svc_sql,udp,10.10.3.174,57811,218.163.18.6,53,teams.microsoft.com +FIN-WS-074,2026-02-20T16:27:29.013Z,3,C:\Windows\System32\csrss.exe,ACME\svc_sql,udp,10.10.3.174,62355,11.238.80.185,445, +FIN-WS-074,2026-02-13T22:28:00.203Z,3,C:\Windows\System32\services.exe,ACME\svc_sql,udp,10.10.3.174,55429,132.37.236.131,53, +FIN-WS-074,2026-02-12T01:30:02.177Z,3,C:\Windows\System32\winlogon.exe,ACME\svc_sql,tcp,10.10.3.174,56211,111.175.31.63,80, +FIN-WS-074,2026-02-10T22:57:57.927Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,udp,10.10.3.174,57821,40.238.33.155,8080, +FIN-WS-074,2026-02-14T18:36:57.279Z,3,C:\Windows\System32\taskhostw.exe,ACME\svc_sql,tcp,10.10.3.174,55721,204.69.155.163,53, +FIN-WS-074,2026-02-16T04:56:21.016Z,3,C:\Windows\System32\notepad.exe,ACME\svc_sql,udp,10.10.3.174,51966,11.197.112.33,80, +FIN-WS-074,2026-02-16T19:11:17.897Z,3,C:\Windows\System32\teams.exe,ACME\svc_sql,udp,10.10.3.174,51476,10.10.3.138,3389, +FIN-WS-074,2026-02-15T16:39:00.709Z,3,C:\Windows\System32\OneDrive.exe,ACME\svc_sql,tcp,10.10.3.174,52362,2.58.83.6,80, +FIN-WS-074,2026-02-18T09:18:08.955Z,3,C:\Windows\System32\code.exe,ACME\svc_sql,udp,10.10.3.174,57383,10.10.2.116,80, +FIN-WS-074,2026-02-18T17:40:41.205Z,3,C:\Windows\System32\MsMpEng.exe,ACME\svc_sql,tcp,10.10.3.174,64694,10.10.2.128,3389, +FIN-WS-074,2026-02-17T00:13:58.057Z,3,C:\Program Files\chrome.exe,ACME\svc_sql,tcp,10.10.3.174,52280,10.10.1.115,80, +FIN-WS-074,2026-02-15T14:05:30.132Z,3,C:\Windows\System32\notepad.exe,ACME\svc_sql,udp,10.10.3.174,57655,10.10.2.161,8080, +FIN-WS-074,2026-02-13T03:37:53.286Z,3,C:\Windows\System32\explorer.exe,ACME\svc_sql,tcp,10.10.3.174,52173,128.199.60.138,445, +FIN-WS-074,2026-02-12T14:00:59.066Z,3,C:\Windows\System32\code.exe,ACME\svc_sql,tcp,10.10.3.174,56680,71.30.62.111,389, +FIN-WS-074,2026-02-13T01:29:28.825Z,3,C:\Program Files\msedge.exe,ACME\svc_sql,tcp,10.10.3.174,61330,10.10.2.164,389, +SLS-WS-075,2026-02-18T07:05:01.995Z,3,C:\Windows\System32\cmd.exe,ACME\admin,udp,10.10.1.175,61414,10.10.1.118,389, +SLS-WS-075,2026-02-16T23:42:18.342Z,3,C:\Program Files\msedge.exe,ACME\admin,udp,10.10.1.175,63320,10.10.1.172,3389, +SLS-WS-075,2026-02-12T09:54:04.021Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.1.175,50795,5.27.58.197,389, +SLS-WS-075,2026-02-18T22:28:11.611Z,3,C:\Windows\System32\csrss.exe,ACME\admin,tcp,10.10.1.175,60232,10.10.1.115,445, +SLS-WS-075,2026-02-13T17:50:27.112Z,3,C:\Windows\System32\lsass.exe,ACME\admin,tcp,10.10.1.175,56511,10.10.3.129,445, +SLS-WS-075,2026-02-18T03:25:30.728Z,3,C:\Windows\System32\services.exe,ACME\admin,tcp,10.10.1.175,63239,10.10.3.150,445, +SLS-WS-075,2026-02-11T04:21:51.949Z,3,C:\Windows\System32\notepad.exe,ACME\admin,tcp,10.10.1.175,63894,163.121.148.168,389,outlook.office365.com +SLS-WS-075,2026-02-15T14:48:13.156Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.1.175,61942,42.192.255.204,445, +SLS-WS-075,2026-02-13T06:57:48.581Z,3,C:\Windows\System32\explorer.exe,ACME\admin,tcp,10.10.1.175,57595,10.10.2.11,53, +SLS-WS-075,2026-02-19T12:32:19.164Z,3,C:\Windows\System32\csrss.exe,ACME\admin,udp,10.10.1.175,63606,196.220.255.238,445,pypi.org +SLS-WS-075,2026-02-20T09:44:26.068Z,3,C:\Program Files\chrome.exe,ACME\admin,tcp,10.10.1.175,49867,169.3.9.193,443, +SLS-WS-075,2026-02-17T22:02:53.415Z,3,C:\Program Files\chrome.exe,ACME\admin,udp,10.10.1.175,56242,219.42.18.4,443, +SLS-WS-075,2026-02-17T00:42:54.246Z,3,C:\Windows\System32\SearchHost.exe,ACME\admin,tcp,10.10.1.175,56820,87.146.229.4,445, +SLS-WS-075,2026-02-10T23:49:01.602Z,3,C:\Windows\System32\smss.exe,ACME\admin,udp,10.10.1.175,61322,10.10.3.10,445, +SLS-WS-075,2026-02-13T15:50:10.361Z,3,C:\Windows\System32\smss.exe,ACME\admin,tcp,10.10.1.175,56386,77.172.83.133,8080, +SLS-WS-075,2026-02-12T01:19:28.359Z,3,C:\Windows\System32\spoolsv.exe,ACME\admin,udp,10.10.1.175,55431,185.203.238.133,53, +SLS-WS-075,2026-02-11T21:39:25.390Z,3,C:\Windows\System32\csrss.exe,ACME\admin,udp,10.10.1.175,55346,10.10.3.10,8080, +SLS-WS-075,2026-02-16T22:18:46.098Z,3,C:\Windows\System32\winlogon.exe,ACME\admin,udp,10.10.1.175,59501,10.10.1.175,443, +SLS-WS-075,2026-02-13T12:16:22.717Z,3,C:\Windows\System32\dwm.exe,ACME\admin,tcp,10.10.1.175,57195,96.110.122.171,3389, +SLS-WS-075,2026-02-11T03:47:12.010Z,3,C:\Windows\System32\SearchHost.exe,ACME\admin,tcp,10.10.1.175,61903,10.10.1.163,80, +SLS-WS-075,2026-02-18T04:48:47.473Z,3,C:\Windows\System32\dwm.exe,ACME\admin,tcp,10.10.1.175,49184,13.196.138.153,445, +SLS-WS-075,2026-02-16T15:45:34.455Z,3,C:\Windows\System32\System,ACME\admin,tcp,10.10.1.175,62979,10.10.3.138,80, +SLS-WS-075,2026-02-12T17:00:17.976Z,3,C:\Windows\System32\lsass.exe,ACME\admin,udp,10.10.1.175,65287,96.83.101.195,53, +SLS-WS-075,2026-02-12T02:52:27.296Z,3,C:\Windows\System32\cmd.exe,ACME\admin,udp,10.10.1.175,63951,10.10.3.159,443,acme.local +SLS-WS-075,2026-02-16T17:42:59.266Z,3,C:\Windows\System32\smss.exe,ACME\admin,udp,10.10.1.175,52486,56.143.168.54,389, +SLS-WS-075,2026-02-20T01:29:02.172Z,3,C:\Windows\System32\System,ACME\admin,tcp,10.10.1.175,61148,10.10.2.131,53, +SLS-WS-075,2026-02-18T01:52:57.245Z,3,C:\Windows\System32\lsass.exe,ACME\admin,tcp,10.10.1.175,61920,101.181.36.157,445, +SLS-WS-075,2026-02-20T06:13:25.846Z,3,C:\Windows\System32\spoolsv.exe,ACME\admin,udp,10.10.1.175,63797,10.10.3.141,389, +SLS-WS-075,2026-02-16T01:02:42.595Z,3,C:\Windows\System32\code.exe,ACME\admin,tcp,10.10.1.175,63210,77.234.168.144,80,akamai.net +DC-01,2026-02-17T17:03:53.785Z,3,C:\Windows\System32\lsass.exe,ACME\bwilson,udp,10.10.1.10,62115,10.10.1.133,53, +DC-01,2026-02-14T03:18:27.084Z,3,C:\Windows\System32\smss.exe,ACME\bwilson,udp,10.10.1.10,63548,10.10.2.101,443, +DC-01,2026-02-19T20:07:24.131Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.1.10,56041,10.10.2.143,8080, +DC-01,2026-02-12T21:10:13.221Z,3,C:\Windows\System32\outlook.exe,ACME\bwilson,tcp,10.10.1.10,49860,157.126.61.228,53, +DC-01,2026-02-18T17:58:43.811Z,3,C:\Windows\System32\lsass.exe,ACME\bwilson,tcp,10.10.1.10,58174,10.10.1.127,445, +DC-01,2026-02-18T22:42:20.795Z,3,C:\Windows\System32\csrss.exe,ACME\bwilson,udp,10.10.1.10,55261,10.10.3.138,53, +DC-01,2026-02-14T20:44:03.461Z,3,C:\Windows\System32\powershell.exe,ACME\bwilson,tcp,10.10.1.10,57413,10.10.3.126,80,dc-01.acme.local +DC-01,2026-02-11T21:11:12.926Z,3,C:\Windows\System32\lsass.exe,ACME\bwilson,tcp,10.10.1.10,58190,47.180.170.193,8080, +DC-01,2026-02-16T12:17:37.630Z,3,C:\Windows\System32\svchost.exe,ACME\bwilson,udp,10.10.1.10,64025,87.163.108.71,53, +DC-01,2026-02-18T18:58:06.885Z,3,C:\Windows\System32\cmd.exe,ACME\bwilson,tcp,10.10.1.10,59967,10.10.3.159,3389,aws.amazon.com +DC-01,2026-02-19T04:49:56.954Z,3,C:\Windows\System32\csrss.exe,ACME\bwilson,tcp,10.10.1.10,52207,70.219.8.107,443, +DC-01,2026-02-17T20:20:44.421Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.1.10,54876,10.10.2.101,389, +DC-01,2026-02-20T06:02:32.162Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.1.10,52392,10.10.3.141,53, +DC-01,2026-02-15T14:33:24.920Z,3,C:\Windows\System32\smss.exe,ACME\bwilson,tcp,10.10.1.10,55340,10.10.3.147,389, +DC-01,2026-02-19T18:14:56.477Z,3,C:\Windows\System32\outlook.exe,ACME\bwilson,udp,10.10.1.10,62009,219.238.171.99,389, +DC-01,2026-02-13T21:42:27.378Z,3,C:\Program Files\msedge.exe,ACME\bwilson,udp,10.10.1.10,61506,33.25.78.137,8080, +DC-01,2026-02-14T04:27:52.777Z,3,C:\Program Files\msedge.exe,ACME\bwilson,udp,10.10.1.10,53240,85.195.221.121,445,dc-01.acme.local +DC-01,2026-02-15T04:27:30.588Z,3,C:\Program Files\chrome.exe,ACME\bwilson,udp,10.10.1.10,53080,119.195.164.21,53, +DC-01,2026-02-18T04:58:08.554Z,3,C:\Windows\System32\outlook.exe,ACME\bwilson,udp,10.10.1.10,50092,7.108.168.9,445, +DC-01,2026-02-11T05:25:00.199Z,3,C:\Program Files\msedge.exe,ACME\bwilson,tcp,10.10.1.10,61171,10.10.1.154,3389, +DC-01,2026-02-17T01:21:00.306Z,3,C:\Windows\System32\dwm.exe,ACME\bwilson,tcp,10.10.1.10,51987,162.85.247.176,389, +DC-01,2026-02-12T05:00:30.364Z,3,C:\Windows\System32\explorer.exe,ACME\bwilson,udp,10.10.1.10,58018,10.10.1.157,53, +DC-01,2026-02-16T23:12:38.735Z,3,C:\Windows\System32\MsMpEng.exe,ACME\bwilson,udp,10.10.1.10,64940,152.54.177.151,53, +DC-01,2026-02-10T12:28:04.237Z,3,C:\Windows\System32\explorer.exe,ACME\bwilson,tcp,10.10.1.10,57922,37.40.252.206,389, +DC-01,2026-02-14T03:25:56.243Z,3,C:\Windows\System32\teams.exe,ACME\bwilson,tcp,10.10.1.10,52471,58.156.216.50,443, +DC-01,2026-02-12T23:26:44.489Z,3,C:\Windows\System32\lsass.exe,ACME\bwilson,udp,10.10.1.10,49409,123.159.48.165,8080, +DC-01,2026-02-14T02:15:27.504Z,3,C:\Windows\System32\powershell.exe,ACME\bwilson,udp,10.10.1.10,52057,10.10.1.151,445, +DC-01,2026-02-17T22:02:39.586Z,3,C:\Windows\System32\teams.exe,ACME\bwilson,tcp,10.10.1.10,57377,72.140.112.204,53, +DC-01,2026-02-18T03:02:59.775Z,3,C:\Windows\System32\System,ACME\bwilson,udp,10.10.1.10,64058,18.163.57.217,443, +DC-01,2026-02-17T20:27:40.634Z,3,C:\Windows\System32\csrss.exe,ACME\bwilson,udp,10.10.1.10,50234,10.10.3.168,53, +DC-01,2026-02-11T09:39:10.268Z,3,C:\Windows\System32\explorer.exe,ACME\bwilson,udp,10.10.1.10,52535,56.106.83.189,8080, +DC-01,2026-02-17T06:02:46.784Z,3,C:\Windows\System32\csrss.exe,ACME\bwilson,tcp,10.10.1.10,49772,10.10.3.153,389, +DC-01,2026-02-10T18:41:47.375Z,3,C:\Program Files\chrome.exe,ACME\bwilson,tcp,10.10.1.10,54811,10.10.3.120,445, +DC-01,2026-02-15T16:49:53.625Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\bwilson,udp,10.10.1.10,50825,10.10.3.117,445, +DC-01,2026-02-17T20:50:25.439Z,3,C:\Windows\System32\csrss.exe,ACME\bwilson,tcp,10.10.1.10,50994,10.10.2.134,389, +DC-01,2026-02-17T02:41:49.787Z,3,C:\Windows\System32\notepad.exe,ACME\bwilson,tcp,10.10.1.10,50692,133.59.190.76,3389, +DC-01,2026-02-13T15:32:33.741Z,3,C:\Windows\System32\dwm.exe,ACME\bwilson,tcp,10.10.1.10,60046,87.47.220.129,53, +DC-01,2026-02-15T20:05:28.794Z,3,C:\Windows\System32\csrss.exe,ACME\bwilson,tcp,10.10.1.10,55109,221.114.228.202,53, +DC-01,2026-02-12T09:32:08.730Z,3,C:\Windows\System32\SearchHost.exe,ACME\bwilson,udp,10.10.1.10,58843,10.10.1.106,3389, +DC-02,2026-02-20T00:17:56.976Z,3,C:\Windows\System32\powershell.exe,ACME\bwilson,udp,10.10.2.10,53570,10.10.1.124,8080, +DC-02,2026-02-13T14:54:46.078Z,3,C:\Windows\System32\explorer.exe,ACME\bwilson,tcp,10.10.2.10,65338,10.10.1.115,80, +DC-02,2026-02-13T06:34:23.136Z,3,C:\Windows\System32\dwm.exe,ACME\bwilson,tcp,10.10.2.10,53022,10.10.3.174,445, +DC-02,2026-02-17T03:25:28.321Z,3,C:\Windows\System32\cmd.exe,ACME\bwilson,udp,10.10.2.10,50504,10.10.1.10,389, +DC-02,2026-02-10T21:45:40.238Z,3,C:\Windows\System32\notepad.exe,ACME\bwilson,tcp,10.10.2.10,49923,148.194.165.67,445, +DC-02,2026-02-11T18:55:45.449Z,3,C:\Windows\System32\explorer.exe,ACME\bwilson,tcp,10.10.2.10,59155,10.10.3.168,389, +DC-02,2026-02-11T12:32:30.515Z,3,C:\Windows\System32\dwm.exe,ACME\bwilson,tcp,10.10.2.10,53293,10.10.2.104,389,www.bet365.com +DC-02,2026-02-15T07:15:29.325Z,3,C:\Program Files\chrome.exe,ACME\bwilson,tcp,10.10.2.10,52897,132.19.58.58,80, +DC-02,2026-02-18T18:38:04.381Z,3,C:\Program Files\chrome.exe,ACME\bwilson,udp,10.10.2.10,63066,28.152.96.119,3389, +DC-02,2026-02-11T03:56:24.528Z,3,C:\Windows\System32\services.exe,ACME\bwilson,tcp,10.10.2.10,62655,76.173.172.105,389,google.com +DC-02,2026-02-12T12:02:04.912Z,3,C:\Windows\System32\notepad.exe,ACME\bwilson,udp,10.10.2.10,61554,10.10.2.164,445, +DC-02,2026-02-18T16:31:21.695Z,3,C:\Windows\System32\MsMpEng.exe,ACME\bwilson,tcp,10.10.2.10,63601,10.10.1.12,445, +FILE-01,2026-02-19T20:47:33.887Z,3,C:\Windows\System32\winlogon.exe,ACME\emartinez,udp,10.10.1.11,49320,74.18.167.115,8080, +FILE-01,2026-02-10T18:02:31.819Z,3,C:\Windows\System32\System,ACME\emartinez,udp,10.10.1.11,62067,96.188.72.151,80, +FILE-01,2026-02-19T01:15:00.638Z,3,C:\Windows\System32\outlook.exe,ACME\emartinez,udp,10.10.1.11,52872,10.10.1.166,80,exch-01.acme.local +FILE-01,2026-02-15T21:45:13.436Z,3,C:\Windows\System32\smss.exe,ACME\emartinez,tcp,10.10.1.11,61018,10.10.2.167,445, +FILE-01,2026-02-12T01:56:53.686Z,3,C:\Windows\System32\MsMpEng.exe,ACME\emartinez,tcp,10.10.1.11,62931,10.10.3.114,53, +FILE-01,2026-02-17T10:06:22.899Z,3,C:\Windows\System32\winlogon.exe,ACME\emartinez,tcp,10.10.1.11,63632,10.10.1.133,445, +FILE-01,2026-02-20T12:34:21.296Z,3,C:\Windows\System32\cmd.exe,ACME\emartinez,udp,10.10.1.11,57632,47.42.150.153,8080, +FILE-01,2026-02-13T22:25:05.788Z,3,C:\Program Files\chrome.exe,ACME\emartinez,tcp,10.10.1.11,65044,186.238.209.73,389, +FILE-01,2026-02-13T23:20:48.437Z,3,C:\Windows\System32\dwm.exe,ACME\emartinez,tcp,10.10.1.11,64562,83.100.73.112,3389,cloudflare.com +FILE-01,2026-02-16T13:31:19.508Z,3,C:\Windows\System32\OneDrive.exe,ACME\emartinez,udp,10.10.1.11,62800,10.10.1.13,443, +FILE-01,2026-02-13T14:14:28.564Z,3,C:\Windows\System32\dwm.exe,ACME\emartinez,tcp,10.10.1.11,55344,10.10.3.126,8080, +FILE-01,2026-02-18T02:13:22.417Z,3,C:\Windows\System32\svchost.exe,ACME\emartinez,udp,10.10.1.11,53549,192.68.14.61,80, +FILE-01,2026-02-15T12:27:58.679Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\emartinez,udp,10.10.1.11,53796,10.10.2.104,80, +FILE-01,2026-02-13T05:45:49.468Z,3,C:\Windows\System32\winlogon.exe,ACME\emartinez,udp,10.10.1.11,63216,10.10.2.155,443, +FILE-01,2026-02-17T15:31:23.313Z,3,C:\Windows\System32\SearchHost.exe,ACME\emartinez,udp,10.10.1.11,53530,10.10.1.103,80, +FILE-01,2026-02-20T09:03:10.177Z,3,C:\Windows\System32\outlook.exe,ACME\emartinez,tcp,10.10.1.11,58167,10.10.1.169,80, +FILE-01,2026-02-10T15:06:49.625Z,3,C:\Windows\System32\notepad.exe,ACME\emartinez,tcp,10.10.1.11,65002,10.10.1.13,445, +FILE-01,2026-02-13T17:38:48.563Z,3,C:\Program Files\msedge.exe,ACME\emartinez,tcp,10.10.1.11,57774,59.9.35.246,389, +FILE-01,2026-02-11T14:17:47.053Z,3,C:\Windows\System32\spoolsv.exe,ACME\emartinez,udp,10.10.1.11,64221,166.129.85.49,445, +FILE-01,2026-02-13T02:56:30.523Z,3,C:\Windows\System32\csrss.exe,ACME\emartinez,tcp,10.10.1.11,52536,208.239.106.19,445, +FILE-01,2026-02-17T22:52:46.497Z,3,C:\Windows\System32\explorer.exe,ACME\emartinez,udp,10.10.1.11,57099,10.10.3.132,443, +FILE-01,2026-02-13T14:18:36.829Z,3,C:\Windows\System32\dwm.exe,ACME\emartinez,tcp,10.10.1.11,55180,10.10.2.161,8080, +FILE-01,2026-02-17T09:15:02.946Z,3,C:\Windows\System32\dwm.exe,ACME\emartinez,udp,10.10.1.11,55282,50.59.72.10,389, +FILE-01,2026-02-20T01:53:09.345Z,3,C:\Program Files\chrome.exe,ACME\emartinez,udp,10.10.1.11,61530,203.238.181.253,53, +FILE-01,2026-02-17T00:51:27.667Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\emartinez,udp,10.10.1.11,52254,10.10.2.119,8080,pypi.org +FILE-01,2026-02-20T04:52:37.805Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\emartinez,tcp,10.10.1.11,58734,132.181.117.71,80, +FILE-01,2026-02-12T05:35:47.072Z,3,C:\Program Files\chrome.exe,ACME\emartinez,tcp,10.10.1.11,54913,19.35.57.196,53, +FILE-01,2026-02-13T11:04:53.895Z,3,C:\Windows\System32\cmd.exe,ACME\emartinez,tcp,10.10.1.11,63060,44.184.25.70,3389, +FILE-01,2026-02-15T14:59:09.240Z,3,C:\Windows\System32\cmd.exe,ACME\emartinez,udp,10.10.1.11,59075,127.46.147.220,3389, +FILE-01,2026-02-14T06:12:49.168Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\emartinez,udp,10.10.1.11,62408,52.152.119.217,80, +FILE-01,2026-02-12T14:36:17.113Z,3,C:\Program Files\msedge.exe,ACME\emartinez,tcp,10.10.1.11,54539,223.77.118.108,80, +FILE-01,2026-02-11T21:36:00.024Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\emartinez,udp,10.10.1.11,63182,3.93.180.216,3389, +FILE-01,2026-02-19T00:48:43.502Z,3,C:\Windows\System32\code.exe,ACME\emartinez,udp,10.10.1.11,62977,10.10.1.169,389, +FILE-01,2026-02-14T20:29:55.570Z,3,C:\Windows\System32\System,ACME\emartinez,tcp,10.10.1.11,61073,10.10.1.136,443, +FILE-01,2026-02-17T01:48:19.369Z,3,C:\Windows\System32\dwm.exe,ACME\emartinez,tcp,10.10.1.11,65053,94.246.51.224,80, +FILE-01,2026-02-12T19:28:41.969Z,3,C:\Program Files\msedge.exe,ACME\emartinez,tcp,10.10.1.11,56753,10.10.3.144,443, +FILE-01,2026-02-19T23:10:19.938Z,3,C:\Windows\System32\MsMpEng.exe,ACME\emartinez,udp,10.10.1.11,64607,10.37.88.41,8080, +FILE-01,2026-02-17T20:22:42.906Z,3,C:\Program Files\chrome.exe,ACME\emartinez,tcp,10.10.1.11,50289,4.115.61.4,389, +FILE-01,2026-02-13T19:56:41.534Z,3,C:\Windows\System32\svchost.exe,ACME\emartinez,tcp,10.10.1.11,54242,10.10.3.159,389, +FILE-01,2026-02-18T03:17:16.868Z,3,C:\Windows\System32\csrss.exe,ACME\emartinez,tcp,10.10.1.11,51791,10.10.3.111,445, +FILE-01,2026-02-17T08:23:21.038Z,3,C:\Windows\System32\MsMpEng.exe,ACME\emartinez,tcp,10.10.1.11,51624,10.10.3.102,445, +FILE-01,2026-02-14T00:53:38.234Z,3,C:\Windows\System32\dwm.exe,ACME\emartinez,udp,10.10.1.11,65414,10.10.1.145,53, +FILE-01,2026-02-18T20:46:18.080Z,3,C:\Windows\System32\dwm.exe,ACME\emartinez,tcp,10.10.1.11,49417,10.10.1.118,8080, +FILE-01,2026-02-16T03:43:46.238Z,3,C:\Windows\System32\powershell.exe,ACME\emartinez,tcp,10.10.1.11,62081,3.8.246.206,3389, +FILE-01,2026-02-19T21:22:49.996Z,3,C:\Program Files\chrome.exe,ACME\emartinez,tcp,10.10.1.11,50076,212.171.116.139,389, +FILE-01,2026-02-12T03:35:49.320Z,3,C:\Windows\System32\System,ACME\emartinez,udp,10.10.1.11,64389,105.146.69.159,53, +EXCH-01,2026-02-15T17:03:23.535Z,3,C:\Windows\System32\smss.exe,ACME\dlee,udp,10.10.1.12,65124,10.10.2.164,3389, +EXCH-01,2026-02-16T04:02:21.940Z,3,C:\Program Files\chrome.exe,ACME\dlee,tcp,10.10.1.12,55849,177.222.246.147,53, +EXCH-01,2026-02-15T04:06:48.293Z,3,C:\Windows\System32\teams.exe,ACME\dlee,udp,10.10.1.12,50326,116.217.64.155,445, +EXCH-01,2026-02-14T19:35:46.471Z,3,C:\Windows\System32\outlook.exe,ACME\dlee,udp,10.10.1.12,52671,10.10.3.10,445, +EXCH-01,2026-02-13T18:17:15.359Z,3,C:\Windows\System32\explorer.exe,ACME\dlee,udp,10.10.1.12,55561,64.57.181.219,80, +EXCH-01,2026-02-14T08:32:50.018Z,3,C:\Program Files\msedge.exe,ACME\dlee,udp,10.10.1.12,50023,49.15.182.156,53, +EXCH-01,2026-02-10T18:23:57.008Z,3,C:\Windows\System32\powershell.exe,ACME\dlee,tcp,10.10.1.12,49770,10.10.1.166,389, +EXCH-01,2026-02-11T20:17:14.118Z,3,C:\Program Files\msedge.exe,ACME\dlee,tcp,10.10.1.12,49512,143.69.84.168,445, +EXCH-01,2026-02-16T13:12:26.315Z,3,C:\Windows\System32\SearchHost.exe,ACME\dlee,tcp,10.10.1.12,56881,77.85.140.82,389, +EXCH-01,2026-02-14T21:21:36.202Z,3,C:\Program Files\msedge.exe,ACME\dlee,udp,10.10.1.12,63505,38.148.85.170,443, +EXCH-01,2026-02-12T23:37:56.389Z,3,C:\Program Files\msedge.exe,ACME\dlee,tcp,10.10.1.12,58805,10.10.2.167,389, +EXCH-01,2026-02-15T00:25:15.930Z,3,C:\Windows\System32\spoolsv.exe,ACME\dlee,udp,10.10.1.12,57080,83.149.34.57,53, +EXCH-01,2026-02-17T03:16:44.992Z,3,C:\Windows\System32\csrss.exe,ACME\dlee,udp,10.10.1.12,53290,10.10.1.139,389, +EXCH-01,2026-02-18T18:53:11.592Z,3,C:\Program Files\chrome.exe,ACME\dlee,tcp,10.10.1.12,61654,10.10.2.140,53, +EXCH-01,2026-02-17T07:27:44.255Z,3,C:\Windows\System32\smss.exe,ACME\dlee,tcp,10.10.1.12,59598,61.100.205.97,8080, +EXCH-01,2026-02-16T07:48:56.504Z,3,C:\Program Files\chrome.exe,ACME\dlee,tcp,10.10.1.12,55903,37.5.183.162,8080, +EXCH-01,2026-02-11T09:27:06.439Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\dlee,tcp,10.10.1.12,58732,161.171.216.195,3389, +EXCH-01,2026-02-15T03:24:56.822Z,3,C:\Windows\System32\winlogon.exe,ACME\dlee,tcp,10.10.1.12,62360,143.121.219.249,443, +EXCH-01,2026-02-15T14:10:47.618Z,3,C:\Program Files\chrome.exe,ACME\dlee,udp,10.10.1.12,55621,146.209.49.143,53, +EXCH-01,2026-02-17T22:40:02.328Z,3,C:\Program Files\msedge.exe,ACME\dlee,tcp,10.10.1.12,53915,10.10.2.101,53, +EXCH-01,2026-02-17T19:34:02.287Z,3,C:\Windows\System32\explorer.exe,ACME\dlee,tcp,10.10.1.12,52184,34.37.146.15,53,cdn.jsdelivr.net +EXCH-01,2026-02-10T21:35:12.067Z,3,C:\Program Files\msedge.exe,ACME\dlee,tcp,10.10.1.12,58059,10.10.3.141,8080, +EXCH-01,2026-02-12T08:41:53.038Z,3,C:\Windows\System32\explorer.exe,ACME\dlee,tcp,10.10.1.12,49812,10.10.2.140,3389,windowsupdate.com +EXCH-01,2026-02-15T03:12:39.885Z,3,C:\Windows\System32\lsass.exe,ACME\dlee,udp,10.10.1.12,60057,132.111.236.224,443, +EXCH-01,2026-02-20T04:39:51.777Z,3,C:\Program Files\msedge.exe,ACME\dlee,tcp,10.10.1.12,60658,3.59.124.229,80, +EXCH-01,2026-02-18T01:32:49.277Z,3,C:\Program Files\chrome.exe,ACME\dlee,udp,10.10.1.12,52242,10.10.2.146,443, +EXCH-01,2026-02-15T01:34:25.349Z,3,C:\Windows\System32\lsass.exe,ACME\dlee,udp,10.10.1.12,50207,10.10.1.151,3389, +EXCH-01,2026-02-17T22:57:44.856Z,3,C:\Program Files\msedge.exe,ACME\dlee,udp,10.10.1.12,58051,10.10.2.113,445, +EXCH-01,2026-02-14T12:19:54.190Z,3,C:\Windows\System32\explorer.exe,ACME\dlee,udp,10.10.1.12,49382,10.10.1.109,443, +EXCH-01,2026-02-18T15:45:08.737Z,3,C:\Program Files\chrome.exe,ACME\dlee,tcp,10.10.1.12,59908,10.10.3.123,445, +WEB-01,2026-02-14T13:05:14.297Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,udp,10.10.3.10,62380,10.10.2.137,443, +WEB-01,2026-02-17T11:04:06.730Z,3,C:\Windows\System32\System,ACME\idavis,tcp,10.10.3.10,58859,140.117.149.140,53, +WEB-01,2026-02-12T15:22:25.422Z,3,C:\Windows\System32\OneDrive.exe,ACME\idavis,tcp,10.10.3.10,61317,10.10.3.120,53, +WEB-01,2026-02-15T00:37:16.090Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,tcp,10.10.3.10,49763,10.10.3.123,80, +WEB-01,2026-02-19T02:07:23.126Z,3,C:\Windows\System32\SearchHost.exe,ACME\idavis,udp,10.10.3.10,55123,115.94.80.253,443, +WEB-01,2026-02-12T12:30:45.586Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.3.10,53105,10.10.2.158,445, +WEB-01,2026-02-14T03:11:03.988Z,3,C:\Windows\System32\smss.exe,ACME\idavis,tcp,10.10.3.10,50129,10.10.1.11,53, +WEB-01,2026-02-17T15:34:22.302Z,3,C:\Windows\System32\winlogon.exe,ACME\idavis,tcp,10.10.3.10,49277,197.142.187.81,53, +WEB-01,2026-02-12T04:30:35.950Z,3,C:\Windows\System32\lsass.exe,ACME\idavis,tcp,10.10.3.10,60828,60.4.38.164,389, +WEB-01,2026-02-18T10:27:05.484Z,3,C:\Windows\System32\teams.exe,ACME\idavis,udp,10.10.3.10,62339,10.10.2.167,80, +WEB-01,2026-02-15T13:07:46.339Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.3.10,57470,184.69.231.145,8080, +WEB-01,2026-02-11T20:11:46.233Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.3.10,60005,110.102.177.143,53, +WEB-01,2026-02-20T03:23:02.708Z,3,C:\Program Files\msedge.exe,ACME\idavis,tcp,10.10.3.10,62994,124.198.5.30,389, +WEB-01,2026-02-16T10:51:48.487Z,3,C:\Windows\System32\System,ACME\idavis,udp,10.10.3.10,63524,184.188.42.91,3389, +WEB-01,2026-02-11T13:01:33.748Z,3,C:\Program Files\chrome.exe,ACME\idavis,tcp,10.10.3.10,57827,105.57.239.230,80, +WEB-01,2026-02-14T19:08:23.124Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\idavis,tcp,10.10.3.10,51007,78.51.96.121,8080,file-01.acme.local +WEB-01,2026-02-13T08:57:16.420Z,3,C:\Windows\System32\System,ACME\idavis,udp,10.10.3.10,51292,10.10.1.145,389, +WEB-01,2026-02-17T17:43:44.634Z,3,C:\Windows\System32\lsass.exe,ACME\idavis,tcp,10.10.3.10,61379,152.175.23.228,8080, +WEB-01,2026-02-11T03:21:47.045Z,3,C:\Program Files\msedge.exe,ACME\idavis,udp,10.10.3.10,54010,184.130.213.90,389, +WEB-01,2026-02-12T08:27:11.363Z,3,C:\Windows\System32\System,ACME\idavis,udp,10.10.3.10,60448,67.104.169.160,80,cloudflare.com +WEB-01,2026-02-18T03:47:03.430Z,3,C:\Windows\System32\services.exe,ACME\idavis,tcp,10.10.3.10,56580,10.10.2.164,80, +WEB-01,2026-02-15T14:45:38.607Z,3,C:\Windows\System32\svchost.exe,ACME\idavis,udp,10.10.3.10,50043,96.171.124.46,53, +WEB-01,2026-02-14T08:58:14.368Z,3,C:\Windows\System32\SearchHost.exe,ACME\idavis,tcp,10.10.3.10,58938,10.10.1.10,8080, +WEB-01,2026-02-13T17:39:42.047Z,3,C:\Windows\System32\cmd.exe,ACME\idavis,udp,10.10.3.10,62795,208.233.137.97,389, +WEB-01,2026-02-11T19:36:00.113Z,3,C:\Windows\System32\lsass.exe,ACME\idavis,tcp,10.10.3.10,51533,10.10.1.127,443,login.microsoftonline.com +WEB-01,2026-02-10T19:45:13.396Z,3,C:\Windows\System32\winlogon.exe,ACME\idavis,tcp,10.10.3.10,52220,141.156.136.62,8080, +WEB-01,2026-02-17T23:25:26.811Z,3,C:\Windows\System32\powershell.exe,ACME\idavis,tcp,10.10.3.10,62412,157.46.77.15,443, +SQL-01,2026-02-12T19:44:56.856Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.2.11,53046,87.212.11.79,80, +SQL-01,2026-02-15T15:45:04.257Z,3,C:\Windows\System32\csrss.exe,ACME\cjohnson,udp,10.10.2.11,57057,27.124.145.142,445,graph.microsoft.com +SQL-01,2026-02-10T23:39:02.383Z,3,C:\Windows\System32\outlook.exe,ACME\cjohnson,tcp,10.10.2.11,55039,10.10.1.157,53, +SQL-01,2026-02-20T17:49:48.414Z,3,C:\Windows\System32\powershell.exe,ACME\cjohnson,tcp,10.10.2.11,57927,23.157.140.175,8080,google.com +SQL-01,2026-02-17T09:14:59.986Z,3,C:\Windows\System32\svchost.exe,ACME\cjohnson,tcp,10.10.2.11,62691,169.251.143.241,53, +SQL-01,2026-02-19T09:17:17.072Z,3,C:\Windows\System32\powershell.exe,ACME\cjohnson,tcp,10.10.2.11,56193,10.10.3.162,389, +SQL-01,2026-02-15T09:31:40.192Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,tcp,10.10.2.11,56528,56.48.115.33,443, +SQL-01,2026-02-14T12:34:29.851Z,3,C:\Windows\System32\outlook.exe,ACME\cjohnson,tcp,10.10.2.11,59318,10.10.3.117,389, +SQL-01,2026-02-15T21:22:24.943Z,3,C:\Windows\System32\System,ACME\cjohnson,udp,10.10.2.11,49281,76.223.115.81,80, +SQL-01,2026-02-12T10:49:45.587Z,3,C:\Windows\System32\dwm.exe,ACME\cjohnson,udp,10.10.2.11,63062,10.10.2.128,3389, +SQL-01,2026-02-12T05:25:16.513Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,udp,10.10.2.11,64475,186.212.32.114,8080, +SQL-01,2026-02-18T10:14:23.221Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,udp,10.10.2.11,56168,147.39.44.6,53, +SQL-01,2026-02-10T14:32:24.814Z,3,C:\Windows\System32\OneDrive.exe,ACME\cjohnson,udp,10.10.2.11,64505,220.212.244.193,53, +SQL-01,2026-02-15T07:54:43.387Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\cjohnson,tcp,10.10.2.11,60324,10.10.1.136,443, +SQL-01,2026-02-18T20:53:59.850Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,tcp,10.10.2.11,64470,10.10.1.136,80, +SQL-01,2026-02-17T18:27:01.527Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.2.11,54241,10.10.2.143,53, +SQL-01,2026-02-11T02:04:28.319Z,3,C:\Windows\System32\smss.exe,ACME\cjohnson,udp,10.10.2.11,64095,10.10.2.104,443, +SQL-01,2026-02-11T13:44:18.374Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.2.11,63352,10.10.3.162,3389, +SQL-01,2026-02-10T15:55:42.145Z,3,C:\Windows\System32\taskhostw.exe,ACME\cjohnson,tcp,10.10.2.11,64616,58.37.144.177,8080, +SQL-01,2026-02-11T01:01:13.611Z,3,C:\Windows\System32\winlogon.exe,ACME\cjohnson,udp,10.10.2.11,58447,10.10.3.111,53, +SQL-01,2026-02-17T21:37:51.646Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,udp,10.10.2.11,51801,10.10.2.173,443, +SQL-01,2026-02-17T15:28:07.342Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.2.11,57225,10.10.1.11,80, +SQL-01,2026-02-14T07:42:31.192Z,3,C:\Windows\System32\powershell.exe,ACME\cjohnson,tcp,10.10.2.11,60941,10.10.3.123,80, +SQL-01,2026-02-17T02:37:06.254Z,3,C:\Windows\System32\code.exe,ACME\cjohnson,udp,10.10.2.11,49863,10.10.3.114,445,file-01.acme.local +SQL-01,2026-02-13T14:03:02.978Z,3,C:\Windows\System32\spoolsv.exe,ACME\cjohnson,tcp,10.10.2.11,50447,10.10.1.166,80, +SQL-01,2026-02-13T05:35:22.790Z,3,C:\Windows\System32\teams.exe,ACME\cjohnson,udp,10.10.2.11,58216,10.10.3.108,443, +SQL-01,2026-02-19T23:08:29.615Z,3,C:\Windows\System32\notepad.exe,ACME\cjohnson,udp,10.10.2.11,52792,19.86.243.83,53, +SQL-01,2026-02-13T04:42:17.024Z,3,C:\Windows\System32\csrss.exe,ACME\cjohnson,udp,10.10.2.11,57830,10.10.3.147,445, +SQL-01,2026-02-14T12:26:15.763Z,3,C:\Windows\System32\code.exe,ACME\cjohnson,udp,10.10.2.11,65330,10.10.2.110,80, +SQL-01,2026-02-11T01:53:03.303Z,3,C:\Program Files\chrome.exe,ACME\cjohnson,tcp,10.10.2.11,63814,10.10.1.10,443, +SQL-01,2026-02-12T19:56:50.455Z,3,C:\Windows\System32\csrss.exe,ACME\cjohnson,udp,10.10.2.11,61587,10.10.1.154,80, +SQL-01,2026-02-11T06:50:15.954Z,3,C:\Program Files\msedge.exe,ACME\cjohnson,tcp,10.10.2.11,50769,165.88.128.217,443, +SQL-01,2026-02-18T15:11:38.607Z,3,C:\Windows\System32\smss.exe,ACME\cjohnson,tcp,10.10.2.11,62428,163.179.183.183,445, +SQL-01,2026-02-13T06:58:09.930Z,3,C:\Windows\System32\OneDrive.exe,ACME\cjohnson,udp,10.10.2.11,64064,59.36.73.225,443,pypi.org +SQL-01,2026-02-19T03:34:49.357Z,3,C:\Windows\System32\cmd.exe,ACME\cjohnson,udp,10.10.2.11,50300,10.10.1.154,445, +PROXY-01,2026-02-12T23:22:26.147Z,3,C:\Windows\System32\spoolsv.exe,ACME\fthompson,udp,10.10.1.13,52319,10.10.3.171,8080, +PROXY-01,2026-02-18T01:18:29.308Z,3,C:\Windows\System32\powershell.exe,ACME\fthompson,tcp,10.10.1.13,61938,154.222.211.197,445, +PROXY-01,2026-02-10T17:49:18.040Z,3,C:\Windows\System32\MsMpEng.exe,ACME\fthompson,udp,10.10.1.13,49615,6.15.33.201,443, +PROXY-01,2026-02-20T03:00:43.235Z,3,C:\Windows\System32\taskhostw.exe,ACME\fthompson,udp,10.10.1.13,59193,23.30.41.150,8080,draftkings.com +PROXY-01,2026-02-16T06:20:39.897Z,3,C:\Windows\System32\SearchHost.exe,ACME\fthompson,udp,10.10.1.13,55875,44.209.167.152,389, +PROXY-01,2026-02-16T08:22:48.288Z,3,C:\Windows\System32\smss.exe,ACME\fthompson,tcp,10.10.1.13,60195,90.150.230.108,389, +PROXY-01,2026-02-18T08:41:11.223Z,3,C:\Windows\System32\powershell.exe,ACME\fthompson,tcp,10.10.1.13,62478,10.10.3.144,443, +PROXY-01,2026-02-16T10:29:04.204Z,3,C:\Windows\System32\cmd.exe,ACME\fthompson,udp,10.10.1.13,55245,141.39.121.219,8080, +PROXY-01,2026-02-20T14:28:40.498Z,3,C:\Windows\System32\dwm.exe,ACME\fthompson,tcp,10.10.1.13,58995,124.65.251.107,80, +PROXY-01,2026-02-16T21:47:25.883Z,3,C:\Windows\System32\explorer.exe,ACME\fthompson,udp,10.10.1.13,61096,205.9.255.168,443, +PROXY-01,2026-02-15T03:50:15.023Z,3,C:\Windows\System32\winlogon.exe,ACME\fthompson,tcp,10.10.1.13,50086,104.234.219.251,53, +PROXY-01,2026-02-15T14:15:44.979Z,3,C:\Windows\System32\cmd.exe,ACME\fthompson,udp,10.10.1.13,65499,183.33.17.182,3389, +PROXY-01,2026-02-14T22:07:49.389Z,3,C:\Windows\System32\code.exe,ACME\fthompson,tcp,10.10.1.13,59150,10.10.2.113,8080, +PROXY-01,2026-02-13T09:51:55.810Z,3,C:\Program Files\msedge.exe,ACME\fthompson,tcp,10.10.1.13,63131,10.10.3.117,389, +PROXY-01,2026-02-11T05:31:48.707Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\fthompson,tcp,10.10.1.13,58686,10.10.2.110,3389, +PROXY-01,2026-02-14T07:21:37.971Z,3,C:\Windows\System32\services.exe,ACME\fthompson,tcp,10.10.1.13,49756,10.10.1.115,3389, +PROXY-01,2026-02-11T21:00:44.880Z,3,C:\Program Files\msedge.exe,ACME\fthompson,udp,10.10.1.13,62166,187.111.252.237,445, +PROXY-01,2026-02-20T16:14:00.769Z,3,C:\Windows\System32\outlook.exe,ACME\fthompson,udp,10.10.1.13,59250,10.10.3.102,80,dc-01.acme.local +PROXY-01,2026-02-17T22:40:59.457Z,3,C:\Windows\System32\OneDrive.exe,ACME\fthompson,udp,10.10.1.13,49548,10.10.1.133,443, +PROXY-01,2026-02-11T15:29:29.267Z,3,C:\Windows\System32\lsass.exe,ACME\fthompson,udp,10.10.1.13,51629,103.214.142.161,3389, +PROXY-01,2026-02-18T19:54:34.079Z,3,C:\Windows\System32\powershell.exe,ACME\fthompson,tcp,10.10.1.13,57569,64.63.133.113,389, +PROXY-01,2026-02-11T19:49:21.008Z,3,C:\Windows\System32\explorer.exe,ACME\fthompson,tcp,10.10.1.13,60097,10.10.1.112,80, +PROXY-01,2026-02-16T22:34:13.944Z,3,C:\Windows\System32\SearchHost.exe,ACME\fthompson,tcp,10.10.1.13,60736,40.57.76.78,389, +PROXY-01,2026-02-17T11:22:58.938Z,3,C:\Windows\System32\spoolsv.exe,ACME\fthompson,tcp,10.10.1.13,59674,49.77.137.236,389, +PROXY-01,2026-02-16T10:53:34.751Z,3,C:\Windows\System32\cmd.exe,ACME\fthompson,udp,10.10.1.13,54679,48.200.145.92,3389, +PROXY-01,2026-02-19T06:26:56.830Z,3,C:\Windows\System32\svchost.exe,ACME\fthompson,tcp,10.10.1.13,59782,10.10.1.103,80, +PROXY-01,2026-02-18T03:05:47.272Z,3,C:\Windows\System32\code.exe,ACME\fthompson,tcp,10.10.1.13,58327,10.10.2.131,389, +PROXY-01,2026-02-16T15:25:39.861Z,3,C:\Windows\System32\dwm.exe,ACME\fthompson,tcp,10.10.1.13,65020,10.10.1.172,445, +PROXY-01,2026-02-11T19:57:32.555Z,3,C:\Windows\System32\code.exe,ACME\fthompson,tcp,10.10.1.13,62084,80.182.25.148,445, +PROXY-01,2026-02-14T22:25:13.698Z,3,C:\Windows\System32\taskhostw.exe,ACME\fthompson,udp,10.10.1.13,62110,10.10.1.151,3389, +PROXY-01,2026-02-16T16:32:43.048Z,3,C:\Windows\System32\cmd.exe,ACME\fthompson,udp,10.10.1.13,50752,9.180.73.194,3389, +PROXY-01,2026-02-17T10:13:01.600Z,3,C:\Windows\System32\spoolsv.exe,ACME\fthompson,udp,10.10.1.13,58481,109.106.92.39,445,akamai.net +PROXY-01,2026-02-11T11:24:38.791Z,3,C:\Windows\System32\RuntimeBroker.exe,ACME\fthompson,udp,10.10.1.13,62771,191.172.122.163,3389, +PROXY-01,2026-02-10T12:41:33.851Z,3,C:\Windows\System32\cmd.exe,ACME\fthompson,udp,10.10.1.13,58055,10.10.2.125,8080, +PROXY-01,2026-02-20T17:14:02.755Z,3,C:\Windows\System32\dwm.exe,ACME\fthompson,udp,10.10.1.13,59901,114.177.20.6,53, +PROXY-01,2026-02-11T04:46:22.467Z,3,C:\Windows\System32\notepad.exe,ACME\fthompson,udp,10.10.1.13,55608,10.10.1.166,53, +PROXY-01,2026-02-14T14:18:09.540Z,3,C:\Windows\System32\outlook.exe,ACME\fthompson,udp,10.10.1.13,59083,2.236.53.166,53, +PROXY-01,2026-02-11T14:32:05.011Z,3,C:\Windows\System32\services.exe,ACME\fthompson,udp,10.10.1.13,54445,172.114.67.19,53, +PROXY-01,2026-02-10T21:46:11.727Z,3,C:\Windows\System32\MsMpEng.exe,ACME\fthompson,tcp,10.10.1.13,64822,113.34.17.138,8080, +PROXY-01,2026-02-14T12:11:23.308Z,3,C:\Program Files\msedge.exe,ACME\fthompson,tcp,10.10.1.13,57088,10.10.1.121,445, +PROXY-01,2026-02-20T15:37:54.577Z,3,C:\Program Files\msedge.exe,ACME\fthompson,udp,10.10.1.13,60411,207.140.140.57,53, +PROXY-01,2026-02-20T02:40:45.812Z,3,C:\Windows\System32\MsMpEng.exe,ACME\fthompson,udp,10.10.1.13,55904,10.10.2.119,80, +PROXY-01,2026-02-10T17:19:00.805Z,3,C:\Windows\System32\code.exe,ACME\fthompson,udp,10.10.1.13,61330,10.10.2.155,53, +PROXY-01,2026-02-17T08:10:03.123Z,3,C:\Windows\System32\winlogon.exe,ACME\fthompson,udp,10.10.1.13,51958,57.68.18.193,389, +PROXY-01,2026-02-11T14:08:22.770Z,3,C:\Program Files\msedge.exe,ACME\fthompson,tcp,10.10.1.13,51338,117.128.130.67,53,akamai.net +PROXY-01,2026-02-13T23:32:19.018Z,3,C:\Windows\System32\winlogon.exe,ACME\fthompson,udp,10.10.1.13,56369,10.10.1.10,443, +PROXY-01,2026-02-16T11:27:39.414Z,3,C:\Program Files\chrome.exe,ACME\fthompson,udp,10.10.1.13,62919,10.10.1.145,443, +PROXY-01,2026-02-11T17:02:15.257Z,3,C:\Windows\System32\dwm.exe,ACME\fthompson,tcp,10.10.1.13,55453,216.202.170.65,80, +PROXY-01,2026-02-15T09:20:50.459Z,3,C:\Windows\System32\taskhostw.exe,ACME\fthompson,tcp,10.10.1.13,54274,10.10.2.146,8080,dc-01.acme.local diff --git a/backend/tests/test_csvs/09_autoruns.csv b/backend/tests/test_csvs/09_autoruns.csv new file mode 100644 index 0000000..e725e09 --- /dev/null +++ b/backend/tests/test_csvs/09_autoruns.csv @@ -0,0 +1,343 @@ +Hostname,IP,EntryName,EntryPath,Category,Enabled,Signer,MD5,Timestamp +HR-WS-001,10.10.2.101,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,f9476077f731904faca4ce51e8223280,2026-02-18T16:38:01.691Z +HR-WS-001,10.10.2.101,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,22b9787216ab4bcc3e837fe83e56de08,2026-02-14T21:40:24.163Z +HR-WS-001,10.10.2.101,OneDrive,C:\Users\gwhite\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,e12c4d94832bcfc10ea719ab8c7a1e99,2026-02-10T10:35:43.190Z +HR-WS-001,10.10.2.101,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,c9b8d71ffc7f6ba6815406168fe0e504,2026-02-19T20:45:28.448Z +HR-WS-001,10.10.2.101,Spotify,C:\Users\gwhite\AppData\Roaming\Spotify\Spotify.exe /minimized,Logon,True,(Not Signed),4a4348e3d4e5abb139eb31a3b3ab4a37,2026-02-12T07:14:11.363Z +FIN-WS-002,10.10.3.102,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,9784945d50c553a038ce9d31f138eeb9,2026-02-16T01:53:59.986Z +FIN-WS-002,10.10.3.102,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,51c836ed0b3c7aac59187f2703ba3d95,2026-02-19T12:05:46.600Z +FIN-WS-002,10.10.3.102,OneDrive,C:\Users\emartinez\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,68f003e65e14be3f618ede037c9f3492,2026-02-10T13:54:22.852Z +FIN-WS-002,10.10.3.102,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,3ee5bb60071f8c1235df6330912221a3,2026-02-13T13:21:36.604Z +SLS-WS-003,10.10.1.103,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,f43330733bd73bdc0e2abaca445c0a67,2026-02-12T17:21:14.744Z +SLS-WS-003,10.10.1.103,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,4584172477b2fe74ddbd894fcdaa90f3,2026-02-16T01:51:57.062Z +SLS-WS-003,10.10.1.103,OneDrive,C:\Users\jsmith\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,6db277775cf2f8a3e0ee4f3f7ea19fde,2026-02-14T11:36:04.076Z +SLS-WS-003,10.10.1.103,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,b340a11b84628d2589af707554dc54bf,2026-02-14T14:31:28.902Z +ENG-WS-004,10.10.2.104,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,ee50eb7054466553636e1747152ebde2,2026-02-18T21:02:30.826Z +ENG-WS-004,10.10.2.104,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,3c3e4d576f1dcb57dda69452d46826e2,2026-02-15T16:11:07.434Z +ENG-WS-004,10.10.2.104,OneDrive,C:\Users\hbrown\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,4199e0bd2a0aba2a5b54f21e0f733fc1,2026-02-15T00:36:10.306Z +ENG-WS-004,10.10.2.104,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,17409f9956b4cc3de140c4eb9bcb8821,2026-02-10T19:23:50.518Z +LEG-WS-005,10.10.3.105,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,a6965636c44cb10326a6726a5cc7ef7c,2026-02-14T06:39:11.997Z +LEG-WS-005,10.10.3.105,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,3efd102a59a6bb9659854dbe62960882,2026-02-18T00:05:24.622Z +LEG-WS-005,10.10.3.105,OneDrive,C:\Users\idavis\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,a892151ba200fd042e6d747af87a58be,2026-02-14T21:09:26.910Z +LEG-WS-005,10.10.3.105,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,2382aea96e53966d77f67564e8bb9a0a,2026-02-20T14:37:35.078Z +MKT-WS-006,10.10.1.106,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,64b4fba1f06924f821641be3be48af45,2026-02-19T15:12:25.834Z +MKT-WS-006,10.10.1.106,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,009b84037a7d13ccd7129ff2dcac4145,2026-02-16T08:31:47.006Z +MKT-WS-006,10.10.1.106,OneDrive,C:\Users\svc_backup\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,c6bcda73bfffe297bfa33ac91aceb351,2026-02-15T13:56:06.927Z +MKT-WS-006,10.10.1.106,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,a02b5071684ff75768995fb47ce19b3b,2026-02-13T10:48:36.068Z +EXEC-WS-007,10.10.2.107,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,3d52771382b18b1ba9f65b5dadf05410,2026-02-14T21:11:18.000Z +EXEC-WS-007,10.10.2.107,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,3611b573b586e247bd6e2a507ca21683,2026-02-11T07:26:19.949Z +EXEC-WS-007,10.10.2.107,OneDrive,C:\Users\cjohnson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,d9903e5eded038b3dc3c91f427409805,2026-02-20T10:29:46.612Z +EXEC-WS-007,10.10.2.107,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,5a667b764bf6c0b500b45c7b66be2022,2026-02-18T19:47:32.890Z +IT-WS-008,10.10.3.108,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,d4856492b7a3b2f2a6df99c73467a7df,2026-02-11T00:15:04.254Z +IT-WS-008,10.10.3.108,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,bba6882e5e4c691a6be948be2bdb49ba,2026-02-11T05:06:51.041Z +IT-WS-008,10.10.3.108,OneDrive,C:\Users\svc_sql\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,e949a1d4c52013b98db0e82670c20b0f,2026-02-19T09:36:16.769Z +IT-WS-008,10.10.3.108,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,19a1662d7a261f7c569de3dae84e3e46,2026-02-18T16:19:52.827Z +HR-WS-009,10.10.1.109,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,035b97369bb068c1071c07fe79ed9db8,2026-02-13T18:48:23.256Z +HR-WS-009,10.10.1.109,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,9192c986a04555c62ac2d111bae41dbf,2026-02-19T22:18:31.770Z +HR-WS-009,10.10.1.109,OneDrive,C:\Users\idavis\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,07696f6a549fd643671fd3e7988b6c3a,2026-02-15T03:59:27.784Z +HR-WS-009,10.10.1.109,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,61ad70133a4061a53f1bb15189f42acd,2026-02-17T17:53:33.602Z +FIN-WS-010,10.10.2.110,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,7837891a3a1aa04f5b173d764d77c58c,2026-02-14T20:46:38.165Z +FIN-WS-010,10.10.2.110,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,3d18d4bcf63d3d6616ba37dc0e04533e,2026-02-13T11:38:54.276Z +FIN-WS-010,10.10.2.110,OneDrive,C:\Users\dlee\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,890d634cefc9a5575c6c916c2f4a9cd5,2026-02-11T03:52:37.756Z +FIN-WS-010,10.10.2.110,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,184c45767f22c999e0c770716995e394,2026-02-17T17:38:37.540Z +FIN-WS-010,10.10.2.110,uTorrent,C:\Users\dlee\AppData\Roaming\uTorrent\uTorrent.exe /minimized,Logon,True,(Not Signed),739ff4819dc765d9d1442fa9514ce5a3,2026-02-14T14:23:48.715Z +SLS-WS-011,10.10.3.111,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,257302624c1d1b8ab6e41d64f386cd13,2026-02-14T14:18:31.992Z +SLS-WS-011,10.10.3.111,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,2e7d979e1bbd4309ebfd30b771312520,2026-02-16T17:36:39.342Z +SLS-WS-011,10.10.3.111,OneDrive,C:\Users\emartinez\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,25ab312343a9b0f8dc132bcf529668f1,2026-02-17T18:55:31.648Z +SLS-WS-011,10.10.3.111,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,907e662386549f04314d877f821e0f09,2026-02-16T07:37:15.438Z +ENG-WS-012,10.10.1.112,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,a78f9f4d22b8ad4f1649b9451157b62a,2026-02-16T20:53:05.090Z +ENG-WS-012,10.10.1.112,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,b7bcf70be51bffb5954b31802880fb7e,2026-02-16T00:23:19.427Z +ENG-WS-012,10.10.1.112,OneDrive,C:\Users\bwilson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,33b121347f06281ed1f93461d317f81e,2026-02-20T10:49:15.804Z +ENG-WS-012,10.10.1.112,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,3b03d2cb036d84e8e13b0cb450b4218b,2026-02-20T10:32:58.342Z +LEG-WS-013,10.10.2.113,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,f2d290a90081df0d39fb81c567d04776,2026-02-19T10:54:08.806Z +LEG-WS-013,10.10.2.113,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,643804513444b466873e04fbb8c1e6b1,2026-02-13T09:02:59.760Z +LEG-WS-013,10.10.2.113,OneDrive,C:\Users\cjohnson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,7d019fd8a888bc50e95abdacdc9826d3,2026-02-16T03:01:45.895Z +LEG-WS-013,10.10.2.113,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,08cae97b7813a4e56a551834a3acd593,2026-02-16T03:49:14.877Z +LEG-WS-013,10.10.2.113,Discord,C:\Users\cjohnson\AppData\Local\Discord\Update.exe --processStart Discord.exe,Logon,True,(Not Signed),3f649a21c880cb1707c300cdf0cafc80,2026-02-18T00:57:58.524Z +MKT-WS-014,10.10.3.114,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,13b2e547b818c31f445ef03f60c0f03f,2026-02-15T00:32:17.270Z +MKT-WS-014,10.10.3.114,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,020100b29f3cef7e0d20805b2f6dcf6f,2026-02-16T04:50:18.379Z +MKT-WS-014,10.10.3.114,OneDrive,C:\Users\emartinez\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,104cbbea37b078846fb0ada324e071eb,2026-02-11T05:05:09.008Z +MKT-WS-014,10.10.3.114,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,68be1255a2a881356089dca5b17f0235,2026-02-16T15:36:41.385Z +MKT-WS-014,10.10.3.114,Steam,C:\Program Files (x86)\Steam\steam.exe -silent,Logon,True,(Not Signed),66cfdcdf2da7e2052a07ff85a398d38a,2026-02-14T22:28:49.877Z +EXEC-WS-015,10.10.1.115,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,8a93b2a9ee834d7338c7190c5812b03d,2026-02-15T06:04:00.601Z +EXEC-WS-015,10.10.1.115,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,5247e43ce576b5d8be2896d5352b3f2a,2026-02-16T13:10:55.685Z +EXEC-WS-015,10.10.1.115,OneDrive,C:\Users\emartinez\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,81f9a00e9e20223db4d10663bae6bed3,2026-02-17T08:00:37.595Z +EXEC-WS-015,10.10.1.115,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,c735750ce48018ac577220efd90ae398,2026-02-11T12:26:22.399Z +IT-WS-016,10.10.2.116,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,8deb9721364b822d96adf74e6b8a42d0,2026-02-19T01:58:36.892Z +IT-WS-016,10.10.2.116,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,2365ad5ec8604ccf407870b6fc86f489,2026-02-11T15:03:21.222Z +IT-WS-016,10.10.2.116,OneDrive,C:\Users\svc_backup\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,82b746aee8dc8483e0d14b477c0bf2e2,2026-02-18T20:43:58.890Z +IT-WS-016,10.10.2.116,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,9709479b27d768d502a0f945c29b8f5e,2026-02-11T08:10:28.465Z +HR-WS-017,10.10.3.117,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,f11b2989e26d037388b3ae21ec50adb9,2026-02-11T00:31:37.655Z +HR-WS-017,10.10.3.117,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,7ed41cd93f60a8667d4462fecef78b37,2026-02-12T22:22:11.343Z +HR-WS-017,10.10.3.117,OneDrive,C:\Users\agarcia\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,19725dbc721037a8d3ec93c5809f695e,2026-02-19T08:33:19.727Z +HR-WS-017,10.10.3.117,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,e883d2362914c58532c69935075e2bbe,2026-02-20T02:29:55.060Z +FIN-WS-018,10.10.1.118,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,b524a6ee7c336102b59fa2c02a6c871b,2026-02-14T21:17:01.353Z +FIN-WS-018,10.10.1.118,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,64c8ce48ce5252706848a4523fa92126,2026-02-11T10:03:09.619Z +FIN-WS-018,10.10.1.118,OneDrive,C:\Users\hbrown\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,05cc51d03c884751bcc4a123b0e7ce7f,2026-02-15T06:12:23.669Z +FIN-WS-018,10.10.1.118,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,356ef7d8cfc147e714b76c36c3fac9f5,2026-02-16T03:23:24.079Z +SLS-WS-019,10.10.2.119,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,49286eb5be41056b8597acc51222df6a,2026-02-14T09:14:46.487Z +SLS-WS-019,10.10.2.119,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,0872ebbf4f5530d12a54f7cdec48a438,2026-02-17T10:58:19.296Z +SLS-WS-019,10.10.2.119,OneDrive,C:\Users\svc_backup\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,abd58a27994096e52591b6ffea3783f9,2026-02-14T23:34:37.781Z +SLS-WS-019,10.10.2.119,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,4527ee4ad703e9ec0d5e82564b6ef158,2026-02-17T04:34:55.933Z +ENG-WS-020,10.10.3.120,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,4dfaca00b0e6732e8b04b2eb21c15db3,2026-02-15T17:58:58.872Z +ENG-WS-020,10.10.3.120,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,1f6e64f67e4ecdb0449fda62aa787352,2026-02-19T21:29:34.931Z +ENG-WS-020,10.10.3.120,OneDrive,C:\Users\gwhite\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,6bdc5c8a846721d4a76e895c67561df0,2026-02-18T19:36:32.427Z +ENG-WS-020,10.10.3.120,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,1d20b62a8f705ab66986598430c174bc,2026-02-15T16:55:52.609Z +LEG-WS-021,10.10.1.121,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,e4d41589137b6a96abc2f55a3791be8d,2026-02-13T15:30:33.773Z +LEG-WS-021,10.10.1.121,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,147dc74ec0816e16bf7529e6ae7e5a53,2026-02-14T15:22:57.108Z +LEG-WS-021,10.10.1.121,OneDrive,C:\Users\gwhite\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,bd4587b48ec4020debbbddaf7f89ea7a,2026-02-11T01:41:27.194Z +LEG-WS-021,10.10.1.121,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,46917a79cff1dce33a17344c2027cc9b,2026-02-16T17:33:36.432Z +MKT-WS-022,10.10.2.122,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,def371c941305a046248395d2a30760d,2026-02-14T08:04:10.599Z +MKT-WS-022,10.10.2.122,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,d1ab02535208f9bb6a16ffdf9b6728f0,2026-02-20T08:11:56.232Z +MKT-WS-022,10.10.2.122,OneDrive,C:\Users\idavis\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,86abf68ccbc0b4c3108763e003389b6c,2026-02-10T12:34:22.389Z +MKT-WS-022,10.10.2.122,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,1d5541e9a0ae2ad772e57e5c7e14f5e7,2026-02-12T13:16:19.289Z +EXEC-WS-023,10.10.3.123,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,71d6f451ec0ec214188617f3bde4684e,2026-02-13T16:17:00.055Z +EXEC-WS-023,10.10.3.123,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,2153c162cc3012bc15e9cb60abd2beb1,2026-02-13T06:32:25.842Z +EXEC-WS-023,10.10.3.123,OneDrive,C:\Users\svc_sql\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,4b5aea314b7dcbf04e795bd961078683,2026-02-11T16:12:54.402Z +EXEC-WS-023,10.10.3.123,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,e092c0fb7c52dce19b3d8dc3f33e3901,2026-02-14T16:32:21.336Z +IT-WS-024,10.10.1.124,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,b6c7015c4dcbfacc3b0e1340c92d172a,2026-02-18T10:19:58.467Z +IT-WS-024,10.10.1.124,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,00ac31fa29b3dff35072cafe76371b15,2026-02-19T15:14:39.012Z +IT-WS-024,10.10.1.124,OneDrive,C:\Users\idavis\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,33b765b545fd45a83d19f0dc116303c8,2026-02-19T01:39:36.343Z +IT-WS-024,10.10.1.124,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,2718bc3830483edb17e989e08f9c8fb5,2026-02-17T02:17:18.372Z +HR-WS-025,10.10.2.125,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,56e53b7a62821a55258af76761ea1966,2026-02-14T18:40:44.549Z +HR-WS-025,10.10.2.125,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,e4232abc36e81b10073bec33bb56d386,2026-02-15T23:11:54.823Z +HR-WS-025,10.10.2.125,OneDrive,C:\Users\gwhite\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,a402172a3ed4174b2fdafc567666b6da,2026-02-11T15:31:11.832Z +HR-WS-025,10.10.2.125,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,c10c0af42f088f6b7357acbc09775fa8,2026-02-18T08:17:27.400Z +FIN-WS-026,10.10.3.126,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,2fbbc6877d622feef68ffc65f1b497b8,2026-02-10T23:54:22.663Z +FIN-WS-026,10.10.3.126,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,53d4cca3eda03f21675f3851158dc65b,2026-02-13T23:13:33.694Z +FIN-WS-026,10.10.3.126,OneDrive,C:\Users\bwilson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,ac6bf1769af34c99f27c717ef5af0d40,2026-02-17T18:50:56.934Z +FIN-WS-026,10.10.3.126,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,7c6a48b9eb64fba9537361bf03f48476,2026-02-19T13:08:39.543Z +FIN-WS-026,10.10.3.126,uTorrent,C:\Users\bwilson\AppData\Roaming\uTorrent\uTorrent.exe /minimized,Logon,True,(Not Signed),d62e227614d0b1c5ece4ae2285bca535,2026-02-15T02:40:04.600Z +SLS-WS-027,10.10.1.127,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,314a1fa1648cf1937bba36649ac71406,2026-02-16T16:59:40.073Z +SLS-WS-027,10.10.1.127,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,71f4848f3579531726169015b8fe25d8,2026-02-11T17:18:52.433Z +SLS-WS-027,10.10.1.127,OneDrive,C:\Users\jsmith\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,bcfd766327e1b751c75678cb49a947a5,2026-02-18T02:46:31.650Z +SLS-WS-027,10.10.1.127,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,3e86a3eab1378f974b78dca84c9b8d61,2026-02-13T07:47:34.502Z +ENG-WS-028,10.10.2.128,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,334d2603842c94b82319a2f73e628825,2026-02-14T20:37:13.140Z +ENG-WS-028,10.10.2.128,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,ad5f1aa1f564391827db75bdc0470b91,2026-02-16T01:05:12.568Z +ENG-WS-028,10.10.2.128,OneDrive,C:\Users\fthompson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,fed764abbda0a135fefbf3d0f4336932,2026-02-15T06:23:54.909Z +ENG-WS-028,10.10.2.128,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,836b3596ccf5e97afb6ea50600828378,2026-02-19T19:21:30.616Z +LEG-WS-029,10.10.3.129,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,29a32d4dbadce2590aa2ec00ecb9a3e8,2026-02-17T23:00:03.452Z +LEG-WS-029,10.10.3.129,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,806e0d560c68c0d16c00bdeb38237f60,2026-02-20T04:19:14.893Z +LEG-WS-029,10.10.3.129,OneDrive,C:\Users\emartinez\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,b47af555bb8f26a514017faba2811633,2026-02-13T03:45:42.890Z +LEG-WS-029,10.10.3.129,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,7c127e96cd46d111230479e3ad7ce00b,2026-02-13T07:14:54.166Z +MKT-WS-030,10.10.1.130,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,1e72ddbb8a43a6338cd9292998369288,2026-02-18T01:53:46.382Z +MKT-WS-030,10.10.1.130,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,b664ea6bdaae1a85803ff8384e1e22d3,2026-02-12T02:13:32.177Z +MKT-WS-030,10.10.1.130,OneDrive,C:\Users\idavis\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,7a49d8ac591de6c1668c1a925cc87126,2026-02-11T09:16:29.394Z +MKT-WS-030,10.10.1.130,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,425471ef3c40d97e8468dd87d12fb5fd,2026-02-16T06:17:51.666Z +EXEC-WS-031,10.10.2.131,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,53802a9758578dd99ad67558e04a4d1e,2026-02-14T01:01:05.786Z +EXEC-WS-031,10.10.2.131,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,c5809b61bf61d71f627cd3b9a8098bd9,2026-02-18T20:26:29.082Z +EXEC-WS-031,10.10.2.131,OneDrive,C:\Users\fthompson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,e9f839f0536cddb42725b33b51edfb0d,2026-02-14T17:13:26.254Z +EXEC-WS-031,10.10.2.131,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,be25d2578c527a3a93c3d6d5512d4d99,2026-02-14T07:14:54.730Z +IT-WS-032,10.10.3.132,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,573fbf0d2247b7cf6d1616ace82eadf6,2026-02-14T19:06:58.657Z +IT-WS-032,10.10.3.132,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,a185649a31ae55760a8940c28c44adcc,2026-02-19T19:34:20.023Z +IT-WS-032,10.10.3.132,OneDrive,C:\Users\svc_backup\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,3a940ae061d746f6e7d0d053be9d80fb,2026-02-17T01:03:18.593Z +IT-WS-032,10.10.3.132,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,e9372174a9ee2f3b313b929f7aa873b8,2026-02-12T12:36:51.081Z +HR-WS-033,10.10.1.133,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,049542cdf146c7b80e285b1d9b89598e,2026-02-20T10:01:35.399Z +HR-WS-033,10.10.1.133,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,c04ec3ba6b7e7d5a7e3fbbc1413191d4,2026-02-20T08:36:26.722Z +HR-WS-033,10.10.1.133,OneDrive,C:\Users\svc_web\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,cfe1493ac15585198b1b5ec006b76b7b,2026-02-19T02:06:29.224Z +HR-WS-033,10.10.1.133,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,a09c06d692c5b5720bfeaea892164f48,2026-02-12T01:08:50.432Z +FIN-WS-034,10.10.2.134,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,413c77401d948cf3caefd479307d5f34,2026-02-13T03:38:39.557Z +FIN-WS-034,10.10.2.134,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,15ddf4d2f0cf6627eb77ef4469a9cdc1,2026-02-12T05:07:11.172Z +FIN-WS-034,10.10.2.134,OneDrive,C:\Users\fthompson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,d9cb45325fbbd6dd58b519a4b530dd29,2026-02-11T09:31:43.114Z +FIN-WS-034,10.10.2.134,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,7f4260b664530f30a715023294e5ede6,2026-02-15T10:28:51.266Z +SLS-WS-035,10.10.3.135,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,466275f3c677ad330f3405748012527c,2026-02-18T07:53:54.151Z +SLS-WS-035,10.10.3.135,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,c7b8ec3f1db8662ed6ef334da37ed2b4,2026-02-10T12:38:49.511Z +SLS-WS-035,10.10.3.135,OneDrive,C:\Users\fthompson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,99dd178ae3e335f9cf10abf48551cd83,2026-02-13T11:33:10.057Z +SLS-WS-035,10.10.3.135,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,f3c98d1e56fb4ae5c5127b93910393cb,2026-02-14T14:42:54.688Z +ENG-WS-036,10.10.1.136,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,f335f5dee2b627ddd98ac77aef14493f,2026-02-19T14:14:30.311Z +ENG-WS-036,10.10.1.136,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,e4e41f2c1e8c14009a5848d8d9325bd4,2026-02-19T15:52:22.084Z +ENG-WS-036,10.10.1.136,OneDrive,C:\Users\svc_web\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,41df5e0402b7cf78ae7e9808827b18f0,2026-02-14T04:58:48.582Z +ENG-WS-036,10.10.1.136,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,38ea68957c15ac8726ec5fd21a2ba7c1,2026-02-13T07:43:35.228Z +LEG-WS-037,10.10.2.137,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,e7048b4e5ccce823b15a019ac56e231a,2026-02-17T15:19:52.037Z +LEG-WS-037,10.10.2.137,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,368a1d6f2c21d1286a578fa8d0d8464d,2026-02-11T19:18:33.346Z +LEG-WS-037,10.10.2.137,OneDrive,C:\Users\svc_backup\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,0ea7edfba739e329606025b79e278a5d,2026-02-11T14:38:55.720Z +LEG-WS-037,10.10.2.137,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,3efd1a5f4bfe0d8e9c8f9386bd64ca9f,2026-02-14T10:06:13.090Z +MKT-WS-038,10.10.3.138,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,cb8dcf4319fd39d7a85bcca0e7fbefb5,2026-02-16T10:16:07.373Z +MKT-WS-038,10.10.3.138,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,982b2809524187b9ec74f543773e2764,2026-02-12T17:32:52.719Z +MKT-WS-038,10.10.3.138,OneDrive,C:\Users\svc_backup\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,73819da1fee2c45962fe20f89c946299,2026-02-18T11:57:51.031Z +MKT-WS-038,10.10.3.138,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,74dd81fe3a2d1ea0a482542378fb1048,2026-02-17T06:24:24.573Z +MKT-WS-038,10.10.3.138,uTorrent,C:\Users\svc_backup\AppData\Roaming\uTorrent\uTorrent.exe /minimized,Logon,True,(Not Signed),e8920ccdcd86e6a50d2d7b62bdaa7a9c,2026-02-11T18:39:11.639Z +EXEC-WS-039,10.10.1.139,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,ffc64af0d4ca8bd246ec913acaf3fb5e,2026-02-17T14:58:56.781Z +EXEC-WS-039,10.10.1.139,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,7c3be0a36ee731522b38337911396c2c,2026-02-14T17:20:30.212Z +EXEC-WS-039,10.10.1.139,OneDrive,C:\Users\svc_web\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,01a10918020665bcf838fbdfc4403437,2026-02-15T14:16:32.017Z +EXEC-WS-039,10.10.1.139,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,250facb86fab9442299bc0e1abb659b5,2026-02-19T21:17:30.543Z +IT-WS-040,10.10.2.140,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,6d209bc687694750e032c8db032fb3ff,2026-02-11T23:34:29.166Z +IT-WS-040,10.10.2.140,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,8facdb1c57ff34148b820dab80f9e383,2026-02-10T23:23:33.944Z +IT-WS-040,10.10.2.140,OneDrive,C:\Users\svc_backup\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,32f2c2bdb3ece1d25d9ff9b7dd75d281,2026-02-17T01:17:48.914Z +IT-WS-040,10.10.2.140,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,c9e4d9ba6e9e9e5f89ebb925b2e748e4,2026-02-15T10:58:20.228Z +HR-WS-041,10.10.3.141,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,32bf75f700df41e3d546e69a4b0cacfc,2026-02-17T21:08:02.897Z +HR-WS-041,10.10.3.141,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,972852b0380734de6e92f320a28ff149,2026-02-20T16:59:40.093Z +HR-WS-041,10.10.3.141,OneDrive,C:\Users\fthompson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,2d84ee72f12e76ffe4f1dbae553e4ce5,2026-02-12T08:49:33.876Z +HR-WS-041,10.10.3.141,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,076bf4dbffd9edb921ed3678461babac,2026-02-13T23:15:44.185Z +FIN-WS-042,10.10.1.142,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,006f3d453ef6527412ad58ca63aa6ff4,2026-02-10T12:17:12.913Z +FIN-WS-042,10.10.1.142,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,7df4e3ee708a19f4629c9dbe517a2e88,2026-02-11T06:59:53.755Z +FIN-WS-042,10.10.1.142,OneDrive,C:\Users\fthompson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,bb0060178f9a918c28213218121d2e26,2026-02-17T13:58:06.447Z +FIN-WS-042,10.10.1.142,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,03845bd5e3d576b009a077818a0bf3f3,2026-02-19T08:29:17.982Z +FIN-WS-042,10.10.1.142,Discord,C:\Users\fthompson\AppData\Local\Discord\Update.exe --processStart Discord.exe,Logon,True,(Not Signed),d3298e51be33515aeae92b10679c3276,2026-02-12T12:13:15.783Z +SLS-WS-043,10.10.2.143,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,8f18a377b282e91cd1e173eee85f1169,2026-02-19T05:53:43.501Z +SLS-WS-043,10.10.2.143,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,fe0a63d4d33b3d7b09f1a513cb3cf4bd,2026-02-12T07:09:06.629Z +SLS-WS-043,10.10.2.143,OneDrive,C:\Users\dlee\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,7c3cbbb94c63c61b45d23df163cdacfa,2026-02-20T09:07:25.273Z +SLS-WS-043,10.10.2.143,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,41a7e4e78ca47e38f2ae59fe95dbaa1f,2026-02-10T15:45:33.709Z +ENG-WS-044,10.10.3.144,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,5c064bc2b3b12f1ba13adba76926666e,2026-02-19T14:53:50.194Z +ENG-WS-044,10.10.3.144,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,e9c9d85d5fb0e0925e70aca2a5ebc14b,2026-02-15T00:21:57.235Z +ENG-WS-044,10.10.3.144,OneDrive,C:\Users\admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,2e4da91d64ffbc3661df6c7732f27124,2026-02-13T11:34:37.418Z +ENG-WS-044,10.10.3.144,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,a53afa45e3a5f0c5aa081a51a5c2cd9a,2026-02-11T12:55:15.217Z +LEG-WS-045,10.10.1.145,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,daae08e18b96f0e17083b00dbbba43f3,2026-02-20T11:00:50.597Z +LEG-WS-045,10.10.1.145,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,8000dfa77499f64504acd544c9ed2b44,2026-02-15T18:57:22.470Z +LEG-WS-045,10.10.1.145,OneDrive,C:\Users\cjohnson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,736de40e986b7001b9d51d9dfffc4393,2026-02-20T13:55:53.607Z +LEG-WS-045,10.10.1.145,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,f5fe66325792c8ad14858cd514ef0c49,2026-02-18T16:15:00.214Z +MKT-WS-046,10.10.2.146,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,98dd029b72034c677b77cbb4baba2f19,2026-02-16T23:41:33.531Z +MKT-WS-046,10.10.2.146,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,51059e8db4e2ecaea0d9afec8ac888d6,2026-02-20T00:06:13.727Z +MKT-WS-046,10.10.2.146,OneDrive,C:\Users\emartinez\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,2464332ad026b59fcf540a2df3c7563b,2026-02-14T21:01:25.203Z +MKT-WS-046,10.10.2.146,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,0e7912a0ac8e8400841afe8e1d26c752,2026-02-12T07:16:24.517Z +EXEC-WS-047,10.10.3.147,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,c27973488fa8d6ccc35b45bbcbfcf1ec,2026-02-17T02:00:33.402Z +EXEC-WS-047,10.10.3.147,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,2af2cfa5d01a2ce0d8dd99daf73a3208,2026-02-12T03:02:45.368Z +EXEC-WS-047,10.10.3.147,OneDrive,C:\Users\svc_backup\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,9e74515aa29a7b3e5d8bd16092755e08,2026-02-18T13:30:31.571Z +EXEC-WS-047,10.10.3.147,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,69b94d10458fe7f56e5a1c48a610e441,2026-02-10T11:18:38.294Z +IT-WS-048,10.10.1.148,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,c16b145ffc51ff16c7100a9ce1ed7145,2026-02-18T17:24:24.371Z +IT-WS-048,10.10.1.148,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,8115abbff0e6ed6a8f0502c5d66a164b,2026-02-15T14:36:56.923Z +IT-WS-048,10.10.1.148,OneDrive,C:\Users\svc_web\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,80ea42f5e586d1396b59ca4a4379980c,2026-02-17T19:47:20.951Z +IT-WS-048,10.10.1.148,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,978aa10480ffe0c32e7928077dddee59,2026-02-12T15:47:32.226Z +HR-WS-049,10.10.2.149,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,f18d6a9ca22157827344faad6edc3f43,2026-02-16T21:28:27.865Z +HR-WS-049,10.10.2.149,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,ccc68355f8a4824c1f55304c7b9c1821,2026-02-18T17:48:34.613Z +HR-WS-049,10.10.2.149,OneDrive,C:\Users\bwilson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,7aec94942f186eb470473d02acca2c41,2026-02-10T10:53:46.013Z +HR-WS-049,10.10.2.149,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,7f0644cea5e9d5e9074c241b5d305777,2026-02-15T16:24:04.628Z +FIN-WS-050,10.10.3.150,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,e770d168aad26f9aa80dfccf1456b33e,2026-02-11T03:25:16.210Z +FIN-WS-050,10.10.3.150,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,572f3c3ecbcd7e348201d540d845035a,2026-02-12T14:56:55.158Z +FIN-WS-050,10.10.3.150,OneDrive,C:\Users\gwhite\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,9c5adbcd1738c3a86edebbf0973dfb5f,2026-02-17T11:15:30.182Z +FIN-WS-050,10.10.3.150,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,0b272489c6c0815115c8bd238398a884,2026-02-16T01:22:35.399Z +FIN-WS-050,10.10.3.150,Discord,C:\Users\gwhite\AppData\Local\Discord\Update.exe --processStart Discord.exe,Logon,True,(Not Signed),aa339164d7d31497cc642c6902451906,2026-02-16T07:27:26.567Z +SLS-WS-051,10.10.1.151,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,e32cd3849f82c4860435fafa7dc815c2,2026-02-11T23:42:50.015Z +SLS-WS-051,10.10.1.151,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,c87049028ccc42c31ceb5ce9453eb07d,2026-02-17T08:44:11.345Z +SLS-WS-051,10.10.1.151,OneDrive,C:\Users\idavis\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,0d0a3a879f3a49cfb08f26177867d9e9,2026-02-15T11:26:48.618Z +SLS-WS-051,10.10.1.151,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,05bb54baf4ce2358d13fcc4848aa33b6,2026-02-16T19:58:21.694Z +ENG-WS-052,10.10.2.152,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,2f9ef5c9bcdffb9ef50fadb3fb7b3071,2026-02-13T05:29:22.387Z +ENG-WS-052,10.10.2.152,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,8af8f892378d437d4d1c8a4a51be47d3,2026-02-10T12:34:37.519Z +ENG-WS-052,10.10.2.152,OneDrive,C:\Users\bwilson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,23f56f0691a732c5d268a503d0661c73,2026-02-14T17:20:11.430Z +ENG-WS-052,10.10.2.152,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,488635a51a8db16a96ab5b2486b3e99b,2026-02-16T03:58:31.008Z +LEG-WS-053,10.10.3.153,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,277f4ae42f54b415f5674f0399d48851,2026-02-19T01:02:29.576Z +LEG-WS-053,10.10.3.153,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,7b6df8a41be6c0d22c967cc940696e09,2026-02-14T02:21:58.061Z +LEG-WS-053,10.10.3.153,OneDrive,C:\Users\dlee\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,094b1cefcf394930bc9193a446c9c6d9,2026-02-12T23:39:58.180Z +LEG-WS-053,10.10.3.153,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,6ee42997d46f4dc9d4266b1c8f182927,2026-02-20T06:43:48.545Z +MKT-WS-054,10.10.1.154,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,987bbb22c8cdb20ab790c330bc961b58,2026-02-13T18:56:44.135Z +MKT-WS-054,10.10.1.154,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,121570d56e4b522c211a5b0369ba8b38,2026-02-20T04:26:12.326Z +MKT-WS-054,10.10.1.154,OneDrive,C:\Users\cjohnson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,91537e600e667e639b1ec1ad951a5fd3,2026-02-18T09:14:35.557Z +MKT-WS-054,10.10.1.154,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,92c9384f5a03393796327699fec5f20a,2026-02-17T00:58:48.519Z +EXEC-WS-055,10.10.2.155,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,df44882927d4f15391536dfc26a8c0bd,2026-02-10T09:59:08.913Z +EXEC-WS-055,10.10.2.155,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,e1081eb13daef772716fc648bc238c07,2026-02-19T21:26:09.314Z +EXEC-WS-055,10.10.2.155,OneDrive,C:\Users\fthompson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,1467e33b648b9abf5adf4a2ada8e387b,2026-02-15T16:27:13.551Z +EXEC-WS-055,10.10.2.155,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,c18d8b93bd24e6cf73d50e22d9d78bb7,2026-02-10T20:40:35.229Z +IT-WS-056,10.10.3.156,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,ca730f1d3a62ab91e55fd3dd4a600fb1,2026-02-18T03:17:40.085Z +IT-WS-056,10.10.3.156,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,9eca3a6acefa22b5a0ee9f8d1d12b2b1,2026-02-18T04:32:03.354Z +IT-WS-056,10.10.3.156,OneDrive,C:\Users\dlee\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,a3cbfa1a00b8118d5fe27a5794d8b5ee,2026-02-19T05:02:49.038Z +IT-WS-056,10.10.3.156,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,6ea8ee29b08a081ebba72ec11b598d87,2026-02-10T17:29:22.882Z +HR-WS-057,10.10.1.157,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,58ecaffac946cc370d322cba869edfe4,2026-02-13T11:35:42.464Z +HR-WS-057,10.10.1.157,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,f56143391ddff8edfa9ccdfe51f476b2,2026-02-10T21:38:04.419Z +HR-WS-057,10.10.1.157,OneDrive,C:\Users\svc_sql\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,d41b4fae62fe7a33a43582fff6d926c9,2026-02-14T18:22:05.932Z +HR-WS-057,10.10.1.157,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,383a872eeb9de9cdc065257155cb4200,2026-02-14T06:09:45.704Z +FIN-WS-058,10.10.2.158,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,a4a6a20b403b4fc19102305a6e4fd94e,2026-02-10T08:42:35.702Z +FIN-WS-058,10.10.2.158,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,48143f42f576ae575ebfece272765c11,2026-02-19T04:41:14.049Z +FIN-WS-058,10.10.2.158,OneDrive,C:\Users\cjohnson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,d9bfc51ac72f1e6b21fa53b2bd2a02b0,2026-02-11T04:32:01.045Z +FIN-WS-058,10.10.2.158,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,8d5a44fb24c3c11874008e77b825743f,2026-02-14T20:19:16.665Z +FIN-WS-058,10.10.2.158,Discord,C:\Users\cjohnson\AppData\Local\Discord\Update.exe --processStart Discord.exe,Logon,True,(Not Signed),cf58eaed9e013bc38819bd998b969616,2026-02-10T12:16:52.144Z +SLS-WS-059,10.10.3.159,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,e3c74c9e8c3492cae2b9a71a1e427585,2026-02-19T22:17:09.337Z +SLS-WS-059,10.10.3.159,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,fe9249491447329754fa3ae5cc2050ac,2026-02-18T05:39:20.950Z +SLS-WS-059,10.10.3.159,OneDrive,C:\Users\admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,b50cf05fc070879415afdff534325531,2026-02-13T15:09:06.895Z +SLS-WS-059,10.10.3.159,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,a117e1a617bab8831ce6dd4e4fba6d67,2026-02-15T14:14:24.306Z +SLS-WS-059,10.10.3.159,Discord,C:\Users\admin\AppData\Local\Discord\Update.exe --processStart Discord.exe,Logon,True,(Not Signed),f91869f509fdbce7a300cd698e9d3de8,2026-02-17T16:51:11.312Z +ENG-WS-060,10.10.1.160,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,5e3fb72ba3dc555cc44077769be8ce5d,2026-02-10T15:01:52.042Z +ENG-WS-060,10.10.1.160,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,25abfcfe6042e882f58b36d0ae662e30,2026-02-13T17:28:08.992Z +ENG-WS-060,10.10.1.160,OneDrive,C:\Users\agarcia\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,ed45996c6ab270febf0e20503e0901f2,2026-02-14T14:08:35.251Z +ENG-WS-060,10.10.1.160,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,25360d7653284e5ce57d014c5f5fa344,2026-02-19T19:59:32.408Z +LEG-WS-061,10.10.2.161,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,5e9fabf85430c116dbe504e81ac3f79b,2026-02-17T10:28:34.683Z +LEG-WS-061,10.10.2.161,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,a8be97cc47061d65abe719d11b4f0c85,2026-02-17T06:25:12.347Z +LEG-WS-061,10.10.2.161,OneDrive,C:\Users\bwilson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,74a40f54e3fe117be1c980697c2c37a3,2026-02-19T00:01:37.208Z +LEG-WS-061,10.10.2.161,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,1dfe7db59f003be66178f993295bb56a,2026-02-12T03:43:03.285Z +LEG-WS-061,10.10.2.161,Discord,C:\Users\bwilson\AppData\Local\Discord\Update.exe --processStart Discord.exe,Logon,True,(Not Signed),d1b0abd2bb61d4cd50f917b77257834f,2026-02-16T20:47:33.918Z +MKT-WS-062,10.10.3.162,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,3138daa62a744df11adbc154d5643e7c,2026-02-19T22:15:20.157Z +MKT-WS-062,10.10.3.162,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,2fa02cc9d22691833f64f4149a28e9a5,2026-02-14T09:26:09.982Z +MKT-WS-062,10.10.3.162,OneDrive,C:\Users\cjohnson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,6eb0f457f1f4c1308b994c881de7eaf8,2026-02-16T17:09:20.065Z +MKT-WS-062,10.10.3.162,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,67609be7d4e999c1d5dfc3aa489274ec,2026-02-20T15:40:16.621Z +EXEC-WS-063,10.10.1.163,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,ba697671060136ab33909c410f80e42c,2026-02-18T19:02:36.065Z +EXEC-WS-063,10.10.1.163,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,a13556cef9f10cc12550f7c2620a5202,2026-02-11T05:27:32.442Z +EXEC-WS-063,10.10.1.163,OneDrive,C:\Users\cjohnson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,f677999b0375185656d9ef8ce716a578,2026-02-13T01:51:56.607Z +EXEC-WS-063,10.10.1.163,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,ad61a6340315e733677af5c5780f5316,2026-02-17T14:44:49.088Z +IT-WS-064,10.10.2.164,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,56c40e3fbf9bf2370cd8a93138fe9128,2026-02-17T06:05:14.098Z +IT-WS-064,10.10.2.164,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,ee030cf6ceb536c1fbca61f2fa340b4f,2026-02-11T10:37:43.803Z +IT-WS-064,10.10.2.164,OneDrive,C:\Users\svc_backup\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,38ed7f369c3d7f3d5c89d4cae1e8f56c,2026-02-15T07:49:13.007Z +IT-WS-064,10.10.2.164,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,736cb1859c8110049369075c36cd11f7,2026-02-13T08:14:54.300Z +HR-WS-065,10.10.3.165,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,795538f956cdef5781af357031304dbd,2026-02-11T14:15:29.330Z +HR-WS-065,10.10.3.165,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,dc07973ee58d79940996e8e4458dd89a,2026-02-12T08:02:58.202Z +HR-WS-065,10.10.3.165,OneDrive,C:\Users\svc_backup\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,2bbf153fa9968949c640d202021d8e3f,2026-02-13T20:51:22.220Z +HR-WS-065,10.10.3.165,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,66df52a3fe1471696f506a4a2690b357,2026-02-10T13:21:44.634Z +FIN-WS-066,10.10.1.166,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,69a94cf819533dd10e7ec76b0b77032a,2026-02-16T02:04:37.083Z +FIN-WS-066,10.10.1.166,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,7d2e14e4796e51be1206a7abfd70c202,2026-02-17T07:51:27.575Z +FIN-WS-066,10.10.1.166,OneDrive,C:\Users\cjohnson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,e9dedc92ce86477003bbad2c26f2dc1d,2026-02-10T10:38:27.985Z +FIN-WS-066,10.10.1.166,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,e68e585e83f868742c5f51b5feb72b72,2026-02-11T05:26:00.039Z +FIN-WS-066,10.10.1.166,Steam,C:\Program Files (x86)\Steam\steam.exe -silent,Logon,True,(Not Signed),dacabfae9c7421ad3011a0eadf3e0443,2026-02-13T09:11:29.353Z +SLS-WS-067,10.10.2.167,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,5f51d7d0e8888e07990da248c12efc6a,2026-02-17T15:19:00.925Z +SLS-WS-067,10.10.2.167,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,b2b52fd93f2a11da12ccbae1e3f01fdf,2026-02-18T17:22:50.656Z +SLS-WS-067,10.10.2.167,OneDrive,C:\Users\bwilson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,eaeb983924bde23dc828cffacc2fa365,2026-02-14T17:13:54.310Z +SLS-WS-067,10.10.2.167,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,cb6d47768131e6cb2e6b789c01badb1d,2026-02-13T04:54:44.965Z +ENG-WS-068,10.10.3.168,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,1d78072736aaf3b08dbfda72b303bcd1,2026-02-12T10:17:52.651Z +ENG-WS-068,10.10.3.168,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,e475c94081df0af0bb76745351b2d40c,2026-02-15T19:49:17.801Z +ENG-WS-068,10.10.3.168,OneDrive,C:\Users\jsmith\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,e5992ba9a161353da4d300ca1ce2a1f3,2026-02-17T08:26:41.519Z +ENG-WS-068,10.10.3.168,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,2d4cab9657ebeb3c2177531acbf581e3,2026-02-10T18:16:25.140Z +LEG-WS-069,10.10.1.169,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,b1483fd46b2b62ebadd883c80938d34d,2026-02-13T07:53:52.108Z +LEG-WS-069,10.10.1.169,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,8ce9fcda50019e404015bde12c5a98ca,2026-02-13T04:05:14.999Z +LEG-WS-069,10.10.1.169,OneDrive,C:\Users\admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,4d24770fc83650ed89854b3cb253a557,2026-02-16T04:01:07.901Z +LEG-WS-069,10.10.1.169,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,32db33f8e2614cb7d3c30cfa77573ab7,2026-02-12T10:06:06.030Z +MKT-WS-070,10.10.2.170,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,3690e9435e87a3b2da8153837763d6fa,2026-02-15T12:51:45.643Z +MKT-WS-070,10.10.2.170,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,611f1fb8cca866914714c3f77737e0bf,2026-02-10T10:52:50.728Z +MKT-WS-070,10.10.2.170,OneDrive,C:\Users\cjohnson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,282318771d4e5d5320c9ae9114ba79ef,2026-02-20T15:37:35.086Z +MKT-WS-070,10.10.2.170,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,411fe474a0dc3c2098dba83da371b82b,2026-02-19T23:07:28.521Z +MKT-WS-070,10.10.2.170,uTorrent,C:\Users\cjohnson\AppData\Roaming\uTorrent\uTorrent.exe /minimized,Logon,True,(Not Signed),0cae3b0d47ed5cbde4e68f091e66d1f9,2026-02-12T17:48:03.256Z +EXEC-WS-071,10.10.3.171,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,1ca5480bb6110b7c97a13cd76d5358cd,2026-02-12T15:28:43.280Z +EXEC-WS-071,10.10.3.171,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,92c685da727c44a3ce3fa492acfd8a0c,2026-02-18T16:34:25.734Z +EXEC-WS-071,10.10.3.171,OneDrive,C:\Users\gwhite\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,32386481300f754aa2a29feb02931755,2026-02-14T11:21:06.851Z +EXEC-WS-071,10.10.3.171,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,9c20b89abe39bf0cc2ac97dab5a996c9,2026-02-14T10:44:52.198Z +EXEC-WS-071,10.10.3.171,Steam,C:\Program Files (x86)\Steam\steam.exe -silent,Logon,True,(Not Signed),d06125e2c8424b10e2923b09db7c8d92,2026-02-18T21:27:54.682Z +IT-WS-072,10.10.1.172,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,cb7b573fe9140d654dfd153059cec23e,2026-02-20T03:09:22.548Z +IT-WS-072,10.10.1.172,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,be04f87ba1c2b005f1c4e6e31f2a65bb,2026-02-20T09:31:17.420Z +IT-WS-072,10.10.1.172,OneDrive,C:\Users\gwhite\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,f99ce66416492b49700e0de7ab8f49e2,2026-02-12T01:20:28.360Z +IT-WS-072,10.10.1.172,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,68b05ec7686f503f5acd476d1470e9a8,2026-02-16T11:06:58.383Z +HR-WS-073,10.10.2.173,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,0eea9d8033027713fe579dce9fcfc907,2026-02-10T21:27:35.847Z +HR-WS-073,10.10.2.173,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,139da91d72859c78c9dfc840ff53fad2,2026-02-11T19:44:37.217Z +HR-WS-073,10.10.2.173,OneDrive,C:\Users\gwhite\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,9cd4908a44e2690b00006b62bd71145e,2026-02-17T06:27:11.201Z +HR-WS-073,10.10.2.173,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,19b467e51a124b4945dc148fe8410601,2026-02-15T07:02:48.879Z +FIN-WS-074,10.10.3.174,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,d0fe1e4b1f64132f0916608a47cd113b,2026-02-14T07:06:20.159Z +FIN-WS-074,10.10.3.174,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,75dd67220a772027d6ccb4a16908557f,2026-02-16T04:58:14.026Z +FIN-WS-074,10.10.3.174,OneDrive,C:\Users\idavis\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,f31dc9eccc4f5f1019a61ab51df1bcf3,2026-02-18T21:54:55.899Z +FIN-WS-074,10.10.3.174,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,0834614d2ccd6226f3dfd91f6870e205,2026-02-19T22:41:19.265Z +SLS-WS-075,10.10.1.175,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,58a3f3e8a3efd3e794f9d70381478749,2026-02-10T22:13:17.055Z +SLS-WS-075,10.10.1.175,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,f16ed7d63800f6e6118dcc03465d70f1,2026-02-14T09:12:21.535Z +SLS-WS-075,10.10.1.175,OneDrive,C:\Users\cjohnson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,5a90e6680bf14a9826bdfbd01e652e11,2026-02-11T11:25:24.778Z +SLS-WS-075,10.10.1.175,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,e12e3431344420d6a9c0c0c52599fe07,2026-02-15T08:44:30.948Z +DC-01,10.10.1.10,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,0917bf6a53fc4de5ded1e219738e4383,2026-02-19T21:49:06.115Z +DC-01,10.10.1.10,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,a05c61ef8d7d6aee1ba89f5a6ac96f68,2026-02-11T01:52:42.165Z +DC-01,10.10.1.10,OneDrive,C:\Users\bwilson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,e0697fde4e2e8b3d3d08aedfd7154653,2026-02-11T01:06:10.097Z +DC-01,10.10.1.10,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,a8ecdd8717e08108a0bc716c66d69d82,2026-02-19T06:25:33.306Z +DC-02,10.10.2.10,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,8e46f4877112f92437b541ba7a887e07,2026-02-17T04:48:51.329Z +DC-02,10.10.2.10,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,979189e8b0c249d75a1ccc4967cb0988,2026-02-19T06:21:28.740Z +DC-02,10.10.2.10,OneDrive,C:\Users\idavis\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,63e689679efbd68b9abb28137a85f930,2026-02-16T06:02:32.762Z +DC-02,10.10.2.10,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,e51f19b33cb1292474ddb3722a0b1eff,2026-02-11T12:29:21.456Z +FILE-01,10.10.1.11,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,3cfbacc574bcdbe88697a22ac0ad8638,2026-02-15T00:42:20.076Z +FILE-01,10.10.1.11,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,a45b31e4fd69a54f2c4d062b4c4eaa99,2026-02-13T13:22:11.398Z +FILE-01,10.10.1.11,OneDrive,C:\Users\admin\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,83fef4984c8e4973fd684d6e6d0ddfdc,2026-02-15T08:23:32.263Z +FILE-01,10.10.1.11,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,64d9a6110e88e9e3413066f1924cba07,2026-02-14T21:27:06.097Z +EXCH-01,10.10.1.12,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,63cec7c6e35e0026c1720450ceec7934,2026-02-12T18:06:31.325Z +EXCH-01,10.10.1.12,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,311bd1adc40a2e9072d76f9d8d33cd7d,2026-02-13T07:12:35.966Z +EXCH-01,10.10.1.12,OneDrive,C:\Users\cjohnson\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,2a08fbfdc68efc14c4c2d3897475acd9,2026-02-18T22:57:33.185Z +EXCH-01,10.10.1.12,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,d9e8ef9701fcd7dee505470e302b8472,2026-02-19T19:15:19.950Z +WEB-01,10.10.3.10,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,f299839d55a02ccba36daeab018698a8,2026-02-12T00:42:42.409Z +WEB-01,10.10.3.10,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,87554861f53ebdb14204b0319d543532,2026-02-20T08:53:42.632Z +WEB-01,10.10.3.10,OneDrive,C:\Users\jsmith\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,052ad7b9cb17552f54425fbb307afb2f,2026-02-16T15:54:45.442Z +WEB-01,10.10.3.10,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,4922ca93a61f0e6e6f7ffaf832301ab9,2026-02-12T18:43:55.289Z +SQL-01,10.10.2.11,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,33289dc101881ca32b2549eea1f33fbb,2026-02-20T15:57:36.229Z +SQL-01,10.10.2.11,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,bd96f2f5fce3cbcef65388abff27bcef,2026-02-12T16:12:09.448Z +SQL-01,10.10.2.11,OneDrive,C:\Users\emartinez\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,b12baa76eaeb4ee8eb515c354662a053,2026-02-13T09:38:17.385Z +SQL-01,10.10.2.11,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,f1413bff4520ec6759b1b3679af3fc53,2026-02-12T16:05:43.210Z +PROXY-01,10.10.1.13,MicrosoftEdgeAutoLaunch,C:\Program Files\Microsoft\Edge\msedge.exe --no-startup-window,Logon,True,Microsoft Corporation,d10cdc47203a981f69ccd23b24077711,2026-02-15T15:14:35.089Z +PROXY-01,10.10.1.13,SecurityHealth,C:\Windows\System32\SecurityHealthSystray.exe,Logon,True,Microsoft Corporation,f3f137e8da7eb37b0ae66fb45a71e4d3,2026-02-10T15:57:58.411Z +PROXY-01,10.10.1.13,OneDrive,C:\Users\svc_web\AppData\Local\Microsoft\OneDrive\OneDrive.exe /background,Logon,True,Microsoft Corporation,99800716da8de3befa044253f65bf65d,2026-02-17T21:59:13.166Z +PROXY-01,10.10.1.13,WindowsDefender,C:\ProgramData\Microsoft\Windows Defender\MsMpEng.exe,Logon,True,Microsoft Corporation,55e54fe6641547957cfae514eeb50c12,2026-02-16T12:46:38.263Z diff --git a/backend/tests/test_csvs/10_logon_events.csv b/backend/tests/test_csvs/10_logon_events.csv new file mode 100644 index 0000000..f4d7415 --- /dev/null +++ b/backend/tests/test_csvs/10_logon_events.csv @@ -0,0 +1,1605 @@ +ComputerName,System.TimeCreated,EventID,LogonType,SubjectUserName,SubjectUserSid,SourceAddress,SourcePort,Status,FailureReason +HR-WS-001,2026-02-16T10:48:37.950Z,4624,7,jsmith,S-1-5-21-2389175-2340,10.10.2.101,8666,0x0, +HR-WS-001,2026-02-20T00:53:48.655Z,4624,3,jsmith,S-1-5-21-3371692-3509,10.10.1.169,56664,0x0, +HR-WS-001,2026-02-19T00:57:31.843Z,4624,3,emartinez,S-1-5-21-9314515-7738,10.10.2.143,44018,0x0, +HR-WS-001,2026-02-13T14:17:24.564Z,4625,7,gwhite,S-1-5-21-1551653-7360,10.10.2.149,61343,0xC000006D,Unknown user name or bad password +HR-WS-001,2026-02-16T10:02:30.814Z,4624,7,dlee,S-1-5-21-5828315-5889,10.10.2.101,12718,0x0, +HR-WS-001,2026-02-14T17:24:38.564Z,4624,7,jsmith,S-1-5-21-5994133-5712,10.10.3.162,8702,0x0, +HR-WS-001,2026-02-10T19:34:48.200Z,4624,10,agarcia,S-1-5-21-9605387-6112,10.10.2.101,50260,0x0, +HR-WS-001,2026-02-10T17:05:54.270Z,4624,3,bwilson,S-1-5-21-4979920-9857,10.10.2.101,33387,0x0, +HR-WS-001,2026-02-13T11:37:16.625Z,4624,10,cjohnson,S-1-5-21-2105458-9337,127.0.0.1,21164,0x0, +HR-WS-001,2026-02-16T08:38:46.620Z,4624,2,bwilson,S-1-5-21-9447036-3217,10.10.2.101,20634,0x0, +HR-WS-001,2026-02-19T20:27:54.391Z,4624,3,svc_backup,S-1-5-21-1567486-7739,127.0.0.1,62945,0x0, +FIN-WS-002,2026-02-19T04:42:33.582Z,4624,7,jsmith,S-1-5-21-7588903-7323,127.0.0.1,33541,0x0, +FIN-WS-002,2026-02-18T20:49:00.469Z,4624,2,fthompson,S-1-5-21-6814962-1458,127.0.0.1,21136,0x0, +FIN-WS-002,2026-02-12T19:42:49.933Z,4624,10,svc_sql,S-1-5-21-8476599-6963,10.10.2.134,17991,0x0, +FIN-WS-002,2026-02-15T16:18:19.405Z,4624,3,idavis,S-1-5-21-2766952-9095,10.10.3.102,2516,0x0, +FIN-WS-002,2026-02-14T00:26:22.094Z,4624,3,bwilson,S-1-5-21-2555428-2911,10.10.1.166,24381,0x0, +FIN-WS-002,2026-02-11T03:43:06.255Z,4625,10,jsmith,S-1-5-21-5401913-2728,127.0.0.1,46526,0xC000006D,Unknown user name or bad password +FIN-WS-002,2026-02-15T16:27:12.493Z,4624,3,hbrown,S-1-5-21-2252119-1105,127.0.0.1,48928,0x0, +FIN-WS-002,2026-02-16T21:29:39.489Z,4625,10,jsmith,S-1-5-21-2668267-6671,10.10.1.139,61706,0xC000006D,Unknown user name or bad password +FIN-WS-002,2026-02-19T05:37:29.859Z,4625,3,hbrown,S-1-5-21-2186045-9571,10.10.3.102,5452,0xC000006D,Unknown user name or bad password +FIN-WS-002,2026-02-20T14:50:34.503Z,4624,3,fthompson,S-1-5-21-7095784-4469,10.10.2.173,16796,0x0, +FIN-WS-002,2026-02-15T05:26:47.776Z,4624,2,svc_backup,S-1-5-21-5400781-4764,127.0.0.1,16056,0x0, +FIN-WS-002,2026-02-11T15:02:52.147Z,4624,7,cjohnson,S-1-5-21-9475360-3914,10.10.3.102,42764,0x0, +FIN-WS-002,2026-02-14T11:51:39.597Z,4624,3,agarcia,S-1-5-21-5200613-1449,127.0.0.1,52967,0x0, +FIN-WS-002,2026-02-15T13:26:56.649Z,4624,3,idavis,S-1-5-21-1992867-3456,127.0.0.1,62657,0x0, +FIN-WS-002,2026-02-14T21:28:20.626Z,4624,2,svc_backup,S-1-5-21-9828154-8337,127.0.0.1,21220,0x0, +FIN-WS-002,2026-02-17T12:27:21.676Z,4624,3,idavis,S-1-5-21-7545833-3210,10.10.3.102,8749,0x0, +FIN-WS-002,2026-02-13T03:35:33.241Z,4624,3,agarcia,S-1-5-21-1668498-8829,127.0.0.1,8693,0x0, +FIN-WS-002,2026-02-15T21:44:32.533Z,4624,3,jsmith,S-1-5-21-7282715-9508,127.0.0.1,24105,0x0, +FIN-WS-002,2026-02-20T11:53:31.499Z,4624,2,gwhite,S-1-5-21-5949207-3588,10.10.3.102,22878,0x0, +SLS-WS-003,2026-02-14T21:46:07.951Z,4624,3,svc_sql,S-1-5-21-6318232-7850,10.10.1.103,22430,0x0, +SLS-WS-003,2026-02-19T23:58:11.179Z,4624,10,cjohnson,S-1-5-21-7729029-3484,10.10.3.10,49406,0x0, +SLS-WS-003,2026-02-19T23:09:33.256Z,4624,3,admin,S-1-5-21-2709802-5807,10.10.2.11,54047,0x0, +SLS-WS-003,2026-02-10T14:47:14.868Z,4624,7,hbrown,S-1-5-21-6983913-9581,10.10.1.103,50802,0x0, +SLS-WS-003,2026-02-15T22:55:31.391Z,4624,10,svc_backup,S-1-5-21-5818229-2192,10.10.1.103,45991,0x0, +SLS-WS-003,2026-02-15T18:31:06.260Z,4624,7,svc_backup,S-1-5-21-5848521-4458,10.10.3.135,4566,0x0, +SLS-WS-003,2026-02-10T12:03:49.797Z,4624,3,svc_sql,S-1-5-21-4221457-6339,127.0.0.1,13615,0x0, +SLS-WS-003,2026-02-20T09:59:19.958Z,4624,3,bwilson,S-1-5-21-3523223-6570,10.10.1.133,44328,0x0, +SLS-WS-003,2026-02-16T23:16:43.796Z,4624,3,gwhite,S-1-5-21-2908341-3187,10.10.3.171,37636,0x0, +SLS-WS-003,2026-02-11T18:28:42.378Z,4624,2,jsmith,S-1-5-21-3808099-3733,10.10.2.128,25197,0x0, +SLS-WS-003,2026-02-17T18:27:06.561Z,4624,3,svc_web,S-1-5-21-9305270-8766,10.10.1.136,22145,0x0, +ENG-WS-004,2026-02-10T08:26:08.061Z,4624,10,svc_backup,S-1-5-21-2279444-9118,10.10.2.104,44310,0x0, +ENG-WS-004,2026-02-12T00:57:00.307Z,4624,2,svc_web,S-1-5-21-6090434-5567,10.10.2.113,12176,0x0, +ENG-WS-004,2026-02-11T00:45:39.830Z,4624,10,svc_backup,S-1-5-21-8430643-8102,10.10.3.174,3657,0x0, +ENG-WS-004,2026-02-17T15:12:46.279Z,4624,2,admin,S-1-5-21-4149705-4138,10.10.2.104,29404,0x0, +ENG-WS-004,2026-02-18T06:43:47.330Z,4624,3,fthompson,S-1-5-21-7570269-1515,10.10.3.150,34291,0x0, +ENG-WS-004,2026-02-20T05:13:35.930Z,4625,7,svc_backup,S-1-5-21-4339230-8750,127.0.0.1,58294,0xC000006D,Unknown user name or bad password +ENG-WS-004,2026-02-13T18:09:01.744Z,4624,2,cjohnson,S-1-5-21-5560763-6862,127.0.0.1,14677,0x0, +ENG-WS-004,2026-02-20T07:25:33.789Z,4624,10,admin,S-1-5-21-5796030-2944,10.10.2.173,31546,0x0, +ENG-WS-004,2026-02-20T00:03:03.441Z,4624,2,dlee,S-1-5-21-3319323-2842,10.10.2.104,10169,0x0, +ENG-WS-004,2026-02-15T21:44:22.150Z,4624,3,svc_web,S-1-5-21-9268189-1448,127.0.0.1,53316,0x0, +LEG-WS-005,2026-02-10T12:40:26.340Z,4624,3,svc_web,S-1-5-21-5451705-7893,127.0.0.1,34937,0x0, +LEG-WS-005,2026-02-19T08:41:32.690Z,4625,3,jsmith,S-1-5-21-9417005-9745,127.0.0.1,63445,0xC000006D,Unknown user name or bad password +LEG-WS-005,2026-02-12T09:02:55.135Z,4624,7,fthompson,S-1-5-21-5552039-7077,10.10.3.105,39461,0x0, +LEG-WS-005,2026-02-17T15:03:41.194Z,4625,3,dlee,S-1-5-21-2806126-8581,127.0.0.1,22511,0xC000006D,Unknown user name or bad password +LEG-WS-005,2026-02-12T18:19:23.206Z,4624,7,gwhite,S-1-5-21-6532345-1266,127.0.0.1,10917,0x0, +LEG-WS-005,2026-02-16T11:39:46.886Z,4624,2,svc_web,S-1-5-21-7677978-5543,10.10.3.105,11300,0x0, +LEG-WS-005,2026-02-13T20:41:40.180Z,4624,3,bwilson,S-1-5-21-8293367-2917,127.0.0.1,13335,0x0, +LEG-WS-005,2026-02-13T09:29:21.141Z,4624,10,fthompson,S-1-5-21-1019519-2766,10.10.2.110,13290,0x0, +LEG-WS-005,2026-02-12T19:53:59.159Z,4625,3,jsmith,S-1-5-21-3040063-9757,10.10.1.112,45556,0xC000006D,Unknown user name or bad password +LEG-WS-005,2026-02-15T17:38:14.223Z,4624,7,emartinez,S-1-5-21-7773230-8581,127.0.0.1,55387,0x0, +LEG-WS-005,2026-02-12T18:15:19.465Z,4624,3,bwilson,S-1-5-21-1205625-7487,10.10.3.105,38114,0x0, +LEG-WS-005,2026-02-11T23:34:26.666Z,4624,3,svc_web,S-1-5-21-4762106-2541,127.0.0.1,2313,0x0, +LEG-WS-005,2026-02-11T15:20:56.965Z,4624,3,svc_backup,S-1-5-21-4685024-4605,10.10.3.105,32166,0x0, +LEG-WS-005,2026-02-10T16:35:04.319Z,4624,3,gwhite,S-1-5-21-2024920-3577,10.10.3.105,12784,0x0, +LEG-WS-005,2026-02-17T16:57:36.507Z,4624,3,bwilson,S-1-5-21-2623069-7466,127.0.0.1,26860,0x0, +LEG-WS-005,2026-02-11T05:15:00.878Z,4624,3,svc_backup,S-1-5-21-9427396-1313,10.10.2.119,62860,0x0, +MKT-WS-006,2026-02-13T13:22:28.880Z,4624,7,gwhite,S-1-5-21-2073326-6836,127.0.0.1,10054,0x0, +MKT-WS-006,2026-02-17T21:10:56.560Z,4624,7,hbrown,S-1-5-21-1083837-4243,10.10.1.106,5834,0x0, +MKT-WS-006,2026-02-15T05:52:06.162Z,4624,3,dlee,S-1-5-21-1921338-2304,127.0.0.1,30258,0x0, +MKT-WS-006,2026-02-10T15:48:41.326Z,4624,3,cjohnson,S-1-5-21-8798276-9787,10.10.1.115,17451,0x0, +MKT-WS-006,2026-02-11T20:39:23.507Z,4625,3,svc_web,S-1-5-21-4187907-4492,127.0.0.1,32669,0xC000006D,Unknown user name or bad password +MKT-WS-006,2026-02-17T09:30:07.939Z,4624,3,gwhite,S-1-5-21-4845249-6726,10.10.1.139,23709,0x0, +MKT-WS-006,2026-02-18T04:01:08.559Z,4624,3,svc_web,S-1-5-21-5991033-3175,10.10.1.106,55748,0x0, +MKT-WS-006,2026-02-12T11:47:59.624Z,4624,7,admin,S-1-5-21-1133719-2461,10.10.1.163,52635,0x0, +MKT-WS-006,2026-02-20T01:57:40.061Z,4624,3,jsmith,S-1-5-21-5444125-9514,10.10.1.106,19266,0x0, +MKT-WS-006,2026-02-14T05:30:00.698Z,4624,10,gwhite,S-1-5-21-2199690-1487,127.0.0.1,8737,0x0, +MKT-WS-006,2026-02-15T08:05:06.872Z,4624,10,svc_sql,S-1-5-21-7911891-5306,127.0.0.1,22606,0x0, +MKT-WS-006,2026-02-14T03:51:51.474Z,4624,10,gwhite,S-1-5-21-1316769-7055,127.0.0.1,54076,0x0, +MKT-WS-006,2026-02-10T20:04:20.088Z,4624,3,jsmith,S-1-5-21-4670416-2306,10.10.1.12,25381,0x0, +MKT-WS-006,2026-02-12T00:30:34.330Z,4624,3,hbrown,S-1-5-21-8542373-3791,10.10.3.105,62703,0x0, +MKT-WS-006,2026-02-15T08:21:11.074Z,4625,10,dlee,S-1-5-21-9803912-3486,10.10.1.106,59223,0xC000006D,Unknown user name or bad password +MKT-WS-006,2026-02-20T10:09:10.889Z,4624,3,cjohnson,S-1-5-21-3784502-3339,10.10.1.106,46527,0x0, +MKT-WS-006,2026-02-19T20:27:46.360Z,4624,2,idavis,S-1-5-21-1940266-2494,10.10.1.13,47425,0x0, +MKT-WS-006,2026-02-12T18:45:30.893Z,4624,10,hbrown,S-1-5-21-5489603-3099,10.10.1.106,55249,0x0, +MKT-WS-006,2026-02-17T19:52:28.005Z,4624,10,dlee,S-1-5-21-3488038-3226,10.10.3.129,13857,0x0, +MKT-WS-006,2026-02-10T12:29:50.225Z,4625,3,bwilson,S-1-5-21-8136501-3351,10.10.1.106,41315,0xC000006D,Unknown user name or bad password +MKT-WS-006,2026-02-16T22:20:16.073Z,4624,3,svc_sql,S-1-5-21-5453682-3224,10.10.3.174,13008,0x0, +MKT-WS-006,2026-02-14T18:26:03.878Z,4624,3,cjohnson,S-1-5-21-1659150-8776,127.0.0.1,23546,0x0, +MKT-WS-006,2026-02-20T13:38:55.996Z,4624,3,gwhite,S-1-5-21-9532385-9688,10.10.3.162,30601,0x0, +MKT-WS-006,2026-02-12T22:23:59.716Z,4624,7,cjohnson,S-1-5-21-4328361-5298,10.10.1.151,31369,0x0, +EXEC-WS-007,2026-02-15T22:50:36.596Z,4624,2,cjohnson,S-1-5-21-1817772-5397,127.0.0.1,51044,0x0, +EXEC-WS-007,2026-02-13T21:20:29.571Z,4624,10,svc_web,S-1-5-21-6236593-9866,10.10.3.147,42683,0x0, +EXEC-WS-007,2026-02-11T16:45:59.991Z,4624,10,svc_backup,S-1-5-21-2041652-9922,127.0.0.1,41854,0x0, +EXEC-WS-007,2026-02-11T22:01:05.566Z,4624,7,fthompson,S-1-5-21-3026828-1353,127.0.0.1,32118,0x0, +EXEC-WS-007,2026-02-16T22:02:41.881Z,4624,10,svc_sql,S-1-5-21-3597705-7947,10.10.2.107,28934,0x0, +EXEC-WS-007,2026-02-12T16:00:09.928Z,4624,10,jsmith,S-1-5-21-8048974-4844,127.0.0.1,54180,0x0, +EXEC-WS-007,2026-02-17T00:43:29.125Z,4624,3,jsmith,S-1-5-21-8247060-6832,10.10.2.101,46008,0x0, +EXEC-WS-007,2026-02-15T17:22:20.236Z,4624,3,svc_sql,S-1-5-21-1380006-8560,10.10.1.11,63637,0x0, +EXEC-WS-007,2026-02-15T15:32:46.007Z,4624,3,emartinez,S-1-5-21-9373862-2208,10.10.2.10,50817,0x0, +EXEC-WS-007,2026-02-12T17:35:42.496Z,4624,3,svc_web,S-1-5-21-6949562-2561,10.10.2.107,64708,0x0, +EXEC-WS-007,2026-02-13T01:57:23.207Z,4624,10,cjohnson,S-1-5-21-4854653-5680,127.0.0.1,9011,0x0, +EXEC-WS-007,2026-02-16T04:34:03.577Z,4624,7,emartinez,S-1-5-21-2707106-9098,10.10.2.107,32038,0x0, +EXEC-WS-007,2026-02-12T12:16:12.433Z,4624,3,svc_backup,S-1-5-21-8941925-5647,10.10.2.128,59039,0x0, +EXEC-WS-007,2026-02-13T05:42:04.192Z,4624,3,admin,S-1-5-21-6341748-6943,127.0.0.1,51757,0x0, +EXEC-WS-007,2026-02-16T21:47:27.448Z,4624,2,idavis,S-1-5-21-7991488-2673,10.10.2.107,45906,0x0, +EXEC-WS-007,2026-02-14T05:20:43.965Z,4624,3,jsmith,S-1-5-21-4992937-5226,127.0.0.1,30679,0x0, +EXEC-WS-007,2026-02-19T08:09:20.192Z,4624,3,svc_sql,S-1-5-21-3573316-9200,127.0.0.1,10040,0x0, +EXEC-WS-007,2026-02-14T03:28:41.007Z,4624,3,idavis,S-1-5-21-6900042-6679,127.0.0.1,21813,0x0, +EXEC-WS-007,2026-02-16T00:57:03.650Z,4624,7,svc_web,S-1-5-21-9155982-1463,10.10.3.114,52373,0x0, +EXEC-WS-007,2026-02-10T17:54:41.954Z,4624,3,svc_sql,S-1-5-21-7712117-8670,10.10.2.107,54509,0x0, +EXEC-WS-007,2026-02-13T01:15:33.042Z,4625,3,bwilson,S-1-5-21-4802626-3104,127.0.0.1,13685,0xC000006D,Unknown user name or bad password +EXEC-WS-007,2026-02-19T12:26:42.929Z,4624,3,bwilson,S-1-5-21-1869318-5910,10.10.2.101,62504,0x0, +EXEC-WS-007,2026-02-18T11:51:13.832Z,4624,3,svc_backup,S-1-5-21-9490560-5818,10.10.2.107,53023,0x0, +EXEC-WS-007,2026-02-15T11:31:23.089Z,4624,3,dlee,S-1-5-21-5483682-9004,10.10.3.126,41829,0x0, +EXEC-WS-007,2026-02-14T17:06:21.368Z,4624,3,gwhite,S-1-5-21-8129939-3550,10.10.2.107,20405,0x0, +EXEC-WS-007,2026-02-13T10:02:13.188Z,4624,3,cjohnson,S-1-5-21-2962342-8244,127.0.0.1,8243,0x0, +EXEC-WS-007,2026-02-20T14:37:49.825Z,4624,10,bwilson,S-1-5-21-4322449-6895,10.10.2.107,18432,0x0, +IT-WS-008,2026-02-12T10:28:28.296Z,4625,3,hbrown,S-1-5-21-7851433-3299,10.10.3.132,10786,0xC000006D,Unknown user name or bad password +IT-WS-008,2026-02-10T21:31:28.895Z,4625,10,gwhite,S-1-5-21-4314251-8852,10.10.1.160,43971,0xC000006D,Unknown user name or bad password +IT-WS-008,2026-02-19T22:18:32.049Z,4625,3,svc_sql,S-1-5-21-6757062-7035,127.0.0.1,18267,0xC000006D,Unknown user name or bad password +IT-WS-008,2026-02-18T16:24:20.337Z,4625,2,dlee,S-1-5-21-6158674-6897,127.0.0.1,34240,0xC000006D,Unknown user name or bad password +IT-WS-008,2026-02-12T09:11:13.743Z,4624,3,cjohnson,S-1-5-21-7524533-9087,10.10.3.108,30057,0x0, +IT-WS-008,2026-02-18T20:50:24.357Z,4624,3,dlee,S-1-5-21-5491532-7165,10.10.3.108,58569,0x0, +IT-WS-008,2026-02-20T00:01:26.500Z,4624,2,gwhite,S-1-5-21-6005652-6295,10.10.3.108,12143,0x0, +IT-WS-008,2026-02-19T20:04:46.218Z,4624,3,emartinez,S-1-5-21-1251442-2100,127.0.0.1,15757,0x0, +IT-WS-008,2026-02-14T08:13:15.690Z,4624,7,svc_backup,S-1-5-21-5998365-7303,127.0.0.1,19951,0x0, +IT-WS-008,2026-02-10T20:55:01.008Z,4624,3,dlee,S-1-5-21-6053084-1488,10.10.1.133,8089,0x0, +IT-WS-008,2026-02-18T19:09:50.449Z,4624,10,svc_web,S-1-5-21-3327383-1526,10.10.1.154,1372,0x0, +IT-WS-008,2026-02-13T02:11:01.625Z,4624,7,idavis,S-1-5-21-2103542-2826,127.0.0.1,21635,0x0, +IT-WS-008,2026-02-13T09:07:42.786Z,4624,3,idavis,S-1-5-21-1844222-5103,10.10.1.121,7287,0x0, +IT-WS-008,2026-02-11T22:37:20.815Z,4624,3,hbrown,S-1-5-21-1490304-4581,10.10.2.149,2180,0x0, +IT-WS-008,2026-02-14T02:19:27.785Z,4624,3,admin,S-1-5-21-9323719-9612,10.10.1.133,29961,0x0, +IT-WS-008,2026-02-15T13:02:08.546Z,4624,3,svc_web,S-1-5-21-2435841-4951,10.10.1.157,54909,0x0, +IT-WS-008,2026-02-12T06:35:48.761Z,4624,3,hbrown,S-1-5-21-4668177-2276,10.10.3.108,58210,0x0, +IT-WS-008,2026-02-11T23:52:12.579Z,4624,3,bwilson,S-1-5-21-9715186-4844,127.0.0.1,34391,0x0, +IT-WS-008,2026-02-16T14:55:19.373Z,4624,3,dlee,S-1-5-21-4419227-8487,10.10.1.115,63305,0x0, +IT-WS-008,2026-02-15T14:17:02.334Z,4624,3,idavis,S-1-5-21-4890556-3689,10.10.3.108,38816,0x0, +IT-WS-008,2026-02-16T02:52:36.433Z,4624,10,svc_backup,S-1-5-21-4671157-3022,10.10.2.164,55116,0x0, +IT-WS-008,2026-02-14T07:53:24.244Z,4625,10,svc_backup,S-1-5-21-9357603-2604,10.10.3.108,56005,0xC000006D,Unknown user name or bad password +IT-WS-008,2026-02-12T03:28:14.780Z,4624,2,admin,S-1-5-21-3509729-9976,10.10.2.11,16885,0x0, +IT-WS-008,2026-02-18T08:55:17.050Z,4624,7,hbrown,S-1-5-21-3427625-9580,10.10.1.154,33937,0x0, +IT-WS-008,2026-02-19T12:44:21.151Z,4624,3,gwhite,S-1-5-21-9869585-2741,127.0.0.1,51852,0x0, +IT-WS-008,2026-02-12T19:41:48.246Z,4624,3,svc_backup,S-1-5-21-5951792-1155,10.10.3.108,43916,0x0, +IT-WS-008,2026-02-14T16:26:51.987Z,4624,2,fthompson,S-1-5-21-8119539-8386,127.0.0.1,7676,0x0, +IT-WS-008,2026-02-20T04:06:53.042Z,4625,3,dlee,S-1-5-21-7984309-3065,127.0.0.1,20804,0xC000006D,Unknown user name or bad password +HR-WS-009,2026-02-16T05:59:02.187Z,4624,3,admin,S-1-5-21-5307181-4708,10.10.1.109,9665,0x0, +HR-WS-009,2026-02-19T18:02:36.351Z,4624,3,svc_web,S-1-5-21-2301704-6222,10.10.1.109,59942,0x0, +HR-WS-009,2026-02-15T10:35:42.362Z,4624,3,svc_backup,S-1-5-21-2186365-5665,127.0.0.1,63474,0x0, +HR-WS-009,2026-02-12T04:55:58.438Z,4625,2,svc_web,S-1-5-21-1621681-7028,10.10.1.109,46612,0xC000006D,Unknown user name or bad password +HR-WS-009,2026-02-15T11:45:39.095Z,4624,2,emartinez,S-1-5-21-2117809-5599,10.10.1.109,1905,0x0, +HR-WS-009,2026-02-14T15:30:22.532Z,4624,2,svc_backup,S-1-5-21-1968828-6705,127.0.0.1,27510,0x0, +HR-WS-009,2026-02-10T12:27:57.799Z,4624,3,jsmith,S-1-5-21-7101260-6982,10.10.1.109,12902,0x0, +HR-WS-009,2026-02-14T09:35:22.777Z,4624,3,fthompson,S-1-5-21-1939094-7609,10.10.3.141,33114,0x0, +HR-WS-009,2026-02-15T15:04:11.001Z,4625,3,fthompson,S-1-5-21-4883108-5079,127.0.0.1,20406,0xC000006D,Unknown user name or bad password +HR-WS-009,2026-02-17T19:32:07.967Z,4624,3,jsmith,S-1-5-21-7891796-4937,10.10.3.174,1030,0x0, +HR-WS-009,2026-02-14T02:27:32.798Z,4625,7,svc_backup,S-1-5-21-1869040-4295,10.10.2.152,30034,0xC000006D,Unknown user name or bad password +HR-WS-009,2026-02-20T08:27:30.829Z,4624,3,svc_sql,S-1-5-21-9616867-2864,127.0.0.1,15969,0x0, +HR-WS-009,2026-02-13T11:06:03.191Z,4624,3,jsmith,S-1-5-21-3720295-9477,10.10.2.101,27392,0x0, +HR-WS-009,2026-02-19T08:03:18.912Z,4625,2,agarcia,S-1-5-21-7984409-9789,10.10.3.108,15092,0xC000006D,Unknown user name or bad password +HR-WS-009,2026-02-14T08:09:28.540Z,4624,3,svc_backup,S-1-5-21-4247775-2738,10.10.3.162,59084,0x0, +HR-WS-009,2026-02-17T11:56:02.266Z,4624,2,admin,S-1-5-21-5219983-1839,127.0.0.1,25430,0x0, +HR-WS-009,2026-02-17T13:02:16.614Z,4624,10,fthompson,S-1-5-21-2387976-6243,10.10.1.109,8528,0x0, +HR-WS-009,2026-02-17T11:38:54.436Z,4624,10,agarcia,S-1-5-21-3402474-2013,127.0.0.1,27501,0x0, +HR-WS-009,2026-02-12T15:52:41.647Z,4624,7,gwhite,S-1-5-21-3090270-3898,127.0.0.1,5213,0x0, +HR-WS-009,2026-02-11T05:51:15.146Z,4624,3,svc_backup,S-1-5-21-6694884-9003,10.10.2.170,46791,0x0, +HR-WS-009,2026-02-14T17:09:18.187Z,4625,7,fthompson,S-1-5-21-1548440-8856,10.10.1.106,16857,0xC000006D,Unknown user name or bad password +HR-WS-009,2026-02-15T22:50:39.262Z,4624,10,agarcia,S-1-5-21-4028148-5129,127.0.0.1,58550,0x0, +HR-WS-009,2026-02-12T05:03:09.694Z,4624,2,svc_web,S-1-5-21-4951605-3659,10.10.1.109,10037,0x0, +HR-WS-009,2026-02-12T23:04:19.679Z,4624,10,admin,S-1-5-21-2782194-8323,127.0.0.1,61233,0x0, +HR-WS-009,2026-02-17T02:53:31.613Z,4624,10,svc_sql,S-1-5-21-4103340-2861,10.10.3.114,19943,0x0, +FIN-WS-010,2026-02-17T14:46:31.605Z,4624,2,idavis,S-1-5-21-3174275-9213,10.10.2.110,17167,0x0, +FIN-WS-010,2026-02-19T06:29:33.446Z,4624,3,fthompson,S-1-5-21-7246665-6204,127.0.0.1,59565,0x0, +FIN-WS-010,2026-02-13T14:33:12.600Z,4624,3,svc_sql,S-1-5-21-4159161-8432,127.0.0.1,57903,0x0, +FIN-WS-010,2026-02-11T00:01:04.112Z,4624,3,svc_backup,S-1-5-21-3775576-6296,10.10.3.141,48194,0x0, +FIN-WS-010,2026-02-11T13:46:48.764Z,4624,2,svc_backup,S-1-5-21-7638371-8209,127.0.0.1,47906,0x0, +FIN-WS-010,2026-02-10T08:53:02.177Z,4624,10,fthompson,S-1-5-21-9810780-1546,10.10.1.148,3833,0x0, +FIN-WS-010,2026-02-12T05:50:28.209Z,4624,3,hbrown,S-1-5-21-9766711-5684,10.10.1.151,6582,0x0, +FIN-WS-010,2026-02-20T17:39:10.379Z,4625,3,svc_backup,S-1-5-21-6314222-4299,127.0.0.1,41453,0xC000006D,Unknown user name or bad password +SLS-WS-011,2026-02-18T04:51:27.382Z,4624,3,jsmith,S-1-5-21-9796333-2514,127.0.0.1,17031,0x0, +SLS-WS-011,2026-02-14T16:31:54.137Z,4624,3,svc_sql,S-1-5-21-6318517-7783,10.10.1.10,23535,0x0, +SLS-WS-011,2026-02-10T19:16:44.605Z,4624,10,fthompson,S-1-5-21-1157940-3684,10.10.3.111,62004,0x0, +SLS-WS-011,2026-02-11T09:29:17.323Z,4624,7,cjohnson,S-1-5-21-7566260-8350,10.10.3.111,28525,0x0, +SLS-WS-011,2026-02-18T00:50:08.264Z,4625,3,gwhite,S-1-5-21-6199830-7514,10.10.3.111,18220,0xC000006D,Unknown user name or bad password +SLS-WS-011,2026-02-19T20:18:50.305Z,4624,2,svc_backup,S-1-5-21-2195837-1515,10.10.3.111,18628,0x0, +SLS-WS-011,2026-02-11T02:32:30.088Z,4625,3,svc_sql,S-1-5-21-8653788-5696,10.10.3.111,23808,0xC000006D,Unknown user name or bad password +SLS-WS-011,2026-02-12T04:34:11.026Z,4624,10,idavis,S-1-5-21-5923714-9786,10.10.2.152,38479,0x0, +SLS-WS-011,2026-02-12T06:12:10.910Z,4624,3,admin,S-1-5-21-2067804-6955,10.10.3.111,42040,0x0, +ENG-WS-012,2026-02-16T12:43:22.811Z,4624,3,fthompson,S-1-5-21-7011801-4376,10.10.3.174,46643,0x0, +ENG-WS-012,2026-02-14T10:16:59.288Z,4624,2,fthompson,S-1-5-21-3320209-2960,127.0.0.1,51934,0x0, +ENG-WS-012,2026-02-19T04:56:57.289Z,4625,10,fthompson,S-1-5-21-9821286-7542,127.0.0.1,44111,0xC000006D,Unknown user name or bad password +ENG-WS-012,2026-02-19T04:01:40.291Z,4624,3,hbrown,S-1-5-21-3828230-6757,127.0.0.1,59302,0x0, +ENG-WS-012,2026-02-12T16:59:05.032Z,4624,3,svc_backup,S-1-5-21-9726900-9182,10.10.1.112,32247,0x0, +ENG-WS-012,2026-02-11T00:56:38.491Z,4624,10,jsmith,S-1-5-21-6172625-2015,10.10.3.174,59158,0x0, +ENG-WS-012,2026-02-17T10:38:46.649Z,4624,3,agarcia,S-1-5-21-8114942-4895,10.10.3.147,24547,0x0, +ENG-WS-012,2026-02-10T18:19:30.571Z,4624,2,svc_web,S-1-5-21-3403237-9859,127.0.0.1,13436,0x0, +ENG-WS-012,2026-02-11T12:04:38.437Z,4624,2,jsmith,S-1-5-21-8179382-9264,10.10.1.151,51690,0x0, +ENG-WS-012,2026-02-20T04:59:04.035Z,4624,3,cjohnson,S-1-5-21-4957996-8645,10.10.2.113,25133,0x0, +ENG-WS-012,2026-02-17T23:07:24.671Z,4625,3,fthompson,S-1-5-21-8144562-5305,127.0.0.1,4961,0xC000006D,Unknown user name or bad password +ENG-WS-012,2026-02-12T01:56:23.802Z,4624,2,gwhite,S-1-5-21-1419278-7954,127.0.0.1,13598,0x0, +ENG-WS-012,2026-02-16T23:17:25.577Z,4624,2,emartinez,S-1-5-21-9098208-3790,10.10.3.108,28410,0x0, +ENG-WS-012,2026-02-12T03:41:06.337Z,4624,3,jsmith,S-1-5-21-2657310-4213,10.10.1.112,64379,0x0, +ENG-WS-012,2026-02-10T14:22:59.165Z,4625,10,agarcia,S-1-5-21-4918228-8505,10.10.1.121,63654,0xC000006D,Unknown user name or bad password +ENG-WS-012,2026-02-18T07:11:46.919Z,4624,3,admin,S-1-5-21-6048656-9221,10.10.1.112,65213,0x0, +ENG-WS-012,2026-02-10T16:57:51.069Z,4624,2,cjohnson,S-1-5-21-9937353-4188,127.0.0.1,38215,0x0, +ENG-WS-012,2026-02-11T05:25:56.868Z,4624,7,admin,S-1-5-21-5826541-7128,127.0.0.1,23740,0x0, +ENG-WS-012,2026-02-14T20:32:56.878Z,4624,3,svc_sql,S-1-5-21-6473466-1085,10.10.1.148,58868,0x0, +ENG-WS-012,2026-02-16T16:15:56.988Z,4624,3,gwhite,S-1-5-21-5787951-3575,10.10.1.136,58195,0x0, +LEG-WS-013,2026-02-19T11:12:39.670Z,4624,3,dlee,S-1-5-21-1932781-6595,10.10.2.113,31321,0x0, +LEG-WS-013,2026-02-18T21:35:35.905Z,4624,2,svc_sql,S-1-5-21-3977461-2392,127.0.0.1,43491,0x0, +LEG-WS-013,2026-02-16T11:52:39.471Z,4624,7,svc_web,S-1-5-21-9023658-5234,10.10.2.113,52160,0x0, +LEG-WS-013,2026-02-16T15:50:38.164Z,4624,3,bwilson,S-1-5-21-9538600-1091,10.10.2.113,60757,0x0, +LEG-WS-013,2026-02-17T23:42:37.762Z,4624,3,fthompson,S-1-5-21-5811234-9989,127.0.0.1,34826,0x0, +LEG-WS-013,2026-02-13T21:01:56.663Z,4624,2,jsmith,S-1-5-21-7547013-4050,127.0.0.1,22295,0x0, +LEG-WS-013,2026-02-16T09:54:01.137Z,4624,7,fthompson,S-1-5-21-4109294-7446,127.0.0.1,58012,0x0, +LEG-WS-013,2026-02-15T07:25:51.020Z,4625,10,cjohnson,S-1-5-21-3049176-9550,10.10.2.110,6699,0xC000006D,Unknown user name or bad password +LEG-WS-013,2026-02-12T00:05:57.368Z,4624,2,svc_backup,S-1-5-21-3961380-7726,10.10.2.113,34169,0x0, +LEG-WS-013,2026-02-20T13:07:01.739Z,4624,7,bwilson,S-1-5-21-2846511-8142,127.0.0.1,28916,0x0, +LEG-WS-013,2026-02-18T04:18:57.740Z,4624,2,emartinez,S-1-5-21-6051704-6035,10.10.1.166,57709,0x0, +LEG-WS-013,2026-02-20T07:02:55.960Z,4624,3,agarcia,S-1-5-21-1087922-4382,10.10.2.113,27373,0x0, +LEG-WS-013,2026-02-13T13:30:56.476Z,4624,3,dlee,S-1-5-21-5011577-9363,10.10.2.101,60663,0x0, +MKT-WS-014,2026-02-16T04:43:07.894Z,4624,3,agarcia,S-1-5-21-8362696-9809,10.10.3.168,55831,0x0, +MKT-WS-014,2026-02-18T21:28:00.011Z,4624,2,agarcia,S-1-5-21-6913470-4042,10.10.3.114,5911,0x0, +MKT-WS-014,2026-02-18T17:22:23.602Z,4624,10,bwilson,S-1-5-21-3148683-7300,10.10.3.114,10675,0x0, +MKT-WS-014,2026-02-17T10:20:01.484Z,4624,2,hbrown,S-1-5-21-1491759-3428,10.10.3.114,55139,0x0, +MKT-WS-014,2026-02-20T01:46:32.770Z,4624,3,svc_backup,S-1-5-21-9355747-3298,10.10.1.121,21060,0x0, +MKT-WS-014,2026-02-14T19:30:50.436Z,4625,7,svc_web,S-1-5-21-7062277-4485,10.10.3.114,1754,0xC000006D,Unknown user name or bad password +MKT-WS-014,2026-02-11T00:12:28.551Z,4624,2,admin,S-1-5-21-6675664-5955,10.10.3.114,8742,0x0, +MKT-WS-014,2026-02-14T00:42:24.201Z,4624,3,svc_sql,S-1-5-21-4593391-8521,127.0.0.1,38247,0x0, +MKT-WS-014,2026-02-19T04:06:33.065Z,4624,2,cjohnson,S-1-5-21-2783423-6924,10.10.1.142,58720,0x0, +MKT-WS-014,2026-02-20T05:50:15.372Z,4624,7,agarcia,S-1-5-21-5585246-5162,127.0.0.1,20926,0x0, +MKT-WS-014,2026-02-10T23:10:13.589Z,4624,3,cjohnson,S-1-5-21-2019166-7733,10.10.1.163,32070,0x0, +MKT-WS-014,2026-02-14T12:41:27.112Z,4624,3,cjohnson,S-1-5-21-6774796-7888,10.10.2.101,61143,0x0, +MKT-WS-014,2026-02-12T07:03:13.216Z,4624,2,bwilson,S-1-5-21-2401788-7477,10.10.3.114,20845,0x0, +MKT-WS-014,2026-02-15T01:32:00.170Z,4624,3,bwilson,S-1-5-21-4320237-6683,127.0.0.1,31267,0x0, +MKT-WS-014,2026-02-11T01:26:11.443Z,4624,2,svc_sql,S-1-5-21-8215499-2374,10.10.3.105,30604,0x0, +MKT-WS-014,2026-02-14T17:54:33.998Z,4624,2,hbrown,S-1-5-21-2535606-5588,127.0.0.1,37191,0x0, +MKT-WS-014,2026-02-17T04:34:57.569Z,4624,3,cjohnson,S-1-5-21-8157028-1091,10.10.1.112,8746,0x0, +MKT-WS-014,2026-02-18T21:48:24.747Z,4624,7,gwhite,S-1-5-21-4256351-2227,10.10.3.147,53332,0x0, +MKT-WS-014,2026-02-18T20:54:02.911Z,4624,3,cjohnson,S-1-5-21-8879146-2045,127.0.0.1,8152,0x0, +MKT-WS-014,2026-02-15T20:11:55.693Z,4624,10,emartinez,S-1-5-21-3335346-8349,10.10.3.114,64143,0x0, +MKT-WS-014,2026-02-19T22:17:40.858Z,4624,3,bwilson,S-1-5-21-9192915-6573,10.10.3.114,33895,0x0, +MKT-WS-014,2026-02-17T22:35:55.075Z,4624,7,agarcia,S-1-5-21-5471061-5630,127.0.0.1,40912,0x0, +EXEC-WS-015,2026-02-17T21:04:46.687Z,4625,3,hbrown,S-1-5-21-4583765-5604,10.10.1.115,27512,0xC000006D,Unknown user name or bad password +EXEC-WS-015,2026-02-13T06:42:58.822Z,4624,7,admin,S-1-5-21-8311485-1110,127.0.0.1,40054,0x0, +EXEC-WS-015,2026-02-12T20:56:24.885Z,4624,3,svc_sql,S-1-5-21-7745052-3827,127.0.0.1,5088,0x0, +EXEC-WS-015,2026-02-12T01:43:42.697Z,4624,10,svc_backup,S-1-5-21-8581909-8274,10.10.1.103,50928,0x0, +EXEC-WS-015,2026-02-19T13:57:37.239Z,4624,3,agarcia,S-1-5-21-2171047-7227,10.10.1.124,8687,0x0, +EXEC-WS-015,2026-02-17T00:05:57.073Z,4624,2,fthompson,S-1-5-21-2749186-4519,127.0.0.1,40077,0x0, +EXEC-WS-015,2026-02-14T22:48:59.970Z,4625,2,svc_sql,S-1-5-21-7268432-6320,127.0.0.1,28774,0xC000006D,Unknown user name or bad password +EXEC-WS-015,2026-02-10T13:12:32.352Z,4624,7,gwhite,S-1-5-21-2462272-3592,10.10.1.115,50610,0x0, +EXEC-WS-015,2026-02-17T11:41:21.038Z,4624,3,agarcia,S-1-5-21-5753612-2867,10.10.1.115,54552,0x0, +EXEC-WS-015,2026-02-10T09:09:31.116Z,4624,7,dlee,S-1-5-21-2602679-4386,10.10.2.173,16752,0x0, +EXEC-WS-015,2026-02-12T07:26:44.876Z,4624,3,svc_sql,S-1-5-21-9811141-2635,127.0.0.1,38180,0x0, +EXEC-WS-015,2026-02-18T21:29:07.777Z,4624,3,hbrown,S-1-5-21-8937672-5722,10.10.1.163,38212,0x0, +EXEC-WS-015,2026-02-17T15:34:56.110Z,4624,10,agarcia,S-1-5-21-9334140-2491,127.0.0.1,10516,0x0, +EXEC-WS-015,2026-02-19T21:41:12.524Z,4624,2,svc_backup,S-1-5-21-2010084-1626,10.10.1.115,40591,0x0, +EXEC-WS-015,2026-02-13T14:55:08.833Z,4624,2,agarcia,S-1-5-21-8984214-8834,127.0.0.1,60096,0x0, +EXEC-WS-015,2026-02-13T11:14:35.611Z,4624,7,fthompson,S-1-5-21-1663217-7476,127.0.0.1,7935,0x0, +IT-WS-016,2026-02-16T07:44:28.277Z,4624,3,bwilson,S-1-5-21-7939781-9037,10.10.2.116,30176,0x0, +IT-WS-016,2026-02-19T20:54:04.317Z,4624,3,svc_web,S-1-5-21-7016216-5166,10.10.2.116,2063,0x0, +IT-WS-016,2026-02-17T16:02:03.797Z,4624,3,agarcia,S-1-5-21-2332415-2644,127.0.0.1,29486,0x0, +IT-WS-016,2026-02-18T12:02:18.874Z,4624,2,emartinez,S-1-5-21-9799549-3434,127.0.0.1,15777,0x0, +IT-WS-016,2026-02-17T01:24:30.692Z,4624,7,agarcia,S-1-5-21-8505897-2760,10.10.2.101,59737,0x0, +IT-WS-016,2026-02-10T09:32:24.554Z,4624,10,agarcia,S-1-5-21-8134195-8033,10.10.2.116,48052,0x0, +IT-WS-016,2026-02-14T04:54:01.895Z,4624,2,emartinez,S-1-5-21-6705279-1234,127.0.0.1,18106,0x0, +IT-WS-016,2026-02-10T17:05:56.473Z,4624,10,fthompson,S-1-5-21-8333535-1858,10.10.3.147,23529,0x0, +IT-WS-016,2026-02-13T06:50:03.766Z,4624,3,cjohnson,S-1-5-21-9022072-6009,127.0.0.1,37399,0x0, +IT-WS-016,2026-02-10T10:41:37.952Z,4624,2,idavis,S-1-5-21-8080766-8880,127.0.0.1,6307,0x0, +IT-WS-016,2026-02-12T09:54:51.000Z,4624,3,svc_backup,S-1-5-21-2785246-2883,10.10.2.116,43066,0x0, +IT-WS-016,2026-02-13T03:30:37.003Z,4625,3,admin,S-1-5-21-6205912-6600,10.10.2.116,36055,0xC000006D,Unknown user name or bad password +IT-WS-016,2026-02-19T08:56:22.472Z,4624,3,svc_sql,S-1-5-21-4024682-8268,127.0.0.1,31173,0x0, +IT-WS-016,2026-02-13T22:50:28.741Z,4624,2,svc_web,S-1-5-21-8534012-8111,10.10.2.116,32632,0x0, +IT-WS-016,2026-02-14T02:01:44.860Z,4625,3,bwilson,S-1-5-21-4689677-6827,10.10.2.131,14050,0xC000006D,Unknown user name or bad password +IT-WS-016,2026-02-12T15:33:07.370Z,4624,10,emartinez,S-1-5-21-2331964-5661,10.10.2.116,3913,0x0, +IT-WS-016,2026-02-17T19:42:52.655Z,4624,3,jsmith,S-1-5-21-8767297-9363,127.0.0.1,21581,0x0, +IT-WS-016,2026-02-17T07:44:12.464Z,4624,3,dlee,S-1-5-21-6245989-3933,10.10.2.116,34717,0x0, +IT-WS-016,2026-02-17T00:42:15.911Z,4624,3,fthompson,S-1-5-21-1353946-9330,10.10.2.149,54418,0x0, +IT-WS-016,2026-02-12T23:32:17.934Z,4624,3,fthompson,S-1-5-21-4161718-6259,127.0.0.1,43853,0x0, +HR-WS-017,2026-02-11T19:11:22.724Z,4624,3,fthompson,S-1-5-21-2246253-5940,10.10.3.117,20179,0x0, +HR-WS-017,2026-02-12T04:46:30.483Z,4625,2,hbrown,S-1-5-21-7074818-9448,10.10.1.109,4880,0xC000006D,Unknown user name or bad password +HR-WS-017,2026-02-15T07:38:35.410Z,4624,3,idavis,S-1-5-21-2850215-7661,10.10.3.117,59429,0x0, +HR-WS-017,2026-02-16T06:44:15.915Z,4624,3,admin,S-1-5-21-7519137-2479,10.10.3.153,31590,0x0, +HR-WS-017,2026-02-17T14:37:43.672Z,4624,10,svc_web,S-1-5-21-2386138-4353,10.10.3.165,49035,0x0, +HR-WS-017,2026-02-18T11:34:31.091Z,4624,10,bwilson,S-1-5-21-4554605-4264,10.10.3.117,27379,0x0, +HR-WS-017,2026-02-19T20:10:14.296Z,4624,10,fthompson,S-1-5-21-6715341-5605,10.10.3.117,60689,0x0, +HR-WS-017,2026-02-12T17:59:47.607Z,4624,7,svc_sql,S-1-5-21-5134199-9176,10.10.2.119,39041,0x0, +HR-WS-017,2026-02-10T17:02:03.037Z,4625,2,svc_sql,S-1-5-21-2442073-8132,10.10.3.117,40268,0xC000006D,Unknown user name or bad password +HR-WS-017,2026-02-11T21:24:43.901Z,4624,10,admin,S-1-5-21-1390139-8509,10.10.3.171,60373,0x0, +HR-WS-017,2026-02-12T09:57:38.382Z,4624,7,emartinez,S-1-5-21-6887463-2587,127.0.0.1,58394,0x0, +HR-WS-017,2026-02-19T21:37:35.842Z,4624,3,jsmith,S-1-5-21-8347265-1962,10.10.3.117,30658,0x0, +HR-WS-017,2026-02-11T03:31:50.424Z,4625,2,emartinez,S-1-5-21-2984984-7168,10.10.3.117,40149,0xC000006D,Unknown user name or bad password +HR-WS-017,2026-02-20T13:11:24.838Z,4624,10,emartinez,S-1-5-21-7280479-8296,127.0.0.1,19458,0x0, +HR-WS-017,2026-02-12T23:08:57.350Z,4624,7,agarcia,S-1-5-21-1218988-9205,10.10.2.146,26156,0x0, +HR-WS-017,2026-02-13T07:33:14.428Z,4624,3,agarcia,S-1-5-21-7125602-4727,127.0.0.1,23342,0x0, +HR-WS-017,2026-02-15T21:00:44.606Z,4624,10,agarcia,S-1-5-21-6065542-8381,10.10.3.117,7530,0x0, +HR-WS-017,2026-02-17T09:21:46.983Z,4624,7,dlee,S-1-5-21-1483733-3307,10.10.1.145,57438,0x0, +HR-WS-017,2026-02-12T21:07:35.670Z,4624,2,svc_sql,S-1-5-21-8082569-5641,10.10.3.117,1766,0x0, +HR-WS-017,2026-02-14T08:27:41.768Z,4624,10,svc_web,S-1-5-21-9622009-2074,127.0.0.1,20093,0x0, +HR-WS-017,2026-02-11T03:57:35.954Z,4625,10,fthompson,S-1-5-21-1009086-2636,127.0.0.1,32357,0xC000006D,Unknown user name or bad password +HR-WS-017,2026-02-19T06:58:01.784Z,4624,3,idavis,S-1-5-21-4150949-8583,10.10.3.117,39193,0x0, +HR-WS-017,2026-02-10T14:56:05.954Z,4624,3,emartinez,S-1-5-21-9390108-5246,127.0.0.1,32528,0x0, +HR-WS-017,2026-02-17T19:15:10.271Z,4624,10,idavis,S-1-5-21-1964001-1414,10.10.2.158,20449,0x0, +HR-WS-017,2026-02-17T23:55:14.858Z,4624,7,admin,S-1-5-21-7271644-6296,10.10.3.120,16223,0x0, +HR-WS-017,2026-02-15T04:48:23.806Z,4624,3,svc_backup,S-1-5-21-5728843-6001,10.10.3.117,15738,0x0, +FIN-WS-018,2026-02-11T12:22:26.852Z,4624,3,bwilson,S-1-5-21-5374840-1511,127.0.0.1,58362,0x0, +FIN-WS-018,2026-02-14T12:25:34.166Z,4624,3,dlee,S-1-5-21-6067519-4061,127.0.0.1,10410,0x0, +FIN-WS-018,2026-02-13T22:05:37.378Z,4624,7,idavis,S-1-5-21-4457595-7872,10.10.1.118,51678,0x0, +FIN-WS-018,2026-02-15T10:50:38.236Z,4624,7,svc_sql,S-1-5-21-6418622-5693,127.0.0.1,53445,0x0, +FIN-WS-018,2026-02-18T22:58:48.174Z,4625,3,idavis,S-1-5-21-2898856-3505,127.0.0.1,28270,0xC000006D,Unknown user name or bad password +FIN-WS-018,2026-02-11T21:02:37.301Z,4624,7,bwilson,S-1-5-21-4587174-8821,10.10.1.154,7070,0x0, +FIN-WS-018,2026-02-17T16:54:15.443Z,4624,2,hbrown,S-1-5-21-7710745-4978,127.0.0.1,45686,0x0, +FIN-WS-018,2026-02-16T09:46:19.243Z,4624,3,svc_web,S-1-5-21-2769178-6296,10.10.1.118,51980,0x0, +FIN-WS-018,2026-02-18T00:09:41.050Z,4624,7,svc_web,S-1-5-21-1213081-2683,10.10.1.118,22727,0x0, +SLS-WS-019,2026-02-20T06:47:45.878Z,4624,3,jsmith,S-1-5-21-1836300-7527,10.10.2.119,42289,0x0, +SLS-WS-019,2026-02-11T08:54:40.426Z,4624,10,svc_web,S-1-5-21-5165311-2557,127.0.0.1,45041,0x0, +SLS-WS-019,2026-02-16T16:49:40.298Z,4624,7,hbrown,S-1-5-21-5811859-6630,127.0.0.1,51545,0x0, +SLS-WS-019,2026-02-14T07:05:00.091Z,4624,10,admin,S-1-5-21-2392017-2086,127.0.0.1,46273,0x0, +SLS-WS-019,2026-02-13T21:22:59.320Z,4624,2,dlee,S-1-5-21-2303874-8398,10.10.2.110,59917,0x0, +SLS-WS-019,2026-02-18T11:07:14.335Z,4624,3,jsmith,S-1-5-21-8293639-4284,10.10.3.153,24131,0x0, +SLS-WS-019,2026-02-16T13:54:29.258Z,4624,2,dlee,S-1-5-21-9725662-5976,10.10.2.119,58402,0x0, +SLS-WS-019,2026-02-11T00:06:33.772Z,4625,7,cjohnson,S-1-5-21-6292240-7111,10.10.2.119,61762,0xC000006D,Unknown user name or bad password +SLS-WS-019,2026-02-16T13:24:24.826Z,4624,2,admin,S-1-5-21-6111580-4880,127.0.0.1,28000,0x0, +SLS-WS-019,2026-02-11T21:20:31.876Z,4624,7,cjohnson,S-1-5-21-4841871-4192,10.10.2.119,30999,0x0, +SLS-WS-019,2026-02-13T21:40:41.985Z,4625,2,hbrown,S-1-5-21-1747996-3147,10.10.2.119,48959,0xC000006D,Unknown user name or bad password +SLS-WS-019,2026-02-15T22:57:40.354Z,4624,10,fthompson,S-1-5-21-3851515-7594,10.10.2.119,19738,0x0, +ENG-WS-020,2026-02-19T00:29:32.594Z,4624,3,admin,S-1-5-21-5288978-4567,10.10.3.120,1999,0x0, +ENG-WS-020,2026-02-15T14:41:19.999Z,4624,3,svc_backup,S-1-5-21-8253254-5871,10.10.1.13,42263,0x0, +ENG-WS-020,2026-02-12T06:56:57.162Z,4624,3,svc_backup,S-1-5-21-3916481-1935,127.0.0.1,59101,0x0, +ENG-WS-020,2026-02-11T20:57:29.056Z,4624,2,jsmith,S-1-5-21-7374149-6857,10.10.2.170,37724,0x0, +ENG-WS-020,2026-02-19T07:15:53.615Z,4625,3,hbrown,S-1-5-21-2941495-6784,127.0.0.1,40742,0xC000006D,Unknown user name or bad password +ENG-WS-020,2026-02-11T16:29:07.435Z,4624,10,svc_backup,S-1-5-21-3601188-3829,127.0.0.1,5878,0x0, +ENG-WS-020,2026-02-13T05:00:28.711Z,4624,3,fthompson,S-1-5-21-8738881-7856,127.0.0.1,18153,0x0, +ENG-WS-020,2026-02-20T04:17:19.007Z,4624,10,svc_web,S-1-5-21-2638113-1980,10.10.3.120,34271,0x0, +ENG-WS-020,2026-02-20T01:19:54.124Z,4625,3,gwhite,S-1-5-21-7787000-2605,10.10.3.120,37300,0xC000006D,Unknown user name or bad password +ENG-WS-020,2026-02-12T20:45:37.164Z,4625,7,emartinez,S-1-5-21-6290667-3358,10.10.1.124,20510,0xC000006D,Unknown user name or bad password +ENG-WS-020,2026-02-15T10:04:57.642Z,4624,10,hbrown,S-1-5-21-1923616-4375,10.10.3.120,36396,0x0, +ENG-WS-020,2026-02-18T15:21:09.823Z,4624,3,gwhite,S-1-5-21-1149918-9903,10.10.3.120,64920,0x0, +ENG-WS-020,2026-02-15T07:01:56.634Z,4624,3,bwilson,S-1-5-21-8760846-6857,127.0.0.1,5590,0x0, +ENG-WS-020,2026-02-13T05:11:58.747Z,4624,3,fthompson,S-1-5-21-1228687-9127,10.10.1.12,27472,0x0, +ENG-WS-020,2026-02-19T13:19:31.285Z,4625,3,cjohnson,S-1-5-21-7150899-8305,127.0.0.1,29555,0xC000006D,Unknown user name or bad password +ENG-WS-020,2026-02-14T00:43:58.414Z,4624,2,jsmith,S-1-5-21-5948051-5862,10.10.3.120,27528,0x0, +ENG-WS-020,2026-02-19T03:26:43.299Z,4624,3,dlee,S-1-5-21-3811383-7969,10.10.3.120,40582,0x0, +ENG-WS-020,2026-02-17T06:58:49.359Z,4624,3,agarcia,S-1-5-21-4940309-3824,127.0.0.1,61165,0x0, +ENG-WS-020,2026-02-20T12:10:00.490Z,4625,7,hbrown,S-1-5-21-9174594-2097,10.10.2.152,43533,0xC000006D,Unknown user name or bad password +ENG-WS-020,2026-02-14T06:51:47.734Z,4624,10,svc_web,S-1-5-21-5049683-5816,10.10.3.120,15431,0x0, +ENG-WS-020,2026-02-19T20:30:14.911Z,4624,10,emartinez,S-1-5-21-3104304-8726,10.10.3.120,21048,0x0, +ENG-WS-020,2026-02-15T08:41:33.179Z,4624,3,agarcia,S-1-5-21-1394072-7549,127.0.0.1,10091,0x0, +ENG-WS-020,2026-02-18T03:38:01.461Z,4624,7,bwilson,S-1-5-21-2447184-9871,10.10.3.120,57225,0x0, +ENG-WS-020,2026-02-18T05:49:22.734Z,4624,7,fthompson,S-1-5-21-7225486-8361,10.10.2.173,48380,0x0, +ENG-WS-020,2026-02-11T07:18:03.376Z,4624,10,emartinez,S-1-5-21-5563355-3574,10.10.2.122,64479,0x0, +LEG-WS-021,2026-02-19T11:21:22.922Z,4624,10,idavis,S-1-5-21-9229102-4637,10.10.1.121,3200,0x0, +LEG-WS-021,2026-02-10T12:49:14.478Z,4624,3,bwilson,S-1-5-21-4356305-5137,10.10.3.105,53022,0x0, +LEG-WS-021,2026-02-18T15:09:24.965Z,4624,2,svc_sql,S-1-5-21-5734856-7204,10.10.3.120,54554,0x0, +LEG-WS-021,2026-02-13T18:16:15.588Z,4624,10,jsmith,S-1-5-21-5992984-2316,127.0.0.1,11971,0x0, +LEG-WS-021,2026-02-13T14:38:50.867Z,4624,2,svc_sql,S-1-5-21-4496307-4107,10.10.1.121,8257,0x0, +LEG-WS-021,2026-02-18T23:48:47.592Z,4624,2,emartinez,S-1-5-21-9703774-4310,127.0.0.1,4112,0x0, +LEG-WS-021,2026-02-15T07:43:54.714Z,4624,3,cjohnson,S-1-5-21-7872461-5994,127.0.0.1,18461,0x0, +LEG-WS-021,2026-02-12T03:34:04.867Z,4624,3,admin,S-1-5-21-3121405-4717,10.10.1.121,45081,0x0, +LEG-WS-021,2026-02-14T03:07:33.375Z,4624,2,gwhite,S-1-5-21-9637978-1109,10.10.1.121,32647,0x0, +LEG-WS-021,2026-02-11T14:25:03.104Z,4624,3,idavis,S-1-5-21-7664259-5207,10.10.1.121,4912,0x0, +LEG-WS-021,2026-02-17T09:36:19.502Z,4624,10,jsmith,S-1-5-21-1380927-6015,10.10.2.110,50699,0x0, +LEG-WS-021,2026-02-14T16:53:19.652Z,4624,3,emartinez,S-1-5-21-2465061-5349,127.0.0.1,8314,0x0, +LEG-WS-021,2026-02-13T12:00:52.932Z,4624,3,svc_backup,S-1-5-21-2740182-8180,10.10.1.121,39323,0x0, +MKT-WS-022,2026-02-18T04:54:08.740Z,4624,2,cjohnson,S-1-5-21-2735102-3007,10.10.2.122,4170,0x0, +MKT-WS-022,2026-02-16T03:10:46.151Z,4625,3,hbrown,S-1-5-21-2497096-3963,127.0.0.1,47260,0xC000006D,Unknown user name or bad password +MKT-WS-022,2026-02-14T09:39:03.316Z,4625,7,fthompson,S-1-5-21-7125772-8989,127.0.0.1,10973,0xC000006D,Unknown user name or bad password +MKT-WS-022,2026-02-19T20:47:22.918Z,4625,3,admin,S-1-5-21-4190313-7926,10.10.2.122,59080,0xC000006D,Unknown user name or bad password +MKT-WS-022,2026-02-15T08:44:55.413Z,4625,3,svc_web,S-1-5-21-6615206-8057,127.0.0.1,39301,0xC000006D,Unknown user name or bad password +MKT-WS-022,2026-02-18T03:21:56.076Z,4625,3,fthompson,S-1-5-21-5732268-5172,10.10.2.137,40684,0xC000006D,Unknown user name or bad password +MKT-WS-022,2026-02-18T01:59:35.461Z,4624,7,svc_sql,S-1-5-21-5180854-8502,127.0.0.1,51679,0x0, +MKT-WS-022,2026-02-19T04:53:38.342Z,4624,2,agarcia,S-1-5-21-5088103-5310,127.0.0.1,63446,0x0, +MKT-WS-022,2026-02-10T11:45:28.447Z,4624,3,gwhite,S-1-5-21-9976040-1025,127.0.0.1,30339,0x0, +MKT-WS-022,2026-02-17T22:31:38.844Z,4624,3,svc_sql,S-1-5-21-3565301-9217,10.10.2.122,51143,0x0, +MKT-WS-022,2026-02-18T14:44:32.188Z,4624,3,cjohnson,S-1-5-21-1091941-5161,10.10.2.122,58292,0x0, +MKT-WS-022,2026-02-13T11:28:40.696Z,4624,7,fthompson,S-1-5-21-2077082-4014,10.10.3.132,8868,0x0, +MKT-WS-022,2026-02-10T23:02:14.497Z,4624,3,idavis,S-1-5-21-4297339-7393,127.0.0.1,65279,0x0, +MKT-WS-022,2026-02-16T22:25:32.530Z,4625,3,jsmith,S-1-5-21-3574803-9984,127.0.0.1,31153,0xC000006D,Unknown user name or bad password +MKT-WS-022,2026-02-12T03:17:52.656Z,4624,2,svc_web,S-1-5-21-7836846-3937,10.10.3.162,60093,0x0, +MKT-WS-022,2026-02-19T22:45:14.813Z,4624,7,idavis,S-1-5-21-5758240-3687,10.10.1.124,24421,0x0, +MKT-WS-022,2026-02-17T12:05:59.299Z,4624,3,dlee,S-1-5-21-6675571-7266,10.10.1.166,48333,0x0, +MKT-WS-022,2026-02-12T22:23:27.203Z,4625,3,fthompson,S-1-5-21-2428058-5080,10.10.2.122,14217,0xC000006D,Unknown user name or bad password +MKT-WS-022,2026-02-14T08:17:24.716Z,4624,3,bwilson,S-1-5-21-4226706-8965,10.10.1.139,60347,0x0, +MKT-WS-022,2026-02-20T10:57:18.304Z,4624,3,svc_web,S-1-5-21-1998631-2873,10.10.2.122,21851,0x0, +MKT-WS-022,2026-02-14T00:26:02.382Z,4624,3,jsmith,S-1-5-21-3803287-1316,10.10.3.156,56308,0x0, +MKT-WS-022,2026-02-10T17:43:28.428Z,4624,3,svc_sql,S-1-5-21-3411791-2862,10.10.3.168,21001,0x0, +MKT-WS-022,2026-02-13T06:36:40.811Z,4624,3,fthompson,S-1-5-21-9901055-7446,10.10.3.141,39919,0x0, +MKT-WS-022,2026-02-12T01:55:30.714Z,4624,3,fthompson,S-1-5-21-3703248-1933,10.10.2.122,20918,0x0, +MKT-WS-022,2026-02-11T06:13:04.452Z,4624,3,admin,S-1-5-21-2111747-5547,10.10.2.110,61475,0x0, +EXEC-WS-023,2026-02-19T01:32:26.339Z,4624,10,fthompson,S-1-5-21-7090864-8792,10.10.3.138,44960,0x0, +EXEC-WS-023,2026-02-20T15:56:32.825Z,4624,3,jsmith,S-1-5-21-7267480-1291,127.0.0.1,64055,0x0, +EXEC-WS-023,2026-02-16T20:08:54.477Z,4625,2,dlee,S-1-5-21-5644971-3505,127.0.0.1,33900,0xC000006D,Unknown user name or bad password +EXEC-WS-023,2026-02-15T22:43:05.558Z,4624,3,cjohnson,S-1-5-21-9735881-4175,10.10.1.112,45162,0x0, +EXEC-WS-023,2026-02-13T00:32:42.070Z,4624,3,dlee,S-1-5-21-8393177-4446,127.0.0.1,36200,0x0, +EXEC-WS-023,2026-02-18T08:01:47.435Z,4624,10,fthompson,S-1-5-21-2272998-1519,10.10.1.109,31714,0x0, +EXEC-WS-023,2026-02-16T17:50:15.581Z,4625,7,admin,S-1-5-21-6927917-5242,10.10.3.123,61200,0xC000006D,Unknown user name or bad password +EXEC-WS-023,2026-02-16T17:45:33.400Z,4625,3,agarcia,S-1-5-21-7006682-7642,10.10.3.147,53276,0xC000006D,Unknown user name or bad password +EXEC-WS-023,2026-02-12T06:11:42.585Z,4624,3,svc_web,S-1-5-21-9091769-9507,10.10.1.142,50778,0x0, +EXEC-WS-023,2026-02-14T05:53:32.467Z,4625,7,jsmith,S-1-5-21-7708009-9020,127.0.0.1,45882,0xC000006D,Unknown user name or bad password +EXEC-WS-023,2026-02-15T14:26:54.229Z,4624,7,dlee,S-1-5-21-4183733-9316,127.0.0.1,3540,0x0, +EXEC-WS-023,2026-02-12T13:17:47.182Z,4624,3,svc_web,S-1-5-21-7307167-6529,10.10.3.126,43456,0x0, +EXEC-WS-023,2026-02-15T14:32:14.299Z,4625,3,bwilson,S-1-5-21-3076464-6751,10.10.2.161,1863,0xC000006D,Unknown user name or bad password +EXEC-WS-023,2026-02-12T01:38:23.423Z,4625,3,emartinez,S-1-5-21-1886193-8949,10.10.3.123,30304,0xC000006D,Unknown user name or bad password +EXEC-WS-023,2026-02-10T21:09:42.299Z,4624,7,hbrown,S-1-5-21-8715427-3385,127.0.0.1,33778,0x0, +EXEC-WS-023,2026-02-13T10:35:52.115Z,4624,7,hbrown,S-1-5-21-9668340-1577,10.10.3.156,48202,0x0, +EXEC-WS-023,2026-02-11T10:30:26.487Z,4624,3,hbrown,S-1-5-21-1538030-4153,127.0.0.1,1271,0x0, +EXEC-WS-023,2026-02-11T04:40:05.321Z,4625,2,admin,S-1-5-21-3815805-9744,10.10.2.131,16666,0xC000006D,Unknown user name or bad password +EXEC-WS-023,2026-02-11T21:34:21.926Z,4624,3,jsmith,S-1-5-21-4163103-8025,10.10.3.123,55405,0x0, +IT-WS-024,2026-02-17T11:54:02.271Z,4624,3,idavis,S-1-5-21-5782386-5098,10.10.3.129,45522,0x0, +IT-WS-024,2026-02-13T20:05:22.354Z,4624,7,cjohnson,S-1-5-21-9487256-5121,10.10.1.124,39137,0x0, +IT-WS-024,2026-02-11T17:31:11.348Z,4624,3,agarcia,S-1-5-21-9551683-3333,10.10.1.124,51243,0x0, +IT-WS-024,2026-02-20T05:53:54.786Z,4625,3,emartinez,S-1-5-21-5619735-5300,10.10.1.124,4402,0xC000006D,Unknown user name or bad password +IT-WS-024,2026-02-15T00:08:37.536Z,4624,3,svc_backup,S-1-5-21-9776738-4879,10.10.3.105,31381,0x0, +IT-WS-024,2026-02-14T08:23:46.004Z,4624,3,idavis,S-1-5-21-9271912-7809,127.0.0.1,62455,0x0, +IT-WS-024,2026-02-15T02:17:37.502Z,4624,2,bwilson,S-1-5-21-3328164-3590,10.10.1.124,3404,0x0, +IT-WS-024,2026-02-10T13:49:32.177Z,4624,3,jsmith,S-1-5-21-7094698-8805,10.10.1.160,4733,0x0, +IT-WS-024,2026-02-15T06:00:11.387Z,4624,10,svc_web,S-1-5-21-1621861-3820,10.10.1.124,41353,0x0, +IT-WS-024,2026-02-12T00:13:01.645Z,4625,2,gwhite,S-1-5-21-2339841-7541,10.10.1.124,2673,0xC000006D,Unknown user name or bad password +IT-WS-024,2026-02-18T14:10:46.841Z,4624,3,idavis,S-1-5-21-3749751-7853,10.10.1.124,56385,0x0, +IT-WS-024,2026-02-16T04:49:18.189Z,4624,2,jsmith,S-1-5-21-2105148-6934,127.0.0.1,25918,0x0, +IT-WS-024,2026-02-13T05:42:25.302Z,4625,3,svc_web,S-1-5-21-8558489-2645,10.10.1.124,54139,0xC000006D,Unknown user name or bad password +IT-WS-024,2026-02-16T11:27:44.312Z,4624,3,emartinez,S-1-5-21-3469657-9067,10.10.1.124,50072,0x0, +IT-WS-024,2026-02-11T21:58:25.729Z,4624,10,hbrown,S-1-5-21-3596819-8119,10.10.2.113,35028,0x0, +HR-WS-025,2026-02-15T08:24:29.142Z,4624,10,svc_web,S-1-5-21-2545175-5390,10.10.1.112,2424,0x0, +HR-WS-025,2026-02-11T14:03:23.712Z,4624,3,bwilson,S-1-5-21-3401725-5054,10.10.1.139,23183,0x0, +HR-WS-025,2026-02-13T18:20:44.958Z,4624,10,cjohnson,S-1-5-21-3592290-6087,127.0.0.1,50730,0x0, +HR-WS-025,2026-02-17T01:23:21.796Z,4624,3,cjohnson,S-1-5-21-4191962-2091,10.10.3.159,48334,0x0, +HR-WS-025,2026-02-16T23:36:16.722Z,4624,2,jsmith,S-1-5-21-8234550-1765,10.10.2.170,21429,0x0, +HR-WS-025,2026-02-13T22:36:22.955Z,4625,3,agarcia,S-1-5-21-6066183-2125,10.10.2.164,30479,0xC000006D,Unknown user name or bad password +HR-WS-025,2026-02-12T17:55:21.675Z,4624,10,emartinez,S-1-5-21-8164974-6450,10.10.2.125,63152,0x0, +HR-WS-025,2026-02-18T20:31:06.154Z,4625,10,dlee,S-1-5-21-8191165-1452,10.10.2.125,6559,0xC000006D,Unknown user name or bad password +HR-WS-025,2026-02-18T15:36:14.847Z,4624,3,jsmith,S-1-5-21-4338582-7738,10.10.1.133,39211,0x0, +HR-WS-025,2026-02-14T02:30:39.681Z,4624,3,fthompson,S-1-5-21-7698126-4759,10.10.2.125,23103,0x0, +HR-WS-025,2026-02-13T14:13:19.010Z,4624,2,emartinez,S-1-5-21-9852910-8050,10.10.2.125,16888,0x0, +HR-WS-025,2026-02-20T15:36:57.794Z,4624,10,bwilson,S-1-5-21-3714050-2067,10.10.2.125,44988,0x0, +HR-WS-025,2026-02-15T19:21:23.845Z,4624,10,svc_web,S-1-5-21-2300057-3305,10.10.1.12,56250,0x0, +HR-WS-025,2026-02-17T22:36:19.499Z,4624,10,cjohnson,S-1-5-21-8222847-5204,10.10.2.125,44685,0x0, +HR-WS-025,2026-02-12T22:55:11.244Z,4624,3,hbrown,S-1-5-21-3626959-6968,10.10.2.125,46117,0x0, +HR-WS-025,2026-02-17T16:15:31.320Z,4624,3,svc_web,S-1-5-21-1980024-4627,10.10.1.169,65325,0x0, +HR-WS-025,2026-02-13T16:01:36.509Z,4624,3,bwilson,S-1-5-21-7871497-9202,10.10.3.135,35957,0x0, +HR-WS-025,2026-02-14T11:12:48.833Z,4624,3,emartinez,S-1-5-21-9374001-8853,10.10.1.112,13339,0x0, +HR-WS-025,2026-02-18T15:00:58.009Z,4625,10,fthompson,S-1-5-21-9595817-9738,10.10.2.125,61065,0xC000006D,Unknown user name or bad password +HR-WS-025,2026-02-19T17:41:34.368Z,4624,3,svc_backup,S-1-5-21-8570903-2731,127.0.0.1,40551,0x0, +HR-WS-025,2026-02-10T10:57:39.471Z,4624,2,svc_backup,S-1-5-21-3437782-4799,10.10.2.125,51641,0x0, +HR-WS-025,2026-02-19T21:20:44.753Z,4624,3,fthompson,S-1-5-21-3913505-3648,10.10.1.163,32490,0x0, +HR-WS-025,2026-02-12T13:36:37.456Z,4624,10,bwilson,S-1-5-21-3809560-1107,10.10.2.125,31240,0x0, +HR-WS-025,2026-02-11T13:14:35.393Z,4624,3,svc_backup,S-1-5-21-2203222-6807,127.0.0.1,22144,0x0, +FIN-WS-026,2026-02-14T08:17:00.487Z,4624,7,svc_web,S-1-5-21-7932022-2651,10.10.2.134,49709,0x0, +FIN-WS-026,2026-02-12T03:28:13.490Z,4625,2,agarcia,S-1-5-21-2277677-1400,127.0.0.1,41081,0xC000006D,Unknown user name or bad password +FIN-WS-026,2026-02-19T14:19:49.027Z,4625,3,svc_backup,S-1-5-21-5859633-6845,127.0.0.1,4085,0xC000006D,Unknown user name or bad password +FIN-WS-026,2026-02-15T09:22:05.021Z,4624,7,idavis,S-1-5-21-1863951-9554,127.0.0.1,38623,0x0, +FIN-WS-026,2026-02-18T17:15:42.854Z,4624,10,svc_backup,S-1-5-21-3102308-3666,10.10.2.113,11809,0x0, +FIN-WS-026,2026-02-12T04:24:29.188Z,4624,3,jsmith,S-1-5-21-2549781-8090,127.0.0.1,29668,0x0, +FIN-WS-026,2026-02-12T05:06:32.458Z,4625,7,cjohnson,S-1-5-21-6701437-2001,10.10.3.126,48021,0xC000006D,Unknown user name or bad password +FIN-WS-026,2026-02-10T15:16:48.640Z,4624,3,dlee,S-1-5-21-2525797-7056,10.10.3.126,53744,0x0, +FIN-WS-026,2026-02-15T06:32:57.261Z,4624,2,fthompson,S-1-5-21-7502391-6330,10.10.3.126,34684,0x0, +FIN-WS-026,2026-02-19T23:56:07.961Z,4624,2,idavis,S-1-5-21-8051842-5980,10.10.3.126,58892,0x0, +FIN-WS-026,2026-02-17T19:33:38.615Z,4624,10,emartinez,S-1-5-21-7539249-6990,10.10.1.103,26712,0x0, +FIN-WS-026,2026-02-14T04:02:19.187Z,4624,3,hbrown,S-1-5-21-8492127-2463,10.10.1.145,64400,0x0, +FIN-WS-026,2026-02-11T01:27:58.199Z,4624,7,bwilson,S-1-5-21-5506324-2896,10.10.2.122,43284,0x0, +FIN-WS-026,2026-02-13T16:51:59.073Z,4624,3,svc_sql,S-1-5-21-4564367-1367,127.0.0.1,19606,0x0, +FIN-WS-026,2026-02-11T10:21:47.832Z,4624,2,dlee,S-1-5-21-2905583-8567,10.10.3.138,28744,0x0, +FIN-WS-026,2026-02-18T08:15:47.028Z,4625,3,emartinez,S-1-5-21-8893015-1517,127.0.0.1,4221,0xC000006D,Unknown user name or bad password +FIN-WS-026,2026-02-15T15:02:28.043Z,4624,7,hbrown,S-1-5-21-4030438-4454,127.0.0.1,59079,0x0, +FIN-WS-026,2026-02-14T13:21:10.006Z,4624,10,idavis,S-1-5-21-1436348-8812,10.10.3.126,54112,0x0, +FIN-WS-026,2026-02-11T22:54:25.589Z,4624,3,fthompson,S-1-5-21-1529339-1928,10.10.3.10,25604,0x0, +FIN-WS-026,2026-02-18T21:57:06.459Z,4624,3,admin,S-1-5-21-6210346-3541,127.0.0.1,35062,0x0, +FIN-WS-026,2026-02-16T10:31:48.384Z,4624,3,idavis,S-1-5-21-7775766-4903,10.10.3.126,59242,0x0, +FIN-WS-026,2026-02-15T16:32:15.922Z,4625,3,svc_web,S-1-5-21-1319752-6216,127.0.0.1,9699,0xC000006D,Unknown user name or bad password +FIN-WS-026,2026-02-20T11:12:51.416Z,4624,10,hbrown,S-1-5-21-5116851-6423,10.10.3.126,18373,0x0, +SLS-WS-027,2026-02-13T06:52:38.823Z,4624,10,svc_web,S-1-5-21-3236063-6137,10.10.1.127,53113,0x0, +SLS-WS-027,2026-02-18T12:59:25.236Z,4624,7,bwilson,S-1-5-21-6797538-3521,127.0.0.1,52926,0x0, +SLS-WS-027,2026-02-19T04:51:02.722Z,4625,7,admin,S-1-5-21-9324486-7572,10.10.1.127,22167,0xC000006D,Unknown user name or bad password +SLS-WS-027,2026-02-10T15:06:15.711Z,4624,7,hbrown,S-1-5-21-4821478-5320,10.10.2.119,7388,0x0, +SLS-WS-027,2026-02-12T12:27:40.181Z,4624,3,svc_backup,S-1-5-21-4200053-7399,127.0.0.1,27350,0x0, +SLS-WS-027,2026-02-14T22:14:57.751Z,4624,7,emartinez,S-1-5-21-9589299-3621,10.10.1.127,61087,0x0, +SLS-WS-027,2026-02-10T12:07:29.412Z,4625,2,emartinez,S-1-5-21-8806863-2649,10.10.2.173,28876,0xC000006D,Unknown user name or bad password +SLS-WS-027,2026-02-15T09:42:24.262Z,4624,10,hbrown,S-1-5-21-3480000-1697,10.10.1.148,25393,0x0, +SLS-WS-027,2026-02-15T17:04:20.303Z,4624,3,idavis,S-1-5-21-5433058-3526,127.0.0.1,64202,0x0, +SLS-WS-027,2026-02-14T15:15:37.900Z,4625,7,bwilson,S-1-5-21-8676648-3645,127.0.0.1,25658,0xC000006D,Unknown user name or bad password +SLS-WS-027,2026-02-11T09:10:07.647Z,4625,10,agarcia,S-1-5-21-3955429-4172,127.0.0.1,53637,0xC000006D,Unknown user name or bad password +SLS-WS-027,2026-02-18T10:17:06.037Z,4625,2,emartinez,S-1-5-21-5183363-4652,127.0.0.1,21627,0xC000006D,Unknown user name or bad password +SLS-WS-027,2026-02-18T07:11:54.215Z,4624,7,bwilson,S-1-5-21-6989565-4403,127.0.0.1,42244,0x0, +SLS-WS-027,2026-02-20T13:45:48.867Z,4625,3,fthompson,S-1-5-21-3033894-2118,10.10.1.127,41563,0xC000006D,Unknown user name or bad password +SLS-WS-027,2026-02-12T08:55:00.489Z,4624,3,cjohnson,S-1-5-21-7078036-7577,127.0.0.1,16559,0x0, +SLS-WS-027,2026-02-20T10:39:25.498Z,4625,3,emartinez,S-1-5-21-5031706-2437,127.0.0.1,54398,0xC000006D,Unknown user name or bad password +SLS-WS-027,2026-02-17T02:50:30.008Z,4625,3,cjohnson,S-1-5-21-6063571-3774,10.10.1.145,41649,0xC000006D,Unknown user name or bad password +SLS-WS-027,2026-02-12T04:44:08.507Z,4624,10,svc_sql,S-1-5-21-7732191-2144,127.0.0.1,59860,0x0, +SLS-WS-027,2026-02-11T16:47:57.667Z,4624,2,dlee,S-1-5-21-5196499-3785,10.10.3.132,53324,0x0, +SLS-WS-027,2026-02-16T16:01:37.262Z,4624,3,svc_sql,S-1-5-21-8209451-9636,127.0.0.1,18096,0x0, +SLS-WS-027,2026-02-19T11:47:39.980Z,4625,7,idavis,S-1-5-21-1232296-7157,10.10.1.127,45116,0xC000006D,Unknown user name or bad password +SLS-WS-027,2026-02-17T22:56:16.976Z,4624,3,svc_web,S-1-5-21-7344666-4426,10.10.1.127,51721,0x0, +SLS-WS-027,2026-02-14T07:09:15.727Z,4624,3,svc_web,S-1-5-21-8192319-3557,10.10.2.140,22121,0x0, +SLS-WS-027,2026-02-11T09:35:31.570Z,4624,3,bwilson,S-1-5-21-7399655-5959,10.10.1.13,49939,0x0, +ENG-WS-028,2026-02-16T17:32:58.212Z,4624,3,admin,S-1-5-21-4164188-9828,10.10.2.128,64669,0x0, +ENG-WS-028,2026-02-14T23:22:29.281Z,4624,3,dlee,S-1-5-21-8579580-6828,10.10.2.104,6875,0x0, +ENG-WS-028,2026-02-14T07:57:35.097Z,4624,3,svc_backup,S-1-5-21-9667632-6163,10.10.3.141,58079,0x0, +ENG-WS-028,2026-02-19T11:57:45.201Z,4624,7,cjohnson,S-1-5-21-7841342-8887,10.10.2.128,13786,0x0, +ENG-WS-028,2026-02-15T01:11:52.487Z,4625,2,dlee,S-1-5-21-8940864-9867,10.10.2.158,43568,0xC000006D,Unknown user name or bad password +ENG-WS-028,2026-02-12T12:13:09.449Z,4624,3,jsmith,S-1-5-21-9854882-5609,127.0.0.1,49769,0x0, +ENG-WS-028,2026-02-11T08:02:40.759Z,4624,2,cjohnson,S-1-5-21-4347403-5862,10.10.2.128,41286,0x0, +ENG-WS-028,2026-02-16T13:43:22.193Z,4624,3,bwilson,S-1-5-21-7812866-2102,10.10.2.143,56508,0x0, +ENG-WS-028,2026-02-11T15:29:44.466Z,4625,3,svc_backup,S-1-5-21-6963677-4831,10.10.2.128,49596,0xC000006D,Unknown user name or bad password +ENG-WS-028,2026-02-16T08:54:02.523Z,4624,3,cjohnson,S-1-5-21-5097355-3811,10.10.3.153,34415,0x0, +ENG-WS-028,2026-02-11T16:41:36.742Z,4625,2,fthompson,S-1-5-21-9781094-2766,10.10.2.128,8199,0xC000006D,Unknown user name or bad password +ENG-WS-028,2026-02-17T14:07:25.870Z,4625,3,admin,S-1-5-21-4229394-3491,127.0.0.1,37060,0xC000006D,Unknown user name or bad password +ENG-WS-028,2026-02-17T02:55:12.039Z,4624,3,emartinez,S-1-5-21-5888134-5823,10.10.1.142,21168,0x0, +ENG-WS-028,2026-02-14T04:43:48.978Z,4624,3,fthompson,S-1-5-21-4798759-7122,10.10.2.128,17440,0x0, +ENG-WS-028,2026-02-17T23:32:31.042Z,4624,2,svc_backup,S-1-5-21-8755717-9997,10.10.2.128,56122,0x0, +ENG-WS-028,2026-02-11T15:07:41.192Z,4624,3,fthompson,S-1-5-21-1033108-2612,10.10.2.128,54000,0x0, +ENG-WS-028,2026-02-19T10:47:15.606Z,4624,7,dlee,S-1-5-21-6144940-7830,10.10.2.128,35831,0x0, +ENG-WS-028,2026-02-19T03:25:01.144Z,4625,2,fthompson,S-1-5-21-7637826-2139,10.10.3.129,48855,0xC000006D,Unknown user name or bad password +ENG-WS-028,2026-02-10T21:29:20.323Z,4624,7,svc_backup,S-1-5-21-6303902-4757,127.0.0.1,30786,0x0, +ENG-WS-028,2026-02-12T13:10:10.689Z,4625,3,svc_web,S-1-5-21-2700394-1984,10.10.2.128,22902,0xC000006D,Unknown user name or bad password +LEG-WS-029,2026-02-16T15:24:04.816Z,4624,2,fthompson,S-1-5-21-4777107-2423,127.0.0.1,47495,0x0, +LEG-WS-029,2026-02-14T20:47:48.040Z,4625,3,emartinez,S-1-5-21-8928446-5902,127.0.0.1,43712,0xC000006D,Unknown user name or bad password +LEG-WS-029,2026-02-15T17:48:55.743Z,4625,3,dlee,S-1-5-21-3438609-2532,10.10.2.158,35364,0xC000006D,Unknown user name or bad password +LEG-WS-029,2026-02-14T19:27:16.604Z,4624,7,dlee,S-1-5-21-6310447-8954,127.0.0.1,1470,0x0, +LEG-WS-029,2026-02-13T22:22:23.483Z,4624,3,dlee,S-1-5-21-8637550-9118,127.0.0.1,52021,0x0, +LEG-WS-029,2026-02-18T03:46:15.080Z,4624,3,jsmith,S-1-5-21-8166267-2783,127.0.0.1,56029,0x0, +LEG-WS-029,2026-02-14T03:35:57.130Z,4625,3,svc_backup,S-1-5-21-7260535-3034,10.10.3.129,60517,0xC000006D,Unknown user name or bad password +LEG-WS-029,2026-02-12T09:14:09.652Z,4624,3,dlee,S-1-5-21-2066748-6882,10.10.3.129,4328,0x0, +LEG-WS-029,2026-02-17T06:03:10.190Z,4624,3,gwhite,S-1-5-21-5289076-8684,10.10.1.163,58920,0x0, +LEG-WS-029,2026-02-15T17:33:27.257Z,4624,10,gwhite,S-1-5-21-7948133-1337,127.0.0.1,1565,0x0, +LEG-WS-029,2026-02-14T05:52:02.041Z,4624,3,svc_sql,S-1-5-21-4855658-2241,10.10.3.129,54016,0x0, +LEG-WS-029,2026-02-11T17:09:02.702Z,4624,3,gwhite,S-1-5-21-3556836-1814,127.0.0.1,20490,0x0, +LEG-WS-029,2026-02-14T17:24:40.620Z,4624,3,dlee,S-1-5-21-1731137-8981,10.10.2.116,12253,0x0, +LEG-WS-029,2026-02-14T00:17:00.332Z,4625,3,idavis,S-1-5-21-4229892-5683,127.0.0.1,22556,0xC000006D,Unknown user name or bad password +LEG-WS-029,2026-02-13T09:55:53.547Z,4624,7,fthompson,S-1-5-21-9853017-3949,10.10.3.129,43478,0x0, +LEG-WS-029,2026-02-12T10:05:53.318Z,4624,10,gwhite,S-1-5-21-9806630-5118,127.0.0.1,42864,0x0, +LEG-WS-029,2026-02-11T20:20:44.532Z,4624,3,cjohnson,S-1-5-21-5485134-9329,10.10.2.125,64712,0x0, +LEG-WS-029,2026-02-18T21:50:48.727Z,4625,2,svc_sql,S-1-5-21-1484029-4366,10.10.3.129,37559,0xC000006D,Unknown user name or bad password +LEG-WS-029,2026-02-17T05:30:27.189Z,4624,3,fthompson,S-1-5-21-6198949-8610,127.0.0.1,13548,0x0, +LEG-WS-029,2026-02-17T07:18:34.129Z,4624,3,svc_web,S-1-5-21-4354895-4673,10.10.3.129,61569,0x0, +LEG-WS-029,2026-02-11T10:16:37.401Z,4625,3,emartinez,S-1-5-21-4953001-5240,10.10.3.129,48139,0xC000006D,Unknown user name or bad password +LEG-WS-029,2026-02-11T10:44:20.346Z,4624,7,svc_backup,S-1-5-21-6655044-4349,10.10.3.129,4725,0x0, +LEG-WS-029,2026-02-20T13:28:46.573Z,4624,3,svc_sql,S-1-5-21-1864415-1487,10.10.3.129,12451,0x0, +LEG-WS-029,2026-02-14T22:10:29.287Z,4624,3,jsmith,S-1-5-21-5067752-8856,127.0.0.1,44245,0x0, +LEG-WS-029,2026-02-18T05:53:47.897Z,4624,7,emartinez,S-1-5-21-6132903-7444,10.10.3.129,51098,0x0, +LEG-WS-029,2026-02-12T08:17:43.211Z,4624,3,svc_web,S-1-5-21-6618387-8764,127.0.0.1,47991,0x0, +LEG-WS-029,2026-02-19T23:35:23.330Z,4624,3,svc_web,S-1-5-21-4001826-2706,10.10.3.129,48260,0x0, +LEG-WS-029,2026-02-19T06:41:07.115Z,4624,3,jsmith,S-1-5-21-3699576-2167,127.0.0.1,16052,0x0, +LEG-WS-029,2026-02-10T09:43:49.357Z,4624,3,fthompson,S-1-5-21-2787080-7447,127.0.0.1,62132,0x0, +LEG-WS-029,2026-02-14T22:35:40.961Z,4624,3,hbrown,S-1-5-21-5057136-2023,10.10.3.129,63992,0x0, +MKT-WS-030,2026-02-10T15:50:46.969Z,4624,3,emartinez,S-1-5-21-8129406-2574,10.10.1.142,52665,0x0, +MKT-WS-030,2026-02-15T16:24:07.547Z,4624,3,jsmith,S-1-5-21-7054454-1335,10.10.3.168,45060,0x0, +MKT-WS-030,2026-02-20T00:58:50.874Z,4624,2,admin,S-1-5-21-3855691-1536,10.10.2.158,46565,0x0, +MKT-WS-030,2026-02-11T23:27:12.964Z,4625,3,svc_sql,S-1-5-21-8702406-9936,10.10.1.106,61435,0xC000006D,Unknown user name or bad password +MKT-WS-030,2026-02-15T14:57:44.481Z,4624,3,svc_backup,S-1-5-21-7081272-3325,127.0.0.1,23420,0x0, +MKT-WS-030,2026-02-17T22:34:45.488Z,4625,7,fthompson,S-1-5-21-8184051-5992,10.10.1.130,29593,0xC000006D,Unknown user name or bad password +MKT-WS-030,2026-02-18T07:11:28.007Z,4625,10,bwilson,S-1-5-21-2853878-4900,10.10.1.130,18360,0xC000006D,Unknown user name or bad password +MKT-WS-030,2026-02-14T01:22:05.112Z,4625,3,idavis,S-1-5-21-6951575-7066,10.10.2.119,57761,0xC000006D,Unknown user name or bad password +MKT-WS-030,2026-02-11T06:53:46.874Z,4624,3,svc_web,S-1-5-21-9210174-3209,10.10.1.130,9556,0x0, +MKT-WS-030,2026-02-15T02:35:20.270Z,4624,7,jsmith,S-1-5-21-7049059-8507,127.0.0.1,13495,0x0, +MKT-WS-030,2026-02-13T14:15:54.768Z,4624,3,svc_sql,S-1-5-21-6446885-4610,10.10.1.13,9780,0x0, +MKT-WS-030,2026-02-16T11:20:04.149Z,4624,3,fthompson,S-1-5-21-7746477-9092,127.0.0.1,25986,0x0, +MKT-WS-030,2026-02-12T16:39:12.587Z,4624,3,fthompson,S-1-5-21-7853646-6522,10.10.3.111,17730,0x0, +MKT-WS-030,2026-02-18T06:41:30.602Z,4624,3,cjohnson,S-1-5-21-9620717-8509,10.10.1.142,50221,0x0, +MKT-WS-030,2026-02-11T18:50:53.658Z,4624,3,bwilson,S-1-5-21-4366889-1278,10.10.1.130,20135,0x0, +MKT-WS-030,2026-02-19T11:36:30.635Z,4624,2,agarcia,S-1-5-21-2550626-3384,10.10.1.130,51615,0x0, +MKT-WS-030,2026-02-11T13:07:10.045Z,4624,7,emartinez,S-1-5-21-3737014-3263,10.10.1.130,22342,0x0, +MKT-WS-030,2026-02-15T19:37:21.723Z,4624,10,admin,S-1-5-21-5454648-3490,10.10.1.130,40569,0x0, +MKT-WS-030,2026-02-19T01:45:19.554Z,4624,3,svc_sql,S-1-5-21-7368453-5598,127.0.0.1,42780,0x0, +MKT-WS-030,2026-02-10T10:19:26.298Z,4624,10,hbrown,S-1-5-21-7430334-5381,127.0.0.1,16515,0x0, +MKT-WS-030,2026-02-19T05:37:49.029Z,4624,3,idavis,S-1-5-21-6949925-9461,127.0.0.1,51407,0x0, +MKT-WS-030,2026-02-18T22:05:11.253Z,4624,3,svc_web,S-1-5-21-8887476-2128,10.10.1.130,7091,0x0, +MKT-WS-030,2026-02-15T06:37:46.248Z,4624,10,bwilson,S-1-5-21-1013024-9944,10.10.2.11,45183,0x0, +MKT-WS-030,2026-02-16T00:42:38.577Z,4624,10,admin,S-1-5-21-4305373-6232,10.10.1.10,65090,0x0, +MKT-WS-030,2026-02-14T10:45:12.746Z,4624,3,hbrown,S-1-5-21-7645542-2413,10.10.1.130,12647,0x0, +EXEC-WS-031,2026-02-12T05:58:57.792Z,4624,10,dlee,S-1-5-21-1455991-7501,10.10.2.131,14424,0x0, +EXEC-WS-031,2026-02-11T22:08:33.241Z,4624,3,svc_web,S-1-5-21-2232656-3336,127.0.0.1,41501,0x0, +EXEC-WS-031,2026-02-19T01:01:55.567Z,4624,3,agarcia,S-1-5-21-1458119-6948,10.10.2.131,43165,0x0, +EXEC-WS-031,2026-02-17T20:45:40.504Z,4624,2,emartinez,S-1-5-21-8964565-5857,10.10.1.118,8378,0x0, +EXEC-WS-031,2026-02-13T14:26:24.857Z,4625,3,bwilson,S-1-5-21-5477911-8107,10.10.2.131,6589,0xC000006D,Unknown user name or bad password +EXEC-WS-031,2026-02-15T19:39:49.117Z,4625,2,idavis,S-1-5-21-6520915-3168,10.10.1.169,62436,0xC000006D,Unknown user name or bad password +EXEC-WS-031,2026-02-12T11:10:19.091Z,4624,3,emartinez,S-1-5-21-7513650-2832,10.10.2.131,3131,0x0, +EXEC-WS-031,2026-02-11T14:21:31.539Z,4624,3,gwhite,S-1-5-21-6119972-5922,10.10.2.131,50148,0x0, +EXEC-WS-031,2026-02-18T00:48:46.284Z,4624,7,svc_sql,S-1-5-21-2836839-2430,10.10.2.131,3929,0x0, +EXEC-WS-031,2026-02-12T11:42:17.866Z,4625,2,svc_sql,S-1-5-21-8375965-1796,10.10.2.101,53660,0xC000006D,Unknown user name or bad password +EXEC-WS-031,2026-02-20T00:55:34.583Z,4625,3,admin,S-1-5-21-3011814-8849,127.0.0.1,9432,0xC000006D,Unknown user name or bad password +EXEC-WS-031,2026-02-12T13:28:05.217Z,4625,3,svc_sql,S-1-5-21-3198263-9674,127.0.0.1,17391,0xC000006D,Unknown user name or bad password +EXEC-WS-031,2026-02-12T02:25:06.588Z,4624,7,fthompson,S-1-5-21-8740544-1875,10.10.2.131,30686,0x0, +EXEC-WS-031,2026-02-15T07:31:36.669Z,4624,2,idavis,S-1-5-21-8821568-7501,10.10.2.131,13000,0x0, +EXEC-WS-031,2026-02-15T11:46:25.287Z,4625,3,gwhite,S-1-5-21-7397781-7551,10.10.1.11,15467,0xC000006D,Unknown user name or bad password +EXEC-WS-031,2026-02-18T11:13:54.551Z,4624,10,cjohnson,S-1-5-21-6611342-5159,10.10.2.131,60552,0x0, +EXEC-WS-031,2026-02-11T00:33:18.057Z,4624,3,svc_sql,S-1-5-21-2116919-6912,10.10.2.131,41884,0x0, +EXEC-WS-031,2026-02-13T20:15:01.945Z,4625,2,jsmith,S-1-5-21-9969402-9449,127.0.0.1,26027,0xC000006D,Unknown user name or bad password +EXEC-WS-031,2026-02-18T15:08:15.683Z,4624,7,svc_web,S-1-5-21-6301758-2239,10.10.1.148,50053,0x0, +EXEC-WS-031,2026-02-19T10:35:27.917Z,4624,7,admin,S-1-5-21-1999529-8538,10.10.2.131,26997,0x0, +EXEC-WS-031,2026-02-15T18:25:06.208Z,4624,10,idavis,S-1-5-21-7841405-9322,127.0.0.1,17825,0x0, +EXEC-WS-031,2026-02-17T08:53:21.460Z,4624,10,emartinez,S-1-5-21-7511969-7432,10.10.1.172,42600,0x0, +EXEC-WS-031,2026-02-14T10:40:48.940Z,4624,3,dlee,S-1-5-21-4057142-3184,127.0.0.1,31182,0x0, +EXEC-WS-031,2026-02-17T14:36:18.777Z,4625,10,fthompson,S-1-5-21-1116835-6748,127.0.0.1,32294,0xC000006D,Unknown user name or bad password +EXEC-WS-031,2026-02-11T02:47:22.013Z,4624,3,agarcia,S-1-5-21-6083859-4262,127.0.0.1,53968,0x0, +IT-WS-032,2026-02-12T12:57:09.912Z,4624,3,fthompson,S-1-5-21-3573554-2915,10.10.1.154,34000,0x0, +IT-WS-032,2026-02-11T05:43:56.327Z,4625,7,agarcia,S-1-5-21-7775266-5333,10.10.3.132,51252,0xC000006D,Unknown user name or bad password +IT-WS-032,2026-02-16T15:12:06.819Z,4624,2,svc_web,S-1-5-21-1029244-9829,10.10.3.132,30251,0x0, +IT-WS-032,2026-02-11T23:34:28.023Z,4625,10,svc_sql,S-1-5-21-1065816-7036,10.10.2.10,30598,0xC000006D,Unknown user name or bad password +IT-WS-032,2026-02-19T10:29:08.070Z,4625,3,agarcia,S-1-5-21-4984380-7052,10.10.3.132,17287,0xC000006D,Unknown user name or bad password +IT-WS-032,2026-02-14T14:24:16.201Z,4624,7,hbrown,S-1-5-21-9361808-4111,10.10.2.134,40376,0x0, +IT-WS-032,2026-02-15T09:17:27.914Z,4624,2,svc_web,S-1-5-21-1150838-9073,10.10.2.152,19705,0x0, +IT-WS-032,2026-02-19T11:13:55.063Z,4624,3,svc_backup,S-1-5-21-1606014-3713,10.10.3.132,38316,0x0, +IT-WS-032,2026-02-17T03:06:51.605Z,4624,3,admin,S-1-5-21-2048124-4059,10.10.3.132,53324,0x0, +IT-WS-032,2026-02-13T10:17:43.073Z,4624,3,bwilson,S-1-5-21-8188436-8599,10.10.3.132,16436,0x0, +IT-WS-032,2026-02-10T11:13:45.282Z,4624,2,jsmith,S-1-5-21-7652937-3555,10.10.3.132,6847,0x0, +IT-WS-032,2026-02-18T05:08:23.639Z,4624,3,admin,S-1-5-21-1564334-6253,10.10.1.13,34961,0x0, +IT-WS-032,2026-02-17T03:11:09.219Z,4624,3,admin,S-1-5-21-6398998-7200,10.10.3.132,16798,0x0, +IT-WS-032,2026-02-17T04:00:22.858Z,4625,3,svc_sql,S-1-5-21-6729873-2754,127.0.0.1,26634,0xC000006D,Unknown user name or bad password +IT-WS-032,2026-02-14T12:56:25.185Z,4624,7,svc_web,S-1-5-21-2901542-3643,127.0.0.1,41173,0x0, +IT-WS-032,2026-02-15T23:18:28.885Z,4624,10,emartinez,S-1-5-21-2883029-2617,10.10.3.132,62278,0x0, +IT-WS-032,2026-02-14T11:35:29.223Z,4624,7,idavis,S-1-5-21-4251481-7637,127.0.0.1,55424,0x0, +HR-WS-033,2026-02-17T13:57:23.358Z,4624,2,emartinez,S-1-5-21-3862686-3725,10.10.1.175,41136,0x0, +HR-WS-033,2026-02-13T21:33:51.206Z,4625,7,gwhite,S-1-5-21-2765865-7683,10.10.1.133,62277,0xC000006D,Unknown user name or bad password +HR-WS-033,2026-02-20T10:27:34.655Z,4625,3,idavis,S-1-5-21-8231531-2662,10.10.1.133,22122,0xC000006D,Unknown user name or bad password +HR-WS-033,2026-02-20T14:29:07.345Z,4625,2,gwhite,S-1-5-21-9032247-2150,10.10.1.124,28023,0xC000006D,Unknown user name or bad password +HR-WS-033,2026-02-11T22:18:21.822Z,4624,3,svc_web,S-1-5-21-8272639-6838,10.10.3.141,32476,0x0, +HR-WS-033,2026-02-18T11:57:22.953Z,4625,2,fthompson,S-1-5-21-7289574-9397,10.10.1.148,2461,0xC000006D,Unknown user name or bad password +HR-WS-033,2026-02-10T19:31:55.363Z,4624,3,admin,S-1-5-21-3299109-2663,10.10.3.117,3123,0x0, +HR-WS-033,2026-02-17T21:17:54.649Z,4624,3,svc_sql,S-1-5-21-1798025-3465,10.10.1.133,59903,0x0, +HR-WS-033,2026-02-20T15:03:48.588Z,4624,10,idavis,S-1-5-21-2936416-6984,127.0.0.1,32925,0x0, +HR-WS-033,2026-02-16T23:53:05.436Z,4624,10,emartinez,S-1-5-21-2614023-4397,127.0.0.1,29564,0x0, +HR-WS-033,2026-02-13T01:53:04.103Z,4624,3,svc_backup,S-1-5-21-5994453-4356,127.0.0.1,52500,0x0, +HR-WS-033,2026-02-12T23:21:07.211Z,4624,10,admin,S-1-5-21-1334610-1629,127.0.0.1,27393,0x0, +HR-WS-033,2026-02-13T20:07:31.256Z,4624,3,hbrown,S-1-5-21-9501232-5102,10.10.1.133,51328,0x0, +HR-WS-033,2026-02-19T21:56:29.662Z,4624,7,hbrown,S-1-5-21-2050937-9256,10.10.2.116,53196,0x0, +HR-WS-033,2026-02-19T21:55:21.939Z,4625,3,bwilson,S-1-5-21-9132013-6823,10.10.1.133,46263,0xC000006D,Unknown user name or bad password +HR-WS-033,2026-02-11T23:18:21.285Z,4625,2,jsmith,S-1-5-21-9187977-9120,10.10.3.150,6650,0xC000006D,Unknown user name or bad password +HR-WS-033,2026-02-17T02:06:15.722Z,4624,2,jsmith,S-1-5-21-6104263-5009,10.10.1.133,47159,0x0, +HR-WS-033,2026-02-16T17:22:20.482Z,4624,2,jsmith,S-1-5-21-1527525-2947,10.10.3.144,52040,0x0, +HR-WS-033,2026-02-13T04:02:11.785Z,4624,2,fthompson,S-1-5-21-2983805-2542,10.10.3.135,47581,0x0, +FIN-WS-034,2026-02-18T08:32:54.316Z,4624,2,gwhite,S-1-5-21-5662185-2388,127.0.0.1,43313,0x0, +FIN-WS-034,2026-02-15T08:41:40.150Z,4624,7,jsmith,S-1-5-21-4755646-2696,10.10.2.134,8965,0x0, +FIN-WS-034,2026-02-20T01:54:48.675Z,4624,3,emartinez,S-1-5-21-4257000-3799,10.10.2.134,44002,0x0, +FIN-WS-034,2026-02-12T00:25:32.328Z,4624,2,idavis,S-1-5-21-5641031-2018,10.10.2.134,49376,0x0, +FIN-WS-034,2026-02-11T09:32:49.591Z,4624,10,bwilson,S-1-5-21-8571856-6270,10.10.2.134,20148,0x0, +FIN-WS-034,2026-02-16T11:16:04.467Z,4624,10,jsmith,S-1-5-21-6027058-6319,10.10.2.134,23435,0x0, +FIN-WS-034,2026-02-19T10:46:49.874Z,4624,7,svc_backup,S-1-5-21-1352224-5768,10.10.2.134,51014,0x0, +FIN-WS-034,2026-02-14T18:24:22.983Z,4624,3,cjohnson,S-1-5-21-3435261-1458,127.0.0.1,30983,0x0, +FIN-WS-034,2026-02-13T19:03:29.698Z,4624,3,emartinez,S-1-5-21-3247755-1611,10.10.2.122,26688,0x0, +FIN-WS-034,2026-02-12T01:03:08.152Z,4624,3,dlee,S-1-5-21-8678754-2770,127.0.0.1,13559,0x0, +FIN-WS-034,2026-02-10T16:02:47.690Z,4624,3,gwhite,S-1-5-21-2977495-5751,10.10.2.134,24620,0x0, +FIN-WS-034,2026-02-15T06:25:00.023Z,4624,2,agarcia,S-1-5-21-8899672-8135,127.0.0.1,53026,0x0, +FIN-WS-034,2026-02-12T13:21:12.217Z,4624,7,cjohnson,S-1-5-21-7721558-2153,10.10.2.134,19879,0x0, +SLS-WS-035,2026-02-13T05:07:33.138Z,4624,2,idavis,S-1-5-21-1053584-9620,10.10.2.122,62193,0x0, +SLS-WS-035,2026-02-16T04:43:25.527Z,4624,7,emartinez,S-1-5-21-6385201-9860,10.10.3.135,42914,0x0, +SLS-WS-035,2026-02-14T19:46:42.865Z,4624,2,idavis,S-1-5-21-7343293-4016,10.10.3.135,30050,0x0, +SLS-WS-035,2026-02-13T14:45:45.610Z,4624,3,bwilson,S-1-5-21-7986224-4952,127.0.0.1,59875,0x0, +SLS-WS-035,2026-02-15T20:33:05.448Z,4624,2,bwilson,S-1-5-21-4617595-6548,127.0.0.1,22632,0x0, +SLS-WS-035,2026-02-14T23:28:29.067Z,4624,2,admin,S-1-5-21-5414880-8414,127.0.0.1,28027,0x0, +SLS-WS-035,2026-02-12T12:17:08.991Z,4624,3,hbrown,S-1-5-21-5350274-4308,127.0.0.1,11401,0x0, +SLS-WS-035,2026-02-19T21:41:34.677Z,4624,10,svc_sql,S-1-5-21-6210512-4710,10.10.3.135,18279,0x0, +SLS-WS-035,2026-02-10T14:34:09.904Z,4624,3,cjohnson,S-1-5-21-9799931-8862,10.10.2.131,45254,0x0, +SLS-WS-035,2026-02-19T00:05:02.605Z,4624,7,admin,S-1-5-21-8677085-3030,10.10.1.133,30421,0x0, +SLS-WS-035,2026-02-20T13:01:46.040Z,4624,3,jsmith,S-1-5-21-6292254-3592,127.0.0.1,41159,0x0, +SLS-WS-035,2026-02-19T17:39:37.682Z,4625,2,gwhite,S-1-5-21-8081950-6934,10.10.1.112,14454,0xC000006D,Unknown user name or bad password +SLS-WS-035,2026-02-16T11:23:40.893Z,4624,2,gwhite,S-1-5-21-2816529-9095,10.10.3.135,52406,0x0, +SLS-WS-035,2026-02-19T04:24:20.297Z,4624,3,hbrown,S-1-5-21-5844775-7462,127.0.0.1,21375,0x0, +SLS-WS-035,2026-02-15T16:16:38.384Z,4624,3,emartinez,S-1-5-21-6070979-3320,127.0.0.1,5921,0x0, +SLS-WS-035,2026-02-14T23:01:17.098Z,4624,10,emartinez,S-1-5-21-5218588-1472,10.10.1.169,38754,0x0, +SLS-WS-035,2026-02-13T04:51:47.651Z,4625,3,svc_backup,S-1-5-21-4517081-7526,10.10.1.121,41453,0xC000006D,Unknown user name or bad password +SLS-WS-035,2026-02-13T14:10:47.482Z,4624,3,svc_backup,S-1-5-21-6515847-3960,127.0.0.1,24044,0x0, +SLS-WS-035,2026-02-19T01:34:07.077Z,4624,10,agarcia,S-1-5-21-6375196-5628,127.0.0.1,2864,0x0, +ENG-WS-036,2026-02-19T21:50:37.150Z,4624,3,svc_backup,S-1-5-21-9744560-4922,10.10.1.148,17732,0x0, +ENG-WS-036,2026-02-19T08:24:53.327Z,4624,10,jsmith,S-1-5-21-1749762-6745,10.10.2.122,12082,0x0, +ENG-WS-036,2026-02-17T20:29:36.715Z,4625,3,emartinez,S-1-5-21-4392903-1970,10.10.1.12,4161,0xC000006D,Unknown user name or bad password +ENG-WS-036,2026-02-12T03:49:31.785Z,4624,10,dlee,S-1-5-21-9033911-2252,10.10.2.116,17451,0x0, +ENG-WS-036,2026-02-14T09:50:32.354Z,4624,10,hbrown,S-1-5-21-4122497-1810,127.0.0.1,5929,0x0, +ENG-WS-036,2026-02-15T16:56:39.231Z,4624,3,agarcia,S-1-5-21-8899411-1854,127.0.0.1,20246,0x0, +ENG-WS-036,2026-02-10T13:14:59.613Z,4624,3,svc_backup,S-1-5-21-1265200-3154,10.10.1.136,49125,0x0, +ENG-WS-036,2026-02-12T11:21:16.580Z,4624,3,fthompson,S-1-5-21-7624396-5019,127.0.0.1,60360,0x0, +ENG-WS-036,2026-02-15T03:03:24.830Z,4624,10,agarcia,S-1-5-21-1175953-7246,10.10.2.167,40052,0x0, +ENG-WS-036,2026-02-16T00:51:26.486Z,4624,10,agarcia,S-1-5-21-6323627-4330,10.10.1.136,36406,0x0, +LEG-WS-037,2026-02-10T14:36:37.835Z,4624,3,gwhite,S-1-5-21-4251805-2537,10.10.2.137,51208,0x0, +LEG-WS-037,2026-02-18T08:31:36.601Z,4624,2,hbrown,S-1-5-21-5662531-8063,127.0.0.1,15157,0x0, +LEG-WS-037,2026-02-20T11:25:34.394Z,4624,10,jsmith,S-1-5-21-1490669-3861,10.10.2.122,8731,0x0, +LEG-WS-037,2026-02-10T15:33:08.208Z,4624,2,admin,S-1-5-21-9902666-3794,127.0.0.1,26500,0x0, +LEG-WS-037,2026-02-19T02:47:32.120Z,4624,10,fthompson,S-1-5-21-1590434-5664,10.10.3.141,59961,0x0, +LEG-WS-037,2026-02-15T21:16:41.437Z,4624,3,emartinez,S-1-5-21-7187994-4683,10.10.2.137,29505,0x0, +LEG-WS-037,2026-02-12T12:42:26.813Z,4624,2,gwhite,S-1-5-21-5558798-8779,10.10.3.150,15966,0x0, +LEG-WS-037,2026-02-11T10:28:08.437Z,4625,3,emartinez,S-1-5-21-5960676-2095,127.0.0.1,56382,0xC000006D,Unknown user name or bad password +LEG-WS-037,2026-02-18T14:02:15.423Z,4625,3,jsmith,S-1-5-21-2785481-9424,127.0.0.1,36469,0xC000006D,Unknown user name or bad password +LEG-WS-037,2026-02-11T10:25:56.495Z,4624,2,cjohnson,S-1-5-21-3810687-8584,10.10.2.137,18112,0x0, +LEG-WS-037,2026-02-10T22:12:59.382Z,4624,2,admin,S-1-5-21-9835136-6345,10.10.3.141,42472,0x0, +LEG-WS-037,2026-02-12T06:23:52.414Z,4624,10,jsmith,S-1-5-21-7245423-5155,127.0.0.1,17506,0x0, +LEG-WS-037,2026-02-18T06:37:34.796Z,4624,3,dlee,S-1-5-21-8825535-7546,127.0.0.1,7959,0x0, +LEG-WS-037,2026-02-12T20:28:01.622Z,4625,7,gwhite,S-1-5-21-8312118-7707,10.10.2.11,62520,0xC000006D,Unknown user name or bad password +LEG-WS-037,2026-02-13T05:59:06.429Z,4624,7,jsmith,S-1-5-21-6416854-2424,127.0.0.1,36806,0x0, +LEG-WS-037,2026-02-11T00:48:54.518Z,4624,3,emartinez,S-1-5-21-3993979-5350,127.0.0.1,17028,0x0, +MKT-WS-038,2026-02-11T10:39:34.507Z,4624,2,svc_web,S-1-5-21-1710367-6654,10.10.3.114,31537,0x0, +MKT-WS-038,2026-02-18T02:34:30.055Z,4625,3,svc_backup,S-1-5-21-2492615-8680,10.10.1.175,27608,0xC000006D,Unknown user name or bad password +MKT-WS-038,2026-02-20T16:29:41.061Z,4624,3,cjohnson,S-1-5-21-9793962-3684,127.0.0.1,30813,0x0, +MKT-WS-038,2026-02-18T06:15:57.078Z,4624,2,emartinez,S-1-5-21-8271071-9240,10.10.3.138,47623,0x0, +MKT-WS-038,2026-02-11T20:43:43.362Z,4624,2,agarcia,S-1-5-21-8617682-5163,127.0.0.1,3401,0x0, +MKT-WS-038,2026-02-11T22:35:24.350Z,4624,3,svc_web,S-1-5-21-3831993-1641,127.0.0.1,30606,0x0, +MKT-WS-038,2026-02-14T10:13:45.386Z,4624,7,admin,S-1-5-21-3138506-1618,10.10.2.11,9621,0x0, +MKT-WS-038,2026-02-19T01:02:50.137Z,4624,3,dlee,S-1-5-21-2607487-4171,10.10.3.174,42460,0x0, +MKT-WS-038,2026-02-17T06:10:38.816Z,4624,3,hbrown,S-1-5-21-9821369-6064,10.10.1.175,50509,0x0, +MKT-WS-038,2026-02-15T05:37:03.131Z,4624,3,svc_backup,S-1-5-21-9307625-4941,127.0.0.1,53437,0x0, +MKT-WS-038,2026-02-14T12:59:21.869Z,4624,3,bwilson,S-1-5-21-1503039-2710,10.10.3.111,14456,0x0, +MKT-WS-038,2026-02-13T20:33:12.961Z,4625,3,dlee,S-1-5-21-9551127-5563,10.10.2.161,23982,0xC000006D,Unknown user name or bad password +MKT-WS-038,2026-02-16T20:31:48.544Z,4624,10,bwilson,S-1-5-21-6283791-3599,127.0.0.1,3037,0x0, +MKT-WS-038,2026-02-14T16:40:09.238Z,4624,3,agarcia,S-1-5-21-8065593-2695,127.0.0.1,13787,0x0, +MKT-WS-038,2026-02-19T16:14:43.884Z,4625,10,svc_sql,S-1-5-21-5811672-4686,127.0.0.1,22226,0xC000006D,Unknown user name or bad password +MKT-WS-038,2026-02-17T19:20:39.776Z,4624,2,svc_backup,S-1-5-21-4835343-6110,10.10.3.138,29739,0x0, +MKT-WS-038,2026-02-17T20:25:15.924Z,4624,3,jsmith,S-1-5-21-1843309-3673,10.10.1.136,13681,0x0, +MKT-WS-038,2026-02-12T14:08:48.437Z,4625,3,svc_web,S-1-5-21-4624617-8298,127.0.0.1,9783,0xC000006D,Unknown user name or bad password +MKT-WS-038,2026-02-15T10:40:01.603Z,4625,3,hbrown,S-1-5-21-5186675-3724,127.0.0.1,57713,0xC000006D,Unknown user name or bad password +MKT-WS-038,2026-02-20T00:11:52.885Z,4624,3,agarcia,S-1-5-21-2473584-5565,127.0.0.1,62688,0x0, +MKT-WS-038,2026-02-19T13:56:50.197Z,4624,2,svc_web,S-1-5-21-7924913-5456,10.10.3.138,36740,0x0, +MKT-WS-038,2026-02-11T04:23:47.277Z,4624,10,svc_sql,S-1-5-21-9501917-5703,127.0.0.1,26446,0x0, +MKT-WS-038,2026-02-18T11:59:25.243Z,4624,7,fthompson,S-1-5-21-2512299-5174,10.10.3.123,51811,0x0, +MKT-WS-038,2026-02-19T03:40:10.926Z,4624,7,dlee,S-1-5-21-5085445-4785,127.0.0.1,4382,0x0, +MKT-WS-038,2026-02-11T17:36:16.496Z,4624,3,gwhite,S-1-5-21-6739605-8101,10.10.3.138,38292,0x0, +EXEC-WS-039,2026-02-19T15:16:32.018Z,4624,2,svc_backup,S-1-5-21-6972847-7402,10.10.2.137,8274,0x0, +EXEC-WS-039,2026-02-17T01:10:36.896Z,4624,3,admin,S-1-5-21-2035814-6149,10.10.1.151,16059,0x0, +EXEC-WS-039,2026-02-10T10:07:50.589Z,4624,3,idavis,S-1-5-21-4698469-1075,127.0.0.1,2062,0x0, +EXEC-WS-039,2026-02-12T11:24:45.877Z,4625,3,idavis,S-1-5-21-7787091-2859,127.0.0.1,60893,0xC000006D,Unknown user name or bad password +EXEC-WS-039,2026-02-18T01:14:13.200Z,4624,10,dlee,S-1-5-21-3128277-9654,10.10.1.139,7230,0x0, +EXEC-WS-039,2026-02-17T10:45:29.235Z,4624,3,dlee,S-1-5-21-9465237-3866,127.0.0.1,1948,0x0, +EXEC-WS-039,2026-02-17T04:57:23.366Z,4624,2,gwhite,S-1-5-21-8807737-2892,10.10.1.139,50138,0x0, +EXEC-WS-039,2026-02-17T03:46:52.042Z,4624,10,dlee,S-1-5-21-9159697-9704,127.0.0.1,55827,0x0, +EXEC-WS-039,2026-02-18T08:42:38.343Z,4624,3,admin,S-1-5-21-4052521-1509,10.10.1.139,53980,0x0, +EXEC-WS-039,2026-02-16T17:41:59.435Z,4624,7,cjohnson,S-1-5-21-7959414-6170,10.10.1.139,50186,0x0, +EXEC-WS-039,2026-02-14T14:55:27.922Z,4624,2,bwilson,S-1-5-21-6523747-7820,127.0.0.1,3750,0x0, +EXEC-WS-039,2026-02-19T09:56:16.697Z,4624,7,agarcia,S-1-5-21-2422915-2245,127.0.0.1,16086,0x0, +EXEC-WS-039,2026-02-11T06:14:55.097Z,4624,10,idavis,S-1-5-21-6656073-7025,10.10.2.167,60710,0x0, +EXEC-WS-039,2026-02-20T11:20:28.083Z,4624,3,idavis,S-1-5-21-9199914-6611,10.10.1.139,62585,0x0, +EXEC-WS-039,2026-02-14T14:09:29.490Z,4624,3,jsmith,S-1-5-21-2311645-5230,10.10.1.175,37657,0x0, +EXEC-WS-039,2026-02-12T13:00:48.965Z,4625,2,admin,S-1-5-21-5589491-4324,127.0.0.1,19984,0xC000006D,Unknown user name or bad password +EXEC-WS-039,2026-02-12T18:22:01.563Z,4625,3,hbrown,S-1-5-21-5230976-5899,10.10.1.139,16869,0xC000006D,Unknown user name or bad password +EXEC-WS-039,2026-02-17T01:56:25.799Z,4625,2,emartinez,S-1-5-21-7853140-9174,10.10.1.139,24128,0xC000006D,Unknown user name or bad password +EXEC-WS-039,2026-02-13T12:17:44.313Z,4624,7,idavis,S-1-5-21-9020530-6832,10.10.2.134,12990,0x0, +EXEC-WS-039,2026-02-16T21:57:22.246Z,4624,3,bwilson,S-1-5-21-4539409-8898,127.0.0.1,50181,0x0, +IT-WS-040,2026-02-11T12:58:02.102Z,4624,2,bwilson,S-1-5-21-6637669-9588,10.10.3.102,17321,0x0, +IT-WS-040,2026-02-17T14:16:16.639Z,4624,2,admin,S-1-5-21-7930325-5858,10.10.2.140,53683,0x0, +IT-WS-040,2026-02-18T01:31:55.851Z,4624,3,agarcia,S-1-5-21-9956033-5073,10.10.2.140,43956,0x0, +IT-WS-040,2026-02-16T17:09:48.385Z,4624,3,agarcia,S-1-5-21-1829191-7475,127.0.0.1,53339,0x0, +IT-WS-040,2026-02-11T19:04:13.207Z,4625,3,idavis,S-1-5-21-5525443-1212,10.10.2.140,39880,0xC000006D,Unknown user name or bad password +IT-WS-040,2026-02-19T16:41:16.465Z,4624,3,admin,S-1-5-21-1710985-2016,127.0.0.1,44709,0x0, +IT-WS-040,2026-02-14T05:11:28.651Z,4624,3,agarcia,S-1-5-21-4205169-2207,10.10.2.140,53567,0x0, +IT-WS-040,2026-02-10T20:13:12.852Z,4624,3,svc_web,S-1-5-21-5292100-8587,127.0.0.1,59662,0x0, +IT-WS-040,2026-02-12T19:36:00.713Z,4624,10,svc_backup,S-1-5-21-2733699-9308,10.10.2.140,24462,0x0, +IT-WS-040,2026-02-17T07:04:58.111Z,4624,3,svc_web,S-1-5-21-1438048-6945,10.10.2.122,16866,0x0, +IT-WS-040,2026-02-15T16:08:29.382Z,4624,3,dlee,S-1-5-21-7115001-6935,10.10.2.152,50052,0x0, +IT-WS-040,2026-02-17T23:30:28.914Z,4624,3,svc_web,S-1-5-21-1557090-6044,10.10.2.140,7720,0x0, +IT-WS-040,2026-02-12T23:07:49.792Z,4624,2,cjohnson,S-1-5-21-8181090-1807,127.0.0.1,53496,0x0, +IT-WS-040,2026-02-11T18:34:19.104Z,4624,7,admin,S-1-5-21-7488794-7918,10.10.2.140,18560,0x0, +IT-WS-040,2026-02-19T15:07:34.120Z,4625,10,hbrown,S-1-5-21-4717964-8906,10.10.3.135,48540,0xC000006D,Unknown user name or bad password +IT-WS-040,2026-02-14T02:52:22.836Z,4624,2,jsmith,S-1-5-21-5666015-5683,10.10.2.140,25426,0x0, +IT-WS-040,2026-02-17T08:52:13.084Z,4624,3,svc_sql,S-1-5-21-2820307-5406,127.0.0.1,35279,0x0, +IT-WS-040,2026-02-18T12:04:08.320Z,4625,2,admin,S-1-5-21-2574941-7120,10.10.1.127,32932,0xC000006D,Unknown user name or bad password +IT-WS-040,2026-02-11T04:02:11.548Z,4625,2,idavis,S-1-5-21-8099145-5394,127.0.0.1,33119,0xC000006D,Unknown user name or bad password +IT-WS-040,2026-02-11T02:24:47.711Z,4624,10,admin,S-1-5-21-1680687-8395,10.10.2.140,41338,0x0, +IT-WS-040,2026-02-18T07:24:23.511Z,4625,7,agarcia,S-1-5-21-2739600-9802,10.10.2.140,4869,0xC000006D,Unknown user name or bad password +IT-WS-040,2026-02-16T09:41:56.830Z,4624,3,idavis,S-1-5-21-9213097-2949,10.10.1.10,30244,0x0, +IT-WS-040,2026-02-11T12:04:31.173Z,4624,3,cjohnson,S-1-5-21-9024769-7034,10.10.2.140,10363,0x0, +IT-WS-040,2026-02-11T22:22:55.553Z,4624,2,cjohnson,S-1-5-21-7987398-1131,127.0.0.1,13207,0x0, +IT-WS-040,2026-02-14T13:36:49.521Z,4624,3,fthompson,S-1-5-21-5001041-6682,10.10.1.11,60285,0x0, +IT-WS-040,2026-02-14T16:43:42.598Z,4624,3,svc_sql,S-1-5-21-4922748-4010,127.0.0.1,52235,0x0, +IT-WS-040,2026-02-19T22:12:31.910Z,4624,10,hbrown,S-1-5-21-2639349-8223,10.10.2.122,22607,0x0, +HR-WS-041,2026-02-16T10:23:20.661Z,4624,3,hbrown,S-1-5-21-4712947-5215,10.10.3.141,10431,0x0, +HR-WS-041,2026-02-12T17:25:46.281Z,4624,7,svc_web,S-1-5-21-8081950-6336,10.10.3.141,59316,0x0, +HR-WS-041,2026-02-14T08:02:41.988Z,4624,7,agarcia,S-1-5-21-3582197-4392,10.10.3.141,1354,0x0, +HR-WS-041,2026-02-15T15:45:25.916Z,4625,3,gwhite,S-1-5-21-7511116-9707,10.10.1.106,40110,0xC000006D,Unknown user name or bad password +HR-WS-041,2026-02-18T13:04:18.281Z,4624,2,svc_sql,S-1-5-21-3685447-3945,127.0.0.1,17883,0x0, +HR-WS-041,2026-02-10T19:52:29.106Z,4624,3,idavis,S-1-5-21-7364497-4294,127.0.0.1,48598,0x0, +HR-WS-041,2026-02-16T13:31:31.413Z,4625,10,gwhite,S-1-5-21-3977009-4654,10.10.3.141,43834,0xC000006D,Unknown user name or bad password +HR-WS-041,2026-02-12T01:52:28.470Z,4624,3,emartinez,S-1-5-21-9457246-4488,10.10.3.141,16791,0x0, +HR-WS-041,2026-02-10T19:00:54.308Z,4624,10,svc_sql,S-1-5-21-9184330-2194,10.10.3.141,53944,0x0, +HR-WS-041,2026-02-14T13:45:58.365Z,4625,3,svc_web,S-1-5-21-2079058-8696,10.10.3.141,48864,0xC000006D,Unknown user name or bad password +HR-WS-041,2026-02-16T17:47:47.993Z,4624,7,svc_web,S-1-5-21-8894838-5913,10.10.3.141,57995,0x0, +HR-WS-041,2026-02-15T00:14:20.272Z,4624,10,dlee,S-1-5-21-1402853-6604,10.10.3.141,62397,0x0, +HR-WS-041,2026-02-13T07:43:49.719Z,4624,3,cjohnson,S-1-5-21-3117900-7733,127.0.0.1,4716,0x0, +HR-WS-041,2026-02-12T04:43:37.356Z,4624,2,hbrown,S-1-5-21-7107440-8621,127.0.0.1,57494,0x0, +HR-WS-041,2026-02-10T16:59:43.172Z,4625,7,hbrown,S-1-5-21-2256298-7908,10.10.3.141,30685,0xC000006D,Unknown user name or bad password +FIN-WS-042,2026-02-20T05:05:45.644Z,4624,10,cjohnson,S-1-5-21-3456278-4677,10.10.1.11,50586,0x0, +FIN-WS-042,2026-02-18T04:55:47.579Z,4625,2,svc_sql,S-1-5-21-9320410-9883,10.10.2.122,18439,0xC000006D,Unknown user name or bad password +FIN-WS-042,2026-02-17T14:01:55.140Z,4624,2,fthompson,S-1-5-21-9119287-3363,127.0.0.1,45986,0x0, +FIN-WS-042,2026-02-11T04:04:06.970Z,4624,7,hbrown,S-1-5-21-7518691-7296,10.10.2.146,11536,0x0, +FIN-WS-042,2026-02-13T09:44:02.729Z,4624,3,hbrown,S-1-5-21-5728207-9832,10.10.1.142,31614,0x0, +FIN-WS-042,2026-02-15T18:51:28.192Z,4624,3,agarcia,S-1-5-21-2257972-2360,127.0.0.1,45338,0x0, +FIN-WS-042,2026-02-16T11:17:51.560Z,4624,2,gwhite,S-1-5-21-1173564-2631,10.10.3.165,9776,0x0, +FIN-WS-042,2026-02-12T14:32:02.895Z,4624,3,jsmith,S-1-5-21-5512766-5741,10.10.2.119,2076,0x0, +FIN-WS-042,2026-02-12T23:48:45.639Z,4624,3,svc_sql,S-1-5-21-1463003-3447,10.10.1.142,49699,0x0, +FIN-WS-042,2026-02-18T08:24:42.265Z,4624,7,jsmith,S-1-5-21-3493416-4279,10.10.2.149,45202,0x0, +FIN-WS-042,2026-02-12T15:15:28.676Z,4624,3,fthompson,S-1-5-21-9255697-9472,127.0.0.1,12861,0x0, +FIN-WS-042,2026-02-12T00:12:43.457Z,4624,3,agarcia,S-1-5-21-5802585-2341,10.10.1.142,5893,0x0, +FIN-WS-042,2026-02-14T17:40:55.667Z,4624,3,svc_sql,S-1-5-21-9810796-1427,127.0.0.1,38068,0x0, +FIN-WS-042,2026-02-11T03:05:53.837Z,4624,3,svc_web,S-1-5-21-9554244-1837,127.0.0.1,54534,0x0, +FIN-WS-042,2026-02-16T17:18:04.622Z,4624,2,emartinez,S-1-5-21-3683583-9024,127.0.0.1,63794,0x0, +FIN-WS-042,2026-02-12T22:24:21.812Z,4624,3,hbrown,S-1-5-21-5793856-6776,10.10.1.151,59488,0x0, +FIN-WS-042,2026-02-10T19:26:35.171Z,4624,2,jsmith,S-1-5-21-3064055-5627,10.10.1.136,46432,0x0, +FIN-WS-042,2026-02-20T05:37:46.031Z,4624,10,dlee,S-1-5-21-4816544-6355,10.10.3.135,37029,0x0, +FIN-WS-042,2026-02-18T01:02:50.168Z,4624,3,dlee,S-1-5-21-5617847-6133,10.10.3.156,1799,0x0, +FIN-WS-042,2026-02-11T01:17:29.328Z,4624,3,gwhite,S-1-5-21-3119589-6368,10.10.3.126,27012,0x0, +FIN-WS-042,2026-02-10T10:44:12.066Z,4625,3,hbrown,S-1-5-21-5223729-8695,10.10.1.142,42984,0xC000006D,Unknown user name or bad password +FIN-WS-042,2026-02-18T08:05:55.453Z,4624,3,svc_web,S-1-5-21-9564002-3096,10.10.1.142,20790,0x0, +FIN-WS-042,2026-02-11T09:27:39.607Z,4624,3,svc_web,S-1-5-21-9440913-2625,10.10.1.142,16192,0x0, +FIN-WS-042,2026-02-11T03:52:38.805Z,4624,3,dlee,S-1-5-21-2233579-3171,10.10.1.142,28579,0x0, +FIN-WS-042,2026-02-16T17:08:27.003Z,4624,2,emartinez,S-1-5-21-7853949-9023,10.10.1.106,57342,0x0, +SLS-WS-043,2026-02-12T04:46:49.043Z,4624,10,idavis,S-1-5-21-2753955-4684,127.0.0.1,58066,0x0, +SLS-WS-043,2026-02-11T19:49:39.713Z,4624,3,cjohnson,S-1-5-21-9526518-3346,10.10.2.143,61239,0x0, +SLS-WS-043,2026-02-16T12:19:16.961Z,4624,3,idavis,S-1-5-21-6405301-3791,10.10.2.143,22811,0x0, +SLS-WS-043,2026-02-15T14:56:24.848Z,4624,7,hbrown,S-1-5-21-4231023-8064,10.10.2.143,9397,0x0, +SLS-WS-043,2026-02-12T02:39:22.477Z,4624,10,fthompson,S-1-5-21-1756028-6530,127.0.0.1,62532,0x0, +SLS-WS-043,2026-02-14T21:51:39.622Z,4624,2,cjohnson,S-1-5-21-5741255-8032,10.10.2.143,11078,0x0, +SLS-WS-043,2026-02-12T11:12:39.788Z,4624,3,cjohnson,S-1-5-21-1038673-6615,127.0.0.1,1109,0x0, +SLS-WS-043,2026-02-18T00:44:11.888Z,4624,3,agarcia,S-1-5-21-3368619-1407,10.10.2.140,20134,0x0, +SLS-WS-043,2026-02-13T18:24:24.810Z,4624,7,fthompson,S-1-5-21-5297113-7611,127.0.0.1,53805,0x0, +SLS-WS-043,2026-02-18T07:28:50.881Z,4624,3,svc_backup,S-1-5-21-7543318-1321,10.10.2.143,14698,0x0, +SLS-WS-043,2026-02-12T14:12:09.685Z,4625,2,hbrown,S-1-5-21-7604645-6267,10.10.2.101,7530,0xC000006D,Unknown user name or bad password +SLS-WS-043,2026-02-19T19:41:25.758Z,4624,3,cjohnson,S-1-5-21-5442474-8703,10.10.1.121,42956,0x0, +SLS-WS-043,2026-02-12T06:34:43.043Z,4624,2,agarcia,S-1-5-21-2525674-9201,127.0.0.1,36007,0x0, +SLS-WS-043,2026-02-16T17:03:40.299Z,4624,3,svc_sql,S-1-5-21-2124117-5420,10.10.2.173,56544,0x0, +SLS-WS-043,2026-02-13T03:22:30.035Z,4624,10,cjohnson,S-1-5-21-1184052-2652,10.10.3.147,61209,0x0, +SLS-WS-043,2026-02-18T14:23:03.933Z,4624,3,fthompson,S-1-5-21-1812501-1425,10.10.2.143,50431,0x0, +SLS-WS-043,2026-02-18T01:05:35.760Z,4624,3,svc_sql,S-1-5-21-9859836-1699,127.0.0.1,41858,0x0, +SLS-WS-043,2026-02-10T17:49:46.832Z,4624,3,hbrown,S-1-5-21-7005470-6379,10.10.2.143,2611,0x0, +SLS-WS-043,2026-02-15T13:12:12.889Z,4625,7,fthompson,S-1-5-21-7169971-5350,10.10.2.143,25807,0xC000006D,Unknown user name or bad password +ENG-WS-044,2026-02-11T10:07:35.370Z,4624,2,cjohnson,S-1-5-21-9847397-3973,10.10.3.144,35845,0x0, +ENG-WS-044,2026-02-12T04:26:21.691Z,4624,3,hbrown,S-1-5-21-8924277-4934,10.10.3.111,48208,0x0, +ENG-WS-044,2026-02-18T19:56:25.551Z,4624,2,bwilson,S-1-5-21-5811702-8164,10.10.3.144,9430,0x0, +ENG-WS-044,2026-02-12T15:03:34.752Z,4624,3,hbrown,S-1-5-21-8249889-6428,10.10.1.136,56773,0x0, +ENG-WS-044,2026-02-10T09:18:39.673Z,4624,3,jsmith,S-1-5-21-3962194-7569,10.10.3.144,58716,0x0, +ENG-WS-044,2026-02-16T22:42:46.913Z,4625,2,cjohnson,S-1-5-21-8651247-7257,10.10.3.144,48182,0xC000006D,Unknown user name or bad password +ENG-WS-044,2026-02-15T04:22:44.448Z,4625,7,jsmith,S-1-5-21-5015846-4365,127.0.0.1,60834,0xC000006D,Unknown user name or bad password +ENG-WS-044,2026-02-17T16:15:31.424Z,4625,7,agarcia,S-1-5-21-1314670-2060,127.0.0.1,18126,0xC000006D,Unknown user name or bad password +ENG-WS-044,2026-02-18T21:11:57.041Z,4624,2,bwilson,S-1-5-21-9995260-9218,10.10.3.144,8259,0x0, +ENG-WS-044,2026-02-17T16:32:45.131Z,4625,3,bwilson,S-1-5-21-6880891-9577,10.10.1.151,10795,0xC000006D,Unknown user name or bad password +ENG-WS-044,2026-02-18T11:08:51.980Z,4624,3,dlee,S-1-5-21-7585769-4124,127.0.0.1,40344,0x0, +ENG-WS-044,2026-02-17T17:57:56.053Z,4625,3,svc_backup,S-1-5-21-6291081-7169,10.10.1.157,22603,0xC000006D,Unknown user name or bad password +ENG-WS-044,2026-02-15T18:50:50.968Z,4624,2,svc_sql,S-1-5-21-4895665-6122,10.10.3.144,29183,0x0, +LEG-WS-045,2026-02-10T13:40:07.644Z,4624,2,emartinez,S-1-5-21-4793828-9765,10.10.1.124,16435,0x0, +LEG-WS-045,2026-02-20T16:56:32.383Z,4624,3,gwhite,S-1-5-21-8567585-2340,10.10.3.141,44200,0x0, +LEG-WS-045,2026-02-16T17:43:22.890Z,4624,3,svc_web,S-1-5-21-7329676-9014,127.0.0.1,9652,0x0, +LEG-WS-045,2026-02-19T16:16:14.801Z,4624,10,jsmith,S-1-5-21-6402436-7586,10.10.1.145,11197,0x0, +LEG-WS-045,2026-02-11T01:42:10.915Z,4624,3,svc_sql,S-1-5-21-4407235-6837,127.0.0.1,52131,0x0, +LEG-WS-045,2026-02-17T05:02:34.808Z,4624,3,svc_sql,S-1-5-21-9232274-1157,10.10.2.146,3898,0x0, +LEG-WS-045,2026-02-12T08:47:28.021Z,4625,3,emartinez,S-1-5-21-2051455-7416,10.10.1.145,65194,0xC000006D,Unknown user name or bad password +LEG-WS-045,2026-02-12T16:51:34.849Z,4624,10,svc_backup,S-1-5-21-6891646-4487,127.0.0.1,45422,0x0, +LEG-WS-045,2026-02-12T18:39:53.820Z,4625,7,gwhite,S-1-5-21-7459069-3654,10.10.1.160,14615,0xC000006D,Unknown user name or bad password +LEG-WS-045,2026-02-18T08:46:53.456Z,4624,3,admin,S-1-5-21-8178096-7952,127.0.0.1,49468,0x0, +LEG-WS-045,2026-02-13T20:27:16.303Z,4624,10,dlee,S-1-5-21-4665581-3549,127.0.0.1,23706,0x0, +LEG-WS-045,2026-02-13T08:00:39.035Z,4624,10,cjohnson,S-1-5-21-8562192-4136,10.10.1.145,53267,0x0, +LEG-WS-045,2026-02-19T15:20:29.123Z,4624,7,bwilson,S-1-5-21-9470979-9875,127.0.0.1,60520,0x0, +LEG-WS-045,2026-02-18T06:59:00.001Z,4624,3,emartinez,S-1-5-21-3713357-1672,10.10.1.106,26965,0x0, +LEG-WS-045,2026-02-17T01:57:11.008Z,4624,3,gwhite,S-1-5-21-8646401-2895,10.10.3.108,2913,0x0, +LEG-WS-045,2026-02-18T18:18:10.319Z,4624,3,hbrown,S-1-5-21-9047461-4287,10.10.1.142,48106,0x0, +LEG-WS-045,2026-02-18T07:16:22.234Z,4624,2,svc_backup,S-1-5-21-3985579-4481,10.10.1.145,2944,0x0, +LEG-WS-045,2026-02-19T12:37:21.941Z,4625,3,admin,S-1-5-21-7147561-7035,127.0.0.1,41439,0xC000006D,Unknown user name or bad password +LEG-WS-045,2026-02-18T10:06:30.059Z,4625,3,gwhite,S-1-5-21-3882327-3016,10.10.1.112,41262,0xC000006D,Unknown user name or bad password +LEG-WS-045,2026-02-14T08:41:57.580Z,4624,3,svc_backup,S-1-5-21-7691806-1951,10.10.2.155,19578,0x0, +LEG-WS-045,2026-02-12T21:50:52.180Z,4624,3,idavis,S-1-5-21-3546799-9936,10.10.1.133,18599,0x0, +LEG-WS-045,2026-02-15T19:54:24.186Z,4624,7,gwhite,S-1-5-21-8622946-2844,127.0.0.1,25424,0x0, +LEG-WS-045,2026-02-10T08:24:57.521Z,4624,2,emartinez,S-1-5-21-6915088-5189,10.10.1.11,51961,0x0, +MKT-WS-046,2026-02-13T10:34:28.876Z,4624,7,emartinez,S-1-5-21-6996484-4728,10.10.2.146,16698,0x0, +MKT-WS-046,2026-02-18T09:37:55.806Z,4624,10,fthompson,S-1-5-21-3466302-7977,10.10.1.148,53064,0x0, +MKT-WS-046,2026-02-14T11:18:34.273Z,4624,7,svc_sql,S-1-5-21-7022518-9814,10.10.2.146,22825,0x0, +MKT-WS-046,2026-02-18T19:00:14.927Z,4625,10,svc_sql,S-1-5-21-7588503-1730,127.0.0.1,34390,0xC000006D,Unknown user name or bad password +MKT-WS-046,2026-02-18T20:25:02.900Z,4624,2,hbrown,S-1-5-21-9449655-1809,10.10.1.142,1650,0x0, +MKT-WS-046,2026-02-15T15:49:17.033Z,4624,7,idavis,S-1-5-21-4341765-5504,127.0.0.1,6279,0x0, +MKT-WS-046,2026-02-17T07:05:53.522Z,4625,3,fthompson,S-1-5-21-5835907-5376,10.10.1.109,16516,0xC000006D,Unknown user name or bad password +MKT-WS-046,2026-02-13T16:53:27.376Z,4624,3,jsmith,S-1-5-21-3224783-5097,10.10.2.161,58595,0x0, +MKT-WS-046,2026-02-15T09:27:00.192Z,4624,3,hbrown,S-1-5-21-8854515-5408,127.0.0.1,38214,0x0, +MKT-WS-046,2026-02-10T22:18:14.251Z,4625,7,dlee,S-1-5-21-8787331-9411,10.10.1.169,53091,0xC000006D,Unknown user name or bad password +EXEC-WS-047,2026-02-16T09:58:18.195Z,4624,7,fthompson,S-1-5-21-5944893-6765,127.0.0.1,53599,0x0, +EXEC-WS-047,2026-02-17T01:54:32.378Z,4625,3,bwilson,S-1-5-21-3043964-1693,127.0.0.1,29542,0xC000006D,Unknown user name or bad password +EXEC-WS-047,2026-02-12T15:08:31.336Z,4624,7,admin,S-1-5-21-7769034-7322,10.10.1.130,32147,0x0, +EXEC-WS-047,2026-02-17T21:44:03.346Z,4624,3,bwilson,S-1-5-21-2322627-1779,127.0.0.1,45942,0x0, +EXEC-WS-047,2026-02-20T09:03:25.701Z,4624,3,agarcia,S-1-5-21-9579247-3212,127.0.0.1,20837,0x0, +EXEC-WS-047,2026-02-17T10:28:24.582Z,4624,10,idavis,S-1-5-21-7269066-4031,10.10.2.137,55408,0x0, +EXEC-WS-047,2026-02-16T16:27:28.799Z,4624,7,fthompson,S-1-5-21-3895512-4399,10.10.3.147,50473,0x0, +EXEC-WS-047,2026-02-13T22:17:04.467Z,4624,3,emartinez,S-1-5-21-4929649-3880,10.10.3.147,33422,0x0, +EXEC-WS-047,2026-02-17T09:12:40.530Z,4624,3,gwhite,S-1-5-21-6063438-7562,10.10.1.124,27040,0x0, +EXEC-WS-047,2026-02-15T16:35:39.756Z,4624,3,cjohnson,S-1-5-21-2937191-6486,127.0.0.1,34965,0x0, +IT-WS-048,2026-02-12T07:11:04.097Z,4624,7,jsmith,S-1-5-21-4364818-6563,10.10.1.148,40343,0x0, +IT-WS-048,2026-02-18T05:31:10.425Z,4624,7,bwilson,S-1-5-21-7442212-7022,10.10.2.128,39124,0x0, +IT-WS-048,2026-02-18T03:00:34.147Z,4624,2,dlee,S-1-5-21-8732377-1879,10.10.1.148,31292,0x0, +IT-WS-048,2026-02-13T06:10:44.308Z,4624,7,admin,S-1-5-21-4679161-7357,127.0.0.1,58721,0x0, +IT-WS-048,2026-02-11T02:37:32.416Z,4624,3,dlee,S-1-5-21-8342106-1514,10.10.1.148,9844,0x0, +IT-WS-048,2026-02-13T12:27:00.354Z,4624,10,bwilson,S-1-5-21-7866643-4390,10.10.2.128,34673,0x0, +IT-WS-048,2026-02-15T08:39:05.215Z,4624,3,fthompson,S-1-5-21-8953746-1669,10.10.3.102,51284,0x0, +IT-WS-048,2026-02-11T05:27:50.499Z,4624,10,gwhite,S-1-5-21-1729858-6391,10.10.1.148,8844,0x0, +IT-WS-048,2026-02-17T19:46:57.735Z,4624,2,admin,S-1-5-21-8306902-2744,10.10.2.122,14332,0x0, +IT-WS-048,2026-02-16T09:30:44.734Z,4625,10,svc_sql,S-1-5-21-4749005-4280,10.10.1.148,45581,0xC000006D,Unknown user name or bad password +IT-WS-048,2026-02-15T22:35:30.052Z,4624,3,fthompson,S-1-5-21-2111926-3142,10.10.3.144,59598,0x0, +IT-WS-048,2026-02-13T19:56:57.572Z,4625,7,hbrown,S-1-5-21-6469020-8081,127.0.0.1,17333,0xC000006D,Unknown user name or bad password +IT-WS-048,2026-02-14T14:55:50.551Z,4624,3,cjohnson,S-1-5-21-9774413-8226,127.0.0.1,15577,0x0, +IT-WS-048,2026-02-19T10:55:38.953Z,4625,7,agarcia,S-1-5-21-8370882-4280,10.10.1.148,44421,0xC000006D,Unknown user name or bad password +IT-WS-048,2026-02-18T07:48:19.911Z,4624,3,idavis,S-1-5-21-2301608-2525,10.10.1.136,54434,0x0, +IT-WS-048,2026-02-12T07:47:08.414Z,4624,2,svc_web,S-1-5-21-7557220-4523,127.0.0.1,58938,0x0, +IT-WS-048,2026-02-11T18:01:53.549Z,4624,3,admin,S-1-5-21-6877299-3353,127.0.0.1,41667,0x0, +IT-WS-048,2026-02-12T00:54:29.784Z,4625,3,svc_sql,S-1-5-21-9736165-2056,10.10.1.148,29160,0xC000006D,Unknown user name or bad password +IT-WS-048,2026-02-12T13:04:14.587Z,4624,3,hbrown,S-1-5-21-3768620-5222,127.0.0.1,44085,0x0, +IT-WS-048,2026-02-17T15:16:54.394Z,4624,3,dlee,S-1-5-21-9025787-6420,10.10.1.148,8149,0x0, +IT-WS-048,2026-02-15T09:20:12.298Z,4625,2,emartinez,S-1-5-21-1574894-5440,127.0.0.1,6679,0xC000006D,Unknown user name or bad password +IT-WS-048,2026-02-15T12:19:56.080Z,4624,3,jsmith,S-1-5-21-4668400-2919,10.10.1.148,12270,0x0, +IT-WS-048,2026-02-12T09:30:56.315Z,4624,3,bwilson,S-1-5-21-8119519-7710,127.0.0.1,36863,0x0, +IT-WS-048,2026-02-14T14:25:08.951Z,4624,3,bwilson,S-1-5-21-3080942-8864,10.10.1.148,34631,0x0, +IT-WS-048,2026-02-15T14:42:43.903Z,4624,3,jsmith,S-1-5-21-9781410-3090,127.0.0.1,43622,0x0, +IT-WS-048,2026-02-10T20:09:38.284Z,4624,3,svc_web,S-1-5-21-6931585-3388,127.0.0.1,11295,0x0, +HR-WS-049,2026-02-19T17:07:38.166Z,4625,3,bwilson,S-1-5-21-3694737-7096,10.10.2.149,53995,0xC000006D,Unknown user name or bad password +HR-WS-049,2026-02-20T01:16:37.191Z,4624,3,gwhite,S-1-5-21-3363622-8096,10.10.1.133,28436,0x0, +HR-WS-049,2026-02-17T00:06:56.537Z,4624,3,dlee,S-1-5-21-1796684-9825,127.0.0.1,48782,0x0, +HR-WS-049,2026-02-11T08:05:54.162Z,4624,3,cjohnson,S-1-5-21-2225543-9024,10.10.2.149,17807,0x0, +HR-WS-049,2026-02-10T09:18:09.988Z,4624,3,emartinez,S-1-5-21-1300583-9642,10.10.3.120,58119,0x0, +HR-WS-049,2026-02-13T06:44:57.699Z,4624,3,jsmith,S-1-5-21-9114902-2789,10.10.2.149,28480,0x0, +HR-WS-049,2026-02-13T20:34:41.452Z,4624,3,cjohnson,S-1-5-21-9961912-1331,10.10.1.136,1361,0x0, +HR-WS-049,2026-02-19T14:08:30.840Z,4624,3,agarcia,S-1-5-21-3765537-7685,10.10.3.135,63600,0x0, +HR-WS-049,2026-02-11T03:18:15.692Z,4624,3,hbrown,S-1-5-21-7540468-1412,10.10.2.149,32411,0x0, +HR-WS-049,2026-02-14T23:35:27.660Z,4624,3,cjohnson,S-1-5-21-6670605-3345,127.0.0.1,48518,0x0, +HR-WS-049,2026-02-15T15:58:53.146Z,4624,3,admin,S-1-5-21-2784669-2888,127.0.0.1,60104,0x0, +HR-WS-049,2026-02-17T20:46:12.551Z,4624,3,jsmith,S-1-5-21-8533270-2455,10.10.2.149,4929,0x0, +HR-WS-049,2026-02-17T22:47:59.362Z,4625,2,bwilson,S-1-5-21-8363771-7527,10.10.1.13,5799,0xC000006D,Unknown user name or bad password +HR-WS-049,2026-02-17T13:36:02.040Z,4625,2,hbrown,S-1-5-21-4203892-2408,127.0.0.1,2016,0xC000006D,Unknown user name or bad password +HR-WS-049,2026-02-18T00:47:50.927Z,4624,2,idavis,S-1-5-21-2240592-1226,127.0.0.1,57331,0x0, +FIN-WS-050,2026-02-12T05:48:04.737Z,4624,7,gwhite,S-1-5-21-2051308-6380,10.10.3.150,61004,0x0, +FIN-WS-050,2026-02-12T18:33:54.623Z,4624,10,jsmith,S-1-5-21-1049252-2230,10.10.3.150,58695,0x0, +FIN-WS-050,2026-02-17T00:42:10.732Z,4625,3,hbrown,S-1-5-21-2183339-5054,127.0.0.1,64977,0xC000006D,Unknown user name or bad password +FIN-WS-050,2026-02-14T07:49:48.836Z,4624,3,jsmith,S-1-5-21-1395068-9901,10.10.3.150,19611,0x0, +FIN-WS-050,2026-02-17T23:42:25.168Z,4624,3,fthompson,S-1-5-21-5114850-7581,10.10.3.150,51467,0x0, +FIN-WS-050,2026-02-13T21:06:15.575Z,4624,3,emartinez,S-1-5-21-4256872-5502,127.0.0.1,18137,0x0, +FIN-WS-050,2026-02-15T22:00:53.645Z,4624,10,hbrown,S-1-5-21-2813043-9745,10.10.1.169,40375,0x0, +FIN-WS-050,2026-02-12T10:15:01.426Z,4624,2,idavis,S-1-5-21-9543499-3175,127.0.0.1,29052,0x0, +FIN-WS-050,2026-02-20T06:40:54.372Z,4624,2,cjohnson,S-1-5-21-5356130-1086,127.0.0.1,62412,0x0, +FIN-WS-050,2026-02-18T18:05:28.082Z,4624,3,cjohnson,S-1-5-21-7612660-1615,10.10.3.150,14450,0x0, +FIN-WS-050,2026-02-16T08:33:45.099Z,4624,3,idavis,S-1-5-21-1239228-6120,127.0.0.1,45097,0x0, +FIN-WS-050,2026-02-14T16:37:47.116Z,4625,3,fthompson,S-1-5-21-6570592-4264,10.10.1.112,43618,0xC000006D,Unknown user name or bad password +FIN-WS-050,2026-02-13T18:45:29.588Z,4624,3,cjohnson,S-1-5-21-9009187-6561,10.10.3.150,56576,0x0, +FIN-WS-050,2026-02-19T02:12:05.194Z,4624,2,dlee,S-1-5-21-4710396-1633,10.10.3.150,55713,0x0, +FIN-WS-050,2026-02-12T09:37:54.637Z,4624,10,svc_backup,S-1-5-21-2982071-3742,10.10.3.150,29817,0x0, +FIN-WS-050,2026-02-18T05:44:40.045Z,4624,3,svc_web,S-1-5-21-3336168-5467,127.0.0.1,56316,0x0, +FIN-WS-050,2026-02-12T06:14:47.315Z,4624,3,gwhite,S-1-5-21-3481555-8500,10.10.1.127,32056,0x0, +FIN-WS-050,2026-02-16T18:28:32.205Z,4624,3,agarcia,S-1-5-21-1893127-6279,10.10.1.142,14097,0x0, +FIN-WS-050,2026-02-10T16:00:20.414Z,4624,10,admin,S-1-5-21-2741280-8140,10.10.3.150,29765,0x0, +FIN-WS-050,2026-02-17T14:52:00.859Z,4624,3,svc_web,S-1-5-21-1413900-9245,127.0.0.1,1301,0x0, +FIN-WS-050,2026-02-17T11:48:54.919Z,4625,10,dlee,S-1-5-21-9086746-2596,10.10.3.150,25974,0xC000006D,Unknown user name or bad password +FIN-WS-050,2026-02-16T07:33:36.248Z,4624,3,svc_backup,S-1-5-21-4747595-7329,10.10.1.11,4201,0x0, +FIN-WS-050,2026-02-12T12:15:52.518Z,4625,7,admin,S-1-5-21-4085528-4490,127.0.0.1,1370,0xC000006D,Unknown user name or bad password +FIN-WS-050,2026-02-20T09:12:41.610Z,4624,10,idavis,S-1-5-21-4573642-4279,10.10.3.138,5234,0x0, +FIN-WS-050,2026-02-16T08:23:26.843Z,4624,10,svc_web,S-1-5-21-6143555-7462,127.0.0.1,63541,0x0, +FIN-WS-050,2026-02-18T00:33:13.905Z,4624,2,svc_web,S-1-5-21-3264991-7850,10.10.3.150,10818,0x0, +FIN-WS-050,2026-02-17T23:28:33.566Z,4625,3,agarcia,S-1-5-21-6639439-4068,10.10.3.150,25928,0xC000006D,Unknown user name or bad password +FIN-WS-050,2026-02-12T22:59:56.854Z,4624,3,bwilson,S-1-5-21-4032793-6835,127.0.0.1,9751,0x0, +FIN-WS-050,2026-02-18T11:18:27.155Z,4624,2,fthompson,S-1-5-21-7488461-4981,10.10.2.110,33929,0x0, +SLS-WS-051,2026-02-15T08:56:35.316Z,4624,3,idavis,S-1-5-21-5518815-6220,10.10.1.151,42063,0x0, +SLS-WS-051,2026-02-12T18:46:48.764Z,4624,3,dlee,S-1-5-21-8261783-8587,10.10.1.151,43396,0x0, +SLS-WS-051,2026-02-14T17:10:24.664Z,4624,3,dlee,S-1-5-21-4485673-8264,10.10.1.151,37655,0x0, +SLS-WS-051,2026-02-19T11:24:55.230Z,4625,3,fthompson,S-1-5-21-7095536-3601,10.10.3.147,33186,0xC000006D,Unknown user name or bad password +SLS-WS-051,2026-02-18T13:13:04.610Z,4625,10,agarcia,S-1-5-21-3908777-1496,127.0.0.1,45998,0xC000006D,Unknown user name or bad password +SLS-WS-051,2026-02-10T08:03:30.320Z,4624,2,cjohnson,S-1-5-21-4536851-8409,10.10.1.151,17229,0x0, +SLS-WS-051,2026-02-18T15:24:06.607Z,4624,10,agarcia,S-1-5-21-6186264-4810,10.10.1.151,8775,0x0, +SLS-WS-051,2026-02-12T07:37:35.447Z,4624,3,agarcia,S-1-5-21-9977214-9730,10.10.1.151,16635,0x0, +SLS-WS-051,2026-02-11T02:52:45.470Z,4624,7,emartinez,S-1-5-21-7192186-3524,10.10.1.151,36741,0x0, +SLS-WS-051,2026-02-11T18:08:55.485Z,4624,10,fthompson,S-1-5-21-4383387-1566,127.0.0.1,31829,0x0, +SLS-WS-051,2026-02-11T08:28:21.696Z,4624,3,svc_backup,S-1-5-21-3818132-7811,10.10.1.151,48523,0x0, +SLS-WS-051,2026-02-20T13:03:33.759Z,4625,7,cjohnson,S-1-5-21-5611605-1228,10.10.1.151,53604,0xC000006D,Unknown user name or bad password +SLS-WS-051,2026-02-18T16:04:28.417Z,4624,2,dlee,S-1-5-21-5114821-3856,10.10.2.149,61859,0x0, +SLS-WS-051,2026-02-20T03:59:33.647Z,4624,10,gwhite,S-1-5-21-7990383-2773,10.10.1.103,63867,0x0, +SLS-WS-051,2026-02-11T07:13:31.272Z,4624,7,agarcia,S-1-5-21-4333270-5277,10.10.2.11,41411,0x0, +SLS-WS-051,2026-02-19T19:30:33.666Z,4624,10,svc_backup,S-1-5-21-6904330-6453,127.0.0.1,45429,0x0, +SLS-WS-051,2026-02-19T02:54:38.038Z,4624,7,fthompson,S-1-5-21-7824818-2534,127.0.0.1,60605,0x0, +SLS-WS-051,2026-02-17T20:46:16.458Z,4624,3,svc_sql,S-1-5-21-7598363-2860,10.10.1.151,13648,0x0, +SLS-WS-051,2026-02-12T10:21:43.510Z,4624,2,gwhite,S-1-5-21-9347473-2883,10.10.1.124,37893,0x0, +SLS-WS-051,2026-02-12T14:00:01.441Z,4624,3,svc_backup,S-1-5-21-4182967-5552,127.0.0.1,36780,0x0, +SLS-WS-051,2026-02-20T02:21:43.419Z,4624,3,fthompson,S-1-5-21-1663061-4441,10.10.1.151,1126,0x0, +SLS-WS-051,2026-02-14T16:17:12.224Z,4624,3,fthompson,S-1-5-21-3838757-9146,127.0.0.1,41422,0x0, +SLS-WS-051,2026-02-16T15:59:19.043Z,4624,7,bwilson,S-1-5-21-2712741-9192,127.0.0.1,25338,0x0, +ENG-WS-052,2026-02-15T23:49:35.748Z,4624,2,idavis,S-1-5-21-5490894-5279,127.0.0.1,12798,0x0, +ENG-WS-052,2026-02-17T22:06:38.049Z,4624,10,idavis,S-1-5-21-7441152-6982,127.0.0.1,9413,0x0, +ENG-WS-052,2026-02-14T04:57:51.380Z,4625,2,idavis,S-1-5-21-7334857-8912,10.10.2.152,45844,0xC000006D,Unknown user name or bad password +ENG-WS-052,2026-02-18T05:58:38.616Z,4624,2,dlee,S-1-5-21-9356885-9958,10.10.2.152,47879,0x0, +ENG-WS-052,2026-02-11T22:01:41.168Z,4625,2,dlee,S-1-5-21-1258426-8181,10.10.2.152,51288,0xC000006D,Unknown user name or bad password +ENG-WS-052,2026-02-18T15:01:57.907Z,4624,3,hbrown,S-1-5-21-1368359-4173,127.0.0.1,15090,0x0, +ENG-WS-052,2026-02-20T14:08:15.674Z,4624,10,svc_backup,S-1-5-21-1708080-4127,127.0.0.1,58129,0x0, +ENG-WS-052,2026-02-13T01:21:51.429Z,4624,3,svc_sql,S-1-5-21-7090889-5199,10.10.3.114,26885,0x0, +ENG-WS-052,2026-02-17T00:34:31.200Z,4624,3,cjohnson,S-1-5-21-2206262-7504,127.0.0.1,2813,0x0, +ENG-WS-052,2026-02-11T11:16:28.014Z,4624,10,admin,S-1-5-21-3962361-7087,127.0.0.1,44033,0x0, +ENG-WS-052,2026-02-19T15:04:26.644Z,4624,2,svc_backup,S-1-5-21-4298099-8712,10.10.2.152,33337,0x0, +ENG-WS-052,2026-02-18T05:19:45.564Z,4624,3,agarcia,S-1-5-21-3195444-1521,10.10.1.124,47634,0x0, +ENG-WS-052,2026-02-14T00:06:53.759Z,4625,7,emartinez,S-1-5-21-7066706-1205,10.10.3.144,20300,0xC000006D,Unknown user name or bad password +ENG-WS-052,2026-02-17T07:36:57.527Z,4624,3,agarcia,S-1-5-21-9255743-7139,127.0.0.1,19177,0x0, +ENG-WS-052,2026-02-10T11:08:02.166Z,4624,3,admin,S-1-5-21-9473286-4225,127.0.0.1,64037,0x0, +ENG-WS-052,2026-02-16T08:09:42.452Z,4624,3,cjohnson,S-1-5-21-1321172-1346,10.10.2.152,40770,0x0, +ENG-WS-052,2026-02-20T11:51:50.613Z,4624,10,cjohnson,S-1-5-21-1924283-4905,127.0.0.1,17063,0x0, +ENG-WS-052,2026-02-19T10:24:59.947Z,4625,3,cjohnson,S-1-5-21-4066186-9003,10.10.2.152,38143,0xC000006D,Unknown user name or bad password +ENG-WS-052,2026-02-20T05:45:08.514Z,4624,3,svc_backup,S-1-5-21-6695851-4472,10.10.2.152,42366,0x0, +ENG-WS-052,2026-02-10T13:25:08.903Z,4624,7,idavis,S-1-5-21-2897130-5733,10.10.2.152,44559,0x0, +ENG-WS-052,2026-02-20T17:59:09.480Z,4624,3,svc_backup,S-1-5-21-7484215-1322,10.10.2.152,26297,0x0, +ENG-WS-052,2026-02-15T07:39:23.419Z,4624,3,svc_backup,S-1-5-21-7272725-5556,10.10.3.120,33088,0x0, +ENG-WS-052,2026-02-18T04:15:18.784Z,4624,2,dlee,S-1-5-21-1400067-3747,10.10.2.152,54179,0x0, +ENG-WS-052,2026-02-17T05:13:54.980Z,4624,3,admin,S-1-5-21-8790132-3202,127.0.0.1,60209,0x0, +ENG-WS-052,2026-02-10T14:40:44.214Z,4625,10,emartinez,S-1-5-21-8571722-7504,127.0.0.1,53528,0xC000006D,Unknown user name or bad password +ENG-WS-052,2026-02-13T17:19:05.099Z,4624,2,svc_web,S-1-5-21-2038272-5725,127.0.0.1,56876,0x0, +ENG-WS-052,2026-02-19T12:44:42.818Z,4625,3,agarcia,S-1-5-21-7662826-5371,10.10.2.152,65135,0xC000006D,Unknown user name or bad password +ENG-WS-052,2026-02-20T01:58:58.876Z,4624,7,agarcia,S-1-5-21-5779427-4366,127.0.0.1,46350,0x0, +ENG-WS-052,2026-02-11T22:56:56.564Z,4624,3,cjohnson,S-1-5-21-2472565-2268,127.0.0.1,42093,0x0, +LEG-WS-053,2026-02-18T05:04:39.177Z,4624,2,gwhite,S-1-5-21-6727639-7134,10.10.3.153,20765,0x0, +LEG-WS-053,2026-02-11T05:28:23.379Z,4624,3,cjohnson,S-1-5-21-2696216-5442,127.0.0.1,53591,0x0, +LEG-WS-053,2026-02-12T08:12:22.521Z,4624,7,bwilson,S-1-5-21-8656059-5950,127.0.0.1,10184,0x0, +LEG-WS-053,2026-02-15T18:36:38.583Z,4624,7,hbrown,S-1-5-21-3159960-8229,127.0.0.1,49808,0x0, +LEG-WS-053,2026-02-13T00:35:04.305Z,4624,3,admin,S-1-5-21-4797423-3884,10.10.3.153,33178,0x0, +LEG-WS-053,2026-02-16T17:24:14.766Z,4624,3,bwilson,S-1-5-21-9899661-8575,10.10.3.153,26006,0x0, +LEG-WS-053,2026-02-18T02:06:50.731Z,4624,3,emartinez,S-1-5-21-2768028-8215,127.0.0.1,54968,0x0, +LEG-WS-053,2026-02-12T12:59:29.785Z,4625,3,bwilson,S-1-5-21-2792609-5585,10.10.3.153,24357,0xC000006D,Unknown user name or bad password +LEG-WS-053,2026-02-19T03:51:25.632Z,4625,10,bwilson,S-1-5-21-8711283-5246,10.10.2.137,2711,0xC000006D,Unknown user name or bad password +LEG-WS-053,2026-02-15T13:07:25.537Z,4625,10,svc_sql,S-1-5-21-4130448-8170,10.10.1.115,43141,0xC000006D,Unknown user name or bad password +LEG-WS-053,2026-02-19T19:18:37.221Z,4624,7,admin,S-1-5-21-5666967-7358,10.10.2.155,37674,0x0, +LEG-WS-053,2026-02-11T05:49:44.767Z,4624,2,gwhite,S-1-5-21-5446002-4462,10.10.1.121,17497,0x0, +LEG-WS-053,2026-02-18T15:02:53.286Z,4624,3,dlee,S-1-5-21-7639146-1337,10.10.2.146,53598,0x0, +LEG-WS-053,2026-02-16T18:53:25.133Z,4624,7,bwilson,S-1-5-21-7864785-2485,10.10.2.158,16756,0x0, +LEG-WS-053,2026-02-17T12:22:56.864Z,4624,10,jsmith,S-1-5-21-1518145-5269,127.0.0.1,53116,0x0, +LEG-WS-053,2026-02-14T13:21:35.470Z,4624,7,svc_sql,S-1-5-21-9067696-4748,10.10.3.153,62792,0x0, +LEG-WS-053,2026-02-19T09:21:33.998Z,4624,3,bwilson,S-1-5-21-4088976-1231,127.0.0.1,14719,0x0, +LEG-WS-053,2026-02-15T17:58:36.969Z,4624,10,gwhite,S-1-5-21-1534644-2120,10.10.1.115,49557,0x0, +LEG-WS-053,2026-02-12T04:48:20.444Z,4624,3,emartinez,S-1-5-21-9421454-6152,10.10.3.162,61521,0x0, +LEG-WS-053,2026-02-12T09:38:59.515Z,4624,3,gwhite,S-1-5-21-2185173-4609,127.0.0.1,52449,0x0, +LEG-WS-053,2026-02-15T11:20:46.583Z,4624,2,fthompson,S-1-5-21-7873738-6714,10.10.3.153,61195,0x0, +LEG-WS-053,2026-02-12T00:24:48.950Z,4624,2,idavis,S-1-5-21-9976849-5098,127.0.0.1,20234,0x0, +LEG-WS-053,2026-02-14T03:00:52.844Z,4624,3,bwilson,S-1-5-21-7334518-9437,127.0.0.1,16248,0x0, +MKT-WS-054,2026-02-14T06:28:36.995Z,4624,7,hbrown,S-1-5-21-3031260-1929,10.10.1.121,5709,0x0, +MKT-WS-054,2026-02-11T20:50:40.011Z,4624,3,hbrown,S-1-5-21-6723251-1056,10.10.1.154,29992,0x0, +MKT-WS-054,2026-02-14T13:52:33.092Z,4625,3,svc_backup,S-1-5-21-2750587-9705,10.10.2.10,53825,0xC000006D,Unknown user name or bad password +MKT-WS-054,2026-02-12T08:53:18.621Z,4624,2,fthompson,S-1-5-21-5236705-3516,127.0.0.1,24670,0x0, +MKT-WS-054,2026-02-19T13:28:49.271Z,4624,7,cjohnson,S-1-5-21-2206773-8997,127.0.0.1,50462,0x0, +MKT-WS-054,2026-02-12T12:04:07.610Z,4624,7,bwilson,S-1-5-21-1292659-2331,10.10.3.168,62199,0x0, +MKT-WS-054,2026-02-11T00:44:09.737Z,4624,3,fthompson,S-1-5-21-5741499-4371,10.10.1.154,44468,0x0, +MKT-WS-054,2026-02-17T15:42:40.895Z,4624,2,idavis,S-1-5-21-8819324-4548,10.10.1.154,36400,0x0, +MKT-WS-054,2026-02-18T13:17:47.792Z,4625,2,bwilson,S-1-5-21-9545460-7537,10.10.1.154,38052,0xC000006D,Unknown user name or bad password +MKT-WS-054,2026-02-17T06:51:48.402Z,4624,3,idavis,S-1-5-21-1693069-5075,10.10.1.154,64323,0x0, +EXEC-WS-055,2026-02-14T18:19:27.607Z,4624,3,agarcia,S-1-5-21-7118624-5662,10.10.2.155,9223,0x0, +EXEC-WS-055,2026-02-11T09:53:27.771Z,4624,7,fthompson,S-1-5-21-5315505-8861,10.10.2.164,10733,0x0, +EXEC-WS-055,2026-02-16T03:34:41.507Z,4625,7,cjohnson,S-1-5-21-5292643-3839,10.10.2.155,25642,0xC000006D,Unknown user name or bad password +EXEC-WS-055,2026-02-18T10:15:28.296Z,4624,2,jsmith,S-1-5-21-2370097-8299,127.0.0.1,20714,0x0, +EXEC-WS-055,2026-02-18T20:09:33.558Z,4624,2,gwhite,S-1-5-21-7292827-5076,10.10.2.155,60391,0x0, +EXEC-WS-055,2026-02-10T10:43:15.132Z,4624,3,svc_backup,S-1-5-21-4240305-2118,127.0.0.1,2262,0x0, +EXEC-WS-055,2026-02-17T14:09:56.690Z,4624,3,svc_web,S-1-5-21-1925788-7794,10.10.2.155,26657,0x0, +EXEC-WS-055,2026-02-12T18:01:51.209Z,4624,3,idavis,S-1-5-21-6033940-8897,10.10.2.101,46950,0x0, +EXEC-WS-055,2026-02-12T18:29:39.584Z,4624,2,admin,S-1-5-21-6874837-3566,10.10.2.131,33457,0x0, +EXEC-WS-055,2026-02-13T04:33:08.091Z,4624,10,dlee,S-1-5-21-4328987-1955,10.10.1.124,43173,0x0, +EXEC-WS-055,2026-02-17T19:46:13.783Z,4624,2,cjohnson,S-1-5-21-9082989-6536,127.0.0.1,63296,0x0, +EXEC-WS-055,2026-02-15T09:08:49.366Z,4624,3,svc_backup,S-1-5-21-7380260-2957,10.10.1.130,4124,0x0, +EXEC-WS-055,2026-02-13T00:54:49.452Z,4624,2,hbrown,S-1-5-21-7358155-9524,127.0.0.1,21184,0x0, +EXEC-WS-055,2026-02-16T03:12:08.029Z,4624,3,emartinez,S-1-5-21-5092041-9826,10.10.2.155,63772,0x0, +EXEC-WS-055,2026-02-11T23:24:49.498Z,4624,3,svc_sql,S-1-5-21-1372584-7792,10.10.2.155,24132,0x0, +EXEC-WS-055,2026-02-16T15:27:40.050Z,4624,2,agarcia,S-1-5-21-3779008-9582,127.0.0.1,29495,0x0, +EXEC-WS-055,2026-02-13T21:54:48.873Z,4624,3,svc_web,S-1-5-21-7302429-3824,127.0.0.1,24076,0x0, +EXEC-WS-055,2026-02-16T06:39:21.458Z,4625,3,cjohnson,S-1-5-21-7119752-7537,127.0.0.1,28425,0xC000006D,Unknown user name or bad password +EXEC-WS-055,2026-02-12T17:53:32.602Z,4624,3,gwhite,S-1-5-21-1802205-6261,10.10.3.123,44107,0x0, +EXEC-WS-055,2026-02-14T15:24:25.636Z,4625,2,admin,S-1-5-21-7169988-1443,10.10.2.125,56096,0xC000006D,Unknown user name or bad password +EXEC-WS-055,2026-02-12T23:29:41.047Z,4624,3,cjohnson,S-1-5-21-4333160-9547,10.10.2.155,49998,0x0, +EXEC-WS-055,2026-02-10T08:11:41.580Z,4624,7,svc_backup,S-1-5-21-8422701-2734,10.10.2.155,12152,0x0, +EXEC-WS-055,2026-02-14T00:53:51.717Z,4624,3,hbrown,S-1-5-21-5932455-4928,127.0.0.1,5812,0x0, +EXEC-WS-055,2026-02-20T00:20:29.218Z,4624,10,svc_sql,S-1-5-21-2008930-3075,10.10.2.155,44721,0x0, +EXEC-WS-055,2026-02-19T18:40:38.661Z,4625,3,hbrown,S-1-5-21-1646584-9401,127.0.0.1,45909,0xC000006D,Unknown user name or bad password +EXEC-WS-055,2026-02-19T07:17:19.213Z,4625,3,svc_sql,S-1-5-21-5076616-3874,10.10.2.155,47739,0xC000006D,Unknown user name or bad password +EXEC-WS-055,2026-02-19T22:36:42.566Z,4624,3,cjohnson,S-1-5-21-2557636-2124,10.10.2.155,55322,0x0, +EXEC-WS-055,2026-02-12T06:39:22.642Z,4624,3,svc_sql,S-1-5-21-9082712-7502,10.10.1.160,65289,0x0, +EXEC-WS-055,2026-02-15T14:22:45.135Z,4624,3,hbrown,S-1-5-21-3050108-6545,10.10.2.137,61797,0x0, +IT-WS-056,2026-02-12T22:47:43.114Z,4625,10,hbrown,S-1-5-21-2562480-8939,127.0.0.1,46813,0xC000006D,Unknown user name or bad password +IT-WS-056,2026-02-15T15:57:28.317Z,4624,10,svc_backup,S-1-5-21-2654985-4454,10.10.3.156,42234,0x0, +IT-WS-056,2026-02-18T16:55:05.154Z,4624,3,agarcia,S-1-5-21-3722510-4753,127.0.0.1,8971,0x0, +IT-WS-056,2026-02-14T14:02:30.528Z,4624,10,svc_web,S-1-5-21-6724911-7225,10.10.3.165,47422,0x0, +IT-WS-056,2026-02-20T17:55:08.344Z,4624,10,svc_backup,S-1-5-21-4627790-3759,127.0.0.1,33497,0x0, +IT-WS-056,2026-02-15T05:50:17.339Z,4624,3,hbrown,S-1-5-21-8907293-5485,127.0.0.1,6510,0x0, +IT-WS-056,2026-02-18T22:30:11.967Z,4624,3,admin,S-1-5-21-9371822-9099,10.10.3.156,1511,0x0, +IT-WS-056,2026-02-13T12:13:47.295Z,4624,10,emartinez,S-1-5-21-1611074-5652,10.10.3.156,45258,0x0, +IT-WS-056,2026-02-17T05:42:09.729Z,4625,7,hbrown,S-1-5-21-2904966-2145,10.10.3.138,11356,0xC000006D,Unknown user name or bad password +IT-WS-056,2026-02-13T02:40:39.581Z,4625,7,dlee,S-1-5-21-1995158-8153,10.10.1.127,11510,0xC000006D,Unknown user name or bad password +IT-WS-056,2026-02-18T05:52:12.043Z,4624,3,svc_backup,S-1-5-21-9802678-2486,10.10.2.164,39968,0x0, +IT-WS-056,2026-02-19T14:41:48.468Z,4624,3,fthompson,S-1-5-21-1950953-5747,10.10.2.104,55122,0x0, +IT-WS-056,2026-02-14T08:44:49.100Z,4624,10,emartinez,S-1-5-21-6818615-8730,10.10.3.156,17351,0x0, +IT-WS-056,2026-02-18T07:02:17.135Z,4624,3,admin,S-1-5-21-8713612-1265,127.0.0.1,37151,0x0, +IT-WS-056,2026-02-15T14:30:49.443Z,4624,7,admin,S-1-5-21-3275387-4570,10.10.3.156,64883,0x0, +IT-WS-056,2026-02-14T02:42:07.289Z,4624,3,hbrown,S-1-5-21-3815333-7185,127.0.0.1,53749,0x0, +IT-WS-056,2026-02-13T22:09:19.870Z,4624,3,emartinez,S-1-5-21-6738242-9890,10.10.3.156,52065,0x0, +IT-WS-056,2026-02-20T03:30:48.577Z,4625,3,cjohnson,S-1-5-21-1541748-1065,10.10.2.116,5933,0xC000006D,Unknown user name or bad password +IT-WS-056,2026-02-18T21:07:11.677Z,4625,3,agarcia,S-1-5-21-1185619-1841,10.10.3.129,45570,0xC000006D,Unknown user name or bad password +IT-WS-056,2026-02-13T21:05:12.207Z,4624,10,idavis,S-1-5-21-3473864-8023,10.10.1.112,4725,0x0, +IT-WS-056,2026-02-17T09:34:11.165Z,4624,10,gwhite,S-1-5-21-6675521-2417,127.0.0.1,37818,0x0, +IT-WS-056,2026-02-17T06:12:21.749Z,4624,3,cjohnson,S-1-5-21-5575961-4789,10.10.3.156,53699,0x0, +IT-WS-056,2026-02-16T18:59:03.745Z,4624,10,dlee,S-1-5-21-4602763-2523,10.10.3.150,28417,0x0, +IT-WS-056,2026-02-19T05:16:30.038Z,4624,3,svc_web,S-1-5-21-7830008-2205,10.10.3.156,52090,0x0, +HR-WS-057,2026-02-13T11:58:16.609Z,4625,3,jsmith,S-1-5-21-9663536-6509,10.10.1.157,61616,0xC000006D,Unknown user name or bad password +HR-WS-057,2026-02-16T11:27:45.333Z,4624,7,gwhite,S-1-5-21-5484500-8542,127.0.0.1,63639,0x0, +HR-WS-057,2026-02-17T05:35:52.461Z,4624,3,svc_sql,S-1-5-21-4071224-6844,10.10.1.157,20979,0x0, +HR-WS-057,2026-02-16T19:20:01.222Z,4624,7,jsmith,S-1-5-21-2516265-8921,10.10.2.170,52480,0x0, +HR-WS-057,2026-02-18T15:35:19.435Z,4624,3,svc_web,S-1-5-21-6318343-7201,10.10.1.145,50489,0x0, +HR-WS-057,2026-02-10T15:44:43.050Z,4624,10,idavis,S-1-5-21-5490262-1387,10.10.1.157,39351,0x0, +HR-WS-057,2026-02-17T01:08:58.040Z,4624,3,emartinez,S-1-5-21-5218886-6006,10.10.3.174,54766,0x0, +HR-WS-057,2026-02-17T10:03:43.470Z,4624,7,fthompson,S-1-5-21-2170291-9081,10.10.1.148,59755,0x0, +HR-WS-057,2026-02-12T17:07:28.103Z,4624,10,agarcia,S-1-5-21-3072638-4169,10.10.1.157,44917,0x0, +HR-WS-057,2026-02-18T00:27:50.943Z,4624,2,gwhite,S-1-5-21-7121937-3286,10.10.1.157,32964,0x0, +HR-WS-057,2026-02-12T02:14:05.638Z,4624,3,hbrown,S-1-5-21-7359712-9691,10.10.1.157,43716,0x0, +HR-WS-057,2026-02-15T05:51:07.677Z,4624,7,jsmith,S-1-5-21-3191067-4714,10.10.3.117,58072,0x0, +HR-WS-057,2026-02-10T23:37:22.326Z,4624,3,svc_backup,S-1-5-21-3380395-7263,127.0.0.1,44600,0x0, +HR-WS-057,2026-02-18T10:15:21.544Z,4624,2,hbrown,S-1-5-21-3629588-5911,127.0.0.1,62131,0x0, +HR-WS-057,2026-02-14T17:50:06.945Z,4624,3,gwhite,S-1-5-21-6482718-4471,127.0.0.1,37336,0x0, +HR-WS-057,2026-02-13T14:16:25.902Z,4624,3,cjohnson,S-1-5-21-6268651-5428,10.10.1.154,60149,0x0, +FIN-WS-058,2026-02-15T20:34:08.371Z,4624,10,agarcia,S-1-5-21-1344102-7641,10.10.2.158,53210,0x0, +FIN-WS-058,2026-02-17T05:06:50.917Z,4624,10,svc_web,S-1-5-21-3394252-3083,10.10.3.120,46388,0x0, +FIN-WS-058,2026-02-20T14:54:31.979Z,4624,3,svc_sql,S-1-5-21-6571298-1463,127.0.0.1,55698,0x0, +FIN-WS-058,2026-02-15T00:52:36.744Z,4625,2,bwilson,S-1-5-21-6938775-1062,10.10.2.158,53445,0xC000006D,Unknown user name or bad password +FIN-WS-058,2026-02-16T00:43:14.797Z,4624,3,idavis,S-1-5-21-3485732-8032,10.10.1.115,4389,0x0, +FIN-WS-058,2026-02-16T17:42:53.984Z,4624,2,hbrown,S-1-5-21-8773367-6860,127.0.0.1,16402,0x0, +FIN-WS-058,2026-02-19T18:43:39.576Z,4624,10,emartinez,S-1-5-21-7763089-5979,127.0.0.1,46449,0x0, +FIN-WS-058,2026-02-10T20:46:43.491Z,4624,3,bwilson,S-1-5-21-2148889-8449,127.0.0.1,54974,0x0, +FIN-WS-058,2026-02-18T07:56:52.477Z,4625,3,fthompson,S-1-5-21-6023740-8617,10.10.3.129,3839,0xC000006D,Unknown user name or bad password +FIN-WS-058,2026-02-12T19:23:46.243Z,4624,2,hbrown,S-1-5-21-3311860-9322,10.10.2.107,11977,0x0, +FIN-WS-058,2026-02-18T09:02:05.405Z,4624,3,bwilson,S-1-5-21-5655864-7606,10.10.2.152,11333,0x0, +FIN-WS-058,2026-02-16T04:44:41.251Z,4624,3,idavis,S-1-5-21-6158517-5306,127.0.0.1,62803,0x0, +FIN-WS-058,2026-02-17T05:22:27.389Z,4624,2,gwhite,S-1-5-21-1041694-3206,10.10.1.172,49299,0x0, +FIN-WS-058,2026-02-15T08:09:09.842Z,4625,10,emartinez,S-1-5-21-8051174-2322,10.10.2.158,50856,0xC000006D,Unknown user name or bad password +FIN-WS-058,2026-02-10T09:18:02.035Z,4624,2,dlee,S-1-5-21-3670153-9243,10.10.2.158,49273,0x0, +FIN-WS-058,2026-02-14T08:40:38.651Z,4624,3,jsmith,S-1-5-21-9705956-7756,127.0.0.1,46577,0x0, +FIN-WS-058,2026-02-11T17:08:21.374Z,4624,3,cjohnson,S-1-5-21-8750450-6632,10.10.2.158,36203,0x0, +FIN-WS-058,2026-02-15T18:32:58.455Z,4624,3,jsmith,S-1-5-21-5568229-2829,127.0.0.1,19038,0x0, +FIN-WS-058,2026-02-15T14:38:52.777Z,4624,3,fthompson,S-1-5-21-8563773-1468,127.0.0.1,44170,0x0, +FIN-WS-058,2026-02-13T08:50:34.545Z,4624,7,svc_backup,S-1-5-21-4189980-9108,10.10.2.140,49772,0x0, +FIN-WS-058,2026-02-15T10:22:53.966Z,4624,3,svc_backup,S-1-5-21-5749931-9092,10.10.1.112,42019,0x0, +FIN-WS-058,2026-02-14T04:21:49.278Z,4624,3,gwhite,S-1-5-21-6519816-2363,127.0.0.1,20482,0x0, +FIN-WS-058,2026-02-17T23:49:40.115Z,4624,3,agarcia,S-1-5-21-5884394-5823,127.0.0.1,53988,0x0, +FIN-WS-058,2026-02-18T15:40:30.429Z,4624,7,hbrown,S-1-5-21-3596520-2800,127.0.0.1,26670,0x0, +FIN-WS-058,2026-02-18T14:48:01.175Z,4624,3,svc_web,S-1-5-21-7462860-6047,10.10.2.158,10764,0x0, +FIN-WS-058,2026-02-17T05:26:46.713Z,4624,3,agarcia,S-1-5-21-5859155-4284,127.0.0.1,13851,0x0, +FIN-WS-058,2026-02-17T15:35:18.424Z,4625,10,dlee,S-1-5-21-9386036-8217,127.0.0.1,56926,0xC000006D,Unknown user name or bad password +SLS-WS-059,2026-02-15T13:13:05.426Z,4624,10,idavis,S-1-5-21-4773806-5828,127.0.0.1,54615,0x0, +SLS-WS-059,2026-02-18T05:11:46.700Z,4624,2,gwhite,S-1-5-21-7892581-9758,127.0.0.1,32807,0x0, +SLS-WS-059,2026-02-16T01:06:41.237Z,4624,3,bwilson,S-1-5-21-9784891-5830,10.10.3.159,17994,0x0, +SLS-WS-059,2026-02-15T03:24:38.511Z,4624,10,fthompson,S-1-5-21-3434294-9336,10.10.3.159,26620,0x0, +SLS-WS-059,2026-02-12T13:08:55.090Z,4624,3,jsmith,S-1-5-21-3465476-3652,127.0.0.1,16467,0x0, +SLS-WS-059,2026-02-18T18:26:48.033Z,4624,3,svc_sql,S-1-5-21-2777128-4575,10.10.2.119,10483,0x0, +SLS-WS-059,2026-02-20T07:23:05.525Z,4624,7,svc_sql,S-1-5-21-9542560-4599,10.10.3.159,10340,0x0, +SLS-WS-059,2026-02-13T20:20:04.846Z,4624,7,bwilson,S-1-5-21-3748162-9644,10.10.1.13,21105,0x0, +ENG-WS-060,2026-02-13T06:48:46.576Z,4625,3,gwhite,S-1-5-21-6006310-5834,127.0.0.1,28751,0xC000006D,Unknown user name or bad password +ENG-WS-060,2026-02-18T02:31:59.848Z,4624,3,svc_sql,S-1-5-21-2024071-1796,127.0.0.1,29575,0x0, +ENG-WS-060,2026-02-18T01:11:45.212Z,4625,3,svc_web,S-1-5-21-8348059-2968,127.0.0.1,57135,0xC000006D,Unknown user name or bad password +ENG-WS-060,2026-02-15T20:22:54.309Z,4624,3,agarcia,S-1-5-21-5674662-3810,10.10.1.160,13950,0x0, +ENG-WS-060,2026-02-10T16:47:32.510Z,4624,10,emartinez,S-1-5-21-2848787-7067,127.0.0.1,17376,0x0, +ENG-WS-060,2026-02-11T10:01:11.358Z,4624,2,cjohnson,S-1-5-21-8427353-3795,127.0.0.1,22696,0x0, +ENG-WS-060,2026-02-16T06:55:12.231Z,4624,10,svc_web,S-1-5-21-2223676-9573,127.0.0.1,53034,0x0, +ENG-WS-060,2026-02-20T05:33:23.802Z,4624,10,emartinez,S-1-5-21-6771895-7921,127.0.0.1,10601,0x0, +ENG-WS-060,2026-02-15T08:16:04.624Z,4624,3,gwhite,S-1-5-21-1111562-4510,127.0.0.1,14392,0x0, +LEG-WS-061,2026-02-19T12:48:02.227Z,4625,3,bwilson,S-1-5-21-6211376-8348,127.0.0.1,46300,0xC000006D,Unknown user name or bad password +LEG-WS-061,2026-02-18T04:47:57.316Z,4624,3,svc_sql,S-1-5-21-2896636-9482,10.10.2.149,36652,0x0, +LEG-WS-061,2026-02-13T03:14:03.811Z,4624,2,emartinez,S-1-5-21-3857271-6930,10.10.3.132,24878,0x0, +LEG-WS-061,2026-02-10T15:10:43.503Z,4624,10,bwilson,S-1-5-21-4555153-8441,127.0.0.1,24941,0x0, +LEG-WS-061,2026-02-17T21:29:19.156Z,4624,7,agarcia,S-1-5-21-9238463-3662,10.10.3.102,24982,0x0, +LEG-WS-061,2026-02-20T00:51:55.665Z,4624,3,idavis,S-1-5-21-4991997-4652,10.10.1.106,49283,0x0, +LEG-WS-061,2026-02-18T14:51:45.165Z,4625,3,admin,S-1-5-21-6317953-7268,10.10.2.161,12310,0xC000006D,Unknown user name or bad password +LEG-WS-061,2026-02-16T18:17:00.162Z,4624,2,idavis,S-1-5-21-1005232-2088,127.0.0.1,22696,0x0, +LEG-WS-061,2026-02-11T17:59:51.689Z,4624,3,svc_backup,S-1-5-21-2525821-6561,10.10.2.161,2489,0x0, +LEG-WS-061,2026-02-19T15:01:35.002Z,4624,3,dlee,S-1-5-21-2673810-6063,127.0.0.1,39144,0x0, +LEG-WS-061,2026-02-20T15:48:36.862Z,4624,2,svc_web,S-1-5-21-3974964-3557,127.0.0.1,27691,0x0, +LEG-WS-061,2026-02-18T23:07:19.571Z,4624,3,admin,S-1-5-21-7763935-3755,127.0.0.1,57910,0x0, +LEG-WS-061,2026-02-17T08:33:37.191Z,4624,7,jsmith,S-1-5-21-3288013-9424,127.0.0.1,12115,0x0, +LEG-WS-061,2026-02-20T11:45:34.648Z,4624,7,emartinez,S-1-5-21-4979945-5540,127.0.0.1,34899,0x0, +LEG-WS-061,2026-02-13T13:56:24.835Z,4625,3,gwhite,S-1-5-21-9298294-1902,127.0.0.1,59215,0xC000006D,Unknown user name or bad password +LEG-WS-061,2026-02-18T22:41:22.959Z,4624,3,bwilson,S-1-5-21-9151291-6066,10.10.2.161,43783,0x0, +LEG-WS-061,2026-02-17T07:45:48.819Z,4624,2,svc_web,S-1-5-21-2147008-8115,10.10.2.161,5157,0x0, +LEG-WS-061,2026-02-13T21:50:27.677Z,4624,10,jsmith,S-1-5-21-9800908-9379,10.10.3.156,48863,0x0, +LEG-WS-061,2026-02-19T01:10:57.322Z,4624,2,svc_backup,S-1-5-21-5594434-3550,127.0.0.1,48338,0x0, +LEG-WS-061,2026-02-12T23:31:34.823Z,4624,2,hbrown,S-1-5-21-1193039-6308,10.10.2.161,60698,0x0, +LEG-WS-061,2026-02-11T03:27:39.394Z,4625,10,jsmith,S-1-5-21-4665149-7729,127.0.0.1,13173,0xC000006D,Unknown user name or bad password +MKT-WS-062,2026-02-18T05:44:40.358Z,4624,7,bwilson,S-1-5-21-2142423-1282,127.0.0.1,26885,0x0, +MKT-WS-062,2026-02-11T17:13:44.507Z,4624,2,svc_web,S-1-5-21-1956966-1033,10.10.2.167,37822,0x0, +MKT-WS-062,2026-02-16T20:04:25.082Z,4625,3,cjohnson,S-1-5-21-5923490-5814,127.0.0.1,46244,0xC000006D,Unknown user name or bad password +MKT-WS-062,2026-02-20T12:02:59.206Z,4624,3,svc_web,S-1-5-21-3533354-4249,127.0.0.1,14172,0x0, +MKT-WS-062,2026-02-15T18:03:52.173Z,4624,3,fthompson,S-1-5-21-7938547-2428,10.10.3.162,54633,0x0, +MKT-WS-062,2026-02-13T17:18:29.412Z,4624,3,cjohnson,S-1-5-21-5959796-9475,10.10.3.162,61149,0x0, +MKT-WS-062,2026-02-15T07:51:40.569Z,4624,10,hbrown,S-1-5-21-2225008-8021,10.10.3.162,19946,0x0, +MKT-WS-062,2026-02-16T07:46:31.856Z,4624,10,admin,S-1-5-21-6863794-2877,10.10.3.162,1038,0x0, +MKT-WS-062,2026-02-15T08:47:43.448Z,4624,7,agarcia,S-1-5-21-6526792-9041,127.0.0.1,22856,0x0, +MKT-WS-062,2026-02-14T20:43:57.361Z,4624,3,emartinez,S-1-5-21-8152780-2061,10.10.1.115,35420,0x0, +MKT-WS-062,2026-02-10T10:01:14.107Z,4624,3,bwilson,S-1-5-21-4685078-4132,10.10.3.162,29087,0x0, +MKT-WS-062,2026-02-16T13:47:30.954Z,4624,3,svc_backup,S-1-5-21-3287269-3897,10.10.3.162,50115,0x0, +MKT-WS-062,2026-02-11T13:40:05.145Z,4624,7,fthompson,S-1-5-21-2981783-2707,10.10.1.121,1058,0x0, +MKT-WS-062,2026-02-15T11:45:23.524Z,4624,3,gwhite,S-1-5-21-2489862-8522,127.0.0.1,2592,0x0, +MKT-WS-062,2026-02-17T14:23:20.297Z,4624,3,emartinez,S-1-5-21-8198354-8258,127.0.0.1,51067,0x0, +MKT-WS-062,2026-02-15T20:58:44.470Z,4624,3,svc_backup,S-1-5-21-9156859-8602,127.0.0.1,32724,0x0, +MKT-WS-062,2026-02-14T02:42:11.667Z,4625,10,admin,S-1-5-21-1830434-6438,10.10.2.152,29034,0xC000006D,Unknown user name or bad password +MKT-WS-062,2026-02-16T15:49:10.923Z,4624,7,svc_backup,S-1-5-21-3183886-9023,127.0.0.1,19984,0x0, +MKT-WS-062,2026-02-17T17:27:29.195Z,4624,2,cjohnson,S-1-5-21-4286800-3991,10.10.3.162,20433,0x0, +MKT-WS-062,2026-02-11T13:13:33.417Z,4624,3,dlee,S-1-5-21-7452555-4109,10.10.3.141,31910,0x0, +MKT-WS-062,2026-02-20T09:22:12.250Z,4624,3,svc_web,S-1-5-21-5212101-9214,127.0.0.1,13992,0x0, +MKT-WS-062,2026-02-12T11:19:54.128Z,4624,3,dlee,S-1-5-21-8137662-8327,10.10.3.162,38591,0x0, +MKT-WS-062,2026-02-12T05:15:37.964Z,4624,3,bwilson,S-1-5-21-3500647-4348,10.10.3.162,38471,0x0, +MKT-WS-062,2026-02-15T00:03:46.380Z,4624,2,dlee,S-1-5-21-1745022-3737,10.10.3.162,37235,0x0, +MKT-WS-062,2026-02-10T12:57:22.127Z,4624,3,dlee,S-1-5-21-7614761-7603,127.0.0.1,64303,0x0, +MKT-WS-062,2026-02-15T23:43:20.615Z,4624,3,agarcia,S-1-5-21-8970440-1337,10.10.2.164,53222,0x0, +MKT-WS-062,2026-02-20T10:23:19.695Z,4624,3,svc_web,S-1-5-21-2303477-9221,10.10.1.112,42956,0x0, +MKT-WS-062,2026-02-15T08:03:32.461Z,4625,2,fthompson,S-1-5-21-7373266-9040,10.10.2.170,6763,0xC000006D,Unknown user name or bad password +MKT-WS-062,2026-02-12T01:39:29.935Z,4624,3,svc_web,S-1-5-21-3441601-9612,10.10.2.146,39456,0x0, +EXEC-WS-063,2026-02-19T14:54:32.459Z,4624,3,gwhite,S-1-5-21-7599084-1029,127.0.0.1,15387,0x0, +EXEC-WS-063,2026-02-12T00:44:07.403Z,4625,3,svc_web,S-1-5-21-6304876-4541,127.0.0.1,52837,0xC000006D,Unknown user name or bad password +EXEC-WS-063,2026-02-12T18:17:21.883Z,4625,2,hbrown,S-1-5-21-3242223-1770,10.10.2.104,62398,0xC000006D,Unknown user name or bad password +EXEC-WS-063,2026-02-17T04:09:23.142Z,4625,3,hbrown,S-1-5-21-2354022-5096,127.0.0.1,35837,0xC000006D,Unknown user name or bad password +EXEC-WS-063,2026-02-10T13:26:52.979Z,4625,3,dlee,S-1-5-21-2470213-3651,10.10.3.153,18810,0xC000006D,Unknown user name or bad password +EXEC-WS-063,2026-02-14T06:17:53.904Z,4624,7,fthompson,S-1-5-21-5275395-8709,10.10.3.165,21229,0x0, +EXEC-WS-063,2026-02-19T19:04:16.119Z,4624,3,admin,S-1-5-21-5317941-7778,10.10.2.101,15387,0x0, +EXEC-WS-063,2026-02-16T08:28:33.857Z,4625,10,jsmith,S-1-5-21-3620051-6927,10.10.3.10,59620,0xC000006D,Unknown user name or bad password +EXEC-WS-063,2026-02-18T02:07:41.120Z,4624,3,agarcia,S-1-5-21-8653046-9324,10.10.1.163,25043,0x0, +EXEC-WS-063,2026-02-10T18:44:29.942Z,4624,3,emartinez,S-1-5-21-9044512-2904,10.10.1.163,3997,0x0, +EXEC-WS-063,2026-02-19T23:58:03.529Z,4625,3,gwhite,S-1-5-21-2344001-9096,127.0.0.1,16108,0xC000006D,Unknown user name or bad password +EXEC-WS-063,2026-02-13T20:49:18.447Z,4624,3,svc_web,S-1-5-21-3382667-5953,10.10.1.163,13637,0x0, +IT-WS-064,2026-02-10T10:19:47.009Z,4624,2,dlee,S-1-5-21-6795869-9161,127.0.0.1,7601,0x0, +IT-WS-064,2026-02-11T11:29:31.939Z,4625,10,svc_backup,S-1-5-21-7966303-8355,10.10.2.170,3343,0xC000006D,Unknown user name or bad password +IT-WS-064,2026-02-18T21:09:50.689Z,4624,3,idavis,S-1-5-21-4545808-3198,10.10.2.164,54221,0x0, +IT-WS-064,2026-02-18T12:47:32.889Z,4624,3,svc_backup,S-1-5-21-6463598-9311,10.10.2.155,6338,0x0, +IT-WS-064,2026-02-16T08:35:45.340Z,4624,3,idavis,S-1-5-21-6317230-5235,127.0.0.1,23563,0x0, +IT-WS-064,2026-02-16T17:05:51.773Z,4624,3,svc_sql,S-1-5-21-3543325-6410,127.0.0.1,15653,0x0, +IT-WS-064,2026-02-18T13:56:08.986Z,4624,7,agarcia,S-1-5-21-8516636-8354,10.10.2.164,53795,0x0, +IT-WS-064,2026-02-20T07:29:23.361Z,4624,3,emartinez,S-1-5-21-3318503-4329,10.10.3.168,32327,0x0, +IT-WS-064,2026-02-17T11:25:30.346Z,4625,2,agarcia,S-1-5-21-2691650-2501,10.10.2.164,23596,0xC000006D,Unknown user name or bad password +IT-WS-064,2026-02-14T06:52:37.229Z,4624,3,svc_web,S-1-5-21-4482400-6327,10.10.2.164,52187,0x0, +IT-WS-064,2026-02-19T17:45:41.844Z,4624,3,hbrown,S-1-5-21-8070319-8173,127.0.0.1,35056,0x0, +IT-WS-064,2026-02-12T15:28:31.889Z,4624,3,svc_web,S-1-5-21-6841198-6268,10.10.3.10,23093,0x0, +IT-WS-064,2026-02-20T09:00:00.234Z,4624,2,admin,S-1-5-21-4925437-4213,127.0.0.1,40610,0x0, +IT-WS-064,2026-02-15T01:54:19.134Z,4624,2,idavis,S-1-5-21-1410207-8308,10.10.2.125,36429,0x0, +IT-WS-064,2026-02-18T18:35:52.969Z,4624,10,hbrown,S-1-5-21-1428528-4143,127.0.0.1,27446,0x0, +IT-WS-064,2026-02-13T10:49:28.165Z,4625,3,admin,S-1-5-21-2722547-7688,10.10.2.164,10117,0xC000006D,Unknown user name or bad password +IT-WS-064,2026-02-12T10:30:44.039Z,4624,3,admin,S-1-5-21-2488714-3610,127.0.0.1,43391,0x0, +IT-WS-064,2026-02-19T22:20:02.464Z,4624,3,fthompson,S-1-5-21-6923317-3148,10.10.2.164,30103,0x0, +IT-WS-064,2026-02-16T16:56:10.680Z,4624,3,admin,S-1-5-21-5641666-2295,10.10.2.164,6171,0x0, +IT-WS-064,2026-02-15T16:48:47.210Z,4624,3,fthompson,S-1-5-21-4523873-5692,10.10.3.126,22322,0x0, +IT-WS-064,2026-02-18T02:43:37.344Z,4624,10,jsmith,S-1-5-21-5118204-5026,10.10.2.164,27312,0x0, +IT-WS-064,2026-02-10T11:41:23.202Z,4624,3,cjohnson,S-1-5-21-3645513-7561,127.0.0.1,60529,0x0, +IT-WS-064,2026-02-12T06:03:18.302Z,4624,3,agarcia,S-1-5-21-3016558-4698,10.10.1.139,40389,0x0, +IT-WS-064,2026-02-18T17:10:57.202Z,4624,10,svc_web,S-1-5-21-6862751-9575,10.10.2.164,25220,0x0, +HR-WS-065,2026-02-12T15:12:02.429Z,4624,3,idavis,S-1-5-21-4460535-5709,127.0.0.1,34559,0x0, +HR-WS-065,2026-02-13T04:34:56.494Z,4624,10,dlee,S-1-5-21-1258829-1419,10.10.3.165,23256,0x0, +HR-WS-065,2026-02-12T13:26:14.707Z,4624,3,svc_backup,S-1-5-21-9056918-6318,10.10.2.146,9468,0x0, +HR-WS-065,2026-02-10T23:55:35.536Z,4624,2,gwhite,S-1-5-21-6378016-3722,10.10.3.10,46038,0x0, +HR-WS-065,2026-02-12T02:19:13.070Z,4624,2,admin,S-1-5-21-5031236-9686,127.0.0.1,1820,0x0, +HR-WS-065,2026-02-13T03:06:33.826Z,4624,10,cjohnson,S-1-5-21-7966158-8736,127.0.0.1,32413,0x0, +HR-WS-065,2026-02-15T17:49:28.339Z,4624,10,fthompson,S-1-5-21-7831306-9065,10.10.3.165,37462,0x0, +HR-WS-065,2026-02-11T02:05:22.039Z,4624,3,admin,S-1-5-21-1055941-6837,10.10.3.153,61675,0x0, +HR-WS-065,2026-02-10T22:41:20.378Z,4625,3,svc_sql,S-1-5-21-4686396-8623,10.10.3.132,54715,0xC000006D,Unknown user name or bad password +HR-WS-065,2026-02-19T14:53:20.924Z,4624,2,svc_sql,S-1-5-21-8759579-7747,10.10.1.136,42933,0x0, +HR-WS-065,2026-02-18T23:32:54.417Z,4624,3,svc_web,S-1-5-21-3946817-9092,10.10.3.138,31705,0x0, +HR-WS-065,2026-02-13T03:24:17.507Z,4624,3,bwilson,S-1-5-21-4426591-9832,10.10.3.111,31978,0x0, +HR-WS-065,2026-02-20T02:38:08.842Z,4624,10,emartinez,S-1-5-21-3977429-6823,10.10.3.165,21038,0x0, +HR-WS-065,2026-02-18T06:04:37.215Z,4624,3,agarcia,S-1-5-21-4482004-3152,127.0.0.1,36177,0x0, +HR-WS-065,2026-02-11T08:49:34.800Z,4625,3,idavis,S-1-5-21-6779879-3898,127.0.0.1,40641,0xC000006D,Unknown user name or bad password +HR-WS-065,2026-02-14T10:38:42.656Z,4624,7,gwhite,S-1-5-21-1077682-5689,127.0.0.1,9187,0x0, +HR-WS-065,2026-02-13T19:16:57.062Z,4624,10,hbrown,S-1-5-21-8523361-1669,10.10.3.165,61367,0x0, +HR-WS-065,2026-02-17T13:42:34.565Z,4624,2,fthompson,S-1-5-21-8172124-9409,10.10.1.12,23483,0x0, +FIN-WS-066,2026-02-10T23:47:58.265Z,4624,3,svc_sql,S-1-5-21-1148113-2841,10.10.2.140,60571,0x0, +FIN-WS-066,2026-02-11T07:00:33.453Z,4624,10,bwilson,S-1-5-21-8160946-8101,10.10.1.166,23367,0x0, +FIN-WS-066,2026-02-17T10:02:09.853Z,4624,3,gwhite,S-1-5-21-7772982-6600,10.10.1.166,61275,0x0, +FIN-WS-066,2026-02-19T22:14:05.805Z,4625,2,admin,S-1-5-21-7672102-5670,127.0.0.1,41331,0xC000006D,Unknown user name or bad password +FIN-WS-066,2026-02-12T02:35:51.378Z,4624,10,jsmith,S-1-5-21-6371265-5884,10.10.1.148,31545,0x0, +FIN-WS-066,2026-02-17T12:35:20.889Z,4624,10,svc_sql,S-1-5-21-9418335-4830,127.0.0.1,22158,0x0, +FIN-WS-066,2026-02-10T10:33:48.283Z,4624,7,gwhite,S-1-5-21-8050500-3785,127.0.0.1,22840,0x0, +FIN-WS-066,2026-02-19T00:17:51.032Z,4625,3,emartinez,S-1-5-21-2447099-5203,10.10.1.166,14540,0xC000006D,Unknown user name or bad password +FIN-WS-066,2026-02-16T05:47:04.605Z,4624,3,svc_backup,S-1-5-21-6102739-2533,10.10.3.156,32911,0x0, +FIN-WS-066,2026-02-15T10:34:51.079Z,4624,3,bwilson,S-1-5-21-3826234-6820,127.0.0.1,58177,0x0, +FIN-WS-066,2026-02-12T05:35:53.202Z,4624,3,hbrown,S-1-5-21-8783842-7859,127.0.0.1,58309,0x0, +FIN-WS-066,2026-02-20T12:35:23.446Z,4624,3,agarcia,S-1-5-21-2154141-5736,127.0.0.1,33467,0x0, +FIN-WS-066,2026-02-15T08:50:49.348Z,4624,7,svc_web,S-1-5-21-5765560-3619,10.10.1.166,56244,0x0, +FIN-WS-066,2026-02-18T12:10:05.046Z,4624,7,agarcia,S-1-5-21-1541665-2554,10.10.1.166,52858,0x0, +FIN-WS-066,2026-02-15T06:10:12.765Z,4624,3,agarcia,S-1-5-21-2906406-7835,10.10.1.166,15369,0x0, +FIN-WS-066,2026-02-13T23:03:29.833Z,4624,3,agarcia,S-1-5-21-7986480-8498,10.10.1.166,31086,0x0, +FIN-WS-066,2026-02-20T14:52:37.927Z,4624,2,agarcia,S-1-5-21-3227193-1945,10.10.1.166,18013,0x0, +FIN-WS-066,2026-02-16T07:03:07.660Z,4624,3,gwhite,S-1-5-21-7303101-5062,10.10.1.166,16337,0x0, +FIN-WS-066,2026-02-14T04:43:50.169Z,4624,10,fthompson,S-1-5-21-7149185-7220,10.10.1.166,11064,0x0, +SLS-WS-067,2026-02-19T16:54:58.003Z,4625,10,emartinez,S-1-5-21-9152953-3315,10.10.3.111,34573,0xC000006D,Unknown user name or bad password +SLS-WS-067,2026-02-16T06:43:01.245Z,4624,10,admin,S-1-5-21-2780156-7305,10.10.1.112,37724,0x0, +SLS-WS-067,2026-02-13T23:46:40.154Z,4624,10,agarcia,S-1-5-21-7229453-1953,127.0.0.1,11561,0x0, +SLS-WS-067,2026-02-18T03:52:57.861Z,4625,7,jsmith,S-1-5-21-9451509-9627,10.10.2.167,10215,0xC000006D,Unknown user name or bad password +SLS-WS-067,2026-02-14T04:52:49.109Z,4624,2,svc_sql,S-1-5-21-2793714-6019,10.10.2.167,40760,0x0, +SLS-WS-067,2026-02-16T07:20:46.751Z,4624,7,fthompson,S-1-5-21-6252122-4770,10.10.1.127,22529,0x0, +SLS-WS-067,2026-02-19T11:53:53.854Z,4624,10,dlee,S-1-5-21-3105832-7104,10.10.2.173,13247,0x0, +SLS-WS-067,2026-02-13T09:29:46.773Z,4624,10,jsmith,S-1-5-21-1046016-8964,127.0.0.1,43584,0x0, +SLS-WS-067,2026-02-18T13:55:51.980Z,4624,2,gwhite,S-1-5-21-8267022-7204,10.10.2.167,7620,0x0, +SLS-WS-067,2026-02-11T00:32:27.570Z,4625,3,admin,S-1-5-21-5942454-8839,10.10.1.109,10522,0xC000006D,Unknown user name or bad password +SLS-WS-067,2026-02-19T20:13:30.881Z,4625,7,agarcia,S-1-5-21-9659679-6937,127.0.0.1,22822,0xC000006D,Unknown user name or bad password +SLS-WS-067,2026-02-16T01:36:04.987Z,4624,2,jsmith,S-1-5-21-7743796-4100,127.0.0.1,58595,0x0, +ENG-WS-068,2026-02-16T13:15:40.043Z,4624,2,jsmith,S-1-5-21-7165970-6747,127.0.0.1,51047,0x0, +ENG-WS-068,2026-02-11T04:34:10.684Z,4624,10,jsmith,S-1-5-21-5653474-4424,10.10.3.168,64604,0x0, +ENG-WS-068,2026-02-16T02:33:35.858Z,4625,3,cjohnson,S-1-5-21-2582269-6738,127.0.0.1,40786,0xC000006D,Unknown user name or bad password +ENG-WS-068,2026-02-15T09:11:15.943Z,4624,7,dlee,S-1-5-21-9993737-5952,10.10.3.168,44111,0x0, +ENG-WS-068,2026-02-15T19:42:03.122Z,4624,2,agarcia,S-1-5-21-2754254-2515,10.10.1.175,3135,0x0, +ENG-WS-068,2026-02-18T07:04:37.497Z,4625,2,svc_backup,S-1-5-21-6136295-4288,10.10.3.168,17319,0xC000006D,Unknown user name or bad password +ENG-WS-068,2026-02-19T10:26:29.363Z,4624,2,fthompson,S-1-5-21-8522802-9882,127.0.0.1,30235,0x0, +ENG-WS-068,2026-02-11T08:21:49.082Z,4624,3,svc_backup,S-1-5-21-5828454-8945,127.0.0.1,32555,0x0, +ENG-WS-068,2026-02-14T22:41:56.652Z,4625,3,svc_backup,S-1-5-21-8225167-2442,10.10.3.129,8254,0xC000006D,Unknown user name or bad password +ENG-WS-068,2026-02-14T13:49:58.284Z,4624,3,svc_backup,S-1-5-21-8416854-8052,10.10.3.168,25685,0x0, +ENG-WS-068,2026-02-11T10:35:33.263Z,4624,3,agarcia,S-1-5-21-9704595-8526,10.10.2.146,8880,0x0, +ENG-WS-068,2026-02-15T21:20:59.045Z,4625,3,jsmith,S-1-5-21-9614745-4828,10.10.2.116,32839,0xC000006D,Unknown user name or bad password +ENG-WS-068,2026-02-13T14:36:25.151Z,4624,3,gwhite,S-1-5-21-7297755-2394,10.10.1.142,59216,0x0, +ENG-WS-068,2026-02-20T00:42:59.172Z,4625,2,bwilson,S-1-5-21-5126600-5890,10.10.2.122,47234,0xC000006D,Unknown user name or bad password +ENG-WS-068,2026-02-15T20:41:19.701Z,4624,10,dlee,S-1-5-21-2927093-9908,127.0.0.1,34440,0x0, +ENG-WS-068,2026-02-14T17:15:47.558Z,4624,2,cjohnson,S-1-5-21-3707832-2272,10.10.3.168,15038,0x0, +ENG-WS-068,2026-02-19T14:06:14.454Z,4624,3,fthompson,S-1-5-21-2623155-9041,10.10.3.168,32396,0x0, +ENG-WS-068,2026-02-12T18:06:15.680Z,4624,7,emartinez,S-1-5-21-4495741-5201,10.10.1.145,32539,0x0, +ENG-WS-068,2026-02-17T15:41:28.684Z,4625,3,dlee,S-1-5-21-4444699-4992,10.10.3.168,28401,0xC000006D,Unknown user name or bad password +ENG-WS-068,2026-02-17T14:50:58.325Z,4624,2,bwilson,S-1-5-21-9375822-7476,10.10.3.168,5493,0x0, +ENG-WS-068,2026-02-16T20:36:20.982Z,4624,3,emartinez,S-1-5-21-4602999-2335,10.10.3.168,40438,0x0, +ENG-WS-068,2026-02-15T05:01:53.405Z,4624,10,svc_backup,S-1-5-21-2965182-1531,127.0.0.1,17370,0x0, +LEG-WS-069,2026-02-10T13:39:35.885Z,4624,3,idavis,S-1-5-21-8977155-4214,127.0.0.1,27316,0x0, +LEG-WS-069,2026-02-11T12:49:36.736Z,4624,2,agarcia,S-1-5-21-8123552-3362,10.10.1.169,11212,0x0, +LEG-WS-069,2026-02-17T15:27:21.028Z,4624,2,admin,S-1-5-21-6680908-7014,10.10.1.169,8110,0x0, +LEG-WS-069,2026-02-14T12:57:44.821Z,4625,10,svc_sql,S-1-5-21-9177434-5926,10.10.2.158,38448,0xC000006D,Unknown user name or bad password +LEG-WS-069,2026-02-16T15:50:11.154Z,4624,2,cjohnson,S-1-5-21-6745164-9761,127.0.0.1,56861,0x0, +LEG-WS-069,2026-02-11T17:32:05.357Z,4624,10,svc_sql,S-1-5-21-8685205-8298,10.10.1.169,28614,0x0, +LEG-WS-069,2026-02-16T01:47:34.070Z,4625,3,bwilson,S-1-5-21-7744867-3816,127.0.0.1,8987,0xC000006D,Unknown user name or bad password +LEG-WS-069,2026-02-11T13:24:55.749Z,4625,3,svc_web,S-1-5-21-2072795-1340,10.10.1.136,26521,0xC000006D,Unknown user name or bad password +LEG-WS-069,2026-02-13T23:23:16.072Z,4624,2,admin,S-1-5-21-8685689-3759,10.10.1.169,45414,0x0, +LEG-WS-069,2026-02-13T07:39:15.479Z,4624,3,fthompson,S-1-5-21-8041667-6260,10.10.1.160,45178,0x0, +LEG-WS-069,2026-02-12T22:11:01.139Z,4625,3,idavis,S-1-5-21-4447571-6687,10.10.1.169,29516,0xC000006D,Unknown user name or bad password +LEG-WS-069,2026-02-18T07:03:33.113Z,4624,7,hbrown,S-1-5-21-7259973-3733,10.10.2.128,16135,0x0, +LEG-WS-069,2026-02-20T00:37:03.337Z,4624,10,idavis,S-1-5-21-2564163-8322,10.10.1.11,56053,0x0, +LEG-WS-069,2026-02-19T06:56:26.685Z,4624,7,jsmith,S-1-5-21-9252043-2349,10.10.1.169,33283,0x0, +LEG-WS-069,2026-02-11T08:14:55.036Z,4624,3,fthompson,S-1-5-21-5728252-7246,127.0.0.1,12860,0x0, +LEG-WS-069,2026-02-19T02:43:18.499Z,4624,2,emartinez,S-1-5-21-2871573-6807,10.10.2.11,40809,0x0, +LEG-WS-069,2026-02-18T21:01:02.946Z,4625,3,admin,S-1-5-21-9263406-7013,127.0.0.1,51874,0xC000006D,Unknown user name or bad password +LEG-WS-069,2026-02-12T18:07:46.139Z,4624,3,svc_backup,S-1-5-21-4488816-2262,127.0.0.1,7196,0x0, +LEG-WS-069,2026-02-20T06:47:47.884Z,4624,3,fthompson,S-1-5-21-2834734-8927,10.10.1.169,40496,0x0, +LEG-WS-069,2026-02-18T06:15:41.777Z,4624,3,hbrown,S-1-5-21-3408840-3944,127.0.0.1,11535,0x0, +LEG-WS-069,2026-02-18T10:05:51.862Z,4625,3,agarcia,S-1-5-21-5510586-1842,127.0.0.1,61376,0xC000006D,Unknown user name or bad password +LEG-WS-069,2026-02-10T15:51:52.711Z,4624,3,svc_web,S-1-5-21-5479558-4148,10.10.1.169,49851,0x0, +LEG-WS-069,2026-02-11T15:13:49.126Z,4624,10,dlee,S-1-5-21-7810871-9639,127.0.0.1,61968,0x0, +LEG-WS-069,2026-02-20T05:47:15.102Z,4624,3,svc_web,S-1-5-21-8465421-8554,10.10.2.146,50199,0x0, +LEG-WS-069,2026-02-12T01:59:35.519Z,4624,3,hbrown,S-1-5-21-6752636-1095,10.10.1.103,41366,0x0, +LEG-WS-069,2026-02-13T15:00:47.636Z,4624,7,fthompson,S-1-5-21-1323085-3060,10.10.2.170,52022,0x0, +LEG-WS-069,2026-02-19T18:31:40.493Z,4624,10,bwilson,S-1-5-21-9688547-9721,10.10.1.169,55306,0x0, +LEG-WS-069,2026-02-16T11:22:17.207Z,4624,10,fthompson,S-1-5-21-9655788-1930,10.10.1.169,26807,0x0, +LEG-WS-069,2026-02-20T15:14:11.454Z,4625,3,agarcia,S-1-5-21-6512310-2231,10.10.1.169,57829,0xC000006D,Unknown user name or bad password +MKT-WS-070,2026-02-17T07:32:19.182Z,4624,3,agarcia,S-1-5-21-2111962-7360,127.0.0.1,59269,0x0, +MKT-WS-070,2026-02-15T03:47:56.680Z,4624,3,admin,S-1-5-21-2003531-9698,127.0.0.1,24458,0x0, +MKT-WS-070,2026-02-10T15:37:02.512Z,4624,10,idavis,S-1-5-21-5323407-2128,127.0.0.1,22401,0x0, +MKT-WS-070,2026-02-14T17:16:42.476Z,4624,3,bwilson,S-1-5-21-4261503-2618,127.0.0.1,45048,0x0, +MKT-WS-070,2026-02-13T22:12:05.763Z,4624,3,agarcia,S-1-5-21-9755076-6215,10.10.2.170,34983,0x0, +MKT-WS-070,2026-02-11T09:02:38.027Z,4624,3,cjohnson,S-1-5-21-7142733-5280,127.0.0.1,64073,0x0, +MKT-WS-070,2026-02-18T08:22:27.010Z,4624,10,hbrown,S-1-5-21-9089937-3604,10.10.2.170,6301,0x0, +MKT-WS-070,2026-02-19T18:05:16.012Z,4624,3,idavis,S-1-5-21-1743325-8568,10.10.2.170,22739,0x0, +MKT-WS-070,2026-02-13T14:18:01.068Z,4624,3,jsmith,S-1-5-21-4724412-8716,10.10.2.170,14642,0x0, +MKT-WS-070,2026-02-12T18:16:24.122Z,4624,2,agarcia,S-1-5-21-6997001-8577,127.0.0.1,19525,0x0, +MKT-WS-070,2026-02-11T23:52:12.599Z,4624,7,cjohnson,S-1-5-21-1793394-6617,10.10.1.154,59350,0x0, +MKT-WS-070,2026-02-13T02:54:30.588Z,4624,3,jsmith,S-1-5-21-6612456-9293,10.10.2.170,1837,0x0, +MKT-WS-070,2026-02-19T10:12:20.160Z,4624,10,jsmith,S-1-5-21-4536799-1785,10.10.2.170,21834,0x0, +MKT-WS-070,2026-02-16T11:29:04.886Z,4625,3,gwhite,S-1-5-21-2102203-3156,10.10.3.147,6007,0xC000006D,Unknown user name or bad password +MKT-WS-070,2026-02-18T22:27:05.588Z,4624,3,fthompson,S-1-5-21-1671289-3778,127.0.0.1,24710,0x0, +MKT-WS-070,2026-02-11T05:21:08.987Z,4624,3,jsmith,S-1-5-21-1372983-9117,10.10.2.170,33923,0x0, +MKT-WS-070,2026-02-11T04:57:30.173Z,4624,2,svc_sql,S-1-5-21-5238028-2946,10.10.3.144,14508,0x0, +MKT-WS-070,2026-02-17T07:04:11.132Z,4624,3,hbrown,S-1-5-21-1611485-4281,127.0.0.1,9531,0x0, +MKT-WS-070,2026-02-15T09:27:17.777Z,4625,3,agarcia,S-1-5-21-2329520-1573,10.10.2.170,33804,0xC000006D,Unknown user name or bad password +MKT-WS-070,2026-02-11T20:13:28.307Z,4624,10,hbrown,S-1-5-21-2816197-7278,127.0.0.1,36532,0x0, +MKT-WS-070,2026-02-13T10:10:39.421Z,4624,3,agarcia,S-1-5-21-7657590-6647,127.0.0.1,26070,0x0, +MKT-WS-070,2026-02-12T04:06:18.869Z,4624,3,svc_backup,S-1-5-21-7199676-5116,10.10.2.170,61399,0x0, +EXEC-WS-071,2026-02-12T11:58:27.023Z,4624,2,svc_backup,S-1-5-21-6681739-5837,10.10.3.171,25231,0x0, +EXEC-WS-071,2026-02-14T12:08:06.565Z,4624,3,bwilson,S-1-5-21-5078897-3334,10.10.3.171,35500,0x0, +EXEC-WS-071,2026-02-19T21:29:57.844Z,4624,3,hbrown,S-1-5-21-6945573-9241,10.10.3.171,25484,0x0, +EXEC-WS-071,2026-02-15T05:16:28.745Z,4624,2,svc_sql,S-1-5-21-3066738-5558,10.10.1.112,29392,0x0, +EXEC-WS-071,2026-02-20T00:21:27.092Z,4624,3,svc_web,S-1-5-21-8894649-4107,10.10.1.151,33769,0x0, +EXEC-WS-071,2026-02-18T00:15:37.852Z,4624,3,svc_backup,S-1-5-21-9136494-5065,127.0.0.1,24008,0x0, +EXEC-WS-071,2026-02-13T05:06:06.924Z,4625,7,admin,S-1-5-21-4753984-7213,127.0.0.1,19908,0xC000006D,Unknown user name or bad password +EXEC-WS-071,2026-02-11T12:34:50.818Z,4624,10,idavis,S-1-5-21-9042547-6018,10.10.3.171,65321,0x0, +EXEC-WS-071,2026-02-12T05:50:38.125Z,4624,3,fthompson,S-1-5-21-5186997-5414,10.10.2.149,63014,0x0, +EXEC-WS-071,2026-02-11T12:18:44.099Z,4624,3,idavis,S-1-5-21-2974289-5300,127.0.0.1,13660,0x0, +EXEC-WS-071,2026-02-18T03:15:50.643Z,4624,3,svc_backup,S-1-5-21-8504847-7814,10.10.2.110,59546,0x0, +EXEC-WS-071,2026-02-11T04:09:25.774Z,4624,2,idavis,S-1-5-21-8158577-3010,127.0.0.1,33473,0x0, +EXEC-WS-071,2026-02-17T19:26:42.311Z,4625,10,agarcia,S-1-5-21-7006771-5980,10.10.3.105,18773,0xC000006D,Unknown user name or bad password +EXEC-WS-071,2026-02-17T04:23:07.392Z,4624,10,idavis,S-1-5-21-2128400-3199,10.10.3.171,40063,0x0, +EXEC-WS-071,2026-02-17T18:33:29.381Z,4624,7,bwilson,S-1-5-21-9786409-1342,10.10.2.113,7627,0x0, +EXEC-WS-071,2026-02-20T05:52:43.193Z,4624,7,hbrown,S-1-5-21-4651819-7975,127.0.0.1,6876,0x0, +EXEC-WS-071,2026-02-11T18:58:01.114Z,4624,3,hbrown,S-1-5-21-5813046-9535,10.10.3.171,4895,0x0, +EXEC-WS-071,2026-02-19T07:50:13.987Z,4624,3,svc_backup,S-1-5-21-4676028-8853,10.10.2.101,21137,0x0, +IT-WS-072,2026-02-15T12:40:43.249Z,4624,3,dlee,S-1-5-21-7893804-1120,10.10.3.126,25348,0x0, +IT-WS-072,2026-02-10T13:21:46.199Z,4624,2,svc_sql,S-1-5-21-7129869-5035,10.10.1.112,64813,0x0, +IT-WS-072,2026-02-15T17:55:57.020Z,4625,7,svc_web,S-1-5-21-5678772-2946,10.10.1.172,50206,0xC000006D,Unknown user name or bad password +IT-WS-072,2026-02-12T13:43:00.589Z,4625,7,idavis,S-1-5-21-9224352-9989,10.10.1.142,4765,0xC000006D,Unknown user name or bad password +IT-WS-072,2026-02-13T22:08:25.409Z,4624,7,svc_sql,S-1-5-21-7706165-6411,10.10.1.172,51584,0x0, +IT-WS-072,2026-02-18T12:19:15.762Z,4624,3,svc_web,S-1-5-21-7084861-2637,10.10.3.111,20387,0x0, +IT-WS-072,2026-02-12T04:26:43.910Z,4624,10,bwilson,S-1-5-21-7494482-7632,10.10.1.172,64264,0x0, +IT-WS-072,2026-02-14T14:43:50.925Z,4624,2,fthompson,S-1-5-21-2477079-4153,10.10.2.113,5001,0x0, +IT-WS-072,2026-02-10T20:20:08.558Z,4624,3,fthompson,S-1-5-21-9794828-3074,10.10.1.172,5278,0x0, +IT-WS-072,2026-02-16T23:03:45.459Z,4624,3,cjohnson,S-1-5-21-2547961-9716,127.0.0.1,38641,0x0, +IT-WS-072,2026-02-18T22:06:23.640Z,4624,3,gwhite,S-1-5-21-1227959-7264,10.10.1.163,1459,0x0, +IT-WS-072,2026-02-16T15:28:00.406Z,4624,3,bwilson,S-1-5-21-6667720-3608,127.0.0.1,6231,0x0, +IT-WS-072,2026-02-14T06:57:38.072Z,4624,3,emartinez,S-1-5-21-1622236-3323,10.10.2.149,16476,0x0, +IT-WS-072,2026-02-15T23:11:22.786Z,4625,7,emartinez,S-1-5-21-3752454-3946,10.10.1.172,33997,0xC000006D,Unknown user name or bad password +IT-WS-072,2026-02-19T20:17:16.540Z,4624,7,dlee,S-1-5-21-4405346-5321,10.10.1.115,63739,0x0, +IT-WS-072,2026-02-10T13:52:12.672Z,4624,10,idavis,S-1-5-21-5781794-2787,127.0.0.1,36360,0x0, +IT-WS-072,2026-02-10T19:37:43.920Z,4624,3,cjohnson,S-1-5-21-6077282-4106,127.0.0.1,37048,0x0, +IT-WS-072,2026-02-20T09:20:07.654Z,4624,3,cjohnson,S-1-5-21-4499705-6909,10.10.3.117,2653,0x0, +IT-WS-072,2026-02-19T09:57:58.998Z,4625,3,dlee,S-1-5-21-4809542-1405,10.10.1.172,36602,0xC000006D,Unknown user name or bad password +IT-WS-072,2026-02-10T20:23:10.092Z,4624,2,jsmith,S-1-5-21-6744896-7971,127.0.0.1,9815,0x0, +IT-WS-072,2026-02-18T07:17:40.982Z,4624,3,idavis,S-1-5-21-6651349-6319,10.10.1.133,14274,0x0, +IT-WS-072,2026-02-16T17:16:29.461Z,4624,3,jsmith,S-1-5-21-9997283-2346,10.10.1.148,33842,0x0, +HR-WS-073,2026-02-18T20:08:29.644Z,4624,3,svc_web,S-1-5-21-5884326-7104,10.10.2.140,51909,0x0, +HR-WS-073,2026-02-11T15:43:03.927Z,4625,2,svc_web,S-1-5-21-5613868-6742,10.10.2.104,38242,0xC000006D,Unknown user name or bad password +HR-WS-073,2026-02-17T01:20:24.878Z,4624,10,idavis,S-1-5-21-9505776-6049,10.10.2.173,7621,0x0, +HR-WS-073,2026-02-17T03:46:18.319Z,4624,2,svc_sql,S-1-5-21-1913063-8798,10.10.1.139,21390,0x0, +HR-WS-073,2026-02-14T22:16:44.732Z,4624,7,bwilson,S-1-5-21-3173565-6867,10.10.3.120,39623,0x0, +HR-WS-073,2026-02-10T12:07:02.763Z,4624,3,cjohnson,S-1-5-21-4533621-8632,10.10.2.173,22797,0x0, +HR-WS-073,2026-02-18T07:50:30.022Z,4624,3,idavis,S-1-5-21-6404458-6441,10.10.1.11,35361,0x0, +HR-WS-073,2026-02-18T08:21:09.223Z,4624,10,emartinez,S-1-5-21-3653758-4676,10.10.2.173,49490,0x0, +HR-WS-073,2026-02-15T03:52:01.600Z,4624,3,svc_sql,S-1-5-21-6363797-2943,10.10.2.173,61370,0x0, +HR-WS-073,2026-02-20T05:45:15.267Z,4625,3,idavis,S-1-5-21-8237877-6873,127.0.0.1,34122,0xC000006D,Unknown user name or bad password +HR-WS-073,2026-02-16T08:19:09.762Z,4624,2,fthompson,S-1-5-21-9048496-7123,10.10.1.127,54740,0x0, +HR-WS-073,2026-02-16T16:18:24.294Z,4624,2,emartinez,S-1-5-21-2125575-1606,10.10.2.173,10635,0x0, +HR-WS-073,2026-02-18T14:49:15.441Z,4624,3,dlee,S-1-5-21-5030158-1395,10.10.1.172,61338,0x0, +HR-WS-073,2026-02-15T07:13:18.179Z,4624,7,svc_web,S-1-5-21-8614889-7287,10.10.2.173,36953,0x0, +HR-WS-073,2026-02-15T07:23:44.665Z,4624,2,cjohnson,S-1-5-21-2527372-8392,10.10.1.124,15435,0x0, +HR-WS-073,2026-02-18T23:53:47.536Z,4624,10,emartinez,S-1-5-21-1558189-9484,10.10.1.169,56247,0x0, +HR-WS-073,2026-02-19T11:47:18.289Z,4625,3,bwilson,S-1-5-21-7817130-9066,10.10.2.128,4341,0xC000006D,Unknown user name or bad password +HR-WS-073,2026-02-18T13:16:51.798Z,4625,3,emartinez,S-1-5-21-4858550-5992,10.10.1.157,33695,0xC000006D,Unknown user name or bad password +HR-WS-073,2026-02-11T15:11:01.395Z,4624,3,idavis,S-1-5-21-9259964-3659,10.10.1.112,13962,0x0, +HR-WS-073,2026-02-13T14:39:21.638Z,4624,2,hbrown,S-1-5-21-9822987-1341,10.10.2.173,38386,0x0, +HR-WS-073,2026-02-14T21:50:13.185Z,4625,10,fthompson,S-1-5-21-8528101-1141,10.10.2.173,26320,0xC000006D,Unknown user name or bad password +HR-WS-073,2026-02-18T20:26:10.710Z,4624,3,svc_web,S-1-5-21-2761444-3522,127.0.0.1,17522,0x0, +HR-WS-073,2026-02-17T18:09:22.950Z,4624,3,svc_backup,S-1-5-21-3335718-2512,10.10.2.173,4697,0x0, +HR-WS-073,2026-02-15T13:19:50.672Z,4624,3,fthompson,S-1-5-21-2441462-3040,10.10.1.112,31982,0x0, +FIN-WS-074,2026-02-14T12:01:52.528Z,4625,7,emartinez,S-1-5-21-4388190-1224,10.10.2.122,41062,0xC000006D,Unknown user name or bad password +FIN-WS-074,2026-02-18T08:21:28.204Z,4624,7,jsmith,S-1-5-21-2790475-2395,10.10.3.105,29512,0x0, +FIN-WS-074,2026-02-16T21:45:29.835Z,4624,7,hbrown,S-1-5-21-8573764-9512,10.10.2.113,58871,0x0, +FIN-WS-074,2026-02-11T14:33:56.506Z,4624,3,idavis,S-1-5-21-1326313-7939,127.0.0.1,6633,0x0, +FIN-WS-074,2026-02-11T04:41:00.605Z,4624,3,admin,S-1-5-21-3546570-5235,127.0.0.1,61801,0x0, +FIN-WS-074,2026-02-15T16:59:49.787Z,4624,3,cjohnson,S-1-5-21-9015041-8278,10.10.3.174,15832,0x0, +FIN-WS-074,2026-02-10T21:58:14.808Z,4624,3,fthompson,S-1-5-21-6517383-5820,10.10.3.174,3734,0x0, +FIN-WS-074,2026-02-18T14:22:27.451Z,4624,3,cjohnson,S-1-5-21-6493706-6651,10.10.3.174,42151,0x0, +FIN-WS-074,2026-02-12T02:41:34.220Z,4624,2,agarcia,S-1-5-21-4600181-2626,10.10.3.174,29857,0x0, +FIN-WS-074,2026-02-14T09:02:01.848Z,4624,3,gwhite,S-1-5-21-7151851-6754,10.10.3.174,55136,0x0, +FIN-WS-074,2026-02-18T21:26:00.231Z,4624,3,idavis,S-1-5-21-4521664-9283,127.0.0.1,27832,0x0, +FIN-WS-074,2026-02-14T19:31:31.410Z,4624,10,bwilson,S-1-5-21-4343497-7529,10.10.3.174,32251,0x0, +FIN-WS-074,2026-02-11T11:51:46.850Z,4624,7,bwilson,S-1-5-21-8454017-1514,10.10.3.174,56936,0x0, +FIN-WS-074,2026-02-17T15:46:16.819Z,4624,7,jsmith,S-1-5-21-5907005-1888,10.10.3.126,15979,0x0, +FIN-WS-074,2026-02-18T02:30:29.928Z,4624,10,fthompson,S-1-5-21-8634539-6757,10.10.3.174,47154,0x0, +FIN-WS-074,2026-02-12T11:45:40.431Z,4625,3,dlee,S-1-5-21-2125293-8128,10.10.3.174,40535,0xC000006D,Unknown user name or bad password +FIN-WS-074,2026-02-19T01:18:35.983Z,4624,7,jsmith,S-1-5-21-1298510-6193,127.0.0.1,11154,0x0, +FIN-WS-074,2026-02-14T11:25:52.309Z,4624,2,jsmith,S-1-5-21-7782280-6057,127.0.0.1,16527,0x0, +FIN-WS-074,2026-02-18T00:04:01.022Z,4624,3,svc_backup,S-1-5-21-9682278-9679,127.0.0.1,13180,0x0, +FIN-WS-074,2026-02-11T10:42:41.945Z,4624,3,emartinez,S-1-5-21-2296744-1249,127.0.0.1,27477,0x0, +SLS-WS-075,2026-02-17T09:46:41.461Z,4625,3,agarcia,S-1-5-21-5133314-1770,10.10.1.175,55032,0xC000006D,Unknown user name or bad password +SLS-WS-075,2026-02-10T14:43:26.313Z,4624,3,svc_sql,S-1-5-21-7808072-3864,127.0.0.1,40017,0x0, +SLS-WS-075,2026-02-13T04:49:48.478Z,4625,3,emartinez,S-1-5-21-9996924-4499,10.10.3.159,2251,0xC000006D,Unknown user name or bad password +SLS-WS-075,2026-02-18T12:12:04.786Z,4624,7,svc_backup,S-1-5-21-6206040-9231,127.0.0.1,52057,0x0, +SLS-WS-075,2026-02-12T19:48:06.397Z,4624,3,bwilson,S-1-5-21-8820986-1295,10.10.1.175,18012,0x0, +SLS-WS-075,2026-02-15T10:08:05.739Z,4624,7,agarcia,S-1-5-21-8438790-9534,127.0.0.1,29977,0x0, +SLS-WS-075,2026-02-15T14:36:11.433Z,4624,3,bwilson,S-1-5-21-3063172-5737,10.10.2.128,45833,0x0, +SLS-WS-075,2026-02-19T05:13:08.594Z,4624,3,bwilson,S-1-5-21-6799612-2285,10.10.2.11,5938,0x0, +SLS-WS-075,2026-02-14T02:06:51.036Z,4625,3,svc_web,S-1-5-21-2541211-6617,10.10.2.104,47992,0xC000006D,Unknown user name or bad password +SLS-WS-075,2026-02-20T03:42:44.556Z,4624,3,svc_sql,S-1-5-21-4912622-1285,10.10.1.175,4494,0x0, +SLS-WS-075,2026-02-14T20:08:04.670Z,4624,10,svc_backup,S-1-5-21-8996063-9108,10.10.1.133,24188,0x0, +SLS-WS-075,2026-02-20T01:35:01.511Z,4624,10,dlee,S-1-5-21-1381972-5004,10.10.1.175,64027,0x0, +SLS-WS-075,2026-02-19T23:29:32.529Z,4624,3,bwilson,S-1-5-21-4645316-8370,10.10.1.157,62574,0x0, +SLS-WS-075,2026-02-12T21:03:39.294Z,4624,3,idavis,S-1-5-21-2039934-7813,10.10.1.169,37327,0x0, +SLS-WS-075,2026-02-15T20:37:49.030Z,4625,7,gwhite,S-1-5-21-5897180-1183,10.10.1.175,63189,0xC000006D,Unknown user name or bad password +SLS-WS-075,2026-02-12T11:59:53.113Z,4624,3,admin,S-1-5-21-6215406-6450,10.10.3.162,52296,0x0, +SLS-WS-075,2026-02-19T07:19:32.364Z,4625,2,bwilson,S-1-5-21-3464427-2459,127.0.0.1,1279,0xC000006D,Unknown user name or bad password +SLS-WS-075,2026-02-20T14:53:31.499Z,4625,2,dlee,S-1-5-21-7800520-9839,10.10.1.175,51579,0xC000006D,Unknown user name or bad password +SLS-WS-075,2026-02-17T23:13:22.361Z,4624,7,admin,S-1-5-21-3793077-3443,10.10.1.157,9607,0x0, +SLS-WS-075,2026-02-13T00:32:03.636Z,4624,2,admin,S-1-5-21-2636802-7256,10.10.2.170,37779,0x0, +SLS-WS-075,2026-02-20T12:45:01.971Z,4624,7,emartinez,S-1-5-21-7392721-7906,10.10.1.160,32018,0x0, +SLS-WS-075,2026-02-13T06:01:18.291Z,4624,3,agarcia,S-1-5-21-9003635-3199,10.10.1.142,48454,0x0, +SLS-WS-075,2026-02-14T19:14:02.501Z,4625,3,bwilson,S-1-5-21-4795300-8389,127.0.0.1,24128,0xC000006D,Unknown user name or bad password +SLS-WS-075,2026-02-20T17:13:02.338Z,4624,10,idavis,S-1-5-21-9320592-6439,10.10.1.172,2579,0x0, +SLS-WS-075,2026-02-20T00:58:37.520Z,4625,3,bwilson,S-1-5-21-2843691-8112,10.10.3.135,22905,0xC000006D,Unknown user name or bad password +DC-01,2026-02-12T12:08:56.600Z,4624,2,jsmith,S-1-5-21-2078267-9983,127.0.0.1,64796,0x0, +DC-01,2026-02-12T20:29:44.199Z,4624,3,gwhite,S-1-5-21-2176491-8728,10.10.1.10,22931,0x0, +DC-01,2026-02-13T06:36:23.363Z,4624,3,svc_backup,S-1-5-21-3871609-9120,10.10.1.10,27329,0x0, +DC-01,2026-02-16T10:19:46.366Z,4624,3,fthompson,S-1-5-21-6010148-2502,127.0.0.1,51335,0x0, +DC-01,2026-02-14T18:53:35.252Z,4624,2,gwhite,S-1-5-21-4621501-8390,127.0.0.1,28184,0x0, +DC-01,2026-02-17T08:33:09.068Z,4624,2,gwhite,S-1-5-21-5061905-7421,10.10.1.10,59665,0x0, +DC-01,2026-02-16T23:25:57.084Z,4624,10,svc_web,S-1-5-21-1690869-7037,10.10.1.10,3905,0x0, +DC-01,2026-02-14T22:36:44.417Z,4624,10,dlee,S-1-5-21-4142634-4588,127.0.0.1,35994,0x0, +DC-01,2026-02-20T13:29:07.071Z,4625,10,svc_backup,S-1-5-21-9791175-7693,10.10.3.174,5709,0xC000006D,Unknown user name or bad password +DC-01,2026-02-14T15:19:54.199Z,4624,3,svc_web,S-1-5-21-6182725-3761,10.10.1.10,13800,0x0, +DC-01,2026-02-11T11:35:15.049Z,4624,2,hbrown,S-1-5-21-2942894-7586,127.0.0.1,28841,0x0, +DC-01,2026-02-18T20:32:58.694Z,4625,2,idavis,S-1-5-21-9745960-7631,127.0.0.1,1721,0xC000006D,Unknown user name or bad password +DC-01,2026-02-11T21:42:12.310Z,4624,3,admin,S-1-5-21-6070224-8404,10.10.1.10,47213,0x0, +DC-01,2026-02-18T10:01:34.305Z,4624,10,idavis,S-1-5-21-5193213-5136,127.0.0.1,45468,0x0, +DC-01,2026-02-18T14:18:21.037Z,4624,2,hbrown,S-1-5-21-7418237-1752,10.10.3.102,12979,0x0, +DC-01,2026-02-12T22:27:37.355Z,4624,3,svc_web,S-1-5-21-4067377-5035,127.0.0.1,49083,0x0, +DC-01,2026-02-17T22:37:15.836Z,4624,2,emartinez,S-1-5-21-3069891-3029,127.0.0.1,4862,0x0, +DC-01,2026-02-17T10:16:59.164Z,4624,3,agarcia,S-1-5-21-1115374-9206,10.10.1.10,63496,0x0, +DC-01,2026-02-14T17:31:18.428Z,4624,3,agarcia,S-1-5-21-3037923-4737,10.10.1.10,63369,0x0, +DC-01,2026-02-19T21:31:23.855Z,4624,3,fthompson,S-1-5-21-3177902-3654,10.10.1.10,4988,0x0, +DC-01,2026-02-11T05:55:12.788Z,4625,3,emartinez,S-1-5-21-1796877-3665,127.0.0.1,28524,0xC000006D,Unknown user name or bad password +DC-01,2026-02-14T11:23:51.784Z,4624,3,cjohnson,S-1-5-21-6468969-4888,10.10.1.10,27505,0x0, +DC-01,2026-02-19T20:13:42.629Z,4624,7,hbrown,S-1-5-21-9522956-6976,127.0.0.1,26984,0x0, +DC-01,2026-02-16T09:53:37.895Z,4624,3,hbrown,S-1-5-21-2496713-8714,10.10.1.157,57593,0x0, +DC-01,2026-02-13T15:15:50.204Z,4624,2,fthompson,S-1-5-21-6963211-5239,10.10.1.10,12365,0x0, +DC-01,2026-02-12T11:13:20.311Z,4624,2,agarcia,S-1-5-21-3109839-2489,127.0.0.1,19327,0x0, +DC-01,2026-02-16T07:53:47.746Z,4624,2,agarcia,S-1-5-21-9579398-4324,10.10.1.10,38514,0x0, +DC-01,2026-02-19T07:01:17.850Z,4624,3,dlee,S-1-5-21-4812322-2930,127.0.0.1,22440,0x0, +DC-02,2026-02-13T02:59:42.026Z,4624,10,agarcia,S-1-5-21-4365866-3601,127.0.0.1,17046,0x0, +DC-02,2026-02-13T11:23:42.975Z,4624,3,bwilson,S-1-5-21-9862746-8641,10.10.2.10,51235,0x0, +DC-02,2026-02-11T19:26:25.128Z,4624,7,dlee,S-1-5-21-8538087-5591,10.10.2.137,58519,0x0, +DC-02,2026-02-15T10:53:26.985Z,4624,2,svc_backup,S-1-5-21-3089510-5852,10.10.2.10,46626,0x0, +DC-02,2026-02-12T00:51:56.209Z,4624,7,fthompson,S-1-5-21-2117561-6941,127.0.0.1,54868,0x0, +DC-02,2026-02-14T20:20:45.139Z,4624,2,hbrown,S-1-5-21-1721978-2974,10.10.2.131,19622,0x0, +DC-02,2026-02-15T22:35:47.627Z,4624,2,fthompson,S-1-5-21-9159429-7810,127.0.0.1,30798,0x0, +DC-02,2026-02-19T18:19:38.928Z,4624,10,hbrown,S-1-5-21-1846919-7630,10.10.1.136,57290,0x0, +DC-02,2026-02-14T02:30:27.151Z,4624,7,svc_backup,S-1-5-21-4641209-1454,10.10.2.110,41961,0x0, +DC-02,2026-02-11T23:55:54.241Z,4624,3,dlee,S-1-5-21-3513212-2076,127.0.0.1,5814,0x0, +DC-02,2026-02-20T06:59:41.369Z,4624,10,jsmith,S-1-5-21-4947843-7817,127.0.0.1,9061,0x0, +DC-02,2026-02-17T13:58:29.386Z,4625,7,fthompson,S-1-5-21-5468768-6358,10.10.2.10,62063,0xC000006D,Unknown user name or bad password +DC-02,2026-02-18T14:59:19.291Z,4624,3,svc_sql,S-1-5-21-3260665-5739,10.10.2.10,14448,0x0, +DC-02,2026-02-16T01:12:57.790Z,4624,7,svc_sql,S-1-5-21-5343740-6447,10.10.2.10,42089,0x0, +FILE-01,2026-02-11T00:30:23.811Z,4624,3,fthompson,S-1-5-21-5396909-2041,10.10.1.124,11400,0x0, +FILE-01,2026-02-13T11:43:28.779Z,4624,10,gwhite,S-1-5-21-5740809-1020,10.10.1.11,55811,0x0, +FILE-01,2026-02-10T23:20:17.502Z,4624,3,agarcia,S-1-5-21-9556081-2774,127.0.0.1,8784,0x0, +FILE-01,2026-02-11T21:10:42.444Z,4624,3,bwilson,S-1-5-21-1052768-1231,10.10.1.115,39585,0x0, +FILE-01,2026-02-18T06:05:58.994Z,4624,3,idavis,S-1-5-21-9574239-6251,10.10.3.156,18216,0x0, +FILE-01,2026-02-13T05:01:03.762Z,4624,3,hbrown,S-1-5-21-8924373-9417,10.10.3.126,63574,0x0, +FILE-01,2026-02-19T07:49:58.913Z,4625,10,agarcia,S-1-5-21-7662027-8652,10.10.1.124,12919,0xC000006D,Unknown user name or bad password +FILE-01,2026-02-14T18:21:24.427Z,4624,2,svc_backup,S-1-5-21-9640439-9250,127.0.0.1,23413,0x0, +FILE-01,2026-02-18T05:08:31.852Z,4624,10,fthompson,S-1-5-21-2250999-7373,10.10.1.11,35489,0x0, +FILE-01,2026-02-10T18:53:24.766Z,4625,7,fthompson,S-1-5-21-7857694-4388,10.10.1.11,48212,0xC000006D,Unknown user name or bad password +FILE-01,2026-02-18T02:51:48.241Z,4624,10,dlee,S-1-5-21-1456237-8778,10.10.3.141,12662,0x0, +FILE-01,2026-02-20T06:58:05.171Z,4624,3,fthompson,S-1-5-21-5634780-7550,127.0.0.1,31640,0x0, +FILE-01,2026-02-12T20:36:49.298Z,4625,10,svc_backup,S-1-5-21-1525165-9882,10.10.1.11,42390,0xC000006D,Unknown user name or bad password +FILE-01,2026-02-16T07:43:12.090Z,4624,3,dlee,S-1-5-21-1297254-3240,10.10.1.11,6507,0x0, +FILE-01,2026-02-13T20:21:25.402Z,4624,3,fthompson,S-1-5-21-8593247-9310,10.10.1.11,59778,0x0, +FILE-01,2026-02-10T17:29:31.907Z,4625,3,svc_backup,S-1-5-21-8402577-5958,10.10.1.172,44331,0xC000006D,Unknown user name or bad password +FILE-01,2026-02-15T23:18:10.414Z,4624,3,admin,S-1-5-21-3596263-1958,10.10.1.11,21301,0x0, +FILE-01,2026-02-18T16:07:13.381Z,4624,10,svc_backup,S-1-5-21-1305121-3931,10.10.1.13,24026,0x0, +FILE-01,2026-02-14T19:06:56.954Z,4624,10,fthompson,S-1-5-21-7758860-9178,127.0.0.1,36552,0x0, +FILE-01,2026-02-17T14:45:11.714Z,4624,10,hbrown,S-1-5-21-9291196-5544,10.10.1.11,56890,0x0, +FILE-01,2026-02-14T03:07:35.306Z,4624,10,svc_sql,S-1-5-21-4421337-5097,10.10.2.134,24984,0x0, +FILE-01,2026-02-12T14:12:21.393Z,4625,3,agarcia,S-1-5-21-8828152-5543,10.10.1.11,5448,0xC000006D,Unknown user name or bad password +FILE-01,2026-02-11T10:45:28.661Z,4624,3,gwhite,S-1-5-21-3370872-7707,127.0.0.1,18260,0x0, +FILE-01,2026-02-19T17:37:40.071Z,4624,3,gwhite,S-1-5-21-7319265-4126,127.0.0.1,57727,0x0, +FILE-01,2026-02-19T03:13:16.242Z,4624,3,idavis,S-1-5-21-5642296-9019,10.10.1.11,62326,0x0, +FILE-01,2026-02-11T22:59:59.684Z,4624,3,cjohnson,S-1-5-21-8188439-4167,127.0.0.1,5425,0x0, +FILE-01,2026-02-12T13:08:14.796Z,4624,2,bwilson,S-1-5-21-7158774-6022,10.10.3.129,13110,0x0, +FILE-01,2026-02-11T21:55:16.401Z,4624,3,emartinez,S-1-5-21-6055966-7829,127.0.0.1,39879,0x0, +EXCH-01,2026-02-15T12:56:04.279Z,4624,3,cjohnson,S-1-5-21-2859383-4247,127.0.0.1,60641,0x0, +EXCH-01,2026-02-12T22:20:37.563Z,4624,2,fthompson,S-1-5-21-2439411-8061,10.10.1.12,27909,0x0, +EXCH-01,2026-02-13T09:41:08.087Z,4624,3,hbrown,S-1-5-21-1624255-9062,127.0.0.1,62779,0x0, +EXCH-01,2026-02-13T14:46:02.509Z,4624,2,svc_sql,S-1-5-21-5346700-1973,10.10.2.167,58986,0x0, +EXCH-01,2026-02-14T18:14:03.720Z,4624,7,cjohnson,S-1-5-21-2168046-4294,127.0.0.1,41515,0x0, +EXCH-01,2026-02-19T05:48:46.898Z,4624,3,svc_sql,S-1-5-21-7698234-3458,10.10.1.12,56313,0x0, +EXCH-01,2026-02-14T08:50:56.531Z,4624,3,fthompson,S-1-5-21-2180244-2775,10.10.1.12,42870,0x0, +EXCH-01,2026-02-16T07:18:21.318Z,4624,10,agarcia,S-1-5-21-4946198-2506,127.0.0.1,7056,0x0, +EXCH-01,2026-02-17T04:11:46.516Z,4624,3,dlee,S-1-5-21-6147898-4237,10.10.1.12,13924,0x0, +EXCH-01,2026-02-14T13:36:44.514Z,4625,3,fthompson,S-1-5-21-3561818-7831,127.0.0.1,44064,0xC000006D,Unknown user name or bad password +EXCH-01,2026-02-16T05:28:37.984Z,4624,3,hbrown,S-1-5-21-3034744-1611,10.10.1.12,37226,0x0, +EXCH-01,2026-02-10T16:26:25.115Z,4624,10,svc_sql,S-1-5-21-1366353-6989,10.10.3.132,12480,0x0, +EXCH-01,2026-02-16T03:03:10.634Z,4624,3,admin,S-1-5-21-7034894-1781,10.10.1.12,41652,0x0, +EXCH-01,2026-02-19T14:03:04.790Z,4624,3,hbrown,S-1-5-21-9896211-7926,10.10.1.12,12158,0x0, +EXCH-01,2026-02-12T01:56:30.806Z,4624,2,jsmith,S-1-5-21-6949531-6299,10.10.1.12,32033,0x0, +EXCH-01,2026-02-19T03:17:10.247Z,4624,3,svc_sql,S-1-5-21-8908011-1883,127.0.0.1,51194,0x0, +WEB-01,2026-02-16T22:40:23.341Z,4624,7,svc_sql,S-1-5-21-9903608-3210,127.0.0.1,12664,0x0, +WEB-01,2026-02-19T21:33:40.133Z,4624,3,gwhite,S-1-5-21-1451363-6961,10.10.3.10,4963,0x0, +WEB-01,2026-02-19T05:45:38.330Z,4625,2,svc_sql,S-1-5-21-1194158-2933,10.10.3.10,55148,0xC000006D,Unknown user name or bad password +WEB-01,2026-02-11T08:48:39.066Z,4624,3,emartinez,S-1-5-21-6475195-8743,127.0.0.1,4853,0x0, +WEB-01,2026-02-17T00:59:44.316Z,4624,10,bwilson,S-1-5-21-5578392-1132,127.0.0.1,35045,0x0, +WEB-01,2026-02-20T09:58:30.425Z,4624,3,emartinez,S-1-5-21-1225371-7391,10.10.2.10,50722,0x0, +WEB-01,2026-02-19T20:23:35.755Z,4624,2,idavis,S-1-5-21-8506357-6477,10.10.3.10,22949,0x0, +WEB-01,2026-02-18T18:41:59.120Z,4624,2,emartinez,S-1-5-21-3851477-8211,10.10.3.10,65396,0x0, +WEB-01,2026-02-17T00:15:18.695Z,4624,2,cjohnson,S-1-5-21-9037155-2085,127.0.0.1,38519,0x0, +WEB-01,2026-02-12T12:52:49.006Z,4625,7,idavis,S-1-5-21-5559443-2527,10.10.3.10,15565,0xC000006D,Unknown user name or bad password +WEB-01,2026-02-18T08:32:54.539Z,4624,10,cjohnson,S-1-5-21-9445284-4275,10.10.2.128,65238,0x0, +WEB-01,2026-02-12T18:19:10.921Z,4625,3,idavis,S-1-5-21-1135918-5183,127.0.0.1,18402,0xC000006D,Unknown user name or bad password +WEB-01,2026-02-14T06:28:13.670Z,4624,2,emartinez,S-1-5-21-9348879-1944,127.0.0.1,11981,0x0, +WEB-01,2026-02-12T22:23:51.588Z,4624,10,jsmith,S-1-5-21-2587627-6724,10.10.1.121,11472,0x0, +WEB-01,2026-02-20T06:04:41.219Z,4625,3,gwhite,S-1-5-21-5651057-8799,10.10.3.10,58962,0xC000006D,Unknown user name or bad password +WEB-01,2026-02-13T19:12:25.656Z,4624,10,agarcia,S-1-5-21-6676160-1451,10.10.3.123,52627,0x0, +WEB-01,2026-02-14T08:53:20.085Z,4624,10,jsmith,S-1-5-21-2921718-3802,10.10.3.10,13513,0x0, +WEB-01,2026-02-10T15:54:27.901Z,4624,2,gwhite,S-1-5-21-3965365-9663,10.10.2.155,42532,0x0, +WEB-01,2026-02-11T06:37:25.780Z,4624,3,gwhite,S-1-5-21-2422365-3361,10.10.3.10,56806,0x0, +WEB-01,2026-02-13T21:42:24.595Z,4624,10,fthompson,S-1-5-21-3935408-6063,10.10.3.10,10670,0x0, +WEB-01,2026-02-10T12:53:50.848Z,4624,10,svc_backup,S-1-5-21-5249434-2817,127.0.0.1,15166,0x0, +WEB-01,2026-02-11T07:55:30.294Z,4624,3,bwilson,S-1-5-21-5818768-7608,10.10.1.136,48809,0x0, +SQL-01,2026-02-12T11:22:15.560Z,4624,10,agarcia,S-1-5-21-6560884-7998,10.10.2.11,39419,0x0, +SQL-01,2026-02-14T11:30:47.142Z,4624,10,agarcia,S-1-5-21-3767983-9460,10.10.3.144,36014,0x0, +SQL-01,2026-02-19T16:21:08.775Z,4624,3,svc_sql,S-1-5-21-2589155-3746,10.10.2.116,40773,0x0, +SQL-01,2026-02-14T04:50:29.042Z,4624,10,svc_sql,S-1-5-21-2689559-2304,10.10.3.147,41696,0x0, +SQL-01,2026-02-16T12:12:09.796Z,4625,7,hbrown,S-1-5-21-2372373-4340,127.0.0.1,13908,0xC000006D,Unknown user name or bad password +SQL-01,2026-02-15T13:55:08.864Z,4624,3,jsmith,S-1-5-21-7664768-5516,10.10.2.152,45949,0x0, +SQL-01,2026-02-11T01:38:45.513Z,4624,3,svc_sql,S-1-5-21-7065433-7639,127.0.0.1,30004,0x0, +SQL-01,2026-02-11T16:00:52.566Z,4625,10,gwhite,S-1-5-21-9170322-4622,10.10.2.110,4114,0xC000006D,Unknown user name or bad password +SQL-01,2026-02-11T15:31:55.487Z,4624,2,emartinez,S-1-5-21-7526827-4260,10.10.2.161,18065,0x0, +SQL-01,2026-02-17T22:38:45.864Z,4624,7,admin,S-1-5-21-1474648-6159,10.10.3.126,6368,0x0, +SQL-01,2026-02-20T06:37:30.133Z,4624,3,agarcia,S-1-5-21-6797024-2829,10.10.2.11,26145,0x0, +SQL-01,2026-02-13T21:59:37.099Z,4624,7,agarcia,S-1-5-21-3006059-3102,10.10.2.11,14115,0x0, +SQL-01,2026-02-18T13:53:48.623Z,4624,3,svc_sql,S-1-5-21-8069296-5482,127.0.0.1,11736,0x0, +SQL-01,2026-02-13T19:13:14.399Z,4625,3,bwilson,S-1-5-21-8185367-1353,10.10.2.116,57173,0xC000006D,Unknown user name or bad password +SQL-01,2026-02-17T19:39:14.490Z,4624,2,gwhite,S-1-5-21-1066179-8552,10.10.2.11,62563,0x0, +SQL-01,2026-02-19T20:36:47.125Z,4624,3,hbrown,S-1-5-21-3779815-9923,10.10.1.10,29967,0x0, +SQL-01,2026-02-18T00:11:15.844Z,4624,3,hbrown,S-1-5-21-5133356-1314,127.0.0.1,55832,0x0, +SQL-01,2026-02-20T17:06:42.766Z,4624,3,bwilson,S-1-5-21-2343033-1197,10.10.3.105,17183,0x0, +SQL-01,2026-02-14T07:49:10.206Z,4624,7,bwilson,S-1-5-21-4703630-1532,10.10.2.11,16134,0x0, +SQL-01,2026-02-16T18:39:38.689Z,4625,2,emartinez,S-1-5-21-1894962-4930,10.10.2.10,51058,0xC000006D,Unknown user name or bad password +SQL-01,2026-02-17T05:15:07.629Z,4625,7,dlee,S-1-5-21-6252538-6126,10.10.1.145,35707,0xC000006D,Unknown user name or bad password +SQL-01,2026-02-13T23:55:52.155Z,4625,3,admin,S-1-5-21-8249449-8569,127.0.0.1,23538,0xC000006D,Unknown user name or bad password +SQL-01,2026-02-19T14:25:11.361Z,4624,2,dlee,S-1-5-21-7366091-7151,10.10.2.146,19249,0x0, +SQL-01,2026-02-12T14:34:45.389Z,4625,10,cjohnson,S-1-5-21-5976964-3972,127.0.0.1,47967,0xC000006D,Unknown user name or bad password +SQL-01,2026-02-19T09:53:45.168Z,4624,3,hbrown,S-1-5-21-7012825-1224,10.10.2.11,49759,0x0, +SQL-01,2026-02-14T14:17:10.056Z,4624,3,jsmith,S-1-5-21-7874165-8651,10.10.3.102,6205,0x0, +SQL-01,2026-02-16T21:16:18.210Z,4624,7,svc_web,S-1-5-21-7667781-4736,127.0.0.1,11508,0x0, +PROXY-01,2026-02-10T13:04:23.290Z,4624,10,gwhite,S-1-5-21-2289749-7843,10.10.2.113,47720,0x0, +PROXY-01,2026-02-12T00:18:58.304Z,4624,10,idavis,S-1-5-21-6349647-6343,10.10.1.13,13353,0x0, +PROXY-01,2026-02-18T16:24:04.523Z,4625,3,cjohnson,S-1-5-21-1133194-1682,127.0.0.1,31762,0xC000006D,Unknown user name or bad password +PROXY-01,2026-02-11T09:20:54.632Z,4624,3,svc_backup,S-1-5-21-1441061-5171,10.10.1.13,12992,0x0, +PROXY-01,2026-02-20T13:44:21.719Z,4624,3,svc_web,S-1-5-21-8647335-4872,10.10.3.168,30360,0x0, +PROXY-01,2026-02-16T16:00:56.435Z,4624,10,hbrown,S-1-5-21-7763608-3231,10.10.3.135,24487,0x0, +PROXY-01,2026-02-17T01:07:38.966Z,4624,3,bwilson,S-1-5-21-1977860-3386,127.0.0.1,20181,0x0, +PROXY-01,2026-02-19T18:07:25.247Z,4624,7,admin,S-1-5-21-5780730-4943,10.10.2.110,54963,0x0, +PROXY-01,2026-02-14T04:41:38.582Z,4624,10,svc_sql,S-1-5-21-4282870-3058,127.0.0.1,36907,0x0, diff --git a/backend/tests/test_csvs/11_proxy_logs.csv b/backend/tests/test_csvs/11_proxy_logs.csv new file mode 100644 index 0000000..99edffe --- /dev/null +++ b/backend/tests/test_csvs/11_proxy_logs.csv @@ -0,0 +1,2606 @@ +Timestamp,Hostname,SourceIP,Username,URL,Domain,Action,Category,Method,ResponseCode,BytesSent,BytesReceived +2026-02-17T13:13:43.627Z,HR-WS-001,10.10.2.101,ACME\idavis,https://open.spotify.com/,open.spotify.com,ALLOWED,Adult,POST,404,48179,266183 +2026-02-11T20:28:56.927Z,HR-WS-001,10.10.2.101,ACME\idavis,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,200,37658,313386 +2026-02-15T06:50:24.825Z,HR-WS-001,10.10.2.101,ACME\idavis,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,200,31116,376389 +2026-02-11T04:51:39.796Z,HR-WS-001,10.10.2.101,ACME\idavis,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,POST,403,14607,354029 +2026-02-11T10:50:30.341Z,HR-WS-001,10.10.2.101,ACME\idavis,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,POST,200,22222,406569 +2026-02-18T07:26:56.598Z,HR-WS-001,10.10.2.101,ACME\idavis,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,GET,403,43508,36077 +2026-02-18T17:22:09.658Z,HR-WS-001,10.10.2.101,ACME\idavis,https://xvideos.com/,xvideos.com,ALLOWED,Adult,GET,301,21004,288814 +2026-02-16T15:07:45.061Z,HR-WS-001,10.10.2.101,ACME\idavis,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,200,24156,433304 +2026-02-17T16:10:45.183Z,HR-WS-001,10.10.2.101,ACME\idavis,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,GET,404,7189,228447 +2026-02-12T16:41:59.289Z,HR-WS-001,10.10.2.101,ACME\idavis,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,GET,200,22003,119669 +2026-02-11T15:35:14.989Z,HR-WS-001,10.10.2.101,ACME\idavis,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,200,9571,105276 +2026-02-14T00:39:19.251Z,HR-WS-001,10.10.2.101,ACME\idavis,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,POST,200,42616,357989 +2026-02-18T18:59:50.937Z,HR-WS-001,10.10.2.101,ACME\idavis,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,403,32761,166578 +2026-02-20T09:49:56.619Z,HR-WS-001,10.10.2.101,ACME\idavis,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,404,689,476965 +2026-02-19T20:23:12.157Z,HR-WS-001,10.10.2.101,ACME\idavis,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,GET,403,48262,415483 +2026-02-16T14:21:11.752Z,HR-WS-001,10.10.2.101,ACME\idavis,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,GET,200,48174,35052 +2026-02-13T04:57:01.121Z,HR-WS-001,10.10.2.101,ACME\idavis,https://github.com/api/v1/resource,github.com,ALLOWED,Business,POST,404,30995,422611 +2026-02-14T04:37:34.158Z,HR-WS-001,10.10.2.101,ACME\idavis,https://www.indeed.com/,www.indeed.com,BLOCKED,Gaming,GET,403,9727,448548 +2026-02-17T08:45:46.091Z,HR-WS-001,10.10.2.101,ACME\idavis,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,301,7681,414181 +2026-02-18T03:28:11.271Z,HR-WS-001,10.10.2.101,ACME\idavis,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,POST,200,22011,241786 +2026-02-17T23:33:31.489Z,HR-WS-001,10.10.2.101,ACME\idavis,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,POST,301,3970,435575 +2026-02-10T19:42:31.016Z,HR-WS-001,10.10.2.101,ACME\idavis,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,200,29555,327669 +2026-02-17T13:40:33.278Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,200,20062,427381 +2026-02-15T23:06:28.469Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,404,19661,444888 +2026-02-11T22:34:28.952Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,POST,200,22705,88097 +2026-02-16T00:17:35.778Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://www.indeed.com/,www.indeed.com,ALLOWED,Shopping,POST,200,845,244879 +2026-02-17T23:01:21.226Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,POST,200,44570,70727 +2026-02-14T08:39:51.070Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,403,1508,344783 +2026-02-17T05:22:56.094Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,200,34035,474084 +2026-02-16T14:21:27.562Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,301,30543,465847 +2026-02-18T12:47:47.255Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,403,7719,319244 +2026-02-17T19:15:57.782Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,POST,200,36983,402483 +2026-02-20T15:52:58.967Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://discord.gg/,discord.gg,BLOCKED,Gaming,GET,403,14128,444305 +2026-02-20T07:25:02.938Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://www.facebook.com/,www.facebook.com,ALLOWED,Shopping,GET,403,2094,206432 +2026-02-17T22:29:54.186Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Business,GET,301,15198,107870 +2026-02-11T13:15:01.714Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,POST,200,11711,159527 +2026-02-12T15:39:56.139Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,POST,200,9735,266814 +2026-02-17T11:19:51.659Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,200,17246,459325 +2026-02-19T05:06:20.069Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,GET,301,18962,134827 +2026-02-16T02:20:10.416Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,POST,403,9562,204944 +2026-02-17T17:17:18.248Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,403,36431,54164 +2026-02-13T04:32:55.729Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,POST,200,45080,87654 +2026-02-14T15:32:00.843Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,200,350,102887 +2026-02-20T05:25:58.595Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,POST,301,3811,172830 +2026-02-11T05:01:49.512Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://www.facebook.com/,www.facebook.com,BLOCKED,Streaming,GET,403,32969,143880 +2026-02-11T02:49:11.875Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,301,36620,461624 +2026-02-18T10:58:31.714Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,301,21136,220509 +2026-02-12T14:11:18.962Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,200,9501,409871 +2026-02-11T09:02:53.733Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://www.glassdoor.com/,www.glassdoor.com,ALLOWED,Piracy,GET,301,38828,407417 +2026-02-18T05:59:09.395Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://draftkings.com/,draftkings.com,ALLOWED,Social Media,POST,403,9302,356830 +2026-02-18T02:02:19.280Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://www.glassdoor.com/,www.glassdoor.com,BLOCKED,Gaming,GET,403,5414,230966 +2026-02-11T17:53:43.345Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,POST,404,48171,128084 +2026-02-14T23:55:56.055Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Technology,GET,301,2423,27253 +2026-02-10T22:13:11.975Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,200,22618,436033 +2026-02-12T05:13:31.040Z,FIN-WS-002,10.10.3.102,ACME\dlee,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,GET,404,2234,308209 +2026-02-10T08:13:20.489Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,403,28640,360614 +2026-02-14T20:16:56.756Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,200,37386,47486 +2026-02-12T12:38:52.850Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,POST,200,3369,113957 +2026-02-11T20:37:23.304Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,200,31287,449315 +2026-02-14T22:23:29.887Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://www.facebook.com/,www.facebook.com,ALLOWED,Adult,GET,200,37665,193221 +2026-02-15T19:30:08.722Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,POST,200,6299,191079 +2026-02-19T18:23:26.172Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,POST,301,16058,352625 +2026-02-19T15:39:03.352Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,POST,301,41702,442182 +2026-02-14T05:58:15.166Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,POST,200,3967,335191 +2026-02-20T12:43:31.916Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,200,43762,150490 +2026-02-17T05:50:35.790Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,POST,404,41122,406850 +2026-02-14T22:09:39.990Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Technology,GET,200,25743,291317 +2026-02-11T13:37:50.239Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,GET,200,25835,434222 +2026-02-12T17:13:36.365Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,200,3009,306038 +2026-02-19T11:03:58.276Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,POST,200,46240,350630 +2026-02-10T17:05:40.202Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,GET,301,5393,151898 +2026-02-19T21:34:35.268Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,301,30611,11871 +2026-02-14T04:31:34.375Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Productivity,POST,200,41475,132842 +2026-02-14T12:37:15.532Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,POST,200,17775,276635 +2026-02-12T11:00:40.620Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,200,35717,148785 +2026-02-20T15:44:58.644Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,GET,403,36454,248304 +2026-02-18T11:07:46.936Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,403,11422,228733 +2026-02-12T04:48:12.591Z,SLS-WS-003,10.10.1.103,ACME\svc_web,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,GET,403,37920,434644 +2026-02-11T02:56:44.583Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,POST,200,11170,160385 +2026-02-15T20:47:22.840Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://pokerstars.com/,pokerstars.com,ALLOWED,Social Media,POST,403,36222,411907 +2026-02-18T22:15:10.291Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,301,43429,214135 +2026-02-17T10:55:49.602Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,POST,403,1064,38712 +2026-02-14T13:40:44.960Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,404,33214,111313 +2026-02-16T17:46:25.496Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,POST,200,23351,36914 +2026-02-11T17:38:33.666Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,404,24141,148393 +2026-02-10T11:32:40.739Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,GET,200,17338,381976 +2026-02-15T14:29:45.466Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,200,33735,53115 +2026-02-10T08:30:59.188Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://pokerstars.com/,pokerstars.com,ALLOWED,Gaming,POST,301,13940,26962 +2026-02-18T09:31:11.157Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://acme.local/api/v1/resource,acme.local,ALLOWED,Cloud Services,POST,301,9908,298130 +2026-02-15T23:18:57.229Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,404,5668,83230 +2026-02-12T23:15:44.127Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,2935,342062 +2026-02-12T17:19:56.206Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,404,20901,150887 +2026-02-20T00:46:46.721Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,403,49380,476748 +2026-02-19T08:43:33.135Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,200,3050,430400 +2026-02-15T23:22:14.938Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,200,26912,107254 +2026-02-20T16:30:10.498Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,200,28268,81345 +2026-02-14T20:19:53.202Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,200,37663,109078 +2026-02-13T02:36:58.761Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,404,34944,11108 +2026-02-15T15:06:52.819Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,404,11624,195458 +2026-02-15T02:55:02.728Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,404,31654,85522 +2026-02-12T04:29:02.467Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,200,16643,39835 +2026-02-14T03:57:45.698Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,POST,200,22344,229095 +2026-02-11T18:36:26.074Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://acme.local/api/v1/resource,acme.local,ALLOWED,Cloud Services,GET,200,25352,250576 +2026-02-11T09:40:27.594Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,GET,404,1820,164679 +2026-02-17T21:15:03.534Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,GET,403,10863,141092 +2026-02-14T03:40:52.992Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,GET,403,25756,101517 +2026-02-12T10:08:58.324Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,GET,403,31571,193709 +2026-02-14T08:45:42.059Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Cloud Services,GET,403,11203,69036 +2026-02-11T22:36:12.578Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,POST,200,42484,47247 +2026-02-15T07:00:09.194Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,GET,403,44946,85350 +2026-02-15T11:48:43.785Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,POST,403,21555,103269 +2026-02-11T19:50:04.327Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,200,30744,483990 +2026-02-13T05:33:15.103Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,200,36721,83504 +2026-02-15T06:29:24.625Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,301,40969,89819 +2026-02-16T14:31:11.784Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,GET,200,5392,262570 +2026-02-14T20:43:43.882Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,POST,404,8220,368105 +2026-02-15T12:13:48.052Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,403,35539,12734 +2026-02-19T23:02:19.587Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,200,26640,83536 +2026-02-19T15:50:25.166Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://www.tiktok.com/,www.tiktok.com,ALLOWED,Streaming,GET,301,37299,183696 +2026-02-16T23:55:47.075Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Business,GET,200,28248,491761 +2026-02-14T11:31:27.940Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Productivity,POST,404,28587,58425 +2026-02-18T01:28:50.158Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,200,19939,187882 +2026-02-16T06:06:08.027Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,GET,403,43608,428717 +2026-02-18T17:31:33.170Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,200,21118,470011 +2026-02-17T06:51:35.501Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Productivity,GET,301,17482,484467 +2026-02-12T15:22:32.695Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,403,4798,271719 +2026-02-10T17:17:44.335Z,ENG-WS-004,10.10.2.104,ACME\svc_backup,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,200,22218,479265 +2026-02-12T18:48:06.710Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,404,38153,249850 +2026-02-14T05:08:20.804Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,GET,403,27616,397969 +2026-02-19T03:07:27.673Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://www.linkedin.com/jobs/,www.linkedin.com/jobs,ALLOWED,Shopping,GET,200,43389,318243 +2026-02-17T14:10:26.474Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,200,42162,481453 +2026-02-18T19:18:08.744Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,200,27843,68593 +2026-02-17T02:48:03.455Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,200,22927,30583 +2026-02-19T19:57:49.401Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,POST,200,15034,354133 +2026-02-16T22:59:12.346Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,200,30702,498658 +2026-02-18T04:08:42.828Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,POST,403,40907,407836 +2026-02-18T14:58:15.122Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,200,49585,347879 +2026-02-15T11:53:45.466Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,POST,403,45123,165326 +2026-02-13T19:00:47.975Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,301,6986,270341 +2026-02-13T21:23:29.743Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://www.bet365.com/,www.bet365.com,BLOCKED,Streaming,GET,403,35638,157832 +2026-02-12T09:29:58.022Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,403,30594,411010 +2026-02-13T17:19:19.469Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,GET,404,46638,32727 +2026-02-17T17:59:04.366Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,200,31697,22048 +2026-02-20T07:47:16.354Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,200,39967,155866 +2026-02-15T09:22:35.923Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,404,38236,392812 +2026-02-17T10:58:53.977Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,GET,200,13247,314047 +2026-02-15T04:25:12.476Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,45844,381620 +2026-02-13T06:57:10.708Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://www.reddit.com/,www.reddit.com,BLOCKED,Gaming,GET,403,46522,69242 +2026-02-10T10:32:06.232Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,POST,200,40261,275303 +2026-02-17T02:12:48.818Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,403,2763,378591 +2026-02-16T05:54:59.924Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,POST,200,18351,433712 +2026-02-20T15:19:05.478Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,301,30780,72515 +2026-02-15T05:32:49.942Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,POST,200,49427,344999 +2026-02-16T22:00:00.389Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,GET,403,14372,186727 +2026-02-20T04:03:51.690Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,GET,301,14630,122530 +2026-02-16T05:08:51.912Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,POST,403,30631,289179 +2026-02-15T15:37:51.057Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,200,29611,244519 +2026-02-18T00:12:05.882Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,404,7882,253807 +2026-02-10T10:09:20.581Z,LEG-WS-005,10.10.3.105,ACME\hbrown,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,301,30670,467625 +2026-02-12T05:01:22.025Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,POST,200,38992,181669 +2026-02-16T12:12:48.942Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://xvideos.com/,xvideos.com,ALLOWED,Piracy,GET,200,33316,22778 +2026-02-10T22:50:34.375Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,403,4625,462444 +2026-02-18T03:24:53.554Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,POST,200,23549,96400 +2026-02-14T13:48:41.967Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,200,9916,49077 +2026-02-11T09:47:22.887Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://discord.gg/,discord.gg,BLOCKED,Social Media,GET,403,14170,413539 +2026-02-12T03:47:52.704Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,301,7563,429950 +2026-02-14T13:55:17.348Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,25524,292584 +2026-02-16T09:28:26.833Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,200,8721,445534 +2026-02-10T14:16:22.588Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,200,33289,90028 +2026-02-20T17:57:35.046Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,301,28335,426935 +2026-02-16T18:19:37.989Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,403,37040,327673 +2026-02-18T11:06:17.968Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,404,20880,316528 +2026-02-20T02:08:59.508Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,301,24511,394912 +2026-02-18T06:27:24.689Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,200,3094,240760 +2026-02-15T18:25:07.345Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://www.bet365.com/,www.bet365.com,ALLOWED,Shopping,GET,403,47787,261453 +2026-02-16T22:36:28.502Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,200,27157,180685 +2026-02-12T14:22:31.842Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,POST,200,11969,439108 +2026-02-17T19:06:11.354Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,404,12049,493412 +2026-02-18T02:27:20.327Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://www.pornhub.com/,www.pornhub.com,ALLOWED,Social Media,GET,404,19477,243439 +2026-02-18T10:42:42.456Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,404,11823,410011 +2026-02-18T21:03:59.342Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,403,33738,3473 +2026-02-18T02:39:52.959Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,403,43908,2297 +2026-02-14T22:14:29.110Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,403,22956,56073 +2026-02-15T01:14:36.275Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,200,28571,449488 +2026-02-13T09:22:13.293Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,POST,301,40442,379967 +2026-02-12T21:01:18.995Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,200,3575,48492 +2026-02-12T02:21:26.130Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,POST,403,33142,78800 +2026-02-13T18:27:48.003Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,301,9586,41246 +2026-02-19T16:23:44.157Z,MKT-WS-006,10.10.1.106,ACME\bwilson,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,GET,403,36374,335962 +2026-02-18T11:17:21.482Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,403,40779,35283 +2026-02-15T05:21:14.483Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,POST,301,47196,17639 +2026-02-13T22:26:44.959Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,POST,200,21490,141787 +2026-02-18T17:25:20.238Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,GET,301,39836,376368 +2026-02-15T12:17:17.617Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,200,4050,196046 +2026-02-13T02:00:33.660Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,POST,200,48256,386325 +2026-02-13T19:05:49.908Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,POST,301,2772,450486 +2026-02-17T07:45:13.348Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,GET,200,12233,6252 +2026-02-12T17:25:38.775Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,200,32709,234864 +2026-02-20T12:18:08.168Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,200,34639,16676 +2026-02-16T00:03:37.355Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://acme.local/api/v1/resource,acme.local,ALLOWED,Cloud Services,GET,200,22689,139357 +2026-02-14T13:16:06.077Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,301,3059,307288 +2026-02-16T05:54:36.743Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,POST,403,2069,111125 +2026-02-12T06:53:07.633Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,403,42849,441661 +2026-02-12T15:57:08.390Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://www.amazon.com/,www.amazon.com,ALLOWED,Piracy,GET,403,35206,278062 +2026-02-16T23:56:22.053Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://hulu.com/,hulu.com,BLOCKED,Piracy,GET,403,10939,265087 +2026-02-12T23:57:00.503Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,GET,301,26628,347007 +2026-02-17T04:03:16.099Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,200,21837,278640 +2026-02-13T11:43:22.930Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,403,29259,183775 +2026-02-17T01:13:13.605Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://steamcommunity.com/,steamcommunity.com,ALLOWED,Gambling,GET,403,20346,93407 +2026-02-16T11:09:09.544Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,GET,200,4118,498404 +2026-02-18T13:43:28.209Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://www.glassdoor.com/,www.glassdoor.com,ALLOWED,Gaming,POST,403,22498,851 +2026-02-15T02:36:56.920Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,32546,485040 +2026-02-14T06:52:26.836Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,GET,200,38497,290193 +2026-02-10T18:28:02.331Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,POST,403,16572,434019 +2026-02-14T17:08:14.966Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,200,26218,284846 +2026-02-12T01:24:25.848Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,403,12661,411822 +2026-02-10T19:00:30.518Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,301,23487,338383 +2026-02-20T05:59:30.055Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,POST,403,44360,485058 +2026-02-14T16:22:52.456Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Productivity,GET,200,37129,30494 +2026-02-17T17:02:21.815Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://fitgirl-repacks.site/,fitgirl-repacks.site,BLOCKED,Social Media,GET,403,42209,315989 +2026-02-20T12:50:01.025Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,200,46952,116555 +2026-02-11T17:37:06.666Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,200,38193,58755 +2026-02-20T02:27:49.602Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,POST,403,29763,16167 +2026-02-19T10:14:32.915Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,403,26673,405236 +2026-02-11T23:25:08.381Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,200,46375,57086 +2026-02-18T02:50:14.707Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,200,4710,185774 +2026-02-14T07:23:59.252Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,200,21846,349406 +2026-02-16T05:31:14.135Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,19990,265037 +2026-02-19T09:34:12.845Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,403,18280,44219 +2026-02-18T19:24:29.613Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,200,28718,473513 +2026-02-16T11:06:08.087Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,POST,200,14874,182337 +2026-02-17T23:03:44.070Z,EXEC-WS-007,10.10.2.107,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,301,6962,19954 +2026-02-14T06:31:07.274Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,POST,403,11049,396801 +2026-02-11T04:30:02.027Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,403,19522,108320 +2026-02-14T21:26:48.444Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,301,17793,466777 +2026-02-15T02:45:07.868Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,GET,200,21220,433806 +2026-02-20T16:47:44.591Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,GET,404,36334,487757 +2026-02-20T03:02:47.120Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,GET,301,8671,237717 +2026-02-16T01:01:49.985Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Technology,GET,200,39014,281146 +2026-02-12T19:51:32.240Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,301,24529,461195 +2026-02-10T21:51:59.477Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,POST,301,31997,296447 +2026-02-15T00:27:18.027Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,301,48127,138100 +2026-02-15T22:25:12.331Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,200,11710,170426 +2026-02-17T01:40:40.050Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,200,30149,254485 +2026-02-14T20:35:26.387Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,POST,403,44164,332741 +2026-02-13T21:16:29.574Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,POST,404,17410,303884 +2026-02-11T06:35:53.516Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://www.amazon.com/,www.amazon.com,BLOCKED,Adult,POST,403,26075,218585 +2026-02-12T15:47:44.776Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,POST,200,23296,243342 +2026-02-17T00:10:39.215Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,POST,403,11425,22949 +2026-02-16T19:36:38.670Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,POST,403,24193,261681 +2026-02-10T16:40:24.851Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,POST,403,36323,344744 +2026-02-14T01:30:02.365Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,200,25871,50660 +2026-02-20T16:21:30.498Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://hulu.com/,hulu.com,ALLOWED,Social Media,GET,403,49501,162044 +2026-02-19T05:44:12.342Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,403,13461,242419 +2026-02-12T06:32:37.755Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,POST,200,31776,410833 +2026-02-17T16:31:35.984Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,200,12380,16996 +2026-02-17T23:08:19.359Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,301,19728,243573 +2026-02-11T17:14:08.126Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,POST,200,22760,156980 +2026-02-12T07:58:14.054Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,403,14805,20976 +2026-02-11T20:39:34.427Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,200,43923,99626 +2026-02-17T14:11:41.825Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,200,9900,377016 +2026-02-12T18:38:04.660Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,GET,200,6422,482514 +2026-02-18T14:32:15.730Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,POST,200,49480,420494 +2026-02-20T14:19:19.855Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,POST,200,31899,310780 +2026-02-12T09:28:05.317Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Productivity,POST,403,35636,286563 +2026-02-17T01:49:09.120Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,301,47991,93200 +2026-02-10T08:23:34.392Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://store.steampowered.com/,store.steampowered.com,BLOCKED,Gaming,GET,403,21324,132926 +2026-02-10T12:53:57.609Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,403,45334,225916 +2026-02-12T18:19:46.217Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,301,5906,220129 +2026-02-13T13:15:53.523Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://google.com/api/v1/resource,google.com,ALLOWED,Business,POST,404,41627,244077 +2026-02-13T04:42:47.799Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,404,20095,26037 +2026-02-19T16:20:51.673Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,200,10238,206840 +2026-02-14T19:47:10.941Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,403,3994,440257 +2026-02-18T14:47:49.620Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,301,15563,14688 +2026-02-15T11:24:53.306Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,200,35717,380267 +2026-02-17T13:11:56.131Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,404,2813,288639 +2026-02-13T07:26:15.953Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,POST,403,30335,211612 +2026-02-11T09:11:23.466Z,IT-WS-008,10.10.3.108,ACME\bwilson,https://www.netflix.com/,www.netflix.com,ALLOWED,Adult,GET,301,16003,285328 +2026-02-17T02:40:45.092Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,POST,200,23300,166463 +2026-02-10T14:39:06.153Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,403,25268,47918 +2026-02-15T03:33:11.515Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,403,42386,453714 +2026-02-18T15:52:55.403Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,POST,301,4662,37290 +2026-02-17T16:32:57.420Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,8207,139777 +2026-02-13T13:18:47.982Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,21945,386592 +2026-02-19T01:19:25.302Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Cloud Services,POST,403,42059,376680 +2026-02-13T07:38:00.753Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,POST,403,15420,131924 +2026-02-18T15:16:32.778Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,POST,301,44404,401603 +2026-02-20T03:48:49.103Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,200,18751,6435 +2026-02-13T13:16:18.530Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://discord.gg/,discord.gg,BLOCKED,Social Media,GET,403,15516,25679 +2026-02-20T14:49:34.694Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,403,18728,473801 +2026-02-11T10:28:14.118Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,301,45038,383757 +2026-02-11T17:45:34.055Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,POST,200,41214,5393 +2026-02-11T22:36:43.127Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,POST,200,4367,50737 +2026-02-13T07:09:32.141Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,POST,200,20298,377611 +2026-02-11T11:54:11.439Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://www.indeed.com/,www.indeed.com,BLOCKED,Adult,POST,403,41486,106824 +2026-02-16T17:45:18.539Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,POST,404,24392,105903 +2026-02-14T10:19:20.166Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,403,11075,441921 +2026-02-16T03:25:47.917Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://www.netflix.com/,www.netflix.com,ALLOWED,Streaming,GET,200,48628,30064 +2026-02-15T18:29:23.660Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,GET,404,43508,435373 +2026-02-11T12:22:16.204Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://onlyfans.com/,onlyfans.com,BLOCKED,Adult,GET,403,31693,45703 +2026-02-17T16:23:45.176Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,POST,404,5333,223899 +2026-02-11T13:57:10.835Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,301,13309,77753 +2026-02-17T08:11:33.575Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,POST,301,26808,328537 +2026-02-12T12:48:24.362Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,200,33793,395947 +2026-02-13T12:23:54.954Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,200,24409,228590 +2026-02-12T14:34:27.032Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,GET,200,43703,180357 +2026-02-13T04:07:35.189Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,POST,200,19997,47195 +2026-02-10T19:58:29.870Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,200,47443,319981 +2026-02-10T13:31:51.585Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,200,16655,439075 +2026-02-17T19:44:51.743Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,GET,404,2691,380215 +2026-02-19T15:30:39.041Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,GET,200,27340,407495 +2026-02-15T11:34:17.278Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,POST,403,20177,496151 +2026-02-14T20:29:05.459Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,403,33514,306684 +2026-02-12T16:17:48.498Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,301,29889,346664 +2026-02-20T13:28:08.663Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,200,11633,315800 +2026-02-16T12:32:38.584Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://www.pornhub.com/,www.pornhub.com,ALLOWED,Social Media,GET,200,40824,128561 +2026-02-17T02:23:49.642Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,301,12585,30746 +2026-02-19T19:43:05.663Z,HR-WS-009,10.10.1.109,ACME\cjohnson,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,200,31708,488086 +2026-02-19T15:19:27.342Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,GET,404,15201,127328 +2026-02-15T23:32:48.010Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,7944,18754 +2026-02-10T20:14:14.159Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,POST,301,46459,19324 +2026-02-19T19:37:19.114Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://fitgirl-repacks.site/,fitgirl-repacks.site,ALLOWED,Streaming,GET,200,45799,424615 +2026-02-12T11:56:27.520Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,POST,200,33560,198138 +2026-02-17T06:54:29.438Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,404,16073,439157 +2026-02-14T22:45:56.404Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,403,4916,175873 +2026-02-20T05:04:06.869Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,200,36436,431041 +2026-02-14T10:38:58.248Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,403,49240,137056 +2026-02-12T13:45:40.480Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,POST,301,5592,394289 +2026-02-11T09:34:12.892Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,GET,403,47190,46826 +2026-02-12T06:12:49.441Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,403,18772,39371 +2026-02-12T02:27:10.792Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,404,21877,349865 +2026-02-10T18:53:10.879Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,44720,44182 +2026-02-17T02:21:47.024Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,403,26453,251412 +2026-02-11T02:37:36.132Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,404,3305,160050 +2026-02-13T19:59:35.409Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,200,42335,207283 +2026-02-13T18:57:36.511Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,POST,404,9834,223803 +2026-02-18T11:09:53.631Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,POST,200,25159,467986 +2026-02-16T12:44:05.449Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,200,31471,211777 +2026-02-11T22:51:05.961Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,403,1246,36236 +2026-02-13T18:14:54.356Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,301,25558,190298 +2026-02-14T13:06:37.626Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,200,49173,314833 +2026-02-14T20:40:45.611Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,GET,200,31845,149611 +2026-02-11T17:08:19.940Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,200,43883,241495 +2026-02-15T11:20:59.883Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,200,23113,333473 +2026-02-16T14:46:04.376Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,200,12297,402393 +2026-02-11T07:15:22.100Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,GET,403,41642,296981 +2026-02-17T09:38:27.677Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://www.amazon.com/,www.amazon.com,ALLOWED,Social Media,GET,403,44567,219431 +2026-02-18T16:31:33.176Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,POST,403,29775,335816 +2026-02-15T00:31:40.316Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,200,47357,456573 +2026-02-20T04:54:50.500Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,GET,200,312,471350 +2026-02-12T23:25:46.226Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,GET,301,33402,89193 +2026-02-17T02:53:23.267Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://steamcommunity.com/,steamcommunity.com,ALLOWED,Piracy,GET,301,20617,405067 +2026-02-15T09:08:43.930Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,200,44842,313646 +2026-02-14T02:09:58.458Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://acme.local/api/v1/resource,acme.local,ALLOWED,Cloud Services,GET,200,28542,167112 +2026-02-10T16:48:03.269Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,200,44609,182837 +2026-02-12T09:27:24.419Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,200,31682,228697 +2026-02-18T03:08:14.510Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://open.spotify.com/,open.spotify.com,BLOCKED,Shopping,GET,403,6885,424121 +2026-02-16T06:58:54.636Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,POST,200,19816,41395 +2026-02-18T02:13:11.689Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,GET,200,12203,134782 +2026-02-14T11:05:53.733Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,GET,200,28456,403109 +2026-02-19T09:13:53.714Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,GET,404,19663,117281 +2026-02-12T04:09:59.279Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,GET,200,22448,119511 +2026-02-14T07:06:12.934Z,FIN-WS-010,10.10.2.110,ACME\agarcia,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,301,24987,213268 +2026-02-17T13:22:11.184Z,SLS-WS-011,10.10.3.111,ACME\admin,https://www.bet365.com/,www.bet365.com,ALLOWED,Piracy,GET,403,34582,221769 +2026-02-16T21:45:19.433Z,SLS-WS-011,10.10.3.111,ACME\admin,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,403,39544,471513 +2026-02-18T13:41:57.589Z,SLS-WS-011,10.10.3.111,ACME\admin,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,GET,200,44806,17707 +2026-02-11T09:27:59.906Z,SLS-WS-011,10.10.3.111,ACME\admin,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,404,11627,76173 +2026-02-19T18:01:57.791Z,SLS-WS-011,10.10.3.111,ACME\admin,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,POST,301,17123,102083 +2026-02-16T23:41:44.030Z,SLS-WS-011,10.10.3.111,ACME\admin,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,POST,301,8505,49502 +2026-02-12T03:12:07.765Z,SLS-WS-011,10.10.3.111,ACME\admin,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,POST,200,25600,136348 +2026-02-12T18:17:37.678Z,SLS-WS-011,10.10.3.111,ACME\admin,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,POST,200,49092,384616 +2026-02-15T18:57:26.719Z,SLS-WS-011,10.10.3.111,ACME\admin,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Technology,POST,200,37479,168938 +2026-02-14T13:01:55.085Z,SLS-WS-011,10.10.3.111,ACME\admin,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,GET,200,9282,452939 +2026-02-19T10:38:33.441Z,SLS-WS-011,10.10.3.111,ACME\admin,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,45348,146477 +2026-02-20T10:25:59.523Z,SLS-WS-011,10.10.3.111,ACME\admin,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,200,32968,307000 +2026-02-17T23:45:51.312Z,SLS-WS-011,10.10.3.111,ACME\admin,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,200,9819,142009 +2026-02-18T09:15:11.204Z,SLS-WS-011,10.10.3.111,ACME\admin,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,200,32365,39619 +2026-02-10T17:25:27.085Z,SLS-WS-011,10.10.3.111,ACME\admin,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,POST,200,31948,120495 +2026-02-18T01:20:22.040Z,SLS-WS-011,10.10.3.111,ACME\admin,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,404,35596,412917 +2026-02-17T02:20:34.559Z,SLS-WS-011,10.10.3.111,ACME\admin,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,403,46253,55197 +2026-02-12T22:01:57.470Z,SLS-WS-011,10.10.3.111,ACME\admin,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,POST,403,35721,452000 +2026-02-13T18:29:52.054Z,SLS-WS-011,10.10.3.111,ACME\admin,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,301,49450,233395 +2026-02-10T18:00:42.615Z,SLS-WS-011,10.10.3.111,ACME\admin,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,POST,200,16222,454080 +2026-02-10T17:12:19.221Z,SLS-WS-011,10.10.3.111,ACME\admin,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,301,30211,467417 +2026-02-18T09:38:25.715Z,SLS-WS-011,10.10.3.111,ACME\admin,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,403,17439,337515 +2026-02-15T13:28:29.161Z,SLS-WS-011,10.10.3.111,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,200,15519,300746 +2026-02-20T12:48:49.375Z,SLS-WS-011,10.10.3.111,ACME\admin,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,301,47036,405908 +2026-02-17T03:11:49.163Z,SLS-WS-011,10.10.3.111,ACME\admin,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,GET,301,26138,466835 +2026-02-20T01:20:17.133Z,SLS-WS-011,10.10.3.111,ACME\admin,https://www.indeed.com/,www.indeed.com,ALLOWED,Streaming,GET,301,18388,395955 +2026-02-14T14:09:52.938Z,SLS-WS-011,10.10.3.111,ACME\admin,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,404,46665,31106 +2026-02-13T14:56:16.864Z,SLS-WS-011,10.10.3.111,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,POST,301,42299,129790 +2026-02-17T10:31:36.970Z,SLS-WS-011,10.10.3.111,ACME\admin,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,404,45520,446043 +2026-02-17T04:32:06.843Z,SLS-WS-011,10.10.3.111,ACME\admin,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,200,31657,109550 +2026-02-20T10:52:43.032Z,SLS-WS-011,10.10.3.111,ACME\admin,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,GET,403,4593,10318 +2026-02-20T06:47:19.609Z,SLS-WS-011,10.10.3.111,ACME\admin,https://xvideos.com/,xvideos.com,ALLOWED,Adult,POST,200,48772,162298 +2026-02-15T06:09:00.805Z,SLS-WS-011,10.10.3.111,ACME\admin,https://open.spotify.com/,open.spotify.com,BLOCKED,Gaming,GET,403,27909,403009 +2026-02-14T19:08:14.742Z,SLS-WS-011,10.10.3.111,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,200,9218,145951 +2026-02-12T00:29:23.983Z,SLS-WS-011,10.10.3.111,ACME\admin,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,POST,403,31309,292735 +2026-02-18T23:01:53.157Z,SLS-WS-011,10.10.3.111,ACME\admin,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,GET,200,8871,127479 +2026-02-13T08:20:58.821Z,SLS-WS-011,10.10.3.111,ACME\admin,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,GET,301,24084,125986 +2026-02-13T05:18:07.408Z,SLS-WS-011,10.10.3.111,ACME\admin,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,GET,200,11121,353074 +2026-02-18T06:26:40.744Z,SLS-WS-011,10.10.3.111,ACME\admin,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,403,6035,141361 +2026-02-18T17:37:28.969Z,SLS-WS-011,10.10.3.111,ACME\admin,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,POST,404,35707,359484 +2026-02-15T22:09:24.065Z,SLS-WS-011,10.10.3.111,ACME\admin,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,200,7072,125117 +2026-02-19T12:11:53.207Z,SLS-WS-011,10.10.3.111,ACME\admin,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,GET,200,17238,100272 +2026-02-10T22:37:10.436Z,SLS-WS-011,10.10.3.111,ACME\admin,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,200,19980,178144 +2026-02-11T21:01:49.239Z,SLS-WS-011,10.10.3.111,ACME\admin,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,403,35030,203396 +2026-02-13T05:33:55.637Z,SLS-WS-011,10.10.3.111,ACME\admin,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,POST,404,39911,69117 +2026-02-19T19:31:21.850Z,SLS-WS-011,10.10.3.111,ACME\admin,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,200,26291,450312 +2026-02-13T15:02:46.248Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,GET,200,46810,97098 +2026-02-18T21:36:51.060Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,200,30874,183450 +2026-02-17T17:22:35.202Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,403,25707,463670 +2026-02-12T03:01:31.105Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,200,47088,437760 +2026-02-13T14:51:53.890Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,GET,200,25930,22017 +2026-02-18T14:02:49.303Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,200,42859,447591 +2026-02-16T08:37:58.801Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,POST,200,25109,477428 +2026-02-13T17:25:04.016Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,200,9468,369815 +2026-02-16T15:04:04.045Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,GET,200,4046,88851 +2026-02-16T15:03:31.110Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,200,27341,338137 +2026-02-12T08:42:55.354Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,200,11495,264119 +2026-02-12T03:27:01.352Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,200,11871,264815 +2026-02-13T21:44:00.760Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,POST,200,8557,382123 +2026-02-10T10:41:05.334Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,403,26238,142370 +2026-02-19T23:18:56.334Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,200,49177,477825 +2026-02-13T01:15:41.684Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,GET,200,21807,263504 +2026-02-19T01:57:09.997Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,200,3457,98197 +2026-02-18T20:08:30.314Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,403,27860,138747 +2026-02-12T22:09:41.913Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,GET,200,14886,229723 +2026-02-10T16:38:55.013Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,200,48681,424650 +2026-02-13T03:26:16.494Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,301,45685,305528 +2026-02-11T10:29:49.515Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,403,17141,58190 +2026-02-18T03:57:23.344Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,200,28494,44005 +2026-02-13T18:50:58.517Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,200,46525,299122 +2026-02-10T23:27:57.587Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,200,17767,489142 +2026-02-11T20:28:44.011Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,POST,301,30274,192374 +2026-02-16T08:33:02.321Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,POST,200,34434,190254 +2026-02-19T09:45:25.439Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,301,16601,450581 +2026-02-11T04:09:15.089Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,404,44349,278064 +2026-02-19T18:38:06.715Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Productivity,GET,301,15003,444594 +2026-02-10T18:14:18.841Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://hulu.com/,hulu.com,BLOCKED,Gambling,POST,403,12823,342231 +2026-02-10T08:20:37.009Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,200,24551,192237 +2026-02-17T12:23:25.403Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,200,48464,79349 +2026-02-16T18:10:31.201Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,GET,404,20773,204503 +2026-02-19T23:40:20.320Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,200,36919,488476 +2026-02-14T13:39:39.537Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,403,46908,420302 +2026-02-14T21:29:43.212Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,GET,404,20545,494276 +2026-02-12T14:01:36.892Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,GET,404,30552,338007 +2026-02-19T18:36:28.316Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,200,16565,197651 +2026-02-17T03:05:58.419Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Productivity,GET,200,18831,356126 +2026-02-20T03:42:51.095Z,ENG-WS-012,10.10.1.112,ACME\dlee,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,POST,200,724,9151 +2026-02-18T12:55:06.846Z,LEG-WS-013,10.10.2.113,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,GET,403,37092,333086 +2026-02-18T06:45:21.260Z,LEG-WS-013,10.10.2.113,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,200,28223,252189 +2026-02-15T02:38:12.801Z,LEG-WS-013,10.10.2.113,ACME\admin,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,200,1985,421878 +2026-02-18T12:48:24.750Z,LEG-WS-013,10.10.2.113,ACME\admin,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,GET,403,38477,277989 +2026-02-15T22:54:47.687Z,LEG-WS-013,10.10.2.113,ACME\admin,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,POST,200,8252,121061 +2026-02-13T07:40:24.819Z,LEG-WS-013,10.10.2.113,ACME\admin,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,GET,200,23246,226745 +2026-02-16T18:48:09.216Z,LEG-WS-013,10.10.2.113,ACME\admin,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,GET,200,8126,399044 +2026-02-20T09:34:13.161Z,LEG-WS-013,10.10.2.113,ACME\admin,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,POST,403,44524,381186 +2026-02-11T17:44:04.665Z,LEG-WS-013,10.10.2.113,ACME\admin,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,200,7981,482350 +2026-02-19T01:23:41.021Z,LEG-WS-013,10.10.2.113,ACME\admin,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Productivity,GET,301,38868,469130 +2026-02-20T06:59:57.841Z,LEG-WS-013,10.10.2.113,ACME\admin,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,GET,404,40462,355763 +2026-02-20T16:34:19.044Z,LEG-WS-013,10.10.2.113,ACME\admin,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,POST,200,42575,405271 +2026-02-12T01:39:58.467Z,LEG-WS-013,10.10.2.113,ACME\admin,https://www.ebay.com/,www.ebay.com,BLOCKED,Social Media,POST,403,18518,380571 +2026-02-12T23:40:26.935Z,LEG-WS-013,10.10.2.113,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,POST,200,41818,162411 +2026-02-20T07:21:30.203Z,LEG-WS-013,10.10.2.113,ACME\admin,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,POST,403,6655,39004 +2026-02-20T09:02:00.745Z,LEG-WS-013,10.10.2.113,ACME\admin,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Cloud Services,GET,200,9729,8503 +2026-02-13T00:15:44.088Z,LEG-WS-013,10.10.2.113,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,GET,200,30379,436153 +2026-02-18T19:49:17.832Z,LEG-WS-013,10.10.2.113,ACME\admin,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,200,37267,481196 +2026-02-11T14:14:19.633Z,LEG-WS-013,10.10.2.113,ACME\admin,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,200,38494,128899 +2026-02-12T03:18:37.594Z,LEG-WS-013,10.10.2.113,ACME\admin,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,GET,403,8659,22460 +2026-02-16T00:49:36.756Z,LEG-WS-013,10.10.2.113,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,404,43877,233206 +2026-02-17T10:11:59.731Z,LEG-WS-013,10.10.2.113,ACME\admin,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,GET,200,42386,67211 +2026-02-11T12:24:38.794Z,LEG-WS-013,10.10.2.113,ACME\admin,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,403,21300,245920 +2026-02-18T14:56:54.750Z,LEG-WS-013,10.10.2.113,ACME\admin,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,404,21685,350286 +2026-02-19T13:09:56.707Z,LEG-WS-013,10.10.2.113,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,403,45472,45631 +2026-02-18T12:26:06.638Z,LEG-WS-013,10.10.2.113,ACME\admin,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,GET,404,2133,109428 +2026-02-18T02:14:10.077Z,LEG-WS-013,10.10.2.113,ACME\admin,https://www.reddit.com/,www.reddit.com,BLOCKED,Adult,POST,403,7363,203326 +2026-02-13T17:59:08.954Z,LEG-WS-013,10.10.2.113,ACME\admin,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Productivity,GET,200,19561,462387 +2026-02-10T11:59:18.145Z,LEG-WS-013,10.10.2.113,ACME\admin,https://www.bet365.com/,www.bet365.com,BLOCKED,Streaming,GET,403,33493,492247 +2026-02-16T23:30:31.830Z,LEG-WS-013,10.10.2.113,ACME\admin,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,POST,200,37289,246819 +2026-02-12T12:19:35.557Z,LEG-WS-013,10.10.2.113,ACME\admin,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,301,34352,97239 +2026-02-17T06:45:40.703Z,LEG-WS-013,10.10.2.113,ACME\admin,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,GET,200,45282,250453 +2026-02-12T12:40:14.371Z,LEG-WS-013,10.10.2.113,ACME\admin,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,POST,404,5745,55710 +2026-02-12T13:39:17.304Z,LEG-WS-013,10.10.2.113,ACME\admin,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,POST,301,20050,385134 +2026-02-16T15:14:12.586Z,LEG-WS-013,10.10.2.113,ACME\admin,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,403,44617,168058 +2026-02-14T05:03:52.314Z,LEG-WS-013,10.10.2.113,ACME\admin,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,GET,200,18444,78702 +2026-02-19T00:00:52.520Z,LEG-WS-013,10.10.2.113,ACME\admin,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,POST,404,49500,406650 +2026-02-18T17:16:34.343Z,LEG-WS-013,10.10.2.113,ACME\admin,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,GET,301,9013,77823 +2026-02-12T10:33:17.295Z,LEG-WS-013,10.10.2.113,ACME\admin,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,POST,404,27317,353955 +2026-02-14T11:07:30.257Z,LEG-WS-013,10.10.2.113,ACME\admin,https://www.amazon.com/,www.amazon.com,ALLOWED,Gaming,GET,301,2916,463223 +2026-02-19T16:08:17.008Z,LEG-WS-013,10.10.2.113,ACME\admin,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,POST,403,23567,487648 +2026-02-15T18:06:10.517Z,LEG-WS-013,10.10.2.113,ACME\admin,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,GET,200,29871,478944 +2026-02-18T13:37:32.058Z,MKT-WS-014,10.10.3.114,ACME\admin,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,404,2212,297306 +2026-02-19T21:48:40.428Z,MKT-WS-014,10.10.3.114,ACME\admin,https://www.ebay.com/,www.ebay.com,BLOCKED,Gambling,POST,403,30624,261685 +2026-02-11T00:41:35.859Z,MKT-WS-014,10.10.3.114,ACME\admin,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Productivity,GET,200,12071,189313 +2026-02-16T09:17:10.722Z,MKT-WS-014,10.10.3.114,ACME\admin,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,GET,200,28035,382674 +2026-02-11T15:38:38.058Z,MKT-WS-014,10.10.3.114,ACME\admin,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,200,23668,278015 +2026-02-10T17:36:03.436Z,MKT-WS-014,10.10.3.114,ACME\admin,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,POST,200,15762,197256 +2026-02-17T04:21:18.190Z,MKT-WS-014,10.10.3.114,ACME\admin,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,GET,200,40016,21228 +2026-02-14T04:10:52.922Z,MKT-WS-014,10.10.3.114,ACME\admin,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,POST,404,28998,477129 +2026-02-15T13:14:10.927Z,MKT-WS-014,10.10.3.114,ACME\admin,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,200,8559,153486 +2026-02-16T07:54:50.094Z,MKT-WS-014,10.10.3.114,ACME\admin,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,POST,301,2104,240919 +2026-02-13T02:54:23.745Z,MKT-WS-014,10.10.3.114,ACME\admin,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Cloud Services,GET,403,18125,142368 +2026-02-20T12:26:27.002Z,MKT-WS-014,10.10.3.114,ACME\admin,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,200,45832,395346 +2026-02-16T21:01:04.431Z,MKT-WS-014,10.10.3.114,ACME\admin,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Cloud Services,GET,200,43340,403775 +2026-02-15T05:47:28.413Z,MKT-WS-014,10.10.3.114,ACME\admin,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,POST,200,12427,442320 +2026-02-11T01:00:21.372Z,MKT-WS-014,10.10.3.114,ACME\admin,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,GET,301,49379,480976 +2026-02-15T09:13:50.349Z,MKT-WS-014,10.10.3.114,ACME\admin,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,200,24967,159289 +2026-02-16T17:28:05.743Z,MKT-WS-014,10.10.3.114,ACME\admin,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,200,8734,375733 +2026-02-12T17:36:57.922Z,MKT-WS-014,10.10.3.114,ACME\admin,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,200,16584,18010 +2026-02-13T16:57:44.451Z,MKT-WS-014,10.10.3.114,ACME\admin,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,404,29901,38728 +2026-02-20T07:15:56.876Z,MKT-WS-014,10.10.3.114,ACME\admin,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,200,41852,360221 +2026-02-13T22:04:32.664Z,MKT-WS-014,10.10.3.114,ACME\admin,https://www.pornhub.com/,www.pornhub.com,ALLOWED,Gaming,GET,200,48470,52909 +2026-02-11T00:39:38.864Z,MKT-WS-014,10.10.3.114,ACME\admin,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,POST,200,15766,355945 +2026-02-18T13:52:16.089Z,MKT-WS-014,10.10.3.114,ACME\admin,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,POST,200,13472,43757 +2026-02-11T02:02:11.906Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,200,29347,108085 +2026-02-13T00:25:04.735Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Technology,GET,200,23598,276098 +2026-02-20T12:01:43.812Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,GET,404,32368,182036 +2026-02-19T10:40:01.756Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://pokerstars.com/,pokerstars.com,ALLOWED,Gambling,POST,403,3348,324404 +2026-02-17T09:55:26.453Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,200,388,183854 +2026-02-19T07:06:18.850Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://www.facebook.com/,www.facebook.com,ALLOWED,Social Media,POST,301,13302,243517 +2026-02-13T19:08:51.296Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,POST,200,32397,70804 +2026-02-19T15:56:19.728Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Productivity,GET,200,39190,266394 +2026-02-16T06:37:16.999Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,POST,301,6338,63184 +2026-02-12T18:19:37.058Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,POST,200,6954,229554 +2026-02-19T23:14:41.800Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://open.spotify.com/,open.spotify.com,BLOCKED,Streaming,GET,403,17180,133869 +2026-02-14T06:11:47.418Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,POST,200,47497,365832 +2026-02-17T15:39:43.391Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,403,4306,232754 +2026-02-20T13:50:44.624Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,GET,403,18703,194513 +2026-02-12T01:09:48.787Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://fitgirl-repacks.site/,fitgirl-repacks.site,ALLOWED,Social Media,GET,404,19192,229635 +2026-02-19T09:48:56.440Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,POST,301,20523,468825 +2026-02-11T14:05:29.833Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,GET,404,14405,167006 +2026-02-18T12:47:22.909Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,404,4421,195454 +2026-02-16T15:54:32.668Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,POST,404,21763,149356 +2026-02-12T16:10:57.800Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,POST,200,2610,281375 +2026-02-12T17:20:34.480Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,POST,301,5825,488335 +2026-02-10T16:14:07.985Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,POST,200,18206,184992 +2026-02-19T01:21:44.627Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://www.ebay.com/,www.ebay.com,ALLOWED,Piracy,GET,200,38098,272211 +2026-02-13T09:25:15.801Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,200,39512,396387 +2026-02-20T14:29:14.661Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,301,47390,403876 +2026-02-18T06:22:03.159Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,POST,200,17150,150625 +2026-02-15T16:44:17.621Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,GET,200,23942,287422 +2026-02-15T03:52:00.764Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,403,36823,81634 +2026-02-11T12:36:05.221Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,403,22858,13119 +2026-02-10T22:46:40.601Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,POST,200,22942,140625 +2026-02-10T11:54:47.138Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,GET,200,8169,73904 +2026-02-13T06:33:15.184Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,200,11759,26585 +2026-02-18T23:58:42.913Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,200,8179,34548 +2026-02-14T10:17:10.281Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,POST,200,22959,453957 +2026-02-15T15:56:07.291Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,GET,404,45157,13551 +2026-02-14T21:50:53.279Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,404,12723,306958 +2026-02-15T13:37:34.486Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,POST,403,31156,460694 +2026-02-15T11:58:35.880Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,GET,404,29803,252768 +2026-02-19T01:12:02.097Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,200,37565,56149 +2026-02-11T16:08:24.748Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,404,15856,378892 +2026-02-16T23:55:35.789Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,GET,200,44378,8226 +2026-02-10T12:31:39.674Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,POST,404,47518,217125 +2026-02-11T11:29:37.282Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,403,35219,85860 +2026-02-16T21:22:50.893Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,GET,200,27279,419904 +2026-02-17T21:50:16.348Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,200,40479,377199 +2026-02-19T20:04:03.387Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,GET,200,35931,464359 +2026-02-19T23:16:09.374Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://www.bet365.com/,www.bet365.com,ALLOWED,Gambling,GET,200,19605,198686 +2026-02-19T09:02:38.972Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,301,41802,467675 +2026-02-17T00:39:02.100Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,POST,301,41705,446331 +2026-02-19T14:59:49.131Z,EXEC-WS-015,10.10.1.115,ACME\emartinez,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,GET,200,8181,250871 +2026-02-12T16:23:59.817Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://store.steampowered.com/,store.steampowered.com,ALLOWED,Gaming,GET,404,27408,200830 +2026-02-12T04:52:42.438Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,38827,238768 +2026-02-14T11:58:09.937Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,200,43643,80787 +2026-02-14T05:47:12.662Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,403,45194,118648 +2026-02-14T11:43:54.948Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,200,44203,21898 +2026-02-13T03:50:32.617Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,403,34966,450849 +2026-02-15T20:13:41.859Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,200,25207,450710 +2026-02-11T08:23:43.402Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,POST,200,13663,116824 +2026-02-10T20:57:11.554Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://store.steampowered.com/,store.steampowered.com,ALLOWED,Shopping,GET,301,16896,198124 +2026-02-18T14:54:53.679Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,301,42073,477492 +2026-02-12T14:50:34.391Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,GET,404,43723,160905 +2026-02-11T20:23:51.002Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,200,38710,41509 +2026-02-13T16:27:34.925Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,403,5342,411075 +2026-02-19T11:07:48.660Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Productivity,GET,200,23227,269062 +2026-02-12T08:22:11.240Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,GET,200,47959,304874 +2026-02-17T20:38:39.312Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,GET,200,9932,485097 +2026-02-10T20:00:44.688Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://fitgirl-repacks.site/,fitgirl-repacks.site,BLOCKED,Shopping,GET,403,37136,17117 +2026-02-16T07:20:57.961Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,GET,200,33385,21951 +2026-02-17T21:14:15.829Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://www.netflix.com/,www.netflix.com,BLOCKED,Gaming,GET,403,36307,363453 +2026-02-13T09:43:53.951Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,200,5653,121322 +2026-02-12T10:57:16.383Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,200,26843,232197 +2026-02-19T12:03:39.356Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,200,48475,458056 +2026-02-18T22:36:46.188Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,200,47240,55335 +2026-02-13T03:54:34.856Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,GET,200,34984,6670 +2026-02-12T10:16:45.006Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,GET,200,32293,414479 +2026-02-19T09:40:23.028Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,GET,200,7250,466976 +2026-02-19T12:21:34.841Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,GET,403,37312,105851 +2026-02-11T11:42:21.413Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,301,45679,109817 +2026-02-20T05:58:32.656Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://www.amazon.com/,www.amazon.com,ALLOWED,Adult,GET,200,34380,206460 +2026-02-20T12:23:40.714Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,7721,262176 +2026-02-16T15:14:39.894Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,GET,200,38402,280569 +2026-02-13T15:30:58.103Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://1337x.to/,1337x.to,BLOCKED,Gambling,GET,403,8494,182095 +2026-02-16T01:07:06.710Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,403,3019,37834 +2026-02-20T15:59:14.968Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,200,16665,28260 +2026-02-11T18:12:49.127Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,14904,244642 +2026-02-14T04:32:00.734Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,GET,404,36778,30653 +2026-02-13T21:43:06.602Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,GET,200,40556,25334 +2026-02-19T18:43:58.373Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,301,30021,197787 +2026-02-15T11:41:47.619Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,POST,200,32434,467124 +2026-02-15T01:13:52.171Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,POST,200,18831,318127 +2026-02-11T12:34:09.372Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,200,8937,339944 +2026-02-15T05:44:24.533Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,POST,403,41680,114340 +2026-02-16T21:11:29.567Z,IT-WS-016,10.10.2.116,ACME\jsmith,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,GET,200,5341,166623 +2026-02-12T08:26:54.140Z,HR-WS-017,10.10.3.117,ACME\admin,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,301,15767,451866 +2026-02-17T08:09:04.743Z,HR-WS-017,10.10.3.117,ACME\admin,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,POST,403,5464,460718 +2026-02-20T16:46:48.928Z,HR-WS-017,10.10.3.117,ACME\admin,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,POST,403,14014,470834 +2026-02-14T00:37:48.843Z,HR-WS-017,10.10.3.117,ACME\admin,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,GET,200,29524,329364 +2026-02-20T00:04:10.412Z,HR-WS-017,10.10.3.117,ACME\admin,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,GET,200,32157,242395 +2026-02-13T10:48:37.752Z,HR-WS-017,10.10.3.117,ACME\admin,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,42667,4062 +2026-02-19T21:26:06.565Z,HR-WS-017,10.10.3.117,ACME\admin,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,200,40657,310044 +2026-02-10T09:15:06.450Z,HR-WS-017,10.10.3.117,ACME\admin,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,404,7231,171264 +2026-02-17T16:18:44.942Z,HR-WS-017,10.10.3.117,ACME\admin,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,301,42541,348415 +2026-02-16T01:03:04.900Z,HR-WS-017,10.10.3.117,ACME\admin,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,404,34907,401245 +2026-02-13T01:29:12.643Z,HR-WS-017,10.10.3.117,ACME\admin,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,POST,404,46923,135209 +2026-02-11T01:49:06.893Z,HR-WS-017,10.10.3.117,ACME\admin,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,301,30717,89564 +2026-02-10T21:00:09.147Z,HR-WS-017,10.10.3.117,ACME\admin,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,200,22863,147741 +2026-02-15T09:37:43.599Z,HR-WS-017,10.10.3.117,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,403,17266,93171 +2026-02-18T19:29:18.164Z,HR-WS-017,10.10.3.117,ACME\admin,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,200,5596,211743 +2026-02-19T22:09:51.627Z,HR-WS-017,10.10.3.117,ACME\admin,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,200,570,186247 +2026-02-15T18:47:48.857Z,HR-WS-017,10.10.3.117,ACME\admin,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,GET,200,48924,435538 +2026-02-16T21:18:31.957Z,HR-WS-017,10.10.3.117,ACME\admin,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,200,31009,167194 +2026-02-11T18:08:16.026Z,HR-WS-017,10.10.3.117,ACME\admin,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,301,4520,21307 +2026-02-20T09:28:53.181Z,HR-WS-017,10.10.3.117,ACME\admin,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,POST,404,15774,3285 +2026-02-17T04:58:50.364Z,HR-WS-017,10.10.3.117,ACME\admin,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,POST,301,8191,251701 +2026-02-19T05:54:25.049Z,HR-WS-017,10.10.3.117,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,GET,200,47758,39861 +2026-02-13T08:29:56.152Z,HR-WS-017,10.10.3.117,ACME\admin,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,POST,404,13896,206203 +2026-02-12T00:26:05.516Z,HR-WS-017,10.10.3.117,ACME\admin,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,POST,200,25232,35021 +2026-02-19T04:27:07.848Z,HR-WS-017,10.10.3.117,ACME\admin,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,200,5222,311407 +2026-02-18T12:29:15.164Z,HR-WS-017,10.10.3.117,ACME\admin,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,200,20237,174576 +2026-02-10T14:19:38.302Z,HR-WS-017,10.10.3.117,ACME\admin,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,200,11096,71516 +2026-02-16T07:35:06.538Z,HR-WS-017,10.10.3.117,ACME\admin,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,POST,200,24991,175132 +2026-02-15T12:15:07.104Z,HR-WS-017,10.10.3.117,ACME\admin,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,GET,301,5263,136974 +2026-02-16T15:18:58.814Z,FIN-WS-018,10.10.1.118,ACME\admin,https://www.indeed.com/,www.indeed.com,BLOCKED,Adult,GET,403,44395,265685 +2026-02-20T15:42:48.531Z,FIN-WS-018,10.10.1.118,ACME\admin,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,GET,404,41705,228512 +2026-02-10T18:16:44.894Z,FIN-WS-018,10.10.1.118,ACME\admin,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,200,5213,307085 +2026-02-14T09:20:52.211Z,FIN-WS-018,10.10.1.118,ACME\admin,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,GET,200,8436,24395 +2026-02-19T18:48:39.850Z,FIN-WS-018,10.10.1.118,ACME\admin,https://www.ebay.com/,www.ebay.com,ALLOWED,Shopping,GET,200,5755,395659 +2026-02-11T16:25:18.066Z,FIN-WS-018,10.10.1.118,ACME\admin,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,POST,200,17804,44627 +2026-02-20T01:51:34.921Z,FIN-WS-018,10.10.1.118,ACME\admin,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,200,13078,57085 +2026-02-19T12:13:13.580Z,FIN-WS-018,10.10.1.118,ACME\admin,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,403,43110,476989 +2026-02-19T08:22:02.378Z,FIN-WS-018,10.10.1.118,ACME\admin,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,200,28958,181181 +2026-02-14T03:41:55.837Z,FIN-WS-018,10.10.1.118,ACME\admin,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,301,21122,48396 +2026-02-10T10:35:34.162Z,FIN-WS-018,10.10.1.118,ACME\admin,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,200,43185,300843 +2026-02-17T16:05:29.139Z,FIN-WS-018,10.10.1.118,ACME\admin,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,200,26763,90472 +2026-02-15T08:25:11.757Z,FIN-WS-018,10.10.1.118,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,POST,200,39414,498364 +2026-02-10T15:09:09.562Z,FIN-WS-018,10.10.1.118,ACME\admin,https://www.shein.com/,www.shein.com,ALLOWED,Shopping,POST,403,22865,414614 +2026-02-18T21:52:48.368Z,FIN-WS-018,10.10.1.118,ACME\admin,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,POST,200,33471,178281 +2026-02-19T12:33:33.007Z,FIN-WS-018,10.10.1.118,ACME\admin,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,200,15694,71701 +2026-02-20T04:33:46.003Z,FIN-WS-018,10.10.1.118,ACME\admin,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,301,25049,146869 +2026-02-13T11:06:48.626Z,FIN-WS-018,10.10.1.118,ACME\admin,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,POST,200,41232,315627 +2026-02-20T02:12:32.769Z,FIN-WS-018,10.10.1.118,ACME\admin,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,GET,200,17142,373139 +2026-02-15T23:10:39.644Z,FIN-WS-018,10.10.1.118,ACME\admin,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,200,49135,203454 +2026-02-11T09:23:46.924Z,FIN-WS-018,10.10.1.118,ACME\admin,https://www.linkedin.com/jobs/,www.linkedin.com/jobs,ALLOWED,Piracy,GET,200,37756,277622 +2026-02-13T01:07:55.760Z,FIN-WS-018,10.10.1.118,ACME\admin,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,POST,301,31092,234038 +2026-02-15T06:04:59.745Z,FIN-WS-018,10.10.1.118,ACME\admin,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,POST,301,9963,214789 +2026-02-11T13:23:17.170Z,FIN-WS-018,10.10.1.118,ACME\admin,https://onlyfans.com/,onlyfans.com,BLOCKED,Streaming,POST,403,14615,158825 +2026-02-16T09:12:38.129Z,FIN-WS-018,10.10.1.118,ACME\admin,https://www.shein.com/,www.shein.com,BLOCKED,Gambling,GET,403,46784,461355 +2026-02-15T20:36:10.666Z,FIN-WS-018,10.10.1.118,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,GET,200,21942,26268 +2026-02-12T18:16:02.958Z,FIN-WS-018,10.10.1.118,ACME\admin,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,404,6296,321758 +2026-02-12T19:54:16.114Z,FIN-WS-018,10.10.1.118,ACME\admin,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,POST,403,37650,85656 +2026-02-16T15:31:02.728Z,FIN-WS-018,10.10.1.118,ACME\admin,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Productivity,GET,200,41032,245248 +2026-02-19T05:36:59.000Z,FIN-WS-018,10.10.1.118,ACME\admin,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,GET,404,21939,452359 +2026-02-12T17:40:10.091Z,FIN-WS-018,10.10.1.118,ACME\admin,https://www.indeed.com/,www.indeed.com,BLOCKED,Adult,POST,403,4606,218864 +2026-02-17T04:10:47.879Z,FIN-WS-018,10.10.1.118,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,POST,301,48386,299656 +2026-02-15T03:34:16.115Z,FIN-WS-018,10.10.1.118,ACME\admin,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,GET,403,49839,47065 +2026-02-20T15:13:16.779Z,FIN-WS-018,10.10.1.118,ACME\admin,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,GET,301,29786,204988 +2026-02-18T12:59:20.100Z,FIN-WS-018,10.10.1.118,ACME\admin,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,POST,404,16017,452251 +2026-02-14T18:45:23.626Z,FIN-WS-018,10.10.1.118,ACME\admin,https://www.indeed.com/,www.indeed.com,ALLOWED,Social Media,GET,200,19833,448458 +2026-02-17T05:13:32.127Z,FIN-WS-018,10.10.1.118,ACME\admin,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,403,33691,191760 +2026-02-17T03:05:13.166Z,FIN-WS-018,10.10.1.118,ACME\admin,https://store.steampowered.com/,store.steampowered.com,ALLOWED,Gaming,GET,404,18213,416934 +2026-02-11T17:46:34.202Z,FIN-WS-018,10.10.1.118,ACME\admin,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,200,34128,27097 +2026-02-15T09:07:07.503Z,FIN-WS-018,10.10.1.118,ACME\admin,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,GET,403,18158,94275 +2026-02-13T20:27:43.393Z,FIN-WS-018,10.10.1.118,ACME\admin,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,GET,200,17686,176272 +2026-02-16T19:03:13.093Z,FIN-WS-018,10.10.1.118,ACME\admin,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,GET,200,39265,489258 +2026-02-19T09:16:50.829Z,FIN-WS-018,10.10.1.118,ACME\admin,https://www.reddit.com/,www.reddit.com,ALLOWED,Gambling,POST,200,18202,477419 +2026-02-19T05:38:44.115Z,FIN-WS-018,10.10.1.118,ACME\admin,https://xvideos.com/,xvideos.com,ALLOWED,Piracy,GET,200,21319,164193 +2026-02-13T15:20:27.105Z,FIN-WS-018,10.10.1.118,ACME\admin,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,POST,301,2317,186908 +2026-02-13T01:35:56.143Z,FIN-WS-018,10.10.1.118,ACME\admin,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,POST,200,12776,191333 +2026-02-16T07:36:26.717Z,FIN-WS-018,10.10.1.118,ACME\admin,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,301,22790,174441 +2026-02-12T20:33:02.722Z,FIN-WS-018,10.10.1.118,ACME\admin,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,POST,301,1145,433656 +2026-02-19T11:42:23.693Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,GET,200,40736,78285 +2026-02-14T13:16:08.451Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,GET,200,11620,256251 +2026-02-15T17:25:22.445Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,200,46291,443583 +2026-02-15T04:40:15.263Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,200,48176,180837 +2026-02-16T19:59:17.055Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,404,33335,364073 +2026-02-19T17:16:48.616Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,200,12307,107298 +2026-02-13T07:29:47.883Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,POST,200,22767,113005 +2026-02-16T22:02:45.172Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,GET,200,7194,469254 +2026-02-18T11:33:46.639Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,POST,403,15488,119646 +2026-02-14T06:43:52.127Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,POST,404,27275,392633 +2026-02-20T12:39:46.648Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,301,38108,160292 +2026-02-19T06:51:32.260Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://1337x.to/,1337x.to,ALLOWED,Adult,GET,200,7168,53477 +2026-02-11T03:02:56.192Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,200,39381,266412 +2026-02-16T14:31:44.110Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,200,23727,432304 +2026-02-19T16:50:34.695Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://google.com/api/v1/resource,google.com,ALLOWED,Business,POST,404,19008,148803 +2026-02-19T09:41:41.239Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,GET,404,41247,341646 +2026-02-17T07:24:00.514Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,301,43697,365632 +2026-02-18T20:33:28.795Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,200,6215,441285 +2026-02-11T20:53:43.507Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,200,4784,25538 +2026-02-17T21:30:30.620Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,POST,200,11677,8102 +2026-02-12T20:49:18.435Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://www.pornhub.com/,www.pornhub.com,BLOCKED,Gaming,GET,403,621,30541 +2026-02-18T22:11:27.092Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,200,49256,459698 +2026-02-18T20:06:43.765Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,200,24533,73540 +2026-02-11T08:30:06.150Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,404,44267,150812 +2026-02-18T09:24:11.203Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,GET,200,32836,161824 +2026-02-12T22:05:37.712Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,POST,301,22982,15487 +2026-02-18T17:45:58.407Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,200,20474,72631 +2026-02-11T16:27:54.878Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,POST,404,30765,418972 +2026-02-19T22:26:55.809Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,POST,200,48948,120808 +2026-02-15T17:56:40.419Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,GET,200,45368,481823 +2026-02-14T21:09:48.954Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,200,10930,438150 +2026-02-19T01:20:42.514Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,404,38871,130890 +2026-02-13T01:42:04.799Z,SLS-WS-019,10.10.2.119,ACME\svc_web,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,404,705,302952 +2026-02-12T18:14:25.125Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,43817,373200 +2026-02-18T22:25:23.780Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,35139,112924 +2026-02-10T13:17:49.673Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,GET,200,19469,126389 +2026-02-13T14:41:35.540Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,200,16596,174536 +2026-02-15T05:37:18.483Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,GET,200,10048,34138 +2026-02-18T12:32:09.011Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://www.tiktok.com/,www.tiktok.com,ALLOWED,Gambling,POST,404,15595,340121 +2026-02-13T00:58:52.988Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,POST,404,31534,271374 +2026-02-20T04:54:11.035Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,200,31705,156944 +2026-02-18T08:42:07.326Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,GET,403,13306,152366 +2026-02-11T07:57:06.948Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,GET,404,131,128663 +2026-02-18T19:50:38.944Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,POST,200,3314,85371 +2026-02-18T15:48:28.063Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,301,31312,195122 +2026-02-13T18:30:06.314Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,GET,301,35553,428692 +2026-02-12T10:50:48.185Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,GET,301,30976,132649 +2026-02-11T23:01:36.957Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,POST,200,22716,423518 +2026-02-13T20:12:25.944Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,200,19820,247549 +2026-02-18T21:35:12.914Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,POST,200,37651,394594 +2026-02-19T21:49:27.978Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,301,24571,111030 +2026-02-10T11:36:35.703Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,200,44164,160198 +2026-02-15T11:02:53.013Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,404,6614,331176 +2026-02-17T08:26:27.560Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,301,41176,133738 +2026-02-14T14:08:24.128Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://www.ebay.com/,www.ebay.com,BLOCKED,Streaming,GET,403,7124,275088 +2026-02-10T10:37:13.367Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,404,3591,242749 +2026-02-18T13:56:58.947Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,200,10252,119059 +2026-02-16T22:20:45.799Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,404,3766,358701 +2026-02-14T11:48:19.856Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,POST,403,33952,192818 +2026-02-19T09:39:59.397Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,200,4425,16664 +2026-02-15T22:26:09.536Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,POST,200,31818,95370 +2026-02-16T07:13:17.201Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,200,26288,486615 +2026-02-18T14:02:16.605Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,301,36199,170682 +2026-02-11T08:44:20.927Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,403,27798,211801 +2026-02-16T12:19:52.907Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,POST,200,7103,231278 +2026-02-12T13:01:50.863Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,GET,403,32387,138149 +2026-02-11T19:01:37.054Z,ENG-WS-020,10.10.3.120,ACME\emartinez,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,POST,404,17191,299715 +2026-02-12T05:52:07.118Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,POST,403,47360,92526 +2026-02-15T10:56:10.862Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Productivity,GET,200,15510,3011 +2026-02-14T07:37:27.308Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,404,16917,192265 +2026-02-15T00:29:20.112Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,403,14762,23148 +2026-02-19T02:24:35.892Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Cloud Services,GET,200,22761,112204 +2026-02-11T06:12:12.485Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,POST,404,39395,476978 +2026-02-19T08:35:50.253Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,GET,200,29559,91059 +2026-02-14T10:05:32.319Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,GET,200,28268,179121 +2026-02-13T06:04:59.774Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,POST,404,9747,276062 +2026-02-16T00:20:25.059Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,POST,301,33125,120478 +2026-02-11T22:13:15.356Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,403,16627,254506 +2026-02-20T00:51:30.582Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,GET,200,31142,94608 +2026-02-17T13:53:07.787Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,404,16182,457649 +2026-02-12T20:38:11.697Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,403,21864,325924 +2026-02-18T11:53:12.468Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,POST,200,48755,384438 +2026-02-17T17:38:48.292Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,GET,403,26113,426309 +2026-02-11T11:49:43.287Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,200,24347,28471 +2026-02-17T17:14:04.210Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,403,32309,75124 +2026-02-15T03:41:25.695Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,200,24940,359317 +2026-02-18T09:20:29.125Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,POST,404,7012,242977 +2026-02-14T22:33:11.913Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,GET,301,3569,132969 +2026-02-15T09:40:20.015Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,GET,200,1334,289961 +2026-02-15T18:38:48.245Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,200,9164,226348 +2026-02-17T20:20:06.318Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,POST,403,22699,14051 +2026-02-10T11:27:49.943Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,200,34513,163867 +2026-02-18T02:05:43.922Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,200,30783,340553 +2026-02-20T01:18:30.017Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://www.shein.com/,www.shein.com,BLOCKED,Streaming,POST,403,48636,208770 +2026-02-14T21:05:21.062Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,POST,301,1398,393982 +2026-02-17T00:43:51.330Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,GET,200,10978,12498 +2026-02-15T02:35:18.733Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,200,13403,116212 +2026-02-20T00:49:42.634Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,200,3133,84281 +2026-02-17T07:05:37.360Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,GET,200,45453,281253 +2026-02-11T08:32:38.144Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,GET,200,36578,327865 +2026-02-14T19:46:11.676Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,POST,403,7567,381814 +2026-02-18T16:41:16.170Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,POST,200,18231,339718 +2026-02-12T10:53:10.507Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,14930,212589 +2026-02-18T02:17:01.654Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,200,43819,349640 +2026-02-11T12:36:26.151Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,403,8847,89977 +2026-02-16T08:10:04.299Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,200,37439,452983 +2026-02-15T18:40:02.190Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,POST,301,44574,57154 +2026-02-17T22:11:55.004Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,200,7852,39307 +2026-02-19T04:37:46.313Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://github.com/api/v1/resource,github.com,ALLOWED,Business,POST,301,43370,35621 +2026-02-16T05:29:00.554Z,LEG-WS-021,10.10.1.121,ACME\idavis,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,404,32927,399513 +2026-02-15T07:32:12.342Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,POST,200,46482,425178 +2026-02-19T11:58:36.364Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,GET,404,2643,453879 +2026-02-18T05:08:21.610Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,GET,301,32113,488150 +2026-02-17T02:32:32.630Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://acme.local/api/v1/resource,acme.local,ALLOWED,Cloud Services,GET,301,1006,119409 +2026-02-11T07:16:14.768Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://www.facebook.com/,www.facebook.com,BLOCKED,Adult,GET,403,31961,313584 +2026-02-16T02:11:23.404Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,200,23314,274203 +2026-02-10T21:11:28.768Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,GET,200,24466,203570 +2026-02-18T04:13:51.715Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,200,36482,53314 +2026-02-17T10:47:11.208Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,301,10348,52382 +2026-02-11T20:39:11.058Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://store.steampowered.com/,store.steampowered.com,ALLOWED,Adult,GET,200,958,443844 +2026-02-18T19:03:05.722Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,403,26067,136340 +2026-02-13T23:55:57.746Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://open.spotify.com/,open.spotify.com,BLOCKED,Gambling,GET,403,25532,270313 +2026-02-17T16:58:56.259Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,301,32398,109311 +2026-02-10T19:34:01.147Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,200,29286,159876 +2026-02-18T23:06:11.565Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,POST,404,9528,9051 +2026-02-13T23:57:13.356Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://www.ebay.com/,www.ebay.com,ALLOWED,Streaming,POST,301,17466,177311 +2026-02-18T01:10:22.252Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,200,13489,208055 +2026-02-17T03:10:01.675Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,GET,403,44719,318478 +2026-02-15T00:46:10.329Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,2308,489230 +2026-02-14T09:42:24.340Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,200,39593,245424 +2026-02-10T08:01:44.883Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,GET,200,32055,415632 +2026-02-10T10:35:18.419Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,GET,404,22377,325752 +2026-02-12T14:27:27.700Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,POST,403,8173,368819 +2026-02-11T21:46:51.225Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,404,39380,20174 +2026-02-15T01:47:38.737Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,GET,404,28254,255550 +2026-02-18T22:28:36.378Z,MKT-WS-022,10.10.2.122,ACME\agarcia,https://steamcommunity.com/,steamcommunity.com,ALLOWED,Streaming,GET,200,24665,222111 +2026-02-10T18:05:55.573Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,404,45003,400597 +2026-02-18T07:41:08.632Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,POST,200,27434,148940 +2026-02-11T22:43:34.894Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,200,9045,84823 +2026-02-12T15:39:33.573Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Productivity,GET,200,6215,485803 +2026-02-15T17:39:44.763Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,200,14314,414012 +2026-02-14T13:51:21.251Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,15397,197969 +2026-02-18T16:31:46.482Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,POST,403,36044,399936 +2026-02-10T16:49:09.989Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,200,44526,442869 +2026-02-13T16:39:40.424Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://discord.gg/,discord.gg,ALLOWED,Social Media,POST,200,41344,73427 +2026-02-14T05:08:23.067Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,200,38758,329271 +2026-02-16T14:50:39.061Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Productivity,GET,200,26892,493290 +2026-02-15T03:30:39.919Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,POST,200,22536,499260 +2026-02-11T22:01:51.912Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,GET,403,9619,38735 +2026-02-13T16:48:46.800Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,200,37416,144499 +2026-02-10T17:53:00.058Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,GET,301,16381,303993 +2026-02-10T20:05:29.396Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,POST,404,31252,251844 +2026-02-12T12:43:44.292Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,POST,404,5979,181047 +2026-02-13T22:41:46.036Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,200,15052,143195 +2026-02-17T17:13:48.477Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,200,31986,247367 +2026-02-11T01:19:28.013Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,GET,200,13279,248519 +2026-02-18T22:27:17.525Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,POST,200,29750,389211 +2026-02-18T20:54:15.883Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,301,29809,185990 +2026-02-20T06:23:42.343Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,200,14619,16935 +2026-02-14T22:32:32.258Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,1179,442954 +2026-02-12T03:23:16.076Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,200,45193,387031 +2026-02-13T20:37:23.084Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://www.netflix.com/,www.netflix.com,BLOCKED,Social Media,GET,403,8828,148211 +2026-02-17T05:48:50.365Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,200,46162,139086 +2026-02-12T04:16:25.515Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,GET,403,40457,306026 +2026-02-19T15:32:18.815Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,POST,301,16388,334000 +2026-02-16T18:59:47.354Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,301,1380,299816 +2026-02-13T02:00:13.603Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,200,1545,29674 +2026-02-11T19:30:18.505Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,403,24475,403802 +2026-02-12T22:47:47.232Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,403,10594,456826 +2026-02-12T18:50:43.956Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,404,27591,155613 +2026-02-19T08:43:15.709Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,404,32315,136007 +2026-02-11T13:24:05.916Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,404,4735,55465 +2026-02-12T10:58:57.432Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,POST,404,4287,431631 +2026-02-13T07:12:58.029Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,POST,403,45033,268122 +2026-02-12T09:08:56.475Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,200,27558,100825 +2026-02-15T04:37:26.771Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://fitgirl-repacks.site/,fitgirl-repacks.site,ALLOWED,Piracy,GET,200,49909,300564 +2026-02-16T13:05:55.413Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Productivity,POST,404,30216,35424 +2026-02-15T05:50:00.461Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,403,16456,286816 +2026-02-14T13:25:48.110Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,200,13892,225721 +2026-02-16T04:14:35.461Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,GET,301,48229,39034 +2026-02-18T02:20:07.870Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,200,22063,219544 +2026-02-14T20:50:48.075Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,GET,403,33799,187537 +2026-02-12T09:49:50.370Z,EXEC-WS-023,10.10.3.123,ACME\jsmith,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,GET,200,24064,468455 +2026-02-18T04:08:21.578Z,IT-WS-024,10.10.1.124,ACME\idavis,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,301,29463,201880 +2026-02-14T04:47:52.960Z,IT-WS-024,10.10.1.124,ACME\idavis,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,GET,200,3990,174769 +2026-02-10T22:25:07.072Z,IT-WS-024,10.10.1.124,ACME\idavis,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,GET,200,919,381103 +2026-02-12T11:25:30.130Z,IT-WS-024,10.10.1.124,ACME\idavis,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,GET,403,6596,123832 +2026-02-11T09:13:44.280Z,IT-WS-024,10.10.1.124,ACME\idavis,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,301,14559,127085 +2026-02-19T13:08:20.939Z,IT-WS-024,10.10.1.124,ACME\idavis,https://www.linkedin.com/jobs/,www.linkedin.com/jobs,ALLOWED,Shopping,GET,301,33545,103262 +2026-02-16T07:47:56.532Z,IT-WS-024,10.10.1.124,ACME\idavis,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,POST,200,19031,150220 +2026-02-10T20:37:22.651Z,IT-WS-024,10.10.1.124,ACME\idavis,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,POST,404,5076,242238 +2026-02-17T12:09:17.975Z,IT-WS-024,10.10.1.124,ACME\idavis,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,POST,200,28469,467292 +2026-02-16T04:59:25.168Z,IT-WS-024,10.10.1.124,ACME\idavis,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,5733,257754 +2026-02-15T18:30:11.096Z,IT-WS-024,10.10.1.124,ACME\idavis,https://www.shein.com/,www.shein.com,ALLOWED,Gaming,GET,403,27749,334808 +2026-02-13T00:31:22.834Z,IT-WS-024,10.10.1.124,ACME\idavis,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,403,45665,34182 +2026-02-13T16:35:14.424Z,IT-WS-024,10.10.1.124,ACME\idavis,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,POST,200,43756,130785 +2026-02-20T12:55:11.356Z,IT-WS-024,10.10.1.124,ACME\idavis,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,404,4904,427234 +2026-02-15T21:40:47.096Z,IT-WS-024,10.10.1.124,ACME\idavis,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,GET,404,7779,240852 +2026-02-16T22:33:49.645Z,IT-WS-024,10.10.1.124,ACME\idavis,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,403,45692,328567 +2026-02-13T20:37:52.658Z,IT-WS-024,10.10.1.124,ACME\idavis,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,200,48336,417797 +2026-02-20T02:28:50.908Z,IT-WS-024,10.10.1.124,ACME\idavis,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,404,20618,469755 +2026-02-17T10:17:45.515Z,IT-WS-024,10.10.1.124,ACME\idavis,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,POST,301,20272,68548 +2026-02-11T20:07:35.250Z,IT-WS-024,10.10.1.124,ACME\idavis,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,POST,200,8529,26139 +2026-02-15T20:01:22.223Z,IT-WS-024,10.10.1.124,ACME\idavis,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,200,34529,407697 +2026-02-19T02:37:04.443Z,IT-WS-024,10.10.1.124,ACME\idavis,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,GET,200,44074,8524 +2026-02-10T10:50:22.194Z,IT-WS-024,10.10.1.124,ACME\idavis,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,200,35200,427657 +2026-02-18T05:32:15.771Z,IT-WS-024,10.10.1.124,ACME\idavis,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,GET,200,36692,279965 +2026-02-15T06:25:34.523Z,IT-WS-024,10.10.1.124,ACME\idavis,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,200,25972,142532 +2026-02-19T11:56:27.630Z,IT-WS-024,10.10.1.124,ACME\idavis,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,POST,301,38157,165110 +2026-02-17T00:34:18.777Z,IT-WS-024,10.10.1.124,ACME\idavis,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,GET,200,7271,44867 +2026-02-14T17:42:39.361Z,IT-WS-024,10.10.1.124,ACME\idavis,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,POST,200,45717,1946 +2026-02-12T19:43:01.738Z,IT-WS-024,10.10.1.124,ACME\idavis,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,GET,404,17037,125786 +2026-02-12T16:33:42.966Z,IT-WS-024,10.10.1.124,ACME\idavis,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,POST,200,35120,58734 +2026-02-19T08:01:09.016Z,IT-WS-024,10.10.1.124,ACME\idavis,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,301,18708,187878 +2026-02-13T02:47:09.333Z,IT-WS-024,10.10.1.124,ACME\idavis,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,301,29019,242566 +2026-02-11T14:55:07.420Z,IT-WS-024,10.10.1.124,ACME\idavis,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,200,8480,248900 +2026-02-19T16:43:18.278Z,IT-WS-024,10.10.1.124,ACME\idavis,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,GET,200,40634,293014 +2026-02-20T16:30:52.030Z,IT-WS-024,10.10.1.124,ACME\idavis,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,GET,200,26217,442036 +2026-02-14T16:15:22.552Z,IT-WS-024,10.10.1.124,ACME\idavis,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,404,22199,253397 +2026-02-17T08:30:41.233Z,IT-WS-024,10.10.1.124,ACME\idavis,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,GET,200,37274,338696 +2026-02-19T04:45:50.522Z,IT-WS-024,10.10.1.124,ACME\idavis,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,200,7954,139358 +2026-02-14T18:55:56.477Z,IT-WS-024,10.10.1.124,ACME\idavis,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,200,9104,489925 +2026-02-14T09:21:06.727Z,IT-WS-024,10.10.1.124,ACME\idavis,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,GET,301,4096,330650 +2026-02-17T09:51:26.727Z,IT-WS-024,10.10.1.124,ACME\idavis,https://open.spotify.com/,open.spotify.com,ALLOWED,Gaming,GET,403,32874,414500 +2026-02-10T13:37:34.451Z,IT-WS-024,10.10.1.124,ACME\idavis,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,200,7041,355325 +2026-02-15T19:39:19.310Z,IT-WS-024,10.10.1.124,ACME\idavis,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,POST,200,45973,128378 +2026-02-14T11:58:41.143Z,IT-WS-024,10.10.1.124,ACME\idavis,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,GET,301,31636,378983 +2026-02-16T14:26:14.813Z,IT-WS-024,10.10.1.124,ACME\idavis,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,POST,200,2699,204081 +2026-02-12T01:57:35.414Z,IT-WS-024,10.10.1.124,ACME\idavis,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,POST,200,10747,276566 +2026-02-15T21:19:58.046Z,IT-WS-024,10.10.1.124,ACME\idavis,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,200,44495,314062 +2026-02-17T21:31:20.811Z,IT-WS-024,10.10.1.124,ACME\idavis,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,POST,200,20231,417743 +2026-02-15T17:16:07.599Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,POST,200,24747,214270 +2026-02-17T22:07:43.594Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Technology,GET,200,34068,379522 +2026-02-13T03:27:25.102Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,404,32222,239426 +2026-02-17T11:50:28.132Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,200,22564,61612 +2026-02-18T16:46:53.410Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,403,33923,327558 +2026-02-17T23:06:39.298Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,POST,200,31688,367470 +2026-02-18T18:44:29.212Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://www.linkedin.com/jobs/,www.linkedin.com/jobs,BLOCKED,Shopping,GET,403,28034,2727 +2026-02-19T22:51:38.194Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,GET,200,29468,223971 +2026-02-17T03:10:58.639Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,35738,227400 +2026-02-11T23:29:32.882Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,200,9671,306943 +2026-02-15T07:26:58.532Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Productivity,POST,404,44756,426953 +2026-02-15T10:32:28.507Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,301,18699,469840 +2026-02-15T11:38:42.317Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://onlyfans.com/,onlyfans.com,ALLOWED,Gambling,GET,301,14973,281338 +2026-02-11T17:34:34.619Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,GET,200,11374,490605 +2026-02-18T07:05:44.682Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,301,28816,356884 +2026-02-16T11:33:03.064Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,POST,404,27538,64664 +2026-02-17T15:24:25.715Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Productivity,POST,200,6199,281314 +2026-02-16T23:05:21.484Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,404,25372,407564 +2026-02-14T15:45:40.905Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,200,27951,106627 +2026-02-11T20:50:37.859Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,GET,200,10444,80796 +2026-02-17T00:16:33.636Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,200,40391,211855 +2026-02-12T23:08:48.609Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://store.steampowered.com/,store.steampowered.com,ALLOWED,Streaming,GET,200,33912,7352 +2026-02-16T19:01:19.349Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,GET,200,47242,40720 +2026-02-11T16:23:09.570Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,POST,200,36458,149131 +2026-02-19T08:26:15.854Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,403,20147,277040 +2026-02-19T18:17:29.855Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,301,22539,407301 +2026-02-19T19:33:48.730Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,POST,301,10258,342320 +2026-02-18T01:52:35.881Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,POST,404,41833,161867 +2026-02-19T16:07:45.027Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,301,24680,286419 +2026-02-16T21:14:00.717Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,404,13965,491822 +2026-02-13T04:18:39.560Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,POST,301,30836,475161 +2026-02-16T11:20:49.420Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,GET,200,16269,159940 +2026-02-17T17:55:21.621Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,200,28381,463906 +2026-02-13T07:37:05.986Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,403,5501,147547 +2026-02-11T10:19:11.092Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,200,12063,321688 +2026-02-10T14:11:40.538Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,GET,404,8071,287019 +2026-02-18T20:52:30.943Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://hulu.com/,hulu.com,ALLOWED,Gaming,POST,404,18016,144496 +2026-02-20T01:52:50.778Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,POST,200,41881,308852 +2026-02-19T23:31:15.638Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://www.tiktok.com/,www.tiktok.com,ALLOWED,Adult,GET,200,31304,334783 +2026-02-17T02:33:18.630Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,POST,200,16036,216418 +2026-02-11T05:00:38.595Z,HR-WS-025,10.10.2.125,ACME\fthompson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,403,27021,155255 +2026-02-20T05:16:23.971Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,404,46750,492835 +2026-02-16T20:39:53.783Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,POST,403,30657,117864 +2026-02-20T05:20:13.636Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,403,8885,416653 +2026-02-19T23:30:46.642Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,200,29751,228951 +2026-02-11T22:03:21.508Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,POST,200,15142,148985 +2026-02-18T21:37:53.402Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,200,42379,356851 +2026-02-12T22:28:10.328Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,POST,200,21420,440179 +2026-02-12T13:44:19.946Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,200,19875,276365 +2026-02-12T03:40:14.187Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,GET,404,15131,347900 +2026-02-18T17:06:15.426Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,403,43054,158798 +2026-02-11T18:40:01.815Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Business,POST,403,31657,48400 +2026-02-20T07:03:39.423Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://hulu.com/,hulu.com,BLOCKED,Gaming,GET,403,25546,176140 +2026-02-17T06:05:54.432Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,200,5741,217603 +2026-02-17T03:12:22.803Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,200,12347,398154 +2026-02-20T17:10:25.526Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://www.tiktok.com/,www.tiktok.com,ALLOWED,Streaming,GET,403,18833,259298 +2026-02-10T08:18:08.574Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://xvideos.com/,xvideos.com,BLOCKED,Streaming,GET,403,36235,421860 +2026-02-12T14:59:22.055Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,404,44967,71511 +2026-02-14T15:53:47.494Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://www.shein.com/,www.shein.com,ALLOWED,Gambling,GET,200,15922,340997 +2026-02-13T18:36:48.054Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,23400,101618 +2026-02-14T07:07:36.088Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://open.spotify.com/,open.spotify.com,BLOCKED,Social Media,GET,403,39651,422241 +2026-02-14T12:42:12.537Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,POST,200,42194,494430 +2026-02-15T20:45:02.785Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,POST,200,46494,409409 +2026-02-10T13:43:35.705Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,POST,200,28337,229350 +2026-02-17T16:47:04.773Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,301,44106,418811 +2026-02-10T19:26:26.911Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,POST,200,12739,60800 +2026-02-19T14:51:37.502Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,403,7671,56821 +2026-02-11T05:41:39.298Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,403,12841,110459 +2026-02-19T21:29:13.710Z,FIN-WS-026,10.10.3.126,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,403,12535,23347 +2026-02-14T03:56:56.037Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,200,10448,153174 +2026-02-16T19:34:04.085Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,POST,200,3646,481172 +2026-02-18T02:02:32.512Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,GET,200,40584,57625 +2026-02-10T11:04:35.759Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,GET,200,17376,101236 +2026-02-17T15:34:14.406Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://xvideos.com/,xvideos.com,ALLOWED,Gaming,GET,200,41812,260170 +2026-02-20T02:19:42.690Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,404,42897,25878 +2026-02-12T10:29:51.016Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Productivity,GET,200,31029,159564 +2026-02-12T16:53:13.527Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://store.steampowered.com/,store.steampowered.com,ALLOWED,Gaming,GET,301,19827,446612 +2026-02-15T01:34:13.601Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,POST,200,49722,217490 +2026-02-11T03:49:54.328Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,200,33323,235327 +2026-02-14T07:48:26.419Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,POST,403,38836,11240 +2026-02-17T17:24:10.722Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,GET,403,47686,71797 +2026-02-13T16:44:04.215Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://draftkings.com/,draftkings.com,ALLOWED,Piracy,GET,404,37576,277897 +2026-02-14T12:18:03.674Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,301,9919,163349 +2026-02-13T11:17:29.704Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Technology,GET,404,22611,105839 +2026-02-15T06:06:08.883Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,200,27880,475247 +2026-02-12T12:14:22.437Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,404,11326,496057 +2026-02-18T05:53:34.093Z,SLS-WS-027,10.10.1.127,ACME\fthompson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,403,33915,246560 +2026-02-18T01:58:01.513Z,ENG-WS-028,10.10.2.128,ACME\fthompson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,POST,200,3620,412230 +2026-02-17T21:48:12.924Z,ENG-WS-028,10.10.2.128,ACME\fthompson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,404,46110,440072 +2026-02-14T10:07:30.010Z,ENG-WS-028,10.10.2.128,ACME\fthompson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,301,977,60173 +2026-02-16T17:41:21.794Z,ENG-WS-028,10.10.2.128,ACME\fthompson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,POST,200,37391,263099 +2026-02-18T13:43:30.697Z,ENG-WS-028,10.10.2.128,ACME\fthompson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,301,22423,469824 +2026-02-17T10:12:19.187Z,ENG-WS-028,10.10.2.128,ACME\fthompson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,POST,301,23609,235162 +2026-02-11T11:08:20.177Z,ENG-WS-028,10.10.2.128,ACME\fthompson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,POST,404,5370,356197 +2026-02-16T18:00:48.524Z,ENG-WS-028,10.10.2.128,ACME\fthompson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,403,4593,166096 +2026-02-14T04:53:06.249Z,ENG-WS-028,10.10.2.128,ACME\fthompson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,200,16920,406332 +2026-02-16T11:38:47.093Z,ENG-WS-028,10.10.2.128,ACME\fthompson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,200,22279,132186 +2026-02-13T20:15:56.532Z,ENG-WS-028,10.10.2.128,ACME\fthompson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,GET,200,23437,242644 +2026-02-16T22:09:32.325Z,ENG-WS-028,10.10.2.128,ACME\fthompson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,301,15757,208137 +2026-02-19T02:00:28.337Z,ENG-WS-028,10.10.2.128,ACME\fthompson,https://steamcommunity.com/,steamcommunity.com,ALLOWED,Adult,GET,301,35907,480918 +2026-02-16T14:28:04.865Z,ENG-WS-028,10.10.2.128,ACME\fthompson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,GET,200,20337,420457 +2026-02-13T00:22:53.987Z,ENG-WS-028,10.10.2.128,ACME\fthompson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,POST,200,17957,134917 +2026-02-19T17:03:27.484Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,404,8815,416452 +2026-02-11T23:02:03.561Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,200,28482,472225 +2026-02-11T17:24:59.304Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,16444,154719 +2026-02-19T18:46:23.715Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,POST,200,40202,262001 +2026-02-17T04:06:49.801Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,GET,200,31702,192578 +2026-02-18T21:14:32.211Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,200,2554,478549 +2026-02-13T19:04:17.571Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,POST,200,28286,443833 +2026-02-16T04:08:38.833Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,200,47988,99587 +2026-02-15T03:08:49.996Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,POST,403,25157,6005 +2026-02-10T20:03:52.436Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,GET,301,46095,101505 +2026-02-14T17:51:36.491Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,GET,200,34609,64228 +2026-02-20T11:43:27.342Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,GET,200,14934,12350 +2026-02-11T09:50:05.842Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://pokerstars.com/,pokerstars.com,ALLOWED,Gaming,GET,200,4035,364938 +2026-02-20T04:24:22.228Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://www.indeed.com/,www.indeed.com,BLOCKED,Shopping,POST,403,31173,382003 +2026-02-10T15:14:18.151Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,200,22771,338080 +2026-02-15T03:04:04.835Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,200,6797,411690 +2026-02-12T12:23:42.497Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,404,30856,67521 +2026-02-13T17:59:48.099Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,200,27854,115032 +2026-02-10T08:20:28.769Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,POST,200,9830,488511 +2026-02-16T20:59:35.440Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,POST,200,5950,216559 +2026-02-18T04:53:21.054Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,POST,200,15131,117124 +2026-02-15T08:12:22.843Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,GET,200,47347,294698 +2026-02-15T07:09:54.311Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,200,6513,46198 +2026-02-17T09:22:26.974Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,GET,301,15973,284107 +2026-02-15T00:11:00.901Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,GET,200,10578,15108 +2026-02-14T22:29:58.969Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,403,5975,357656 +2026-02-19T22:17:44.329Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,301,12549,162111 +2026-02-10T19:51:18.215Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,32383,386412 +2026-02-14T08:07:28.854Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,200,1469,175588 +2026-02-17T14:53:41.068Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,GET,200,13504,237724 +2026-02-16T21:36:56.228Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,POST,403,40057,136633 +2026-02-18T02:35:06.835Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://discord.gg/,discord.gg,ALLOWED,Social Media,GET,404,27097,447314 +2026-02-13T18:36:47.897Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Technology,GET,200,33431,282346 +2026-02-18T08:39:26.263Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,POST,200,45112,343514 +2026-02-17T17:56:52.539Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,404,5877,189960 +2026-02-17T02:15:37.776Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,POST,301,31902,34077 +2026-02-14T03:05:24.905Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://pokerstars.com/,pokerstars.com,ALLOWED,Piracy,GET,200,25042,456006 +2026-02-17T05:28:35.193Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Business,GET,200,36244,235651 +2026-02-19T07:57:52.734Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,403,48760,68694 +2026-02-11T00:03:08.797Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://www.amazon.com/,www.amazon.com,ALLOWED,Gambling,POST,404,45841,214902 +2026-02-13T19:11:06.245Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,200,33538,253180 +2026-02-15T12:29:06.213Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,200,22437,458543 +2026-02-18T07:29:27.172Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://store.steampowered.com/,store.steampowered.com,ALLOWED,Gambling,GET,404,42284,172636 +2026-02-17T06:22:49.081Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,404,25279,385710 +2026-02-19T19:36:40.815Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,200,22696,366849 +2026-02-19T17:17:30.864Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://www.tiktok.com/,www.tiktok.com,BLOCKED,Gambling,POST,403,24924,183856 +2026-02-17T09:54:21.287Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://discord.gg/,discord.gg,ALLOWED,Adult,GET,403,22065,389329 +2026-02-17T13:06:17.976Z,LEG-WS-029,10.10.3.129,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,200,28301,430867 +2026-02-13T06:47:49.027Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,GET,200,11536,414408 +2026-02-17T00:30:09.260Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://www.glassdoor.com/,www.glassdoor.com,ALLOWED,Adult,POST,200,29457,422267 +2026-02-18T12:55:18.069Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,GET,200,4730,177931 +2026-02-18T16:35:30.203Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,POST,200,17232,139017 +2026-02-10T12:10:00.815Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,POST,200,44143,260203 +2026-02-11T20:37:11.331Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,POST,200,9856,125581 +2026-02-13T19:14:07.278Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,301,43193,386055 +2026-02-17T03:02:01.023Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,POST,200,36257,67889 +2026-02-14T11:00:22.370Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,POST,200,43869,29397 +2026-02-18T12:57:53.205Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://www.reddit.com/,www.reddit.com,BLOCKED,Adult,GET,403,5332,351954 +2026-02-17T23:39:16.479Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,GET,403,14383,246264 +2026-02-11T23:41:44.368Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://steamcommunity.com/,steamcommunity.com,ALLOWED,Streaming,POST,200,42122,49926 +2026-02-18T01:14:35.837Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,301,21470,433844 +2026-02-14T15:26:36.043Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,301,1261,116536 +2026-02-20T04:00:24.615Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://steamcommunity.com/,steamcommunity.com,ALLOWED,Piracy,POST,403,8647,143214 +2026-02-11T12:36:35.451Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://www.tiktok.com/,www.tiktok.com,ALLOWED,Shopping,GET,200,5993,203650 +2026-02-12T20:49:32.934Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,969,158805 +2026-02-13T00:06:42.966Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,403,48620,291491 +2026-02-14T20:14:49.003Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,200,24255,93483 +2026-02-14T22:35:17.319Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,GET,200,48172,82459 +2026-02-11T01:03:08.801Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,POST,403,44237,389660 +2026-02-17T00:37:06.533Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://www.indeed.com/,www.indeed.com,BLOCKED,Shopping,GET,403,25229,390010 +2026-02-14T05:52:48.570Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,301,31030,78978 +2026-02-16T13:49:01.225Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,GET,404,17390,323394 +2026-02-10T09:40:24.147Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,404,1232,197560 +2026-02-16T08:48:37.953Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,GET,200,39092,427296 +2026-02-17T17:30:04.159Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,GET,200,12611,305794 +2026-02-19T11:11:02.051Z,MKT-WS-030,10.10.1.130,ACME\emartinez,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,GET,200,47980,341897 +2026-02-10T08:29:06.408Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,GET,404,35176,331893 +2026-02-17T06:29:26.174Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,POST,200,46774,106538 +2026-02-16T16:00:23.182Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,404,37865,102499 +2026-02-15T17:59:36.066Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://www.netflix.com/,www.netflix.com,BLOCKED,Streaming,POST,403,22399,216446 +2026-02-16T13:18:11.493Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://open.spotify.com/,open.spotify.com,BLOCKED,Piracy,POST,403,7456,453564 +2026-02-13T05:38:16.598Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://www.glassdoor.com/,www.glassdoor.com,ALLOWED,Gaming,GET,200,21353,310078 +2026-02-12T06:43:31.261Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,GET,404,43754,158152 +2026-02-11T01:52:20.132Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,301,9231,450659 +2026-02-12T17:49:57.455Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,404,25885,221119 +2026-02-12T03:16:14.692Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,301,22629,446490 +2026-02-17T09:20:08.977Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,POST,403,31041,421710 +2026-02-15T19:07:54.556Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,301,35398,229340 +2026-02-15T14:12:38.377Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,200,40030,317833 +2026-02-13T18:29:40.398Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,POST,301,39554,75565 +2026-02-13T14:22:14.194Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,200,3380,310240 +2026-02-17T07:38:00.744Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,301,29686,168258 +2026-02-17T06:42:38.855Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,403,14810,415935 +2026-02-12T15:26:58.486Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,POST,200,37630,334449 +2026-02-16T20:30:30.865Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,404,23202,351689 +2026-02-17T14:39:52.435Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,POST,200,42672,272634 +2026-02-18T13:25:34.089Z,EXEC-WS-031,10.10.2.131,ACME\jsmith,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,200,32662,246461 +2026-02-17T04:30:02.081Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,403,11745,33169 +2026-02-16T22:06:41.446Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,200,32395,320894 +2026-02-18T08:01:16.558Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://www.netflix.com/,www.netflix.com,BLOCKED,Social Media,GET,403,9387,169937 +2026-02-15T02:25:15.762Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://hulu.com/,hulu.com,BLOCKED,Adult,GET,403,35647,214218 +2026-02-15T07:03:01.130Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Business,GET,301,6884,305647 +2026-02-15T23:06:35.903Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,404,27760,40103 +2026-02-14T00:36:08.282Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,GET,403,21384,164696 +2026-02-14T19:55:39.006Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,403,45265,152875 +2026-02-16T10:28:01.119Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,POST,404,25260,268407 +2026-02-19T00:09:20.057Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,GET,200,25162,155039 +2026-02-19T05:34:54.528Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,GET,200,48174,283872 +2026-02-14T20:21:12.221Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,301,17442,446615 +2026-02-19T00:06:39.235Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,20666,37325 +2026-02-16T16:51:50.820Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,301,32171,196983 +2026-02-13T18:06:47.515Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,POST,403,48870,250663 +2026-02-15T16:16:39.664Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,301,12489,78429 +2026-02-14T01:06:15.536Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,GET,301,5654,424067 +2026-02-20T12:41:22.526Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,200,43917,50696 +2026-02-13T23:44:49.936Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,POST,200,16641,372886 +2026-02-17T09:57:44.194Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,POST,404,19248,296371 +2026-02-15T07:32:22.269Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,200,7195,115215 +2026-02-16T15:46:31.008Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,GET,301,27672,286039 +2026-02-11T13:38:30.857Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,301,8600,18313 +2026-02-19T05:53:36.730Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,403,27053,22044 +2026-02-12T17:31:02.194Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,GET,200,2970,232459 +2026-02-14T16:36:47.195Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,200,13222,192799 +2026-02-16T03:56:34.622Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,GET,200,47838,243848 +2026-02-19T01:47:48.310Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,POST,301,47913,496875 +2026-02-10T19:13:00.377Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Productivity,GET,200,43399,15204 +2026-02-17T22:52:28.756Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,404,37549,5764 +2026-02-19T01:46:36.706Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,POST,200,2675,95147 +2026-02-12T21:24:17.823Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,GET,200,11825,393379 +2026-02-17T16:13:51.087Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://store.steampowered.com/,store.steampowered.com,ALLOWED,Adult,GET,404,34997,330856 +2026-02-13T04:00:52.544Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,GET,301,6880,179865 +2026-02-20T17:53:50.414Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,GET,200,29146,336479 +2026-02-10T09:40:25.324Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,200,37464,345037 +2026-02-14T14:17:46.230Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,GET,200,29727,195899 +2026-02-11T17:54:41.273Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,403,2245,420750 +2026-02-17T04:29:44.375Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://www.pornhub.com/,www.pornhub.com,ALLOWED,Social Media,GET,200,31176,396735 +2026-02-13T08:28:14.893Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,403,32472,223083 +2026-02-11T07:59:31.144Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,POST,403,16678,467372 +2026-02-15T06:02:27.609Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,301,35737,279493 +2026-02-16T19:52:50.242Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,200,7898,134903 +2026-02-15T02:11:33.495Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,GET,200,43120,30119 +2026-02-17T22:04:51.495Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,GET,200,15458,96972 +2026-02-17T19:14:56.269Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,404,34216,260684 +2026-02-13T05:41:10.043Z,IT-WS-032,10.10.3.132,ACME\svc_backup,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,403,14074,208272 +2026-02-18T20:41:58.337Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,200,11783,136518 +2026-02-20T04:50:50.221Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,403,38639,108713 +2026-02-17T16:23:49.360Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,GET,404,47948,146972 +2026-02-20T02:33:10.593Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,GET,403,45679,300600 +2026-02-14T21:40:27.600Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,200,40748,240068 +2026-02-11T20:07:41.696Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,GET,301,17716,335360 +2026-02-14T09:05:48.169Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,GET,403,9363,353642 +2026-02-18T05:48:52.891Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,404,23957,173499 +2026-02-12T22:52:04.590Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,POST,403,30898,88486 +2026-02-12T01:37:34.955Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,301,1595,470393 +2026-02-13T17:35:21.283Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,POST,301,15015,425885 +2026-02-19T23:03:42.838Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,200,4708,452725 +2026-02-12T14:34:14.649Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,GET,403,8488,7190 +2026-02-13T18:29:44.105Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,301,22256,145989 +2026-02-15T04:04:06.397Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,404,48986,172249 +2026-02-13T04:25:13.540Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Productivity,GET,404,2874,39484 +2026-02-17T21:39:35.870Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,200,31688,472529 +2026-02-13T16:24:50.057Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,200,47127,185354 +2026-02-10T22:38:04.590Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,404,2005,320101 +2026-02-14T06:19:39.209Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,GET,200,19402,104063 +2026-02-16T15:46:06.985Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,POST,301,32142,326313 +2026-02-12T20:20:07.422Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,GET,200,25782,48218 +2026-02-16T10:45:04.341Z,HR-WS-033,10.10.1.133,ACME\fthompson,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,403,6392,421416 +2026-02-15T01:54:42.069Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,POST,200,24290,13544 +2026-02-10T11:41:54.940Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,GET,403,38669,66350 +2026-02-18T22:42:05.880Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,403,42673,43967 +2026-02-11T01:48:16.284Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,POST,200,35039,346268 +2026-02-15T17:56:23.119Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,GET,301,6696,326152 +2026-02-13T18:18:09.472Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,13738,423603 +2026-02-13T13:57:09.250Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,404,32247,143915 +2026-02-19T15:03:01.125Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,404,8592,450401 +2026-02-15T01:24:15.642Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,301,3425,41852 +2026-02-11T10:28:49.453Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,200,21126,151165 +2026-02-17T22:39:12.095Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,404,14363,25359 +2026-02-12T22:47:51.369Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,403,33518,115526 +2026-02-12T01:46:42.506Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,200,25116,106842 +2026-02-10T18:54:30.942Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,POST,200,27502,131281 +2026-02-14T15:14:57.214Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,GET,200,28283,268481 +2026-02-13T18:21:41.616Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,GET,404,16310,106342 +2026-02-17T20:41:39.475Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,GET,200,22511,260616 +2026-02-16T05:06:03.862Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,POST,301,46911,10956 +2026-02-17T02:18:55.595Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,POST,404,49679,483506 +2026-02-19T02:48:01.447Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,200,398,279186 +2026-02-17T10:59:39.058Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,200,36870,43948 +2026-02-15T12:51:41.881Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,403,12182,369921 +2026-02-16T23:12:46.087Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,200,8777,49928 +2026-02-15T21:53:18.713Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://open.spotify.com/,open.spotify.com,ALLOWED,Adult,GET,200,25523,122817 +2026-02-17T10:46:42.506Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,GET,200,30110,421504 +2026-02-12T09:51:18.961Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,20123,2385 +2026-02-19T03:34:46.194Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://store.steampowered.com/,store.steampowered.com,ALLOWED,Gambling,GET,200,41028,78990 +2026-02-11T02:34:05.339Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,POST,301,31479,167287 +2026-02-13T13:08:15.061Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,POST,200,7485,73266 +2026-02-18T14:08:46.355Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,200,27097,351504 +2026-02-12T10:11:45.873Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,200,30011,308907 +2026-02-19T22:30:27.063Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,403,18426,399924 +2026-02-19T16:13:15.429Z,FIN-WS-034,10.10.2.134,ACME\fthompson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,404,42293,323836 +2026-02-19T02:20:47.406Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,200,39488,35079 +2026-02-19T04:04:54.029Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,POST,200,41475,238481 +2026-02-10T18:55:40.346Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,37462,398089 +2026-02-18T11:13:41.229Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,200,41835,62342 +2026-02-19T15:06:05.121Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,200,42460,274859 +2026-02-18T02:59:40.392Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,403,25687,71437 +2026-02-11T06:48:25.195Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,GET,200,6345,411442 +2026-02-13T16:57:55.416Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,404,214,415030 +2026-02-11T00:26:17.939Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,GET,403,13213,345536 +2026-02-17T02:01:38.232Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,POST,200,44569,276568 +2026-02-20T02:53:00.049Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,200,16897,75406 +2026-02-19T19:26:42.743Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,404,39448,198484 +2026-02-19T09:40:37.953Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,403,1842,54375 +2026-02-14T23:38:58.396Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,GET,404,38205,322544 +2026-02-11T23:13:03.987Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,404,40765,213119 +2026-02-18T08:09:53.548Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,200,35114,242342 +2026-02-20T03:45:37.609Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,POST,403,15977,299488 +2026-02-11T17:20:51.572Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,GET,200,39122,432855 +2026-02-11T22:12:44.167Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,GET,200,37058,329250 +2026-02-17T07:59:07.835Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,301,11043,1370 +2026-02-17T05:20:08.272Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,200,47397,252952 +2026-02-19T00:53:51.287Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,403,42079,307876 +2026-02-13T18:17:39.850Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,GET,301,33304,427116 +2026-02-13T20:55:41.171Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,POST,200,20089,95729 +2026-02-10T23:26:02.696Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,200,32012,279215 +2026-02-14T02:28:58.109Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,POST,200,37878,1847 +2026-02-15T08:10:46.138Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,POST,403,36685,200531 +2026-02-13T23:49:10.846Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,GET,200,11408,402183 +2026-02-11T11:36:45.708Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,403,6472,105364 +2026-02-17T13:32:08.966Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,200,42600,252367 +2026-02-15T14:59:40.876Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,GET,200,43935,436414 +2026-02-14T11:52:26.395Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,200,17026,129001 +2026-02-16T03:09:57.858Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,GET,404,19513,402192 +2026-02-19T00:35:33.030Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,403,28750,356974 +2026-02-15T14:28:20.317Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,POST,200,36254,390888 +2026-02-12T06:34:45.138Z,SLS-WS-035,10.10.3.135,ACME\svc_web,https://www.glassdoor.com/,www.glassdoor.com,BLOCKED,Gaming,GET,403,34173,476756 +2026-02-10T13:45:16.828Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Productivity,GET,200,11808,122358 +2026-02-18T10:17:40.628Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,POST,404,20828,272425 +2026-02-17T05:25:18.049Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,200,13022,64504 +2026-02-16T08:08:05.077Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Business,GET,301,32113,197473 +2026-02-11T12:37:55.738Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,301,32200,395537 +2026-02-20T04:54:57.759Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,POST,404,14927,256978 +2026-02-10T17:58:02.462Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,45243,393537 +2026-02-18T18:14:28.951Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,200,29420,212916 +2026-02-20T01:06:12.494Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,POST,403,39716,187631 +2026-02-16T12:17:39.150Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://google.com/api/v1/resource,google.com,ALLOWED,Business,POST,301,38910,262451 +2026-02-13T22:19:55.810Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,200,39558,82438 +2026-02-18T19:00:58.428Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,200,27591,485145 +2026-02-19T09:07:25.219Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://store.steampowered.com/,store.steampowered.com,ALLOWED,Streaming,GET,403,41711,463551 +2026-02-18T14:32:39.730Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,200,48606,186308 +2026-02-16T23:59:42.340Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,POST,404,28193,338183 +2026-02-11T23:27:02.561Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,200,36020,283544 +2026-02-13T02:27:43.535Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,403,18267,46792 +2026-02-16T10:37:45.985Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,200,42668,44288 +2026-02-20T16:26:42.296Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,200,35738,40102 +2026-02-20T14:12:25.870Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,200,21544,347487 +2026-02-17T03:42:52.553Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,GET,404,48027,474252 +2026-02-19T19:32:34.083Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,POST,200,24938,231794 +2026-02-12T10:52:05.297Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,200,17810,43821 +2026-02-16T05:21:23.846Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,301,12465,420016 +2026-02-11T19:54:52.152Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,POST,404,35857,274665 +2026-02-19T09:11:00.764Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,301,4426,8818 +2026-02-19T03:48:12.002Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,301,31726,438801 +2026-02-20T15:19:30.101Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,404,16663,363994 +2026-02-18T22:20:51.838Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,200,49540,205066 +2026-02-10T19:33:21.098Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,200,17243,58005 +2026-02-14T00:03:15.638Z,ENG-WS-036,10.10.1.136,ACME\hbrown,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,GET,200,40587,472446 +2026-02-13T12:09:23.175Z,LEG-WS-037,10.10.2.137,ACME\gwhite,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,404,4295,418956 +2026-02-11T12:27:43.320Z,LEG-WS-037,10.10.2.137,ACME\gwhite,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,403,29073,245319 +2026-02-16T12:08:37.248Z,LEG-WS-037,10.10.2.137,ACME\gwhite,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,GET,200,15783,491022 +2026-02-18T08:36:30.549Z,LEG-WS-037,10.10.2.137,ACME\gwhite,https://www.facebook.com/,www.facebook.com,BLOCKED,Gambling,GET,403,3948,483450 +2026-02-13T02:45:26.974Z,LEG-WS-037,10.10.2.137,ACME\gwhite,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,200,2478,86146 +2026-02-10T16:23:22.244Z,LEG-WS-037,10.10.2.137,ACME\gwhite,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,403,20748,277955 +2026-02-16T14:09:43.812Z,LEG-WS-037,10.10.2.137,ACME\gwhite,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,301,20706,352897 +2026-02-11T04:23:31.532Z,LEG-WS-037,10.10.2.137,ACME\gwhite,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,POST,200,26683,184692 +2026-02-10T20:08:22.348Z,LEG-WS-037,10.10.2.137,ACME\gwhite,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,301,32965,173311 +2026-02-15T17:46:35.417Z,LEG-WS-037,10.10.2.137,ACME\gwhite,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,GET,200,13812,23454 +2026-02-20T16:18:00.557Z,LEG-WS-037,10.10.2.137,ACME\gwhite,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,POST,200,36664,384098 +2026-02-18T02:48:44.174Z,LEG-WS-037,10.10.2.137,ACME\gwhite,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,200,19288,310742 +2026-02-17T01:20:57.452Z,LEG-WS-037,10.10.2.137,ACME\gwhite,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,403,44064,415023 +2026-02-13T18:25:56.161Z,LEG-WS-037,10.10.2.137,ACME\gwhite,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,POST,404,22796,390894 +2026-02-20T13:51:46.073Z,LEG-WS-037,10.10.2.137,ACME\gwhite,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,200,12655,92035 +2026-02-20T10:25:25.704Z,LEG-WS-037,10.10.2.137,ACME\gwhite,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,301,49324,180432 +2026-02-20T11:49:56.091Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,POST,200,30145,458281 +2026-02-18T23:13:02.886Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,200,4228,469496 +2026-02-11T18:59:16.198Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,POST,200,9741,318474 +2026-02-17T11:14:27.570Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,403,6547,65402 +2026-02-19T23:21:36.651Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,GET,403,39681,456131 +2026-02-14T22:30:25.271Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://store.steampowered.com/,store.steampowered.com,ALLOWED,Adult,GET,200,29371,128628 +2026-02-11T18:06:45.451Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,404,48741,114830 +2026-02-16T16:47:14.368Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,404,2550,110830 +2026-02-16T16:45:13.083Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,POST,403,200,313070 +2026-02-19T10:49:14.259Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,POST,301,10172,346009 +2026-02-16T23:57:55.335Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,POST,200,46249,176226 +2026-02-16T20:29:13.334Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,200,25583,134573 +2026-02-20T11:49:49.857Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://www.netflix.com/,www.netflix.com,BLOCKED,Adult,GET,403,12074,352729 +2026-02-14T00:56:05.171Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,GET,200,15394,341363 +2026-02-17T15:17:21.058Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,POST,200,20412,546 +2026-02-17T00:47:50.121Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,POST,403,6356,259355 +2026-02-12T05:49:51.788Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,GET,404,3559,150297 +2026-02-10T14:53:30.800Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,GET,200,40893,109471 +2026-02-17T16:36:04.054Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,301,145,482819 +2026-02-17T10:36:34.429Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,200,45543,101694 +2026-02-10T21:06:19.623Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,200,34696,12318 +2026-02-11T08:23:15.309Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,200,21257,270453 +2026-02-20T03:50:50.161Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,403,24776,415814 +2026-02-15T11:11:51.325Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,404,10528,175671 +2026-02-16T13:50:54.231Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,5217,420253 +2026-02-12T18:20:44.515Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://www.amazon.com/,www.amazon.com,ALLOWED,Streaming,POST,200,31117,106189 +2026-02-13T01:30:12.077Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,GET,200,15466,93144 +2026-02-18T11:16:03.645Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,POST,200,24282,190202 +2026-02-14T19:42:19.783Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,200,43692,193734 +2026-02-13T14:42:06.618Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,200,23663,103819 +2026-02-17T02:24:34.112Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,301,5484,453685 +2026-02-20T12:28:40.857Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://thepiratebay.org/,thepiratebay.org,ALLOWED,Piracy,GET,403,42399,72938 +2026-02-14T02:25:20.972Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,POST,200,37029,27107 +2026-02-14T08:05:02.922Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,200,10676,172884 +2026-02-13T17:15:50.682Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,404,17611,194709 +2026-02-19T08:21:29.668Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,301,38139,243623 +2026-02-16T06:48:56.652Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,POST,200,38534,448603 +2026-02-18T22:15:10.091Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,POST,200,40945,373988 +2026-02-16T07:27:53.576Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://www.ebay.com/,www.ebay.com,BLOCKED,Streaming,GET,403,2716,91107 +2026-02-16T08:27:06.700Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,200,34654,220009 +2026-02-18T17:48:18.494Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,301,37693,104828 +2026-02-10T12:22:19.856Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,GET,403,699,433441 +2026-02-12T03:11:58.879Z,MKT-WS-038,10.10.3.138,ACME\emartinez,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,200,41899,275207 +2026-02-19T13:30:40.665Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,POST,200,25937,310800 +2026-02-12T02:10:02.564Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,301,22229,80786 +2026-02-17T22:00:58.131Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,301,46383,149906 +2026-02-13T13:42:12.813Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,POST,200,28546,482433 +2026-02-16T16:27:33.825Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,200,28490,310385 +2026-02-13T22:28:10.621Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,GET,200,44966,461445 +2026-02-18T20:43:58.379Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,POST,200,14902,88319 +2026-02-18T23:29:08.850Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,404,21985,458846 +2026-02-11T15:48:48.602Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,301,11783,213008 +2026-02-18T11:58:41.153Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,200,11298,164467 +2026-02-15T19:37:42.494Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://discord.gg/,discord.gg,ALLOWED,Gambling,GET,301,42685,424988 +2026-02-19T23:11:04.523Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,POST,403,35305,402005 +2026-02-12T01:37:48.752Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Business,GET,200,26296,66975 +2026-02-20T13:29:08.624Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,200,20857,275296 +2026-02-19T00:18:34.881Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://www.facebook.com/,www.facebook.com,ALLOWED,Shopping,POST,200,48438,137065 +2026-02-12T21:38:47.293Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,200,48985,378483 +2026-02-12T05:07:55.638Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,POST,200,39623,314866 +2026-02-11T03:16:27.857Z,EXEC-WS-039,10.10.1.139,ACME\dlee,https://open.spotify.com/,open.spotify.com,BLOCKED,Gambling,POST,403,36450,259586 +2026-02-15T02:48:39.359Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,200,37757,7208 +2026-02-13T22:18:17.855Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,POST,200,44882,112848 +2026-02-18T00:13:11.123Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,403,2577,318800 +2026-02-10T09:08:52.609Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,GET,200,44058,21541 +2026-02-12T04:06:54.625Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,GET,200,24794,300176 +2026-02-14T20:13:48.393Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Business,GET,200,30677,70229 +2026-02-20T04:17:16.082Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://www.reddit.com/,www.reddit.com,BLOCKED,Adult,POST,403,49208,88546 +2026-02-18T02:46:51.395Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,GET,200,8380,106396 +2026-02-11T16:59:23.907Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,POST,200,33060,138873 +2026-02-11T19:52:11.732Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,403,12014,66287 +2026-02-19T05:51:18.944Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,200,44164,414571 +2026-02-13T10:32:29.165Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,301,41767,62645 +2026-02-18T20:22:22.119Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,POST,200,45970,402310 +2026-02-15T16:19:45.640Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,GET,403,27980,75055 +2026-02-14T01:22:59.948Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,POST,200,27003,285470 +2026-02-20T17:33:30.256Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Cloud Services,POST,301,22557,384325 +2026-02-17T04:59:57.129Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,POST,200,39014,16586 +2026-02-12T23:32:39.894Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,GET,200,30934,490197 +2026-02-20T17:42:27.147Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,301,46900,2186 +2026-02-16T06:15:43.163Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,POST,403,9788,272754 +2026-02-15T10:12:31.230Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,GET,200,13638,17976 +2026-02-20T07:40:54.340Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,GET,200,33711,231859 +2026-02-14T01:45:49.289Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Cloud Services,GET,200,16664,416702 +2026-02-18T16:32:37.502Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,200,19997,481055 +2026-02-16T03:24:04.801Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,POST,403,48919,194864 +2026-02-12T16:49:36.739Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,GET,404,45372,323681 +2026-02-15T08:40:32.066Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,GET,200,9103,18879 +2026-02-16T16:56:21.861Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,301,49574,85270 +2026-02-20T15:17:46.404Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,200,13680,80472 +2026-02-18T14:40:31.102Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,GET,404,9381,401559 +2026-02-12T00:44:38.124Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://www.glassdoor.com/,www.glassdoor.com,ALLOWED,Adult,GET,301,41505,388288 +2026-02-19T09:24:20.645Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,POST,404,41788,400034 +2026-02-16T03:05:09.138Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://fitgirl-repacks.site/,fitgirl-repacks.site,ALLOWED,Piracy,GET,301,27413,230685 +2026-02-16T05:45:47.065Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,GET,301,13024,346058 +2026-02-15T15:45:16.519Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,200,23260,262820 +2026-02-18T11:48:43.308Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,POST,200,8458,162805 +2026-02-17T15:53:47.582Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,301,8307,152150 +2026-02-19T18:16:20.603Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,200,42372,75196 +2026-02-19T09:10:09.489Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,POST,404,1082,163684 +2026-02-15T22:00:03.364Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,GET,200,4058,401868 +2026-02-17T04:04:52.286Z,IT-WS-040,10.10.2.140,ACME\cjohnson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,200,17649,203160 +2026-02-15T18:41:04.060Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,14475,327528 +2026-02-12T02:10:04.083Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,200,26783,127379 +2026-02-17T16:55:59.549Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,27047,188121 +2026-02-14T10:52:03.171Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,200,35908,325609 +2026-02-15T15:45:15.788Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,6332,8672 +2026-02-14T08:47:54.833Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://thepiratebay.org/,thepiratebay.org,ALLOWED,Gambling,GET,301,42593,7475 +2026-02-11T15:35:16.949Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,GET,301,37685,452059 +2026-02-17T08:00:22.492Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,GET,301,8048,302807 +2026-02-19T06:25:10.735Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Cloud Services,GET,403,21822,285660 +2026-02-16T17:05:08.844Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,200,14593,122268 +2026-02-13T18:31:47.397Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://xvideos.com/,xvideos.com,ALLOWED,Gaming,GET,200,10540,215837 +2026-02-18T01:13:42.637Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,POST,200,29487,8732 +2026-02-12T22:31:17.675Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,200,28601,320639 +2026-02-10T21:38:28.230Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,301,35936,180075 +2026-02-11T16:14:14.335Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://www.facebook.com/,www.facebook.com,ALLOWED,Streaming,GET,200,28422,233546 +2026-02-11T21:29:19.334Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,200,35313,88298 +2026-02-15T05:35:33.493Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,404,8345,317203 +2026-02-17T12:25:32.865Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,200,8555,444945 +2026-02-14T13:12:38.959Z,HR-WS-041,10.10.3.141,ACME\hbrown,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,200,35902,491448 +2026-02-14T18:09:47.004Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,GET,404,46947,238920 +2026-02-13T07:31:08.734Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,200,10097,180661 +2026-02-20T06:43:52.712Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,200,36789,135930 +2026-02-17T15:13:10.224Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,200,44635,328525 +2026-02-16T15:36:48.870Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,POST,200,40767,479399 +2026-02-14T16:54:55.393Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,GET,200,44815,225743 +2026-02-11T13:33:58.682Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,301,39395,284089 +2026-02-13T00:56:49.875Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://www.ebay.com/,www.ebay.com,BLOCKED,Gambling,POST,403,1716,14201 +2026-02-14T21:14:23.954Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,403,1747,209832 +2026-02-13T03:53:23.884Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,301,3329,108877 +2026-02-20T16:11:38.370Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,301,46335,237981 +2026-02-15T05:58:35.860Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,301,26787,364681 +2026-02-11T15:40:23.013Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://store.steampowered.com/,store.steampowered.com,ALLOWED,Adult,GET,200,11070,435929 +2026-02-12T11:26:32.310Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,200,15287,135315 +2026-02-15T17:52:40.629Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,GET,404,7712,313559 +2026-02-19T17:30:32.023Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,301,31642,457143 +2026-02-14T05:30:34.281Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,POST,403,1702,69792 +2026-02-20T08:42:35.347Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://www.pornhub.com/,www.pornhub.com,BLOCKED,Streaming,GET,403,6672,45037 +2026-02-13T22:36:55.013Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,976,140916 +2026-02-16T03:30:51.495Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Technology,GET,301,1667,36592 +2026-02-13T00:38:13.899Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,404,41208,280080 +2026-02-18T11:25:22.136Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,301,36117,31232 +2026-02-13T12:20:24.366Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,200,28458,195591 +2026-02-18T06:57:47.830Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,403,17055,33238 +2026-02-13T09:09:28.298Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,POST,403,34073,220977 +2026-02-14T11:12:48.286Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,200,49447,163505 +2026-02-19T00:08:33.162Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,200,4858,131326 +2026-02-20T14:08:56.700Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,GET,200,6079,48376 +2026-02-11T11:07:37.135Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,301,6374,304813 +2026-02-20T03:48:24.456Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,GET,403,17221,473804 +2026-02-13T08:24:02.091Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,GET,200,744,236417 +2026-02-15T14:08:24.084Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,200,30059,112707 +2026-02-12T17:38:40.195Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,200,47386,25727 +2026-02-10T16:09:52.073Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,GET,200,6480,27170 +2026-02-15T18:05:33.048Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://store.steampowered.com/,store.steampowered.com,ALLOWED,Social Media,POST,200,25556,406127 +2026-02-12T09:58:42.031Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,POST,403,12433,111651 +2026-02-13T11:34:58.880Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,POST,200,43717,374690 +2026-02-12T08:31:34.679Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,POST,403,17553,487866 +2026-02-12T22:45:25.363Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,GET,200,38479,496202 +2026-02-16T15:00:20.767Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,POST,200,26499,304683 +2026-02-13T16:21:47.632Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,403,7611,110101 +2026-02-15T15:38:27.396Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,200,48385,192145 +2026-02-14T04:35:02.267Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,GET,200,31012,385553 +2026-02-20T15:44:44.165Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,301,9693,35147 +2026-02-17T13:50:16.048Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,403,4360,176553 +2026-02-13T07:34:57.460Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,38879,424703 +2026-02-16T23:54:31.184Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,GET,200,4079,199484 +2026-02-11T17:50:23.495Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,POST,200,11202,35053 +2026-02-13T00:09:06.653Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,POST,301,36004,288317 +2026-02-12T03:42:52.394Z,FIN-WS-042,10.10.1.142,ACME\bwilson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,301,38556,389065 +2026-02-19T05:25:11.228Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,GET,403,17751,200005 +2026-02-13T12:52:45.873Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,403,35028,133782 +2026-02-19T13:28:24.121Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,34346,315316 +2026-02-18T20:35:34.306Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,404,24731,350456 +2026-02-19T13:30:24.543Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Technology,GET,301,25502,165562 +2026-02-14T06:10:11.400Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Business,POST,301,22084,118408 +2026-02-13T14:56:45.810Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,301,45822,204803 +2026-02-20T14:34:46.291Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,POST,301,46679,48308 +2026-02-19T18:30:44.829Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,200,8299,176297 +2026-02-10T09:15:46.857Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://www.pornhub.com/,www.pornhub.com,ALLOWED,Piracy,POST,403,31358,175471 +2026-02-20T07:17:17.212Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Cloud Services,POST,404,41717,410197 +2026-02-14T16:13:07.363Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://open.spotify.com/,open.spotify.com,BLOCKED,Social Media,GET,403,49261,372020 +2026-02-18T00:52:01.242Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://1337x.to/,1337x.to,BLOCKED,Shopping,POST,403,21688,454552 +2026-02-16T11:13:19.881Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,POST,200,20071,78280 +2026-02-15T09:23:20.511Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,404,17125,68675 +2026-02-14T13:33:10.350Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,200,5707,378568 +2026-02-16T23:10:55.361Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,GET,403,48147,429052 +2026-02-10T11:27:10.860Z,SLS-WS-043,10.10.2.143,ACME\dlee,https://www.linkedin.com/jobs/,www.linkedin.com/jobs,ALLOWED,Gambling,GET,200,41125,97778 +2026-02-12T07:23:23.964Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,POST,200,22242,238141 +2026-02-14T00:53:35.630Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://www.shein.com/,www.shein.com,ALLOWED,Piracy,GET,403,48415,154850 +2026-02-17T02:10:35.078Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,200,32303,317365 +2026-02-13T14:03:17.257Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,POST,403,15036,26739 +2026-02-19T14:36:10.894Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://github.com/api/v1/resource,github.com,ALLOWED,Business,POST,200,5292,494891 +2026-02-19T08:52:23.424Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Cloud Services,GET,404,15387,336161 +2026-02-16T16:58:08.311Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,POST,200,34676,347331 +2026-02-18T19:25:24.016Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,POST,301,14746,322199 +2026-02-16T06:46:42.001Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,POST,403,40305,481619 +2026-02-18T19:02:10.785Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,404,44900,435481 +2026-02-10T08:23:44.138Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,200,36750,368780 +2026-02-16T08:48:43.953Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Business,GET,200,15870,364737 +2026-02-18T21:28:19.898Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,404,37130,39483 +2026-02-10T16:34:22.469Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,200,38476,158849 +2026-02-11T22:46:29.538Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,403,36339,232154 +2026-02-20T10:41:24.697Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,403,7477,416353 +2026-02-16T21:34:34.432Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,200,16125,95377 +2026-02-13T09:18:06.189Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,200,9692,270616 +2026-02-10T20:43:04.839Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,GET,200,45653,342440 +2026-02-16T21:13:05.659Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,POST,403,7483,303215 +2026-02-14T01:25:19.772Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,404,34399,31017 +2026-02-15T23:10:27.916Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,200,40098,17076 +2026-02-16T10:12:35.821Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://acme.local/api/v1/resource,acme.local,ALLOWED,Cloud Services,POST,200,36665,179162 +2026-02-15T23:59:52.422Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,POST,301,42214,473166 +2026-02-17T03:02:05.032Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,200,29072,120445 +2026-02-19T16:08:11.883Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,404,46511,75842 +2026-02-18T06:32:46.868Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://github.com/api/v1/resource,github.com,ALLOWED,Business,POST,200,8414,1741 +2026-02-15T19:26:14.024Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,POST,403,24250,108144 +2026-02-13T02:37:12.651Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,200,39985,40474 +2026-02-10T15:55:10.784Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,GET,301,47449,47360 +2026-02-15T04:35:48.183Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,GET,404,34544,449021 +2026-02-20T02:10:49.026Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,200,10173,392771 +2026-02-18T07:51:30.472Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,200,16854,125880 +2026-02-17T15:01:10.067Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,POST,200,29443,427586 +2026-02-19T21:03:04.953Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,POST,200,23701,302252 +2026-02-13T23:52:18.349Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,POST,200,41981,381379 +2026-02-14T21:45:22.928Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,POST,200,37990,365185 +2026-02-13T05:22:59.351Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://www.ebay.com/,www.ebay.com,BLOCKED,Gambling,GET,403,32534,309394 +2026-02-14T10:38:15.161Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,GET,301,27113,238335 +2026-02-15T02:05:41.715Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,301,28854,354628 +2026-02-16T21:03:10.498Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,POST,301,48869,237725 +2026-02-12T08:28:48.887Z,ENG-WS-044,10.10.3.144,ACME\idavis,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,POST,200,5157,283748 +2026-02-19T15:37:23.997Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,GET,200,38365,276045 +2026-02-15T15:05:15.708Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,GET,200,155,12378 +2026-02-11T08:46:44.014Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,200,2328,280725 +2026-02-20T01:34:38.673Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,GET,404,23724,88547 +2026-02-13T18:07:43.014Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,GET,200,48725,445564 +2026-02-20T06:41:35.801Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,GET,404,6573,243683 +2026-02-18T13:32:27.059Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,200,3229,289220 +2026-02-11T09:40:14.956Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://xvideos.com/,xvideos.com,BLOCKED,Gaming,GET,403,37441,147766 +2026-02-20T14:18:02.896Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,200,1422,62110 +2026-02-11T18:01:18.263Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,POST,200,1837,60052 +2026-02-13T14:07:32.731Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,403,29622,108661 +2026-02-10T09:11:56.072Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,GET,404,49843,119943 +2026-02-17T08:45:32.156Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,301,45750,45718 +2026-02-13T16:44:26.807Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,404,7332,330342 +2026-02-14T00:57:44.160Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,403,18895,377962 +2026-02-19T18:55:48.892Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,POST,200,23032,190360 +2026-02-14T00:08:55.388Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://acme.local/api/v1/resource,acme.local,ALLOWED,Cloud Services,GET,403,44598,238444 +2026-02-18T14:12:22.610Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,200,5415,282093 +2026-02-18T14:08:19.040Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,GET,404,28830,421004 +2026-02-20T15:13:15.409Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,POST,403,16778,431786 +2026-02-17T03:19:09.339Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,200,47446,331383 +2026-02-19T19:11:08.474Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,301,11204,71434 +2026-02-10T15:12:29.228Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,403,1804,65807 +2026-02-17T00:31:40.790Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,GET,200,49387,23714 +2026-02-15T07:43:56.301Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,200,46632,113367 +2026-02-17T02:37:41.244Z,LEG-WS-045,10.10.1.145,ACME\jsmith,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,200,14336,48226 +2026-02-16T01:37:51.471Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,200,18044,358285 +2026-02-12T01:30:06.067Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,403,10919,401780 +2026-02-12T23:44:02.893Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://github.com/api/v1/resource,github.com,ALLOWED,Business,POST,200,39506,25712 +2026-02-18T08:35:06.572Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,GET,200,9721,146829 +2026-02-15T10:03:02.482Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://github.com/api/v1/resource,github.com,ALLOWED,Business,POST,301,43405,356331 +2026-02-14T09:12:32.783Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,301,14777,224081 +2026-02-11T23:00:02.637Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,POST,301,17292,240389 +2026-02-19T11:43:21.621Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,POST,200,30956,74848 +2026-02-20T06:49:03.069Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,200,485,379396 +2026-02-19T00:19:20.971Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,403,34555,100767 +2026-02-17T10:10:15.756Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,GET,200,3038,276310 +2026-02-11T00:25:42.024Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,POST,404,24008,349194 +2026-02-13T17:54:38.825Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,POST,200,31710,17164 +2026-02-17T05:19:53.096Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,200,35972,407276 +2026-02-18T11:35:30.833Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,404,21856,74654 +2026-02-12T10:16:02.408Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,200,19991,125459 +2026-02-11T11:56:47.092Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,403,22857,360071 +2026-02-13T05:56:00.416Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://draftkings.com/,draftkings.com,ALLOWED,Piracy,GET,200,18027,123992 +2026-02-15T00:44:54.146Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,404,29902,193173 +2026-02-19T02:38:06.327Z,MKT-WS-046,10.10.2.146,ACME\hbrown,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,200,26243,345092 +2026-02-16T07:00:22.592Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,404,47478,297936 +2026-02-15T22:31:38.059Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,200,37825,363993 +2026-02-13T17:41:25.977Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,GET,403,27956,179731 +2026-02-16T05:09:45.289Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,GET,403,2586,435740 +2026-02-14T23:50:18.343Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://open.spotify.com/,open.spotify.com,ALLOWED,Piracy,GET,301,32689,41122 +2026-02-12T12:36:46.499Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,POST,200,43753,279369 +2026-02-19T23:14:54.160Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,301,15288,419446 +2026-02-13T15:46:06.852Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,POST,301,35471,174597 +2026-02-15T09:07:59.021Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,200,19297,111128 +2026-02-20T09:41:40.017Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,200,20065,402072 +2026-02-11T00:52:36.217Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,301,45323,95335 +2026-02-20T17:53:36.965Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://www.reddit.com/,www.reddit.com,BLOCKED,Social Media,POST,403,1597,352815 +2026-02-13T12:34:03.982Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,POST,200,18903,453248 +2026-02-18T17:10:57.016Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,POST,200,40752,280558 +2026-02-11T23:35:21.121Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,GET,200,8385,21457 +2026-02-19T08:07:40.600Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,GET,301,38105,410989 +2026-02-19T13:18:18.937Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,GET,404,47179,62053 +2026-02-10T17:30:39.743Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,404,37111,253551 +2026-02-17T18:58:02.799Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,POST,404,38729,465134 +2026-02-15T17:27:49.802Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,POST,200,11174,20120 +2026-02-20T09:13:33.712Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,200,9123,410854 +2026-02-14T04:04:24.078Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,200,27605,450892 +2026-02-14T20:32:02.189Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://www.pornhub.com/,www.pornhub.com,ALLOWED,Adult,GET,301,39019,226576 +2026-02-12T21:02:16.720Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,GET,404,38416,301779 +2026-02-18T23:35:31.882Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,404,39190,68542 +2026-02-12T07:38:13.879Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,301,11729,113020 +2026-02-12T17:04:00.218Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Cloud Services,GET,404,11023,54765 +2026-02-19T16:25:41.590Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,POST,404,20987,446600 +2026-02-11T10:03:53.091Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,POST,200,30090,43132 +2026-02-18T08:35:46.801Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,404,17594,149218 +2026-02-13T02:31:37.581Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,POST,404,31180,295462 +2026-02-11T17:24:23.636Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,200,14601,383201 +2026-02-20T01:21:46.996Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,200,14228,137387 +2026-02-19T22:09:06.649Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,200,26309,204295 +2026-02-14T20:00:16.753Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,403,1013,71480 +2026-02-20T08:10:42.695Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,GET,200,20781,462328 +2026-02-17T22:31:03.132Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,POST,404,43502,457984 +2026-02-11T14:25:56.555Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,GET,200,11291,451932 +2026-02-15T20:24:20.081Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,GET,200,5101,34503 +2026-02-14T00:44:00.962Z,EXEC-WS-047,10.10.3.147,ACME\fthompson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,45927,97441 +2026-02-13T08:18:05.719Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,GET,301,20204,15758 +2026-02-12T03:05:36.619Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,200,47246,94054 +2026-02-11T00:22:45.261Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,POST,200,33276,142205 +2026-02-11T03:52:14.381Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,200,29589,304981 +2026-02-19T03:16:20.621Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,POST,404,45421,373232 +2026-02-12T06:14:22.370Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,301,12633,475732 +2026-02-16T11:43:26.535Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,POST,403,23907,1732 +2026-02-18T21:37:12.123Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,POST,403,10993,431518 +2026-02-14T20:58:00.996Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://www.netflix.com/,www.netflix.com,BLOCKED,Gaming,GET,403,31990,493183 +2026-02-20T10:14:49.295Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Productivity,GET,200,34942,232335 +2026-02-13T11:39:01.093Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,POST,403,6406,376999 +2026-02-11T03:27:49.167Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,200,36685,276725 +2026-02-15T13:17:03.111Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,200,32272,21381 +2026-02-13T08:25:54.487Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,404,39915,199628 +2026-02-14T02:20:02.051Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://www.linkedin.com/jobs/,www.linkedin.com/jobs,BLOCKED,Streaming,POST,403,34132,238469 +2026-02-13T09:38:46.373Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,POST,404,1931,202305 +2026-02-18T12:34:44.119Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,POST,200,3676,237142 +2026-02-19T21:20:14.239Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,200,27911,161869 +2026-02-17T21:35:21.040Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,POST,301,47089,231085 +2026-02-19T03:35:44.906Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,GET,301,3907,404737 +2026-02-10T20:57:10.186Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,200,48947,369985 +2026-02-14T15:52:11.368Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,301,19325,415358 +2026-02-19T09:58:13.508Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,404,10559,406502 +2026-02-18T16:52:31.712Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://www.pornhub.com/,www.pornhub.com,BLOCKED,Gaming,POST,403,13801,129028 +2026-02-14T05:28:19.884Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,POST,200,12516,329687 +2026-02-19T12:16:55.033Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,403,47729,455403 +2026-02-11T19:54:05.657Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,POST,403,41686,8526 +2026-02-12T19:15:28.364Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://www.amazon.com/,www.amazon.com,ALLOWED,Gambling,GET,403,2739,257778 +2026-02-16T07:30:53.528Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,404,3755,60166 +2026-02-11T07:10:36.685Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,POST,200,3308,293870 +2026-02-13T01:37:41.531Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,403,23865,245897 +2026-02-19T06:22:31.607Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,POST,200,16600,253003 +2026-02-11T04:06:34.693Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,POST,403,1211,144816 +2026-02-20T15:20:17.083Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,200,840,353519 +2026-02-19T13:15:50.391Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,POST,200,27881,480278 +2026-02-14T18:18:46.116Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,POST,200,7632,195089 +2026-02-12T05:42:09.558Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,200,10796,446121 +2026-02-15T03:07:25.723Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,GET,403,5502,497081 +2026-02-18T00:30:45.320Z,IT-WS-048,10.10.1.148,ACME\emartinez,https://thepiratebay.org/,thepiratebay.org,BLOCKED,Shopping,GET,403,31299,270162 +2026-02-13T05:52:17.522Z,HR-WS-049,10.10.2.149,ACME\admin,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,403,17744,387700 +2026-02-15T15:41:21.440Z,HR-WS-049,10.10.2.149,ACME\admin,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Cloud Services,GET,403,7352,57137 +2026-02-16T09:11:36.015Z,HR-WS-049,10.10.2.149,ACME\admin,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,POST,403,34021,264112 +2026-02-12T19:08:47.943Z,HR-WS-049,10.10.2.149,ACME\admin,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,200,13659,287703 +2026-02-10T18:39:19.618Z,HR-WS-049,10.10.2.149,ACME\admin,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,POST,200,36366,254947 +2026-02-14T18:08:38.092Z,HR-WS-049,10.10.2.149,ACME\admin,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,GET,200,49098,68313 +2026-02-18T11:55:31.523Z,HR-WS-049,10.10.2.149,ACME\admin,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,POST,200,29271,150491 +2026-02-13T04:35:32.573Z,HR-WS-049,10.10.2.149,ACME\admin,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,POST,200,48100,411640 +2026-02-11T06:44:47.595Z,HR-WS-049,10.10.2.149,ACME\admin,https://www.reddit.com/,www.reddit.com,BLOCKED,Social Media,POST,403,11557,28026 +2026-02-16T17:33:06.570Z,HR-WS-049,10.10.2.149,ACME\admin,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,200,27159,11434 +2026-02-10T09:03:43.724Z,HR-WS-049,10.10.2.149,ACME\admin,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,POST,200,45384,497740 +2026-02-13T17:45:33.889Z,HR-WS-049,10.10.2.149,ACME\admin,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,301,18997,470929 +2026-02-16T09:37:30.976Z,HR-WS-049,10.10.2.149,ACME\admin,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,POST,301,35884,404950 +2026-02-12T10:32:41.792Z,HR-WS-049,10.10.2.149,ACME\admin,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,POST,404,3770,7670 +2026-02-11T03:06:39.573Z,HR-WS-049,10.10.2.149,ACME\admin,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,POST,403,3085,246240 +2026-02-18T09:24:12.776Z,HR-WS-049,10.10.2.149,ACME\admin,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,403,16307,186495 +2026-02-16T09:38:08.690Z,HR-WS-049,10.10.2.149,ACME\admin,https://steamcommunity.com/,steamcommunity.com,ALLOWED,Piracy,GET,301,32715,46155 +2026-02-20T02:38:04.678Z,HR-WS-049,10.10.2.149,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,404,45781,384343 +2026-02-14T11:59:37.722Z,HR-WS-049,10.10.2.149,ACME\admin,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,GET,301,1099,190910 +2026-02-19T06:29:54.525Z,HR-WS-049,10.10.2.149,ACME\admin,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,301,33100,341733 +2026-02-20T11:42:26.776Z,HR-WS-049,10.10.2.149,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,GET,200,25166,460384 +2026-02-19T16:58:07.180Z,HR-WS-049,10.10.2.149,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,GET,200,6393,439086 +2026-02-13T11:07:42.725Z,HR-WS-049,10.10.2.149,ACME\admin,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,301,36869,356847 +2026-02-11T21:13:45.083Z,HR-WS-049,10.10.2.149,ACME\admin,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Cloud Services,GET,200,17684,416623 +2026-02-15T15:17:57.011Z,HR-WS-049,10.10.2.149,ACME\admin,https://acme.local/api/v1/resource,acme.local,ALLOWED,Cloud Services,GET,404,38402,334693 +2026-02-16T02:42:37.725Z,HR-WS-049,10.10.2.149,ACME\admin,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,GET,200,35918,61121 +2026-02-18T15:29:28.757Z,HR-WS-049,10.10.2.149,ACME\admin,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,12592,102495 +2026-02-16T18:35:31.145Z,HR-WS-049,10.10.2.149,ACME\admin,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,200,14300,368358 +2026-02-16T17:59:03.360Z,HR-WS-049,10.10.2.149,ACME\admin,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,404,39179,456277 +2026-02-18T13:13:14.527Z,HR-WS-049,10.10.2.149,ACME\admin,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,GET,200,23277,465980 +2026-02-17T08:39:12.152Z,HR-WS-049,10.10.2.149,ACME\admin,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,301,46883,215983 +2026-02-12T07:17:36.571Z,HR-WS-049,10.10.2.149,ACME\admin,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,POST,200,26067,263438 +2026-02-14T15:14:19.791Z,HR-WS-049,10.10.2.149,ACME\admin,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,POST,200,7937,27255 +2026-02-10T23:55:10.539Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,GET,200,32747,200236 +2026-02-17T18:40:50.708Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,200,37510,29054 +2026-02-12T16:51:01.438Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,GET,200,31349,38571 +2026-02-19T10:10:54.530Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://pokerstars.com/,pokerstars.com,ALLOWED,Gambling,GET,200,30055,35912 +2026-02-17T17:35:51.770Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Productivity,POST,301,21885,155602 +2026-02-11T02:21:03.746Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,200,9563,172382 +2026-02-12T09:17:13.977Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,GET,200,6572,51437 +2026-02-10T17:17:27.307Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,GET,404,1893,92516 +2026-02-14T14:59:09.598Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,403,44994,451716 +2026-02-15T23:48:00.689Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://1337x.to/,1337x.to,ALLOWED,Gaming,GET,404,4876,348228 +2026-02-13T08:29:32.907Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Productivity,POST,200,48979,308160 +2026-02-16T10:12:48.924Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://draftkings.com/,draftkings.com,ALLOWED,Social Media,GET,200,12720,480864 +2026-02-12T19:25:13.511Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,301,25702,116154 +2026-02-16T00:31:01.213Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,200,30941,173445 +2026-02-19T04:11:54.895Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,200,31043,272720 +2026-02-19T08:09:15.964Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,200,14035,146491 +2026-02-15T22:48:34.630Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,200,38942,87712 +2026-02-20T07:09:15.595Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,POST,403,35685,303811 +2026-02-17T20:14:57.865Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,404,46082,32170 +2026-02-10T11:19:21.278Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,POST,301,14405,221615 +2026-02-17T19:05:25.576Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,403,18635,480279 +2026-02-12T20:45:37.834Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,200,3240,316611 +2026-02-16T22:02:22.379Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,GET,200,25134,337605 +2026-02-11T09:33:23.447Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,POST,200,19514,103885 +2026-02-19T04:43:08.602Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,404,30727,173664 +2026-02-10T09:48:34.721Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,POST,301,32701,258679 +2026-02-10T09:51:45.117Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,POST,200,24718,221777 +2026-02-13T04:28:46.760Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,404,41391,365083 +2026-02-20T08:14:47.290Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,POST,403,22041,119080 +2026-02-15T13:25:55.760Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://store.steampowered.com/,store.steampowered.com,ALLOWED,Shopping,GET,200,8020,396503 +2026-02-12T03:13:55.199Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,POST,403,45567,91070 +2026-02-17T14:10:26.967Z,FIN-WS-050,10.10.3.150,ACME\idavis,https://fitgirl-repacks.site/,fitgirl-repacks.site,BLOCKED,Adult,GET,403,16288,4755 +2026-02-17T11:18:17.431Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,POST,403,33429,10608 +2026-02-15T12:14:23.214Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,403,12501,273397 +2026-02-14T11:38:30.306Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,POST,200,900,353813 +2026-02-19T16:06:21.941Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,POST,301,25107,10868 +2026-02-12T16:32:42.406Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,GET,200,2716,196643 +2026-02-20T13:57:33.377Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,200,23185,14641 +2026-02-12T02:57:15.893Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,POST,200,17091,123086 +2026-02-16T04:04:19.406Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://www.glassdoor.com/,www.glassdoor.com,ALLOWED,Streaming,GET,403,23465,396605 +2026-02-15T16:11:34.889Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,200,37076,140567 +2026-02-19T22:15:55.274Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Business,GET,301,36421,466667 +2026-02-19T10:58:53.950Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,403,47662,446631 +2026-02-12T00:53:35.253Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,200,42670,32935 +2026-02-16T17:13:55.298Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,404,10245,401451 +2026-02-12T00:02:06.455Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,38396,481761 +2026-02-19T00:13:36.425Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,404,46803,188009 +2026-02-16T17:24:00.638Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,301,33278,311747 +2026-02-10T19:12:46.523Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,200,41976,323373 +2026-02-19T08:36:43.167Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,POST,403,9269,238074 +2026-02-20T06:37:10.807Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,200,32378,286970 +2026-02-10T18:17:46.785Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,200,4260,382252 +2026-02-11T09:49:57.157Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,POST,403,40105,10403 +2026-02-19T15:43:56.593Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://www.linkedin.com/jobs/,www.linkedin.com/jobs,ALLOWED,Social Media,GET,200,44685,307434 +2026-02-13T23:22:56.876Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,200,46454,327039 +2026-02-18T22:29:11.682Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,POST,403,17693,69726 +2026-02-18T07:35:33.347Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,GET,200,39156,23184 +2026-02-11T14:52:43.912Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,GET,404,4608,78166 +2026-02-19T00:10:12.415Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,POST,404,44746,242438 +2026-02-12T10:35:27.185Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,200,18096,126233 +2026-02-13T05:16:12.669Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://www.netflix.com/,www.netflix.com,ALLOWED,Streaming,GET,200,32367,259678 +2026-02-13T06:33:44.791Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,POST,301,1223,208337 +2026-02-13T23:47:42.644Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,GET,403,28725,384329 +2026-02-20T03:21:30.609Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://open.spotify.com/,open.spotify.com,ALLOWED,Social Media,GET,200,446,206990 +2026-02-11T15:34:07.075Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://www.shein.com/,www.shein.com,BLOCKED,Gaming,GET,403,25291,459181 +2026-02-19T10:12:46.859Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,POST,403,30076,257757 +2026-02-19T23:08:43.946Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://www.ebay.com/,www.ebay.com,ALLOWED,Shopping,GET,200,40710,366093 +2026-02-13T07:47:01.595Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,404,16017,155698 +2026-02-19T02:40:58.411Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,200,34858,28849 +2026-02-19T18:28:03.543Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://acme.local/api/v1/resource,acme.local,ALLOWED,Cloud Services,GET,200,2027,67658 +2026-02-20T08:31:30.400Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,403,15319,491362 +2026-02-19T11:33:00.409Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,200,39420,250189 +2026-02-14T17:12:05.880Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,403,22489,129644 +2026-02-13T16:54:54.504Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,403,10164,207101 +2026-02-13T23:22:27.335Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,POST,200,12173,260932 +2026-02-13T16:39:46.988Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,404,14603,203012 +2026-02-18T22:12:47.187Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,200,38570,488192 +2026-02-12T18:36:27.576Z,SLS-WS-051,10.10.1.151,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,301,44670,314963 +2026-02-14T11:56:13.983Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://www.linkedin.com/jobs/,www.linkedin.com/jobs,ALLOWED,Gambling,POST,200,24536,237641 +2026-02-18T08:44:41.246Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,GET,200,48802,488866 +2026-02-12T05:24:51.337Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,9791,195014 +2026-02-15T04:25:02.472Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,200,49866,73728 +2026-02-18T19:03:39.451Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,404,6398,310097 +2026-02-20T12:04:26.487Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,404,17226,60361 +2026-02-13T14:57:03.451Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,200,6281,68460 +2026-02-11T11:12:08.674Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,301,22988,478803 +2026-02-16T09:40:22.409Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://acme.local/api/v1/resource,acme.local,ALLOWED,Cloud Services,GET,301,35667,54806 +2026-02-20T11:52:01.658Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,GET,200,38667,359441 +2026-02-15T13:12:41.559Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,200,36574,467905 +2026-02-15T13:52:16.115Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,GET,200,21233,196968 +2026-02-12T18:59:40.603Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,200,14668,327810 +2026-02-11T00:25:47.610Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,200,31315,485952 +2026-02-14T07:56:38.336Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,200,13809,97822 +2026-02-19T20:06:51.160Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,301,29270,122587 +2026-02-19T16:14:06.130Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,POST,200,27047,314064 +2026-02-15T12:27:43.143Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,POST,200,9417,324849 +2026-02-20T06:56:35.291Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,GET,404,45582,462761 +2026-02-13T11:30:16.791Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,200,22121,487910 +2026-02-12T22:55:58.924Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,200,26901,254951 +2026-02-12T16:17:48.152Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,200,49680,399451 +2026-02-13T02:03:54.289Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,200,12812,396722 +2026-02-12T09:16:23.517Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,GET,200,44275,242187 +2026-02-17T10:29:35.620Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,200,4537,238266 +2026-02-14T16:38:06.467Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,200,2377,418220 +2026-02-10T19:04:24.510Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,301,12466,427250 +2026-02-19T19:57:47.864Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,200,47039,397865 +2026-02-19T16:30:14.933Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,POST,200,27141,112426 +2026-02-16T22:09:31.805Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,POST,404,7813,13539 +2026-02-12T22:18:51.089Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,403,7578,196718 +2026-02-13T16:22:09.723Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,POST,301,46671,107333 +2026-02-14T05:10:49.643Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://google.com/api/v1/resource,google.com,ALLOWED,Business,POST,200,42016,231957 +2026-02-15T14:43:11.385Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,GET,200,9753,282516 +2026-02-18T22:59:08.246Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,POST,200,29196,298379 +2026-02-15T03:32:59.851Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,200,43073,375186 +2026-02-20T05:06:17.266Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,POST,404,12987,91719 +2026-02-15T22:51:48.517Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,301,26493,320949 +2026-02-18T19:03:30.941Z,ENG-WS-052,10.10.2.152,ACME\dlee,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,301,17709,482038 +2026-02-19T14:45:51.155Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,GET,404,8185,365446 +2026-02-12T13:42:49.390Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,200,40045,13386 +2026-02-17T10:39:26.866Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,404,5443,212638 +2026-02-11T03:17:21.947Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,200,45246,354088 +2026-02-18T12:05:42.418Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,POST,200,29493,112882 +2026-02-18T02:18:21.185Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,404,44595,25043 +2026-02-14T00:03:25.510Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,POST,404,44206,67032 +2026-02-20T07:28:39.615Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,GET,200,7511,413387 +2026-02-18T12:05:15.288Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,200,10092,126310 +2026-02-16T13:51:07.483Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,200,33888,136332 +2026-02-10T16:06:13.862Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://1337x.to/,1337x.to,ALLOWED,Social Media,POST,404,17305,148730 +2026-02-19T19:16:45.245Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,404,11714,467208 +2026-02-16T06:56:21.457Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,301,6830,152441 +2026-02-16T14:01:38.555Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,200,33639,346669 +2026-02-18T02:07:17.709Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,404,35218,488724 +2026-02-12T10:36:52.872Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,403,38407,127753 +2026-02-14T02:03:14.306Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,POST,404,30615,342902 +2026-02-19T01:47:41.390Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,GET,200,42992,147744 +2026-02-12T13:39:29.383Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,POST,200,11876,55012 +2026-02-11T14:30:22.644Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://www.amazon.com/,www.amazon.com,BLOCKED,Piracy,POST,403,38604,453528 +2026-02-17T03:57:19.397Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,GET,200,11311,185528 +2026-02-17T09:46:30.288Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,200,39292,390363 +2026-02-19T23:44:36.608Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,200,2684,425088 +2026-02-16T09:21:37.766Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,POST,404,42026,187808 +2026-02-14T04:25:14.770Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,POST,200,49615,194128 +2026-02-15T17:30:24.594Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,POST,403,22905,165713 +2026-02-12T14:28:12.206Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,GET,301,40727,204055 +2026-02-11T04:16:01.361Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,POST,403,14789,426166 +2026-02-17T10:52:59.397Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,200,10612,5327 +2026-02-18T11:52:17.431Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,POST,200,49765,23322 +2026-02-11T05:26:14.772Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://hulu.com/,hulu.com,ALLOWED,Streaming,GET,200,10255,474806 +2026-02-17T18:17:38.300Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,GET,200,46473,373304 +2026-02-18T08:04:24.106Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Productivity,GET,301,33366,109093 +2026-02-14T14:46:37.636Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,GET,301,9107,183863 +2026-02-16T11:28:26.588Z,LEG-WS-053,10.10.3.153,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,POST,404,12329,67365 +2026-02-10T21:44:33.357Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,POST,404,12330,146185 +2026-02-17T16:38:17.269Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,403,7891,110760 +2026-02-16T05:50:10.262Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,403,24866,263196 +2026-02-19T01:18:49.644Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,403,33353,486684 +2026-02-18T14:45:50.139Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,200,23269,305700 +2026-02-17T17:03:11.476Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,POST,200,12884,339885 +2026-02-19T23:52:47.318Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,GET,200,8663,126466 +2026-02-14T17:24:34.330Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,GET,403,14136,217878 +2026-02-18T10:47:39.693Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,GET,404,37857,54079 +2026-02-12T21:15:58.666Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,GET,403,26245,41447 +2026-02-15T05:55:55.611Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,GET,200,14828,407654 +2026-02-17T17:45:41.053Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,404,1825,156117 +2026-02-18T11:10:53.235Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,404,24484,190038 +2026-02-14T10:58:26.701Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,200,49137,370223 +2026-02-19T09:21:28.114Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,POST,200,7308,400754 +2026-02-11T16:40:59.612Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,403,40363,362480 +2026-02-18T14:25:18.829Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,GET,403,17097,363650 +2026-02-15T11:59:53.586Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,GET,200,20176,201730 +2026-02-20T01:08:08.278Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,GET,200,38275,209141 +2026-02-17T12:17:42.319Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,POST,301,6679,373465 +2026-02-19T15:57:24.092Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,GET,404,13291,17438 +2026-02-20T10:30:15.601Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,POST,200,41825,402223 +2026-02-13T11:12:56.734Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,POST,301,23579,426441 +2026-02-15T05:40:54.447Z,MKT-WS-054,10.10.1.154,ACME\svc_sql,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,200,34944,103982 +2026-02-17T18:15:11.384Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,200,44613,281428 +2026-02-10T09:20:29.974Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,404,9522,225602 +2026-02-14T11:40:35.605Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,POST,200,25903,447422 +2026-02-10T18:01:22.192Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,GET,200,43354,217694 +2026-02-20T08:56:22.784Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,GET,200,20809,114646 +2026-02-11T20:30:44.391Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,GET,200,9530,104258 +2026-02-12T08:09:56.631Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,403,38909,42022 +2026-02-18T09:31:18.725Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,404,23605,440850 +2026-02-15T08:31:57.603Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,200,4599,121592 +2026-02-10T19:12:05.948Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://thepiratebay.org/,thepiratebay.org,ALLOWED,Shopping,POST,301,15243,144541 +2026-02-20T02:25:36.280Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,GET,200,16456,143171 +2026-02-18T09:14:44.380Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Cloud Services,GET,404,40313,38237 +2026-02-17T04:54:33.341Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,200,45269,349952 +2026-02-12T06:39:00.710Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Business,GET,200,12781,113806 +2026-02-10T17:51:39.260Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,403,31256,416617 +2026-02-12T16:41:37.304Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,GET,200,33694,70340 +2026-02-16T07:57:31.275Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,200,26558,345746 +2026-02-13T09:18:21.140Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,404,38742,255494 +2026-02-15T18:09:14.451Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,301,11598,270697 +2026-02-18T21:52:12.882Z,EXEC-WS-055,10.10.2.155,ACME\fthompson,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,200,9387,374697 +2026-02-16T00:56:05.319Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,403,32111,287051 +2026-02-15T19:19:43.580Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,GET,200,24713,192941 +2026-02-11T22:15:16.359Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,200,35148,140856 +2026-02-14T05:37:34.244Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,301,30883,287242 +2026-02-20T15:39:20.265Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,301,49642,278695 +2026-02-19T02:56:31.711Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,404,1203,396456 +2026-02-20T03:48:42.426Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,200,22159,292308 +2026-02-11T20:20:37.674Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,301,14139,131154 +2026-02-14T19:30:24.590Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,POST,404,15475,164122 +2026-02-19T10:50:18.903Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,POST,403,41059,130194 +2026-02-18T23:29:44.753Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,POST,404,13907,190084 +2026-02-12T00:26:07.649Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,404,13982,144292 +2026-02-14T09:16:12.200Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,POST,200,42337,496626 +2026-02-16T14:06:12.761Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,POST,200,47690,433029 +2026-02-10T20:16:55.092Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Business,GET,301,8708,236982 +2026-02-13T05:23:15.814Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,404,2130,414958 +2026-02-19T13:25:27.726Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://www.amazon.com/,www.amazon.com,ALLOWED,Adult,GET,200,5171,196098 +2026-02-13T19:12:11.534Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,200,42810,148989 +2026-02-19T04:58:31.277Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,POST,301,31647,437563 +2026-02-12T21:33:08.993Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,GET,200,49454,387968 +2026-02-20T03:55:07.999Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,404,4213,351965 +2026-02-20T15:49:44.968Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://www.reddit.com/,www.reddit.com,ALLOWED,Social Media,GET,301,38823,113316 +2026-02-17T09:24:11.712Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Business,GET,403,46086,102872 +2026-02-19T00:08:01.375Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,200,28557,151519 +2026-02-17T15:06:36.999Z,IT-WS-056,10.10.3.156,ACME\emartinez,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,404,47369,211297 +2026-02-10T16:19:49.549Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,GET,200,29875,301009 +2026-02-10T08:27:29.727Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,301,28869,98220 +2026-02-18T09:34:21.350Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,GET,404,39840,260853 +2026-02-20T04:11:29.103Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,POST,200,33748,3732 +2026-02-13T21:09:00.770Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://www.linkedin.com/jobs/,www.linkedin.com/jobs,BLOCKED,Piracy,GET,403,11417,344686 +2026-02-13T14:28:50.468Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,200,32181,212213 +2026-02-18T12:33:05.669Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,200,19585,260922 +2026-02-14T05:08:43.683Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,POST,301,22013,282792 +2026-02-16T22:20:33.022Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,200,49504,79201 +2026-02-10T14:43:38.020Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,403,15105,88476 +2026-02-18T17:47:46.479Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,GET,200,23173,213312 +2026-02-18T18:02:09.803Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,404,48261,68510 +2026-02-17T23:27:11.107Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://onlyfans.com/,onlyfans.com,BLOCKED,Piracy,POST,403,23882,496964 +2026-02-16T22:25:46.442Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,403,45407,406503 +2026-02-18T19:59:10.580Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,404,38447,62357 +2026-02-10T10:53:00.675Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,200,1663,19613 +2026-02-16T13:56:04.952Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,GET,403,9209,290487 +2026-02-13T03:38:17.564Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,200,4208,240446 +2026-02-11T12:51:52.656Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://www.reddit.com/,www.reddit.com,ALLOWED,Streaming,GET,200,2474,211732 +2026-02-19T22:15:55.892Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://fitgirl-repacks.site/,fitgirl-repacks.site,BLOCKED,Gambling,GET,403,4181,390165 +2026-02-13T13:50:06.893Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,200,43710,427565 +2026-02-13T09:41:30.407Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,GET,200,22118,376448 +2026-02-14T01:46:31.737Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,GET,200,32260,443294 +2026-02-18T11:34:44.719Z,HR-WS-057,10.10.1.157,ACME\bwilson,https://onlyfans.com/,onlyfans.com,ALLOWED,Adult,GET,301,26389,441732 +2026-02-13T12:27:01.489Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://pokerstars.com/,pokerstars.com,ALLOWED,Social Media,POST,200,35308,158630 +2026-02-14T17:34:06.099Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,GET,404,18693,420460 +2026-02-15T07:41:43.517Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://www.pornhub.com/,www.pornhub.com,BLOCKED,Adult,GET,403,9438,19934 +2026-02-17T20:28:19.984Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,POST,200,19187,495268 +2026-02-13T05:27:21.013Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Technology,GET,404,29323,297006 +2026-02-17T05:38:29.795Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://www.amazon.com/,www.amazon.com,BLOCKED,Piracy,GET,403,3196,256875 +2026-02-10T09:20:01.946Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,200,36949,283307 +2026-02-17T07:55:26.825Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,POST,200,29530,65587 +2026-02-18T16:34:26.556Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,13564,390944 +2026-02-11T21:20:59.973Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://fitgirl-repacks.site/,fitgirl-repacks.site,BLOCKED,Gambling,POST,403,9642,228990 +2026-02-11T10:50:44.801Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,GET,403,9934,42535 +2026-02-19T20:15:56.507Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,200,35635,455937 +2026-02-14T02:12:38.301Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,404,23863,73404 +2026-02-18T13:42:05.212Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,GET,200,21122,167766 +2026-02-18T00:32:59.627Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,200,36918,164737 +2026-02-14T16:32:51.998Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,POST,403,13399,26772 +2026-02-12T06:18:07.586Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,POST,404,19722,47023 +2026-02-20T17:02:23.672Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,GET,404,5858,91449 +2026-02-16T05:16:53.576Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Technology,GET,403,5879,343806 +2026-02-19T03:37:13.250Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,404,13088,47246 +2026-02-19T03:54:32.590Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,404,43678,477361 +2026-02-16T17:42:17.710Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,200,37873,173315 +2026-02-16T07:57:37.921Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,GET,200,34376,281655 +2026-02-12T06:02:31.437Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,403,17626,460714 +2026-02-10T12:03:24.275Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,POST,404,43943,196140 +2026-02-16T19:11:16.382Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://www.ebay.com/,www.ebay.com,ALLOWED,Piracy,GET,301,6340,361221 +2026-02-18T05:53:00.768Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,301,118,252886 +2026-02-15T02:19:39.494Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Business,POST,200,29888,18726 +2026-02-18T09:48:57.995Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,GET,200,4203,88743 +2026-02-18T17:31:06.014Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,29969,32618 +2026-02-10T11:43:42.686Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,GET,403,39615,358521 +2026-02-16T19:53:31.249Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,17697,206528 +2026-02-16T15:14:53.609Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,POST,200,26566,103629 +2026-02-11T07:48:27.564Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,200,4932,121330 +2026-02-14T05:52:09.410Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://www.glassdoor.com/,www.glassdoor.com,ALLOWED,Adult,GET,404,10346,145062 +2026-02-17T01:20:41.346Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,POST,404,519,425237 +2026-02-16T22:10:58.051Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,POST,404,21926,410917 +2026-02-17T15:04:39.598Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,44129,384116 +2026-02-17T16:51:30.766Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,GET,301,10586,220996 +2026-02-10T21:01:08.111Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,301,9989,261336 +2026-02-15T23:47:14.781Z,FIN-WS-058,10.10.2.158,ACME\fthompson,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,POST,200,31551,403738 +2026-02-12T01:00:21.586Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,301,10365,382350 +2026-02-16T05:29:21.907Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://www.pornhub.com/,www.pornhub.com,BLOCKED,Gaming,GET,403,39430,48327 +2026-02-14T15:28:55.649Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,POST,200,32191,245234 +2026-02-19T07:55:02.602Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,POST,200,17764,99477 +2026-02-12T12:55:28.697Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,200,1150,140885 +2026-02-16T10:10:59.348Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,POST,200,8206,186833 +2026-02-18T17:43:42.447Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,GET,403,28494,236961 +2026-02-12T21:09:09.485Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,49613,210297 +2026-02-17T10:35:28.512Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,404,43284,204219 +2026-02-14T19:14:23.313Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,POST,404,38120,463127 +2026-02-11T16:45:50.905Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,200,44032,245932 +2026-02-10T13:22:40.262Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,GET,301,40966,186091 +2026-02-10T12:15:54.865Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,37292,128750 +2026-02-16T23:12:40.295Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,301,24755,260927 +2026-02-12T10:43:31.010Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,GET,404,16947,449672 +2026-02-16T01:34:02.068Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,GET,404,32827,131322 +2026-02-20T09:40:51.076Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,GET,200,18686,170085 +2026-02-11T23:04:00.761Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,GET,200,4627,85600 +2026-02-10T09:22:30.541Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,GET,200,3031,434658 +2026-02-17T15:04:36.952Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Productivity,GET,200,15286,74911 +2026-02-17T02:22:48.727Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,301,48416,88128 +2026-02-13T13:03:08.685Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,200,14346,435282 +2026-02-17T03:09:16.884Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,404,35790,373400 +2026-02-16T23:33:59.315Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://xvideos.com/,xvideos.com,ALLOWED,Gaming,GET,200,13751,288359 +2026-02-12T21:24:54.468Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,POST,301,40736,307781 +2026-02-20T04:22:10.105Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,POST,404,26839,492514 +2026-02-17T13:59:08.354Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,POST,301,21278,299621 +2026-02-19T10:50:55.892Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,POST,404,7716,357879 +2026-02-11T08:25:09.762Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,404,11244,28486 +2026-02-20T06:08:39.394Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,GET,403,29917,74407 +2026-02-15T08:11:41.809Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://www.facebook.com/,www.facebook.com,BLOCKED,Streaming,GET,403,36302,68284 +2026-02-11T15:41:50.383Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,200,3753,129267 +2026-02-18T13:59:09.769Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,404,31266,228425 +2026-02-13T20:57:01.197Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,301,38478,221047 +2026-02-13T09:22:52.813Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,200,4863,407448 +2026-02-20T10:15:10.080Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,301,2766,82857 +2026-02-15T15:08:32.647Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,200,13573,209817 +2026-02-15T12:37:02.981Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,200,24102,20759 +2026-02-13T16:41:57.518Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://steamcommunity.com/,steamcommunity.com,ALLOWED,Gambling,POST,200,43888,74682 +2026-02-19T05:00:40.667Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,POST,403,18125,437733 +2026-02-16T13:20:55.794Z,SLS-WS-059,10.10.3.159,ACME\hbrown,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,GET,200,20459,141841 +2026-02-11T19:02:56.652Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://fitgirl-repacks.site/,fitgirl-repacks.site,ALLOWED,Gambling,GET,200,27201,69011 +2026-02-19T01:09:54.088Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://draftkings.com/,draftkings.com,BLOCKED,Gaming,GET,403,6044,266013 +2026-02-18T08:16:24.818Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,200,44930,195971 +2026-02-18T12:26:03.486Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,200,46779,457785 +2026-02-16T06:04:42.475Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,404,23486,220013 +2026-02-13T09:08:30.984Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,301,15553,127625 +2026-02-10T13:51:13.929Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,200,44396,429575 +2026-02-11T14:48:52.096Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,GET,403,17198,206323 +2026-02-17T12:06:47.449Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,404,8384,436062 +2026-02-12T15:59:30.082Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,POST,200,14801,471864 +2026-02-20T00:59:53.947Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,GET,200,19214,125360 +2026-02-13T17:40:56.489Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,POST,403,39626,153552 +2026-02-12T04:19:12.016Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,301,8830,134851 +2026-02-10T17:41:30.699Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,200,22895,476859 +2026-02-13T14:04:58.391Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,403,36049,45578 +2026-02-12T18:52:18.194Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,403,676,60981 +2026-02-18T17:34:48.913Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,POST,200,25279,400596 +2026-02-18T17:12:50.937Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,301,45667,118031 +2026-02-12T14:22:51.702Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Productivity,POST,200,22865,409249 +2026-02-11T19:07:52.268Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,301,13005,226365 +2026-02-14T17:44:30.659Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,404,32919,141816 +2026-02-12T21:22:50.094Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,GET,200,22381,310049 +2026-02-17T11:21:40.013Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://www.tiktok.com/,www.tiktok.com,ALLOWED,Social Media,GET,403,42985,217198 +2026-02-11T19:32:13.530Z,ENG-WS-060,10.10.1.160,ACME\svc_backup,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,200,28993,408922 +2026-02-15T06:04:53.465Z,LEG-WS-061,10.10.2.161,ACME\admin,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,200,21166,181589 +2026-02-20T01:37:49.579Z,LEG-WS-061,10.10.2.161,ACME\admin,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,200,42576,39768 +2026-02-18T13:24:11.956Z,LEG-WS-061,10.10.2.161,ACME\admin,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,POST,404,13054,133998 +2026-02-19T09:31:25.226Z,LEG-WS-061,10.10.2.161,ACME\admin,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,POST,200,5512,184602 +2026-02-19T13:15:06.201Z,LEG-WS-061,10.10.2.161,ACME\admin,https://www.bet365.com/,www.bet365.com,BLOCKED,Social Media,GET,403,42972,333916 +2026-02-10T21:11:06.273Z,LEG-WS-061,10.10.2.161,ACME\admin,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,GET,200,10212,130341 +2026-02-18T09:52:51.965Z,LEG-WS-061,10.10.2.161,ACME\admin,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,200,12666,279642 +2026-02-14T18:16:13.208Z,LEG-WS-061,10.10.2.161,ACME\admin,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,404,43241,309234 +2026-02-10T08:11:13.175Z,LEG-WS-061,10.10.2.161,ACME\admin,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,GET,200,41966,80999 +2026-02-20T11:13:56.897Z,LEG-WS-061,10.10.2.161,ACME\admin,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,200,39655,296296 +2026-02-17T03:47:52.936Z,LEG-WS-061,10.10.2.161,ACME\admin,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,POST,200,49088,60684 +2026-02-12T04:52:11.263Z,LEG-WS-061,10.10.2.161,ACME\admin,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,18903,219069 +2026-02-15T00:28:08.355Z,LEG-WS-061,10.10.2.161,ACME\admin,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,403,14735,317184 +2026-02-17T18:56:56.024Z,LEG-WS-061,10.10.2.161,ACME\admin,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,POST,200,16531,365090 +2026-02-11T20:18:29.519Z,LEG-WS-061,10.10.2.161,ACME\admin,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,GET,403,35804,36653 +2026-02-11T13:50:02.871Z,LEG-WS-061,10.10.2.161,ACME\admin,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,404,27292,381697 +2026-02-14T17:20:02.978Z,LEG-WS-061,10.10.2.161,ACME\admin,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,GET,404,29671,430352 +2026-02-17T13:40:05.453Z,LEG-WS-061,10.10.2.161,ACME\admin,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,200,28987,189897 +2026-02-12T12:16:22.059Z,LEG-WS-061,10.10.2.161,ACME\admin,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,301,12283,118719 +2026-02-13T04:36:36.289Z,LEG-WS-061,10.10.2.161,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,404,15064,279005 +2026-02-17T11:13:14.074Z,LEG-WS-061,10.10.2.161,ACME\admin,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,POST,403,11254,288725 +2026-02-13T03:03:17.148Z,LEG-WS-061,10.10.2.161,ACME\admin,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,404,32886,38230 +2026-02-10T13:11:56.608Z,LEG-WS-061,10.10.2.161,ACME\admin,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,POST,403,21210,343896 +2026-02-14T02:01:13.613Z,LEG-WS-061,10.10.2.161,ACME\admin,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,301,14640,462280 +2026-02-12T16:06:31.575Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,POST,301,25259,255714 +2026-02-15T07:56:07.002Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,POST,301,7008,445889 +2026-02-10T10:25:25.743Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,403,6010,332858 +2026-02-16T15:18:05.023Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,GET,200,33677,298511 +2026-02-13T09:28:12.939Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,GET,200,28195,37580 +2026-02-13T11:15:48.697Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,404,2198,113913 +2026-02-12T16:33:02.543Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://xvideos.com/,xvideos.com,BLOCKED,Piracy,GET,403,442,90526 +2026-02-19T12:27:20.996Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,GET,200,22653,202748 +2026-02-17T05:36:04.239Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,POST,200,41379,265674 +2026-02-17T05:44:28.361Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,POST,301,35114,424229 +2026-02-18T00:06:25.521Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,GET,404,48742,158420 +2026-02-18T03:26:00.214Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,GET,200,25788,473750 +2026-02-17T18:11:05.794Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,POST,200,19186,358447 +2026-02-12T07:44:39.682Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,200,10913,74760 +2026-02-13T10:42:47.106Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://fitgirl-repacks.site/,fitgirl-repacks.site,ALLOWED,Social Media,GET,200,41605,333264 +2026-02-11T15:54:34.745Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,POST,200,21840,402370 +2026-02-14T04:17:25.288Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,GET,200,34694,249505 +2026-02-17T09:38:47.960Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,200,38490,23384 +2026-02-20T03:10:26.727Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Productivity,GET,200,32983,3879 +2026-02-18T15:24:57.885Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,GET,200,1114,284214 +2026-02-15T09:16:49.963Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,200,11448,405870 +2026-02-16T23:43:40.716Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,301,14363,441123 +2026-02-19T19:46:06.891Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://www.facebook.com/,www.facebook.com,ALLOWED,Streaming,POST,301,32720,37217 +2026-02-19T03:20:38.027Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,200,7007,397283 +2026-02-10T20:44:17.371Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,403,36677,324742 +2026-02-12T00:11:00.353Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Cloud Services,GET,404,35127,157705 +2026-02-16T01:47:42.782Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://www.tiktok.com/,www.tiktok.com,ALLOWED,Streaming,GET,403,5228,206448 +2026-02-14T08:21:31.802Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,POST,200,12250,150215 +2026-02-13T14:09:04.608Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,200,39744,137610 +2026-02-19T20:52:02.066Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,GET,301,31016,425389 +2026-02-13T12:49:30.093Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,34900,388930 +2026-02-16T19:07:36.002Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,200,27818,467905 +2026-02-16T04:28:12.504Z,MKT-WS-062,10.10.3.162,ACME\hbrown,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,GET,301,4415,86973 +2026-02-10T11:36:50.254Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,200,21113,72091 +2026-02-16T13:45:06.608Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,200,12022,353561 +2026-02-14T22:03:34.714Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,POST,301,2091,350919 +2026-02-15T09:26:46.635Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,200,11476,129518 +2026-02-18T02:54:56.762Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,POST,200,7514,426773 +2026-02-18T15:57:58.446Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,200,6136,210750 +2026-02-12T09:31:09.426Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,GET,200,4244,319995 +2026-02-10T23:53:53.637Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,GET,403,15802,410251 +2026-02-14T23:43:07.931Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,GET,200,2244,497124 +2026-02-20T07:58:38.212Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://acme.local/api/v1/resource,acme.local,ALLOWED,Cloud Services,GET,200,45787,331741 +2026-02-14T00:19:35.618Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,403,46349,236609 +2026-02-11T13:41:13.023Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,POST,200,46942,369051 +2026-02-17T18:36:52.670Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,POST,200,30058,59567 +2026-02-12T20:49:22.493Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Productivity,GET,403,46544,476227 +2026-02-13T05:04:28.961Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,POST,200,46510,154413 +2026-02-16T15:28:28.178Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,403,14623,119659 +2026-02-17T18:46:14.559Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,200,18583,351001 +2026-02-20T10:40:42.631Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,200,1184,7386 +2026-02-19T19:38:42.913Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,404,46406,476756 +2026-02-16T12:08:29.327Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,404,49037,141153 +2026-02-19T03:51:28.978Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,GET,301,12408,122126 +2026-02-14T17:18:54.507Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,404,22465,346223 +2026-02-17T11:47:47.317Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,POST,404,44356,428459 +2026-02-10T18:03:10.180Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,403,15330,215470 +2026-02-10T09:41:34.323Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,POST,200,32414,311291 +2026-02-11T21:11:57.139Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,403,41671,7911 +2026-02-10T08:48:44.876Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,POST,200,14432,167263 +2026-02-20T05:44:43.071Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,GET,404,15652,141938 +2026-02-19T16:15:12.249Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,24250,60748 +2026-02-15T18:11:37.864Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,200,48430,419663 +2026-02-18T22:31:26.044Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,301,17161,42362 +2026-02-10T08:29:39.343Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://www.pornhub.com/,www.pornhub.com,ALLOWED,Shopping,GET,200,8109,428079 +2026-02-11T13:29:06.324Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,200,36647,36416 +2026-02-18T04:12:07.683Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,200,7121,233921 +2026-02-15T13:13:15.330Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,200,35890,486611 +2026-02-13T19:20:05.450Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,POST,301,3697,105705 +2026-02-10T12:08:50.013Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://open.spotify.com/,open.spotify.com,ALLOWED,Social Media,GET,301,735,286523 +2026-02-20T07:03:54.349Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,404,15312,387627 +2026-02-20T10:07:13.707Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,POST,200,27161,265580 +2026-02-17T20:08:40.840Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,POST,200,20260,472329 +2026-02-14T00:33:17.096Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,200,17980,262197 +2026-02-17T14:02:42.098Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,GET,403,33683,148868 +2026-02-12T08:20:26.327Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,POST,404,49774,215552 +2026-02-14T08:53:30.235Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,POST,200,17498,79411 +2026-02-18T07:31:16.813Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,200,18913,49427 +2026-02-13T04:43:22.834Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://open.spotify.com/,open.spotify.com,ALLOWED,Streaming,POST,200,29599,119000 +2026-02-17T03:21:19.308Z,EXEC-WS-063,10.10.1.163,ACME\dlee,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,200,37469,249752 +2026-02-20T09:35:40.354Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,301,35878,2389 +2026-02-15T18:54:14.779Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,200,24922,443415 +2026-02-13T11:58:11.449Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,200,48509,35428 +2026-02-13T06:20:46.386Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://www.linkedin.com/jobs/,www.linkedin.com/jobs,BLOCKED,Shopping,GET,403,49947,149254 +2026-02-11T11:01:19.191Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,403,16357,31557 +2026-02-19T22:05:00.004Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,GET,301,45477,176722 +2026-02-13T12:18:57.002Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://github.com/api/v1/resource,github.com,ALLOWED,Productivity,GET,301,38747,212190 +2026-02-13T21:33:11.703Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,200,36743,279284 +2026-02-16T09:25:00.469Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://www.netflix.com/,www.netflix.com,BLOCKED,Streaming,POST,403,27630,227750 +2026-02-13T21:20:32.858Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,GET,301,31110,493171 +2026-02-14T23:58:14.542Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,POST,200,33197,331091 +2026-02-19T06:55:00.683Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,GET,200,25335,101953 +2026-02-16T23:35:59.099Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,200,29565,418102 +2026-02-19T15:12:47.547Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,POST,403,43504,478968 +2026-02-12T13:35:34.577Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,200,21275,427593 +2026-02-13T02:26:59.735Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,200,2656,111403 +2026-02-20T11:25:45.099Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,GET,403,11445,10671 +2026-02-12T22:27:45.613Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,GET,200,1392,18257 +2026-02-19T14:39:13.046Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,200,31973,363095 +2026-02-14T02:28:01.107Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,POST,200,18187,150364 +2026-02-19T21:31:38.401Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Cloud Services,GET,301,16010,448253 +2026-02-20T07:25:32.276Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://www.ebay.com/,www.ebay.com,BLOCKED,Piracy,POST,403,35656,250142 +2026-02-11T17:49:43.656Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,403,17836,462360 +2026-02-20T02:12:09.662Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,GET,404,35192,76085 +2026-02-18T12:49:47.322Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,404,3955,94132 +2026-02-11T21:49:33.321Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,200,1147,439541 +2026-02-11T03:33:34.945Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Technology,GET,200,3039,191290 +2026-02-14T04:28:52.867Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,POST,403,18366,279512 +2026-02-19T10:43:01.627Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,GET,403,9642,449077 +2026-02-14T06:29:41.041Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,GET,200,40199,297127 +2026-02-20T16:45:08.899Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,GET,403,49376,499183 +2026-02-14T10:39:30.380Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,GET,200,15430,161821 +2026-02-20T15:27:52.724Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,GET,200,12308,7996 +2026-02-13T08:56:30.262Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,200,46301,39637 +2026-02-14T06:10:57.036Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,404,44642,112488 +2026-02-20T07:59:15.692Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,GET,200,5557,454338 +2026-02-15T16:31:40.419Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://thepiratebay.org/,thepiratebay.org,ALLOWED,Social Media,GET,200,38438,51449 +2026-02-11T00:51:54.731Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,200,33353,256825 +2026-02-18T10:20:03.296Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,200,47296,84272 +2026-02-16T17:43:42.677Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,POST,404,4657,427434 +2026-02-16T21:18:29.569Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,POST,301,30407,106438 +2026-02-13T02:57:29.587Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,200,23915,198479 +2026-02-12T14:38:49.753Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,POST,301,14888,57460 +2026-02-20T04:41:04.975Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,GET,403,3903,149968 +2026-02-20T04:31:01.825Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,GET,301,31653,240052 +2026-02-15T07:54:25.310Z,IT-WS-064,10.10.2.164,ACME\cjohnson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,200,31557,100607 +2026-02-18T11:36:39.352Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Productivity,GET,403,42851,325718 +2026-02-10T09:04:29.794Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,403,42186,71254 +2026-02-17T00:21:45.986Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,301,42832,55240 +2026-02-12T16:24:54.710Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,GET,403,47686,93652 +2026-02-17T19:13:10.954Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,GET,403,44709,18111 +2026-02-10T13:24:33.538Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,POST,403,12423,483717 +2026-02-15T23:51:06.367Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,403,20590,167534 +2026-02-16T15:28:07.168Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,301,31378,466259 +2026-02-20T10:37:25.616Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,301,28288,199464 +2026-02-17T15:14:15.006Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,24882,306588 +2026-02-11T21:53:59.624Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,200,31558,80608 +2026-02-18T16:15:01.753Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,403,44092,13626 +2026-02-16T08:22:29.953Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,GET,403,39881,353153 +2026-02-20T03:35:58.555Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,GET,200,25224,422133 +2026-02-18T16:25:04.027Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,200,15373,125758 +2026-02-19T05:16:16.976Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,POST,403,16244,355364 +2026-02-13T17:07:32.207Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,404,22239,188006 +2026-02-17T08:53:43.391Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://www.bet365.com/,www.bet365.com,BLOCKED,Piracy,POST,403,2112,335700 +2026-02-17T17:52:00.818Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,GET,403,28194,285895 +2026-02-11T02:37:51.963Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,GET,404,17202,116163 +2026-02-19T10:05:35.829Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://www.ebay.com/,www.ebay.com,BLOCKED,Shopping,GET,403,16319,336663 +2026-02-12T15:55:03.374Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Cloud Services,GET,200,39810,382186 +2026-02-16T15:45:01.320Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,200,17103,166010 +2026-02-12T05:33:31.655Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,200,26894,392593 +2026-02-13T05:14:11.928Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,200,33707,250484 +2026-02-19T02:18:48.329Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,404,30213,432753 +2026-02-18T11:14:51.522Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,GET,200,25084,259330 +2026-02-15T23:00:54.319Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,200,17600,110011 +2026-02-20T00:33:24.000Z,HR-WS-065,10.10.3.165,ACME\fthompson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,GET,403,49185,355749 +2026-02-10T22:22:24.379Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,200,4669,371583 +2026-02-15T03:02:21.470Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,GET,200,18730,224728 +2026-02-19T10:34:53.725Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,GET,200,28957,77027 +2026-02-19T05:23:59.826Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,200,18938,467601 +2026-02-19T00:23:18.555Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,GET,200,49092,464087 +2026-02-13T01:56:13.935Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,GET,200,18793,319402 +2026-02-10T23:16:09.897Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,403,28855,247566 +2026-02-14T10:30:38.215Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,GET,404,46853,358067 +2026-02-18T12:32:41.412Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,POST,403,25708,43259 +2026-02-20T08:36:50.733Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,POST,301,13091,446739 +2026-02-16T13:47:16.303Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,301,13536,460320 +2026-02-18T03:23:11.397Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,403,20893,439684 +2026-02-17T01:09:51.183Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,200,21359,183322 +2026-02-18T08:00:36.776Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,POST,404,5928,407052 +2026-02-13T15:39:42.007Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://onlyfans.com/,onlyfans.com,ALLOWED,Adult,GET,200,1898,167160 +2026-02-18T21:34:25.182Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,200,18409,144425 +2026-02-20T04:43:27.890Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,200,14478,161758 +2026-02-15T20:44:37.823Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,POST,404,16853,477407 +2026-02-11T21:27:09.797Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,5726,38135 +2026-02-13T22:15:10.297Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,403,43466,219075 +2026-02-11T05:31:08.333Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,GET,403,25402,159139 +2026-02-14T03:02:15.822Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,POST,404,18511,314870 +2026-02-17T03:34:56.830Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,POST,200,24059,282301 +2026-02-13T18:41:10.986Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,200,38556,84728 +2026-02-18T03:50:24.223Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,403,49301,253588 +2026-02-18T03:14:07.169Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Productivity,POST,404,37014,26687 +2026-02-11T17:01:17.444Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,200,11532,209020 +2026-02-15T07:01:05.088Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,POST,200,35395,41060 +2026-02-18T14:33:51.187Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,POST,200,18116,485053 +2026-02-10T18:21:58.077Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,POST,403,11231,315632 +2026-02-19T05:38:26.736Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://google.com/api/v1/resource,google.com,ALLOWED,Business,POST,200,48693,246986 +2026-02-10T09:03:44.177Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,GET,200,43332,46870 +2026-02-12T13:21:18.171Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,GET,301,7136,190282 +2026-02-17T16:37:26.834Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,301,2221,476316 +2026-02-20T07:17:15.994Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,12086,124350 +2026-02-15T04:19:49.081Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,GET,200,44926,275487 +2026-02-19T15:44:49.266Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,200,20336,201734 +2026-02-15T21:42:10.048Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,POST,301,34312,438094 +2026-02-20T04:47:51.971Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,404,25340,58074 +2026-02-11T18:07:46.842Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,200,7459,176191 +2026-02-18T03:18:45.761Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Cloud Services,GET,200,21684,268390 +2026-02-19T11:33:03.325Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Business,GET,200,27561,115094 +2026-02-19T15:13:05.975Z,FIN-WS-066,10.10.1.166,ACME\cjohnson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,GET,301,25615,459012 +2026-02-12T22:24:15.630Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,200,3836,439680 +2026-02-14T22:10:01.583Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,GET,200,26461,412634 +2026-02-10T08:20:12.507Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,404,17017,486356 +2026-02-15T18:46:02.231Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,301,30777,401853 +2026-02-19T08:31:32.921Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,POST,200,24626,372045 +2026-02-20T09:45:26.378Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,200,13417,307178 +2026-02-20T12:34:11.175Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,GET,200,33712,251469 +2026-02-11T07:23:58.336Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,POST,403,14044,78098 +2026-02-13T18:30:31.345Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,200,12776,79631 +2026-02-14T00:56:51.026Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,POST,200,16982,260322 +2026-02-18T06:19:19.751Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,GET,200,42322,132059 +2026-02-10T16:24:54.166Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://www.shein.com/,www.shein.com,BLOCKED,Shopping,GET,403,28946,275790 +2026-02-17T22:30:57.038Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,404,19077,277672 +2026-02-20T02:10:25.416Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,GET,403,20718,232419 +2026-02-16T21:25:58.298Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,GET,200,7577,413699 +2026-02-16T01:05:40.248Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,200,31988,155781 +2026-02-13T13:25:50.460Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,POST,200,18843,464506 +2026-02-16T10:49:54.908Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,POST,200,31784,347851 +2026-02-16T19:31:58.038Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,GET,403,9746,82899 +2026-02-13T07:23:07.533Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://fitgirl-repacks.site/,fitgirl-repacks.site,ALLOWED,Streaming,GET,200,4234,193854 +2026-02-18T20:52:04.423Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,200,16862,182012 +2026-02-19T11:32:06.618Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,GET,200,1044,180315 +2026-02-19T19:56:43.461Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,POST,301,39048,240842 +2026-02-14T15:22:22.509Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,404,22478,426047 +2026-02-18T09:52:15.416Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,GET,200,28684,75702 +2026-02-15T18:16:23.991Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,GET,200,37875,166701 +2026-02-14T01:06:43.706Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://steamcommunity.com/,steamcommunity.com,BLOCKED,Piracy,GET,403,38001,252583 +2026-02-12T20:02:12.467Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,301,41806,392583 +2026-02-15T22:51:38.559Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,POST,404,39991,4584 +2026-02-15T17:30:45.571Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,301,13867,38713 +2026-02-14T12:12:15.482Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,GET,200,23834,5256 +2026-02-17T02:05:19.101Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,POST,403,22809,66325 +2026-02-13T21:33:20.658Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,301,14145,253203 +2026-02-18T17:27:30.050Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Productivity,GET,404,14594,279648 +2026-02-13T19:57:51.333Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,404,22980,102103 +2026-02-11T21:24:24.471Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,POST,403,24416,410351 +2026-02-16T04:01:34.725Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,POST,200,16315,47553 +2026-02-13T17:45:17.991Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Productivity,GET,200,24389,36420 +2026-02-20T12:33:30.269Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,200,28215,240562 +2026-02-14T04:16:10.644Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,404,1025,245511 +2026-02-16T14:59:36.623Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,POST,404,32300,328022 +2026-02-11T03:02:15.583Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,GET,200,47989,466686 +2026-02-12T21:21:01.960Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,GET,404,7751,16732 +2026-02-18T05:27:16.786Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Technology,GET,200,25289,473819 +2026-02-18T21:37:04.920Z,SLS-WS-067,10.10.2.167,ACME\agarcia,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,200,41933,111623 +2026-02-20T02:48:30.781Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,301,28148,85087 +2026-02-10T16:15:35.836Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,GET,403,9100,106626 +2026-02-17T02:35:44.985Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,POST,200,35147,182166 +2026-02-14T15:26:41.787Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://www.amazon.com/,www.amazon.com,ALLOWED,Social Media,GET,200,34037,8285 +2026-02-11T13:05:38.735Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,GET,200,20724,494945 +2026-02-20T07:26:51.633Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,301,33760,26612 +2026-02-19T19:06:36.050Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Cloud Services,GET,404,39447,29042 +2026-02-12T16:47:44.917Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,200,656,114691 +2026-02-15T06:56:32.046Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,301,36455,71868 +2026-02-18T00:13:05.311Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://steamcommunity.com/,steamcommunity.com,ALLOWED,Social Media,GET,403,44101,123352 +2026-02-17T21:26:11.723Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Productivity,GET,200,47680,245569 +2026-02-20T09:33:33.692Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,GET,404,42316,176448 +2026-02-14T12:38:30.979Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,403,39702,217170 +2026-02-14T08:21:39.854Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://www.facebook.com/,www.facebook.com,ALLOWED,Gambling,POST,200,48496,319156 +2026-02-18T18:03:08.151Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,GET,404,7835,457683 +2026-02-14T23:25:38.520Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://steamcommunity.com/,steamcommunity.com,BLOCKED,Shopping,GET,403,34215,153622 +2026-02-18T21:01:35.392Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,403,19533,336224 +2026-02-13T15:34:33.401Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,POST,404,14079,637 +2026-02-20T16:45:50.371Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,200,43512,156178 +2026-02-10T09:38:48.649Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,POST,403,33225,192905 +2026-02-13T06:20:36.945Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,GET,301,19987,8074 +2026-02-18T09:12:57.241Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://thepiratebay.org/,thepiratebay.org,BLOCKED,Social Media,GET,403,47874,288534 +2026-02-10T11:17:18.275Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Productivity,GET,200,14358,65483 +2026-02-10T21:17:52.485Z,ENG-WS-068,10.10.3.168,ACME\cjohnson,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,POST,301,49581,236865 +2026-02-20T06:28:26.406Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,POST,404,21227,231950 +2026-02-20T06:18:04.084Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,GET,403,20974,257304 +2026-02-13T12:15:47.699Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,404,3612,147544 +2026-02-14T12:58:37.673Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,GET,200,6871,3228 +2026-02-14T06:10:38.641Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,403,15884,481758 +2026-02-12T04:19:36.077Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,200,4195,146741 +2026-02-16T04:04:33.771Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,301,32702,464436 +2026-02-10T23:22:12.295Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,200,9363,19830 +2026-02-12T09:04:31.961Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,POST,403,29056,92111 +2026-02-12T06:33:22.809Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,200,29846,294868 +2026-02-15T00:05:43.689Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,200,25483,228084 +2026-02-13T11:10:47.317Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,301,578,163468 +2026-02-12T13:31:30.752Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,404,6380,46929 +2026-02-15T19:16:28.789Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,404,27359,69047 +2026-02-13T04:15:36.407Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,403,18251,460452 +2026-02-16T10:29:45.246Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,301,42346,71112 +2026-02-17T07:59:30.387Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,200,40897,300212 +2026-02-13T17:27:08.040Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,200,46750,228749 +2026-02-18T18:34:59.961Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,200,17233,397041 +2026-02-13T00:54:46.876Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,GET,200,36208,176903 +2026-02-16T10:19:23.235Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,200,24272,353462 +2026-02-17T13:24:30.176Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,POST,301,25567,111516 +2026-02-17T08:11:07.902Z,LEG-WS-069,10.10.1.169,ACME\bwilson,https://1337x.to/,1337x.to,ALLOWED,Piracy,GET,404,30882,478557 +2026-02-13T04:32:27.896Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,403,20046,192677 +2026-02-11T05:57:25.071Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,GET,200,24550,242277 +2026-02-15T20:49:09.688Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,403,30753,54574 +2026-02-17T22:23:03.794Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,200,26453,242094 +2026-02-17T09:18:17.199Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,200,17001,230452 +2026-02-13T06:00:35.514Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,200,27136,229351 +2026-02-20T11:32:27.731Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,301,40313,273084 +2026-02-15T23:42:23.360Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,7235,188865 +2026-02-10T10:24:32.037Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,301,43311,338651 +2026-02-11T12:59:15.889Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,404,43241,113769 +2026-02-11T20:14:05.775Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Business,GET,301,39603,349555 +2026-02-13T15:41:53.301Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,200,22830,47898 +2026-02-16T16:59:32.548Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,200,11993,438899 +2026-02-19T21:24:51.660Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,403,49635,400588 +2026-02-12T10:50:33.924Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,200,29619,329358 +2026-02-10T10:21:25.706Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,POST,200,49850,105180 +2026-02-11T00:59:26.294Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,200,35646,231843 +2026-02-14T06:52:27.334Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,403,513,76877 +2026-02-16T07:26:39.388Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,200,49154,265556 +2026-02-11T17:18:22.673Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Business,GET,200,6359,226526 +2026-02-17T22:13:33.442Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,200,31195,450820 +2026-02-16T19:46:45.570Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,GET,301,36799,301209 +2026-02-15T00:57:01.134Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,GET,404,17562,130932 +2026-02-10T14:01:59.993Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,POST,200,20449,364855 +2026-02-19T11:24:08.191Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,GET,403,16946,418788 +2026-02-13T06:14:00.992Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Cloud Services,POST,200,47939,371793 +2026-02-20T03:57:44.085Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Business,GET,404,13252,86831 +2026-02-15T21:56:06.493Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,GET,200,11691,185667 +2026-02-20T17:53:57.631Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://discord.gg/,discord.gg,ALLOWED,Gaming,POST,200,32613,281945 +2026-02-19T22:47:44.868Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,GET,403,30672,417301 +2026-02-19T10:52:54.375Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,404,49808,422950 +2026-02-18T13:52:31.373Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,POST,403,30968,22116 +2026-02-13T15:38:11.949Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,POST,301,10146,221072 +2026-02-12T18:05:04.777Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Technology,GET,200,28716,176377 +2026-02-16T21:56:30.341Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Cloud Services,GET,200,34523,371087 +2026-02-13T17:17:01.085Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,POST,404,23012,201052 +2026-02-19T04:09:08.264Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://www.reddit.com/,www.reddit.com,BLOCKED,Shopping,GET,403,9053,162838 +2026-02-18T05:31:57.147Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,301,18928,231305 +2026-02-20T05:45:08.190Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,POST,404,11970,23767 +2026-02-12T00:28:19.032Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,301,35548,445660 +2026-02-10T23:15:13.702Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,POST,301,21950,234305 +2026-02-11T16:10:25.413Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,GET,403,38144,10897 +2026-02-19T14:01:33.139Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,403,7247,300325 +2026-02-12T20:45:28.073Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,301,3992,359351 +2026-02-12T11:09:11.984Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,POST,200,1634,273263 +2026-02-20T08:41:09.164Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,GET,200,32005,25601 +2026-02-19T13:22:53.018Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,20267,347575 +2026-02-12T21:48:00.721Z,MKT-WS-070,10.10.2.170,ACME\jsmith,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,404,38343,345014 +2026-02-10T21:58:48.623Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,GET,404,25189,482622 +2026-02-17T09:17:33.577Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,404,25757,216480 +2026-02-11T07:14:05.608Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,403,43385,450361 +2026-02-17T09:48:08.402Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,GET,200,28682,281367 +2026-02-19T06:17:06.177Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,POST,200,1630,485019 +2026-02-12T16:09:57.121Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,POST,301,28945,185347 +2026-02-11T11:14:29.436Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,POST,301,48170,334717 +2026-02-19T15:02:01.594Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,301,13375,3813 +2026-02-12T00:51:14.298Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,GET,403,43661,425890 +2026-02-18T15:04:20.864Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,GET,403,22279,202319 +2026-02-18T16:33:01.837Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,200,694,134067 +2026-02-12T13:05:28.023Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,403,11107,134170 +2026-02-13T04:25:08.914Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,GET,403,8812,4126 +2026-02-11T11:04:15.411Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Productivity,GET,404,44027,277719 +2026-02-16T16:57:38.595Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://draftkings.com/,draftkings.com,ALLOWED,Shopping,GET,200,47370,229388 +2026-02-17T01:25:52.135Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Cloud Services,POST,200,32089,144972 +2026-02-17T06:55:36.365Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,404,12067,486446 +2026-02-16T16:55:44.879Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Technology,GET,403,32243,495827 +2026-02-16T10:20:51.303Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,POST,301,8867,344124 +2026-02-19T20:47:18.828Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,POST,301,6945,167940 +2026-02-16T04:08:57.459Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,GET,200,22406,404186 +2026-02-15T21:00:53.415Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://www.bet365.com/,www.bet365.com,ALLOWED,Gambling,GET,301,5783,85573 +2026-02-13T17:41:16.460Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,200,7037,374384 +2026-02-20T11:52:07.717Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,301,15883,236317 +2026-02-13T06:27:42.711Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,403,32434,232702 +2026-02-16T01:34:17.883Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Technology,POST,200,47310,69873 +2026-02-16T02:18:35.235Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://xvideos.com/,xvideos.com,BLOCKED,Piracy,POST,403,22735,125011 +2026-02-16T03:28:04.975Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Cloud Services,GET,404,31918,351636 +2026-02-14T18:51:18.212Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Technology,POST,200,24707,6359 +2026-02-11T23:36:13.933Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://www.pornhub.com/,www.pornhub.com,ALLOWED,Piracy,GET,200,17523,456226 +2026-02-15T03:09:06.821Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://github.com/api/v1/resource,github.com,ALLOWED,Technology,GET,404,24700,421988 +2026-02-13T20:01:46.129Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,GET,200,26670,487421 +2026-02-11T05:53:02.171Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,POST,200,31330,295129 +2026-02-13T03:25:55.452Z,EXEC-WS-071,10.10.3.171,ACME\idavis,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,200,32854,492448 +2026-02-12T02:04:11.347Z,IT-WS-072,10.10.1.172,ACME\admin,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,POST,301,22392,76823 +2026-02-11T13:59:51.877Z,IT-WS-072,10.10.1.172,ACME\admin,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,403,38436,208286 +2026-02-17T22:05:59.429Z,IT-WS-072,10.10.1.172,ACME\admin,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,POST,200,8481,16086 +2026-02-19T21:39:22.974Z,IT-WS-072,10.10.1.172,ACME\admin,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,403,45913,452584 +2026-02-13T15:29:10.185Z,IT-WS-072,10.10.1.172,ACME\admin,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,200,35244,20873 +2026-02-14T23:02:41.507Z,IT-WS-072,10.10.1.172,ACME\admin,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Technology,GET,301,22212,344553 +2026-02-14T15:09:55.036Z,IT-WS-072,10.10.1.172,ACME\admin,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,200,35454,325107 +2026-02-19T15:00:05.276Z,IT-WS-072,10.10.1.172,ACME\admin,https://pokerstars.com/,pokerstars.com,ALLOWED,Adult,GET,200,34643,459297 +2026-02-16T18:26:13.105Z,IT-WS-072,10.10.1.172,ACME\admin,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,POST,403,4105,332011 +2026-02-10T08:26:18.373Z,IT-WS-072,10.10.1.172,ACME\admin,https://www.amazon.com/,www.amazon.com,ALLOWED,Streaming,POST,403,32265,392525 +2026-02-11T06:19:04.684Z,IT-WS-072,10.10.1.172,ACME\admin,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Business,POST,403,46988,245962 +2026-02-18T01:55:49.224Z,IT-WS-072,10.10.1.172,ACME\admin,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,301,15704,147930 +2026-02-12T06:38:15.989Z,IT-WS-072,10.10.1.172,ACME\admin,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,301,45934,308154 +2026-02-19T22:49:27.322Z,IT-WS-072,10.10.1.172,ACME\admin,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,403,47386,59127 +2026-02-19T11:38:57.466Z,IT-WS-072,10.10.1.172,ACME\admin,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,404,24059,236723 +2026-02-18T21:03:44.838Z,IT-WS-072,10.10.1.172,ACME\admin,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,301,2666,146102 +2026-02-17T07:29:57.160Z,IT-WS-072,10.10.1.172,ACME\admin,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,GET,301,14160,385940 +2026-02-13T22:18:47.744Z,IT-WS-072,10.10.1.172,ACME\admin,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,GET,403,28652,465070 +2026-02-15T13:15:20.436Z,IT-WS-072,10.10.1.172,ACME\admin,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Business,POST,404,1116,64233 +2026-02-12T19:29:04.989Z,IT-WS-072,10.10.1.172,ACME\admin,https://github.com/api/v1/resource,github.com,ALLOWED,Business,GET,200,13415,452023 +2026-02-14T08:47:31.007Z,IT-WS-072,10.10.1.172,ACME\admin,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,301,46804,90744 +2026-02-10T13:20:53.061Z,IT-WS-072,10.10.1.172,ACME\admin,https://github.com/api/v1/resource,github.com,ALLOWED,Cloud Services,GET,403,35061,166991 +2026-02-14T08:01:37.039Z,IT-WS-072,10.10.1.172,ACME\admin,https://google.com/api/v1/resource,google.com,ALLOWED,Productivity,GET,404,5903,94171 +2026-02-14T00:55:18.938Z,IT-WS-072,10.10.1.172,ACME\admin,https://thepiratebay.org/,thepiratebay.org,BLOCKED,Streaming,GET,403,22953,137597 +2026-02-17T17:44:15.241Z,IT-WS-072,10.10.1.172,ACME\admin,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,GET,403,43437,126208 +2026-02-17T02:52:38.599Z,IT-WS-072,10.10.1.172,ACME\admin,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,200,10721,291681 +2026-02-19T15:18:40.518Z,IT-WS-072,10.10.1.172,ACME\admin,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,POST,200,1996,90960 +2026-02-15T03:45:14.902Z,IT-WS-072,10.10.1.172,ACME\admin,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Cloud Services,POST,404,19732,42680 +2026-02-14T16:40:18.479Z,IT-WS-072,10.10.1.172,ACME\admin,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,POST,403,2437,183910 +2026-02-18T14:29:06.985Z,IT-WS-072,10.10.1.172,ACME\admin,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,404,28343,79885 +2026-02-11T12:04:46.712Z,IT-WS-072,10.10.1.172,ACME\admin,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Technology,GET,200,3430,329455 +2026-02-12T00:18:35.866Z,IT-WS-072,10.10.1.172,ACME\admin,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,200,14137,55740 +2026-02-15T19:02:14.868Z,IT-WS-072,10.10.1.172,ACME\admin,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,301,5191,335895 +2026-02-16T05:34:34.139Z,IT-WS-072,10.10.1.172,ACME\admin,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,POST,200,27196,426751 +2026-02-17T06:10:01.489Z,IT-WS-072,10.10.1.172,ACME\admin,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,200,21886,61775 +2026-02-13T05:22:57.711Z,IT-WS-072,10.10.1.172,ACME\admin,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,301,49297,347708 +2026-02-14T12:12:16.939Z,IT-WS-072,10.10.1.172,ACME\admin,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,POST,301,40984,421207 +2026-02-11T06:20:05.954Z,IT-WS-072,10.10.1.172,ACME\admin,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,200,18991,267169 +2026-02-19T08:25:54.176Z,IT-WS-072,10.10.1.172,ACME\admin,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,200,14342,180623 +2026-02-12T09:16:06.706Z,IT-WS-072,10.10.1.172,ACME\admin,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Business,GET,200,12704,476825 +2026-02-16T18:11:36.844Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Technology,POST,200,26531,458751 +2026-02-10T20:32:40.613Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,301,35045,90258 +2026-02-14T17:42:31.499Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,404,6159,123046 +2026-02-13T06:14:04.224Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,404,19037,19181 +2026-02-19T16:14:45.878Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,200,48641,83852 +2026-02-17T00:27:46.377Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,403,17748,415963 +2026-02-14T22:34:00.580Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,200,37714,355371 +2026-02-17T01:29:52.154Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,GET,404,45785,54590 +2026-02-11T00:24:48.356Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,POST,200,28319,113956 +2026-02-14T06:11:49.411Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,404,33422,462759 +2026-02-14T23:28:24.345Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,GET,200,7181,2082 +2026-02-18T23:06:26.928Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,GET,200,18334,22328 +2026-02-19T19:26:03.236Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Business,GET,301,31642,367302 +2026-02-11T11:59:06.809Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Productivity,GET,200,17692,414096 +2026-02-12T10:19:57.430Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://www.bet365.com/,www.bet365.com,ALLOWED,Gambling,GET,404,18442,375006 +2026-02-19T22:31:34.568Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Technology,POST,200,42052,441396 +2026-02-17T12:43:23.454Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Cloud Services,POST,200,14142,426670 +2026-02-11T16:46:11.973Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://www.facebook.com/,www.facebook.com,BLOCKED,Streaming,GET,403,4376,132325 +2026-02-10T13:38:11.029Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Technology,GET,404,49786,438300 +2026-02-10T22:02:00.693Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://google.com/api/v1/resource,google.com,ALLOWED,Technology,GET,200,6698,435310 +2026-02-18T20:01:41.399Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,200,34025,219172 +2026-02-18T03:40:38.853Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://www.reddit.com/,www.reddit.com,BLOCKED,Streaming,POST,403,26278,228254 +2026-02-19T01:09:38.583Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,404,22827,222242 +2026-02-20T15:08:20.176Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://store.steampowered.com/,store.steampowered.com,ALLOWED,Shopping,POST,200,40707,47852 +2026-02-18T21:51:26.263Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,200,43325,261220 +2026-02-11T12:39:44.369Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,GET,403,4632,400887 +2026-02-19T01:19:11.315Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Cloud Services,GET,301,28981,199543 +2026-02-20T04:19:09.735Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://thepiratebay.org/,thepiratebay.org,ALLOWED,Social Media,POST,200,12690,303784 +2026-02-14T21:43:34.670Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,GET,301,22907,94197 +2026-02-10T19:47:32.482Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Productivity,POST,301,28428,5480 +2026-02-18T06:02:49.072Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Cloud Services,GET,200,28038,182970 +2026-02-18T14:28:41.633Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,POST,200,1407,466724 +2026-02-10T13:49:16.671Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,200,9080,304400 +2026-02-15T20:15:58.270Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Cloud Services,GET,301,28778,265199 +2026-02-11T16:27:19.003Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Productivity,POST,403,23270,283426 +2026-02-11T20:31:45.201Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,POST,403,22371,296754 +2026-02-10T22:11:28.540Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,GET,404,25136,178976 +2026-02-17T21:39:16.031Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Cloud Services,GET,404,23681,165771 +2026-02-17T00:44:28.853Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Productivity,POST,200,49418,124226 +2026-02-19T19:38:43.637Z,HR-WS-073,10.10.2.173,ACME\gwhite,https://www.ebay.com/,www.ebay.com,ALLOWED,Shopping,POST,301,28314,53359 +2026-02-14T10:01:42.956Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,301,43778,221798 +2026-02-18T03:36:01.797Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Business,GET,200,5629,155750 +2026-02-19T09:28:36.696Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,403,11543,197602 +2026-02-15T18:33:18.759Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://acme.local/api/v1/resource,acme.local,ALLOWED,Productivity,GET,200,44821,215600 +2026-02-19T06:49:42.733Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,GET,301,40513,125410 +2026-02-11T16:13:48.214Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,POST,200,18503,312616 +2026-02-11T11:58:18.808Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,404,42265,219436 +2026-02-18T12:07:34.843Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,200,31784,346491 +2026-02-19T13:13:11.673Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,301,10906,177560 +2026-02-10T18:04:18.250Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,404,23898,115012 +2026-02-13T19:40:00.119Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,39149,130518 +2026-02-17T14:23:38.935Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,GET,200,36003,427591 +2026-02-11T22:52:00.245Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,200,46547,123338 +2026-02-11T01:39:50.723Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Technology,GET,200,38369,62461 +2026-02-10T15:56:05.666Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,POST,200,2350,2972 +2026-02-15T14:19:49.708Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,301,18117,334979 +2026-02-13T16:42:50.393Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,200,2218,449188 +2026-02-16T08:56:04.058Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://google.com/api/v1/resource,google.com,ALLOWED,Business,GET,301,26018,27221 +2026-02-14T04:43:33.799Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,GET,404,23428,346546 +2026-02-17T05:23:14.577Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,200,11429,115953 +2026-02-14T18:36:16.888Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://time.windows.com/api/v1/resource,time.windows.com,ALLOWED,Cloud Services,GET,301,26630,349341 +2026-02-20T10:52:35.585Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,200,16668,15723 +2026-02-11T15:16:36.055Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Productivity,POST,301,19932,288998 +2026-02-10T11:31:08.781Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Technology,GET,404,13273,105038 +2026-02-12T21:20:21.915Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Technology,POST,403,44924,392128 +2026-02-15T11:05:35.528Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,404,4783,124574 +2026-02-16T13:40:37.027Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://cloudflare.com/api/v1/resource,cloudflare.com,ALLOWED,Cloud Services,GET,200,45999,210594 +2026-02-17T11:27:27.452Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Technology,POST,403,48409,139862 +2026-02-18T10:29:34.530Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://login.microsoftonline.com/api/v1/resource,login.microsoftonline.com,ALLOWED,Business,GET,200,26925,25223 +2026-02-12T22:48:07.694Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,GET,200,13396,467209 +2026-02-15T16:36:46.556Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,26347,243488 +2026-02-13T19:38:53.234Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,404,36839,42930 +2026-02-10T17:48:29.733Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Business,POST,403,35631,54370 +2026-02-12T04:11:54.328Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,200,8325,314589 +2026-02-14T06:10:16.488Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Cloud Services,GET,403,45063,95705 +2026-02-20T06:01:28.353Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,18323,181665 +2026-02-20T11:51:08.290Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://acme.local/api/v1/resource,acme.local,ALLOWED,Cloud Services,GET,404,7122,35959 +2026-02-19T18:52:47.577Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://windowsupdate.com/api/v1/resource,windowsupdate.com,ALLOWED,Productivity,GET,301,31416,182365 +2026-02-20T15:07:17.302Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://google.com/api/v1/resource,google.com,ALLOWED,Cloud Services,GET,403,47962,56716 +2026-02-20T14:34:46.178Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Business,GET,200,1708,107858 +2026-02-19T11:20:57.380Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Cloud Services,GET,200,40544,334374 +2026-02-12T22:07:22.811Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,200,38050,231198 +2026-02-15T22:48:25.875Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Cloud Services,GET,200,45237,351443 +2026-02-11T12:16:15.880Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Technology,GET,200,37942,16243 +2026-02-11T20:18:13.975Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,POST,200,37049,374782 +2026-02-16T15:17:38.084Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://www.glassdoor.com/,www.glassdoor.com,ALLOWED,Social Media,POST,301,18018,354015 +2026-02-10T11:14:43.413Z,FIN-WS-074,10.10.3.174,ACME\gwhite,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Business,GET,403,47523,189440 +2026-02-20T06:05:14.260Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Cloud Services,GET,301,30979,108144 +2026-02-16T16:15:16.916Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://www.tiktok.com/,www.tiktok.com,ALLOWED,Gambling,POST,301,49115,466509 +2026-02-18T18:18:53.273Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Business,GET,200,16637,183400 +2026-02-13T03:24:33.935Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,403,2895,459399 +2026-02-13T16:47:22.031Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Productivity,GET,301,17872,128923 +2026-02-14T18:32:00.273Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://googleapis.com/api/v1/resource,googleapis.com,ALLOWED,Business,GET,200,25767,63827 +2026-02-20T17:30:27.883Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://npmjs.com/api/v1/resource,npmjs.com,ALLOWED,Business,GET,200,4208,422590 +2026-02-19T16:07:20.793Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Productivity,GET,301,3272,444796 +2026-02-20T00:00:41.471Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://akamai.net/api/v1/resource,akamai.net,ALLOWED,Technology,GET,200,47816,497507 +2026-02-18T16:08:45.215Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,GET,200,14668,457210 +2026-02-17T20:14:39.334Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://xvideos.com/,xvideos.com,BLOCKED,Adult,GET,403,13934,499017 +2026-02-20T06:26:33.365Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,200,31233,14229 +2026-02-11T09:02:19.125Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://file-01.acme.local/api/v1/resource,file-01.acme.local,ALLOWED,Cloud Services,GET,404,36191,207295 +2026-02-18T03:07:42.946Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,200,42633,327339 +2026-02-13T01:28:37.956Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,POST,404,14731,48813 +2026-02-17T06:45:52.167Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://teams.microsoft.com/api/v1/resource,teams.microsoft.com,ALLOWED,Productivity,GET,200,40330,348206 +2026-02-13T08:49:57.335Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Productivity,GET,200,9297,53111 +2026-02-14T17:52:20.874Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Technology,GET,200,2528,488759 +2026-02-19T08:30:42.375Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://xvideos.com/,xvideos.com,ALLOWED,Gambling,GET,403,6814,319873 +2026-02-13T19:43:13.254Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Technology,GET,301,32892,309861 +2026-02-19T16:49:19.153Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Productivity,POST,200,34569,419665 +2026-02-13T09:46:38.943Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://acme.local/api/v1/resource,acme.local,ALLOWED,Business,GET,301,34277,226858 +2026-02-11T11:09:08.243Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Productivity,POST,301,36516,477759 +2026-02-12T08:46:05.871Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Business,GET,404,30331,124206 +2026-02-17T15:28:57.921Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://cdn.jsdelivr.net/api/v1/resource,cdn.jsdelivr.net,ALLOWED,Technology,GET,404,42214,436243 +2026-02-16T22:19:28.567Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://outlook.office365.com/api/v1/resource,outlook.office365.com,ALLOWED,Technology,GET,200,29645,229285 +2026-02-11T09:42:08.085Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://aws.amazon.com/api/v1/resource,aws.amazon.com,ALLOWED,Business,GET,200,11818,60245 +2026-02-20T13:20:07.163Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Technology,POST,200,8299,494681 +2026-02-17T11:26:47.247Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://pypi.org/api/v1/resource,pypi.org,ALLOWED,Productivity,POST,200,28377,63364 +2026-02-14T17:31:09.624Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://acme.sharepoint.com/api/v1/resource,acme.sharepoint.com,ALLOWED,Business,POST,200,2254,432864 +2026-02-15T10:35:48.548Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://stackoverflow.com/api/v1/resource,stackoverflow.com,ALLOWED,Business,GET,200,28588,107516 +2026-02-14T14:56:25.043Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://www.bet365.com/,www.bet365.com,ALLOWED,Social Media,GET,403,16192,281683 +2026-02-19T23:04:33.615Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://acme.local/api/v1/resource,acme.local,ALLOWED,Technology,GET,200,43667,292813 +2026-02-19T10:19:30.271Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://exch-01.acme.local/api/v1/resource,exch-01.acme.local,ALLOWED,Business,POST,200,31221,60987 +2026-02-12T18:25:30.087Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Productivity,GET,301,14089,18993 +2026-02-14T20:58:11.224Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://graph.microsoft.com/api/v1/resource,graph.microsoft.com,ALLOWED,Cloud Services,POST,404,39791,318847 +2026-02-11T07:27:53.258Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Business,GET,200,49843,58610 +2026-02-19T16:53:41.684Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://update.microsoft.com/api/v1/resource,update.microsoft.com,ALLOWED,Cloud Services,GET,200,1770,319812 +2026-02-13T19:41:58.999Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://dc-01.acme.local/api/v1/resource,dc-01.acme.local,ALLOWED,Technology,GET,200,14606,83194 +2026-02-13T04:40:03.415Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://www.facebook.com/,www.facebook.com,ALLOWED,Gaming,GET,301,13339,489888 +2026-02-19T14:57:55.567Z,SLS-WS-075,10.10.1.175,ACME\jsmith,https://dc-02.acme.local/api/v1/resource,dc-02.acme.local,ALLOWED,Technology,GET,301,23680,31504 diff --git a/backend/tests/test_csvs/12_file_listing.csv b/backend/tests/test_csvs/12_file_listing.csv new file mode 100644 index 0000000..ef62fc6 --- /dev/null +++ b/backend/tests/test_csvs/12_file_listing.csv @@ -0,0 +1,422 @@ +Hostname,SourceIP,FullPath,FileName,Size,MD5,SHA256,MTime,CTime,Username,OS +HR-WS-001,10.10.2.101,C:\Users\jsmith\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,d9398a9cb083e44ca369d0e0a23f3dc821e10a187d83b67ddd039c8ba3a9116d,2026-02-16T13:19:03.752Z,2026-02-20T05:28:53.611Z,ACME\jsmith,Windows 11 Enterprise +HR-WS-001,10.10.2.101,C:\Users\jsmith\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,93ff71317e2633263f047c0b9c8e432e31a4d326f622a0e0c0991c0865d85678,2026-02-17T16:01:54.830Z,2026-02-19T13:46:11.397Z,ACME\jsmith,Windows 11 Enterprise +HR-WS-001,10.10.2.101,C:\Users\jsmith\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,1529047f20932e75ce4ebf63126bf597c5e8091f4e9ba80da6548e6e67711ad3,2026-02-19T11:04:21.129Z,2026-02-20T02:43:48.243Z,ACME\jsmith,Windows 11 Enterprise +HR-WS-001,10.10.2.101,C:\Users\jsmith\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,c0fa69ab4b4182e331fc46c2eaf8905d0224f2aa7547912483e56206e38f8a8f,2026-02-15T19:03:15.373Z,2026-02-19T17:40:13.726Z,ACME\jsmith,Windows 11 Enterprise +HR-WS-001,10.10.2.101,C:\Users\jsmith\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,15eccb4149dc36b19e68074454add5769d366db6d05b8076fd05676e636b91ff,2026-02-17T23:01:25.329Z,2026-02-20T12:53:18.490Z,ACME\jsmith,Windows 11 Enterprise +FIN-WS-002,10.10.3.102,C:\Users\svc_web\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,bebcb21ef97ab1644782d4f482a7f23d0838f55341f6ddd099088d44ac85b586,2026-02-15T19:22:47.320Z,2026-02-10T12:09:59.146Z,ACME\svc_web,Windows Server 2022 +FIN-WS-002,10.10.3.102,C:\Users\svc_web\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,1cb580e4318e25781be96f6d04e7b93fadccd48ee889480e0037fd217f9e2bec,2026-02-20T04:48:06.534Z,2026-02-10T21:45:29.326Z,ACME\svc_web,Windows Server 2022 +FIN-WS-002,10.10.3.102,C:\Users\svc_web\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,16eeb42c151ac92527b2e82ea3a7d59dcb390534c4421569cc93e01ea3b29226,2026-02-18T16:11:04.929Z,2026-02-19T05:11:09.976Z,ACME\svc_web,Windows Server 2022 +FIN-WS-002,10.10.3.102,C:\Users\svc_web\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,e4d0929c0204f8af6a811845327056a96de7936903409f666f5000021605c468,2026-02-15T02:38:32.076Z,2026-02-15T05:24:05.057Z,ACME\svc_web,Windows Server 2022 +FIN-WS-002,10.10.3.102,C:\Users\svc_web\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,d4e62404cadeadd5aba511ceb1407ac2671c65534ea97d34a0babf3b1b520b40,2026-02-10T14:35:15.617Z,2026-02-13T22:49:02.985Z,ACME\svc_web,Windows Server 2022 +FIN-WS-002,10.10.3.102,C:\Users\svc_web\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,884679c5c3376b620bbec01042eda5274e7baa3aabfd9acac7a4ec8fa2e71b70,2026-02-15T21:10:18.128Z,2026-02-18T20:16:10.218Z,ACME\svc_web,Windows Server 2022 +SLS-WS-003,10.10.1.103,C:\Users\gwhite\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,dd940feda7697e0881885f7b832ddd42e4142ca98c6b04f62b337c277e9814d0,2026-02-18T22:56:18.542Z,2026-02-15T02:02:55.852Z,ACME\gwhite,Windows Server 2019 +SLS-WS-003,10.10.1.103,C:\Users\gwhite\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,f4c291cc71e45efa2b658d1e870a37e646ecebf7d68ed668b1e5bb675b95b22f,2026-02-11T00:14:51.087Z,2026-02-14T04:19:44.082Z,ACME\gwhite,Windows Server 2019 +SLS-WS-003,10.10.1.103,C:\Users\gwhite\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,cc0be4f1276f32dfabbc486d677da37eb0d1568e14bc7ef60a9362f30bb51e3f,2026-02-20T01:23:37.345Z,2026-02-18T02:44:48.884Z,ACME\gwhite,Windows Server 2019 +SLS-WS-003,10.10.1.103,C:\Users\gwhite\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,43bc35995ce8bff1ed5600d037d2721f09a2875b35aded4e55184d17c8c34d7f,2026-02-16T23:01:08.694Z,2026-02-16T08:00:13.194Z,ACME\gwhite,Windows Server 2019 +SLS-WS-003,10.10.1.103,C:\Users\gwhite\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,c46ac5b57260052d81b8fba68ac79452520042b72863ff2321380a184a0b9e01,2026-02-18T08:11:25.572Z,2026-02-14T21:14:50.154Z,ACME\gwhite,Windows Server 2019 +SLS-WS-003,10.10.1.103,C:\Users\gwhite\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,6fd0ae828a07d440cb51faf7d224bf13ea6113e40714d17c42ee805d510700bd,2026-02-15T23:30:09.553Z,2026-02-16T06:58:21.648Z,ACME\gwhite,Windows Server 2019 +SLS-WS-003,10.10.1.103,C:\Users\gwhite\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,e77c3ace2e9a5d4733cba737ecd56d481b871a76393082978b2cecab4b55cbde,2026-02-14T15:33:26.433Z,2026-02-18T23:16:32.653Z,ACME\gwhite,Windows Server 2019 +SLS-WS-003,10.10.1.103,C:\Users\gwhite\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,74701666b6b5491558f3b1ec3d933142bb859b338325835bca90c7822df99be2,2026-02-10T10:07:37.210Z,2026-02-11T05:06:28.050Z,ACME\gwhite,Windows Server 2019 +ENG-WS-004,10.10.2.104,C:\Users\hbrown\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,9ef2181c95134083db5c5d501df6811caf1025dc59bacb3ae22667483c021aa6,2026-02-15T05:26:07.808Z,2026-02-15T01:49:03.289Z,ACME\hbrown,Windows 10 Enterprise +ENG-WS-004,10.10.2.104,C:\Users\hbrown\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,d806c1b1839c662f7094e4564f82f30466dbceadbb0160db19c8077df6e04abc,2026-02-10T12:08:24.672Z,2026-02-13T03:55:55.103Z,ACME\hbrown,Windows 10 Enterprise +ENG-WS-004,10.10.2.104,C:\Users\hbrown\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,42dcbd93293a04150360bd533da1014753b5cc62fd92445137790df25b69fe17,2026-02-12T01:52:41.612Z,2026-02-12T04:59:20.851Z,ACME\hbrown,Windows 10 Enterprise +ENG-WS-004,10.10.2.104,C:\Users\hbrown\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,cdbcf85c85dff5e23e4661495c409b365d7ee5c44d487adbd08d1dba7af45514,2026-02-19T04:46:17.158Z,2026-02-16T13:32:29.383Z,ACME\hbrown,Windows 10 Enterprise +ENG-WS-004,10.10.2.104,C:\Users\hbrown\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,0458dabcf18d2301bcd001a9b14b113c3d86a053493f74447d993915e26ed954,2026-02-20T13:03:52.822Z,2026-02-17T03:20:36.883Z,ACME\hbrown,Windows 10 Enterprise +ENG-WS-004,10.10.2.104,C:\Users\hbrown\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,52c722b3b67931d0e175cf13179adb22129c8b446913edf88dd9a9c90dc2ea27,2026-02-14T14:50:13.644Z,2026-02-13T17:25:28.793Z,ACME\hbrown,Windows 10 Enterprise +LEG-WS-005,10.10.3.105,C:\Users\jsmith\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,1e48d33e125f502928291ef60cfcef2ead5c7886e9cb02abab5712fdf5f423eb,2026-02-16T14:46:45.919Z,2026-02-10T18:25:21.559Z,ACME\jsmith,Windows 11 Enterprise +LEG-WS-005,10.10.3.105,C:\Users\jsmith\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,26c7966d8aff5454de2850109926194eb175e5a7d731b121a9ff5e5145c2aa17,2026-02-15T11:24:54.902Z,2026-02-13T07:42:13.662Z,ACME\jsmith,Windows 11 Enterprise +LEG-WS-005,10.10.3.105,C:\Users\jsmith\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,fcd8414e6848cf69774dd0d8f6dca14ceccb0a4e7b5691fa2bda5160a886e2fc,2026-02-15T08:14:11.397Z,2026-02-17T02:52:01.305Z,ACME\jsmith,Windows 11 Enterprise +LEG-WS-005,10.10.3.105,C:\Users\jsmith\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,fd843f31fee5420f2ae676614c37327ea068ba3f78d725fa784e44816286e6dd,2026-02-15T16:52:41.161Z,2026-02-19T16:51:39.978Z,ACME\jsmith,Windows 11 Enterprise +LEG-WS-005,10.10.3.105,C:\Users\jsmith\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,388e3ed505d1337e763301158d926ddefc8e724e418d96ee1e5c4e127f56918d,2026-02-18T04:38:19.565Z,2026-02-20T16:51:30.839Z,ACME\jsmith,Windows 11 Enterprise +LEG-WS-005,10.10.3.105,C:\Users\jsmith\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,19f09f4df24fb4cf46992967253a3493261227f34356a4e7c599f338dd4224c0,2026-02-10T16:22:34.591Z,2026-02-12T11:54:32.586Z,ACME\jsmith,Windows 11 Enterprise +LEG-WS-005,10.10.3.105,C:\Users\jsmith\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,3c6a7b99a7d093ad3b8ed1d2a08ef2b2ba27c1a8fdeee940d35d1a0f713cbefd,2026-02-15T02:13:29.674Z,2026-02-19T14:57:22.742Z,ACME\jsmith,Windows 11 Enterprise +MKT-WS-006,10.10.1.106,C:\Users\dlee\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,986dcba7adec12e5a478bdc20b77147ad715d4ede257b54243ac156ad0c9db28,2026-02-12T01:14:44.806Z,2026-02-14T19:58:03.091Z,ACME\dlee,Windows Server 2022 +MKT-WS-006,10.10.1.106,C:\Users\dlee\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,80cb0154c923d605dfdac0131396d194ede1de502ccf46c71e664b80f34aa15b,2026-02-20T07:37:05.802Z,2026-02-18T06:48:03.060Z,ACME\dlee,Windows Server 2022 +MKT-WS-006,10.10.1.106,C:\Users\dlee\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,5177f9eada05e28d62a7c6e6f7d9ff4d3008372c3bd4a9dc621399daf6d9e3a2,2026-02-17T23:10:16.463Z,2026-02-12T01:17:30.446Z,ACME\dlee,Windows Server 2022 +MKT-WS-006,10.10.1.106,C:\Users\dlee\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,40589fde7236a2453e709da139c22595b1c9b5b9cf5985e18ebb3eead721ceb5,2026-02-11T18:41:14.257Z,2026-02-16T18:53:17.297Z,ACME\dlee,Windows Server 2022 +MKT-WS-006,10.10.1.106,C:\Users\dlee\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,7ee1322239b7e4885a25274c69ab7cc21b7e9c85f436285b3df7f9f4c1a01087,2026-02-16T20:37:26.647Z,2026-02-12T19:44:45.379Z,ACME\dlee,Windows Server 2022 +MKT-WS-006,10.10.1.106,C:\Users\dlee\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,c05b6c3bfdf7d91b5ead63d64ee45fb56b2c94b7a1ca931d27c8d2e0a04cc880,2026-02-10T18:18:33.303Z,2026-02-10T20:49:20.549Z,ACME\dlee,Windows Server 2022 +MKT-WS-006,10.10.1.106,C:\Users\dlee\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,56ac289d6d1a68ace8ecccd3415e29e0628c03b4280c278eb36b4a1d57eb17e3,2026-02-13T07:59:05.135Z,2026-02-15T13:01:37.121Z,ACME\dlee,Windows Server 2022 +MKT-WS-006,10.10.1.106,C:\Users\dlee\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,bfd3229229542781f26bdc4ad5d0fb7004df6f2650fb562c81162a9c935f11ca,2026-02-13T07:28:41.744Z,2026-02-19T12:13:19.445Z,ACME\dlee,Windows Server 2022 +EXEC-WS-007,10.10.2.107,C:\Users\idavis\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,02cdbff42616de0a0e88a574ec17a88d6d7510cb849c72768efe244b2c123297,2026-02-17T06:37:23.040Z,2026-02-14T19:33:31.793Z,ACME\idavis,Windows Server 2019 +EXEC-WS-007,10.10.2.107,C:\Users\idavis\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,e89cf3db33cdae1593007dae1051159b26c012fd035f3f12b92120fef736c36c,2026-02-20T00:43:45.544Z,2026-02-20T12:11:49.036Z,ACME\idavis,Windows Server 2019 +EXEC-WS-007,10.10.2.107,C:\Users\idavis\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,609a626819620750e20c363938331a8f7ae997f0ea6f08e45c8c65f241b3e123,2026-02-15T06:22:26.513Z,2026-02-10T08:32:05.554Z,ACME\idavis,Windows Server 2019 +EXEC-WS-007,10.10.2.107,C:\Users\idavis\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,520dff08006cc179d470d0c97f8bcfba81407acc58f6d1d3fc999582b73743e2,2026-02-12T23:56:30.834Z,2026-02-14T17:03:59.974Z,ACME\idavis,Windows Server 2019 +EXEC-WS-007,10.10.2.107,C:\Users\idavis\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,c4448dd90342e73bc926a48506f5ee668d85595e6a49a6dc837277ee21360020,2026-02-20T05:12:27.254Z,2026-02-10T09:30:26.085Z,ACME\idavis,Windows Server 2019 +IT-WS-008,10.10.3.108,C:\Users\svc_backup\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,18dab2e9c0603c43780cd3739a62d78c35117dcb142ccedb671d0f5a93d63c97,2026-02-18T19:06:55.581Z,2026-02-17T09:11:51.013Z,ACME\svc_backup,Windows 10 Enterprise +IT-WS-008,10.10.3.108,C:\Users\svc_backup\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,8722cc701d5d5b63a2455fe48bbd40232dc307c94f737f32af738a86623bb95e,2026-02-11T11:21:02.231Z,2026-02-13T05:33:28.227Z,ACME\svc_backup,Windows 10 Enterprise +IT-WS-008,10.10.3.108,C:\Users\svc_backup\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,de2467de37daa07688b87f7f4b95306c8192ae93cc7cafc4f63938643d7c04f6,2026-02-16T22:59:40.937Z,2026-02-14T20:26:31.932Z,ACME\svc_backup,Windows 10 Enterprise +IT-WS-008,10.10.3.108,C:\Users\svc_backup\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,d9c25b2943eb2ba8452caa4549e343c24971da7915bf37ab6f74942a1208fc7e,2026-02-20T09:24:06.357Z,2026-02-19T00:37:53.480Z,ACME\svc_backup,Windows 10 Enterprise +IT-WS-008,10.10.3.108,C:\Users\svc_backup\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,ea16f8b57122c132454f3effa62cdb557bbe17dccc6d935a94332192c71141ad,2026-02-15T14:41:13.159Z,2026-02-11T17:25:02.171Z,ACME\svc_backup,Windows 10 Enterprise +IT-WS-008,10.10.3.108,C:\Users\svc_backup\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,ac7a7b3f0039772af6f43af475c1e3cb2008a6c8124d71691c9858380414bab1,2026-02-16T17:11:23.572Z,2026-02-13T11:42:50.802Z,ACME\svc_backup,Windows 10 Enterprise +IT-WS-008,10.10.3.108,C:\Users\svc_backup\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,e267e5ae9ed0a5276d042caf6c853d030a4c800714f680e36e3b5ec675224e1c,2026-02-12T22:58:14.806Z,2026-02-17T13:25:04.377Z,ACME\svc_backup,Windows 10 Enterprise +IT-WS-008,10.10.3.108,C:\Users\svc_backup\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,455ab448ad895b4378ac15382f798e0fd7e7ae912469e0b27238553ca6dfc87f,2026-02-11T17:25:46.935Z,2026-02-14T12:21:04.223Z,ACME\svc_backup,Windows 10 Enterprise +HR-WS-009,10.10.1.109,C:\Users\agarcia\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,061958c628f2e622ccb045e884b77d591bd30419625046fdf1fe14676662c9d6,2026-02-10T10:33:57.592Z,2026-02-17T11:18:51.294Z,ACME\agarcia,Windows 11 Enterprise +HR-WS-009,10.10.1.109,C:\Users\agarcia\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,f52ba5baa778eb33238a1925f87e21b10e02a9a4d2eace637b580e9e9dd4b369,2026-02-15T04:32:42.457Z,2026-02-12T03:37:52.011Z,ACME\agarcia,Windows 11 Enterprise +HR-WS-009,10.10.1.109,C:\Users\agarcia\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,070032429ec132bfcc7182ad092eeacffbea2dd860a34e225068dbafdb835660,2026-02-17T12:31:06.335Z,2026-02-18T21:27:57.266Z,ACME\agarcia,Windows 11 Enterprise +HR-WS-009,10.10.1.109,C:\Users\agarcia\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,815d52dbb92cb2ef396795439e7edf5c84a7a6e9402e9b591f75a21b9352587a,2026-02-17T18:26:17.913Z,2026-02-16T01:04:11.210Z,ACME\agarcia,Windows 11 Enterprise +HR-WS-009,10.10.1.109,C:\Users\agarcia\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,36648d95785e3eedcc18c831c5d031c5ed7e7d849cfb98ec407b04a523cf20fe,2026-02-14T14:15:27.996Z,2026-02-20T10:14:17.722Z,ACME\agarcia,Windows 11 Enterprise +HR-WS-009,10.10.1.109,C:\Users\agarcia\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,6bfa2d1461989af77eaa98ddac4d93c521ade590aac87d472fac7ef2f973c78e,2026-02-17T10:44:17.885Z,2026-02-19T06:03:41.243Z,ACME\agarcia,Windows 11 Enterprise +HR-WS-009,10.10.1.109,C:\Users\agarcia\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,d8765dcdaadf62ff78aa9b37f9d0d02bc91cf15cd9ddca7e7b24a38af0caed9b,2026-02-16T15:12:28.419Z,2026-02-19T16:20:41.048Z,ACME\agarcia,Windows 11 Enterprise +FIN-WS-010,10.10.2.110,C:\Users\svc_web\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,04ffd30571c246f40d0bd9ae1a2b2665054c5200a12b40ff4d5a3dc449d7e8c5,2026-02-10T10:33:10.480Z,2026-02-18T10:35:46.614Z,ACME\svc_web,Windows Server 2022 +FIN-WS-010,10.10.2.110,C:\Users\svc_web\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,ec79d0ab01b25d4ea08918a99a87d63e0a762d89789423a77184da8812510712,2026-02-19T02:16:02.384Z,2026-02-20T13:50:16.951Z,ACME\svc_web,Windows Server 2022 +FIN-WS-010,10.10.2.110,C:\Users\svc_web\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,e14aa1f99c48aa55c7822fb37ec895b1c180be75f0948b7e88f73e9c0ca2b3fe,2026-02-15T22:11:35.355Z,2026-02-18T15:20:51.429Z,ACME\svc_web,Windows Server 2022 +SLS-WS-011,10.10.3.111,C:\Users\svc_web\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,8195effa5cdcdae87f8ca8917163c052707f7aa2b926870f01b8ebf48bb7f9a8,2026-02-13T09:24:13.934Z,2026-02-16T22:41:56.031Z,ACME\svc_web,Windows Server 2019 +SLS-WS-011,10.10.3.111,C:\Users\svc_web\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,cb87187d93f7c0e32e953887d1eb9143378a33b2c38c47839cce86fdc7acc58e,2026-02-19T03:12:06.522Z,2026-02-10T17:42:02.709Z,ACME\svc_web,Windows Server 2019 +SLS-WS-011,10.10.3.111,C:\Users\svc_web\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,34602ccb8330dd6ed07c24bbe0f726ba21803a968bcf55e2eef6eee26880ea62,2026-02-18T12:27:49.007Z,2026-02-20T14:56:32.952Z,ACME\svc_web,Windows Server 2019 +SLS-WS-011,10.10.3.111,C:\Users\svc_web\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,43e44615245aab40de0f1a59fb09718e7b868f48142861e6da4e223c5abb1d82,2026-02-15T21:32:48.486Z,2026-02-15T14:08:38.686Z,ACME\svc_web,Windows Server 2019 +SLS-WS-011,10.10.3.111,C:\Users\svc_web\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,1391176bea5719b42bc1d06a5044544cd155702a91cbd6c4337f5a599159b273,2026-02-19T18:57:02.493Z,2026-02-11T02:47:23.745Z,ACME\svc_web,Windows Server 2019 +SLS-WS-011,10.10.3.111,C:\Users\svc_web\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,ee21410df3ff7c166c43f6c4f9281e386d8027d45ff44565e4d4f726a091c424,2026-02-15T19:50:53.847Z,2026-02-15T09:52:49.331Z,ACME\svc_web,Windows Server 2019 +SLS-WS-011,10.10.3.111,C:\Users\svc_web\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,647138b0cbc9d7b1054ec2bcf7d1f2fcdfd1a1cbd2d972d69b6b09db807cba2e,2026-02-15T16:13:18.192Z,2026-02-10T18:48:46.536Z,ACME\svc_web,Windows Server 2019 +ENG-WS-012,10.10.1.112,C:\Users\bwilson\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,c00d6df589e08a33ae27df4ad008bd744fec1c0552047f74885943206c812397,2026-02-15T02:31:02.788Z,2026-02-12T06:35:40.669Z,ACME\bwilson,Windows 10 Enterprise +ENG-WS-012,10.10.1.112,C:\Users\bwilson\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,48a8ccf902ca738fa29eaa647fa2f52f2ad279b69089e8277ddd8a1165544969,2026-02-16T18:03:48.839Z,2026-02-19T09:57:23.609Z,ACME\bwilson,Windows 10 Enterprise +ENG-WS-012,10.10.1.112,C:\Users\bwilson\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,487392abecedb53dfe46f5bbd0b693b83d58e0462ac5389cfd86410065c0ade1,2026-02-19T06:16:25.477Z,2026-02-11T01:25:17.563Z,ACME\bwilson,Windows 10 Enterprise +ENG-WS-012,10.10.1.112,C:\Users\bwilson\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,5d2e30c6a3ab68be3f1ea1c087bd318fa8aa1e64bf6890e53d1d7f4418225cb0,2026-02-13T08:33:12.589Z,2026-02-10T14:48:42.180Z,ACME\bwilson,Windows 10 Enterprise +ENG-WS-012,10.10.1.112,C:\Users\bwilson\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,97be611a5089d11f738583bc60c36921106472017ac4c286da2f0ff76042d0ab,2026-02-12T14:49:00.469Z,2026-02-14T06:38:20.153Z,ACME\bwilson,Windows 10 Enterprise +LEG-WS-013,10.10.2.113,C:\Users\gwhite\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,82d54b3f9594e4745b373a71247dd9b42eb1f47d8a688dcee015c09735bef60c,2026-02-12T12:21:39.914Z,2026-02-14T13:08:38.645Z,ACME\gwhite,Windows 11 Enterprise +LEG-WS-013,10.10.2.113,C:\Users\gwhite\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,b60223b2fc35fbc64a9583f44b3c8939fd663c8596356fcd33851788923baf95,2026-02-18T05:07:56.774Z,2026-02-18T05:56:24.313Z,ACME\gwhite,Windows 11 Enterprise +LEG-WS-013,10.10.2.113,C:\Users\gwhite\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,d78bf349ffadec141bf780a26fb70b9a301bf82b2c7a059f0d66a3ea5316767c,2026-02-15T07:15:33.441Z,2026-02-12T10:37:09.919Z,ACME\gwhite,Windows 11 Enterprise +LEG-WS-013,10.10.2.113,C:\Users\gwhite\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,96a5721699b403903ee22cc951cc3c7b1726367075ebaa98539581b64a3d8274,2026-02-19T01:08:41.486Z,2026-02-15T14:07:00.136Z,ACME\gwhite,Windows 11 Enterprise +LEG-WS-013,10.10.2.113,C:\Users\gwhite\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,690417f4e18c2bf10e7bfff893f1496a25fe12061ba3d808fd0185abad519f3b,2026-02-10T11:01:38.737Z,2026-02-11T22:58:53.797Z,ACME\gwhite,Windows 11 Enterprise +LEG-WS-013,10.10.2.113,C:\Users\gwhite\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,49d4e93de9156a545e37ab553171d153bd7bec26e701ac3c09ba054ce2a49ab3,2026-02-13T21:48:55.078Z,2026-02-11T16:00:09.468Z,ACME\gwhite,Windows 11 Enterprise +LEG-WS-013,10.10.2.113,C:\Users\gwhite\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,3796cfcc33c9df93a14ba9d2c08c443c536ecf1f70c937dab65bc29333334e4d,2026-02-12T20:29:08.822Z,2026-02-12T08:07:00.147Z,ACME\gwhite,Windows 11 Enterprise +MKT-WS-014,10.10.3.114,C:\Users\bwilson\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,81f824e4da5b29fe9ef7b8ef50aa3368449316ab2fea4e6ea4db76d464f2bee2,2026-02-16T23:50:25.975Z,2026-02-19T08:13:50.505Z,ACME\bwilson,Windows Server 2022 +MKT-WS-014,10.10.3.114,C:\Users\bwilson\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,13422dc5abcdb2b5475145accfb6023f12360b77bbc88411765f464d2387a00d,2026-02-19T22:04:58.021Z,2026-02-12T22:35:28.171Z,ACME\bwilson,Windows Server 2022 +MKT-WS-014,10.10.3.114,C:\Users\bwilson\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,819ba3781b023669628466931615fa2bf171dd6e5b474492b1d41d63e8803474,2026-02-14T23:39:24.269Z,2026-02-18T12:46:34.176Z,ACME\bwilson,Windows Server 2022 +EXEC-WS-015,10.10.1.115,C:\Users\svc_web\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,c95605c10d5098140ebc519d4c40265c640c894506d05c24d1ea7b5d82a9b17d,2026-02-17T12:10:11.109Z,2026-02-16T04:59:20.442Z,ACME\svc_web,Windows Server 2019 +EXEC-WS-015,10.10.1.115,C:\Users\svc_web\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,111b1f4c86c497ad934c8d278f68cb5a092eef4f16ee514336126745032e6a86,2026-02-10T10:25:47.678Z,2026-02-12T15:37:59.982Z,ACME\svc_web,Windows Server 2019 +EXEC-WS-015,10.10.1.115,C:\Users\svc_web\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,7051d68d067d298f4f05f7e048145415fa1e8c3428cd5658edab8b14a9d93435,2026-02-19T11:13:01.382Z,2026-02-15T15:03:42.696Z,ACME\svc_web,Windows Server 2019 +EXEC-WS-015,10.10.1.115,C:\Users\svc_web\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,aa8f97a0196b70692db7209df4cc79b5879261e37f8011b64d91120b4aa57154,2026-02-15T12:26:06.906Z,2026-02-12T17:21:35.303Z,ACME\svc_web,Windows Server 2019 +EXEC-WS-015,10.10.1.115,C:\Users\svc_web\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,2f8ec86d8fd39d4ba65342d74697fcecb2c15fb52c05900006b55e5b2425fb19,2026-02-11T14:46:35.748Z,2026-02-11T10:16:08.063Z,ACME\svc_web,Windows Server 2019 +EXEC-WS-015,10.10.1.115,C:\Users\svc_web\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,f1728a253b09625f61a30c9cd276a99090b9f17744bbd1f8dd73558e07633c8b,2026-02-16T03:50:29.471Z,2026-02-11T07:24:01.535Z,ACME\svc_web,Windows Server 2019 +EXEC-WS-015,10.10.1.115,C:\Users\svc_web\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,50969908f5327f9ea9ac63a8161caa60b336720697ad077fca912fd210f60b14,2026-02-20T02:11:25.387Z,2026-02-13T11:39:21.339Z,ACME\svc_web,Windows Server 2019 +EXEC-WS-015,10.10.1.115,C:\Users\svc_web\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,cf98a147338f6fa2f32cd9e1a099b3d171763ad04f2d2c2b4d1839da3b9bdfbf,2026-02-20T07:41:51.468Z,2026-02-18T17:19:58.026Z,ACME\svc_web,Windows Server 2019 +IT-WS-016,10.10.2.116,C:\Users\idavis\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,771fbdb1c45229119f7ef681f28f47b0c5c4b61c45f1266e765b5267357a4cea,2026-02-15T20:04:14.053Z,2026-02-15T11:34:58.944Z,ACME\idavis,Windows 10 Enterprise +IT-WS-016,10.10.2.116,C:\Users\idavis\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,5da4871367e1a461135a9ccaf4779c3de3f6719ec3fcd758fc93f1dfb6d2b775,2026-02-17T21:39:32.219Z,2026-02-14T22:01:00.640Z,ACME\idavis,Windows 10 Enterprise +IT-WS-016,10.10.2.116,C:\Users\idavis\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,38d95d609715bfa54de3d7fbf1d288ad1fb3169a171bcdc6a71859fd3ad78bf5,2026-02-13T10:44:00.956Z,2026-02-15T03:19:31.176Z,ACME\idavis,Windows 10 Enterprise +HR-WS-017,10.10.3.117,C:\Users\idavis\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,85882d5c26ecae94ae887fda18c5bb0f640eceb2cb757505c113dba15e37af8d,2026-02-15T21:02:39.675Z,2026-02-11T09:10:03.794Z,ACME\idavis,Windows 11 Enterprise +HR-WS-017,10.10.3.117,C:\Users\idavis\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,e0a93ce4b28ebaaf4027d4bb3fad19eecfdc6db4b19f50757fc6cda5357fb7a3,2026-02-16T04:07:18.864Z,2026-02-11T02:26:40.634Z,ACME\idavis,Windows 11 Enterprise +HR-WS-017,10.10.3.117,C:\Users\idavis\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,2d5280f8cdb4604ab2a770ce1af09fb96666cfca699a7823ea5aa52ed75b2c4e,2026-02-14T05:03:38.615Z,2026-02-14T06:41:36.091Z,ACME\idavis,Windows 11 Enterprise +HR-WS-017,10.10.3.117,C:\Users\idavis\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,0e01b23720cc521a339dd5a7e436404a509e7490b5b97a1a5bd67f35a622b411,2026-02-11T00:33:48.157Z,2026-02-16T10:08:10.633Z,ACME\idavis,Windows 11 Enterprise +HR-WS-017,10.10.3.117,C:\Users\idavis\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,843dbd5842d8790565dee1fc5ad9e39c5751bf72427cd2bb3f8fa1bafd07e14f,2026-02-15T06:41:00.888Z,2026-02-14T21:56:27.923Z,ACME\idavis,Windows 11 Enterprise +FIN-WS-018,10.10.1.118,C:\Users\cjohnson\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,ac21d2a43b1839b133da3a2c2fbc425c6515e634744458e6b0dd6af0226286cd,2026-02-16T13:10:24.302Z,2026-02-13T22:58:29.701Z,ACME\cjohnson,Windows Server 2022 +FIN-WS-018,10.10.1.118,C:\Users\cjohnson\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,c6fdcb03c2f2ca8188ca3d82f1aec2aa9ba3362b8a32901c9f3bfb4a8799a47c,2026-02-12T15:58:59.584Z,2026-02-11T18:53:25.718Z,ACME\cjohnson,Windows Server 2022 +FIN-WS-018,10.10.1.118,C:\Users\cjohnson\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,99f2ed6d3fca6526621caf0a25113596c173901f71bdffa0785510070939d8c8,2026-02-12T19:30:31.054Z,2026-02-18T21:37:17.785Z,ACME\cjohnson,Windows Server 2022 +FIN-WS-018,10.10.1.118,C:\Users\cjohnson\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,318efe09cd2102e6f78a3584aef6ada02ddba772891c5f1fb1c76e2258bf3df2,2026-02-16T22:21:23.145Z,2026-02-19T19:20:53.180Z,ACME\cjohnson,Windows Server 2022 +FIN-WS-018,10.10.1.118,C:\Users\cjohnson\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,f677a56375e6dde90cbac73c3b083b257d77a3a34a205740d996764650705f90,2026-02-11T22:28:23.820Z,2026-02-17T21:39:36.140Z,ACME\cjohnson,Windows Server 2022 +FIN-WS-018,10.10.1.118,C:\Users\cjohnson\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,88f63a1476f73d0f72d31ba8522b9ddc907c02852b3878a02b66f0124a9a1a1e,2026-02-19T15:25:15.826Z,2026-02-16T16:29:51.946Z,ACME\cjohnson,Windows Server 2022 +FIN-WS-018,10.10.1.118,C:\Users\cjohnson\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,d20b92c5e27382941c3617b95f24392422cc8c31c4c58f1d471a836af5c9b78f,2026-02-18T17:51:42.704Z,2026-02-11T04:56:47.216Z,ACME\cjohnson,Windows Server 2022 +SLS-WS-019,10.10.2.119,C:\Users\jsmith\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,e9b9e19b802d99147764ebf9d98fa56c77f1105bb0ede548a1421a5d357a31df,2026-02-18T13:46:01.003Z,2026-02-15T15:46:24.285Z,ACME\jsmith,Windows Server 2019 +SLS-WS-019,10.10.2.119,C:\Users\jsmith\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,2b04c91127a1428994a3a0a24d00dffc08eaf08afdc9dca3040f80224d99044d,2026-02-14T10:55:22.796Z,2026-02-15T00:29:25.508Z,ACME\jsmith,Windows Server 2019 +SLS-WS-019,10.10.2.119,C:\Users\jsmith\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,e22e5b81bbef8a44cb5d3b669dfbc67c5e0260092a4fab21c4bad91e16ade656,2026-02-14T00:05:23.209Z,2026-02-11T13:37:55.023Z,ACME\jsmith,Windows Server 2019 +SLS-WS-019,10.10.2.119,C:\Users\jsmith\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,8ec2632970b87bf60cdbcdebe6142c071bd3b40e5f30fc19eb0c040f7b4ad70a,2026-02-19T06:52:33.651Z,2026-02-20T16:10:33.204Z,ACME\jsmith,Windows Server 2019 +SLS-WS-019,10.10.2.119,C:\Users\jsmith\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,6fb8e562463b6a1899b5aac434e83f89e59ba3f8258152c86a7b68f3074a1822,2026-02-18T16:18:14.258Z,2026-02-16T19:22:23.529Z,ACME\jsmith,Windows Server 2019 +ENG-WS-020,10.10.3.120,C:\Users\emartinez\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,6395891ca629a4ebf2436a9241c7159906f310e49e67b132859cee23ec56f591,2026-02-15T11:39:45.307Z,2026-02-14T18:51:35.356Z,ACME\emartinez,Windows 10 Enterprise +ENG-WS-020,10.10.3.120,C:\Users\emartinez\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,6ca1fc4c6cfbf1c8059773b5ff3145e8751bbd3031992a0cfc99839878b9bed2,2026-02-12T05:37:54.651Z,2026-02-12T02:40:38.109Z,ACME\emartinez,Windows 10 Enterprise +ENG-WS-020,10.10.3.120,C:\Users\emartinez\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,dbc7ddae01120381d222d016fcf7e00f1d82c1757bfbd98dc5386225ed020803,2026-02-12T06:35:08.956Z,2026-02-10T21:01:28.305Z,ACME\emartinez,Windows 10 Enterprise +ENG-WS-020,10.10.3.120,C:\Users\emartinez\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,bad743bc78682e6f4cd975900a5d681510c8df07ecbf7a1cf4f2de8e67bc315c,2026-02-14T16:33:22.394Z,2026-02-13T18:55:44.710Z,ACME\emartinez,Windows 10 Enterprise +LEG-WS-021,10.10.1.121,C:\Users\dlee\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,af7b6e167afbb3e68674fad243433f1b1e5aaf93bb5a8bbbd523bd20bcfc8429,2026-02-13T07:54:51.526Z,2026-02-12T11:19:10.407Z,ACME\dlee,Windows 11 Enterprise +LEG-WS-021,10.10.1.121,C:\Users\dlee\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,f919410ed899e84eb617986a2d6f00c6bda557033bfa1ccb991f45ce6d84226c,2026-02-20T07:09:54.353Z,2026-02-19T08:21:23.376Z,ACME\dlee,Windows 11 Enterprise +LEG-WS-021,10.10.1.121,C:\Users\dlee\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,032aefc466cecd1bc8a4193efd0a40610f898f0c7d753f5d878493984301daa3,2026-02-16T12:50:38.668Z,2026-02-17T00:30:17.495Z,ACME\dlee,Windows 11 Enterprise +MKT-WS-022,10.10.2.122,C:\Users\svc_web\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,78e97fbb938b97a5a3c1631966d3eb4c7f39f020e28becb5d942f8403af256f6,2026-02-19T15:27:21.801Z,2026-02-18T06:21:16.450Z,ACME\svc_web,Windows Server 2022 +MKT-WS-022,10.10.2.122,C:\Users\svc_web\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,cfc244fb6d959c3b1fc9b7f709cb7780e421e306b9e601dadaef1e9a5702eb4a,2026-02-16T14:40:27.993Z,2026-02-17T04:36:11.910Z,ACME\svc_web,Windows Server 2022 +MKT-WS-022,10.10.2.122,C:\Users\svc_web\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,0fc975a17dc3189dc70773778c4045869d2494aebab4385c989521fe9a125485,2026-02-12T00:13:03.842Z,2026-02-18T06:23:04.573Z,ACME\svc_web,Windows Server 2022 +MKT-WS-022,10.10.2.122,C:\Users\svc_web\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,0e5973748294d2375ee04c55e9f30bee797b5d424011434f061f06f04a1cbc59,2026-02-13T10:15:20.331Z,2026-02-18T17:21:50.586Z,ACME\svc_web,Windows Server 2022 +MKT-WS-022,10.10.2.122,C:\Users\svc_web\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,cdafaa8dc66649af20a3b6a9513e89a249c4af8998082753b8379e154d71356a,2026-02-14T12:25:44.863Z,2026-02-13T01:18:19.585Z,ACME\svc_web,Windows Server 2022 +MKT-WS-022,10.10.2.122,C:\Users\svc_web\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,a020898201e929b8b0d7ffa4a84471b1c66711dbd226748ba11520fe79874b00,2026-02-19T18:13:54.754Z,2026-02-15T04:39:12.277Z,ACME\svc_web,Windows Server 2022 +MKT-WS-022,10.10.2.122,C:\Users\svc_web\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,09b027d9be23b8460d796fba35e4c5f5b93f3982c541a39e0568a69ce3d1709f,2026-02-18T21:22:28.097Z,2026-02-15T14:15:27.038Z,ACME\svc_web,Windows Server 2022 +MKT-WS-022,10.10.2.122,C:\Users\svc_web\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,b8b1e706ae8c75e1576cb44a4776443f455b562eae4ea6d79c1744de443301e8,2026-02-11T21:04:14.555Z,2026-02-13T05:41:53.727Z,ACME\svc_web,Windows Server 2022 +EXEC-WS-023,10.10.3.123,C:\Users\dlee\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,9214af24edab339b3fbeb0b0a2fe06e0db0c588ef59882f934f81abb21d1cdc6,2026-02-11T14:50:24.265Z,2026-02-18T11:08:52.872Z,ACME\dlee,Windows Server 2019 +EXEC-WS-023,10.10.3.123,C:\Users\dlee\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,1299b1cf1ca8dee8a986afbfae7b50893a658a2d475eca546e1b5e284e72aa52,2026-02-11T08:41:14.303Z,2026-02-19T10:22:56.199Z,ACME\dlee,Windows Server 2019 +EXEC-WS-023,10.10.3.123,C:\Users\dlee\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,30e2f20a28a550f4223352ce32e0c8ed4395889fb139490d7866e935304868c4,2026-02-20T09:25:00.268Z,2026-02-16T00:44:46.451Z,ACME\dlee,Windows Server 2019 +EXEC-WS-023,10.10.3.123,C:\Users\dlee\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,1df7c0b9e0cf99a529942fa373a90d444643f48222dde21ac4f6ba157f15b8c6,2026-02-20T12:57:48.564Z,2026-02-18T13:30:26.472Z,ACME\dlee,Windows Server 2019 +IT-WS-024,10.10.1.124,C:\Users\fthompson\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,c83aa77f8401a9abe73863022e9aeb69c1cf1db58f20f5d2b7f2f20ee69f0fe1,2026-02-15T16:53:02.632Z,2026-02-15T06:18:37.743Z,ACME\fthompson,Windows 10 Enterprise +IT-WS-024,10.10.1.124,C:\Users\fthompson\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,5dec0d840e6e3ec6d1b3fc0f2ab23207f7376d5c286480624d84cfa934a46d89,2026-02-16T09:59:04.958Z,2026-02-19T15:33:15.955Z,ACME\fthompson,Windows 10 Enterprise +IT-WS-024,10.10.1.124,C:\Users\fthompson\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,b36194f85f946b0a61eb4d457e6f582ec223173d74cd4f85217412f468bfbbd1,2026-02-10T13:49:12.100Z,2026-02-12T05:50:06.543Z,ACME\fthompson,Windows 10 Enterprise +IT-WS-024,10.10.1.124,C:\Users\fthompson\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,25c075acf71a02449f9cada327e0524807f8e314f42324fd03ea90b93a26c882,2026-02-11T22:29:32.029Z,2026-02-11T10:55:22.798Z,ACME\fthompson,Windows 10 Enterprise +IT-WS-024,10.10.1.124,C:\Users\fthompson\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,2acc5f10d551e72b4566e0045756a13cabfdd5adeef17071c03bd66ad36599a3,2026-02-17T18:53:46.682Z,2026-02-19T15:13:11.957Z,ACME\fthompson,Windows 10 Enterprise +IT-WS-024,10.10.1.124,C:\Users\fthompson\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,878aefdbabf42578d87499066ea315b103b6c75751bd644883dacffc19221546,2026-02-11T19:02:51.117Z,2026-02-10T20:46:07.104Z,ACME\fthompson,Windows 10 Enterprise +IT-WS-024,10.10.1.124,C:\Users\fthompson\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,a41cfa659a48a3ce63356be6ac6b90b2ebc0174f77273f14d5ff2315358853d8,2026-02-18T10:19:54.685Z,2026-02-14T23:15:46.596Z,ACME\fthompson,Windows 10 Enterprise +IT-WS-024,10.10.1.124,C:\Users\fthompson\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,bf68174459da914b86d509e8fe3a5917102371805cd5a2e860685eaf83223a7d,2026-02-17T01:02:32.778Z,2026-02-17T17:05:56.527Z,ACME\fthompson,Windows 10 Enterprise +HR-WS-025,10.10.2.125,C:\Users\agarcia\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,f3400b367a0a4e89f590d942dd963b08c0db304b657147098618d54097531dbd,2026-02-13T12:09:19.195Z,2026-02-16T04:28:04.747Z,ACME\agarcia,Windows 11 Enterprise +HR-WS-025,10.10.2.125,C:\Users\agarcia\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,6c6adf8336a9ee411cbe60a8c9ffba92008bcf9467b2e1dbf3e4eca05fee5081,2026-02-19T13:04:28.343Z,2026-02-10T16:45:40.445Z,ACME\agarcia,Windows 11 Enterprise +HR-WS-025,10.10.2.125,C:\Users\agarcia\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,dffc21f55f13de152263d858fc05428768996e461db305aee8eb583c602f5df3,2026-02-12T02:04:02.215Z,2026-02-18T06:25:19.318Z,ACME\agarcia,Windows 11 Enterprise +HR-WS-025,10.10.2.125,C:\Users\agarcia\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,112e513c68ee2553dcd59684a7ac9076dd53431c8d8f9d58e468f8804f166c3b,2026-02-16T11:03:05.757Z,2026-02-10T19:47:40.837Z,ACME\agarcia,Windows 11 Enterprise +HR-WS-025,10.10.2.125,C:\Users\agarcia\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,012bd3195f3e0b3b1e388e96e27696f21017eea267d07328e25c56a80f89a9cf,2026-02-17T09:33:59.446Z,2026-02-13T21:04:33.547Z,ACME\agarcia,Windows 11 Enterprise +HR-WS-025,10.10.2.125,C:\Users\agarcia\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,b91717b8431f8621847d64b7e096d25462a9fde54e65d58bde68edaa82731999,2026-02-16T02:50:39.284Z,2026-02-11T11:20:41.040Z,ACME\agarcia,Windows 11 Enterprise +FIN-WS-026,10.10.3.126,C:\Users\svc_sql\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,f57784da71565fd96d8fb3f6b3163196b745ceb56253569ee54e337259bc45fa,2026-02-18T10:17:41.924Z,2026-02-15T19:11:10.397Z,ACME\svc_sql,Windows Server 2022 +FIN-WS-026,10.10.3.126,C:\Users\svc_sql\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,8205edb20d13c17f71d807552b722bdbdc37b844e65ae7ad27f759f07e348e6f,2026-02-11T20:08:53.008Z,2026-02-10T18:58:26.359Z,ACME\svc_sql,Windows Server 2022 +FIN-WS-026,10.10.3.126,C:\Users\svc_sql\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,c6abca91ea20bdc4bd2a206de6e3ae4736e689f599c08884b64d553240bf48ee,2026-02-19T04:58:57.663Z,2026-02-12T10:15:48.479Z,ACME\svc_sql,Windows Server 2022 +SLS-WS-027,10.10.1.127,C:\Users\bwilson\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,91c544dd5daa1ed9ad2c1f8ae703da89cbdf0f1e2a5f574f78cec724afe65a34,2026-02-13T02:11:26.259Z,2026-02-13T07:25:54.504Z,ACME\bwilson,Windows Server 2019 +SLS-WS-027,10.10.1.127,C:\Users\bwilson\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,9664a3afa2b3ba0c82291a65e2f9234accb735a7afb3b4a2aa5f7b1e69c53867,2026-02-11T23:17:29.928Z,2026-02-18T23:08:53.569Z,ACME\bwilson,Windows Server 2019 +SLS-WS-027,10.10.1.127,C:\Users\bwilson\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,3eaad4fb9ce1eba5d4f4a8b345b549633347c2f1fa4556b899067a5ce205f419,2026-02-17T16:14:32.811Z,2026-02-10T12:21:57.016Z,ACME\bwilson,Windows Server 2019 +SLS-WS-027,10.10.1.127,C:\Users\bwilson\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,3d1d9fa885481be6b98bde44e4a7d5d0ebba8ef4342785a6f07b0e4d17047d61,2026-02-12T07:27:23.560Z,2026-02-14T01:19:39.909Z,ACME\bwilson,Windows Server 2019 +SLS-WS-027,10.10.1.127,C:\Users\bwilson\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,8262ded2edfded9c4cda58bb529a46be3be60ad648ef7637832cd3e572316190,2026-02-14T10:12:51.874Z,2026-02-11T19:56:26.161Z,ACME\bwilson,Windows Server 2019 +ENG-WS-028,10.10.2.128,C:\Users\fthompson\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,e45eb54de65ca04a9e9499047f9e2f55b430f6d9177a1ed5d578d52da80b4976,2026-02-17T22:57:21.030Z,2026-02-16T14:01:19.812Z,ACME\fthompson,Windows 10 Enterprise +ENG-WS-028,10.10.2.128,C:\Users\fthompson\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,23cc51d16870ff841109482b189e56c2cbb25eb027208afb7d94c12c07c180be,2026-02-18T11:06:31.245Z,2026-02-15T07:35:13.379Z,ACME\fthompson,Windows 10 Enterprise +ENG-WS-028,10.10.2.128,C:\Users\fthompson\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,7560bf2e3fd88995bf2717503b9fbe5d37b643fba61a74068482cf0bf5679eb9,2026-02-20T06:16:46.087Z,2026-02-10T20:43:24.291Z,ACME\fthompson,Windows 10 Enterprise +ENG-WS-028,10.10.2.128,C:\Users\fthompson\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,3bc3fe100e5b9e597e26ac426042708d8cc91d8a703c67983ead7f349b4f13f8,2026-02-17T09:34:19.950Z,2026-02-14T13:48:57.701Z,ACME\fthompson,Windows 10 Enterprise +LEG-WS-029,10.10.3.129,C:\Users\emartinez\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,5e6ec662788b1b19c736c148b1942ac5755d2e7cab9ac87a88920fda5a7752e2,2026-02-13T02:28:34.800Z,2026-02-14T08:40:24.282Z,ACME\emartinez,Windows 11 Enterprise +LEG-WS-029,10.10.3.129,C:\Users\emartinez\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,db799da2f9c0d2a67d8c51e63acde705329573eec13e2c745f85154a14800bb9,2026-02-14T04:56:48.894Z,2026-02-13T13:52:53.766Z,ACME\emartinez,Windows 11 Enterprise +LEG-WS-029,10.10.3.129,C:\Users\emartinez\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,cfe69a439620a18581c26f82e19f3b1094fb68a651aaa9fc96667afdbe7be0d6,2026-02-16T14:50:37.334Z,2026-02-19T20:23:16.204Z,ACME\emartinez,Windows 11 Enterprise +LEG-WS-029,10.10.3.129,C:\Users\emartinez\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,dfe3f478183fc7b9b6afaa60232eaae71743b477004910dc3cec605e992b9e9b,2026-02-14T00:44:44.842Z,2026-02-11T18:00:20.836Z,ACME\emartinez,Windows 11 Enterprise +LEG-WS-029,10.10.3.129,C:\Users\emartinez\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,b82143dbc3b4c4552e2a8a79ea3b881ecf0fdd83063610d61d1b9f662b7f000c,2026-02-20T06:38:09.130Z,2026-02-13T06:12:01.506Z,ACME\emartinez,Windows 11 Enterprise +LEG-WS-029,10.10.3.129,C:\Users\emartinez\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,5165edc673331f8e91ea782af66d022646b0fe711e3cccf30f3b8c1522d89140,2026-02-19T04:48:35.722Z,2026-02-19T18:53:50.138Z,ACME\emartinez,Windows 11 Enterprise +MKT-WS-030,10.10.1.130,C:\Users\fthompson\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,bc188605ea225c34812fbba2ae8564d2fd361dc3aef73e97c7f6efade6e78cef,2026-02-19T13:59:02.088Z,2026-02-12T07:07:14.562Z,ACME\fthompson,Windows Server 2022 +MKT-WS-030,10.10.1.130,C:\Users\fthompson\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,84a489daa18c2664969f49490c2a334b52246a13e2c4d446b1eb330f302baa55,2026-02-11T13:09:23.409Z,2026-02-10T20:53:38.200Z,ACME\fthompson,Windows Server 2022 +MKT-WS-030,10.10.1.130,C:\Users\fthompson\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,308c8971a8caf7957721f50f4fbfd214f2907cb67f204003e19e097ad7fb6aa1,2026-02-10T18:07:36.618Z,2026-02-20T06:58:27.961Z,ACME\fthompson,Windows Server 2022 +MKT-WS-030,10.10.1.130,C:\Users\fthompson\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,1b85d1263bd84ee7e75b2fd53f8a2c375b544da20111d20c49ba416ce602d3f6,2026-02-13T07:35:20.553Z,2026-02-14T11:29:51.396Z,ACME\fthompson,Windows Server 2022 +MKT-WS-030,10.10.1.130,C:\Users\fthompson\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,e97de97233d9a1e36c0bd8a0700390b930f9b3ba2f87d37219329c8febe5d1e0,2026-02-20T01:03:11.510Z,2026-02-19T17:00:18.211Z,ACME\fthompson,Windows Server 2022 +EXEC-WS-031,10.10.2.131,C:\Users\idavis\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,e5e6c9b1f9fdf05b2fb49904e2fad7f5dcb0025246bc90b0921c2ec6e4548904,2026-02-18T18:29:25.712Z,2026-02-11T20:44:07.683Z,ACME\idavis,Windows Server 2019 +EXEC-WS-031,10.10.2.131,C:\Users\idavis\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,558e2eefc862b79c26a4795e8764e66fc472a0f0e475924a5506fe19c8302dab,2026-02-13T06:11:23.071Z,2026-02-16T21:37:18.960Z,ACME\idavis,Windows Server 2019 +EXEC-WS-031,10.10.2.131,C:\Users\idavis\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,b1065393ce7921c3df0473685fe041c1b912bfb003ed75856cd181f6ea2fde12,2026-02-14T05:38:11.047Z,2026-02-18T05:27:02.185Z,ACME\idavis,Windows Server 2019 +EXEC-WS-031,10.10.2.131,C:\Users\idavis\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,4bdd583a7b8185bb2b900b41b4933ea4714cb8e9c8e4efd480e51b766952c871,2026-02-14T00:09:51.009Z,2026-02-20T12:03:51.081Z,ACME\idavis,Windows Server 2019 +EXEC-WS-031,10.10.2.131,C:\Users\idavis\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,939db503a0b5f00327ae47fa12c8766c16368e37dbecbd63d385d77e6aa8260e,2026-02-16T19:05:15.953Z,2026-02-13T10:05:22.004Z,ACME\idavis,Windows Server 2019 +EXEC-WS-031,10.10.2.131,C:\Users\idavis\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,4dbbe7f18c26a4cb8adbcb60501860305d9377dbfd7d1ccaf2a4871f2b8888b6,2026-02-10T10:41:53.628Z,2026-02-16T15:44:47.603Z,ACME\idavis,Windows Server 2019 +EXEC-WS-031,10.10.2.131,C:\Users\idavis\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,4abe4f1f36f913fdd83e5e05d04228adb884ba09bdcc79fc0e9cd25a65d8ea4c,2026-02-15T17:00:14.420Z,2026-02-15T14:52:35.294Z,ACME\idavis,Windows Server 2019 +EXEC-WS-031,10.10.2.131,C:\Users\idavis\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,054944316c8fe1e77b599a92ceb5d3b5cc30880f1570dd1ce983eb38cc7b3e63,2026-02-15T09:50:20.336Z,2026-02-17T06:38:25.460Z,ACME\idavis,Windows Server 2019 +IT-WS-032,10.10.3.132,C:\Users\svc_backup\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,ace45a6b76fe1479d364204ed11e16e81779456632adb0acdb98c371177cdeb2,2026-02-19T06:52:17.245Z,2026-02-11T06:25:29.532Z,ACME\svc_backup,Windows 10 Enterprise +IT-WS-032,10.10.3.132,C:\Users\svc_backup\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,61a0341ddfefb026471b2839190a7fe695e8d04628286bc73b2ecc0965e4dc9d,2026-02-17T01:45:36.259Z,2026-02-11T18:35:57.603Z,ACME\svc_backup,Windows 10 Enterprise +IT-WS-032,10.10.3.132,C:\Users\svc_backup\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,a8e5df5fcf2f588bbdcba1c25ce0523d5781691802e7bccb3d28773effe506bd,2026-02-15T15:23:41.465Z,2026-02-19T04:04:38.862Z,ACME\svc_backup,Windows 10 Enterprise +IT-WS-032,10.10.3.132,C:\Users\svc_backup\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,54e776fed7cf065c183b41c73aedc29de4d78d5e9ddf21b0165fb2656b85a04e,2026-02-12T05:37:36.274Z,2026-02-13T01:42:39.770Z,ACME\svc_backup,Windows 10 Enterprise +HR-WS-033,10.10.1.133,C:\Users\idavis\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,7dfcb22b3fe5fcf7a1068ad409fd197562bd993dcb5ef8d5fee9ae1c5a9a0bda,2026-02-18T13:56:57.432Z,2026-02-13T04:52:19.892Z,ACME\idavis,Windows 11 Enterprise +HR-WS-033,10.10.1.133,C:\Users\idavis\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,dc8e9f13c063ebf28785f93c9539f48a6fbdf646425195e1b92bc986169d05b8,2026-02-12T17:44:13.063Z,2026-02-14T05:04:12.879Z,ACME\idavis,Windows 11 Enterprise +HR-WS-033,10.10.1.133,C:\Users\idavis\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,83c6d6cb9494782556bdf79dd1993b27df4aec5ed76e7681f6ac71978b67fec0,2026-02-17T00:25:15.116Z,2026-02-20T14:20:54.809Z,ACME\idavis,Windows 11 Enterprise +HR-WS-033,10.10.1.133,C:\Users\idavis\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,d94a432c86532c08934172cad9a5f0cd077e0b6e6a25d5f037d9a97c2148b314,2026-02-19T05:44:42.767Z,2026-02-11T06:51:26.667Z,ACME\idavis,Windows 11 Enterprise +HR-WS-033,10.10.1.133,C:\Users\idavis\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,3df492e0121556726d79dbf0fa4dfe3d7945e9163042696d317fadb88f605111,2026-02-15T06:08:00.698Z,2026-02-11T13:01:25.568Z,ACME\idavis,Windows 11 Enterprise +HR-WS-033,10.10.1.133,C:\Users\idavis\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,1eec1df9f1bb478acd7b96e42d204523c2699ae13b63114384f1aa0205719f33,2026-02-12T11:16:46.815Z,2026-02-11T04:15:43.242Z,ACME\idavis,Windows 11 Enterprise +FIN-WS-034,10.10.2.134,C:\Users\jsmith\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,5ea5cc6f716f93998f5e8ae7e96e11dde920bb69e43ecf84f20bb75a46213822,2026-02-17T06:10:17.311Z,2026-02-13T18:05:07.728Z,ACME\jsmith,Windows Server 2022 +FIN-WS-034,10.10.2.134,C:\Users\jsmith\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,a711c5cc83d5427dd34c75fc9ba7921ab91618aa5a61f8f7fe8dada92bb559cd,2026-02-12T13:31:38.992Z,2026-02-15T01:10:21.926Z,ACME\jsmith,Windows Server 2022 +FIN-WS-034,10.10.2.134,C:\Users\jsmith\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,a8c207730c61bb964f99e6887ad46adc6343993eede4b20852de5574a567643d,2026-02-11T21:30:04.245Z,2026-02-19T13:17:55.999Z,ACME\jsmith,Windows Server 2022 +FIN-WS-034,10.10.2.134,C:\Users\jsmith\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,ed2f9de53e806c07c8d5f389ebfc04d0d0b6be3019266fd2307a1361a74130d8,2026-02-15T01:28:25.600Z,2026-02-18T14:35:15.979Z,ACME\jsmith,Windows Server 2022 +FIN-WS-034,10.10.2.134,C:\Users\jsmith\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,e3a3977a17f3baaca4e97a0a37535b34fbdf51e81a267c825739a341a47ccb6d,2026-02-11T14:53:18.458Z,2026-02-19T17:41:57.822Z,ACME\jsmith,Windows Server 2022 +FIN-WS-034,10.10.2.134,C:\Users\jsmith\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,67f8521ede4cf808716104a5d755bdd71fc0d8ca21b1e189e78e423a6417df3e,2026-02-11T11:41:52.692Z,2026-02-13T08:58:56.276Z,ACME\jsmith,Windows Server 2022 +SLS-WS-035,10.10.3.135,C:\Users\hbrown\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,c8c97a3fe47aad6212c12959572a31fb3e4b69241d32a9b2961f230d89071128,2026-02-12T12:51:21.276Z,2026-02-10T23:32:58.010Z,ACME\hbrown,Windows Server 2019 +SLS-WS-035,10.10.3.135,C:\Users\hbrown\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,e779ad8864325055b8c1d8a112f1f84dce970ccc54d9e908ff289d7c5bd896ce,2026-02-11T14:19:46.425Z,2026-02-11T18:54:50.469Z,ACME\hbrown,Windows Server 2019 +SLS-WS-035,10.10.3.135,C:\Users\hbrown\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,9a096ee99dffeace622915c7a8dabe5e3549862be4f27edbe3a275310496e8bc,2026-02-16T06:46:54.792Z,2026-02-12T02:50:04.974Z,ACME\hbrown,Windows Server 2019 +SLS-WS-035,10.10.3.135,C:\Users\hbrown\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,52dc2715a00ea5ed0f688b1849d592daa25d0238865ac3a564a9c1819c0855ac,2026-02-20T05:09:27.577Z,2026-02-13T01:12:34.235Z,ACME\hbrown,Windows Server 2019 +SLS-WS-035,10.10.3.135,C:\Users\hbrown\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,9a44afb82aed4e6be66a79275a22e5aabd39e3d2c902c14c5208f14508d24a1e,2026-02-19T02:51:24.872Z,2026-02-17T10:28:35.146Z,ACME\hbrown,Windows Server 2019 +SLS-WS-035,10.10.3.135,C:\Users\hbrown\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,ee6710f2a83d86a77d9f1c5997fe4bcd44da0cfc94d7f6a9afb1bee66ccd6434,2026-02-19T18:42:44.310Z,2026-02-13T21:12:09.751Z,ACME\hbrown,Windows Server 2019 +SLS-WS-035,10.10.3.135,C:\Users\hbrown\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,809a881510d282551e8c40a05d5d44f32005dce65c7718cad210b38900db41e3,2026-02-18T05:38:36.021Z,2026-02-17T10:52:29.239Z,ACME\hbrown,Windows Server 2019 +SLS-WS-035,10.10.3.135,C:\Users\hbrown\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,9113a902ea2d6046ff9e2217a0f6526def8eb1390920c752f7bcadebc536e8f0,2026-02-10T10:41:39.118Z,2026-02-15T02:26:59.814Z,ACME\hbrown,Windows Server 2019 +ENG-WS-036,10.10.1.136,C:\Users\admin\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,1bd13af9bdbdc08fb38d5204c6b6ef474151989a6a8636364ee42f869ca840be,2026-02-16T15:14:21.074Z,2026-02-15T12:25:14.086Z,ACME\admin,Windows 10 Enterprise +ENG-WS-036,10.10.1.136,C:\Users\admin\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,ba3801328dd87b02d93af8fac334848cceaa87d94c93cb6e4cdaa8683ae32562,2026-02-14T01:00:06.403Z,2026-02-20T09:09:35.306Z,ACME\admin,Windows 10 Enterprise +ENG-WS-036,10.10.1.136,C:\Users\admin\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,fb9723037b217327edcb6f61c85840cd472c0c4e3a53deabb783df2f8bbd9d51,2026-02-10T14:53:12.870Z,2026-02-16T20:12:46.600Z,ACME\admin,Windows 10 Enterprise +ENG-WS-036,10.10.1.136,C:\Users\admin\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,05f0f3504ae99d31286df3032f3c169c8d7d18cb286487e8adc2719809f45f10,2026-02-11T08:17:02.173Z,2026-02-13T02:49:48.080Z,ACME\admin,Windows 10 Enterprise +ENG-WS-036,10.10.1.136,C:\Users\admin\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,c6204f53c0b2a92aac50c49874bd3c3396ce84a4e7245eeaf431357cd6066a09,2026-02-19T08:27:29.801Z,2026-02-12T03:12:57.119Z,ACME\admin,Windows 10 Enterprise +LEG-WS-037,10.10.2.137,C:\Users\jsmith\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,11d84aba9b6fb92692c6c3877d7ed3f6d8e9e6bfe02176f1c90b429972bead4b,2026-02-16T16:43:28.875Z,2026-02-11T08:21:13.326Z,ACME\jsmith,Windows 11 Enterprise +LEG-WS-037,10.10.2.137,C:\Users\jsmith\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,4bb17fbc2388d976a74dde32e999e1938bf05b96ccacd344536ee83fcf9f54fe,2026-02-20T01:03:42.410Z,2026-02-11T10:16:41.667Z,ACME\jsmith,Windows 11 Enterprise +LEG-WS-037,10.10.2.137,C:\Users\jsmith\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,4fd19b36fb2125c9b61bb2e6996dba2e2b07b81eaf40e0e69d09c52a7079a14f,2026-02-18T17:59:20.902Z,2026-02-12T09:24:23.517Z,ACME\jsmith,Windows 11 Enterprise +LEG-WS-037,10.10.2.137,C:\Users\jsmith\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,e86344507d08dec44296bdf977d4c8d0a670875071bf56e23b5fa292ffb50649,2026-02-17T06:33:11.969Z,2026-02-14T15:11:35.189Z,ACME\jsmith,Windows 11 Enterprise +MKT-WS-038,10.10.3.138,C:\Users\dlee\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,8739271a457daf8f41f30037e1c1ced0d54c95fe59389991c117a0f8453ce868,2026-02-15T12:13:23.608Z,2026-02-12T08:42:46.245Z,ACME\dlee,Windows Server 2022 +MKT-WS-038,10.10.3.138,C:\Users\dlee\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,d1342ced6690422872780de686c8e7494954935308ba8f7ae7ddb9711a3396b0,2026-02-19T07:48:51.901Z,2026-02-15T08:36:20.479Z,ACME\dlee,Windows Server 2022 +MKT-WS-038,10.10.3.138,C:\Users\dlee\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,6539e9b3c1abaca85a289d05ca4586f23fac9d93d2323931e53a619b52bba9b0,2026-02-17T15:39:34.395Z,2026-02-20T05:29:11.517Z,ACME\dlee,Windows Server 2022 +MKT-WS-038,10.10.3.138,C:\Users\dlee\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,3fb656a44717a35a7c0be9a901365af909e24b7c425d927552b096fc7167ec4c,2026-02-11T12:46:09.509Z,2026-02-18T05:47:14.564Z,ACME\dlee,Windows Server 2022 +MKT-WS-038,10.10.3.138,C:\Users\dlee\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,9063b069d8db3fd36bb61c02fcd4341632897245d9b0749108e7d37dff081bed,2026-02-15T14:02:37.289Z,2026-02-18T16:56:33.936Z,ACME\dlee,Windows Server 2022 +MKT-WS-038,10.10.3.138,C:\Users\dlee\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,0d09a89c8c062c535072505ab85c53c406b90ada55f2bc1779169081d7f2588c,2026-02-19T04:47:12.878Z,2026-02-18T00:54:24.218Z,ACME\dlee,Windows Server 2022 +MKT-WS-038,10.10.3.138,C:\Users\dlee\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,11203efe9474b9ba0ef4a03b9c28759d0160e3d9d93588a06d478c36f874c65c,2026-02-20T02:29:49.078Z,2026-02-19T22:21:47.535Z,ACME\dlee,Windows Server 2022 +EXEC-WS-039,10.10.1.139,C:\Users\svc_sql\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,826823ebcf6461b669d6dfcf4d4e495d5627d79d6dc032dda8fe3c2c48fcc50a,2026-02-20T00:00:12.630Z,2026-02-15T11:27:53.682Z,ACME\svc_sql,Windows Server 2019 +EXEC-WS-039,10.10.1.139,C:\Users\svc_sql\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,97b7f6c064e5b62490dc562001d0e2f95b7d8b6e7a11f78e5921e000c5e5f9e4,2026-02-17T18:26:33.219Z,2026-02-15T18:44:39.015Z,ACME\svc_sql,Windows Server 2019 +EXEC-WS-039,10.10.1.139,C:\Users\svc_sql\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,34c482eab608dffe2f6758f46a41d9d937edd67dce700f017558626b13cd85fc,2026-02-19T12:05:29.960Z,2026-02-12T11:47:29.812Z,ACME\svc_sql,Windows Server 2019 +EXEC-WS-039,10.10.1.139,C:\Users\svc_sql\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,237048f3f8186d58b7bca02c01da3f5a90fca244fcd60e46111863b29c4cd555,2026-02-14T18:36:48.164Z,2026-02-15T21:38:26.531Z,ACME\svc_sql,Windows Server 2019 +EXEC-WS-039,10.10.1.139,C:\Users\svc_sql\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,a5ec502981598ffdab22820409a2e4fd7017cfb9d9a01bfc69f7a946f880d021,2026-02-17T06:22:57.044Z,2026-02-16T07:39:30.819Z,ACME\svc_sql,Windows Server 2019 +EXEC-WS-039,10.10.1.139,C:\Users\svc_sql\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,1dae3108a52487125d94622cf48258726b235c252999bdfed3ccaa91bace0215,2026-02-18T23:16:27.662Z,2026-02-14T16:25:39.893Z,ACME\svc_sql,Windows Server 2019 +EXEC-WS-039,10.10.1.139,C:\Users\svc_sql\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,cb5657ca38b76d25085837f60deccd56569b22c7754e9a929cae3ac4b56c643e,2026-02-13T11:50:27.341Z,2026-02-16T00:45:44.228Z,ACME\svc_sql,Windows Server 2019 +IT-WS-040,10.10.2.140,C:\Users\svc_web\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,62bbebecfcdb6b0e658c0503f21acbf4522930206e7e804e4df1bb50d529c025,2026-02-12T05:52:16.406Z,2026-02-20T01:56:44.308Z,ACME\svc_web,Windows 10 Enterprise +IT-WS-040,10.10.2.140,C:\Users\svc_web\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,559a434bad4fd1e7ac1d2219a5e796f6a528b8d0ae9a3bcf3a4c2710389a57bb,2026-02-15T12:26:38.075Z,2026-02-13T19:50:04.532Z,ACME\svc_web,Windows 10 Enterprise +IT-WS-040,10.10.2.140,C:\Users\svc_web\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,e7aa387015616f0568607781a009fefbc244025c7673c862fe73abbbbf2f250c,2026-02-10T10:15:46.451Z,2026-02-14T14:07:36.291Z,ACME\svc_web,Windows 10 Enterprise +HR-WS-041,10.10.3.141,C:\Users\emartinez\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,64c9e9427ec80e30136f0faa959a1daad692bb35973496202ccd6084b6d57e7d,2026-02-14T17:38:15.014Z,2026-02-12T23:50:02.998Z,ACME\emartinez,Windows 11 Enterprise +HR-WS-041,10.10.3.141,C:\Users\emartinez\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,b0ca056803ad17117b280211794722eb5de45ddfa57b35e09bb4ffd2110cc0db,2026-02-13T03:12:59.189Z,2026-02-10T09:56:05.071Z,ACME\emartinez,Windows 11 Enterprise +HR-WS-041,10.10.3.141,C:\Users\emartinez\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,6bcd09fa9f6e067c94dd7157e87730e622b18af8b4ecfb0f7e783af146738e53,2026-02-11T16:32:02.524Z,2026-02-18T03:07:54.319Z,ACME\emartinez,Windows 11 Enterprise +HR-WS-041,10.10.3.141,C:\Users\emartinez\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,2c65e1bc636fcb720f680b6319ed9c4b41ef473ba6ff493ecacfdb04741e4ffd,2026-02-14T15:44:58.668Z,2026-02-17T22:42:21.245Z,ACME\emartinez,Windows 11 Enterprise +HR-WS-041,10.10.3.141,C:\Users\emartinez\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,5c5f013d7cc755997654fb94b39516106c14f9ec40eebe465751db3231dfa7cd,2026-02-12T11:37:53.268Z,2026-02-19T10:25:06.657Z,ACME\emartinez,Windows 11 Enterprise +FIN-WS-042,10.10.1.142,C:\Users\idavis\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,a4da7990e3d3a19d0198a2b92d8be7e9083031fe8ee5648c73fb46441c1aa43e,2026-02-15T07:47:32.254Z,2026-02-16T00:08:09.602Z,ACME\idavis,Windows Server 2022 +FIN-WS-042,10.10.1.142,C:\Users\idavis\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,69cd9b817a3e8b48a586b2b2660be5551d926a12a6f552403579aab03bd362d2,2026-02-11T10:27:22.817Z,2026-02-17T22:43:10.085Z,ACME\idavis,Windows Server 2022 +FIN-WS-042,10.10.1.142,C:\Users\idavis\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,7c4de6d7b583d8f253040ea6415d825c86bc2e6e6eed53b2ec83cffac3f6c95c,2026-02-18T07:06:06.113Z,2026-02-16T07:02:42.593Z,ACME\idavis,Windows Server 2022 +FIN-WS-042,10.10.1.142,C:\Users\idavis\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,a40c352351e3f1959edbea4ca25bf1032d0b86026d35cc461da1eaf6930acde6,2026-02-17T04:24:32.715Z,2026-02-20T09:33:18.546Z,ACME\idavis,Windows Server 2022 +FIN-WS-042,10.10.1.142,C:\Users\idavis\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,3f37dc9176e2a2f2aee12b69f1536b7c2e69773cd606f7b29385f1e8ae57b926,2026-02-17T12:50:15.529Z,2026-02-15T01:43:18.692Z,ACME\idavis,Windows Server 2022 +FIN-WS-042,10.10.1.142,C:\Users\idavis\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,5dde7ae84a3807d2864a1de6fb74d3a7cb97901109d1ed6bd3830a5eccc8f751,2026-02-14T00:16:23.810Z,2026-02-18T14:21:01.599Z,ACME\idavis,Windows Server 2022 +FIN-WS-042,10.10.1.142,C:\Users\idavis\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,e1a764ecd9ecc4dea8f35392cedc76364bb8e8c7f631e4fe56471059f466d86f,2026-02-15T08:12:07.452Z,2026-02-12T12:23:53.101Z,ACME\idavis,Windows Server 2022 +SLS-WS-043,10.10.2.143,C:\Users\hbrown\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,caf49344f41486a2f7ca444363309f97de2794f0e28519077b2c8e97a09d5747,2026-02-17T12:01:21.401Z,2026-02-10T14:03:05.915Z,ACME\hbrown,Windows Server 2019 +SLS-WS-043,10.10.2.143,C:\Users\hbrown\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,4b0cb099ef0e43921668ffeb7c10413ef57c89f221045d423009a2f17b930aad,2026-02-17T09:10:05.692Z,2026-02-19T00:56:23.555Z,ACME\hbrown,Windows Server 2019 +SLS-WS-043,10.10.2.143,C:\Users\hbrown\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,de9530ae9a96239a45653fb2c4e8c39c1422ef63d320258f1e8ec933c502fb1a,2026-02-13T03:10:39.548Z,2026-02-19T22:53:31.688Z,ACME\hbrown,Windows Server 2019 +SLS-WS-043,10.10.2.143,C:\Users\hbrown\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,ab3cc4f79938850d79f27c8fd131e523d1fb512299209a97855b30dfe29f0b26,2026-02-12T04:51:39.336Z,2026-02-14T22:30:22.757Z,ACME\hbrown,Windows Server 2019 +SLS-WS-043,10.10.2.143,C:\Users\hbrown\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,725be315101693ae4da65d9178e6c0b18e9fa2dc03c8856303030adaf6fbc12d,2026-02-14T11:23:51.453Z,2026-02-16T18:42:41.012Z,ACME\hbrown,Windows Server 2019 +SLS-WS-043,10.10.2.143,C:\Users\hbrown\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,90864179c571f1895d0ac072247d70dae30b4625b33aa39a5a75e2b2e48a9934,2026-02-16T06:59:13.911Z,2026-02-13T15:54:31.046Z,ACME\hbrown,Windows Server 2019 +ENG-WS-044,10.10.3.144,C:\Users\svc_backup\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,b7f35cf93d7ccbda6c74c571e4a54b568d749525b9f9d580b4e0472c7672ba21,2026-02-12T00:40:35.817Z,2026-02-20T14:47:37.629Z,ACME\svc_backup,Windows 10 Enterprise +ENG-WS-044,10.10.3.144,C:\Users\svc_backup\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,3fd6431876135c6847283dc252799c757ef7f2fb8195c22cd90386c56f814102,2026-02-19T03:43:18.491Z,2026-02-17T13:06:36.485Z,ACME\svc_backup,Windows 10 Enterprise +ENG-WS-044,10.10.3.144,C:\Users\svc_backup\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,0d8d2f9d3da475161c770f781e8374b86ba629751a7bfd28d053762e14a9fa0a,2026-02-15T07:45:47.271Z,2026-02-20T15:37:22.446Z,ACME\svc_backup,Windows 10 Enterprise +ENG-WS-044,10.10.3.144,C:\Users\svc_backup\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,f6a7a23dfd0ff30f220ea3ef043b452d767b662d972e11f542befa15a489fd20,2026-02-18T11:44:50.893Z,2026-02-18T23:28:09.534Z,ACME\svc_backup,Windows 10 Enterprise +ENG-WS-044,10.10.3.144,C:\Users\svc_backup\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,7f3cc0419d9f1bab44faa1a49ab31e292d5a604eac29c1e15f94c844d23a354e,2026-02-16T05:30:17.569Z,2026-02-10T21:40:58.118Z,ACME\svc_backup,Windows 10 Enterprise +LEG-WS-045,10.10.1.145,C:\Users\cjohnson\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,8e82c9bd05ccd7a81a3b560c737042cbd9336ae03ed701845613abe0d59a299f,2026-02-13T05:29:24.014Z,2026-02-20T00:29:15.903Z,ACME\cjohnson,Windows 11 Enterprise +LEG-WS-045,10.10.1.145,C:\Users\cjohnson\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,5e73d77eca2387c2afa168cf8056f28fb2dec916546b428ab50ac811f4cefa21,2026-02-11T01:10:37.466Z,2026-02-16T19:58:39.822Z,ACME\cjohnson,Windows 11 Enterprise +LEG-WS-045,10.10.1.145,C:\Users\cjohnson\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,e87e043453e02569e0bba0cdef4b336d8d8a69a60d52dad3132e3990b57cedce,2026-02-16T08:46:28.014Z,2026-02-17T21:58:04.518Z,ACME\cjohnson,Windows 11 Enterprise +LEG-WS-045,10.10.1.145,C:\Users\cjohnson\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,1009e17d12990f95d7fc5bb91fd9c8f0e475feb06265e6766a0e0f39b9531456,2026-02-10T15:29:09.939Z,2026-02-20T17:53:35.951Z,ACME\cjohnson,Windows 11 Enterprise +LEG-WS-045,10.10.1.145,C:\Users\cjohnson\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,cdb7380059530e0c6d76a5b780034081b1513aa95de751d82e5a945d225a982f,2026-02-14T13:11:37.245Z,2026-02-19T01:32:57.232Z,ACME\cjohnson,Windows 11 Enterprise +LEG-WS-045,10.10.1.145,C:\Users\cjohnson\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,406b1b9785ca1dad5468288172e147aeeadfd279d90aa8a81e94ac04ce12f63d,2026-02-11T15:39:29.933Z,2026-02-12T12:06:15.932Z,ACME\cjohnson,Windows 11 Enterprise +LEG-WS-045,10.10.1.145,C:\Users\cjohnson\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,7260f94b893d531df361dd6f5c1f282642bbda812e21e3ee0375164274638b54,2026-02-15T23:15:39.620Z,2026-02-14T04:49:55.937Z,ACME\cjohnson,Windows 11 Enterprise +LEG-WS-045,10.10.1.145,C:\Users\cjohnson\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,4eeea26c4105f7c956646ef3ec9045a88d82ae941daafd7170df268626d1c283,2026-02-10T20:28:13.454Z,2026-02-16T05:36:55.749Z,ACME\cjohnson,Windows 11 Enterprise +MKT-WS-046,10.10.2.146,C:\Users\gwhite\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,15c8638a45bdd673d3ff7c95171a0eaf422a4cca8ded7e91f6e9dbf2d2295aba,2026-02-15T08:09:33.058Z,2026-02-17T22:57:07.760Z,ACME\gwhite,Windows Server 2022 +MKT-WS-046,10.10.2.146,C:\Users\gwhite\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,3a33ce0e2967b1d2d9905d03f55b632d97e802931bf8593e9a45d69225d57a77,2026-02-20T07:25:37.501Z,2026-02-13T04:43:40.976Z,ACME\gwhite,Windows Server 2022 +MKT-WS-046,10.10.2.146,C:\Users\gwhite\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,c21407bc7559f5ce75bcc050c946c4c4d266a4ac9d147e84a66bf174cd19645b,2026-02-18T08:52:58.045Z,2026-02-13T13:13:19.531Z,ACME\gwhite,Windows Server 2022 +EXEC-WS-047,10.10.3.147,C:\Users\svc_backup\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,8ca46a0fd1f8749083aa7f989b5fc735df042fbd8a07656dcf7e66af935b3274,2026-02-13T16:41:39.060Z,2026-02-18T17:15:07.175Z,ACME\svc_backup,Windows Server 2019 +EXEC-WS-047,10.10.3.147,C:\Users\svc_backup\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,91d608b1d94a04b68d9e9668f23fce348a333baa9e1831ea526475bf381ac83e,2026-02-12T07:19:38.065Z,2026-02-19T15:24:54.241Z,ACME\svc_backup,Windows Server 2019 +EXEC-WS-047,10.10.3.147,C:\Users\svc_backup\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,7b243e08bcb74f6345e753c91bf0f66e96fc194f1b4ec87b00c491cc16b3325f,2026-02-16T05:52:30.816Z,2026-02-12T03:50:42.145Z,ACME\svc_backup,Windows Server 2019 +EXEC-WS-047,10.10.3.147,C:\Users\svc_backup\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,22d31ee74d58df4963f98cda8110c4c8209e26433e3940f1db0a59d6e3260638,2026-02-12T23:31:17.286Z,2026-02-15T22:26:40.326Z,ACME\svc_backup,Windows Server 2019 +EXEC-WS-047,10.10.3.147,C:\Users\svc_backup\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,4bdaf635205a763f2327146524cc008105891b14a3c8311fe8e46fbbc66443e0,2026-02-16T12:09:02.109Z,2026-02-15T00:20:32.421Z,ACME\svc_backup,Windows Server 2019 +IT-WS-048,10.10.1.148,C:\Users\svc_web\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,15d008e3f556e820f7f18bdf44d4bd68c8c6ebc7aa234acce6c2e9db13bbaa48,2026-02-17T15:29:47.826Z,2026-02-19T03:16:38.437Z,ACME\svc_web,Windows 10 Enterprise +IT-WS-048,10.10.1.148,C:\Users\svc_web\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,4854aa44d8e59d34e4011dee8a4f6b826566c8f09ad2b3517b41fcaabe53ba44,2026-02-13T22:28:53.872Z,2026-02-14T19:43:15.171Z,ACME\svc_web,Windows 10 Enterprise +IT-WS-048,10.10.1.148,C:\Users\svc_web\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,0561c5e25e2a4e394a00c4d04ace0e58fcb82370f757818acdc29a97f1315230,2026-02-10T22:58:17.984Z,2026-02-13T04:40:38.646Z,ACME\svc_web,Windows 10 Enterprise +IT-WS-048,10.10.1.148,C:\Users\svc_web\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,ad56dc8bd5f4e3a7244942969d14a5ed007564afd8234bc41b749a9d6ef94625,2026-02-14T01:28:03.196Z,2026-02-11T05:01:23.410Z,ACME\svc_web,Windows 10 Enterprise +IT-WS-048,10.10.1.148,C:\Users\svc_web\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,f45a8ddb81dcea19037d3e99421bade1397085f15afda9d8fd3d79e2509625c0,2026-02-13T22:23:36.095Z,2026-02-16T19:37:27.832Z,ACME\svc_web,Windows 10 Enterprise +IT-WS-048,10.10.1.148,C:\Users\svc_web\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,b11beeeb39c2bbede4e6a3fc15062c3883c71a7b4ebc880f8e860e2565bec245,2026-02-17T23:56:29.235Z,2026-02-16T15:53:44.965Z,ACME\svc_web,Windows 10 Enterprise +IT-WS-048,10.10.1.148,C:\Users\svc_web\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,51f6861479b42e6e1f286a6b360e65d6ab295b3a9d38b17440edfcfc4ef75bbf,2026-02-15T15:04:02.380Z,2026-02-20T08:26:44.056Z,ACME\svc_web,Windows 10 Enterprise +IT-WS-048,10.10.1.148,C:\Users\svc_web\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,7210e00d9ff6868307df0eeb3788de0b2ae9ff946f111368b46d42da243514d1,2026-02-10T20:28:38.011Z,2026-02-16T05:11:46.785Z,ACME\svc_web,Windows 10 Enterprise +HR-WS-049,10.10.2.149,C:\Users\svc_web\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,591763af5cfc6bec51fdf942dcb5bba11a1881f7f4d8e09ec57b95b8868c8ad7,2026-02-19T12:07:32.972Z,2026-02-11T17:02:36.653Z,ACME\svc_web,Windows 11 Enterprise +HR-WS-049,10.10.2.149,C:\Users\svc_web\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,e94f7dfbc335b2f4bffd2a908afba84b2e8ff31ca1f556da6239a01ddd487f19,2026-02-15T07:04:52.369Z,2026-02-20T01:34:51.495Z,ACME\svc_web,Windows 11 Enterprise +HR-WS-049,10.10.2.149,C:\Users\svc_web\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,41f1e49f2b8afbb450447b5a11ce7c322467db266383e67382050465390585e7,2026-02-17T10:22:35.991Z,2026-02-15T16:58:14.855Z,ACME\svc_web,Windows 11 Enterprise +HR-WS-049,10.10.2.149,C:\Users\svc_web\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,da4382304451637b3a9eea68afadcfa74d975af4db4a9bfddb477e38d4246d3f,2026-02-13T17:53:29.182Z,2026-02-14T15:11:33.519Z,ACME\svc_web,Windows 11 Enterprise +HR-WS-049,10.10.2.149,C:\Users\svc_web\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,93fea86c2009fb57c3b01dbe58e63b5cdfd43470a41a160fe36b02921027be54,2026-02-20T16:27:37.178Z,2026-02-16T16:57:25.343Z,ACME\svc_web,Windows 11 Enterprise +FIN-WS-050,10.10.3.150,C:\Users\hbrown\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,a24d40cd3df2bf6f7bbc3aa5cab22829a3ac957dc5a1454ca338dbdf2def6bf5,2026-02-17T07:03:33.301Z,2026-02-10T14:26:13.260Z,ACME\hbrown,Windows Server 2022 +FIN-WS-050,10.10.3.150,C:\Users\hbrown\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,8b6213801b49ffee0f1e75f3dbb6669c40a61fa39db745127f72082e80e047ad,2026-02-14T10:59:49.346Z,2026-02-15T16:23:02.229Z,ACME\hbrown,Windows Server 2022 +FIN-WS-050,10.10.3.150,C:\Users\hbrown\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,3d909be6cfcd977f62b7e5e27e340c068be43e11e6ea02998e789d8483bf1699,2026-02-10T15:00:35.773Z,2026-02-17T16:43:42.684Z,ACME\hbrown,Windows Server 2022 +SLS-WS-051,10.10.1.151,C:\Users\bwilson\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,dfbd05289c931ca09ece378fc352ca7cef2e942f0bc272243cb82ec81cdfcb3c,2026-02-14T16:36:33.359Z,2026-02-16T08:13:53.158Z,ACME\bwilson,Windows Server 2019 +SLS-WS-051,10.10.1.151,C:\Users\bwilson\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,5b11223971d332a81eab4a5d19388086710d772a6df25ce155a5ed027d0b84ad,2026-02-14T02:42:22.927Z,2026-02-12T01:38:45.881Z,ACME\bwilson,Windows Server 2019 +SLS-WS-051,10.10.1.151,C:\Users\bwilson\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,28f4b935f30de5efca6703ccd92960182250cb7bf4a5c748d99b9a42895b53a0,2026-02-13T11:50:44.278Z,2026-02-13T15:17:01.703Z,ACME\bwilson,Windows Server 2019 +SLS-WS-051,10.10.1.151,C:\Users\bwilson\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,5724811fa9ef2397a6048874f621bc1e75ff9050e4901271175fd87ba83cc306,2026-02-19T03:11:32.086Z,2026-02-10T22:27:32.373Z,ACME\bwilson,Windows Server 2019 +SLS-WS-051,10.10.1.151,C:\Users\bwilson\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,3ee51ef26fad03eb6cc0492b70726fca488209929a82018a87896782187d1588,2026-02-12T01:16:52.307Z,2026-02-14T04:23:02.713Z,ACME\bwilson,Windows Server 2019 +SLS-WS-051,10.10.1.151,C:\Users\bwilson\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,cdb40d12da5dd8ccda9c391aeca91ce3b7a62015d9e0de8e8b244ed5a22c0814,2026-02-13T21:31:26.399Z,2026-02-12T12:21:12.074Z,ACME\bwilson,Windows Server 2019 +ENG-WS-052,10.10.2.152,C:\Users\bwilson\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,20f04fa1378f3605b1f05eb21a5b39947107f5bc0451fd8fd14b1261eded33d7,2026-02-16T05:59:03.718Z,2026-02-11T01:10:17.575Z,ACME\bwilson,Windows 10 Enterprise +ENG-WS-052,10.10.2.152,C:\Users\bwilson\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,bc41d47c0e020f38f171c4e7bb05d6a36f82cce5795dbefb9d889f1ab8a98092,2026-02-11T18:58:26.405Z,2026-02-19T03:59:09.719Z,ACME\bwilson,Windows 10 Enterprise +ENG-WS-052,10.10.2.152,C:\Users\bwilson\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,f3a9bb726eb6764a7d6979caab7cc1f976d2294c14dc58ab65a77b624885517f,2026-02-15T15:33:14.983Z,2026-02-15T21:28:39.909Z,ACME\bwilson,Windows 10 Enterprise +ENG-WS-052,10.10.2.152,C:\Users\bwilson\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,8dfcfd541f02f8743a7fba9a21ab9c11017843174e9fe31557561e19154084d5,2026-02-17T13:03:01.811Z,2026-02-11T04:11:46.132Z,ACME\bwilson,Windows 10 Enterprise +ENG-WS-052,10.10.2.152,C:\Users\bwilson\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,b07700109e195c26035923a978783dffc552bd564d5441c05c431d11862f268c,2026-02-12T00:47:41.334Z,2026-02-18T05:36:57.669Z,ACME\bwilson,Windows 10 Enterprise +ENG-WS-052,10.10.2.152,C:\Users\bwilson\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,4fb0ef847ff8dc1b3853694111af672c1e1666b68dad3e2b2aa0aeca16a169bd,2026-02-17T10:26:40.881Z,2026-02-18T23:08:43.836Z,ACME\bwilson,Windows 10 Enterprise +ENG-WS-052,10.10.2.152,C:\Users\bwilson\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,4274dd6afe5faa8353b2a849de4bc43d17e394d8724db0fef46e692977ab3db5,2026-02-18T09:06:30.024Z,2026-02-11T00:09:19.656Z,ACME\bwilson,Windows 10 Enterprise +ENG-WS-052,10.10.2.152,C:\Users\bwilson\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,2f0e1a60ae27dec2f23616d01400e717f93911c9eb34e6db99459ce4281944dd,2026-02-18T14:50:37.907Z,2026-02-17T11:14:29.469Z,ACME\bwilson,Windows 10 Enterprise +LEG-WS-053,10.10.3.153,C:\Users\svc_backup\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,5350bd0171d8593cf11cf439d51d9ec22db8f4959b995fbfc80c5d410e454286,2026-02-16T08:45:23.209Z,2026-02-13T04:40:16.458Z,ACME\svc_backup,Windows 11 Enterprise +LEG-WS-053,10.10.3.153,C:\Users\svc_backup\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,e2dbd309766a659ae2850e73eaf59694cc7992ee70860a03a1bdb6bb6830f188,2026-02-17T20:13:47.658Z,2026-02-19T03:12:54.071Z,ACME\svc_backup,Windows 11 Enterprise +LEG-WS-053,10.10.3.153,C:\Users\svc_backup\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,5cd2dcf247781d5859f7d96b94c9274128ce20ae78eb45e479dba478011b9e10,2026-02-13T05:48:54.994Z,2026-02-15T16:00:26.197Z,ACME\svc_backup,Windows 11 Enterprise +LEG-WS-053,10.10.3.153,C:\Users\svc_backup\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,9365ffa4a021c0873ea17f94206df851dd699d574029ac0ad37d7f42f9c36335,2026-02-19T10:33:10.631Z,2026-02-19T15:23:55.632Z,ACME\svc_backup,Windows 11 Enterprise +LEG-WS-053,10.10.3.153,C:\Users\svc_backup\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,058d8d26619cc43ae1951ddb9c8c7dbef56e24e6cc3e9c9a12e775cb7a304b51,2026-02-12T01:34:05.741Z,2026-02-15T18:54:22.756Z,ACME\svc_backup,Windows 11 Enterprise +LEG-WS-053,10.10.3.153,C:\Users\svc_backup\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,aa8b539ee3686667944d7af5d60400dffde395a011c0882adaa0e36c5b0d22a3,2026-02-11T08:54:43.639Z,2026-02-10T19:17:25.296Z,ACME\svc_backup,Windows 11 Enterprise +LEG-WS-053,10.10.3.153,C:\Users\svc_backup\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,e82d92fba2a1f8450d6ce8d1765203a5f353e5f0afb5cfdca5e2ada2ae8ce974,2026-02-14T11:40:29.934Z,2026-02-19T09:41:07.164Z,ACME\svc_backup,Windows 11 Enterprise +LEG-WS-053,10.10.3.153,C:\Users\svc_backup\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,da28550a9beaf9f77c96e71311967b6f21a308f9d89131594d78837debf20d6d,2026-02-17T13:02:43.678Z,2026-02-11T21:11:03.662Z,ACME\svc_backup,Windows 11 Enterprise +MKT-WS-054,10.10.1.154,C:\Users\bwilson\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,980d5af4c6cbeb4d7daeb5f688b25c1282ae1e69260b3592e64fedd3cbbb7797,2026-02-11T06:19:47.914Z,2026-02-12T20:32:38.682Z,ACME\bwilson,Windows Server 2022 +MKT-WS-054,10.10.1.154,C:\Users\bwilson\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,3617f5180f5224f1cfa5c2ed5d898e106613182bf1585c883a5722bb4f56fc1b,2026-02-14T13:55:55.352Z,2026-02-11T09:16:10.078Z,ACME\bwilson,Windows Server 2022 +MKT-WS-054,10.10.1.154,C:\Users\bwilson\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,7b0e1576e1418253a6ac7a1d82b152bd6fedffbfd02a9256af3a1b3cb5a40537,2026-02-12T08:36:19.447Z,2026-02-14T01:11:58.780Z,ACME\bwilson,Windows Server 2022 +MKT-WS-054,10.10.1.154,C:\Users\bwilson\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,07dffb3558eb2d02d7ad1109a4ca9fcc29c690153e3cc0d513171e5fe1c15b01,2026-02-13T06:00:43.915Z,2026-02-10T16:44:07.885Z,ACME\bwilson,Windows Server 2022 +EXEC-WS-055,10.10.2.155,C:\Users\idavis\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,3af6a07345316a9f73f1424324c3374b8b30226c90068c6325d22f90b0add79f,2026-02-16T21:08:26.488Z,2026-02-17T21:25:46.277Z,ACME\idavis,Windows Server 2019 +EXEC-WS-055,10.10.2.155,C:\Users\idavis\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,782dc134b0b8e55b412d780c0b3dfcc5d0998f312f7f319d57ba8e39e06cd8e8,2026-02-15T04:58:46.698Z,2026-02-11T14:37:55.486Z,ACME\idavis,Windows Server 2019 +EXEC-WS-055,10.10.2.155,C:\Users\idavis\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,346cc8f38df4a795b8c4497f00cf3bb190020ef0f2d6004040e1056ab5549a5e,2026-02-12T20:41:06.567Z,2026-02-11T09:58:00.895Z,ACME\idavis,Windows Server 2019 +EXEC-WS-055,10.10.2.155,C:\Users\idavis\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,9ed3358e394cad72a925efaca08c9ac362e6dd66e9484aa8b8aa6b0980f828c7,2026-02-14T22:27:43.775Z,2026-02-18T22:29:08.888Z,ACME\idavis,Windows Server 2019 +EXEC-WS-055,10.10.2.155,C:\Users\idavis\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,5350debd35e21079ef38f1d3900fce18a5995cdce538c093e74436ca471e09a4,2026-02-14T08:11:54.017Z,2026-02-16T20:51:46.162Z,ACME\idavis,Windows Server 2019 +EXEC-WS-055,10.10.2.155,C:\Users\idavis\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,9c76320c13a88cf7a63ada8166f90ff4a28ba05a393e9f8f6cab48a33126cc0c,2026-02-16T13:01:01.897Z,2026-02-20T17:00:09.009Z,ACME\idavis,Windows Server 2019 +EXEC-WS-055,10.10.2.155,C:\Users\idavis\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,3f69af120a3550fed16c34ee4d69d25a84255b740193aace6b16f686d67354b6,2026-02-14T00:21:13.260Z,2026-02-16T14:01:10.433Z,ACME\idavis,Windows Server 2019 +IT-WS-056,10.10.3.156,C:\Users\hbrown\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,f3f34da2997d55930fb150e4dad2841cee5cf927258bb49305a84b5be9bb4665,2026-02-12T18:19:04.587Z,2026-02-13T12:13:55.926Z,ACME\hbrown,Windows 10 Enterprise +IT-WS-056,10.10.3.156,C:\Users\hbrown\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,d0687e11d73598ae20792317456e89268e739c08c5b066acc5fc056669cef515,2026-02-12T02:06:08.156Z,2026-02-10T15:27:58.479Z,ACME\hbrown,Windows 10 Enterprise +IT-WS-056,10.10.3.156,C:\Users\hbrown\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,f19c851bdb7469905233ff38c0eb32f4d026777aefd568da9a80c85ea898e3e8,2026-02-10T08:03:43.735Z,2026-02-11T09:29:48.806Z,ACME\hbrown,Windows 10 Enterprise +IT-WS-056,10.10.3.156,C:\Users\hbrown\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,6209fecb584b3b6528c63e84fc646e22fcae7266378ef4eca3b5e40a696e8935,2026-02-11T03:10:15.588Z,2026-02-15T13:55:52.986Z,ACME\hbrown,Windows 10 Enterprise +IT-WS-056,10.10.3.156,C:\Users\hbrown\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,7c5adcd92162fa1f9a636949604eee9a9f1b76be1cb81b76fc5d88ed85e8c7d5,2026-02-17T16:49:16.504Z,2026-02-16T23:27:24.169Z,ACME\hbrown,Windows 10 Enterprise +IT-WS-056,10.10.3.156,C:\Users\hbrown\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,433891d26a5a2f317d9b3ffc2b0152d710e3b0c4ce79dafdd85b9417bbb01962,2026-02-15T23:49:46.158Z,2026-02-18T13:41:28.915Z,ACME\hbrown,Windows 10 Enterprise +HR-WS-057,10.10.1.157,C:\Users\svc_backup\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,159b1af58930df3d714818f7d1d26a8d0236aa9ae67072e4dc568efc6a239104,2026-02-11T05:36:19.999Z,2026-02-20T10:39:43.392Z,ACME\svc_backup,Windows 11 Enterprise +HR-WS-057,10.10.1.157,C:\Users\svc_backup\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,7c360af0f5933020a07c1d6eed650fd0f714c4e10e4814beec5bce187c7b0ac7,2026-02-19T13:20:38.501Z,2026-02-15T10:09:00.787Z,ACME\svc_backup,Windows 11 Enterprise +HR-WS-057,10.10.1.157,C:\Users\svc_backup\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,838982523731ed5c84539a743366f47f964d269c73bdd177df98706d8d90f174,2026-02-10T18:42:01.615Z,2026-02-15T03:31:22.686Z,ACME\svc_backup,Windows 11 Enterprise +FIN-WS-058,10.10.2.158,C:\Users\svc_sql\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,fe7a2c2436e339959bc87cf30b907283b3469ebaf99d7cb4daa020f6a5fbdaa4,2026-02-16T06:35:42.030Z,2026-02-10T22:28:55.148Z,ACME\svc_sql,Windows Server 2022 +FIN-WS-058,10.10.2.158,C:\Users\svc_sql\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,d9b86651a70c83507d04c49b5fa690c6377c08ca36623cf5732c533b24048313,2026-02-14T16:20:05.890Z,2026-02-18T11:12:28.150Z,ACME\svc_sql,Windows Server 2022 +FIN-WS-058,10.10.2.158,C:\Users\svc_sql\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,104df32fcf74e7c765528724efe84ab9158695b0a5cd4a86ce05bd99385e91ba,2026-02-11T10:34:18.172Z,2026-02-10T12:10:06.417Z,ACME\svc_sql,Windows Server 2022 +FIN-WS-058,10.10.2.158,C:\Users\svc_sql\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,c796bdee0bb2b195dd9244dfebc01776627ec5f41f5cb687786d2bee6acacf6a,2026-02-16T09:53:53.186Z,2026-02-20T08:37:42.204Z,ACME\svc_sql,Windows Server 2022 +SLS-WS-059,10.10.3.159,C:\Users\svc_backup\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,6b89e7933f24098acaece345ae94dfde12d89fff310dd789f97ce69270d46eab,2026-02-18T01:35:39.439Z,2026-02-13T02:42:05.599Z,ACME\svc_backup,Windows Server 2019 +SLS-WS-059,10.10.3.159,C:\Users\svc_backup\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,b62da658171c41525451fa9c18528e81c688c7f1997395a51bf39e93f57924e9,2026-02-19T16:05:28.770Z,2026-02-10T14:41:12.435Z,ACME\svc_backup,Windows Server 2019 +SLS-WS-059,10.10.3.159,C:\Users\svc_backup\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,fb5b8f47dda60b1afda78c8c8ff07dec9380ea6e9b521bda6145d6ac6659d3ed,2026-02-14T06:47:04.073Z,2026-02-16T21:30:46.778Z,ACME\svc_backup,Windows Server 2019 +SLS-WS-059,10.10.3.159,C:\Users\svc_backup\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,954380e542e548b7824fcb25fd3c18afb90c03c519a08339452170195a09c47c,2026-02-20T02:57:58.740Z,2026-02-16T03:04:39.739Z,ACME\svc_backup,Windows Server 2019 +SLS-WS-059,10.10.3.159,C:\Users\svc_backup\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,5a4cb370b4ced46ebb17a5443b3db72cf056730a8a0c8aadf454c94f48b9d172,2026-02-14T19:10:46.875Z,2026-02-10T12:12:23.136Z,ACME\svc_backup,Windows Server 2019 +SLS-WS-059,10.10.3.159,C:\Users\svc_backup\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,b8eaa121430f3c485fb8a684516fc7b3cd7b9c39ab2e526456fecd043a939543,2026-02-11T08:02:07.399Z,2026-02-14T06:47:25.094Z,ACME\svc_backup,Windows Server 2019 +SLS-WS-059,10.10.3.159,C:\Users\svc_backup\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,9a9c9bbc284bc127d351e3b9432bbbd44afbf872a6003e1a30a5aa79482284a7,2026-02-18T10:41:02.695Z,2026-02-16T20:30:42.029Z,ACME\svc_backup,Windows Server 2019 +ENG-WS-060,10.10.1.160,C:\Users\bwilson\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,905845af52b2628c5f8726416dd272ee873dbe70e10ad2aa5e33f30eb9eaffec,2026-02-16T00:33:47.103Z,2026-02-18T09:46:51.688Z,ACME\bwilson,Windows 10 Enterprise +ENG-WS-060,10.10.1.160,C:\Users\bwilson\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,68d38118d5daa87938602ba745b1bf2f7125419e7c7aaf0ae2cfbef4878b7f8d,2026-02-10T22:44:43.401Z,2026-02-17T17:55:07.034Z,ACME\bwilson,Windows 10 Enterprise +ENG-WS-060,10.10.1.160,C:\Users\bwilson\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,e4f8142754ff57407b8db15b9286f2f1450cbaf26b94e5caa798f297579b4899,2026-02-20T16:26:38.001Z,2026-02-14T15:29:18.592Z,ACME\bwilson,Windows 10 Enterprise +LEG-WS-061,10.10.2.161,C:\Users\svc_sql\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,13ffc77c4d2b78c21e6d11207046fcc59271ae77fc1cd9859f26133f7d91f42d,2026-02-18T06:11:22.025Z,2026-02-18T16:02:03.866Z,ACME\svc_sql,Windows 11 Enterprise +LEG-WS-061,10.10.2.161,C:\Users\svc_sql\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,29135c61c8b18b6370224fc250ed146ed968bfd5b367a2512c72c8cdb4f6f0ad,2026-02-13T09:07:54.810Z,2026-02-14T07:35:05.127Z,ACME\svc_sql,Windows 11 Enterprise +LEG-WS-061,10.10.2.161,C:\Users\svc_sql\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,5a3dd12286335b7ff05bc1060aa2564b9108c99f88efe83c95582a9a30b35ec9,2026-02-19T21:59:53.396Z,2026-02-11T19:18:19.845Z,ACME\svc_sql,Windows 11 Enterprise +LEG-WS-061,10.10.2.161,C:\Users\svc_sql\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,a5073ae78724059f1284d5f92dbc68db807d213a2471f16027963320d1f17f4e,2026-02-17T09:03:44.966Z,2026-02-20T17:50:40.944Z,ACME\svc_sql,Windows 11 Enterprise +LEG-WS-061,10.10.2.161,C:\Users\svc_sql\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,6b90f7a64f916de8c91e98edcff21af430ee6afc954f5be53aed088c5581f910,2026-02-11T01:06:46.349Z,2026-02-15T22:35:57.810Z,ACME\svc_sql,Windows 11 Enterprise +LEG-WS-061,10.10.2.161,C:\Users\svc_sql\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,561f56f4c0c6994be45a4a9eab5a3d9c81d99553dd851e077b079d64e1b2c58e,2026-02-12T11:30:53.610Z,2026-02-11T00:37:33.548Z,ACME\svc_sql,Windows 11 Enterprise +MKT-WS-062,10.10.3.162,C:\Users\cjohnson\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,a120ab7df76d7c44788eab5cbb1350b9d03206cf913fca72efe9f6afe51ad123,2026-02-11T09:37:08.530Z,2026-02-16T01:55:38.041Z,ACME\cjohnson,Windows Server 2022 +MKT-WS-062,10.10.3.162,C:\Users\cjohnson\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,23d4e4171da879a726272c724ff0b813ac4715e66b2de06a06c35c9b0e3d3f74,2026-02-11T03:45:04.490Z,2026-02-12T22:34:50.380Z,ACME\cjohnson,Windows Server 2022 +MKT-WS-062,10.10.3.162,C:\Users\cjohnson\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,78c62aa32adb30aa10c99a48a654a17d6ba2565052694fee609faa7ec48f63b0,2026-02-19T22:53:33.538Z,2026-02-18T04:43:04.236Z,ACME\cjohnson,Windows Server 2022 +MKT-WS-062,10.10.3.162,C:\Users\cjohnson\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,cb15d61ce1c4fb56b82d8e1053d916011a5b9c33495392bcc7e0d4e783f37a08,2026-02-13T12:56:03.541Z,2026-02-16T22:39:08.082Z,ACME\cjohnson,Windows Server 2022 +MKT-WS-062,10.10.3.162,C:\Users\cjohnson\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,d8b3929b63b82645d1e98619510bc375a0c67d79ac3851a53498bf1776857831,2026-02-16T20:56:38.831Z,2026-02-11T10:23:30.242Z,ACME\cjohnson,Windows Server 2022 +MKT-WS-062,10.10.3.162,C:\Users\cjohnson\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,8486dcd804924cf07c9a95fb6b8f68e762267cd5516a642792a21ac08f1fb4d6,2026-02-15T21:01:29.305Z,2026-02-20T11:24:38.437Z,ACME\cjohnson,Windows Server 2022 +MKT-WS-062,10.10.3.162,C:\Users\cjohnson\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,6fecf8734c6b547d074936e151d177c5ed93d08df36d872a032fa7c736adf135,2026-02-14T10:27:35.421Z,2026-02-18T00:02:57.434Z,ACME\cjohnson,Windows Server 2022 +EXEC-WS-063,10.10.1.163,C:\Users\jsmith\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,ebb5c7a8ecd668cc7ff2b1f9036ce5dbf823db9c50e1955111857cf71270f381,2026-02-11T15:45:16.625Z,2026-02-13T09:27:03.334Z,ACME\jsmith,Windows Server 2019 +EXEC-WS-063,10.10.1.163,C:\Users\jsmith\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,e55cdc89d11cf798a158574c213e1752eb017b02c4a6358a5c22bc7d492f0d9c,2026-02-13T16:05:32.443Z,2026-02-18T09:49:17.263Z,ACME\jsmith,Windows Server 2019 +EXEC-WS-063,10.10.1.163,C:\Users\jsmith\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,4588f93c0a4a3799e338b88071e9810f9f63e5ba45d32d468f06ce065fa83cad,2026-02-13T03:05:28.663Z,2026-02-17T17:31:52.069Z,ACME\jsmith,Windows Server 2019 +EXEC-WS-063,10.10.1.163,C:\Users\jsmith\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,5e2830be8d0af5ead2be0cc8cb478869d8b783df064e67577d2752ca55cd05b4,2026-02-12T06:55:43.373Z,2026-02-10T17:25:45.072Z,ACME\jsmith,Windows Server 2019 +EXEC-WS-063,10.10.1.163,C:\Users\jsmith\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,35e3cec5ecec093d2bbc50dfe4f7f7a8cfd46cc87cad68a2f7dc948440aab6b7,2026-02-10T09:13:59.971Z,2026-02-18T04:28:34.148Z,ACME\jsmith,Windows Server 2019 +IT-WS-064,10.10.2.164,C:\Users\admin\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,cd5493a1043b4ffb4df3685b46eed615d8662daa79f7a2d02725df040f396b99,2026-02-14T01:25:35.401Z,2026-02-10T15:43:08.147Z,ACME\admin,Windows 10 Enterprise +IT-WS-064,10.10.2.164,C:\Users\admin\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,e7319591e20ccfa6586ad0027c25f045334eb150c548c1f43f9854b137d65e2f,2026-02-13T06:53:42.529Z,2026-02-20T00:14:58.202Z,ACME\admin,Windows 10 Enterprise +IT-WS-064,10.10.2.164,C:\Users\admin\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,3ebe1653ca6b86b5d791c233e3d5623c1764fafed1b2a1c2a6ced99bb9d67c26,2026-02-18T06:49:49.434Z,2026-02-19T22:37:13.780Z,ACME\admin,Windows 10 Enterprise +IT-WS-064,10.10.2.164,C:\Users\admin\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,265343b80173d0c44090e573862e9ad56460cdc3ef0b39402fe0bab449d1e6aa,2026-02-15T14:09:22.053Z,2026-02-16T01:06:10.601Z,ACME\admin,Windows 10 Enterprise +IT-WS-064,10.10.2.164,C:\Users\admin\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,904ef6e441709467cf35c634dbca48d1c63f4e2663af34c8c620ea0d255545eb,2026-02-18T18:18:17.617Z,2026-02-14T10:27:13.566Z,ACME\admin,Windows 10 Enterprise +IT-WS-064,10.10.2.164,C:\Users\admin\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,c9eb1b9e7bcdf99e7807971a28ee14fc48a75fabb3b80d4cabc2c98c3ba023d2,2026-02-17T12:13:43.373Z,2026-02-12T13:15:59.541Z,ACME\admin,Windows 10 Enterprise +IT-WS-064,10.10.2.164,C:\Users\admin\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,53948e33f1bce74320288297cd428cf43f7fe9ac2581289624c2fe1490fb1840,2026-02-18T09:38:15.985Z,2026-02-15T21:18:44.402Z,ACME\admin,Windows 10 Enterprise +HR-WS-065,10.10.3.165,C:\Users\svc_sql\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,da6c7298b42163beca4bba0c240a8fa5d3f5578397fd2f51e34a9adcc5469269,2026-02-12T04:23:52.500Z,2026-02-16T23:58:39.393Z,ACME\svc_sql,Windows 11 Enterprise +HR-WS-065,10.10.3.165,C:\Users\svc_sql\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,3cae1022a0c930179b7f99bb003c03bda181df2694bfb42d6e589c99cbad73e6,2026-02-10T11:07:23.690Z,2026-02-12T06:31:34.874Z,ACME\svc_sql,Windows 11 Enterprise +HR-WS-065,10.10.3.165,C:\Users\svc_sql\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,7e81df3a05666b1ef5b0c95af3275fb209eec0b10a1e6f42fd50b32c9d2a579e,2026-02-16T15:04:42.252Z,2026-02-18T02:34:40.510Z,ACME\svc_sql,Windows 11 Enterprise +HR-WS-065,10.10.3.165,C:\Users\svc_sql\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,d6a665d33e9ef3954b6373434f0c80363cf4e458b90ed00991b789c3022c691d,2026-02-14T20:38:17.336Z,2026-02-12T00:57:22.446Z,ACME\svc_sql,Windows 11 Enterprise +HR-WS-065,10.10.3.165,C:\Users\svc_sql\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,7984444d1ea4788e1acd5c2a836f19f9b8fd288553a32ed3ab20078d4adae0ce,2026-02-16T02:09:06.353Z,2026-02-11T06:08:07.650Z,ACME\svc_sql,Windows 11 Enterprise +FIN-WS-066,10.10.1.166,C:\Users\cjohnson\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,31cebee1c461110ebdd28cf66763a00fd56ab84d9596a973bd377a820e54bf2b,2026-02-12T03:27:13.153Z,2026-02-19T06:41:18.841Z,ACME\cjohnson,Windows Server 2022 +FIN-WS-066,10.10.1.166,C:\Users\cjohnson\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,e4e158e8a008145a6be6fdf8c6ead22ae721d87b1776f30d5dd8a169870e363c,2026-02-12T06:51:19.449Z,2026-02-20T00:35:11.198Z,ACME\cjohnson,Windows Server 2022 +FIN-WS-066,10.10.1.166,C:\Users\cjohnson\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,79cf9ce9c3e354d19518c5eda680299d8f023e9bd94f67af94d38feb99b8a038,2026-02-12T05:26:48.392Z,2026-02-15T04:55:42.352Z,ACME\cjohnson,Windows Server 2022 +FIN-WS-066,10.10.1.166,C:\Users\cjohnson\Downloads\salary_comparison.pdf,salary_comparison.pdf,320000,d2e0f1a3b4c5d6e7f8a9b0c1d2e3f4a5,0a4f748d49b234013155ae1ab8f5466a574341149e91cf37d977a5c471be4463,2026-02-14T09:05:34.293Z,2026-02-18T11:28:18.191Z,ACME\cjohnson,Windows Server 2022 +FIN-WS-066,10.10.1.166,C:\Users\cjohnson\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,1e3af3cc86f94fc448501e00bcd272798fff0dce412d505d6235414b1f04c6f0,2026-02-12T19:26:34.776Z,2026-02-14T03:53:56.129Z,ACME\cjohnson,Windows Server 2022 +FIN-WS-066,10.10.1.166,C:\Users\cjohnson\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,8e7001fe08fe15052a04585a55b2108920cee468c4296bb2ff5f4f2c516c3582,2026-02-17T10:38:52.019Z,2026-02-14T02:49:50.727Z,ACME\cjohnson,Windows Server 2022 +FIN-WS-066,10.10.1.166,C:\Users\cjohnson\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,1814dcf2fa95a115bb8e0c5c957c9f84ab6f6749307168119b780e89f3f21186,2026-02-19T14:14:48.533Z,2026-02-17T13:12:41.994Z,ACME\cjohnson,Windows Server 2022 +FIN-WS-066,10.10.1.166,C:\Users\cjohnson\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,f1d81fe35da8a7949fb9e7ea79199df7d74055daa4db4847318511a1eefd25de,2026-02-16T21:21:21.291Z,2026-02-15T12:50:50.170Z,ACME\cjohnson,Windows Server 2022 +SLS-WS-067,10.10.2.167,C:\Users\bwilson\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,3c05306f88b0dff6f95c7dc3449987bc49bcdb9dfed9e97c2ec0395c66e5a5cd,2026-02-16T10:31:12.435Z,2026-02-17T23:04:17.736Z,ACME\bwilson,Windows Server 2019 +SLS-WS-067,10.10.2.167,C:\Users\bwilson\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,4489e51c0cfb9187ab0fdbca080e0bd749a973f50efbf3cff96b993c0fdee23e,2026-02-12T23:14:11.601Z,2026-02-17T14:27:53.486Z,ACME\bwilson,Windows Server 2019 +SLS-WS-067,10.10.2.167,C:\Users\bwilson\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,dde3491766c1b33932173b86534a46ee4c4711a7f088adeb4c068140343e909a,2026-02-13T23:55:59.509Z,2026-02-11T04:27:57.242Z,ACME\bwilson,Windows Server 2019 +SLS-WS-067,10.10.2.167,C:\Users\bwilson\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,6a90bba572c051df728d448472035a1dd150003caa64038459e168ba59eebea9,2026-02-14T10:27:43.804Z,2026-02-20T01:24:42.718Z,ACME\bwilson,Windows Server 2019 +SLS-WS-067,10.10.2.167,C:\Users\bwilson\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,e9fcf345bbd5ef8f80a6360555367c0504abbe1a43222081aeed9f56588bf269,2026-02-18T11:20:46.299Z,2026-02-17T14:55:17.274Z,ACME\bwilson,Windows Server 2019 +SLS-WS-067,10.10.2.167,C:\Users\bwilson\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,21c98853d03c890e769fce2a7c794485ae2079670986f9618e3c62bfbc9ecacd,2026-02-10T21:42:37.190Z,2026-02-19T02:50:04.190Z,ACME\bwilson,Windows Server 2019 +SLS-WS-067,10.10.2.167,C:\Users\bwilson\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,3f3c4d9db26b52f7ed6bc0e5a3f10a427b247e558ad65b9cce58a2ef9443f225,2026-02-18T22:05:31.921Z,2026-02-11T00:56:01.038Z,ACME\bwilson,Windows Server 2019 +ENG-WS-068,10.10.3.168,C:\Users\agarcia\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,ec01e92cadd0b99a66a2518cacad11cc0eef851342555af4cd28a72712d46066,2026-02-10T23:43:17.802Z,2026-02-19T14:30:29.217Z,ACME\agarcia,Windows 10 Enterprise +ENG-WS-068,10.10.3.168,C:\Users\agarcia\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,771bc6f9562fbbd805d4d1199bffb7eb0e3b71a4f8fa8ff95f401cb56eaea40a,2026-02-16T22:18:55.736Z,2026-02-10T10:48:05.618Z,ACME\agarcia,Windows 10 Enterprise +ENG-WS-068,10.10.3.168,C:\Users\agarcia\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,e3616b6ee97f9c422914e4437d9c7b9116535fb998704b11053cafbef8f5caf0,2026-02-15T10:08:21.739Z,2026-02-17T09:30:52.090Z,ACME\agarcia,Windows 10 Enterprise +ENG-WS-068,10.10.3.168,C:\Users\agarcia\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,d46b4ded8da01716bf12c5c1c420af002fb4e12e4e504b1c27f2d0f97fcb05e9,2026-02-16T08:39:49.256Z,2026-02-17T12:39:27.283Z,ACME\agarcia,Windows 10 Enterprise +ENG-WS-068,10.10.3.168,C:\Users\agarcia\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,f774be2460f78fe3038b0c36b049ff0c41796d3f98ced16f70ea921857aae059,2026-02-16T02:03:37.545Z,2026-02-19T00:01:17.162Z,ACME\agarcia,Windows 10 Enterprise +LEG-WS-069,10.10.1.169,C:\Users\agarcia\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,2e9b2726c3dc07fab60f52a53164ea88be9ac9c51ca3cb2448bc674d33b57e5b,2026-02-19T16:21:41.161Z,2026-02-18T19:48:45.684Z,ACME\agarcia,Windows 11 Enterprise +LEG-WS-069,10.10.1.169,C:\Users\agarcia\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,a6443d45766f4f45a04231e4efee599cde37fd581b2f20702092d0aa5dc4c008,2026-02-10T22:40:34.314Z,2026-02-19T23:32:14.355Z,ACME\agarcia,Windows 11 Enterprise +LEG-WS-069,10.10.1.169,C:\Users\agarcia\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,8294d41139ac9064f4d340a4a07a4354bc5d543fa05b3c11689640b19af9039d,2026-02-13T14:07:02.261Z,2026-02-15T12:03:43.320Z,ACME\agarcia,Windows 11 Enterprise +LEG-WS-069,10.10.1.169,C:\Users\agarcia\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,3943c17b7c3ea9f4271005397a3250e46dc9b9916b5e867872ea58ad67b73db0,2026-02-14T09:22:52.740Z,2026-02-18T08:09:32.149Z,ACME\agarcia,Windows 11 Enterprise +MKT-WS-070,10.10.2.170,C:\Users\bwilson\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,e7faa7c14424a33689ca8ef85e3703c971e21d3448ff4f623d490f98f1242c73,2026-02-12T01:52:38.277Z,2026-02-14T17:11:47.556Z,ACME\bwilson,Windows Server 2022 +MKT-WS-070,10.10.2.170,C:\Users\bwilson\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,0b6da4421540a109a644d4d47ae254a716c786f46d2397d37df4467926a1bda7,2026-02-13T16:01:33.768Z,2026-02-14T06:37:16.953Z,ACME\bwilson,Windows Server 2022 +MKT-WS-070,10.10.2.170,C:\Users\bwilson\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,0636c7ed5a09944a4446220da010ea788c98cd9e4d6a9ddfc0b60e1fe52c72e2,2026-02-14T22:47:08.689Z,2026-02-12T16:57:54.421Z,ACME\bwilson,Windows Server 2022 +EXEC-WS-071,10.10.3.171,C:\Users\gwhite\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,23338d5308f157d1122030a212ace72df6c79c3ae165aeca93e16d63ec2f50de,2026-02-14T13:17:49.661Z,2026-02-10T12:24:57.779Z,ACME\gwhite,Windows Server 2019 +EXEC-WS-071,10.10.3.171,C:\Users\gwhite\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,70f6351a55168625dd99c11e171fdec2674503cdcf99fea97d2debf59630fd85,2026-02-17T05:32:40.045Z,2026-02-19T09:17:43.290Z,ACME\gwhite,Windows Server 2019 +EXEC-WS-071,10.10.3.171,C:\Users\gwhite\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,1c02887dcea5184a2a63641f595642bdb3b4c14f034fea4e0b2955c6aa1c6119,2026-02-17T04:22:22.064Z,2026-02-13T11:40:16.954Z,ACME\gwhite,Windows Server 2019 +EXEC-WS-071,10.10.3.171,C:\Users\gwhite\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,f310c638facffd4bdc95b44c650efb600fba5ee3e54f216657a87cdfb0b80532,2026-02-20T17:15:22.759Z,2026-02-17T19:54:04.463Z,ACME\gwhite,Windows Server 2019 +EXEC-WS-071,10.10.3.171,C:\Users\gwhite\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,2085fe98df0b6834d73b5207d21362268b536dd055a44e5e41618656f7455feb,2026-02-13T05:30:07.408Z,2026-02-16T17:31:27.254Z,ACME\gwhite,Windows Server 2019 +EXEC-WS-071,10.10.3.171,C:\Users\gwhite\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,fbd1d29f0548f3981cfbcd274ad5e4d825c7862900f62bafbbf718762aa2fb79,2026-02-18T12:59:22.361Z,2026-02-14T11:48:18.756Z,ACME\gwhite,Windows Server 2019 +IT-WS-072,10.10.1.172,C:\Users\svc_web\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,7692f56a4c44a44e773171dd3ec34024e7d573448f6aa42625f4d3bcd240c39f,2026-02-11T13:37:45.919Z,2026-02-15T12:15:23.430Z,ACME\svc_web,Windows 10 Enterprise +IT-WS-072,10.10.1.172,C:\Users\svc_web\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,03befafc774c352818b391154cf66b6199af4f9eb9e7b5606c77cd36b71facd0,2026-02-20T03:07:57.263Z,2026-02-18T11:06:22.558Z,ACME\svc_web,Windows 10 Enterprise +IT-WS-072,10.10.1.172,C:\Users\svc_web\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,73ac3d2a43c5d87fb74522b354f363875666172460d0e020ac71fa37a6867680,2026-02-13T06:07:58.308Z,2026-02-18T18:30:24.361Z,ACME\svc_web,Windows 10 Enterprise +IT-WS-072,10.10.1.172,C:\Users\svc_web\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,f411eb96a17ea6cb558eba53e545c28f8d784fae2a12aec2b65caef0516c8176,2026-02-18T20:09:22.652Z,2026-02-12T14:24:22.345Z,ACME\svc_web,Windows 10 Enterprise +IT-WS-072,10.10.1.172,C:\Users\svc_web\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,e114540379a736d14a5e1f0f82e5fb8e183e0945ae683512418f51e9a9b79346,2026-02-14T14:58:20.198Z,2026-02-12T11:00:24.118Z,ACME\svc_web,Windows 10 Enterprise +HR-WS-073,10.10.2.173,C:\Users\idavis\Downloads\setup.exe,setup.exe,45000000,e7f5a6b8c9d0e1f2a3b4c5d6e7f8a9b0,3dc6f4e093be361fa151f14bc6077a34c1cea286c15d1a09b22123b6724d419c,2026-02-16T05:59:15.393Z,2026-02-12T00:55:01.385Z,ACME\idavis,Windows 11 Enterprise +HR-WS-073,10.10.2.173,C:\Users\idavis\Downloads\free_movie_2026.torrent,free_movie_2026.torrent,45000,c1d9e0f2a3b4c5d6e7f8a9b0c1d2e3f4,3f0655a01a6b3429b7eb9f1918439cdbd987a0ba4e06479224f64b4e45b01d89,2026-02-14T12:28:20.557Z,2026-02-19T18:11:59.703Z,ACME\idavis,Windows 11 Enterprise +HR-WS-073,10.10.2.173,C:\Users\idavis\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,3fff89118c1a6e529daaebef99c05bd22ecbd04ddcfaa4285ab8184aa25a0494,2026-02-12T01:35:32.044Z,2026-02-18T16:31:31.245Z,ACME\idavis,Windows 11 Enterprise +HR-WS-073,10.10.2.173,C:\Users\idavis\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,f4e11e91d7318d5bc4aef4378611168bb912e9e17f18758da3e94e5d644bd365,2026-02-20T03:28:49.859Z,2026-02-10T10:07:26.992Z,ACME\idavis,Windows 11 Enterprise +HR-WS-073,10.10.2.173,C:\Users\idavis\Downloads\project_plan.pptx,project_plan.pptx,1500000,d6e4f5a7b8c9d0e1f2a3b4c5d6e7f8a9,17faa693ce07c7fa04593fa3959248272361c37e0142e7fe6e91792d0585c177,2026-02-15T22:22:13.349Z,2026-02-15T20:00:23.982Z,ACME\idavis,Windows 11 Enterprise +HR-WS-073,10.10.2.173,C:\Users\idavis\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,fe90a7fc7f462d69d872741de59563f1dcef93a6c99b1b932b4f6b271aaeed2c,2026-02-14T04:11:17.266Z,2026-02-13T23:04:10.054Z,ACME\idavis,Windows 11 Enterprise +HR-WS-073,10.10.2.173,C:\Users\idavis\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,94ed3d3bd229ac0657630683527033c8f9fb4a6cdf30a893481f77e4cfb51512,2026-02-13T15:36:48.654Z,2026-02-12T01:59:22.645Z,ACME\idavis,Windows 11 Enterprise +FIN-WS-074,10.10.3.174,C:\Users\bwilson\Downloads\meeting_notes.docx,meeting_notes.docx,89000,b4c2d3e5f6a7b8c9d0e1f2a3b4c5d6e7,ce549ff35440924c40c190f8c1b16ead4dc2b558b0c218442535296f4474d785,2026-02-16T10:52:24.259Z,2026-02-10T11:23:13.028Z,ACME\bwilson,Windows Server 2022 +FIN-WS-074,10.10.3.174,C:\Users\bwilson\Downloads\steam_installer.exe,steam_installer.exe,3500000,b0c8d9e1f2a3b4c5d6e7f8a9b0c1d2e3,0dbf41aa5ff9c756104db0403f9e88cb6fde5f2582bae1da88fe485f50c03ab6,2026-02-11T19:39:06.741Z,2026-02-14T14:19:50.933Z,ACME\bwilson,Windows Server 2022 +FIN-WS-074,10.10.3.174,C:\Users\bwilson\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,b785bcda268397b9ce5430b7e6516a9f8690489734076972a1d91cf361628175,2026-02-11T14:03:50.795Z,2026-02-15T03:45:06.026Z,ACME\bwilson,Windows Server 2022 +FIN-WS-074,10.10.3.174,C:\Users\bwilson\Downloads\crack_photoshop.exe,crack_photoshop.exe,12000000,f8a6b7c9d0e1f2a3b4c5d6e7f8a9b0c1,e460da57bc5e48b7ec2c5fbcb7f78427213b17d7c0351a77a8fe9f40e905c981,2026-02-11T00:15:54.201Z,2026-02-16T02:13:40.734Z,ACME\bwilson,Windows Server 2022 +FIN-WS-074,10.10.3.174,C:\Users\bwilson\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,1d95cfae3e70e193e0c6975efa9fb542f3bc346ef0673554a50ff887617fc597,2026-02-12T18:25:04.690Z,2026-02-18T00:31:07.288Z,ACME\bwilson,Windows Server 2022 +SLS-WS-075,10.10.1.175,C:\Users\agarcia\Downloads\vpn_config.ovpn,vpn_config.ovpn,1200,c5d3e4f6a7b8c9d0e1f2a3b4c5d6e7f8,bca414326a75be19e908b1315a25c8d20dad7a1623eddb487cbda08537f4a3e2,2026-02-17T08:59:26.488Z,2026-02-14T00:58:23.302Z,ACME\agarcia,Windows Server 2019 +SLS-WS-075,10.10.1.175,C:\Users\agarcia\Downloads\keygen_v2.exe,keygen_v2.exe,500000,a9b7c8d0e1f2a3b4c5d6e7f8a9b0c1d2,560a7076305f183923e79b0317362875b51580bcc35eefef03deff558cb20032,2026-02-16T15:14:05.569Z,2026-02-14T16:31:21.523Z,ACME\agarcia,Windows Server 2019 +SLS-WS-075,10.10.1.175,C:\Users\agarcia\Downloads\Q1_Budget_2026.xlsx,Q1_Budget_2026.xlsx,245000,a3f1b2c4d5e6f7a8b9c0d1e2f3a4b5c6,d052a9517af5231576a6bbe0509588d61146330e09b28e77707a35c777859515,2026-02-16T23:34:45.555Z,2026-02-17T23:17:09.444Z,ACME\agarcia,Windows Server 2019 diff --git a/docs/update.md b/docs/update.md new file mode 100644 index 0000000..87d478c --- /dev/null +++ b/docs/update.md @@ -0,0 +1,548 @@ +# ThreatHunt — Session Update (February 19–20, 2026) + +**Version: 0.4.0** + +## Summary + +This document covers feature improvements and bug fixes across the ThreatHunt platform. + +--- + +## 1. Network Map — Clickable Type Filters (IP / Host / Domain / URL) + +**Request:** "IP, Host, Domain, URL on the network map… can I click on these and they would be filtered in or out" + +**Changes (`NetworkMap.tsx`):** +- Legend chips (IP, Host, Domain, URL) are now clickable toggle filters +- Added `visibleTypes` state (`Set`) and `filteredGraph` useMemo that filters nodes + edges by visible types +- Active chips: filled background with type color, fully opaque +- Inactive chips: outlined with type color, dimmed at 50% opacity +- Each chip shows node count for that type, e.g. `IP (42)` +- At least one type must stay visible (can't disable all four) +- Stats chips (nodes/edges) update to reflect the filtered view +- All mouse handlers (pan, hover, click, wheel zoom) updated to use `filteredGraph` instead of raw `graph` + +--- + +## 2. Network Map — Cleaner Nodes (Brighter Colors, 20% Smaller) + +**Request:** "Clean up the icons, the colours are dull and the icons are too big in the map… shrink by 20%" + +**Changes (`NetworkMap.tsx`):** +- Colors bumped to more saturated variants: + - IP: `#60a5fa` → `#3b82f6` + - Host: `#10b981` → `#22c55e` + - Domain: `#f59e0b` → `#eab308` + - URL: `#a78bfa` → `#8b5cf6` +- Node radius shrunk ~20%: + - Max: 22 → 18 + - Base: 5 → 4 + - Multiplier: 2.0 → 1.6 + +--- + +## 3. Dataset Viewer — IOC Column Highlighting + +**Request:** "I'm looking at one of the datasets and 4 IOCs are showing… but I can't see it… is there a way to highlight that" + +**Changes (`DatasetViewer.tsx`):** +- IOC columns in the DataGrid are now visually highlighted +- **Header:** colored background tint + bold colored text + IOC type label (e.g. `src_ip ◆ IP`) +- **Cells:** subtle colored background + left border stripe +- Color-coded by IOC type matching the Network Map palette: + - IP — blue (`#3b82f6`) + - Hostname — green (`#22c55e`) + - Domain — amber (`#eab308`) + - URL — purple (`#8b5cf6`) + - Hashes (MD5/SHA1/SHA256) — rose (`#f43f5e`) +- Added `IOC_COLORS` mapping, `iocTypeFor()` helper, and dynamic `headerClassName`/`cellClassName` on DataGrid columns +- CSS-in-JS styles injected via DataGrid `sx` prop + +--- + +## 4. AUP Scanner — "Social Media (Personal)" → "Social Media" Rename + +**Request:** "On the AUP page there is Social Media (Personal) — can we remove personal, it's messing up with the formatting" + +**Changes (`keyword_defaults.py`):** +- Default theme key renamed from `"Social Media (Personal)"` to `"Social Media"` +- Added rename migration in `seed_defaults()`: checks for old name in DB, if found renames via SQL UPDATE + commit before normal seeding +- Backend log confirmed: `Renamed AUP theme 'Social Media (Personal)' → 'Social Media'` + +--- + +## 5. AUP Scanner — Hunt Dropdown (previous session, deployed) + +- Replaced individual dataset checkboxes with a hunt selector dropdown +- Selecting a hunt auto-loads and selects all its datasets +- Shows dataset/row counts below the dropdown + +--- + +## 6. Network Map — Hunt-Scoped Interactive Map (previous session, deployed) + +- Hunt selector dropdown loads only that hunt's datasets +- Enriched nodes with hostname, IP, OS metadata +- Click-to-inspect MUI Popover showing node details +- Zoom (wheel + buttons) and pan (drag) with full viewport transform +- Force-directed layout with co-occurrence edges + +--- + +## 7. Agent Assist — "Failed to Fetch" Diagnosis + +**Request:** "AI assist failed: Error: Failed to fetch" + +**Diagnosis:** +- Backend agent endpoint works correctly (tested via PowerShell `Invoke-RestMethod` through nginx proxy) +- Health endpoint healthy — both LLM nodes (Wile + Roadrunner) available +- Extra fields sent by frontend (`mode`, `hunt_id`, `conversation_id`) are accepted by Pydantic v2 (ignored, not rejected) +- "Failed to fetch" was a transient browser-level network error, not a backend issue +- Response time ~5s from LLM — within nginx 120s proxy timeout +- **Resolution:** Hard refresh (Ctrl+Shift+R) resolves the issue + +--- + +## 8. Performance Fix — /api/hunts Timeout (previous session) + +- Root cause: `Dataset.rows` relationship had `lazy="selectin"` causing SQLAlchemy to cascade-load every DatasetRow when listing hunts +- Fix: Changed `Dataset.rows` and `DatasetRow.annotations` to `lazy="noload"` in `backend/app/db/models.py` +- Result: Hunts endpoint returns instantly + +--- + +## Files Modified This Session + +| File | Change | +|------|--------| +| `frontend/src/components/NetworkMap.tsx` | Type filter toggles, brighter colors, smaller nodes | +| `frontend/src/components/DatasetViewer.tsx` | IOC column highlighting in DataGrid | +| `backend/app/services/keyword_defaults.py` | Theme rename + DB migration | + +## Deployment + +All changes built and deployed via Docker Compose: +``` +docker compose build --no-cache frontend +docker compose up -d frontend +docker compose build --no-cache backend +docker compose up -d backend +``` + +## Git + +Committed and pushed to GitHub (`main` branch): +``` +92 files changed, 13050 insertions(+), 1097 deletions(-) +d0c9f88..9b98ab9 main -> main +``` + +--- + +## 9. Network Picture — Deduplicated Host Inventory (February 20, 2026) + +**Request:** "While files are being dropped in, give me a clean clear network picture — like netstat. No 100 iterations of the same computer. Clean pic: hostname, IP, and any users logged into that machine." + +### What It Does + +New **Net Picture** page that scans all datasets in a hunt and produces a **one-row-per-host** inventory table. If a host appears in 900 netstat rows, it shows once — with all unique IPs, usernames, OS versions, MACs, and ports aggregated via server-side set deduplication. Supports networks with up to 1000 hosts; no artificial caps on unique values per host. + +### Backend + +**New service** — `backend/app/services/network_inventory.py`: +- `build_network_picture(db, hunt_id)` streams all dataset rows in batches of 1000 +- Groups rows by `hostname` (case-insensitive), falls back to `src_ip`/`ip_address` if no hostname column +- Per host, aggregates into Python `set()`s: IPs, users, OS, MAC addresses, protocols, open ports, remote targets, dataset sources +- Tracks `connection_count` (total rows), `first_seen`/`last_seen` from timestamp columns +- Returns sorted by connection count descending + +**New API route** — `backend/app/api/routes/network.py`: +- `GET /api/network/picture?hunt_id={id}` → `NetworkPictureResponse` +- Response: `hosts[]` (each with hostname, ips, users, os, mac_addresses, protocols, open_ports, remote_targets, datasets, connection_count, first_seen, last_seen) + `summary` (total_hosts, total_connections, total_unique_ips, datasets_scanned) + +**Normalizer additions** — `backend/app/services/normalizer.py`: +- Added `mac_address` canonical mapping: `mac`, `mac_address`, `physical_address`, `mac_addr`, `hw_addr`, `ethernet` +- Added `connection_state` canonical mapping: `state`, `status`, `tcp_state`, `conn_state` + +### Frontend + +**New component** — `frontend/src/components/NetworkPicture.tsx`: +- Hunt selector dropdown → loads network picture from backend +- MUI Table with sortable columns: Hostname, IPs, Users, OS, MAC, Connections, Ports +- **ChipList** sub-component: shows first 5 values inline as coloured Chips; "+N more" badge expands to show all (no data hidden, just visual overflow control) +- Click any row → expand panel showing: remote targets, all open ports, protocols, MAC addresses, dataset sources, time range +- Search bar filters by hostname, IP, user, OS, or MAC +- Summary stat cards: total hosts, unique IPs, connections, datasets scanned +- Colour palette matches Network Map: IP blue, User green, OS amber, MAC purple, Port rose + +**App integration** — `frontend/src/App.tsx`: +- New nav item: **Net Picture** with `DevicesIcon`, route `/netpicture` +- Import and route for `NetworkPicture` component + +**API client** — `frontend/src/api/client.ts`: +- Added `HostEntry`, `PictureSummary`, `NetworkPictureResponse` interfaces +- Added `network.picture(huntId)` method + +### Files Modified + +| File | Change | +|------|--------| +| `backend/app/services/normalizer.py` | Added `mac_address` + `connection_state` mappings | +| `backend/app/services/network_inventory.py` | **New** — host aggregation service | +| `backend/app/api/routes/network.py` | **New** — `/api/network/picture` endpoint | +| `backend/app/main.py` | Registered network router | +| `frontend/src/api/client.ts` | Added network picture types + API method | +| `frontend/src/components/NetworkPicture.tsx` | **New** — host inventory table component | +| `frontend/src/App.tsx` | Added Nav item + route for Net Picture | + +--- + +## 10. Test Data — Velociraptor Mock Network CSVs (February 20, 2026) + +**Request:** "Create 10-15 different CSV files you'd expect from Velociraptor for a mock network with 50-100 hosts and random network traffic with a few keywords that would trigger the AUP." + +### What Was Created + +12 realistic Velociraptor-style CSV files in `backend/tests/test_csvs/`, generated by a Python script (`generate_test_csvs.py`) with deterministic seed for reproducibility. + +**Mock Network:** +- **82 hosts**: 75 workstations (IT-WS, HR-WS, FIN-WS, SLS-WS, ENG-WS, LEG-WS, MKT-WS, EXEC-WS) + 7 servers (DC-01, DC-02, FILE-01, EXCH-01, WEB-01, SQL-01, PROXY-01) +- **14 users**: 10 named users (jsmith, agarcia, bwilson, etc.) + 4 service accounts +- **3 subnets**: `10.10.1.x`, `10.10.2.x`, `10.10.3.x` +- **Domain**: `acme.local` +- **Time range**: Feb 10–20, 2026 + +### Files + +| # | File | Rows | Velociraptor Artifact | +|---|------|------|----------------------| +| 1 | `01_netstat_connections.csv` | 2,012 | `Windows.Network.Netstat` | +| 2 | `02_dns_queries.csv` | 2,964 | `Windows.Network.DNS` | +| 3 | `03_process_listing.csv` | 1,896 | `Windows.System.Pslist` | +| 4 | `04_network_interfaces.csv` | 94 | `Windows.Network.Interfaces` | +| 5 | `05_logged_in_users.csv` | 171 | `Windows.Sys.Users` | +| 6 | `06_scheduled_tasks.csv` | 410 | `Windows.System.TaskScheduler` | +| 7 | `07_browser_history.csv` | 1,586 | `Windows.Application.Chrome.History` | +| 8 | `08_sysmon_network.csv` | 2,517 | Sysmon Event ID 3 | +| 9 | `09_autoruns.csv` | 342 | `Windows.Sys.AutoRuns` | +| 10 | `10_logon_events.csv` | 1,604 | Windows Security (4624/4625) | +| 11 | `11_proxy_logs.csv` | 2,605 | Web proxy / filter | +| 12 | `12_file_listing.csv` | 421 | `Windows.Search.FileFinder` | + +### AUP Triggers Embedded + +| Category | Examples | +|----------|----------| +| Gambling | bet365.com, pokerstars.com, draftkings.com | +| Gaming | steam.exe, discord.exe, steamcommunity.com, epicgameslauncher.exe | +| Streaming | netflix.com, hulu.com, spotify.exe, open.spotify.com | +| Downloads / Piracy | thepiratebay.org, 1337x.to, utorrent.exe, qbittorrent.exe, free_movie_2026.torrent | +| Adult Content | pornhub.com, onlyfans.com, xvideos.com | +| Social Media | facebook.com, tiktok.com, reddit.com | +| Job Search | indeed.com, glassdoor.com, linkedin.com/jobs | +| Shopping | amazon.com, ebay.com, shein.com | + +AUP keywords appear in: DNS queries (~12%), browser history (~15%), proxy logs (~10%), process listing (~15% of hosts), autoruns (~20% of workstations), sysmon network (~10%), file listing (crack_photoshop.exe, keygen_v2.exe, free_movie_2026.torrent). + +### Files Added + +| File | Purpose | +|------|---------| +| `backend/tests/generate_test_csvs.py` | **New** — deterministic CSV generator script | +| `backend/tests/test_csvs/*.csv` (×12) | **New** — mock Velociraptor test data | + +--- + +## 11. Phase 8 — Analyzer Framework & Alerts (February 20, 2026) + +### What It Does + +Automated alerting engine with 6 built-in analyzers that scan dataset rows for suspicious activity and produce scored, MITRE-tagged alerts. Full alert lifecycle (new → acknowledged → in-progress → resolved / false-positive), bulk operations, and configurable alert rules. + +### Backend + +**New service** — `backend/app/services/analyzers.py` (~350 lines): +- `BaseAnalyzer` ABC with `name`, `description`, and `async analyze(rows)` method +- 6 built-in analyzers: + - **EntropyAnalyzer** — Shannon entropy on command_line/url/path fields, threshold 4.5, maps to T1027 (Obfuscated Files or Information) + - **SuspiciousCommandAnalyzer** — 19 regex patterns (mimikatz, encoded PowerShell, schtasks, psexec, vssadmin, etc.) with per-pattern MITRE mappings + - **NetworkAnomalyAnalyzer** — Beaconing detection (dst IP frequency), suspicious ports (4444, 5555, etc.), large transfers (>10 MB), maps to T1071/T1048/T1571 + - **FrequencyAnomalyAnalyzer** — Flags values <1% occurrence in process_name/username/event_type fields + - **AuthAnomalyAnalyzer** — Brute force (>5 failed logins per user), unusual logon types (3=network, 10=RDP), maps to T1110/T1021 + - **PersistenceAnalyzer** — Registry Run keys, services, Winlogon, IFEO patterns, maps to T1547/T1543/T1546 +- `run_all_analyzers(rows, analyzers?)` — runs all or selected analyzers, returns sorted `AlertCandidate` list + +**New API route** — `backend/app/api/routes/alerts.py` (~300 lines): +- `GET /api/alerts` — list with filters (status, severity, analyzer, hunt_id, dataset_id) +- `GET /api/alerts/stats` — severity/status/analyzer/MITRE breakdowns +- `GET /api/alerts/{id}`, `PUT /api/alerts/{id}`, `DELETE /api/alerts/{id}` +- `POST /api/alerts/bulk-update` — bulk status changes on selected alert IDs +- `GET /api/alerts/analyzers/list` — available analyzer metadata +- `POST /api/alerts/analyze` — run analyzers on a dataset/hunt, auto-creates Alert records +- Alert Rules CRUD: `GET /api/alerts/rules/list`, `POST /api/alerts/rules`, `PUT /api/alerts/rules/{id}`, `DELETE /api/alerts/rules/{id}` + +**New ORM models** — `backend/app/db/models.py`: +- `Alert` — 18 fields (id, title, description, severity, status, analyzer, score, evidence JSON, mitre_technique, tags JSON, hunt_id FK, dataset_id FK, case_id FK, assignee, acknowledged_at, resolved_at, timestamps; indexes on severity/status/hunt/dataset) +- `AlertRule` — 10 fields (id, name, description, analyzer, config JSON, severity_override, enabled, hunt_id FK, timestamps; index on analyzer) + +**Alembic migration** — `backend/alembic/versions/b4c2d3e5f6a7_add_alerts_and_alert_rules.py` + +### Frontend + +**New component** — `frontend/src/components/AlertPanel.tsx` (~350 lines): +- **Alerts tab**: MUI DataGrid with severity/status chips, score, MITRE technique; checkbox selection for bulk actions (acknowledge / resolve / false-positive); click → detail dialog with evidence JSON viewer +- **Stats tab**: Cards for total, per-severity counts, status/analyzer breakdowns, top MITRE techniques +- **Rules tab**: Rule cards with enable/disable switch, delete; create rule dialog with analyzer selector +- Selector bar: Hunt + Dataset pickers, "Run Analyzers" button, severity/status filters + +**API client** — `frontend/src/api/client.ts`: +- Added `AlertData`, `AlertStats`, `AlertRuleData`, `AnalyzerInfo`, `AnalyzeResult` interfaces +- Added `alerts` namespace with full CRUD + analyze + rules methods + +**App integration** — `frontend/src/App.tsx`: +- New nav item: **Alerts** with `NotificationsActiveIcon`, route `/alerts` + +### Files + +| File | Change | +|------|--------| +| `backend/app/services/analyzers.py` | **New** — 6 analyzers + runner | +| `backend/app/api/routes/alerts.py` | **New** — alerts API (CRUD, stats, bulk, rules) | +| `backend/app/db/models.py` | Added `Alert` + `AlertRule` models | +| `backend/alembic/versions/b4c2d3e5f6a7_...py` | **New** — alerts migration | +| `frontend/src/components/AlertPanel.tsx` | **New** — alerts dashboard | +| `frontend/src/api/client.ts` | Added alert types + `alerts` namespace | +| `frontend/src/App.tsx` | Added Alerts nav + route | + +--- + +## 12. Phase 9 — Investigation Notebooks & Playbooks (February 20, 2026) + +### What It Does + +Cell-based investigation notebooks (markdown / query / code) for documenting hunts, plus a playbook engine with 4 built-in response templates and step-by-step execution tracking. + +### Backend + +**New service** — `backend/app/services/playbook.py` (~250 lines): +- `NotebookCell` dataclass + `validate_notebook_cells()` helper +- 4 built-in playbook templates: + - **Suspicious Process Investigation** (6 steps): identify → process tree → network → analyzers → MITRE → document + - **Lateral Movement Hunt** (5 steps): remote tools → auth anomaly → network anomaly → knowledge graph → escalate + - **Data Exfiltration Check** (5 steps): large transfers → DNS → timeline → correlate → MITRE + document + - **Ransomware Triage** (5 steps): indicators search → all analyzers → persistence → LLM deep → critical case +- Each step: order, title, description, action, action_config, expected_outcome + +**New API route** — `backend/app/api/routes/notebooks.py` (~280 lines): +- Notebook CRUD: `GET /api/notebooks`, `GET /api/notebooks/{id}`, `POST /api/notebooks`, `PUT /api/notebooks/{id}`, `DELETE /api/notebooks/{id}` +- Cell operations: `POST /api/notebooks/{id}/cells/upsert`, `DELETE /api/notebooks/{id}/cells/{cell_id}` +- Playbook endpoints: `GET /api/notebooks/playbooks/templates`, `GET /api/notebooks/playbooks/templates/{name}`, `POST /api/notebooks/playbooks/start`, `GET /api/notebooks/playbooks/runs`, `GET /api/notebooks/playbooks/runs/{id}`, `POST /api/notebooks/playbooks/runs/{id}/complete-step`, `POST /api/notebooks/playbooks/runs/{id}/abort` + +**New ORM models** — `backend/app/db/models.py`: +- `Notebook` — 10 fields (id, title, description, cells JSON, hunt_id FK, case_id FK, owner_id FK, tags JSON, timestamps; index on hunt_id) +- `PlaybookRun` — 12 fields (id, playbook_name, status, current_step, total_steps, step_results JSON, hunt_id FK, case_id FK, started_by, timestamps, completed_at; indexes on hunt_id/status) + +**Alembic migration** — `backend/alembic/versions/c5d3e4f6a7b8_add_notebooks_and_playbook_runs.py` + +### Frontend + +**New component** — `frontend/src/components/InvestigationNotebook.tsx` (~280 lines): +- List view: Grid of notebook cards with title, description, cell count, tags, open/delete +- Detail view: Cell-based editor with markdown/query/code cell types +- Markdown cells render via ReactMarkdown + remarkGfm; code/query cells as monospace pre blocks +- Edit mode: multiline TextField with Ctrl+S save shortcut +- Cell operations: add (markdown/query/code), edit, save, delete, move up/down + +**New component** — `frontend/src/components/PlaybookManager.tsx` (~280 lines): +- **Templates tab**: Grid of template cards with category chips, tags, step count; view detail (MUI Stepper showing all steps) or start new run +- **Runs tab**: List of active/completed runs with progress bars +- Active run view: Vertical MUI Stepper with step completion, notes field, skip/abort, LinearProgress + +**API client** — `frontend/src/api/client.ts`: +- Added `NotebookCell`, `NotebookData`, `PlaybookTemplate`, `PlaybookStep`, `PlaybookTemplateDetail`, `PlaybookRunData` interfaces +- Added `notebooks` namespace (CRUD + cell ops) and `playbooks` namespace (templates, runs, step-complete, abort) + +**App integration** — `frontend/src/App.tsx`: +- New nav items: **Notebooks** (`MenuBookIcon`, `/notebooks`) and **Playbooks** (`PlaylistPlayIcon`, `/playbooks`) + +### Files + +| File | Change | +|------|--------| +| `backend/app/services/playbook.py` | **New** — 4 playbook templates + cell validation | +| `backend/app/api/routes/notebooks.py` | **New** — notebooks + playbooks API | +| `backend/app/db/models.py` | Added `Notebook` + `PlaybookRun` models | +| `backend/alembic/versions/c5d3e4f6a7b8_...py` | **New** — notebooks migration | +| `frontend/src/components/InvestigationNotebook.tsx` | **New** — cell-based notebook editor | +| `frontend/src/components/PlaybookManager.tsx` | **New** — playbook template browser + run stepper | +| `frontend/src/api/client.ts` | Added notebook + playbook types + namespaces | +| `frontend/src/App.tsx` | Added Notebooks + Playbooks nav + routes | + +--- + +## 13. Docker Build Fixes (February 20, 2026) + +Several issues were resolved to get the full 22-page frontend and updated backend deployed in Docker Compose. + +### npm / TypeScript Fixes + +| Issue | Fix | +|-------|-----| +| `npm ci` failing: "Missing: yaml@2.8.2 from lock file" | Installed `yaml@2` — `postcss-load-config` (from tailwindcss) required `^2.4.2` but only `1.10.2` was present | +| `GridRowSelectionModel` cast to `string[]` | MUI X DataGrid v8 changed to `{ type, ids: Set }` — fixed with `Array.from(model.ids)` | +| Recharts `formatter` type mismatch | Changed explicit `number`/`string` params to `any` in `Dashboard.tsx` | +| Missing declarations for `cytoscape-dagre` / `cytoscape-cola` | Created `frontend/src/declarations.d.ts` | +| Missing `HuntOut` type export | Added `export type HuntOut = Hunt` alias in `client.ts` | +| `cytoscape.Stylesheet` no longer exists | Renamed to `cytoscape.StylesheetStyle` in ProcessTree, StorylineGraph, KnowledgeGraph | + +### Backend Startup Fixes + +| Issue | Fix | +|-------|-----| +| `init_db()` crash: "table cases already exists" | Rewrote to inspect existing tables and only create missing ones | +| Alembic migration replay on startup | DB had all tables (from `init_db()`) but Alembic was stamped at `98ab619418bc` — ran `alembic stamp head` to sync to `c5d3e4f6a7b8` | + +### Files Modified + +| File | Change | +|------|--------| +| `frontend/package.json` / `package-lock.json` | Added `yaml@2` dependency | +| `frontend/src/declarations.d.ts` | **New** — ambient module declarations | +| `frontend/src/api/client.ts` | Added `HuntOut` type alias | +| `frontend/src/components/AlertPanel.tsx` | Fixed `GridRowSelectionModel` handling | +| `frontend/src/components/Dashboard.tsx` | Fixed Recharts formatter types | +| `frontend/src/components/ProcessTree.tsx` | `Stylesheet` → `StylesheetStyle` | +| `frontend/src/components/StorylineGraph.tsx` | `Stylesheet` → `StylesheetStyle` | +| `frontend/src/components/KnowledgeGraph.tsx` | `Stylesheet` → `StylesheetStyle` | +| `backend/app/db/engine.py` | Safe `init_db()` with inspector | + +--- + +## Current Navigation (22 pages) + +Dashboard · Hunts · Datasets · Upload · Agent · Analysis · Annotations · Hypotheses · Correlation · Network Map · Net Picture · Proc Tree · Storyline · Timeline · Search · MITRE Map · Knowledge · Cases · **Alerts** · **Notebooks** · **Playbooks** · AUP Scanner + +## Deployment + +``` +docker compose build +docker compose up -d +# Backend: http://localhost:8000 (healthy) +# Frontend: http://localhost:3000 (200 OK) +``` + +## Alembic Migration Chain + +``` +9790f482da06 (initial schema) + ↓ +98ab619418bc (keyword themes + keywords) + ↓ +a3b1c2d4e5f6 (cases + activity logs) + ↓ +b4c2d3e5f6a7 (alerts + alert rules) + ↓ +c5d3e4f6a7b8 (notebooks + playbook runs) ← HEAD +``` + +--- + +## 14. Process Tree — HTTP 500 Fix (February 20, 2026) + +**Request:** "process tree: HTTP 500" + +**Root Cause:** `MissingGreenlet` error in `_fetch_rows` — async SQLAlchemy lazy-loading the `dataset` relationship on `DatasetRow` outside a greenlet context. + +**Fix (`backend/app/services/process_tree.py`):** +- Added `selectinload(DatasetRow.dataset)` to the `_fetch_rows` query so the relationship is eagerly loaded within the async session +- Endpoint now returns data correctly (verified: 3,908 processes for full hunt) + +--- + +## 15. Process Tree — UX Rewrite (February 20, 2026) + +**Request:** "proctree view is horrible… there are 3908 processes and I can't see / zoom in to see and when I do click on one the resolution changes to show the data on the right. Ideally I'd like another dropdown to pick a host." + +**Complete rewrite of `frontend/src/components/ProcessTree.tsx` (~520 lines):** + +- **Host dropdown**: Autocomplete populated by extracting unique hostnames from tree data (82 hosts) +- **Server-side hostname filtering**: API `?hostname=` param reduces returned data per view +- **Grid layout fallback**: When edges < 10% of nodes (e.g. test data with no parent-child relationships), uses grid layout instead of dagre +- **Overlay detail panel**: Absolute-positioned panel on click — no longer reflows the graph +- **ResizeObserver**: Keeps Cytoscape canvas in sync with container size changes +- **Search/highlight**: Filter processes by name or PID +- **Zoom controls**: Fit, zoom-in, zoom-out buttons + +--- + +## 16. Process Tree — White Screen Crash Fix (February 20, 2026) + +**Request:** "I picked a different host and the screen went white" + +**Root Cause:** Cytoscape's `destroy()` removed `` elements that were children of the same DOM node React was managing, causing `NotFoundError: Failed to execute 'removeChild' on 'Node'` when React tried to reconcile. + +**Fix (`frontend/src/components/ProcessTree.tsx`):** +- Separated Cytoscape container into a plain `
` with zero React children +- Loading spinner and placeholder text are now sibling overlays (not children of the Cytoscape div) +- Added explicit `cyRef.current = null` after `destroy()` +- Cleanup on unmount prevents stale references +- Verified: switching between hosts (DC-01 → EXEC-WS-039 → ENG-WS-052) works with 0 console errors + +--- + +## 17. LLM Analysis — Response Parsing Fix (February 20, 2026) + +**Request:** "llm analysis: HTTP 500 — searching for evidence of adult site access" + +**Root Cause Chain:** + +1. **`AttributeError: 'dict' object has no attribute 'strip'`** — `OllamaProvider.generate()` returns a dict (`{"response": "", "model": ..., ...}`), but `_parse_analysis` expected a string. + +2. **Wrong dict key extraction** — Initial dict-handling fix looked for `raw.get("analysis")` but Ollama's `/api/generate` endpoint puts the LLM text in the `"response"` key. + +3. **JSON parsing failures** — The 70B model sometimes produces slightly malformed JSON (trailing commas, etc.) that `json.loads` rejects. + +**Fixes (`backend/app/services/llm_analysis.py`):** + +| Change | Detail | +|--------|--------| +| Dict response extraction | `raw.get("response")` instead of `raw.get("analysis")` — correctly extracts LLM text from Ollama API dict | +| Robust JSON parsing | New `_extract_json_candidates()` generator: tries full text, then outermost `{…}` block, then trailing-comma-fixed variant | +| Reduced prompt size | `max_sample` 50 → 20 rows, `max_chars` 8000 → 6000 | +| Reduced row limit | `/llm-analyze` endpoint loads 2000 rows (was 5000) | +| Timeout | `asyncio.wait_for(..., timeout=300)` wraps the LLM call — returns graceful "timed out" message instead of hanging | +| Debug logging | `_parse_analysis` logs extraction source, text length, parse success/failure with error details | + +**Results:** +- Quick mode (llama3.1:latest on roadrunner): 18s, confidence 0.85, risk score 65, 3 key findings — all structured fields populated +- Deep mode (llama3.1:70b on wile): 128–185s, full analysis returned — JSON parsing succeeds when model produces valid JSON, falls back to plain text otherwise + +--- + +## 18. Version Bump — 0.3.0 → 0.4.0 (February 20, 2026) + +| File | Change | +|------|--------| +| `backend/app/config.py` | `APP_VERSION` 0.3.0 → 0.4.0 | +| `frontend/package.json` | `version` 0.1.0 → 0.4.0 | + +--- + +## Files Modified This Session (Sections 14–18) + +| File | Change | +|------|--------| +| `backend/app/services/process_tree.py` | Added `selectinload(DatasetRow.dataset)` to `_fetch_rows` | +| `frontend/src/components/ProcessTree.tsx` | Complete rewrite: host dropdown, grid layout, overlay panel, Cytoscape DOM separation | +| `backend/app/services/llm_analysis.py` | Fixed dict response extraction, robust JSON parsing, reduced prompt, added timeout | +| `backend/app/api/routes/analysis.py` | Row limit 5000 → 2000 | +| `backend/app/config.py` | Version 0.3.0 → 0.4.0 | +| `frontend/package.json` | Version 0.1.0 → 0.4.0 | + +## Deployment + +``` +docker compose up -d --build backend +# Backend: http://localhost:8000 (healthy, v0.4.0) +# Frontend: http://localhost:3000 (200 OK) +``` \ No newline at end of file diff --git a/frontend/package-lock.json b/frontend/package-lock.json index d22f2a3..e6fd7c3 100644 --- a/frontend/package-lock.json +++ b/frontend/package-lock.json @@ -14,14 +14,26 @@ "@mui/material": "^7.3.8", "@mui/x-data-grid": "^8.27.1", "@types/react-router-dom": "^5.3.3", + "cytoscape": "^3.33.1", + "cytoscape-cola": "^2.5.1", + "cytoscape-dagre": "^2.5.0", + "dagre": "^0.8.5", "notistack": "^3.0.2", "react": "^18.2.0", "react-dom": "^18.2.0", + "react-markdown": "^10.1.0", "react-router-dom": "^7.13.0", "react-scripts": "5.0.1", +<<<<<<< HEAD "recharts": "^3.7.0" +======= + "recharts": "^3.7.0", + "remark-gfm": "^4.0.1", + "yaml": "^2.8.2" +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 }, "devDependencies": { + "@types/cytoscape": "^3.21.9", "@types/react": "^18.2.0", "@types/react-dom": "^18.2.0", "typescript": "^4.9.5" @@ -3970,6 +3982,16 @@ "@types/node": "*" } }, +<<<<<<< HEAD +======= + "node_modules/@types/cytoscape": { + "version": "3.21.9", + "resolved": "https://registry.npmjs.org/@types/cytoscape/-/cytoscape-3.21.9.tgz", + "integrity": "sha512-JyrG4tllI6jvuISPjHK9j2Xv/LTbnLekLke5otGStjFluIyA9JjgnvgZrSBsp8cEDpiTjwgZUZwpPv8TSBcoLw==", + "dev": true, + "license": "MIT" + }, +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 "node_modules/@types/d3-array": { "version": "3.2.2", "resolved": "https://registry.npmjs.org/@types/d3-array/-/d3-array-3.2.2.tgz", @@ -4033,6 +4055,18 @@ "integrity": "sha512-Ps3T8E8dZDam6fUyNiMkekK3XUsaUEik+idO9/YjPtfj2qruF8tFBXS7XhtE4iIXBLxhmLjP3SXpLhVf21I9Lw==", "license": "MIT" }, +<<<<<<< HEAD +======= + "node_modules/@types/debug": { + "version": "4.1.12", + "resolved": "https://registry.npmjs.org/@types/debug/-/debug-4.1.12.tgz", + "integrity": "sha512-vIChWdVG3LG1SMxEvI/AK+FWJthlrqlTu7fbrlywTkkaONwk/UAGaULXRlf8vkzFBLVm0zkMdCquhL5aOjhXPQ==", + "license": "MIT", + "dependencies": { + "@types/ms": "*" + } + }, +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 "node_modules/@types/eslint": { "version": "8.56.12", "resolved": "https://registry.npmjs.org/@types/eslint/-/eslint-8.56.12.tgz", @@ -4059,6 +4093,15 @@ "integrity": "sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w==", "license": "MIT" }, + "node_modules/@types/estree-jsx": { + "version": "1.0.5", + "resolved": "https://registry.npmjs.org/@types/estree-jsx/-/estree-jsx-1.0.5.tgz", + "integrity": "sha512-52CcUVNFyfb1A2ALocQw/Dd1BQFNmSdkuC3BkZ6iqhdMfQz7JWOFRuJFloOzjk+6WijU56m9oKXFAXc7o3Towg==", + "license": "MIT", + "dependencies": { + "@types/estree": "*" + } + }, "node_modules/@types/express": { "version": "4.17.25", "resolved": "https://registry.npmjs.org/@types/express/-/express-4.17.25.tgz", @@ -4104,6 +4147,15 @@ "@types/node": "*" } }, + "node_modules/@types/hast": { + "version": "3.0.4", + "resolved": "https://registry.npmjs.org/@types/hast/-/hast-3.0.4.tgz", + "integrity": "sha512-WPs+bbQw5aCj+x6laNGWLH3wviHtoCv/P3+otBhbOhJgG8qtpdAMlTCxLtsTWA7LH1Oh/bFCHsBn0TPS5m30EQ==", + "license": "MIT", + "dependencies": { + "@types/unist": "*" + } + }, "node_modules/@types/history": { "version": "4.7.11", "resolved": "https://registry.npmjs.org/@types/history/-/history-4.7.11.tgz", @@ -4167,12 +4219,27 @@ "integrity": "sha512-dRLjCWHYg4oaA77cxO64oO+7JwCwnIzkZPdrrC71jQmQtlhM556pwKo5bUzqvZndkVbeFLIIi+9TC40JNF5hNQ==", "license": "MIT" }, + "node_modules/@types/mdast": { + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/@types/mdast/-/mdast-4.0.4.tgz", + "integrity": "sha512-kGaNbPh1k7AFzgpud/gMdvIm5xuECykRR+JnWKQno9TAXVa6WIVCGTPvYGekIDL4uwCZQSYbUxNBSb1aUo79oA==", + "license": "MIT", + "dependencies": { + "@types/unist": "*" + } + }, "node_modules/@types/mime": { "version": "1.3.5", "resolved": "https://registry.npmjs.org/@types/mime/-/mime-1.3.5.tgz", "integrity": "sha512-/pyBZWSLD2n0dcHE3hq8s8ZvcETHtEuF+3E7XVt0Ig2nvsVQXdghHVcEkIWjy9A0wKfTn97a/PSDYohKIlnP/w==", "license": "MIT" }, + "node_modules/@types/ms": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/@types/ms/-/ms-2.1.0.tgz", + "integrity": "sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA==", + "license": "MIT" + }, "node_modules/@types/node": { "version": "25.3.0", "resolved": "https://registry.npmjs.org/@types/node/-/node-25.3.0.tgz", @@ -4358,6 +4425,15 @@ "integrity": "sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==", "license": "MIT" }, +<<<<<<< HEAD +======= + "node_modules/@types/unist": { + "version": "3.0.3", + "resolved": "https://registry.npmjs.org/@types/unist/-/unist-3.0.3.tgz", + "integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==", + "license": "MIT" + }, +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 "node_modules/@types/use-sync-external-store": { "version": "0.0.6", "resolved": "https://registry.npmjs.org/@types/use-sync-external-store/-/use-sync-external-store-0.0.6.tgz", @@ -5644,6 +5720,16 @@ "@babel/core": "^7.0.0-0" } }, + "node_modules/bail": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/bail/-/bail-2.0.2.tgz", + "integrity": "sha512-0xO6mYd7JB2YesxDKplafRpsiOzPt9V02ddPCLbY1xYGPOX24NTyN50qnUxgCPcSoYMhKpAuBTjQoRZCAkUDRw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, "node_modules/balanced-match": { "version": "1.0.2", "resolved": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz", @@ -6003,6 +6089,16 @@ "node": ">=4" } }, + "node_modules/ccount": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/ccount/-/ccount-2.0.1.tgz", + "integrity": "sha512-eyrF0jiFpY+3drT6383f1qhkbGsLSifNAjA61IUjZjmLCWjItY6LB9ft9YhoDgwfmclB2zhu51Lc7+95b8NRAg==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, "node_modules/chalk": { "version": "4.1.2", "resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz", @@ -6028,6 +6124,46 @@ "node": ">=10" } }, + "node_modules/character-entities": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/character-entities/-/character-entities-2.0.2.tgz", + "integrity": "sha512-shx7oQ0Awen/BRIdkjkvz54PnEEI/EjwXDSIZp86/KKdbafHh1Df/RYGBhn4hbe2+uKC9FnT5UCEdyPz3ai9hQ==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/character-entities-html4": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/character-entities-html4/-/character-entities-html4-2.1.0.tgz", + "integrity": "sha512-1v7fgQRj6hnSwFpq1Eu0ynr/CDEw0rXo2B61qXrLNdHZmPKgb7fqS1a2JwF0rISo9q77jDI8VMEHoApn8qDoZA==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/character-entities-legacy": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/character-entities-legacy/-/character-entities-legacy-3.0.0.tgz", + "integrity": "sha512-RpPp0asT/6ufRm//AJVwpViZbGM/MkjQFxJccQRHmISF/22NBtsHqAWmL+/pmkPWoIUJdWyeVleTl1wydHATVQ==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/character-reference-invalid": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/character-reference-invalid/-/character-reference-invalid-2.0.1.tgz", + "integrity": "sha512-iBZ4F4wRbyORVsu0jPV7gXkOsGYjGHPmAyv+HiHG8gi5PtC9KI2j1+v8/tlibRvjoWX027ypmG/n0HtO5t7unw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, "node_modules/check-types": { "version": "11.2.3", "resolved": "https://registry.npmjs.org/check-types/-/check-types-11.2.3.tgz", @@ -6284,6 +6420,16 @@ "node": ">= 0.8" } }, + "node_modules/comma-separated-tokens": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/comma-separated-tokens/-/comma-separated-tokens-2.0.3.tgz", + "integrity": "sha512-Fu4hJdvzeylCfQPp9SGWidpzrMs7tTrlu6Vb8XGaRGck8QSNZJJp538Wrb60Lax4fPwR64ViY468OIUTbRlGZg==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, "node_modules/commander": { "version": "8.3.0", "resolved": "https://registry.npmjs.org/commander/-/commander-8.3.0.tgz", @@ -6477,6 +6623,15 @@ "node": ">=10" } }, + "node_modules/cosmiconfig/node_modules/yaml": { + "version": "1.10.2", + "resolved": "https://registry.npmjs.org/yaml/-/yaml-1.10.2.tgz", + "integrity": "sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==", + "license": "ISC", + "engines": { + "node": ">= 6" + } + }, "node_modules/cross-spawn": { "version": "7.0.6", "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", @@ -6805,6 +6960,15 @@ "postcss": "^8.2.15" } }, + "node_modules/cssnano/node_modules/yaml": { + "version": "1.10.2", + "resolved": "https://registry.npmjs.org/yaml/-/yaml-1.10.2.tgz", + "integrity": "sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==", + "license": "ISC", + "engines": { + "node": ">= 6" + } + }, "node_modules/csso": { "version": "4.2.0", "resolved": "https://registry.npmjs.org/csso/-/csso-4.2.0.tgz", @@ -6875,6 +7039,43 @@ "integrity": "sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==", "license": "MIT" }, +<<<<<<< HEAD +======= + "node_modules/cytoscape": { + "version": "3.33.1", + "resolved": "https://registry.npmjs.org/cytoscape/-/cytoscape-3.33.1.tgz", + "integrity": "sha512-iJc4TwyANnOGR1OmWhsS9ayRS3s+XQ185FmuHObThD+5AeJCakAAbWv8KimMTt08xCCLNgneQwFp+JRJOr9qGQ==", + "license": "MIT", + "peer": true, + "engines": { + "node": ">=0.10" + } + }, + "node_modules/cytoscape-cola": { + "version": "2.5.1", + "resolved": "https://registry.npmjs.org/cytoscape-cola/-/cytoscape-cola-2.5.1.tgz", + "integrity": "sha512-4/2S9bW1LvdsEPmxXN1OEAPFPbk7DvCx2c9d+TblkQAAvptGaSgtPWCByTEGgT8UxCxcVqes2aFPO5pzwo7R2w==", + "license": "MIT", + "dependencies": { + "webcola": "^3.4.0" + }, + "peerDependencies": { + "cytoscape": "^3.2.0" + } + }, + "node_modules/cytoscape-dagre": { + "version": "2.5.0", + "resolved": "https://registry.npmjs.org/cytoscape-dagre/-/cytoscape-dagre-2.5.0.tgz", + "integrity": "sha512-VG2Knemmshop4kh5fpLO27rYcyUaaDkRw+6PiX4bstpB+QFt0p2oauMrsjVbUamGWQ6YNavh7x2em2uZlzV44g==", + "license": "MIT", + "dependencies": { + "dagre": "^0.8.5" + }, + "peerDependencies": { + "cytoscape": "^3.2.22" + } + }, +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 "node_modules/d3-array": { "version": "3.2.4", "resolved": "https://registry.npmjs.org/d3-array/-/d3-array-3.2.4.tgz", @@ -6896,6 +7097,25 @@ "node": ">=12" } }, +<<<<<<< HEAD +======= + "node_modules/d3-dispatch": { + "version": "1.0.6", + "resolved": "https://registry.npmjs.org/d3-dispatch/-/d3-dispatch-1.0.6.tgz", + "integrity": "sha512-fVjoElzjhCEy+Hbn8KygnmMS7Or0a9sI2UzGwoB7cCtvI1XpVN9GpoYlnb3xt2YV66oXYb1fLJ8GMvP4hdU1RA==", + "license": "BSD-3-Clause" + }, + "node_modules/d3-drag": { + "version": "1.2.5", + "resolved": "https://registry.npmjs.org/d3-drag/-/d3-drag-1.2.5.tgz", + "integrity": "sha512-rD1ohlkKQwMZYkQlYVCrSFxsWPzI97+W+PaEIBNTMxRuxz9RF0Hi5nJWHGVJ3Om9d2fRTe1yOBINJyy/ahV95w==", + "license": "BSD-3-Clause", + "dependencies": { + "d3-dispatch": "1", + "d3-selection": "1" + } + }, +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 "node_modules/d3-ease": { "version": "3.0.1", "resolved": "https://registry.npmjs.org/d3-ease/-/d3-ease-3.0.1.tgz", @@ -6951,6 +7171,15 @@ "node": ">=12" } }, +<<<<<<< HEAD +======= + "node_modules/d3-selection": { + "version": "1.4.2", + "resolved": "https://registry.npmjs.org/d3-selection/-/d3-selection-1.4.2.tgz", + "integrity": "sha512-SJ0BqYihzOjDnnlfyeHT0e30k0K1+5sR3d5fNueCNeuhZTnGw4M4o8mqJchSwgKMXCNFo+e2VTChiSJ0vYtXkg==", + "license": "BSD-3-Clause" + }, +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 "node_modules/d3-shape": { "version": "3.2.0", "resolved": "https://registry.npmjs.org/d3-shape/-/d3-shape-3.2.0.tgz", @@ -6996,6 +7225,19 @@ "node": ">=12" } }, +<<<<<<< HEAD +======= + "node_modules/dagre": { + "version": "0.8.5", + "resolved": "https://registry.npmjs.org/dagre/-/dagre-0.8.5.tgz", + "integrity": "sha512-/aTqmnRta7x7MCCpExk7HQL2O4owCT2h8NT//9I1OQ9vt29Pa0BzSAkR5lwFUcQ7491yVi/3CXU9jQ5o0Mn2Sw==", + "license": "MIT", + "dependencies": { + "graphlib": "^2.1.8", + "lodash": "^4.17.15" + } + }, +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 "node_modules/damerau-levenshtein": { "version": "1.0.8", "resolved": "https://registry.npmjs.org/damerau-levenshtein/-/damerau-levenshtein-1.0.8.tgz", @@ -7096,6 +7338,22 @@ "integrity": "sha512-qIMFpTMZmny+MMIitAB6D7iVPEorVw6YQRWkvarTkT4tBeSLLiHzcwj6q0MmYSFCiVpiqPJTJEYIrpcPzVEIvg==", "license": "MIT" }, +<<<<<<< HEAD +======= + "node_modules/decode-named-character-reference": { + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/decode-named-character-reference/-/decode-named-character-reference-1.3.0.tgz", + "integrity": "sha512-GtpQYB283KrPp6nRw50q3U9/VfOutZOe103qlN7BPP6Ad27xYnOIWv4lPzo8HCAL+mMZofJ9KEy30fq6MfaK6Q==", + "license": "MIT", + "dependencies": { + "character-entities": "^2.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 "node_modules/dedent": { "version": "0.7.0", "resolved": "https://registry.npmjs.org/dedent/-/dedent-0.7.0.tgz", @@ -7190,6 +7448,15 @@ "node": ">= 0.8" } }, + "node_modules/dequal": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/dequal/-/dequal-2.0.3.tgz", + "integrity": "sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==", + "license": "MIT", + "engines": { + "node": ">=6" + } + }, "node_modules/destroy": { "version": "1.2.0", "resolved": "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz", @@ -7247,6 +7514,19 @@ "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==", "license": "MIT" }, + "node_modules/devlop": { + "version": "1.1.0", + "resolved": "https://registry.npmjs.org/devlop/-/devlop-1.1.0.tgz", + "integrity": "sha512-RWmIqhcFf1lRYBvNmr7qTNuyCt/7/ns2jbpp1+PalgE/rDQcBT0fioSMUpJ93irlUhC5hrg4cYqe6U+0ImW0rA==", + "license": "MIT", + "dependencies": { + "dequal": "^2.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, "node_modules/didyoumean": { "version": "1.2.2", "resolved": "https://registry.npmjs.org/didyoumean/-/didyoumean-1.2.2.tgz", @@ -8388,6 +8668,16 @@ "node": ">=4.0" } }, + "node_modules/estree-util-is-identifier-name": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/estree-util-is-identifier-name/-/estree-util-is-identifier-name-3.0.0.tgz", + "integrity": "sha512-hFtqIDZTIUZ9BXLb8y4pYGyk6+wekIivNVTcmvk8NoOh+VeRn5y6cEHzbURrWbfp1fIqdVipilzj+lfaadNZmg==", + "license": "MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, "node_modules/estree-walker": { "version": "1.0.1", "resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-1.0.1.tgz", @@ -8543,6 +8833,12 @@ "integrity": "sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==", "license": "MIT" }, + "node_modules/extend": { + "version": "3.0.2", + "resolved": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz", + "integrity": "sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==", + "license": "MIT" + }, "node_modules/fast-deep-equal": { "version": "3.1.3", "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz", @@ -8957,6 +9253,15 @@ "node": ">=6" } }, + "node_modules/fork-ts-checker-webpack-plugin/node_modules/yaml": { + "version": "1.10.2", + "resolved": "https://registry.npmjs.org/yaml/-/yaml-1.10.2.tgz", + "integrity": "sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==", + "license": "ISC", + "engines": { + "node": ">= 6" + } + }, "node_modules/form-data": { "version": "3.0.4", "resolved": "https://registry.npmjs.org/form-data/-/form-data-3.0.4.tgz", @@ -9351,6 +9656,15 @@ "integrity": "sha512-EtKwoO6kxCL9WO5xipiHTZlSzBm7WLT627TqC/uVRd0HKmq8NXyebnNYxDoBi7wt8eTWrUrKXCOVaFq9x1kgag==", "license": "MIT" }, + "node_modules/graphlib": { + "version": "2.1.8", + "resolved": "https://registry.npmjs.org/graphlib/-/graphlib-2.1.8.tgz", + "integrity": "sha512-jcLLfkpoVGmH7/InMC/1hIvOPSUh38oJtGhvrOFGzioE1DZ+0YW16RgmOJhHiuWTvGiJQ9Z1Ik43JvkRPRvE+A==", + "license": "MIT", + "dependencies": { + "lodash": "^4.17.15" + } + }, "node_modules/gzip-size": { "version": "6.0.0", "resolved": "https://registry.npmjs.org/gzip-size/-/gzip-size-6.0.0.tgz", @@ -9465,6 +9779,46 @@ "node": ">= 0.4" } }, + "node_modules/hast-util-to-jsx-runtime": { + "version": "2.3.6", + "resolved": "https://registry.npmjs.org/hast-util-to-jsx-runtime/-/hast-util-to-jsx-runtime-2.3.6.tgz", + "integrity": "sha512-zl6s8LwNyo1P9uw+XJGvZtdFF1GdAkOg8ujOw+4Pyb76874fLps4ueHXDhXWdk6YHQ6OgUtinliG7RsYvCbbBg==", + "license": "MIT", + "dependencies": { + "@types/estree": "^1.0.0", + "@types/hast": "^3.0.0", + "@types/unist": "^3.0.0", + "comma-separated-tokens": "^2.0.0", + "devlop": "^1.0.0", + "estree-util-is-identifier-name": "^3.0.0", + "hast-util-whitespace": "^3.0.0", + "mdast-util-mdx-expression": "^2.0.0", + "mdast-util-mdx-jsx": "^3.0.0", + "mdast-util-mdxjs-esm": "^2.0.0", + "property-information": "^7.0.0", + "space-separated-tokens": "^2.0.0", + "style-to-js": "^1.0.0", + "unist-util-position": "^5.0.0", + "vfile-message": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/hast-util-whitespace": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/hast-util-whitespace/-/hast-util-whitespace-3.0.0.tgz", + "integrity": "sha512-88JUN06ipLwsnv+dVn+OIYOvAuvBMy/Qoi6O7mQHxdPXpjy+Cd6xRkWwux7DKO+4sYILtLBRIKgsdpS2gQc7qw==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, "node_modules/he": { "version": "1.2.0", "resolved": "https://registry.npmjs.org/he/-/he-1.2.0.tgz", @@ -9601,6 +9955,16 @@ "node": ">=12" } }, + "node_modules/html-url-attributes": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/html-url-attributes/-/html-url-attributes-3.0.1.tgz", + "integrity": "sha512-ol6UPyBWqsrO6EJySPz2O7ZSr856WDrEzM5zMqp+FJJLGMW35cLYmmZnl0vztAZxRUoNZJFTCohfjuIJ8I4QBQ==", + "license": "MIT", + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, "node_modules/html-webpack-plugin": { "version": "5.6.6", "resolved": "https://registry.npmjs.org/html-webpack-plugin/-/html-webpack-plugin-5.6.6.tgz", @@ -9886,6 +10250,12 @@ "integrity": "sha512-JV/yugV2uzW5iMRSiZAyDtQd+nxtUnjeLt0acNdw98kKLrvuRVyB80tsREOE7yvGVgalhZ6RNXCmEHkUKBKxew==", "license": "ISC" }, + "node_modules/inline-style-parser": { + "version": "0.2.7", + "resolved": "https://registry.npmjs.org/inline-style-parser/-/inline-style-parser-0.2.7.tgz", + "integrity": "sha512-Nb2ctOyNR8DqQoR0OwRG95uNWIC0C1lCgf5Naz5H6Ji72KZ8OcFZLz2P5sNgwlyoJ8Yif11oMuYs5pBQa86csA==", + "license": "MIT" + }, "node_modules/internal-slot": { "version": "1.1.0", "resolved": "https://registry.npmjs.org/internal-slot/-/internal-slot-1.1.0.tgz", @@ -9918,6 +10288,30 @@ "node": ">= 10" } }, + "node_modules/is-alphabetical": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/is-alphabetical/-/is-alphabetical-2.0.1.tgz", + "integrity": "sha512-FWyyY60MeTNyeSRpkM2Iry0G9hpr7/9kD40mD/cGQEuilcZYS4okz8SN2Q6rLCJ8gbCt6fN+rC+6tMGS99LaxQ==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/is-alphanumerical": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/is-alphanumerical/-/is-alphanumerical-2.0.1.tgz", + "integrity": "sha512-hmbYhX/9MUMF5uh7tOXyK/n0ZvWpad5caBA17GsC6vyuCqaWliRG5K1qS9inmUhEMaOBIW7/whAnSwveW/LtZw==", + "license": "MIT", + "dependencies": { + "is-alphabetical": "^2.0.0", + "is-decimal": "^2.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, "node_modules/is-array-buffer": { "version": "3.0.5", "resolved": "https://registry.npmjs.org/is-array-buffer/-/is-array-buffer-3.0.5.tgz", @@ -10063,6 +10457,16 @@ "url": "https://github.com/sponsors/ljharb" } }, + "node_modules/is-decimal": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/is-decimal/-/is-decimal-2.0.1.tgz", + "integrity": "sha512-AAB9hiomQs5DXWcRB1rqsxGUstbRroFOPPVAomNk/3XHR5JyEZChOyTWe2oayKnsSsr/kcGqF+z6yuH6HHpN0A==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, "node_modules/is-docker": { "version": "2.2.1", "resolved": "https://registry.npmjs.org/is-docker/-/is-docker-2.2.1.tgz", @@ -10151,6 +10555,16 @@ "node": ">=0.10.0" } }, + "node_modules/is-hexadecimal": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/is-hexadecimal/-/is-hexadecimal-2.0.1.tgz", + "integrity": "sha512-DgZQp241c8oO6cA1SbTEWiXeoxV42vlcJxgH+B3hi1AiqqKruZR3ZGF8In3fj4+/y/7rHvlOZLZtgJ/4ttYGZg==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, "node_modules/is-map": { "version": "2.0.3", "resolved": "https://registry.npmjs.org/is-map/-/is-map-2.0.3.tgz", @@ -11831,6 +12245,16 @@ "integrity": "sha512-xfBaXQd9ryd9dlSDvnvI0lvxfLJlYAZzXomUYzLKtUeOQvOP5piqAWuGtrhWeqaXK9hhoM/iyJc5AV+XfsX3HQ==", "license": "MIT" }, + "node_modules/longest-streak": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/longest-streak/-/longest-streak-3.1.0.tgz", + "integrity": "sha512-9Ri+o0JYgehTaVBBDoMqIl8GXtbWg711O3srftcHhZ0dqnETqLaoIK0x17fUw9rFSlK/0NlsKe0Ahhyl5pXE2g==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, "node_modules/loose-envify": { "version": "1.4.0", "resolved": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz", @@ -11903,6 +12327,16 @@ "tmpl": "1.0.5" } }, + "node_modules/markdown-table": { + "version": "3.0.4", + "resolved": "https://registry.npmjs.org/markdown-table/-/markdown-table-3.0.4.tgz", + "integrity": "sha512-wiYz4+JrLyb/DqW2hkFJxP7Vd7JuTDm77fvbM8VfEQdmSMqcImWeeRbHwZjBjIFki/VaMK2BhFi7oUUZeM5bqw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, "node_modules/math-intrinsics": { "version": "1.1.0", "resolved": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz", @@ -11912,6 +12346,288 @@ "node": ">= 0.4" } }, + "node_modules/mdast-util-find-and-replace": { + "version": "3.0.2", + "resolved": "https://registry.npmjs.org/mdast-util-find-and-replace/-/mdast-util-find-and-replace-3.0.2.tgz", + "integrity": "sha512-Tmd1Vg/m3Xz43afeNxDIhWRtFZgM2VLyaf4vSTYwudTyeuTneoL3qtWMA5jeLyz/O1vDJmmV4QuScFCA2tBPwg==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^4.0.0", + "escape-string-regexp": "^5.0.0", + "unist-util-is": "^6.0.0", + "unist-util-visit-parents": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-find-and-replace/node_modules/escape-string-regexp": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-5.0.0.tgz", + "integrity": "sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw==", + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, + "node_modules/mdast-util-from-markdown": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/mdast-util-from-markdown/-/mdast-util-from-markdown-2.0.2.tgz", + "integrity": "sha512-uZhTV/8NBuw0WHkPTrCqDOl0zVe1BIng5ZtHoDk49ME1qqcjYmmLmOf0gELgcRMxN4w2iuIeVso5/6QymSrgmA==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^4.0.0", + "@types/unist": "^3.0.0", + "decode-named-character-reference": "^1.0.0", + "devlop": "^1.0.0", + "mdast-util-to-string": "^4.0.0", + "micromark": "^4.0.0", + "micromark-util-decode-numeric-character-reference": "^2.0.0", + "micromark-util-decode-string": "^2.0.0", + "micromark-util-normalize-identifier": "^2.0.0", + "micromark-util-symbol": "^2.0.0", + "micromark-util-types": "^2.0.0", + "unist-util-stringify-position": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-gfm": { + "version": "3.1.0", + "resolved": "https://registry.npmjs.org/mdast-util-gfm/-/mdast-util-gfm-3.1.0.tgz", + "integrity": "sha512-0ulfdQOM3ysHhCJ1p06l0b0VKlhU0wuQs3thxZQagjcjPrlFRqY215uZGHHJan9GEAXd9MbfPjFJz+qMkVR6zQ==", + "license": "MIT", + "dependencies": { + "mdast-util-from-markdown": "^2.0.0", + "mdast-util-gfm-autolink-literal": "^2.0.0", + "mdast-util-gfm-footnote": "^2.0.0", + "mdast-util-gfm-strikethrough": "^2.0.0", + "mdast-util-gfm-table": "^2.0.0", + "mdast-util-gfm-task-list-item": "^2.0.0", + "mdast-util-to-markdown": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-gfm-autolink-literal": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/mdast-util-gfm-autolink-literal/-/mdast-util-gfm-autolink-literal-2.0.1.tgz", + "integrity": "sha512-5HVP2MKaP6L+G6YaxPNjuL0BPrq9orG3TsrZ9YXbA3vDw/ACI4MEsnoDpn6ZNm7GnZgtAcONJyPhOP8tNJQavQ==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^4.0.0", + "ccount": "^2.0.0", + "devlop": "^1.0.0", + "mdast-util-find-and-replace": "^3.0.0", + "micromark-util-character": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-gfm-footnote": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/mdast-util-gfm-footnote/-/mdast-util-gfm-footnote-2.1.0.tgz", + "integrity": "sha512-sqpDWlsHn7Ac9GNZQMeUzPQSMzR6Wv0WKRNvQRg0KqHh02fpTz69Qc1QSseNX29bhz1ROIyNyxExfawVKTm1GQ==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^4.0.0", + "devlop": "^1.1.0", + "mdast-util-from-markdown": "^2.0.0", + "mdast-util-to-markdown": "^2.0.0", + "micromark-util-normalize-identifier": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-gfm-strikethrough": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/mdast-util-gfm-strikethrough/-/mdast-util-gfm-strikethrough-2.0.0.tgz", + "integrity": "sha512-mKKb915TF+OC5ptj5bJ7WFRPdYtuHv0yTRxK2tJvi+BDqbkiG7h7u/9SI89nRAYcmap2xHQL9D+QG/6wSrTtXg==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^4.0.0", + "mdast-util-from-markdown": "^2.0.0", + "mdast-util-to-markdown": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-gfm-table": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/mdast-util-gfm-table/-/mdast-util-gfm-table-2.0.0.tgz", + "integrity": "sha512-78UEvebzz/rJIxLvE7ZtDd/vIQ0RHv+3Mh5DR96p7cS7HsBhYIICDBCu8csTNWNO6tBWfqXPWekRuj2FNOGOZg==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^4.0.0", + "devlop": "^1.0.0", + "markdown-table": "^3.0.0", + "mdast-util-from-markdown": "^2.0.0", + "mdast-util-to-markdown": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-gfm-task-list-item": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/mdast-util-gfm-task-list-item/-/mdast-util-gfm-task-list-item-2.0.0.tgz", + "integrity": "sha512-IrtvNvjxC1o06taBAVJznEnkiHxLFTzgonUdy8hzFVeDun0uTjxxrRGVaNFqkU1wJR3RBPEfsxmU6jDWPofrTQ==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^4.0.0", + "devlop": "^1.0.0", + "mdast-util-from-markdown": "^2.0.0", + "mdast-util-to-markdown": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-mdx-expression": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/mdast-util-mdx-expression/-/mdast-util-mdx-expression-2.0.1.tgz", + "integrity": "sha512-J6f+9hUp+ldTZqKRSg7Vw5V6MqjATc+3E4gf3CFNcuZNWD8XdyI6zQ8GqH7f8169MM6P7hMBRDVGnn7oHB9kXQ==", + "license": "MIT", + "dependencies": { + "@types/estree-jsx": "^1.0.0", + "@types/hast": "^3.0.0", + "@types/mdast": "^4.0.0", + "devlop": "^1.0.0", + "mdast-util-from-markdown": "^2.0.0", + "mdast-util-to-markdown": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-mdx-jsx": { + "version": "3.2.0", + "resolved": "https://registry.npmjs.org/mdast-util-mdx-jsx/-/mdast-util-mdx-jsx-3.2.0.tgz", + "integrity": "sha512-lj/z8v0r6ZtsN/cGNNtemmmfoLAFZnjMbNyLzBafjzikOM+glrjNHPlf6lQDOTccj9n5b0PPihEBbhneMyGs1Q==", + "license": "MIT", + "dependencies": { + "@types/estree-jsx": "^1.0.0", + "@types/hast": "^3.0.0", + "@types/mdast": "^4.0.0", + "@types/unist": "^3.0.0", + "ccount": "^2.0.0", + "devlop": "^1.1.0", + "mdast-util-from-markdown": "^2.0.0", + "mdast-util-to-markdown": "^2.0.0", + "parse-entities": "^4.0.0", + "stringify-entities": "^4.0.0", + "unist-util-stringify-position": "^4.0.0", + "vfile-message": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-mdxjs-esm": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/mdast-util-mdxjs-esm/-/mdast-util-mdxjs-esm-2.0.1.tgz", + "integrity": "sha512-EcmOpxsZ96CvlP03NghtH1EsLtr0n9Tm4lPUJUBccV9RwUOneqSycg19n5HGzCf+10LozMRSObtVr3ee1WoHtg==", + "license": "MIT", + "dependencies": { + "@types/estree-jsx": "^1.0.0", + "@types/hast": "^3.0.0", + "@types/mdast": "^4.0.0", + "devlop": "^1.0.0", + "mdast-util-from-markdown": "^2.0.0", + "mdast-util-to-markdown": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-phrasing": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/mdast-util-phrasing/-/mdast-util-phrasing-4.1.0.tgz", + "integrity": "sha512-TqICwyvJJpBwvGAMZjj4J2n0X8QWp21b9l0o7eXyVJ25YNWYbJDVIyD1bZXE6WtV6RmKJVYmQAKWa0zWOABz2w==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^4.0.0", + "unist-util-is": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-to-hast": { + "version": "13.2.1", + "resolved": "https://registry.npmjs.org/mdast-util-to-hast/-/mdast-util-to-hast-13.2.1.tgz", + "integrity": "sha512-cctsq2wp5vTsLIcaymblUriiTcZd0CwWtCbLvrOzYCDZoWyMNV8sZ7krj09FSnsiJi3WVsHLM4k6Dq/yaPyCXA==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0", + "@types/mdast": "^4.0.0", + "@ungap/structured-clone": "^1.0.0", + "devlop": "^1.0.0", + "micromark-util-sanitize-uri": "^2.0.0", + "trim-lines": "^3.0.0", + "unist-util-position": "^5.0.0", + "unist-util-visit": "^5.0.0", + "vfile": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-to-markdown": { + "version": "2.1.2", + "resolved": "https://registry.npmjs.org/mdast-util-to-markdown/-/mdast-util-to-markdown-2.1.2.tgz", + "integrity": "sha512-xj68wMTvGXVOKonmog6LwyJKrYXZPvlwabaryTjLh9LuvovB/KAH+kvi8Gjj+7rJjsFi23nkUxRQv1KqSroMqA==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^4.0.0", + "@types/unist": "^3.0.0", + "longest-streak": "^3.0.0", + "mdast-util-phrasing": "^4.0.0", + "mdast-util-to-string": "^4.0.0", + "micromark-util-classify-character": "^2.0.0", + "micromark-util-decode-string": "^2.0.0", + "unist-util-visit": "^5.0.0", + "zwitch": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/mdast-util-to-string": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/mdast-util-to-string/-/mdast-util-to-string-4.0.0.tgz", + "integrity": "sha512-0H44vDimn51F0YwvxSJSm0eCDOJTRlmN0R1yBh4HLj9wiV1Dn0QoXGbvFAWj2hSItVTlCmBF1hqKlIyUBVFLPg==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, "node_modules/mdn-data": { "version": "2.0.4", "resolved": "https://registry.npmjs.org/mdn-data/-/mdn-data-2.0.4.tgz", @@ -11972,6 +12688,569 @@ "node": ">= 0.6" } }, + "node_modules/micromark": { + "version": "4.0.2", + "resolved": "https://registry.npmjs.org/micromark/-/micromark-4.0.2.tgz", + "integrity": "sha512-zpe98Q6kvavpCr1NPVSCMebCKfD7CA2NqZ+rykeNhONIJBpc1tFKt9hucLGwha3jNTNI8lHpctWJWoimVF4PfA==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "@types/debug": "^4.0.0", + "debug": "^4.0.0", + "decode-named-character-reference": "^1.0.0", + "devlop": "^1.0.0", + "micromark-core-commonmark": "^2.0.0", + "micromark-factory-space": "^2.0.0", + "micromark-util-character": "^2.0.0", + "micromark-util-chunked": "^2.0.0", + "micromark-util-combine-extensions": "^2.0.0", + "micromark-util-decode-numeric-character-reference": "^2.0.0", + "micromark-util-encode": "^2.0.0", + "micromark-util-normalize-identifier": "^2.0.0", + "micromark-util-resolve-all": "^2.0.0", + "micromark-util-sanitize-uri": "^2.0.0", + "micromark-util-subtokenize": "^2.0.0", + "micromark-util-symbol": "^2.0.0", + "micromark-util-types": "^2.0.0" + } + }, + "node_modules/micromark-core-commonmark": { + "version": "2.0.3", + "resolved": "https://registry.npmjs.org/micromark-core-commonmark/-/micromark-core-commonmark-2.0.3.tgz", + "integrity": "sha512-RDBrHEMSxVFLg6xvnXmb1Ayr2WzLAWjeSATAoxwKYJV94TeNavgoIdA0a9ytzDSVzBy2YKFK+emCPOEibLeCrg==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "decode-named-character-reference": "^1.0.0", + "devlop": "^1.0.0", + "micromark-factory-destination": "^2.0.0", + "micromark-factory-label": "^2.0.0", + "micromark-factory-space": "^2.0.0", + "micromark-factory-title": "^2.0.0", + "micromark-factory-whitespace": "^2.0.0", + "micromark-util-character": "^2.0.0", + "micromark-util-chunked": "^2.0.0", + "micromark-util-classify-character": "^2.0.0", + "micromark-util-html-tag-name": "^2.0.0", + "micromark-util-normalize-identifier": "^2.0.0", + "micromark-util-resolve-all": "^2.0.0", + "micromark-util-subtokenize": "^2.0.0", + "micromark-util-symbol": "^2.0.0", + "micromark-util-types": "^2.0.0" + } + }, + "node_modules/micromark-extension-gfm": { + "version": "3.0.0", + "resolved": "https://registry.npmjs.org/micromark-extension-gfm/-/micromark-extension-gfm-3.0.0.tgz", + "integrity": "sha512-vsKArQsicm7t0z2GugkCKtZehqUm31oeGBV/KVSorWSy8ZlNAv7ytjFhvaryUiCUJYqs+NoE6AFhpQvBTM6Q4w==", + "license": "MIT", + "dependencies": { + "micromark-extension-gfm-autolink-literal": "^2.0.0", + "micromark-extension-gfm-footnote": "^2.0.0", + "micromark-extension-gfm-strikethrough": "^2.0.0", + "micromark-extension-gfm-table": "^2.0.0", + "micromark-extension-gfm-tagfilter": "^2.0.0", + "micromark-extension-gfm-task-list-item": "^2.0.0", + "micromark-util-combine-extensions": "^2.0.0", + "micromark-util-types": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-gfm-autolink-literal": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/micromark-extension-gfm-autolink-literal/-/micromark-extension-gfm-autolink-literal-2.1.0.tgz", + "integrity": "sha512-oOg7knzhicgQ3t4QCjCWgTmfNhvQbDDnJeVu9v81r7NltNCVmhPy1fJRX27pISafdjL+SVc4d3l48Gb6pbRypw==", + "license": "MIT", + "dependencies": { + "micromark-util-character": "^2.0.0", + "micromark-util-sanitize-uri": "^2.0.0", + "micromark-util-symbol": "^2.0.0", + "micromark-util-types": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-gfm-footnote": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/micromark-extension-gfm-footnote/-/micromark-extension-gfm-footnote-2.1.0.tgz", + "integrity": "sha512-/yPhxI1ntnDNsiHtzLKYnE3vf9JZ6cAisqVDauhp4CEHxlb4uoOTxOCJ+9s51bIB8U1N1FJ1RXOKTIlD5B/gqw==", + "license": "MIT", + "dependencies": { + "devlop": "^1.0.0", + "micromark-core-commonmark": "^2.0.0", + "micromark-factory-space": "^2.0.0", + "micromark-util-character": "^2.0.0", + "micromark-util-normalize-identifier": "^2.0.0", + "micromark-util-sanitize-uri": "^2.0.0", + "micromark-util-symbol": "^2.0.0", + "micromark-util-types": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-gfm-strikethrough": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/micromark-extension-gfm-strikethrough/-/micromark-extension-gfm-strikethrough-2.1.0.tgz", + "integrity": "sha512-ADVjpOOkjz1hhkZLlBiYA9cR2Anf8F4HqZUO6e5eDcPQd0Txw5fxLzzxnEkSkfnD0wziSGiv7sYhk/ktvbf1uw==", + "license": "MIT", + "dependencies": { + "devlop": "^1.0.0", + "micromark-util-chunked": "^2.0.0", + "micromark-util-classify-character": "^2.0.0", + "micromark-util-resolve-all": "^2.0.0", + "micromark-util-symbol": "^2.0.0", + "micromark-util-types": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-gfm-table": { + "version": "2.1.1", + "resolved": "https://registry.npmjs.org/micromark-extension-gfm-table/-/micromark-extension-gfm-table-2.1.1.tgz", + "integrity": "sha512-t2OU/dXXioARrC6yWfJ4hqB7rct14e8f7m0cbI5hUmDyyIlwv5vEtooptH8INkbLzOatzKuVbQmAYcbWoyz6Dg==", + "license": "MIT", + "dependencies": { + "devlop": "^1.0.0", + "micromark-factory-space": "^2.0.0", + "micromark-util-character": "^2.0.0", + "micromark-util-symbol": "^2.0.0", + "micromark-util-types": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-gfm-tagfilter": { + "version": "2.0.0", + "resolved": "https://registry.npmjs.org/micromark-extension-gfm-tagfilter/-/micromark-extension-gfm-tagfilter-2.0.0.tgz", + "integrity": "sha512-xHlTOmuCSotIA8TW1mDIM6X2O1SiX5P9IuDtqGonFhEK0qgRI4yeC6vMxEV2dgyr2TiD+2PQ10o+cOhdVAcwfg==", + "license": "MIT", + "dependencies": { + "micromark-util-types": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-extension-gfm-task-list-item": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/micromark-extension-gfm-task-list-item/-/micromark-extension-gfm-task-list-item-2.1.0.tgz", + "integrity": "sha512-qIBZhqxqI6fjLDYFTBIa4eivDMnP+OZqsNwmQ3xNLE4Cxwc+zfQEfbs6tzAo2Hjq+bh6q5F+Z8/cksrLFYWQQw==", + "license": "MIT", + "dependencies": { + "devlop": "^1.0.0", + "micromark-factory-space": "^2.0.0", + "micromark-util-character": "^2.0.0", + "micromark-util-symbol": "^2.0.0", + "micromark-util-types": "^2.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/micromark-factory-destination": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/micromark-factory-destination/-/micromark-factory-destination-2.0.1.tgz", + "integrity": "sha512-Xe6rDdJlkmbFRExpTOmRj9N3MaWmbAgdpSrBQvCFqhezUn4AHqJHbaEnfbVYYiexVSs//tqOdY/DxhjdCiJnIA==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-character": "^2.0.0", + "micromark-util-symbol": "^2.0.0", + "micromark-util-types": "^2.0.0" + } + }, + "node_modules/micromark-factory-label": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/micromark-factory-label/-/micromark-factory-label-2.0.1.tgz", + "integrity": "sha512-VFMekyQExqIW7xIChcXn4ok29YE3rnuyveW3wZQWWqF4Nv9Wk5rgJ99KzPvHjkmPXF93FXIbBp6YdW3t71/7Vg==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "devlop": "^1.0.0", + "micromark-util-character": "^2.0.0", + "micromark-util-symbol": "^2.0.0", + "micromark-util-types": "^2.0.0" + } + }, + "node_modules/micromark-factory-space": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/micromark-factory-space/-/micromark-factory-space-2.0.1.tgz", + "integrity": "sha512-zRkxjtBxxLd2Sc0d+fbnEunsTj46SWXgXciZmHq0kDYGnck/ZSGj9/wULTV95uoeYiK5hRXP2mJ98Uo4cq/LQg==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-character": "^2.0.0", + "micromark-util-types": "^2.0.0" + } + }, + "node_modules/micromark-factory-title": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/micromark-factory-title/-/micromark-factory-title-2.0.1.tgz", + "integrity": "sha512-5bZ+3CjhAd9eChYTHsjy6TGxpOFSKgKKJPJxr293jTbfry2KDoWkhBb6TcPVB4NmzaPhMs1Frm9AZH7OD4Cjzw==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-factory-space": "^2.0.0", + "micromark-util-character": "^2.0.0", + "micromark-util-symbol": "^2.0.0", + "micromark-util-types": "^2.0.0" + } + }, + "node_modules/micromark-factory-whitespace": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/micromark-factory-whitespace/-/micromark-factory-whitespace-2.0.1.tgz", + "integrity": "sha512-Ob0nuZ3PKt/n0hORHyvoD9uZhr+Za8sFoP+OnMcnWK5lngSzALgQYKMr9RJVOWLqQYuyn6ulqGWSXdwf6F80lQ==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-factory-space": "^2.0.0", + "micromark-util-character": "^2.0.0", + "micromark-util-symbol": "^2.0.0", + "micromark-util-types": "^2.0.0" + } + }, + "node_modules/micromark-util-character": { + "version": "2.1.1", + "resolved": "https://registry.npmjs.org/micromark-util-character/-/micromark-util-character-2.1.1.tgz", + "integrity": "sha512-wv8tdUTJ3thSFFFJKtpYKOYiGP2+v96Hvk4Tu8KpCAsTMs6yi+nVmGh1syvSCsaxz45J6Jbw+9DD6g97+NV67Q==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-symbol": "^2.0.0", + "micromark-util-types": "^2.0.0" + } + }, + "node_modules/micromark-util-chunked": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/micromark-util-chunked/-/micromark-util-chunked-2.0.1.tgz", + "integrity": "sha512-QUNFEOPELfmvv+4xiNg2sRYeS/P84pTW0TCgP5zc9FpXetHY0ab7SxKyAQCNCc1eK0459uoLI1y5oO5Vc1dbhA==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-symbol": "^2.0.0" + } + }, + "node_modules/micromark-util-classify-character": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/micromark-util-classify-character/-/micromark-util-classify-character-2.0.1.tgz", + "integrity": "sha512-K0kHzM6afW/MbeWYWLjoHQv1sgg2Q9EccHEDzSkxiP/EaagNzCm7T/WMKZ3rjMbvIpvBiZgwR3dKMygtA4mG1Q==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-character": "^2.0.0", + "micromark-util-symbol": "^2.0.0", + "micromark-util-types": "^2.0.0" + } + }, + "node_modules/micromark-util-combine-extensions": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/micromark-util-combine-extensions/-/micromark-util-combine-extensions-2.0.1.tgz", + "integrity": "sha512-OnAnH8Ujmy59JcyZw8JSbK9cGpdVY44NKgSM7E9Eh7DiLS2E9RNQf0dONaGDzEG9yjEl5hcqeIsj4hfRkLH/Bg==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-chunked": "^2.0.0", + "micromark-util-types": "^2.0.0" + } + }, + "node_modules/micromark-util-decode-numeric-character-reference": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/micromark-util-decode-numeric-character-reference/-/micromark-util-decode-numeric-character-reference-2.0.2.tgz", + "integrity": "sha512-ccUbYk6CwVdkmCQMyr64dXz42EfHGkPQlBj5p7YVGzq8I7CtjXZJrubAYezf7Rp+bjPseiROqe7G6foFd+lEuw==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-symbol": "^2.0.0" + } + }, + "node_modules/micromark-util-decode-string": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/micromark-util-decode-string/-/micromark-util-decode-string-2.0.1.tgz", + "integrity": "sha512-nDV/77Fj6eH1ynwscYTOsbK7rR//Uj0bZXBwJZRfaLEJ1iGBR6kIfNmlNqaqJf649EP0F3NWNdeJi03elllNUQ==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "decode-named-character-reference": "^1.0.0", + "micromark-util-character": "^2.0.0", + "micromark-util-decode-numeric-character-reference": "^2.0.0", + "micromark-util-symbol": "^2.0.0" + } + }, + "node_modules/micromark-util-encode": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/micromark-util-encode/-/micromark-util-encode-2.0.1.tgz", + "integrity": "sha512-c3cVx2y4KqUnwopcO9b/SCdo2O67LwJJ/UyqGfbigahfegL9myoEFoDYZgkT7f36T0bLrM9hZTAaAyH+PCAXjw==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT" + }, + "node_modules/micromark-util-html-tag-name": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/micromark-util-html-tag-name/-/micromark-util-html-tag-name-2.0.1.tgz", + "integrity": "sha512-2cNEiYDhCWKI+Gs9T0Tiysk136SnR13hhO8yW6BGNyhOC4qYFnwF1nKfD3HFAIXA5c45RrIG1ub11GiXeYd1xA==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT" + }, + "node_modules/micromark-util-normalize-identifier": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/micromark-util-normalize-identifier/-/micromark-util-normalize-identifier-2.0.1.tgz", + "integrity": "sha512-sxPqmo70LyARJs0w2UclACPUUEqltCkJ6PhKdMIDuJ3gSf/Q+/GIe3WKl0Ijb/GyH9lOpUkRAO2wp0GVkLvS9Q==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-symbol": "^2.0.0" + } + }, + "node_modules/micromark-util-resolve-all": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/micromark-util-resolve-all/-/micromark-util-resolve-all-2.0.1.tgz", + "integrity": "sha512-VdQyxFWFT2/FGJgwQnJYbe1jjQoNTS4RjglmSjTUlpUMa95Htx9NHeYW4rGDJzbjvCsl9eLjMQwGeElsqmzcHg==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-types": "^2.0.0" + } + }, + "node_modules/micromark-util-sanitize-uri": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/micromark-util-sanitize-uri/-/micromark-util-sanitize-uri-2.0.1.tgz", + "integrity": "sha512-9N9IomZ/YuGGZZmQec1MbgxtlgougxTodVwDzzEouPKo3qFWvymFHWcnDi2vzV1ff6kas9ucW+o3yzJK9YB1AQ==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "micromark-util-character": "^2.0.0", + "micromark-util-encode": "^2.0.0", + "micromark-util-symbol": "^2.0.0" + } + }, + "node_modules/micromark-util-subtokenize": { + "version": "2.1.0", + "resolved": "https://registry.npmjs.org/micromark-util-subtokenize/-/micromark-util-subtokenize-2.1.0.tgz", + "integrity": "sha512-XQLu552iSctvnEcgXw6+Sx75GflAPNED1qx7eBJ+wydBb2KCbRZe+NwvIEEMM83uml1+2WSXpBAcp9IUCgCYWA==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT", + "dependencies": { + "devlop": "^1.0.0", + "micromark-util-chunked": "^2.0.0", + "micromark-util-symbol": "^2.0.0", + "micromark-util-types": "^2.0.0" + } + }, + "node_modules/micromark-util-symbol": { + "version": "2.0.1", + "resolved": "https://registry.npmjs.org/micromark-util-symbol/-/micromark-util-symbol-2.0.1.tgz", + "integrity": "sha512-vs5t8Apaud9N28kgCrRUdEed4UJ+wWNvicHLPxCa9ENlYuAY31M0ETy5y1vA33YoNPDFTghEbnh6efaE8h4x0Q==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT" + }, + "node_modules/micromark-util-types": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/micromark-util-types/-/micromark-util-types-2.0.2.tgz", + "integrity": "sha512-Yw0ECSpJoViF1qTU4DC6NwtC4aWGt1EkzaQB8KPPyCRR8z9TWeV0HbEFGTO+ZY1wB22zmxnJqhPyTpOVCpeHTA==", + "funding": [ + { + "type": "GitHub Sponsors", + "url": "https://github.com/sponsors/unifiedjs" + }, + { + "type": "OpenCollective", + "url": "https://opencollective.com/unified" + } + ], + "license": "MIT" + }, "node_modules/micromatch": { "version": "4.0.8", "resolved": "https://registry.npmjs.org/micromatch/-/micromatch-4.0.8.tgz", @@ -12619,6 +13898,31 @@ "node": ">=6" } }, + "node_modules/parse-entities": { + "version": "4.0.2", + "resolved": "https://registry.npmjs.org/parse-entities/-/parse-entities-4.0.2.tgz", + "integrity": "sha512-GG2AQYWoLgL877gQIKeRPGO1xF9+eG1ujIb5soS5gPvLQ1y2o8FL90w2QWNdf9I361Mpp7726c+lj3U0qK1uGw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^2.0.0", + "character-entities-legacy": "^3.0.0", + "character-reference-invalid": "^2.0.0", + "decode-named-character-reference": "^1.0.0", + "is-alphanumerical": "^2.0.0", + "is-decimal": "^2.0.0", + "is-hexadecimal": "^2.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/parse-entities/node_modules/@types/unist": { + "version": "2.0.11", + "resolved": "https://registry.npmjs.org/@types/unist/-/unist-2.0.11.tgz", + "integrity": "sha512-CmBKiL6NNo/OqgmMn95Fk9Whlp2mtvIv+KNpQKN2F4SjvrEesubTRWGYSg+BnWZOnlCaSTU1sMpsBOzgbYhnsA==", + "license": "MIT" + }, "node_modules/parse-json": { "version": "5.2.0", "resolved": "https://registry.npmjs.org/parse-json/-/parse-json-5.2.0.tgz", @@ -14195,6 +15499,16 @@ "integrity": "sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==", "license": "MIT" }, + "node_modules/property-information": { + "version": "7.1.0", + "resolved": "https://registry.npmjs.org/property-information/-/property-information-7.1.0.tgz", + "integrity": "sha512-TwEZ+X+yCJmYfL7TPUOcvBZ4QfoT5YenQiJuX//0th53DE6w0xxLEtfK3iyryQFddXuvkIk51EEgrJQ0WJkOmQ==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, "node_modules/proxy-addr": { "version": "2.0.7", "resolved": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz", @@ -14501,7 +15815,59 @@ "version": "19.2.4", "resolved": "https://registry.npmjs.org/react-is/-/react-is-19.2.4.tgz", "integrity": "sha512-W+EWGn2v0ApPKgKKCy/7s7WHXkboGcsrXE+2joLyVxkbyVQfO3MUEaUQDHoSmb8TFFrSKYa9mw64WZHNHSDzYA==", - "license": "MIT" + "license": "MIT", + "peer": true + }, + "node_modules/react-markdown": { + "version": "10.1.0", + "resolved": "https://registry.npmjs.org/react-markdown/-/react-markdown-10.1.0.tgz", + "integrity": "sha512-qKxVopLT/TyA6BX3Ue5NwabOsAzm0Q7kAPwq6L+wWDwisYs7R8vZ0nRXqq6rkueboxpkjvLGU9fWifiX/ZZFxQ==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0", + "@types/mdast": "^4.0.0", + "devlop": "^1.0.0", + "hast-util-to-jsx-runtime": "^2.0.0", + "html-url-attributes": "^3.0.0", + "mdast-util-to-hast": "^13.0.0", + "remark-parse": "^11.0.0", + "remark-rehype": "^11.0.0", + "unified": "^11.0.0", + "unist-util-visit": "^5.0.0", + "vfile": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + }, + "peerDependencies": { + "@types/react": ">=18", + "react": ">=18" + } + }, + "node_modules/react-redux": { + "version": "9.2.0", + "resolved": "https://registry.npmjs.org/react-redux/-/react-redux-9.2.0.tgz", + "integrity": "sha512-ROY9fvHhwOD9ySfrF0wmvu//bKCQ6AeZZq1nJNtbDC+kk5DuSuNX/n6YWYF/SYy7bSba4D4FSz8DJeKY/S/r+g==", + "license": "MIT", + "peer": true, + "dependencies": { + "@types/use-sync-external-store": "^0.0.6", + "use-sync-external-store": "^1.4.0" + }, + "peerDependencies": { + "@types/react": "^18.2.25 || ^19", + "react": "^18.0 || ^19", + "redux": "^5.0.0" + }, + "peerDependenciesMeta": { + "@types/react": { + "optional": true + }, + "redux": { + "optional": true + } + } }, "node_modules/react-redux": { "version": "9.2.0", @@ -14759,7 +16125,12 @@ "version": "5.0.1", "resolved": "https://registry.npmjs.org/redux/-/redux-5.0.1.tgz", "integrity": "sha512-M9/ELqF6fy8FwmkpnF0S3YKOqMyoWJ4+CS5Efg2ct3oY9daQvd/Pc71FpGZsVsbl3Cpb+IIcjBDUnnyBdQbq4w==", +<<<<<<< HEAD "license": "MIT" +======= + "license": "MIT", + "peer": true +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 }, "node_modules/redux-thunk": { "version": "3.1.0", @@ -14886,6 +16257,72 @@ "node": ">= 0.10" } }, + "node_modules/remark-gfm": { + "version": "4.0.1", + "resolved": "https://registry.npmjs.org/remark-gfm/-/remark-gfm-4.0.1.tgz", + "integrity": "sha512-1quofZ2RQ9EWdeN34S79+KExV1764+wCUGop5CPL1WGdD0ocPpu91lzPGbwWMECpEpd42kJGQwzRfyov9j4yNg==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^4.0.0", + "mdast-util-gfm": "^3.0.0", + "micromark-extension-gfm": "^3.0.0", + "remark-parse": "^11.0.0", + "remark-stringify": "^11.0.0", + "unified": "^11.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-parse": { + "version": "11.0.0", + "resolved": "https://registry.npmjs.org/remark-parse/-/remark-parse-11.0.0.tgz", + "integrity": "sha512-FCxlKLNGknS5ba/1lmpYijMUzX2esxW5xQqjWxw2eHFfS2MSdaHVINFmhjo+qN1WhZhNimq0dZATN9pH0IDrpA==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^4.0.0", + "mdast-util-from-markdown": "^2.0.0", + "micromark-util-types": "^2.0.0", + "unified": "^11.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-rehype": { + "version": "11.1.2", + "resolved": "https://registry.npmjs.org/remark-rehype/-/remark-rehype-11.1.2.tgz", + "integrity": "sha512-Dh7l57ianaEoIpzbp0PC9UKAdCSVklD8E5Rpw7ETfbTl3FqcOOgq5q2LVDhgGCkaBv7p24JXikPdvhhmHvKMsw==", + "license": "MIT", + "dependencies": { + "@types/hast": "^3.0.0", + "@types/mdast": "^4.0.0", + "mdast-util-to-hast": "^13.0.0", + "unified": "^11.0.0", + "vfile": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/remark-stringify": { + "version": "11.0.0", + "resolved": "https://registry.npmjs.org/remark-stringify/-/remark-stringify-11.0.0.tgz", + "integrity": "sha512-1OSmLd3awB/t8qdoEOMazZkNsfVTeY4fTsgzcQFdXNq8ToTN4ZGwrMnlda4K6smTFKD+GRV6O48i6Z4iKgPPpw==", + "license": "MIT", + "dependencies": { + "@types/mdast": "^4.0.0", + "mdast-util-to-markdown": "^2.0.0", + "unified": "^11.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, "node_modules/renderkid": { "version": "3.0.0", "resolved": "https://registry.npmjs.org/renderkid/-/renderkid-3.0.0.tgz", @@ -15793,6 +17230,16 @@ "deprecated": "Please use @jridgewell/sourcemap-codec instead", "license": "MIT" }, + "node_modules/space-separated-tokens": { + "version": "2.0.2", + "resolved": "https://registry.npmjs.org/space-separated-tokens/-/space-separated-tokens-2.0.2.tgz", + "integrity": "sha512-PEGlAwrG8yXGXRjW32fGbg66JAlOAwbObuqVoJpv/mRgoWDQfgH1wDPvtzWyUSNAXBGSk8h755YDbbcEy3SH2Q==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, "node_modules/spdy": { "version": "4.0.2", "resolved": "https://registry.npmjs.org/spdy/-/spdy-4.0.2.tgz", @@ -16049,6 +17496,20 @@ "url": "https://github.com/sponsors/ljharb" } }, + "node_modules/stringify-entities": { + "version": "4.0.4", + "resolved": "https://registry.npmjs.org/stringify-entities/-/stringify-entities-4.0.4.tgz", + "integrity": "sha512-IwfBptatlO+QCJUo19AqvrPNqlVMpW9YEL2LIVY+Rpv2qsjCGxaDLNRgeGsQWJhfItebuJhsGSLjaBbNSQ+ieg==", + "license": "MIT", + "dependencies": { + "character-entities-html4": "^2.0.0", + "character-entities-legacy": "^3.0.0" + }, + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, "node_modules/stringify-object": { "version": "3.3.0", "resolved": "https://registry.npmjs.org/stringify-object/-/stringify-object-3.3.0.tgz", @@ -16130,6 +17591,24 @@ "webpack": "^5.0.0" } }, + "node_modules/style-to-js": { + "version": "1.1.21", + "resolved": "https://registry.npmjs.org/style-to-js/-/style-to-js-1.1.21.tgz", + "integrity": "sha512-RjQetxJrrUJLQPHbLku6U/ocGtzyjbJMP9lCNK7Ag0CNh690nSH8woqWH9u16nMjYBAok+i7JO1NP2pOy8IsPQ==", + "license": "MIT", + "dependencies": { + "style-to-object": "1.0.14" + } + }, + "node_modules/style-to-object": { + "version": "1.0.14", + "resolved": "https://registry.npmjs.org/style-to-object/-/style-to-object-1.0.14.tgz", + "integrity": "sha512-LIN7rULI0jBscWQYaSswptyderlarFkjQ+t79nzty8tcIAceVomEVlLzH5VP4Cmsv6MtKhs7qaAiwlcp+Mgaxw==", + "license": "MIT", + "dependencies": { + "inline-style-parser": "0.2.7" + } + }, "node_modules/stylehacks": { "version": "5.1.1", "resolved": "https://registry.npmjs.org/stylehacks/-/stylehacks-5.1.1.tgz", @@ -16481,23 +17960,6 @@ } } }, - "node_modules/tailwindcss/node_modules/yaml": { - "version": "2.8.2", - "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.2.tgz", - "integrity": "sha512-mplynKqc1C2hTVYxd0PU2xQAc22TI1vShAYGksCCfxbn/dFwnHTNi1bvYsBTkhdUNtGIf5xNOg938rrSSYvS9A==", - "license": "ISC", - "optional": true, - "peer": true, - "bin": { - "yaml": "bin.mjs" - }, - "engines": { - "node": ">= 14.6" - }, - "funding": { - "url": "https://github.com/sponsors/eemeli" - } - }, "node_modules/tapable": { "version": "2.3.0", "resolved": "https://registry.npmjs.org/tapable/-/tapable-2.3.0.tgz", @@ -16791,6 +18253,26 @@ "node": ">=8" } }, + "node_modules/trim-lines": { + "version": "3.0.1", + "resolved": "https://registry.npmjs.org/trim-lines/-/trim-lines-3.0.1.tgz", + "integrity": "sha512-kRj8B+YHZCc9kQYdWfJB2/oUl9rA99qbowYYBtr4ui4mZyAQ2JpvVBd/6U2YloATfqBhBTSMhTpgBHtU0Mf3Rg==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, + "node_modules/trough": { + "version": "2.2.0", + "resolved": "https://registry.npmjs.org/trough/-/trough-2.2.0.tgz", + "integrity": "sha512-tmMpK00BjZiUyVyvrBK7knerNgmgvcV/KLVyuma/SC+TQN167GrMRciANTz09+k3zW8L8t60jWO1GpfkZdjTaw==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } + }, "node_modules/tryer": { "version": "1.0.1", "resolved": "https://registry.npmjs.org/tryer/-/tryer-1.0.1.tgz", @@ -16889,6 +18371,7 @@ "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-0.20.2.tgz", "integrity": "sha512-Ne+eE4r0/iWnpAxD852z3A+N0Bt5RN//NjJwRd2VFHEmrywxf5vsZlh4R6lixl6B+wz/8d+maTSAkN1FIkI3LQ==", "license": "(MIT OR CC0-1.0)", + "peer": true, "engines": { "node": ">=10" }, @@ -17075,6 +18558,37 @@ "node": ">=4" } }, + "node_modules/unified": { + "version": "11.0.5", + "resolved": "https://registry.npmjs.org/unified/-/unified-11.0.5.tgz", + "integrity": "sha512-xKvGhPWw3k84Qjh8bI3ZeJjqnyadK+GEFtazSfZv/rKeTkTjOJho6mFqh2SM96iIcZokxiOpg78GazTSg8+KHA==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "bail": "^2.0.0", + "devlop": "^1.0.0", + "extend": "^3.0.0", + "is-plain-obj": "^4.0.0", + "trough": "^2.0.0", + "vfile": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unified/node_modules/is-plain-obj": { + "version": "4.1.0", + "resolved": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-4.1.0.tgz", + "integrity": "sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg==", + "license": "MIT", + "engines": { + "node": ">=12" + }, + "funding": { + "url": "https://github.com/sponsors/sindresorhus" + } + }, "node_modules/unique-string": { "version": "2.0.0", "resolved": "https://registry.npmjs.org/unique-string/-/unique-string-2.0.0.tgz", @@ -17087,6 +18601,74 @@ "node": ">=8" } }, + "node_modules/unist-util-is": { + "version": "6.0.1", + "resolved": "https://registry.npmjs.org/unist-util-is/-/unist-util-is-6.0.1.tgz", + "integrity": "sha512-LsiILbtBETkDz8I9p1dQ0uyRUWuaQzd/cuEeS1hoRSyW5E5XGmTzlwY1OrNzzakGowI9Dr/I8HVaw4hTtnxy8g==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-position": { + "version": "5.0.0", + "resolved": "https://registry.npmjs.org/unist-util-position/-/unist-util-position-5.0.0.tgz", + "integrity": "sha512-fucsC7HjXvkB5R3kTCO7kUjRdrS0BJt3M/FPxmHMBOm8JQi2BsHAHFsy27E0EolP8rp0NzXsJ+jNPyDWvOJZPA==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-stringify-position": { + "version": "4.0.0", + "resolved": "https://registry.npmjs.org/unist-util-stringify-position/-/unist-util-stringify-position-4.0.0.tgz", + "integrity": "sha512-0ASV06AAoKCDkS2+xw5RXJywruurpbC4JZSm7nr7MOt1ojAzvyyaO+UxZf18j8FCF6kmzCZKcAgN/yu2gm2XgQ==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-visit": { + "version": "5.1.0", + "resolved": "https://registry.npmjs.org/unist-util-visit/-/unist-util-visit-5.1.0.tgz", + "integrity": "sha512-m+vIdyeCOpdr/QeQCu2EzxX/ohgS8KbnPDgFni4dQsfSCtpz8UqDyY5GjRru8PDKuYn7Fq19j1CQ+nJSsGKOzg==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "unist-util-is": "^6.0.0", + "unist-util-visit-parents": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/unist-util-visit-parents": { + "version": "6.0.2", + "resolved": "https://registry.npmjs.org/unist-util-visit-parents/-/unist-util-visit-parents-6.0.2.tgz", + "integrity": "sha512-goh1s1TBrqSqukSc8wrjwWhL0hiJxgA8m4kFxGlQ+8FYQ3C/m11FcTs4YYem7V664AhHVvgoQLk890Ssdsr2IQ==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "unist-util-is": "^6.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, "node_modules/universalify": { "version": "2.0.1", "resolved": "https://registry.npmjs.org/universalify/-/universalify-2.0.1.tgz", @@ -17256,6 +18838,37 @@ "node": ">= 0.8" } }, +<<<<<<< HEAD +======= + "node_modules/vfile": { + "version": "6.0.3", + "resolved": "https://registry.npmjs.org/vfile/-/vfile-6.0.3.tgz", + "integrity": "sha512-KzIbH/9tXat2u30jf+smMwFCsno4wHVdNmzFyL+T/L3UGqqk6JKfVqOFOZEpZSHADH1k40ab6NUIXZq422ov3Q==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "vfile-message": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, + "node_modules/vfile-message": { + "version": "4.0.3", + "resolved": "https://registry.npmjs.org/vfile-message/-/vfile-message-4.0.3.tgz", + "integrity": "sha512-QTHzsGd1EhbZs4AsQ20JX1rC3cOlt/IWJruk893DfLRr57lcnOeMaWG4K0JrRta4mIJZKth2Au3mM3u03/JWKw==", + "license": "MIT", + "dependencies": { + "@types/unist": "^3.0.0", + "unist-util-stringify-position": "^4.0.0" + }, + "funding": { + "type": "opencollective", + "url": "https://opencollective.com/unified" + } + }, +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 "node_modules/victory-vendor": { "version": "37.3.6", "resolved": "https://registry.npmjs.org/victory-vendor/-/victory-vendor-37.3.6.tgz", @@ -17331,6 +18944,39 @@ "minimalistic-assert": "^1.0.0" } }, + "node_modules/webcola": { + "version": "3.4.0", + "resolved": "https://registry.npmjs.org/webcola/-/webcola-3.4.0.tgz", + "integrity": "sha512-4BiLXjXw3SJHo3Xd+rF+7fyClT6n7I+AR6TkBqyQ4kTsePSAMDLRCXY1f3B/kXJeP9tYn4G1TblxTO+jAt0gaw==", + "license": "MIT", + "dependencies": { + "d3-dispatch": "^1.0.3", + "d3-drag": "^1.0.4", + "d3-shape": "^1.3.5", + "d3-timer": "^1.0.5" + } + }, + "node_modules/webcola/node_modules/d3-path": { + "version": "1.0.9", + "resolved": "https://registry.npmjs.org/d3-path/-/d3-path-1.0.9.tgz", + "integrity": "sha512-VLaYcn81dtHVTjEHd8B+pbe9yHWpXKZUC87PzoFmsFrJqgFwDe/qxfp5MlfsfM1V5E/iVt0MmEbWQ7FVIXh/bg==", + "license": "BSD-3-Clause" + }, + "node_modules/webcola/node_modules/d3-shape": { + "version": "1.3.7", + "resolved": "https://registry.npmjs.org/d3-shape/-/d3-shape-1.3.7.tgz", + "integrity": "sha512-EUkvKjqPFUAZyOlhY5gzCxCeI0Aep04LwIRpsZ/mLFelJiUfnK56jo5JMDSE7yyP2kLSb6LtF+S5chMk7uqPqw==", + "license": "BSD-3-Clause", + "dependencies": { + "d3-path": "1" + } + }, + "node_modules/webcola/node_modules/d3-timer": { + "version": "1.0.10", + "resolved": "https://registry.npmjs.org/d3-timer/-/d3-timer-1.0.10.tgz", + "integrity": "sha512-B1JDm0XDaQC+uvo4DT79H0XmBskgS3l6Ve+1SBCfxgmtIb1AVrPIoqd+nPSv+loMX8szQ0sVUhGngL7D5QPiXw==", + "license": "BSD-3-Clause" + }, "node_modules/webidl-conversions": { "version": "6.1.0", "resolved": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-6.1.0.tgz", @@ -17416,6 +19062,7 @@ "resolved": "https://registry.npmjs.org/webpack-dev-server/-/webpack-dev-server-4.15.2.tgz", "integrity": "sha512-0XavAZbNJ5sDrCbkpWL8mia0o5WPOd2YGtxrEiZkBK9FjLppIUK2TgxK6qGD2P3hUXTJNNPVibrerKcx5WkR1g==", "license": "MIT", + "peer": true, "dependencies": { "@types/bonjour": "^3.5.9", "@types/connect-history-api-fallback": "^1.3.5", @@ -18148,12 +19795,19 @@ "license": "ISC" }, "node_modules/yaml": { - "version": "1.10.2", - "resolved": "https://registry.npmjs.org/yaml/-/yaml-1.10.2.tgz", - "integrity": "sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==", + "version": "2.8.2", + "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.2.tgz", + "integrity": "sha512-mplynKqc1C2hTVYxd0PU2xQAc22TI1vShAYGksCCfxbn/dFwnHTNi1bvYsBTkhdUNtGIf5xNOg938rrSSYvS9A==", "license": "ISC", + "peer": true, + "bin": { + "yaml": "bin.mjs" + }, "engines": { - "node": ">= 6" + "node": ">= 14.6" + }, + "funding": { + "url": "https://github.com/sponsors/eemeli" } }, "node_modules/yargs": { @@ -18194,6 +19848,16 @@ "funding": { "url": "https://github.com/sponsors/sindresorhus" } + }, + "node_modules/zwitch": { + "version": "2.0.4", + "resolved": "https://registry.npmjs.org/zwitch/-/zwitch-2.0.4.tgz", + "integrity": "sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A==", + "license": "MIT", + "funding": { + "type": "github", + "url": "https://github.com/sponsors/wooorm" + } } } } diff --git a/frontend/package.json b/frontend/package.json index f93befd..ecc9720 100644 --- a/frontend/package.json +++ b/frontend/package.json @@ -1,6 +1,6 @@ { "name": "threathunt-frontend", - "version": "0.1.0", + "version": "0.4.0", "private": true, "dependencies": { "@emotion/react": "^11.14.0", @@ -9,12 +9,23 @@ "@mui/material": "^7.3.8", "@mui/x-data-grid": "^8.27.1", "@types/react-router-dom": "^5.3.3", + "cytoscape": "^3.33.1", + "cytoscape-cola": "^2.5.1", + "cytoscape-dagre": "^2.5.0", + "dagre": "^0.8.5", "notistack": "^3.0.2", "react": "^18.2.0", "react-dom": "^18.2.0", + "react-markdown": "^10.1.0", "react-router-dom": "^7.13.0", "react-scripts": "5.0.1", +<<<<<<< HEAD "recharts": "^3.7.0" +======= + "recharts": "^3.7.0", + "remark-gfm": "^4.0.1", + "yaml": "^2.8.2" +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 }, "scripts": { "start": "react-scripts start", @@ -40,6 +51,7 @@ ] }, "devDependencies": { + "@types/cytoscape": "^3.21.9", "@types/react": "^18.2.0", "@types/react-dom": "^18.2.0", "typescript": "^4.9.5" diff --git a/frontend/src/App.tsx b/frontend/src/App.tsx index 9958c7b..44670f5 100644 --- a/frontend/src/App.tsx +++ b/frontend/src/App.tsx @@ -1,5 +1,5 @@ /** - * ThreatHunt MUI-powered analyst-assist platform. + * ThreatHunt — MUI-powered analyst-assist platform. */ import React, { useState, useCallback, Suspense } from 'react'; @@ -19,11 +19,25 @@ import ScienceIcon from '@mui/icons-material/Science'; import CompareArrowsIcon from '@mui/icons-material/CompareArrows'; import GppMaybeIcon from '@mui/icons-material/GppMaybe'; import HubIcon from '@mui/icons-material/Hub'; +<<<<<<< HEAD import AssessmentIcon from '@mui/icons-material/Assessment'; import TimelineIcon from '@mui/icons-material/Timeline'; import PlaylistAddCheckIcon from '@mui/icons-material/PlaylistAddCheck'; import BookmarksIcon from '@mui/icons-material/Bookmarks'; import ShieldIcon from '@mui/icons-material/Shield'; +======= +import DevicesIcon from '@mui/icons-material/Devices'; +import AccountTreeIcon from '@mui/icons-material/AccountTree'; +import TimelineIcon from '@mui/icons-material/Timeline'; +import ManageSearchIcon from '@mui/icons-material/ManageSearch'; +import ScheduleIcon from '@mui/icons-material/Schedule'; +import ShieldIcon from '@mui/icons-material/Shield'; +import BubbleChartIcon from '@mui/icons-material/BubbleChart'; +import WorkIcon from '@mui/icons-material/Work'; +import NotificationsActiveIcon from '@mui/icons-material/NotificationsActive'; +import MenuBookIcon from '@mui/icons-material/MenuBook'; +import PlaylistPlayIcon from '@mui/icons-material/PlaylistPlay'; +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 import { SnackbarProvider } from 'notistack'; import theme from './theme'; @@ -33,11 +47,12 @@ import HuntManager from './components/HuntManager'; import DatasetViewer from './components/DatasetViewer'; import FileUpload from './components/FileUpload'; import AgentPanel from './components/AgentPanel'; -import EnrichmentPanel from './components/EnrichmentPanel'; +import AnalysisPanel from './components/AnalysisPanel'; import AnnotationPanel from './components/AnnotationPanel'; import HypothesisTracker from './components/HypothesisTracker'; import CorrelationView from './components/CorrelationView'; import AUPScanner from './components/AUPScanner'; +<<<<<<< HEAD /* -- Lazy imports (heavy: charts, network graph, new feature pages) -- */ const NetworkMap = React.lazy(() => import('./components/NetworkMap')); @@ -46,12 +61,27 @@ const MitreMatrix = React.lazy(() => import('./components/MitreMatrix')); const TimelineView = React.lazy(() => import('./components/TimelineView')); const PlaybookManager = React.lazy(() => import('./components/PlaybookManager')); const SavedSearches = React.lazy(() => import('./components/SavedSearches')); +======= +import NetworkMap from './components/NetworkMap'; +import NetworkPicture from './components/NetworkPicture'; +import ProcessTree from './components/ProcessTree'; +import StorylineGraph from './components/StorylineGraph'; +import TimelineScrubber from './components/TimelineScrubber'; +import QueryBar from './components/QueryBar'; +import MitreMatrix from './components/MitreMatrix'; +import KnowledgeGraph from './components/KnowledgeGraph'; +import CaseManager from './components/CaseManager'; +import AlertPanel from './components/AlertPanel'; +import InvestigationNotebook from './components/InvestigationNotebook'; +import PlaybookManager from './components/PlaybookManager'; +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 const DRAWER_WIDTH = 240; interface NavItem { label: string; path: string; icon: React.ReactNode } const NAV: NavItem[] = [ +<<<<<<< HEAD { label: 'Dashboard', path: '/', icon: }, { label: 'Hunts', path: '/hunts', icon: }, { label: 'Datasets', path: '/datasets', icon: }, @@ -68,6 +98,30 @@ const NAV: NavItem[] = [ { label: 'Timeline', path: '/timeline', icon: }, { label: 'Playbooks', path: '/playbooks', icon: }, { label: 'Saved Searches', path: '/saved-searches', icon: }, +======= + { label: 'Dashboard', path: '/', icon: }, + { label: 'Hunts', path: '/hunts', icon: }, + { label: 'Datasets', path: '/datasets', icon: }, + { label: 'Upload', path: '/upload', icon: }, + { label: 'Agent', path: '/agent', icon: }, + { label: 'Analysis', path: '/analysis', icon: }, + { label: 'Annotations', path: '/annotations', icon: }, + { label: 'Hypotheses', path: '/hypotheses', icon: }, + { label: 'Correlation', path: '/correlation', icon: }, + { label: 'Network Map', path: '/network', icon: }, + { label: 'Net Picture', path: '/netpicture', icon: }, + { label: 'Proc Tree', path: '/proctree', icon: }, + { label: 'Storyline', path: '/storyline', icon: }, + { label: 'Timeline', path: '/timeline', icon: }, + { label: 'Search', path: '/search', icon: }, + { label: 'MITRE Map', path: '/mitre', icon: }, + { label: 'Knowledge', path: '/knowledge', icon: }, + { label: 'Cases', path: '/cases', icon: }, + { label: 'Alerts', path: '/alerts', icon: }, + { label: 'Notebooks', path: '/notebooks', icon: }, + { label: 'Playbooks', path: '/playbooks', icon: }, + { label: 'AUP Scanner', path: '/aup', icon: }, +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 ]; function LazyFallback() { @@ -131,6 +185,7 @@ function Shell() { ml: open ? 0 : `-${DRAWER_WIDTH}px`, transition: 'margin 225ms cubic-bezier(0,0,0.2,1)', }}> +<<<<<<< HEAD }> } /> @@ -151,6 +206,32 @@ function Shell() { } /> +======= + + } /> + } /> + } /> + } /> + } /> + } /> + } /> + } /> + } /> + } /> + } /> + } /> + } /> + } /> + } /> + } /> + } /> + } /> + } /> + } /> + } /> + } /> + +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 ); diff --git a/frontend/src/api/client.ts b/frontend/src/api/client.ts index 46eec15..aadc83a 100644 --- a/frontend/src/api/client.ts +++ b/frontend/src/api/client.ts @@ -1,11 +1,11 @@ /* ==================================================================== - ThreatHunt API Client -- mirrors every backend endpoint. + ThreatHunt API Client — mirrors every backend endpoint. All requests go through the CRA proxy (see package.json "proxy"). ==================================================================== */ const BASE = ''; // proxied to http://localhost:8000 by CRA -// -- Helpers -- +// ── Helpers ────────────────────────────────────────────────────────── let authToken: string | null = localStorage.getItem('th_token'); @@ -36,7 +36,7 @@ async function api( return res.text() as unknown as T; } -// -- Auth -- +// ── Auth ───────────────────────────────────────────────────────────── export interface UserPayload { id: string; username: string; email: string; @@ -63,7 +63,7 @@ export const auth = { me: () => api('/api/auth/me'), }; -// -- Hunts -- +// ── Hunts ──────────────────────────────────────────────────────────── export interface Hunt { id: string; name: string; description: string | null; status: string; @@ -71,6 +71,7 @@ export interface Hunt { dataset_count: number; hypothesis_count: number; } +<<<<<<< HEAD export interface HuntProgress { hunt_id: string; status: 'idle' | 'processing' | 'ready'; @@ -84,6 +85,10 @@ export interface HuntProgress { network_status: 'none' | 'building' | 'ready'; stages: Record; } +======= +/** Alias kept for backward-compat with components that import HuntOut */ +export type HuntOut = Hunt; +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 export const hunts = { list: (skip = 0, limit = 50) => @@ -97,7 +102,7 @@ export const hunts = { progress: (id: string) => api(`/api/hunts/${id}/progress`), }; -// -- Datasets -- +// ── Datasets ───────────────────────────────────────────────────────── export interface DatasetSummary { id: string; name: string; filename: string; source_tool: string | null; @@ -107,8 +112,6 @@ export interface DatasetSummary { file_size_bytes: number; encoding: string | null; delimiter: string | null; time_range_start: string | null; time_range_end: string | null; hunt_id: string | null; created_at: string; - processing_status?: string; artifact_type?: string | null; - error_message?: string | null; file_path?: string | null; } export interface UploadResult { @@ -172,7 +175,7 @@ export const datasets = { delete: (id: string) => api(`/api/datasets/${id}`, { method: 'DELETE' }), }; -// -- Agent -- +// ── Agent ──────────────────────────────────────────────────────────── export interface AssistRequest { query: string; @@ -226,7 +229,7 @@ export const agent = { }, }; -// -- Annotations -- +// ── Annotations ────────────────────────────────────────────────────── export interface AnnotationData { id: string; row_id: number | null; dataset_id: string | null; @@ -252,7 +255,7 @@ export const annotations = { delete: (id: string) => api(`/api/annotations/${id}`, { method: 'DELETE' }), }; -// -- Hypotheses -- +// ── Hypotheses ─────────────────────────────────────────────────────── export interface HypothesisData { id: string; hunt_id: string | null; title: string; description: string | null; @@ -277,7 +280,7 @@ export const hypotheses = { delete: (id: string) => api(`/api/hypotheses/${id}`, { method: 'DELETE' }), }; -// -- Enrichment -- +// ── Enrichment ─────────────────────────────────────────────────────── export interface EnrichmentResult { ioc_value: string; ioc_type: string; source: string; verdict: string; @@ -302,7 +305,7 @@ export const enrichment = { status: () => api>('/api/enrichment/status'), }; -// -- Correlation -- +// ── Correlation ────────────────────────────────────────────────────── export interface CorrelationResult { hunt_ids: string[]; summary: string; total_correlations: number; @@ -320,7 +323,7 @@ export const correlation = { api<{ ioc_value: string; occurrences: any[]; total: number }>(`/api/correlation/ioc/${encodeURIComponent(ioc_value)}`), }; -// -- Reports -- +// ── Reports ────────────────────────────────────────────────────────── export const reports = { json: (huntId: string) => @@ -333,13 +336,256 @@ export const reports = { api>(`/api/reports/hunt/${huntId}/summary`), }; -// -- Root / misc -- +// ── Root / misc ────────────────────────────────────────────────────── export const misc = { root: () => api<{ name: string; version: string; status: string }>('/'), }; -// -- AUP Keywords -- +// ── Network Picture ────────────────────────────────────────────────── + +export interface HostEntry { + hostname: string; + ips: string[]; + users: string[]; + os: string[]; + mac_addresses: string[]; + protocols: string[]; + open_ports: string[]; + remote_targets: string[]; + datasets: string[]; + connection_count: number; + first_seen: string | null; + last_seen: string | null; +} + +export interface PictureSummary { + total_hosts: number; + total_connections: number; + total_unique_ips: number; + datasets_scanned: number; +} + +export interface NetworkPictureResponse { + hosts: HostEntry[]; + summary: PictureSummary; +} + +export const network = { + picture: (huntId: string) => + api(`/api/network/picture?hunt_id=${encodeURIComponent(huntId)}`), +}; + +// ── Analysis (Process Tree / Storyline / Risk) ─────────────────────── + +export interface ProcessNodeData { + pid: string; ppid: string; name: string; command_line: string; + username: string; hostname: string; timestamp: string; + dataset_name: string; row_index: number; + children: ProcessNodeData[]; extra: Record; +} + +export interface ProcessTreeResponse { + trees: ProcessNodeData[]; + total_processes: number; +} + +export interface StorylineNode { + data: { + id: string; label: string; event_type: string; hostname: string; + timestamp: string; pid: string; ppid: string; process_name: string; + command_line: string; username: string; src_ip: string; dst_ip: string; + dst_port: string; file_path: string; severity: string; + dataset_id: string; row_index: number; + }; +} + +export interface StorylineEdge { + data: { + id: string; source: string; target: string; relationship: string; + }; +} + +export interface StorylineResponse { + nodes: StorylineNode[]; + edges: StorylineEdge[]; + summary: { + total_events: number; total_edges: number; + hosts: string[]; event_types: Record; + }; +} + +export interface RiskHost { + hostname: string; score: number; signals: string[]; + event_count: number; process_count: number; + network_count: number; file_count: number; +} + +export interface RiskSummaryResponse { + hosts: RiskHost[]; + overall_score: number; + total_events: number; + severity_breakdown: Record; +} + +export const analysis = { + processTree: (params: { dataset_id?: string; hunt_id?: string; hostname?: string }) => { + const q = new URLSearchParams(); + if (params.dataset_id) q.set('dataset_id', params.dataset_id); + if (params.hunt_id) q.set('hunt_id', params.hunt_id); + if (params.hostname) q.set('hostname', params.hostname); + return api(`/api/analysis/process-tree?${q}`); + }, + storyline: (params: { dataset_id?: string; hunt_id?: string; hostname?: string }) => { + const q = new URLSearchParams(); + if (params.dataset_id) q.set('dataset_id', params.dataset_id); + if (params.hunt_id) q.set('hunt_id', params.hunt_id); + if (params.hostname) q.set('hostname', params.hostname); + return api(`/api/analysis/storyline?${q}`); + }, + riskSummary: (huntId?: string) => { + const q = huntId ? `?hunt_id=${encodeURIComponent(huntId)}` : ''; + return api(`/api/analysis/risk-summary${q}`); + }, + llmAnalyze: (params: { + dataset_id?: string; hunt_id?: string; question?: string; + mode?: 'quick' | 'deep'; focus?: string; + }) => + api('/api/analysis/llm-analyze', { + method: 'POST', body: JSON.stringify(params), + }), + + // Timeline & Search + timeline: (params: { dataset_id?: string; hunt_id?: string; bins?: number }) => { + const q = new URLSearchParams(); + if (params.dataset_id) q.set('dataset_id', params.dataset_id); + if (params.hunt_id) q.set('hunt_id', params.hunt_id); + if (params.bins) q.set('bins', String(params.bins)); + return api(`/api/analysis/timeline?${q}`); + }, + fieldStats: (params: { dataset_id?: string; hunt_id?: string; fields?: string; top_n?: number }) => { + const q = new URLSearchParams(); + if (params.dataset_id) q.set('dataset_id', params.dataset_id); + if (params.hunt_id) q.set('hunt_id', params.hunt_id); + if (params.fields) q.set('fields', params.fields); + if (params.top_n) q.set('top_n', String(params.top_n)); + return api(`/api/analysis/field-stats?${q}`); + }, + searchRows: (params: SearchRowsRequest) => + api('/api/analysis/search', { + method: 'POST', body: JSON.stringify(params), + }), + + // MITRE ATT&CK + mitreMap: (params: { dataset_id?: string; hunt_id?: string }) => { + const q = new URLSearchParams(); + if (params.dataset_id) q.set('dataset_id', params.dataset_id); + if (params.hunt_id) q.set('hunt_id', params.hunt_id); + return api(`/api/analysis/mitre-map?${q}`); + }, + knowledgeGraph: (params: { dataset_id?: string; hunt_id?: string }) => { + const q = new URLSearchParams(); + if (params.dataset_id) q.set('dataset_id', params.dataset_id); + if (params.hunt_id) q.set('hunt_id', params.hunt_id); + return api(`/api/analysis/knowledge-graph?${q}`); + }, +}; + +// ── LLM Analysis types ─────────────────────────────────────────────── + +export interface LLMAnalysisResult { + analysis: string; + confidence: number; + key_findings: string[]; + iocs_identified: { type: string; value: string; context: string }[]; + recommended_actions: string[]; + mitre_techniques: string[]; + risk_score: number; + model_used: string; + node_used: string; + latency_ms: number; + rows_analyzed: number; + dataset_summary: string; +} + +// ── Timeline & Search types ────────────────────────────────────────── + +export interface TimelineBin { + start: string; + end: string; + count: number; + types: Record; +} +export interface TimelineBinsResponse { + bins: TimelineBin[]; + total: number; + time_range: { start: string; end: string }; +} + +export interface FieldStatEntry { + value: string; + count: number; + pct: number; +} +export interface FieldStatsResponse { + fields: Record; + total_rows: number; +} + +export interface SearchRowsRequest { + dataset_id?: string; + hunt_id?: string; + query?: string; + filters?: Record; + time_start?: string; + time_end?: string; + limit?: number; + offset?: number; +} +export interface SearchRowsResponse { + rows: Record[]; + total: number; + offset: number; + limit: number; +} + +// ── MITRE ATT&CK types ────────────────────────────────────────────── + +export interface MitreTechnique { + id: string; + name: string; + count: number; + evidence: { row_index: number; field: string; value: string; pattern: string }[]; +} +export interface MitreTactic { + id: string; + name: string; + techniques: MitreTechnique[]; + total_hits: number; +} +export interface MitreMapResponse { + tactics: MitreTactic[]; + coverage: { + tactics_covered: number; + tactics_total: number; + techniques_matched: number; + total_evidence: number; + }; + total_rows: number; +} + +export interface KnowledgeGraphResponse { + nodes: { data: { id: string; label: string; type: string; color: string; shape: string; tactic?: string } }[]; + edges: { data: { source: string; target: string; weight: number; label: string } }[]; + stats: { + total_nodes: number; + total_edges: number; + entity_counts: Record; + techniques_found: number; + }; +} + +// ── AUP Keywords ───────────────────────────────────────────────────── export interface KeywordOut { id: number; theme_id: string; value: string; is_regex: boolean; created_at: string; @@ -400,208 +646,257 @@ export const keywords = { api(`/api/keywords/scan/quick?dataset_id=${encodeURIComponent(datasetId)}`), }; +// ── Case Management ────────────────────────────────────────────────── -// -- Analysis (Phase 2+) -- +// ── Alerts & Analyzers ─────────────────────────────────────────────── -export interface TriageResultData { - id: string; dataset_id: string; row_start: number; row_end: number; - risk_score: number; verdict: string; - findings: any[] | null; suspicious_indicators: any[] | null; - mitre_techniques: any[] | null; - model_used: string | null; node_used: string | null; -} - -export interface HostProfileData { - id: string; hunt_id: string; hostname: string; fqdn: string | null; - risk_score: number; risk_level: string; - artifact_summary: Record | null; - timeline_summary: string | null; - suspicious_findings: any[] | null; - mitre_techniques: any[] | null; - llm_analysis: string | null; - model_used: string | null; -} - -export interface HuntReportData { - id: string; hunt_id: string; status: string; - exec_summary: string | null; full_report: string | null; - findings: any[] | null; recommendations: any[] | null; - mitre_mapping: Record | null; - ioc_table: any[] | null; host_risk_summary: any[] | null; - models_used: any[] | null; generation_time_ms: number | null; -} - -export interface AnomalyResultData { - id: string; dataset_id: string; row_id: number | null; - anomaly_score: number; distance_from_centroid: number | null; - cluster_id: number | null; is_outlier: boolean; - explanation: string | null; -} - -export interface HostGroupData { - hostname: string; - dataset_count: number; - total_rows: number; - artifact_types: string[]; - first_seen: string | null; - last_seen: string | null; - risk_score: number | null; -} - -// -- Job queue types (Phase 10) -- - -export interface JobData { +export interface AlertData { id: string; - job_type: string; - status: 'queued' | 'running' | 'completed' | 'failed' | 'cancelled'; - progress: number; - message: string; - error: string | null; - created_at: number; - started_at: number | null; - completed_at: number | null; - elapsed_ms: number; - params: Record; + title: string; + description: string | null; + severity: string; + status: string; + analyzer: string; + score: number; + evidence: Record[]; + mitre_technique: string | null; + tags: string[]; + hunt_id: string | null; + dataset_id: string | null; + case_id: string | null; + assignee: string | null; + acknowledged_at: string | null; + resolved_at: string | null; + created_at: string; + updated_at: string; } -export interface JobStats { +export interface AlertStats { total: number; - queued: number; - by_status: Record; - workers: number; - active_workers: number; + severity_counts: Record; + status_counts: Record; + analyzer_counts: Record; + top_mitre: { technique: string; count: number }[]; } -export interface LBNodeStatus { - healthy: boolean; - active_jobs: number; - total_completed: number; - total_errors: number; - avg_latency_ms: number; - last_check: number; +export interface AlertRuleData { + id: string; + name: string; + description: string | null; + analyzer: string; + config: Record | null; + severity_override: string | null; + enabled: boolean; + hunt_id: string | null; + created_at: string; + updated_at: string; } -export const analysis = { - // Triage - triageResults: (datasetId: string, minRisk = 0) => - api(`/api/analysis/triage/${datasetId}?min_risk=${minRisk}`), - triggerTriage: (datasetId: string) => - api<{ status: string; dataset_id: string }>(`/api/analysis/triage/${datasetId}`, { method: 'POST' }), +export interface AnalyzerInfo { + name: string; + description: string; +} - // Host profiles - hostProfiles: (huntId: string, minRisk = 0) => - api(`/api/analysis/profiles/${huntId}?min_risk=${minRisk}`), - triggerAllProfiles: (huntId: string) => - api<{ status: string; hunt_id: string }>(`/api/analysis/profiles/${huntId}`, { method: 'POST' }), - triggerHostProfile: (huntId: string, hostname: string) => - api<{ status: string }>(`/api/analysis/profiles/${huntId}/${encodeURIComponent(hostname)}`, { method: 'POST' }), +export interface AnalyzeResult { + candidates_found: number; + alerts_created: number; + alerts: AlertData[]; + summary: { + by_severity: Record; + by_analyzer: Record; + rows_analyzed: number; + }; +} - // Reports - listReports: (huntId: string) => - api(`/api/analysis/reports/${huntId}`), - getReport: (huntId: string, reportId: string) => - api(`/api/analysis/reports/${huntId}/${reportId}`), - generateReport: (huntId: string) => - api<{ status: string; hunt_id: string }>(`/api/analysis/reports/${huntId}/generate`, { method: 'POST' }), - - // Anomaly detection - anomalies: (datasetId: string, outliersOnly = false) => - api(`/api/analysis/anomalies/${datasetId}?outliers_only=${outliersOnly}`), - triggerAnomalyDetection: (datasetId: string, k = 3, threshold = 0.35) => - api<{ status: string; dataset_id: string }>( - `/api/analysis/anomalies/${datasetId}?k=${k}&threshold=${threshold}`, { method: 'POST' }, - ), - - // IOC extraction - extractIocs: (datasetId: string) => - api<{ dataset_id: string; iocs: Record; total: number }>( - `/api/analysis/iocs/${datasetId}`, - ), - - // Host grouping - hostGroups: (huntId: string) => - api<{ hunt_id: string; hosts: HostGroupData[] }>( - `/api/analysis/hosts/${huntId}`, - ), - - // Data query (Phase 9) - SSE streaming - queryStream: async (datasetId: string, question: string, mode: string = 'quick'): Promise => { - const headers: Record = { 'Content-Type': 'application/json' }; - if (authToken) headers['Authorization'] = `Bearer ${authToken}`; - return fetch(`${BASE}/api/analysis/query/${datasetId}`, { - method: 'POST', - headers, - body: JSON.stringify({ question, mode }), - }); - }, - - // Data query (Phase 9) - sync - querySync: (datasetId: string, question: string, mode: string = 'quick') => - api<{ dataset_id: string; question: string; answer: string; mode: string }>( - `/api/analysis/query/${datasetId}/sync`, { - method: 'POST', - body: JSON.stringify({ question, mode }), - }, - ), - - // Job queue (Phase 10) - listJobs: (status?: string, jobType?: string, limit = 50) => { +export const alerts = { + list: (opts?: { status?: string; severity?: string; analyzer?: string; hunt_id?: string; dataset_id?: string; limit?: number; offset?: number }) => { const q = new URLSearchParams(); - if (status) q.set('status', status); - if (jobType) q.set('job_type', jobType); - q.set('limit', String(limit)); - return api<{ jobs: JobData[]; stats: JobStats }>(`/api/analysis/jobs?${q}`); + if (opts?.status) q.set('status', opts.status); + if (opts?.severity) q.set('severity', opts.severity); + if (opts?.analyzer) q.set('analyzer', opts.analyzer); + if (opts?.hunt_id) q.set('hunt_id', opts.hunt_id); + if (opts?.dataset_id) q.set('dataset_id', opts.dataset_id); + if (opts?.limit) q.set('limit', String(opts.limit)); + if (opts?.offset) q.set('offset', String(opts.offset)); + return api<{ alerts: AlertData[]; total: number }>(`/api/alerts?${q}`); }, - getJob: (jobId: string) => - api(`/api/analysis/jobs/${jobId}`), - cancelJob: (jobId: string) => - api<{ status: string; job_id: string }>(`/api/analysis/jobs/${jobId}`, { method: 'DELETE' }), - submitJob: (jobType: string, params: Record = {}) => - api<{ job_id: string; status: string; job_type: string }>( - `/api/analysis/jobs/submit/${jobType}`, { - method: 'POST', - body: JSON.stringify(params), - }, - ), - - // Load balancer (Phase 10) - lbStatus: () => - api>('/api/analysis/lb/status'), - lbCheck: () => - api>('/api/analysis/lb/check', { method: 'POST' }), + stats: (huntId?: string) => { + const q = huntId ? `?hunt_id=${encodeURIComponent(huntId)}` : ''; + return api(`/api/alerts/stats${q}`); + }, + get: (id: string) => api(`/api/alerts/${id}`), + update: (id: string, data: { status?: string; severity?: string; assignee?: string; case_id?: string; tags?: string[] }) => + api(`/api/alerts/${id}`, { method: 'PUT', body: JSON.stringify(data) }), + delete: (id: string) => + api(`/api/alerts/${id}`, { method: 'DELETE' }), + bulkUpdate: (alertIds: string[], status: string) => + api<{ updated: number }>(`/api/alerts/bulk-update?status=${encodeURIComponent(status)}`, { + method: 'POST', body: JSON.stringify(alertIds), + }), + analyzers: () => + api<{ analyzers: AnalyzerInfo[] }>('/api/alerts/analyzers/list'), + analyze: (params: { dataset_id?: string; hunt_id?: string; analyzers?: string[]; config?: Record; auto_create?: boolean }) => + api('/api/alerts/analyze', { + method: 'POST', body: JSON.stringify(params), + }), + listRules: (enabled?: boolean) => { + const q = enabled !== undefined ? `?enabled=${enabled}` : ''; + return api<{ rules: AlertRuleData[] }>(`/api/alerts/rules/list${q}`); + }, + createRule: (data: { name: string; description?: string; analyzer: string; config?: Record; severity_override?: string; enabled?: boolean; hunt_id?: string }) => + api('/api/alerts/rules', { method: 'POST', body: JSON.stringify(data) }), + updateRule: (id: string, data: Partial) => + api(`/api/alerts/rules/${id}`, { method: 'PUT', body: JSON.stringify(data) }), + deleteRule: (id: string) => + api(`/api/alerts/rules/${id}`, { method: 'DELETE' }), }; -// -- Network Topology -- +// ── Case Management (continued) ────────────────────────────────────── -export interface InventoryHost { +export interface CaseData { id: string; - hostname: string; - fqdn: string; - client_id: string; - ips: string[]; - os: string; - users: string[]; - datasets: string[]; - row_count: number; + title: string; + description: string | null; + severity: string; + tlp: string; + pap: string; + status: string; + priority: number; + assignee: string | null; + tags: string[]; + hunt_id: string | null; + owner_id: string | null; + mitre_techniques: string[]; + iocs: { type: string; value: string; description?: string }[]; + started_at: string | null; + resolved_at: string | null; + created_at: string; + updated_at: string; + tasks: CaseTaskData[]; +} +export interface CaseTaskData { + id: string; + case_id: string; + title: string; + description: string | null; + status: string; + assignee: string | null; + order: number; + created_at: string; + updated_at: string; +} +export interface ActivityLogEntry { + id: number; + action: string; + details: Record | null; + user_id: string | null; + created_at: string; } -export interface InventoryConnection { +export const cases = { + list: (opts?: { status?: string; hunt_id?: string; limit?: number; offset?: number }) => { + const q = new URLSearchParams(); + if (opts?.status) q.set('status', opts.status); + if (opts?.hunt_id) q.set('hunt_id', opts.hunt_id); + if (opts?.limit) q.set('limit', String(opts.limit)); + if (opts?.offset) q.set('offset', String(opts.offset)); + return api<{ cases: CaseData[]; total: number }>(`/api/cases?${q}`); + }, + get: (id: string) => api(`/api/cases/${id}`), + create: (data: Partial) => + api('/api/cases', { method: 'POST', body: JSON.stringify(data) }), + update: (id: string, data: Partial) => + api(`/api/cases/${id}`, { method: 'PUT', body: JSON.stringify(data) }), + delete: (id: string) => + api(`/api/cases/${id}`, { method: 'DELETE' }), + addTask: (caseId: string, data: { title: string; description?: string; assignee?: string }) => + api(`/api/cases/${caseId}/tasks`, { method: 'POST', body: JSON.stringify(data) }), + updateTask: (caseId: string, taskId: string, data: Partial) => + api(`/api/cases/${caseId}/tasks/${taskId}`, { method: 'PUT', body: JSON.stringify(data) }), + deleteTask: (caseId: string, taskId: string) => + api(`/api/cases/${caseId}/tasks/${taskId}`, { method: 'DELETE' }), + activity: (caseId: string, limit = 50) => + api<{ logs: ActivityLogEntry[] }>(`/api/cases/${caseId}/activity?limit=${limit}`), +}; + +// ── Notebooks & Playbooks ──────────────────────────────────────────── + +export interface NotebookCell { + id: string; + cell_type: string; source: string; - target: string; - target_ip: string; - port: string; - count: number; + output: string | null; + metadata: Record; +} +export interface NotebookData { + id: string; + title: string; + description: string | null; + cells: NotebookCell[]; + hunt_id: string | null; + case_id: string | null; + owner_id: string | null; + tags: string[]; + cell_count: number; + created_at: string; + updated_at: string; +} +export interface PlaybookTemplate { + name: string; + description: string; + category: string; + tags: string[]; + step_count: number; +} +export interface PlaybookStep { + order: number; + title: string; + description: string; + action: string; + action_config: Record; + expected_outcome: string; +} +export interface PlaybookTemplateDetail extends PlaybookTemplate { + steps: PlaybookStep[]; +} +export interface PlaybookRunData { + id: string; + playbook_name: string; + status: string; + current_step: number; + total_steps: number; + step_results: { step: number; status: string; notes: string | null; completed_at: string }[]; + hunt_id: string | null; + case_id: string | null; + started_by: string | null; + created_at: string; + updated_at: string; + completed_at: string | null; + steps?: PlaybookStep[]; } -export interface InventoryStats { - total_hosts: number; - total_datasets_scanned: number; - datasets_with_hosts: number; - total_rows_scanned: number; - hosts_with_ips: number; - hosts_with_users: number; -} +export const notebooks = { + list: (opts?: { hunt_id?: string; limit?: number; offset?: number }) => { + const q = new URLSearchParams(); + if (opts?.hunt_id) q.set('hunt_id', opts.hunt_id); + if (opts?.limit) q.set('limit', String(opts.limit)); + if (opts?.offset) q.set('offset', String(opts.offset)); + return api<{ notebooks: NotebookData[]; total: number }>(`/api/notebooks?${q}`); + }, + get: (id: string) => api(`/api/notebooks/${id}`), + create: (data: { title: string; description?: string; cells?: Partial[]; hunt_id?: string; case_id?: string; tags?: string[] }) => + api('/api/notebooks', { method: 'POST', body: JSON.stringify(data) }), + update: (id: string, data: { title?: string; description?: string; cells?: Partial[]; tags?: string[] }) => + api(`/api/notebooks/${id}`, { method: 'PUT', body: JSON.stringify(data) }), + upsertCell: (notebookId: string, cell: { cell_id: string; cell_type?: string; source?: string; output?: string; metadata?: Record }) => + api(`/api/notebooks/${notebookId}/cells`, { method: 'POST', body: JSON.stringify(cell) }), + deleteCell: (notebookId: string, cellId: string) => + api(`/api/notebooks/${notebookId}/cells/${cellId}`, { method: 'DELETE' }), + delete: (id: string) => + api(`/api/notebooks/${id}`, { method: 'DELETE' }), +}; +<<<<<<< HEAD export interface HostInventory { hosts: InventoryHost[]; connections: InventoryConnection[]; @@ -818,3 +1113,27 @@ export const stixExport = { }, }; +======= +export const playbooks = { + templates: () => + api<{ templates: PlaybookTemplate[] }>('/api/notebooks/playbooks/templates'), + templateDetail: (name: string) => + api(`/api/notebooks/playbooks/templates/${encodeURIComponent(name)}`), + start: (data: { playbook_name: string; hunt_id?: string; case_id?: string; started_by?: string }) => + api('/api/notebooks/playbooks/start', { method: 'POST', body: JSON.stringify(data) }), + listRuns: (opts?: { status?: string; hunt_id?: string }) => { + const q = new URLSearchParams(); + if (opts?.status) q.set('status', opts.status); + if (opts?.hunt_id) q.set('hunt_id', opts.hunt_id); + return api<{ runs: PlaybookRunData[] }>(`/api/notebooks/playbooks/runs?${q}`); + }, + getRun: (runId: string) => + api(`/api/notebooks/playbooks/runs/${runId}`), + completeStep: (runId: string, data: { notes?: string; status?: string }) => + api(`/api/notebooks/playbooks/runs/${runId}/complete-step`, { + method: 'POST', body: JSON.stringify(data), + }), + abortRun: (runId: string) => + api(`/api/notebooks/playbooks/runs/${runId}/abort`, { method: 'POST' }), +}; +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 diff --git a/frontend/src/components/AlertPanel.tsx b/frontend/src/components/AlertPanel.tsx new file mode 100644 index 0000000..84d2c18 --- /dev/null +++ b/frontend/src/components/AlertPanel.tsx @@ -0,0 +1,556 @@ +/** + * AlertPanel — Security alert management with analyzer controls. + * + * Features: + * - Alert list with severity/status filtering and sorting + * - Run analyzers on demand against datasets/hunts + * - Alert detail drill-down with evidence viewer + * - Bulk acknowledge/resolve/false-positive actions + * - Alert rules management (auto-trigger analyzers) + * - Stats dashboard (severity/status/analyzer breakdowns) + */ + +import React, { useEffect, useState, useCallback } from 'react'; +import { + Box, Typography, Paper, Button, Chip, IconButton, Tooltip, + Select, MenuItem, FormControl, InputLabel, Stack, Divider, + Dialog, DialogTitle, DialogContent, DialogActions, TextField, + LinearProgress, Alert as MuiAlert, Card, CardContent, Tabs, Tab, + Checkbox, FormControlLabel, Switch, Badge, +} from '@mui/material'; +import { DataGrid, GridColDef } from '@mui/x-data-grid'; +import RefreshIcon from '@mui/icons-material/Refresh'; +import PlayArrowIcon from '@mui/icons-material/PlayArrow'; +import CheckCircleIcon from '@mui/icons-material/CheckCircle'; +import ReportProblemIcon from '@mui/icons-material/ReportProblem'; +import DeleteIcon from '@mui/icons-material/Delete'; +import RuleIcon from '@mui/icons-material/Rule'; +import BarChartIcon from '@mui/icons-material/BarChart'; +import VisibilityIcon from '@mui/icons-material/Visibility'; +import { useSnackbar } from 'notistack'; +import { + alerts, hunts, datasets, + AlertData, AlertStats, AlertRuleData, AnalyzerInfo, + Hunt, DatasetSummary, +} from '../api/client'; + +const SEV_COLORS: Record = { + critical: 'error', high: 'warning', medium: 'info', low: 'success', info: 'default', +}; +const STATUS_COLORS: Record = { + new: 'error', acknowledged: 'warning', 'in-progress': 'info', + resolved: 'success', 'false-positive': 'default', +}; + +export default function AlertPanel() { + const { enqueueSnackbar } = useSnackbar(); + + // Tab state + const [tab, setTab] = useState(0); + + // Alerts list + const [alertList, setAlertList] = useState([]); + const [total, setTotal] = useState(0); + const [loading, setLoading] = useState(false); + const [sevFilter, setSevFilter] = useState(''); + const [statusFilter, setStatusFilter] = useState(''); + const [selected, setSelected] = useState([]); + + // Stats + const [stats, setStats] = useState(null); + + // Hunt/dataset selectors + const [huntList, setHuntList] = useState([]); + const [dsList, setDsList] = useState([]); + const [huntId, setHuntId] = useState(''); + const [datasetId, setDatasetId] = useState(''); + + // Analyzers + const [analyzerList, setAnalyzerList] = useState([]); + const [analyzing, setAnalyzing] = useState(false); + + // Rules + const [rules, setRules] = useState([]); + const [ruleDialog, setRuleDialog] = useState(false); + const [ruleForm, setRuleForm] = useState({ name: '', description: '', analyzer: '', enabled: true }); + + // Detail dialog + const [detailAlert, setDetailAlert] = useState(null); + + // ── Load data ────────────────────────────────────────────────────── + + const loadAlerts = useCallback(async () => { + setLoading(true); + try { + const opts: any = { limit: 200 }; + if (sevFilter) opts.severity = sevFilter; + if (statusFilter) opts.status = statusFilter; + if (huntId) opts.hunt_id = huntId; + if (datasetId) opts.dataset_id = datasetId; + const res = await alerts.list(opts); + setAlertList(res.alerts); + setTotal(res.total); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } finally { + setLoading(false); + } + }, [sevFilter, statusFilter, huntId, datasetId, enqueueSnackbar]); + + const loadStats = useCallback(async () => { + try { + const s = await alerts.stats(huntId || undefined); + setStats(s); + } catch {} + }, [huntId]); + + const loadRules = useCallback(async () => { + try { + const res = await alerts.listRules(); + setRules(res.rules); + } catch {} + }, []); + + useEffect(() => { + hunts.list().then(r => setHuntList(r.hunts)).catch(() => {}); + datasets.list(0, 500).then(r => setDsList(r.datasets)).catch(() => {}); + alerts.analyzers().then(r => setAnalyzerList(r.analyzers)).catch(() => {}); + }, []); + + useEffect(() => { loadAlerts(); loadStats(); }, [loadAlerts, loadStats]); + useEffect(() => { loadRules(); }, [loadRules]); + + // ── Analyze ──────────────────────────────────────────────────────── + + const runAnalysis = async () => { + if (!datasetId && !huntId) { + enqueueSnackbar('Select a hunt or dataset first', { variant: 'warning' }); + return; + } + setAnalyzing(true); + try { + const res = await alerts.analyze({ + dataset_id: datasetId || undefined, + hunt_id: huntId || undefined, + auto_create: true, + }); + enqueueSnackbar( + `Analysis complete: ${res.candidates_found} findings, ${res.alerts_created} alerts created`, + { variant: 'success' }, + ); + loadAlerts(); + loadStats(); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } finally { + setAnalyzing(false); + } + }; + + // ── Bulk actions ─────────────────────────────────────────────────── + + const bulkAction = async (status: string) => { + if (!selected.length) return; + try { + await alerts.bulkUpdate(selected, status); + enqueueSnackbar(`${selected.length} alerts → ${status}`, { variant: 'success' }); + setSelected([]); + loadAlerts(); + loadStats(); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + }; + + // ── Single alert actions ─────────────────────────────────────────── + + const updateStatus = async (id: string, status: string) => { + try { + await alerts.update(id, { status }); + loadAlerts(); + loadStats(); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + }; + + const deleteAlert = async (id: string) => { + try { + await alerts.delete(id); + loadAlerts(); + loadStats(); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + }; + + // ── Rules ────────────────────────────────────────────────────────── + + const createRule = async () => { + if (!ruleForm.name || !ruleForm.analyzer) return; + try { + await alerts.createRule({ + name: ruleForm.name, + description: ruleForm.description, + analyzer: ruleForm.analyzer, + enabled: ruleForm.enabled, + }); + enqueueSnackbar('Rule created', { variant: 'success' }); + setRuleDialog(false); + setRuleForm({ name: '', description: '', analyzer: '', enabled: true }); + loadRules(); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + }; + + const toggleRule = async (rule: AlertRuleData) => { + try { + await alerts.updateRule(rule.id, { enabled: !rule.enabled } as any); + loadRules(); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + }; + + const deleteRule = async (id: string) => { + try { + await alerts.deleteRule(id); + loadRules(); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + }; + + // ── DataGrid columns ────────────────────────────────────────────── + + const columns: GridColDef[] = [ + { + field: 'severity', headerName: 'Sev', width: 90, + renderCell: (p) => , + }, + { + field: 'status', headerName: 'Status', width: 110, + renderCell: (p) => , + }, + { field: 'title', headerName: 'Title', flex: 1, minWidth: 250 }, + { field: 'analyzer', headerName: 'Analyzer', width: 140 }, + { + field: 'score', headerName: 'Score', width: 80, type: 'number', + renderCell: (p) => {Math.round(p.value)}, + }, + { field: 'mitre_technique', headerName: 'MITRE', width: 90 }, + { + field: 'created_at', headerName: 'Created', width: 150, + valueFormatter: (value: string) => value ? new Date(value).toLocaleString() : '', + }, + { + field: 'actions', headerName: '', width: 160, sortable: false, + renderCell: (p) => ( + + setDetailAlert(p.row)}> + updateStatus(p.row.id, 'acknowledged')}> + updateStatus(p.row.id, 'resolved')}> + deleteAlert(p.row.id)}> + + ), + }, + ]; + + // ── Stats cards ──────────────────────────────────────────────────── + + const StatsView = () => { + if (!stats) return No stats available; + return ( + + + Total Alerts + {stats.total} + + + {['critical', 'high', 'medium', 'low', 'info'].map(sev => ( + + {sev.toUpperCase()} + + {stats.severity_counts[sev] || 0} + + + ))} + + + By Status + + {Object.entries(stats.status_counts).map(([s, c]) => ( + + ))} + + + + + By Analyzer + + {Object.entries(stats.analyzer_counts).map(([a, c]) => ( + + ))} + + + + {stats.top_mitre.length > 0 && ( + + Top MITRE Techniques + + {stats.top_mitre.map(m => ( + + ))} + + + )} + + ); + }; + + // ── Rules view ───────────────────────────────────────────────────── + + const RulesView = () => ( + + + Alert Rules ({rules.length}) + + + + {rules.map(rule => ( + + + + + {rule.name} + + {rule.severity_override && } + + {rule.description && {rule.description}} + + + toggleRule(rule)} size="small" /> + deleteRule(rule.id)}> + + + + ))} + + {rules.length === 0 && ( + + No alert rules configured. Create a rule to auto-trigger analyzers. + + )} + + ); + + return ( + + {/* Header */} + + + + + + Alerts & Analyzers + + + + + + + {/* Selector bar */} + + + + Hunt + + + + + Dataset + + + + + + + + + Severity + + + + + Status + + + + {analyzing && } + + + {/* Tabs */} + setTab(v)}> + + } label="Stats" /> + } label={`Rules (${rules.length})`} /> + + + {/* Tab panels */} + {tab === 0 && ( + + {/* Bulk actions */} + {selected.length > 0 && ( + + + {selected.length} selected + + + + + + )} + + + {loading && } + setSelected(Array.from(model.ids) as string[])} + pageSizeOptions={[25, 50, 100]} + initialState={{ pagination: { paginationModel: { pageSize: 50 } } }} + sx={{ border: 'none' }} + /> + + + )} + + {tab === 1 && } + {tab === 2 && } + + {/* Detail dialog */} + setDetailAlert(null)} maxWidth="md" fullWidth> + {detailAlert && ( + <> + + + {detailAlert.title} + + + {detailAlert.description} + + + + + + {detailAlert.mitre_technique && } + + + + {detailAlert.tags?.length > 0 && ( + + {detailAlert.tags.map((t, i) => )} + + )} + + Evidence + +
+                  {JSON.stringify(detailAlert.evidence, null, 2)}
+                
+
+ + + + Created: {new Date(detailAlert.created_at).toLocaleString()} + + {detailAlert.acknowledged_at && ( + + Acknowledged: {new Date(detailAlert.acknowledged_at).toLocaleString()} + + )} + {detailAlert.resolved_at && ( + + Resolved: {new Date(detailAlert.resolved_at).toLocaleString()} + + )} + +
+ + + + + + + + )} +
+ + {/* Create rule dialog */} + setRuleDialog(false)} maxWidth="sm" fullWidth> + Create Alert Rule + + + setRuleForm(f => ({ ...f, name: e.target.value }))} + /> + setRuleForm(f => ({ ...f, description: e.target.value }))} + /> + + Analyzer + + + setRuleForm(f => ({ ...f, enabled: e.target.checked }))} />} + label="Enabled" + /> + + + + + + + +
+ ); +} diff --git a/frontend/src/components/AnalysisPanel.tsx b/frontend/src/components/AnalysisPanel.tsx new file mode 100644 index 0000000..18ceeb4 --- /dev/null +++ b/frontend/src/components/AnalysisPanel.tsx @@ -0,0 +1,315 @@ +/** + * AnalysisPanel — LLM-powered threat analysis of datasets. + * + * Replaces the old EnrichmentPanel (which required VT/AbuseIPDB/Shodan API + * keys). Uses Wile (70B) and Roadrunner (fast) to perform deep threat analysis + * of uploaded forensic data, returning structured findings, IOCs, MITRE + * techniques, and actionable recommendations — all rendered in markdown. + */ + +import React, { useEffect, useState, useCallback } from 'react'; +import { + Box, Paper, Typography, Stack, Alert, CircularProgress, Chip, + FormControl, InputLabel, Select, MenuItem, TextField, Button, + Divider, LinearProgress, Grid, ToggleButton, ToggleButtonGroup, + Tooltip, +} from '@mui/material'; +import PlayArrowIcon from '@mui/icons-material/PlayArrow'; +import SpeedIcon from '@mui/icons-material/Speed'; +import PsychologyIcon from '@mui/icons-material/Psychology'; +import SecurityIcon from '@mui/icons-material/Security'; +import BugReportIcon from '@mui/icons-material/BugReport'; +import TravelExploreIcon from '@mui/icons-material/TravelExplore'; +import ReactMarkdown from 'react-markdown'; +import remarkGfm from 'remark-gfm'; +import { useSnackbar } from 'notistack'; +import { + analysis, hunts, datasets, type Hunt, type DatasetSummary, + type LLMAnalysisResult, +} from '../api/client'; + +const FOCUS_OPTIONS = [ + { value: '', label: 'General', icon: }, + { value: 'threats', label: 'Threats', icon: }, + { value: 'anomalies', label: 'Anomalies', icon: }, + { value: 'lateral_movement', label: 'Lateral Mvmt', icon: }, + { value: 'exfil', label: 'Exfiltration', icon: }, + { value: 'persistence', label: 'Persistence', icon: }, + { value: 'recon', label: 'Recon', icon: }, +]; + +const SEV_COLORS: Record = { + critical: '#ef4444', high: '#f97316', medium: '#eab308', low: '#3b82f6', info: '#6b7280', +}; + +function RiskGauge({ score }: { score: number }) { + const color = score >= 75 ? '#ef4444' : score >= 50 ? '#f97316' : score >= 25 ? '#eab308' : '#10b981'; + return ( + + + + + {score} + + + Risk Score + + ); +} + +export default function AnalysisPanel() { + const { enqueueSnackbar } = useSnackbar(); + + const [huntList, setHuntList] = useState([]); + const [datasetList, setDatasetList] = useState([]); + const [selectedHunt, setSelectedHunt] = useState(''); + const [selectedDataset, setSelectedDataset] = useState(''); + const [question, setQuestion] = useState(''); + const [mode, setMode] = useState<'quick' | 'deep'>('deep'); + const [focus, setFocus] = useState(''); + const [loading, setLoading] = useState(false); + const [result, setResult] = useState(null); + + /* load hunts + datasets */ + useEffect(() => { + (async () => { + try { + const [h, d] = await Promise.all([ + hunts.list(0, 100), + datasets.list(0, 200), + ]); + setHuntList(h.hunts); + setDatasetList(d.datasets); + if (h.hunts.length > 0) setSelectedHunt(h.hunts[0].id); + } catch {} + })(); + }, []); + + const huntDatasets = selectedHunt + ? datasetList.filter(d => d.hunt_id === selectedHunt) + : datasetList; + + const runAnalysis = useCallback(async () => { + if (!selectedHunt && !selectedDataset) { + enqueueSnackbar('Select a hunt or dataset', { variant: 'warning' }); + return; + } + setLoading(true); + try { + const res = await analysis.llmAnalyze({ + dataset_id: selectedDataset || undefined, + hunt_id: selectedDataset ? undefined : selectedHunt, + question: question || undefined, + mode, + focus: focus || undefined, + }); + setResult(res); + enqueueSnackbar(`Analysis complete in ${(res.latency_ms / 1000).toFixed(1)}s`, { variant: 'success' }); + } catch (e: any) { + enqueueSnackbar(e.message || 'Analysis failed', { variant: 'error' }); + } + setLoading(false); + }, [selectedHunt, selectedDataset, question, mode, focus, enqueueSnackbar]); + + return ( + + LLM Threat Analysis + + {/* Controls */} + + + + + Hunt + + + + + Dataset + + + + v && setMode(v)}> + + + + + + + + + + Focus + + + + + + setQuestion(e.target.value)} + onKeyDown={e => e.key === 'Enter' && runAnalysis()} + /> + + + + + {loading && } + + + {/* Results */} + {result && ( + + {/* Left: main analysis */} + + + + + + + {result.rows_analyzed.toLocaleString()} rows analyzed • {result.model_used} on {result.node_used} + • {(result.latency_ms / 1000).toFixed(1)}s + + + Confidence: {(result.confidence * 100).toFixed(0)}% + + + + + + + + + {result.analysis} + + + + + + {/* Right: structured findings */} + + + {/* Key findings */} + {result.key_findings.length > 0 && ( + + Key Findings + + {result.key_findings.map((f, i) => ( + + {f} + + ))} + + + )} + + {/* IOCs identified */} + {result.iocs_identified.length > 0 && ( + + IOCs Identified + + {result.iocs_identified.map((ioc, i) => ( + + + + {ioc.value} + + {ioc.context && ( + + — {ioc.context} + + )} + + ))} + + + )} + + {/* MITRE techniques */} + {result.mitre_techniques.length > 0 && ( + + MITRE ATT&CK + + {result.mitre_techniques.map((t, i) => ( + + ))} + + + )} + + {/* Recommended actions */} + {result.recommended_actions.length > 0 && ( + + Recommended Actions + + {result.recommended_actions.map((a, i) => ( + + {i + 1}. {a} + + ))} + + + )} + + + + )} + + {/* Empty state */} + {!result && !loading && ( + + + + Select a dataset and click Analyze + + + Uses Wile (70B) or Roadrunner for AI-powered threat analysis of your forensic data. + No external API keys required. + + + )} + + ); +} diff --git a/frontend/src/components/CaseManager.tsx b/frontend/src/components/CaseManager.tsx new file mode 100644 index 0000000..bb017c7 --- /dev/null +++ b/frontend/src/components/CaseManager.tsx @@ -0,0 +1,409 @@ +/** + * CaseManager — case management with Kanban task board, TLP/PAP badges, + * activity timeline, MITRE technique tags, and IOC lists. + */ + +import React, { useEffect, useState, useCallback } from 'react'; +import { + Box, Typography, Paper, Stack, Chip, Button, TextField, + FormControl, InputLabel, Select, MenuItem, CircularProgress, + Alert, IconButton, Dialog, DialogTitle, DialogContent, + DialogActions, Divider, Tooltip, Card, CardContent, CardActions, + Grid, Badge, +} from '@mui/material'; +import AddIcon from '@mui/icons-material/Add'; +import DeleteIcon from '@mui/icons-material/Delete'; +import EditIcon from '@mui/icons-material/Edit'; +import OpenInNewIcon from '@mui/icons-material/OpenInNew'; +import ArrowBackIcon from '@mui/icons-material/ArrowBack'; +import { useSnackbar } from 'notistack'; +import { + cases, type CaseData, type CaseTaskData, type ActivityLogEntry, +} from '../api/client'; + +const STATUSES = ['open', 'in-progress', 'resolved', 'closed']; +const SEVERITIES = ['info', 'low', 'medium', 'high', 'critical']; +const TLPS = ['white', 'green', 'amber', 'red']; +const PRIORITIES = [ + { value: 1, label: 'P1 — Urgent' }, + { value: 2, label: 'P2 — High' }, + { value: 3, label: 'P3 — Medium' }, + { value: 4, label: 'P4 — Low' }, +]; + +const SEV_COLORS: Record = { + info: 'info', low: 'success', medium: 'warning', high: 'error', critical: 'error', +}; +const TLP_COLORS: Record = { + white: '#fff', green: '#22c55e', amber: '#f59e0b', red: '#ef4444', +}; +const TASK_COLUMNS = ['todo', 'in-progress', 'done']; +const TASK_COL_LABELS: Record = { 'todo': 'To Do', 'in-progress': 'In Progress', 'done': 'Done' }; + +export default function CaseManager() { + const { enqueueSnackbar } = useSnackbar(); + const [caseList, setCaseList] = useState([]); + const [total, setTotal] = useState(0); + const [loading, setLoading] = useState(true); + const [filterStatus, setFilterStatus] = useState(''); + const [selectedCase, setSelectedCase] = useState(null); + const [activityLog, setActivityLog] = useState([]); + const [createOpen, setCreateOpen] = useState(false); + const [taskDlgOpen, setTaskDlgOpen] = useState(false); + const [form, setForm] = useState({ + title: '', description: '', severity: 'medium', tlp: 'amber', pap: 'amber', priority: 2, + assignee: '', tags: '', + }); + const [taskForm, setTaskForm] = useState({ title: '', description: '', assignee: '' }); + + const loadCases = useCallback(async () => { + setLoading(true); + try { + const r = await cases.list({ status: filterStatus || undefined, limit: 100 }); + setCaseList(r.cases); + setTotal(r.total); + } catch (e: any) { enqueueSnackbar(e.message, { variant: 'error' }); } + setLoading(false); + }, [filterStatus, enqueueSnackbar]); + + useEffect(() => { loadCases(); }, [loadCases]); + + const loadCaseDetail = async (id: string) => { + try { + const [c, a] = await Promise.all([cases.get(id), cases.activity(id)]); + setSelectedCase(c); + setActivityLog(a.logs); + } catch (e: any) { enqueueSnackbar(e.message, { variant: 'error' }); } + }; + + const handleCreate = async () => { + try { + const tags = form.tags ? form.tags.split(',').map(t => t.trim()).filter(Boolean) : []; + await cases.create({ + title: form.title, + description: form.description || undefined, + severity: form.severity, + tlp: form.tlp, + pap: form.pap, + priority: form.priority, + assignee: form.assignee || undefined, + tags, + } as any); + enqueueSnackbar('Case created', { variant: 'success' }); + setCreateOpen(false); + loadCases(); + } catch (e: any) { enqueueSnackbar(e.message, { variant: 'error' }); } + }; + + const handleStatusChange = async (caseId: string, newStatus: string) => { + try { + await cases.update(caseId, { status: newStatus } as any); + enqueueSnackbar(`Status → ${newStatus}`, { variant: 'info' }); + if (selectedCase?.id === caseId) loadCaseDetail(caseId); + loadCases(); + } catch (e: any) { enqueueSnackbar(e.message, { variant: 'error' }); } + }; + + const handleDelete = async (id: string) => { + if (!window.confirm('Delete this case?')) return; + try { + await cases.delete(id); + enqueueSnackbar('Case deleted', { variant: 'info' }); + if (selectedCase?.id === id) setSelectedCase(null); + loadCases(); + } catch (e: any) { enqueueSnackbar(e.message, { variant: 'error' }); } + }; + + const handleAddTask = async () => { + if (!selectedCase) return; + try { + await cases.addTask(selectedCase.id, { + title: taskForm.title, + description: taskForm.description || undefined, + assignee: taskForm.assignee || undefined, + }); + enqueueSnackbar('Task added', { variant: 'success' }); + setTaskDlgOpen(false); + loadCaseDetail(selectedCase.id); + } catch (e: any) { enqueueSnackbar(e.message, { variant: 'error' }); } + }; + + const handleTaskStatusChange = async (taskId: string, newStatus: string) => { + if (!selectedCase) return; + try { + await cases.updateTask(selectedCase.id, taskId, { status: newStatus } as any); + loadCaseDetail(selectedCase.id); + } catch (e: any) { enqueueSnackbar(e.message, { variant: 'error' }); } + }; + + const handleDeleteTask = async (taskId: string) => { + if (!selectedCase) return; + try { + await cases.deleteTask(selectedCase.id, taskId); + loadCaseDetail(selectedCase.id); + } catch (e: any) { enqueueSnackbar(e.message, { variant: 'error' }); } + }; + + if (loading) return ; + + // ── Case Detail View ─────────────────────────────────────────────── + + if (selectedCase) { + return ( + + + setSelectedCase(null)}> + {selectedCase.title} + + + + + + {selectedCase.description && ( + + {selectedCase.description} + + )} + + {/* Status control */} + + + Status: + {STATUSES.map(s => ( + + ))} + + {selectedCase.assignee && ( + + )} + + + + + {/* Tags + MITRE */} + {(selectedCase.tags.length > 0 || selectedCase.mitre_techniques.length > 0) && ( + + + {selectedCase.tags.map(t => )} + {selectedCase.mitre_techniques.map(t => ( + + ))} + + + )} + + {/* Kanban Task Board */} + + Tasks + { + setTaskForm({ title: '', description: '', assignee: '' }); + setTaskDlgOpen(true); + }}> + + + + {TASK_COLUMNS.map(col => { + const colTasks = (selectedCase.tasks || []).filter(t => t.status === col); + return ( + + + + {TASK_COL_LABELS[col]} + + + + {colTasks.map(task => ( + + + {task.title} + {task.description && ( + {task.description} + )} + {task.assignee && ( + + )} + + + {col !== 'todo' && ( + + )} + {col !== 'done' && ( + + )} + + handleDeleteTask(task.id)}> + + + + + ))} + + + + ); + })} + + + {/* Activity Log */} + {activityLog.length > 0 && ( + <> + Activity + + {activityLog.map(l => ( + + + {l.created_at ? new Date(l.created_at).toLocaleString() : ''} + + + {l.details && ( + + {JSON.stringify(l.details).slice(0, 100)} + + )} + + ))} + + + )} + + {/* Task create dialog */} + setTaskDlgOpen(false)} maxWidth="sm" fullWidth> + New Task + + + setTaskForm(f => ({ ...f, title: e.target.value }))} /> + setTaskForm(f => ({ ...f, description: e.target.value }))} /> + setTaskForm(f => ({ ...f, assignee: e.target.value }))} /> + + + + + + + + + ); + } + + // ── Case List View ───────────────────────────────────────────────── + + return ( + + + Cases ({total}) + + + + + + + Status + + + + + + + {caseList.map(c => ( + loadCaseDetail(c.id)}> + + {c.title} + + + + + {c.assignee && } + + {c.tasks.length} tasks + + { e.stopPropagation(); handleDelete(c.id); }}> + + + + + ))} + {caseList.length === 0 && ( + No cases found. Create one to get started. + )} + + + {/* Create case dialog */} + setCreateOpen(false)} maxWidth="sm" fullWidth> + New Case + + + setForm(f => ({ ...f, title: e.target.value }))} /> + setForm(f => ({ ...f, description: e.target.value }))} /> + + + Severity + + + + Priority + + + + + + TLP + + + + PAP + + + + setForm(f => ({ ...f, assignee: e.target.value }))} /> + setForm(f => ({ ...f, tags: e.target.value }))} /> + + + + + + + + + ); +} diff --git a/frontend/src/components/ContextMenu.tsx b/frontend/src/components/ContextMenu.tsx new file mode 100644 index 0000000..dca43f0 --- /dev/null +++ b/frontend/src/components/ContextMenu.tsx @@ -0,0 +1,278 @@ +/** + * ContextMenu — right-click radial menu for analyst actions on cells / rows. + * Re-usable across DatasetViewer, NetworkMap, ProcessTree, StorylineGraph, etc. + * + * Actions: + * - Annotate (open annotation dialog) + * - Copy value + * - Search for value (navigates to Search page) + * - Enrich IOC (stub for future) + * - Add to hypothesis + * - Mark as suspicious / benign + */ + +import React, { useState, useCallback } from 'react'; +import { + Menu, MenuItem, ListItemIcon, ListItemText, Divider, + Dialog, DialogTitle, DialogContent, DialogActions, + Button, TextField, FormControl, InputLabel, Select, + Stack, Typography, Chip, +} from '@mui/material'; +import BookmarkAddIcon from '@mui/icons-material/BookmarkAdd'; +import ContentCopyIcon from '@mui/icons-material/ContentCopy'; +import SearchIcon from '@mui/icons-material/Search'; +import FlagIcon from '@mui/icons-material/Flag'; +import CheckCircleOutlineIcon from '@mui/icons-material/CheckCircleOutline'; +import WarningAmberIcon from '@mui/icons-material/WarningAmber'; +import ScienceIcon from '@mui/icons-material/Science'; +import { useSnackbar } from 'notistack'; +import { useNavigate } from 'react-router-dom'; +import { annotations } from '../api/client'; + +// ── Types ──────────────────────────────────────────────────────────── + +export interface ContextTarget { + /** The cell / node value the user right-clicked on */ + value: string; + /** The field / column name */ + field?: string; + /** Dataset ID if applicable */ + datasetId?: string; + /** Row index if applicable */ + rowIndex?: number; + /** Extra context for display */ + extra?: Record; +} + +interface ContextMenuProps { + anchorPosition: { top: number; left: number } | null; + target: ContextTarget | null; + onClose: () => void; + /** Optional callback after an annotation is created */ + onAnnotated?: () => void; +} + +// ── Severity + Tag options ─────────────────────────────────────────── + +const SEVERITIES = ['info', 'low', 'medium', 'high', 'critical'] as const; +const TAGS = ['suspicious', 'benign', 'needs-review', 'false-positive', 'true-positive', 'escalate'] as const; +const SEV_COLORS: Record = { + info: 'info', low: 'success', medium: 'warning', high: 'error', critical: 'error', +}; + +// ── Component ──────────────────────────────────────────────────────── + +export default function ContextMenu({ anchorPosition, target, onClose, onAnnotated }: ContextMenuProps) { + const { enqueueSnackbar } = useSnackbar(); + const navigate = useNavigate(); + const [annOpen, setAnnOpen] = useState(false); + const [form, setForm] = useState({ text: '', severity: 'medium', tag: 'suspicious' }); + + const handleCopy = useCallback(() => { + if (target?.value) { + navigator.clipboard.writeText(target.value); + enqueueSnackbar('Copied to clipboard', { variant: 'info' }); + } + onClose(); + }, [target, enqueueSnackbar, onClose]); + + const handleSearch = useCallback(() => { + if (target?.value) { + // Navigate to search page with the value pre-loaded via query param + navigate(`/search?q=${encodeURIComponent(target.value)}`); + } + onClose(); + }, [target, navigate, onClose]); + + const handleQuickAnnotate = useCallback(async (tag: string, severity: string) => { + if (!target) return; + try { + const text = target.field + ? `${tag}: ${target.field}="${target.value}"` + : `${tag}: "${target.value}"`; + await annotations.create({ + text, + severity, + tag, + dataset_id: target.datasetId, + row_id: target.rowIndex, + }); + enqueueSnackbar(`Marked as ${tag}`, { variant: 'success' }); + onAnnotated?.(); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + onClose(); + }, [target, enqueueSnackbar, onClose, onAnnotated]); + + const handleAnnotateOpen = () => { + setForm({ + text: target?.field + ? `${target.field}="${target.value}"` + : target?.value || '', + severity: 'medium', + tag: 'suspicious', + }); + setAnnOpen(true); + onClose(); + }; + + const handleAnnotateSubmit = async () => { + if (!target) return; + try { + await annotations.create({ + text: form.text, + severity: form.severity, + tag: form.tag, + dataset_id: target.datasetId, + row_id: target.rowIndex, + }); + enqueueSnackbar('Annotation created', { variant: 'success' }); + onAnnotated?.(); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + setAnnOpen(false); + }; + + const handleHypothesis = () => { + // Navigate to hypotheses page — user can create there + navigate('/hypotheses'); + onClose(); + }; + + return ( + <> + {/* Context menu */} + + {target && ( + + + {target.field ? `${target.field}: ` : ''} + {String(target.value).slice(0, 60)} + + + )} + + + + + Copy value + + + + + Search for this + + + + + + + Annotate… + + + handleQuickAnnotate('suspicious', 'high')}> + + Mark suspicious + + + handleQuickAnnotate('benign', 'info')}> + + Mark benign + + + handleQuickAnnotate('escalate', 'critical')}> + + Escalate + + + + + + + Add to hypothesis + + + + {/* Full annotation dialog */} + setAnnOpen(false)} maxWidth="sm" fullWidth> + + Annotate + {target?.field && ( + + )} + + + + setForm(f => ({ ...f, text: e.target.value }))} + /> + + + Severity + + + + Tag + + + + {target?.datasetId && ( + + Dataset: {target.datasetId} + {target.rowIndex != null && ` · Row: ${target.rowIndex}`} + + )} + + + + + + + + + ); +} + +// ── Hook for easy integration ──────────────────────────────────────── + +export function useContextMenu() { + const [menuPos, setMenuPos] = useState<{ top: number; left: number } | null>(null); + const [menuTarget, setMenuTarget] = useState(null); + + const openMenu = useCallback((e: React.MouseEvent, target: ContextTarget) => { + e.preventDefault(); + e.stopPropagation(); + setMenuPos({ top: e.clientY, left: e.clientX }); + setMenuTarget(target); + }, []); + + const closeMenu = useCallback(() => { + setMenuPos(null); + setMenuTarget(null); + }, []); + + return { menuPos, menuTarget, openMenu, closeMenu }; +} diff --git a/frontend/src/components/Dashboard.tsx b/frontend/src/components/Dashboard.tsx index e0c855a..ca64618 100644 --- a/frontend/src/components/Dashboard.tsx +++ b/frontend/src/components/Dashboard.tsx @@ -1,12 +1,21 @@ /** +<<<<<<< HEAD * Dashboard - overview cards with hunt stats, cluster health, recent activity. * Symmetrical 4-column grid layout, empty-state onboarding, auto-refresh. +======= + * Dashboard — CrowdScore-style triage overview with risk scoring, + * severity breakdown, top riskiest hosts, node health, and recent hunts. +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 */ import React, { useEffect, useState, useCallback } from 'react'; import { Box, Grid, Paper, Typography, Chip, CircularProgress, +<<<<<<< HEAD Stack, Alert, Button, Divider, +======= + Stack, Alert, LinearProgress, Divider, +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 } from '@mui/material'; import StorageIcon from '@mui/icons-material/Storage'; import SearchIcon from '@mui/icons-material/Search'; @@ -14,6 +23,7 @@ import SecurityIcon from '@mui/icons-material/Security'; import ScienceIcon from '@mui/icons-material/Science'; import CheckCircleIcon from '@mui/icons-material/CheckCircle'; import ErrorIcon from '@mui/icons-material/Error'; +<<<<<<< HEAD import UploadFileIcon from '@mui/icons-material/UploadFile'; import RocketLaunchIcon from '@mui/icons-material/RocketLaunch'; import RefreshIcon from '@mui/icons-material/Refresh'; @@ -34,14 +44,80 @@ function StatCard({ title, value, icon, color }: { {value} {title} +======= +import WarningAmberIcon from '@mui/icons-material/WarningAmber'; +import ShieldIcon from '@mui/icons-material/Shield'; +import { + PieChart, Pie, Cell, ResponsiveContainer, BarChart, Bar, XAxis, YAxis, + Tooltip as RechartsTooltip, Legend, +} from 'recharts'; +import { + hunts, datasets, hypotheses, agent, misc, analysis, + type Hunt, type DatasetSummary, type HealthInfo, type RiskSummaryResponse, +} from '../api/client'; + +/* ── Severity palette ─────────────────────────────────────────────── */ +const SEV_COLORS: Record = { + critical: '#ef4444', + high: '#f97316', + medium: '#eab308', + low: '#3b82f6', + info: '#6b7280', +}; + +/* ── CrowdScore gauge component ───────────────────────────────────── */ +function CrowdScore({ score }: { score: number }) { + const color = score >= 75 ? '#ef4444' : score >= 50 ? '#f97316' : score >= 25 ? '#eab308' : '#10b981'; + const label = score >= 75 ? 'CRITICAL' : score >= 50 ? 'HIGH' : score >= 25 ? 'MODERATE' : 'LOW'; + + return ( + + + + + + {score} + + + {label} + + + + + Overall Threat Score + + + ); +} + +/* ── Stat card ────────────────────────────────────────────────────── */ +function StatCard({ title, value, icon, color }: { title: string; value: string | number; icon: React.ReactNode; color: string }) { + return ( + + + {icon} + + {value} + {title} +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 ); } +<<<<<<< HEAD /* Node Status */ +======= +/* ── Node status chip ─────────────────────────────────────────────── */ +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 function NodeStatus({ label, available }: { label: string; available: boolean }) { return ( @@ -86,10 +162,16 @@ export default function Dashboard() { const [huntList, setHunts] = useState([]); const [datasetList, setDatasets] = useState([]); const [hypoCount, setHypoCount] = useState(0); +<<<<<<< HEAD const [apiInfo, setApiInfo] = useState<{ name?: string; version?: string; status?: string; service?: string } | null>(null); +======= + const [apiInfo, setApiInfo] = useState<{ name?: string; version?: string; status?: string } | null>(null); + const [risk, setRisk] = useState(null); +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 const [error, setError] = useState(''); const [lastRefresh, setLastRefresh] = useState(new Date()); +<<<<<<< HEAD const refresh = useCallback(async () => { try { const [h, ht, ds, hy, info] = await Promise.all([ @@ -111,6 +193,36 @@ export default function Dashboard() { } finally { setLoading(false); } +======= + useEffect(() => { + (async () => { + try { + const [h, ht, ds, hy, info] = await Promise.all([ + agent.health().catch(() => null), + hunts.list(0, 100).catch(() => ({ hunts: [], total: 0 })), + datasets.list(0, 100).catch(() => ({ datasets: [], total: 0 })), + hypotheses.list({ limit: 1 }).catch(() => ({ hypotheses: [], total: 0 })), + misc.root().catch(() => null), + ]); + setHealth(h); + setHunts(ht.hunts); + setDatasets(ds.datasets); + setHypoCount(hy.total); + setApiInfo(info); + + // Fetch risk for the first active hunt + const activeHunt = ht.hunts.find((h: Hunt) => h.status === 'active'); + if (activeHunt) { + const riskData = await analysis.riskSummary(activeHunt.id).catch(() => null); + setRisk(riskData); + } + } catch (e: any) { + setError(e.message); + } finally { + setLoading(false); + } + })(); +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 }, []); // Initial load @@ -129,6 +241,16 @@ export default function Dashboard() { const totalRows = datasetList.reduce((s, d) => s + d.row_count, 0); const isEmpty = huntList.length === 0 && datasetList.length === 0; + /* severity pie data */ + const sevData = risk?.severity_breakdown + ? Object.entries(risk.severity_breakdown) + .filter(([_, v]) => v > 0) + .map(([name, value]) => ({ name, value })) + : []; + + /* top 10 riskiest hosts */ + const topHosts = risk?.hosts?.slice(0, 10) || []; + return ( @@ -141,6 +263,7 @@ export default function Dashboard() { +<<<<<<< HEAD {/* Stat cards - symmetrical 4-column */} @@ -254,6 +377,186 @@ export default function Dashboard() { )} +======= + {/* Row 1: CrowdScore + stats */} + + + + + + + + + + } color="#60a5fa" /> + + + } color="#f472b6" /> + + + } color="#10b981" /> + + + } color="#f59e0b" /> + + + + {/* Alert signal summary */} + {risk && risk.hosts.length > 0 && ( + + + + + {risk.hosts.filter(h => h.score >= 50).length} high-risk hosts + + + + {risk.total_events.toLocaleString()} events analyzed + + {risk.hosts.slice(0, 3).flatMap(h => h.signals.slice(0, 2)).filter((v, i, a) => a.indexOf(v) === i).map(s => ( + + ))} + + + )} + + + + {/* Row 2: Severity pie + Top riskiest hosts */} + + + + Severity Breakdown + {sevData.length > 0 ? ( + + + `${name}: ${value}`}> + {sevData.map((entry) => ( + + ))} + + + + + + ) : ( + + No data + + )} + + + + + Top 10 Riskiest Hosts + {topHosts.length > 0 ? ( + + + + + [`${value}/100`, 'Risk Score']} + labelFormatter={(label: any) => `Host: ${label}`} + /> + + {topHosts.map((entry, idx) => ( + = 75 ? '#ef4444' : entry.score >= 50 ? '#f97316' + : entry.score >= 25 ? '#eab308' : '#10b981'} + /> + ))} + + + + ) : ( + + No risk data — select a hunt with datasets + + )} + + + + + {/* Row 3: Node health + Recent hunts */} + + + + LLM Cluster Health + + + + + + + + {apiInfo ? `${apiInfo.name || 'ThreatHunt'} v${apiInfo.version || '?'}` : 'API unreachable'} — {apiInfo?.status ?? 'unknown'} + + + + + + + Recent Hunts + {huntList.length > 0 ? ( + + {huntList.slice(0, 6).map(h => ( + + + {h.name} + + {h.dataset_count}ds · {h.hypothesis_count}hyp + + + ))} + + ) : ( + No hunts yet + )} + + + + {/* Risk signal details for top hosts */} + + + + + Risk Signals + + {topHosts.filter(h => h.signals.length > 0).slice(0, 5).map(h => ( + + + + {h.hostname} + + = 75 ? '#ef4444' : h.score >= 50 ? '#f97316' + : h.score >= 25 ? '#eab308' : '#10b981' } }} + /> + + {h.score} + + + + {h.signals.map(s => ( + + ))} + + + ))} + {topHosts.filter(h => h.signals.length > 0).length === 0 && ( + No risk signals detected + )} + + + +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 ); } diff --git a/frontend/src/components/DatasetViewer.tsx b/frontend/src/components/DatasetViewer.tsx index 2e06ea2..d2f6797 100644 --- a/frontend/src/components/DatasetViewer.tsx +++ b/frontend/src/components/DatasetViewer.tsx @@ -13,6 +13,7 @@ import DeleteIcon from '@mui/icons-material/Delete'; import RefreshIcon from '@mui/icons-material/Refresh'; import { useSnackbar } from 'notistack'; import { datasets, enrichment, type DatasetSummary } from '../api/client'; +import ContextMenu, { useContextMenu, type ContextTarget } from './ContextMenu'; export default function DatasetViewer() { const { enqueueSnackbar } = useSnackbar(); @@ -24,6 +25,7 @@ export default function DatasetViewer() { const [paginationModel, setPaginationModel] = useState({ page: 0, pageSize: 50 }); const [rowLoading, setRowLoading] = useState(false); const [enriching, setEnriching] = useState(false); + const { menuPos, menuTarget, openMenu, closeMenu } = useContextMenu(); const loadList = useCallback(async () => { setLoading(true); @@ -169,7 +171,19 @@ export default function DatasetViewer() { {/* Data grid */} {selected ? ( - + { + // Find cell value from the DataGrid event target + const cell = (e.target as HTMLElement).closest('.MuiDataGrid-cell'); + if (!cell) return; + const field = cell.getAttribute('data-field') || ''; + const value = cell.textContent || ''; + const rowEl = cell.closest('.MuiDataGrid-row'); + const rowIdx = rowEl ? parseInt(rowEl.getAttribute('data-rowindex') || '0', 10) : undefined; + openMenu(e, { value, field, datasetId: selected.id, rowIndex: rowIdx }); + }} + > Upload a CSV to get started. )} + + {/* Right-click context menu */} + ); } diff --git a/frontend/src/components/InvestigationNotebook.tsx b/frontend/src/components/InvestigationNotebook.tsx new file mode 100644 index 0000000..b50098d --- /dev/null +++ b/frontend/src/components/InvestigationNotebook.tsx @@ -0,0 +1,372 @@ +/** + * InvestigationNotebook — Cell-based investigation documentation. + * + * Features: + * - Create/list/open notebooks + * - Markdown + query cells with add/edit/delete + * - Real-time save on cell changes + * - Link notebooks to hunts/cases + */ + +import React, { useEffect, useState, useCallback } from 'react'; +import { + Box, Typography, Paper, Button, IconButton, TextField, Chip, + Stack, Divider, Select, MenuItem, FormControl, InputLabel, + Dialog, DialogTitle, DialogContent, DialogActions, + Card, CardContent, CardActions, Tooltip, ToggleButton, ToggleButtonGroup, +} from '@mui/material'; +import AddIcon from '@mui/icons-material/Add'; +import DeleteIcon from '@mui/icons-material/Delete'; +import EditIcon from '@mui/icons-material/Edit'; +import SaveIcon from '@mui/icons-material/Save'; +import ArrowBackIcon from '@mui/icons-material/ArrowBack'; +import CodeIcon from '@mui/icons-material/Code'; +import NotesIcon from '@mui/icons-material/Notes'; +import SearchIcon from '@mui/icons-material/Search'; +import ArrowUpwardIcon from '@mui/icons-material/ArrowUpward'; +import ArrowDownwardIcon from '@mui/icons-material/ArrowDownward'; +import { useSnackbar } from 'notistack'; +import ReactMarkdown from 'react-markdown'; +import remarkGfm from 'remark-gfm'; +import { + notebooks, hunts, + NotebookData, NotebookCell, Hunt, +} from '../api/client'; + +const CELL_TYPE_ICONS: Record = { + markdown: , + query: , + code: , +}; + +export default function InvestigationNotebook() { + const { enqueueSnackbar } = useSnackbar(); + + // List view state + const [nbList, setNbList] = useState([]); + const [huntList, setHuntList] = useState([]); + const [huntFilter, setHuntFilter] = useState(''); + + // Detail view state + const [activeNb, setActiveNb] = useState(null); + const [editingCell, setEditingCell] = useState(null); + const [cellSource, setCellSource] = useState(''); + + // Create dialog + const [createOpen, setCreateOpen] = useState(false); + const [newTitle, setNewTitle] = useState(''); + const [newDesc, setNewDesc] = useState(''); + const [newHunt, setNewHunt] = useState(''); + + // ── Load ─────────────────────────────────────────────────────────── + + const loadList = useCallback(async () => { + try { + const opts: any = {}; + if (huntFilter) opts.hunt_id = huntFilter; + const res = await notebooks.list(opts); + setNbList(res.notebooks); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + }, [huntFilter, enqueueSnackbar]); + + useEffect(() => { + hunts.list().then(r => setHuntList(r.hunts)).catch(() => {}); + }, []); + + useEffect(() => { loadList(); }, [loadList]); + + // ── Create ───────────────────────────────────────────────────────── + + const createNotebook = async () => { + if (!newTitle) return; + try { + const nb = await notebooks.create({ + title: newTitle, + description: newDesc || undefined, + hunt_id: newHunt || undefined, + }); + enqueueSnackbar('Notebook created', { variant: 'success' }); + setCreateOpen(false); + setNewTitle(''); setNewDesc(''); setNewHunt(''); + setActiveNb(nb); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + }; + + // ── Open ─────────────────────────────────────────────────────────── + + const openNotebook = async (id: string) => { + try { + const nb = await notebooks.get(id); + setActiveNb(nb); + setEditingCell(null); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + }; + + const refreshNotebook = async () => { + if (!activeNb) return; + try { + const nb = await notebooks.get(activeNb.id); + setActiveNb(nb); + } catch {} + }; + + // ── Cell operations ──────────────────────────────────────────────── + + const addCell = async (type: string) => { + if (!activeNb) return; + const cellId = `cell-${Date.now()}`; + const placeholder = type === 'markdown' + ? '## New section\n\nWrite your notes here...' + : type === 'query' + ? '# Search query\nprocess_name:powershell.exe' + : '# Code cell\n'; + try { + const nb = await notebooks.upsertCell(activeNb.id, { + cell_id: cellId, + cell_type: type, + source: placeholder, + }); + setActiveNb(nb); + setEditingCell(cellId); + setCellSource(placeholder); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + }; + + const saveCell = async (cellId: string) => { + if (!activeNb) return; + try { + const nb = await notebooks.upsertCell(activeNb.id, { + cell_id: cellId, + source: cellSource, + }); + setActiveNb(nb); + setEditingCell(null); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + }; + + const deleteCell = async (cellId: string) => { + if (!activeNb) return; + try { + await notebooks.deleteCell(activeNb.id, cellId); + refreshNotebook(); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + }; + + const moveCell = async (cellId: string, direction: 'up' | 'down') => { + if (!activeNb) return; + const cells = [...activeNb.cells]; + const idx = cells.findIndex(c => c.id === cellId); + if (idx < 0) return; + const targetIdx = direction === 'up' ? idx - 1 : idx + 1; + if (targetIdx < 0 || targetIdx >= cells.length) return; + [cells[idx], cells[targetIdx]] = [cells[targetIdx], cells[idx]]; + try { + const nb = await notebooks.update(activeNb.id, { cells }); + setActiveNb(nb); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + }; + + const deleteNotebook = async (id: string) => { + try { + await notebooks.delete(id); + enqueueSnackbar('Notebook deleted', { variant: 'success' }); + if (activeNb?.id === id) setActiveNb(null); + loadList(); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + }; + + // ── Cell renderer ────────────────────────────────────────────────── + + const renderCell = (cell: NotebookCell, index: number) => { + const isEditing = editingCell === cell.id; + return ( + + {/* Cell header */} + + {CELL_TYPE_ICONS[cell.cell_type] || } + + {cell.cell_type} • #{index + 1} + + moveCell(cell.id, 'up')} disabled={index === 0}> + moveCell(cell.id, 'down')} disabled={index === (activeNb?.cells.length || 0) - 1}> + {!isEditing && ( + { setEditingCell(cell.id); setCellSource(cell.source); }}> + )} + {isEditing && ( + saveCell(cell.id)}> + )} + deleteCell(cell.id)}> + + + + {/* Cell body */} + + {isEditing ? ( + setCellSource(e.target.value)} + onKeyDown={e => { if (e.ctrlKey && e.key === 's') { e.preventDefault(); saveCell(cell.id); } }} + placeholder="Type here... (Ctrl+S to save)" + sx={{ fontFamily: cell.cell_type !== 'markdown' ? 'monospace' : undefined }} + /> + ) : cell.cell_type === 'markdown' ? ( + + {cell.source} + + ) : ( +
+              {cell.source}
+            
+ )} +
+ + {/* Cell output */} + {cell.output && ( + <> + + + Output: +
{cell.output}
+
+ + )} +
+ ); + }; + + // ── Detail view ──────────────────────────────────────────────────── + + if (activeNb) { + return ( + + + + {activeNb.title} + + + Updated: {new Date(activeNb.updated_at).toLocaleString()} + + + + {activeNb.description && ( + {activeNb.description} + )} + + {/* Cells */} + {activeNb.cells.map((cell, i) => renderCell(cell, i))} + + {/* Add cell toolbar */} + + + + + + + + + ); + } + + // ── List view ────────────────────────────────────────────────────── + + return ( + + + Investigation Notebooks + + + + + + Filter by Hunt + + + + + + {nbList.map(nb => ( + + + {nb.title} + {nb.description && ( + {nb.description} + )} + + + {nb.tags?.map((t, i) => )} + + + Updated: {new Date(nb.updated_at).toLocaleString()} + + + + + deleteNotebook(nb.id)}> + + + + + ))} + + + {nbList.length === 0 && ( + + No notebooks yet. Create one to start documenting your investigation. + + )} + + {/* Create dialog */} + setCreateOpen(false)} maxWidth="sm" fullWidth> + Create Notebook + + + setNewTitle(e.target.value)} /> + setNewDesc(e.target.value)} /> + + Linked Hunt + + + + + + + + + + + ); +} diff --git a/frontend/src/components/KnowledgeGraph.tsx b/frontend/src/components/KnowledgeGraph.tsx new file mode 100644 index 0000000..67f3b7c --- /dev/null +++ b/frontend/src/components/KnowledgeGraph.tsx @@ -0,0 +1,273 @@ +/** + * KnowledgeGraph — entity-to-technique knowledge graph visualization + * using Cytoscape.js with cola (force-directed) layout. + */ + +import React, { useEffect, useState, useCallback, useRef } from 'react'; +import { + Box, Typography, Paper, Stack, FormControl, InputLabel, Select, + MenuItem, CircularProgress, Alert, Chip, ToggleButton, + ToggleButtonGroup, IconButton, Tooltip, +} from '@mui/material'; +import ZoomInIcon from '@mui/icons-material/ZoomIn'; +import ZoomOutIcon from '@mui/icons-material/ZoomOut'; +import FitScreenIcon from '@mui/icons-material/FitScreen'; +import cytoscape from 'cytoscape'; +import dagre from 'cytoscape-dagre'; +import cola from 'cytoscape-cola'; +import { + hunts, datasets, analysis, + type HuntOut, type DatasetSummary, type KnowledgeGraphResponse, +} from '../api/client'; + +cytoscape.use(dagre); +cytoscape.use(cola); + +const CY_STYLE: cytoscape.StylesheetStyle[] = [ + { + selector: 'node', + style: { + label: 'data(label)', + 'font-size': 9, + 'text-wrap': 'wrap', + 'text-max-width': '80px', + color: '#ddd', + 'text-outline-color': '#111', + 'text-outline-width': 1, + 'background-color': 'data(color)', + shape: 'data(shape)' as any, + width: 30, + height: 30, + }, + }, + { + selector: 'node[type="technique"]', + style: { + width: 40, + height: 26, + 'font-size': 7, + 'background-color': '#ef4444', + shape: 'round-tag' as any, + }, + }, + { + selector: 'edge', + style: { + width: 'mapData(weight, 1, 20, 1, 4)', + 'line-color': 'rgba(150,150,150,0.4)', + 'curve-style': 'bezier', + 'target-arrow-shape': 'none', + label: 'data(label)', + 'font-size': 7, + color: '#888', + }, + }, + { + selector: 'edge[weight > 3]', + style: { + 'line-color': 'rgba(239,68,68,0.4)', + }, + }, + { + selector: ':selected', + style: { + 'border-width': 3, + 'border-color': '#f59e0b', + }, + }, +]; + +export default function KnowledgeGraph() { + const cyRef = useRef(null); + const containerRef = useRef(null); + const [huntList, setHuntList] = useState([]); + const [dsList, setDsList] = useState([]); + const [activeHunt, setActiveHunt] = useState(''); + const [activeDs, setActiveDs] = useState(''); + const [data, setData] = useState(null); + const [loading, setLoading] = useState(false); + const [error, setError] = useState(''); + const [layout, setLayout] = useState<'cola' | 'dagre'>('cola'); + const [selectedNode, setSelectedNode] = useState(null); + + useEffect(() => { + hunts.list(0, 200).then(r => { + setHuntList(r.hunts); + if (r.hunts.length > 0) setActiveHunt(r.hunts[0].id); + }).catch(() => {}); + datasets.list(0, 200).then(r => setDsList(r.datasets)).catch(() => {}); + }, []); + + const fetchData = useCallback(async () => { + if (!activeDs && !activeHunt) return; + setLoading(true); + setError(''); + try { + const r = await analysis.knowledgeGraph({ + dataset_id: activeDs || undefined, + hunt_id: activeHunt || undefined, + }); + setData(r); + } catch (e: any) { setError(e.message); } + setLoading(false); + }, [activeDs, activeHunt]); + + useEffect(() => { fetchData(); }, [fetchData]); + + // Render Cytoscape + useEffect(() => { + if (!data || !containerRef.current) return; + if (data.nodes.length === 0) return; + + if (cyRef.current) cyRef.current.destroy(); + const cy = cytoscape({ + container: containerRef.current, + elements: { nodes: data.nodes, edges: data.edges }, + style: CY_STYLE, + layout: layout === 'cola' + ? { name: 'cola', animate: false, nodeSpacing: 20, edgeLength: 120 } as any + : { name: 'dagre', rankDir: 'LR', nodeSep: 40, edgeSep: 10, rankSep: 80 } as any, + }); + + cy.on('tap', 'node', (e) => { + setSelectedNode(e.target.data()); + }); + cy.on('tap', (e) => { + if (e.target === cy) setSelectedNode(null); + }); + + cyRef.current = cy; + return () => { cy.destroy(); }; + }, [data, layout]); + + return ( + + Knowledge Graph + + + + + Hunt + + + + Dataset + + + + { if (v) setLayout(v); }}> + Force + Hierarchy + + + {data?.stats && ( + <> + + + + + )} + + + + {error && {error}} + {loading && } + + {!loading && data && data.nodes.length > 0 && ( + + + {/* Controls */} + + + cyRef.current?.zoom(cyRef.current.zoom() * 1.2)}> + + + + + cyRef.current?.zoom(cyRef.current.zoom() / 1.2)}> + + + + + cyRef.current?.fit()}> + + + + + + + + {/* Detail panel + Legend */} + + Legend + + {[ + { type: 'host', color: '#3b82f6', shape: 'rect' }, + { type: 'user', color: '#10b981', shape: 'circle' }, + { type: 'ip', color: '#8b5cf6', shape: 'diamond' }, + { type: 'process', color: '#f59e0b', shape: 'hexagon' }, + { type: 'technique', color: '#ef4444', shape: 'tag' }, + ].map(e => ( + + + {e.type} + + ))} + + + {data.stats.entity_counts && ( + <> + Entity Counts + + {Object.entries(data.stats.entity_counts).map(([k, v]) => ( + + {k} + {v} + + ))} + + + )} + + {selectedNode && ( + <> + Selected + + + + {selectedNode.label} + + {selectedNode.tactic && ( + + Tactic: {selectedNode.tactic} + + )} + + + )} + + + )} + + {!loading && data && data.nodes.length === 0 && ( + No entities or techniques found in the selected data. + )} + {!loading && !data && !error && ( + Select a hunt or dataset to build the knowledge graph. + )} + + ); +} diff --git a/frontend/src/components/MitreMatrix.tsx b/frontend/src/components/MitreMatrix.tsx index 46f71f9..c051e81 100644 --- a/frontend/src/components/MitreMatrix.tsx +++ b/frontend/src/components/MitreMatrix.tsx @@ -1,4 +1,5 @@ /** +<<<<<<< HEAD * MitreMatrix Interactive MITRE ATT&CK technique heat map. * Aggregates detected techniques from triage, host profiles, and hypotheses. */ @@ -181,9 +182,243 @@ export default function MitreMatrix() { ))} +======= + * MitreMatrix — ATT&CK heat-map matrix + evidence drill-down. + * Shows tactics as columns, techniques as cells with hit-count heat coloring. + */ + +import React, { useEffect, useState, useCallback } from 'react'; +import { + Box, Typography, Paper, Stack, FormControl, InputLabel, Select, + MenuItem, CircularProgress, Alert, Chip, Tooltip, Dialog, + DialogTitle, DialogContent, DialogActions, Button, Table, + TableBody, TableCell, TableContainer, TableHead, TableRow, + LinearProgress, +} from '@mui/material'; +import { + hunts, datasets, analysis, + type HuntOut, type DatasetSummary, type MitreMapResponse, + type MitreTactic, type MitreTechnique, +} from '../api/client'; + +function heatColor(count: number, max: number): string { + if (count === 0) return 'transparent'; + const ratio = Math.min(count / Math.max(max, 1), 1); + if (ratio > 0.7) return 'rgba(239,68,68,0.7)'; // red + if (ratio > 0.4) return 'rgba(249,115,22,0.6)'; // orange + if (ratio > 0.15) return 'rgba(234,179,8,0.5)'; // yellow + return 'rgba(59,130,246,0.4)'; // blue +} + +export default function MitreMatrix() { + const [huntList, setHuntList] = useState([]); + const [dsList, setDsList] = useState([]); + const [activeHunt, setActiveHunt] = useState(''); + const [activeDs, setActiveDs] = useState(''); + const [data, setData] = useState(null); + const [loading, setLoading] = useState(false); + const [error, setError] = useState(''); + const [selectedTech, setSelectedTech] = useState(null); + + useEffect(() => { + hunts.list(0, 200).then(r => { + setHuntList(r.hunts); + if (r.hunts.length > 0) setActiveHunt(r.hunts[0].id); + }).catch(() => {}); + datasets.list(0, 200).then(r => setDsList(r.datasets)).catch(() => {}); + }, []); + + const fetchData = useCallback(async () => { + if (!activeDs && !activeHunt) return; + setLoading(true); + setError(''); + try { + const r = await analysis.mitreMap({ + dataset_id: activeDs || undefined, + hunt_id: activeHunt || undefined, + }); + setData(r); + } catch (e: any) { setError(e.message); } + setLoading(false); + }, [activeDs, activeHunt]); + + useEffect(() => { fetchData(); }, [fetchData]); + + const maxHits = data ? Math.max(...data.tactics.flatMap(t => t.techniques.map(te => te.count)), 1) : 1; + + return ( + + MITRE ATT&CK Matrix + + + + + Hunt + + + + Dataset + + + {data && ( + <> + + + + + + )} + + + + {error && {error}} + {loading && } + + {/* ATT&CK Matrix Grid */} + {data && !loading && ( + + + {data.tactics.map(tactic => ( + + {/* Tactic header */} + 0 + ? 'rgba(99,102,241,0.2)' + : 'rgba(100,100,100,0.1)', + textAlign: 'center', + borderBottom: '2px solid', + borderColor: tactic.total_hits > 0 ? 'primary.main' : 'divider', + }} + > + + {tactic.name} + + {tactic.total_hits > 0 && ( + + {tactic.total_hits} hits + + )} + + + {/* Technique cells */} + + {tactic.techniques.map(tech => ( + + setSelectedTech(tech)} + sx={{ + p: 0.5, + cursor: 'pointer', + background: heatColor(tech.count, maxHits), + border: '1px solid', + borderColor: 'divider', + '&:hover': { + borderColor: 'primary.main', + transform: 'scale(1.02)', + }, + transition: 'all 0.15s', + }} + > + + {tech.id} + + + {tech.name} + + maxHits * 0.5 ? 'error' : 'primary'} + /> + + + ))} + {tactic.techniques.length === 0 && ( + + No matches + + )} + + + ))} + + + )} + + {!loading && !data && !error && ( + Select a hunt or dataset to map to MITRE ATT&CK. + )} + + {/* Evidence drill-down dialog */} + setSelectedTech(null)} maxWidth="md" fullWidth> + + {selectedTech?.id}: {selectedTech?.name} + + + + + Evidence samples (up to 5 shown) + + + + + + Row + Field + Value + Pattern + + + + {selectedTech?.evidence.map((ev, i) => ( + + {ev.row_index} + + + + {ev.value} + + + + {ev.pattern} + + + ))} + +
+
+
+ + + +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2
); } +<<<<<<< HEAD +======= +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 diff --git a/frontend/src/components/NetworkMap.tsx b/frontend/src/components/NetworkMap.tsx index 2b9d54e..3b41cb7 100644 --- a/frontend/src/components/NetworkMap.tsx +++ b/frontend/src/components/NetworkMap.tsx @@ -1,10 +1,15 @@ /** - * NetworkMap - Host-centric force-directed network graph. + * NetworkMap - interactive hunt-scoped network graph powered by Cytoscape.js. * - * Loads a deduplicated host inventory from the backend, showing one node - * per unique host with hostname, IPs, OS, logged-in users, and network - * connections. No more duplicated IOC nodes. + * Graph model: + * - Host nodes (green) - one per unique hostname, labeled with hostname + local IP + * - Remote IP nodes (blue) - external IPs that hosts connect to + * - Internal IP nodes (cyan) - internal IPs hosts connect to (lateral movement) + * - Domain nodes (yellow) - domains from DNS / proxy / sysmon logs + * - URL nodes (purple) - URLs from browser / proxy logs + * - Edges = observed connection/co-occurrence between a host and a remote entity * +<<<<<<< HEAD * Features: * - Calls /api/network/host-inventory for clean, deduped host data * - HiDPI / Retina canvas rendering @@ -18,50 +23,44 @@ * - AUTO-LOAD: picks most recent hunt on mount * - FULL VIEWPORT canvas: fills available space * - Zero extra npm dependencies +======= + * Layout: cytoscape-cola (constraint-based, non-overlapping) +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 */ -import React, { useEffect, useState, useRef, useCallback, useMemo } from 'react'; +import React, { useEffect, useState, useRef, useCallback } from 'react'; import { - Box, Typography, Paper, Stack, Alert, Chip, TextField, + Box, Typography, Paper, Stack, Alert, Chip, Button, TextField, LinearProgress, FormControl, InputLabel, Select, MenuItem, - Popover, Divider, IconButton, Tooltip, Fade, useTheme, + Divider, IconButton, } from '@mui/material'; import RefreshIcon from '@mui/icons-material/Refresh'; -import CloseIcon from '@mui/icons-material/Close'; import ZoomInIcon from '@mui/icons-material/ZoomIn'; import ZoomOutIcon from '@mui/icons-material/ZoomOut'; import CenterFocusStrongIcon from '@mui/icons-material/CenterFocusStrong'; -import HubIcon from '@mui/icons-material/Hub'; -import SearchIcon from '@mui/icons-material/Search'; -import ComputerIcon from '@mui/icons-material/Computer'; -import { - hunts, network, - type Hunt, type InventoryHost, type InventoryConnection, type InventoryStats, -} from '../api/client'; +import cytoscape, { type Core, type ElementDefinition, type StylesheetStyle } from 'cytoscape'; +import cola from 'cytoscape-cola'; +import { datasets, hunts, type Hunt, type DatasetSummary } from '../api/client'; -// == Graph primitives ===================================================== +// Register cola layout once +try { cytoscape.use(cola); } catch { /* already registered */ } -type NodeType = 'host' | 'external_ip'; +// -- Types -- -interface GNode { - id: string; label: string; x: number; y: number; - vx: number; vy: number; radius: number; color: string; count: number; - pinned?: boolean; - meta: { - type: NodeType; - hostname: string; - fqdn: string; - client_id: string; - ips: string[]; - os: string; - users: string[]; - datasets: string[]; - row_count: number; - }; +type NodeKind = 'host' | 'internal_ip' | 'external_ip' | 'domain' | 'url'; + +interface HostInfo { + hostname: string; + localIp: string; + os: string; + datasets: Set; + remoteIps: Map; // remoteIp -> weight + domains: Map; + urls: Map; + internalIps: Map; // lateral connections to other internal IPs } -interface GEdge { source: string; target: string; weight: number } -interface Graph { nodes: GNode[]; edges: GEdge[] } +<<<<<<< HEAD type LabelMode = 'all' | 'highlight' | 'none'; const TYPE_COLORS: Record = { @@ -111,9 +110,151 @@ function buildGraphFromInventory( ips: h.ips, os: h.os, users: h.users, datasets: h.datasets, row_count: h.row_count, }, - }); +======= +const KIND_COLORS: Record = { + host: '#22c55e', + internal_ip: '#06b6d4', + external_ip: '#3b82f6', + domain: '#eab308', + url: '#8b5cf6', +}; + +const _JUNK = new Set(['', '-', '0.0.0.0', '::', '0', '127.0.0.1', '::1', 'localhost', 'unknown', 'n/a', 'none']); +function clean(v: any): string { + const s = (v ?? '').toString().trim(); + return _JUNK.has(s.toLowerCase()) ? '' : s; +} + +function isInternalIp(ip: string): boolean { + return /^(10\.|172\.(1[6-9]|2\d|3[01])\.|192\.168\.)/.test(ip); +} + +// -- Build graph data from API rows -- + +interface RowBatch { + rows: Record[]; + ds: DatasetSummary; +} + +function findColumns(ds: DatasetSummary) { + const norm = ds.normalized_columns || {}; + const schema = ds.column_schema || {}; + const rawCols = Object.keys(schema).length > 0 ? Object.keys(schema) : Object.keys(norm); + + const hostCols: string[] = []; + const srcIpCols: string[] = []; + const dstIpCols: string[] = []; + const domainCols: string[] = []; + const urlCols: string[] = []; + const osCols: string[] = []; + + for (const raw of rawCols) { + const canon = norm[raw] || ''; + const lc = raw.toLowerCase(); + if (canon === 'hostname' || /^(hostname|host|fqdn|computer_?name|system_?name)$/i.test(lc)) + hostCols.push(raw); + if (canon === 'src_ip' || /^(source_?ip|src_?ip|laddr\.?ip|local_?address|sourceip)$/i.test(lc)) + srcIpCols.push(raw); + if (canon === 'dst_ip' || /^(dest_?ip|dst_?ip|raddr\.?ip|remote_?address|destination_?ip|destinationip)$/i.test(lc)) + dstIpCols.push(raw); + if (canon === 'ip_address' || /^(ip_?address|ip|sourceaddress)$/i.test(lc)) + srcIpCols.push(raw); // generic IP -> treat as source + if (canon === 'domain' || /^(domain|dns_?name|query_?name|queriedname|destinationhostname)$/i.test(lc)) + domainCols.push(raw); + if (canon === 'url' || /^(url|uri|request_?url)$/i.test(lc)) + urlCols.push(raw); + if (canon === 'os' || /^(os|operating_?system)$/i.test(lc)) + osCols.push(raw); + } + return { hostCols, srcIpCols, dstIpCols, domainCols, urlCols, osCols }; +} + +function buildGraphData(batches: RowBatch[]) { + // Collect host-centric data + const hostMap = new Map(); + + // Also build a map of IP -> hostname for resolving internal connections + const ipToHost = new Map(); + + for (const { rows, ds } of batches) { + const cols = findColumns(ds); + if (cols.hostCols.length === 0 && cols.srcIpCols.length === 0) continue; + + for (const row of rows) { + // Resolve hostname + let hostname = ''; + for (const c of cols.hostCols) { hostname = clean(row[c]); if (hostname) break; } + + // Resolve source IP + let srcIp = ''; + for (const c of cols.srcIpCols) { srcIp = clean(row[c]); if (srcIp) break; } + + // If no hostname but have srcIp, use IP as hostname + if (!hostname && srcIp) hostname = srcIp; + if (!hostname) continue; + + // Get or create host + let host = hostMap.get(hostname); + if (!host) { + host = { + hostname, localIp: srcIp || '', os: '', + datasets: new Set(), remoteIps: new Map(), + domains: new Map(), urls: new Map(), internalIps: new Map(), + }; + hostMap.set(hostname, host); + } + host.datasets.add(ds.name); + if (srcIp && !host.localIp) host.localIp = srcIp; + + // Register IP->hostname mapping + if (srcIp && isInternalIp(srcIp)) ipToHost.set(srcIp, hostname); + + // OS + for (const c of cols.osCols) { + const os = clean(row[c]); + if (os) host.os = os; + } + + // Destination IPs + for (const c of cols.dstIpCols) { + const dstIp = clean(row[c]); + if (!dstIp) continue; + if (dstIp === srcIp) continue; // skip self + if (isInternalIp(dstIp)) { + host.internalIps.set(dstIp, (host.internalIps.get(dstIp) || 0) + 1); + } else { + host.remoteIps.set(dstIp, (host.remoteIps.get(dstIp) || 0) + 1); + } + } + + // Domains + for (const c of cols.domainCols) { + const d = clean(row[c]); + if (d) host.domains.set(d, (host.domains.get(d) || 0) + 1); + } + + // URLs + for (const c of cols.urlCols) { + const u = clean(row[c]); + if (u) host.urls.set(u, (host.urls.get(u) || 0) + 1); + } + } } + // Now build Cytoscape elements + const elements: ElementDefinition[] = []; + const addedNodes = new Set(); + + const addNode = (id: string, label: string, kind: NodeKind, extra: Record = {}) => { + if (addedNodes.has(id)) return; + addedNodes.add(id); + elements.push({ + data: { id, label, kind, ...extra }, +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 + }); + }; + +<<<<<<< HEAD const extIpCounts = new Map(); const extIpLabel = new Map(); for (const c of connections) { @@ -154,12 +295,31 @@ function buildGraphFromInventory( edges.push({ source: c.source, target: c.target, weight: c.count }); } } +======= + const edgeSet = new Set(); + const addEdge = (src: string, tgt: string, weight: number, edgeKind: string) => { + const key = `${src}->${tgt}`; + if (edgeSet.has(key)) return; + edgeSet.add(key); + elements.push({ + data: { source: src, target: tgt, weight, edgeKind }, + }); + }; +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 - return { nodes: [...nodeMap.values()], edges }; -} + // Cap: top 200 hosts by activity level + const MAX_HOSTS = 200; + const sortedHosts = [...hostMap.values()] + .sort((a, b) => { + const aScore = a.remoteIps.size + a.domains.size + a.urls.size + a.internalIps.size; + const bScore = b.remoteIps.size + b.domains.size + b.urls.size + b.internalIps.size; + return bScore - aScore; + }) + .slice(0, MAX_HOSTS); -// == Simulation =========================================================== + const keptHostnames = new Set(sortedHosts.map(h => h.hostname)); +<<<<<<< HEAD function simulationStep(graph: Graph, cx: number, cy: number, alpha: number) { const { nodes, edges } = graph; const nodeMap = new Map(nodes.map(n => [n.id, n])); @@ -219,14 +379,29 @@ function simulationStep(graph: Graph, cx: number, cy: number, alpha: number) { n.x += n.vx; n.y += n.vy; } } +======= + // Per-host: cap connections to top N by frequency + const MAX_REMOTE_PER_HOST = 15; + const MAX_DOMAIN_PER_HOST = 10; + const MAX_URL_PER_HOST = 5; -function simulate(graph: Graph, cx: number, cy: number, steps = 150) { - for (let i = 0; i < steps; i++) { - const alpha = 1 - i / steps; - simulationStep(graph, cx, cy, Math.max(0.05, alpha)); - } -} + const stats = { hosts: 0, internalIps: 0, externalIps: 0, domains: 0, urls: 0, edges: 0 }; +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 + for (const host of sortedHosts) { + const hostId = `host::${host.hostname}`; + addNode(hostId, host.localIp + ? `${host.hostname}\n${host.localIp}` + : host.hostname, 'host', { + hostname: host.hostname, + localIp: host.localIp, + os: host.os, + dsNames: [...host.datasets], + connectionCount: host.remoteIps.size + host.internalIps.size + host.domains.size + host.urls.size, + }); + stats.hosts++; + +<<<<<<< HEAD // == Viewport ============================================================= interface Viewport { x: number; y: number; scale: number } @@ -329,34 +504,51 @@ function drawNodes( ctx.beginPath(); ctx.arc(n.x, n.y, n.radius + 4, 0, Math.PI * 2); ctx.fillStyle = 'rgba(0,0,0,0)'; ctx.fill(); ctx.restore(); +======= + // Remote IPs - top N + const topRemote = [...host.remoteIps.entries()] + .sort((a, b) => b[1] - a[1]) + .slice(0, MAX_REMOTE_PER_HOST); + for (const [ip, w] of topRemote) { + const nid = `extip::${ip}`; + addNode(nid, ip, 'external_ip'); + addEdge(hostId, nid, w, 'remote'); + stats.externalIps++; + stats.edges++; +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 } - const grad = ctx.createRadialGradient( - n.x - n.radius * 0.3, n.y - n.radius * 0.3, n.radius * 0.1, n.x, n.y, n.radius, - ); - if (isHighlight && !isDim) { - grad.addColorStop(0, '#ffffff'); - grad.addColorStop(0.4, n.color); - grad.addColorStop(1, n.color); - } else { - grad.addColorStop(0, n.color + 'cc'); - grad.addColorStop(0.5, n.color); - grad.addColorStop(1, n.color + '88'); + // Internal IP connections (lateral movement) - resolve to host if possible + const topInternal = [...host.internalIps.entries()] + .sort((a, b) => b[1] - a[1]) + .slice(0, MAX_REMOTE_PER_HOST); + for (const [ip, w] of topInternal) { + const remoteHostname = ipToHost.get(ip); + if (remoteHostname && keptHostnames.has(remoteHostname) && remoteHostname !== host.hostname) { + // Link host-to-host (lateral) + addEdge(hostId, `host::${remoteHostname}`, w, 'lateral'); + } else { + const nid = `intip::${ip}`; + addNode(nid, ip, 'internal_ip'); + addEdge(hostId, nid, w, 'internal'); + stats.internalIps++; + } + stats.edges++; } - ctx.beginPath(); ctx.arc(n.x, n.y, n.radius, 0, Math.PI * 2); - ctx.fillStyle = grad; ctx.fill(); - ctx.strokeStyle = isHighlight ? '#ffffff' : (n.color + '55'); - ctx.lineWidth = isHighlight ? 2 : 1; - ctx.stroke(); - if (n.pinned) { - ctx.beginPath(); ctx.arc(n.x, n.y, 2.5, 0, Math.PI * 2); - ctx.fillStyle = '#ffffff'; ctx.fill(); + // Domains - top N + const topDomains = [...host.domains.entries()] + .sort((a, b) => b[1] - a[1]) + .slice(0, MAX_DOMAIN_PER_HOST); + for (const [dom, w] of topDomains) { + const nid = `domain::${dom}`; + addNode(nid, dom, 'domain'); + addEdge(hostId, nid, w, 'dns'); + stats.domains++; + stats.edges++; } - ctx.restore(); - } -} +<<<<<<< HEAD function drawLabels( ctx: CanvasRenderingContext2D, graph: Graph, hovered: string | null, selected: string | null, @@ -458,10 +650,30 @@ function drawGraph( drawNodes(ctx, graph, hovered, selected, search, matchSet); drawLabels(ctx, graph, hovered, selected, search, matchSet, vp, simplify, labelMode); ctx.restore(); +======= + // URLs - top N + const topUrls = [...host.urls.entries()] + .sort((a, b) => b[1] - a[1]) + .slice(0, MAX_URL_PER_HOST); + for (const [url, w] of topUrls) { + // Shorten URL label + let label = url; + try { const u = new URL(url.startsWith('http') ? url : `https://${url}`); label = u.hostname + u.pathname.slice(0, 30); } catch {} + const nid = `url::${url}`; + addNode(nid, label, 'url'); + addEdge(hostId, nid, w, 'url'); + stats.urls++; + stats.edges++; + } + } + + return { elements, stats, hostCount: hostMap.size }; +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 } -// == Hit-test ============================================================= +// -- Cytoscape styles -- +<<<<<<< HEAD function isPointOnNodeLabel(node: GNode, wx: number, wy: number, vp: Viewport): boolean { const fontSize = Math.max(9, Math.round(12 / vp.scale)); const approxCharW = Math.max(5, fontSize * 0.58); @@ -534,21 +746,177 @@ function fitGraphToCanvas(graph: Graph, canvasW: number, canvasH: number): Viewp } // == Component ============================================================= +======= +const CY_STYLES: StylesheetStyle[] = [ + { + selector: 'node', + style: { + label: 'data(label)', + 'text-valign': 'bottom' as any, + 'text-halign': 'center' as any, + 'font-size': '9px', + color: '#94a3b8', + 'text-margin-y': 4, + 'background-opacity': 0.9, + 'border-width': 1, + 'border-color': '#1e293b', + 'text-wrap': 'wrap' as any, + 'text-max-width': '120px', + }, + }, + { + selector: 'node[kind="host"]', + style: { + 'background-color': KIND_COLORS.host, + shape: 'round-rectangle' as any, + width: 140, + height: 60, + 'font-size': '14px', + 'font-weight': 'bold' as any, + color: '#e2e8f0', + 'text-valign': 'center' as any, + 'text-halign': 'center' as any, + 'text-margin-y': 0, + 'text-wrap': 'wrap' as any, + 'text-max-width': '130px', + 'padding': '8px', + } as any, + }, + { + selector: 'node[kind="external_ip"]', + style: { + 'background-color': KIND_COLORS.external_ip, + width: 50, + height: 50, + }, + }, + { + selector: 'node[kind="internal_ip"]', + style: { + 'background-color': KIND_COLORS.internal_ip, + width: 50, + height: 50, + }, + }, + { + selector: 'node[kind="domain"]', + style: { + 'background-color': KIND_COLORS.domain, + shape: 'diamond' as any, + width: 55, + height: 55, + }, + }, + { + selector: 'node[kind="url"]', + style: { + 'background-color': KIND_COLORS.url, + shape: 'triangle' as any, + width: 45, + height: 45, + 'font-size': '8px', + }, + }, + { + selector: 'edge', + style: { + width: 2, + 'line-color': '#334155', + 'curve-style': 'bezier' as any, + opacity: 0.5, + } as any, + }, + { + selector: 'edge[edgeKind="lateral"]', + style: { + 'line-color': '#f59e0b', + 'line-style': 'dashed' as any, + width: 4, + opacity: 0.8, + } as any, + }, + { + selector: 'edge[edgeKind="remote"]', + style: { + 'line-color': '#3b82f6', + opacity: 0.4, + } as any, + }, + { + selector: 'edge[edgeKind="dns"]', + style: { + 'line-color': '#eab308', + opacity: 0.35, + } as any, + }, + { + selector: 'node:selected', + style: { + 'border-width': 3, + 'border-color': '#f1f5f9', + 'background-opacity': 1, + }, + }, + { + selector: 'node.highlighted', + style: { + 'border-width': 3, + 'border-color': '#60a5fa', + 'font-size': '11px', + color: '#f1f5f9', + 'z-index': 999, + } as any, + }, + { + selector: 'edge.highlighted', + style: { + width: 2.5, + opacity: 0.9, + 'z-index': 998, + } as any, + }, + { + selector: 'node.dimmed', + style: { + opacity: 0.12, + }, + }, + { + selector: 'edge.dimmed', + style: { + opacity: 0.05, + }, + }, +]; + +// -- Component -- + +interface NodeDetail { + id: string; + label: string; + kind: NodeKind; + hostname?: string; + localIp?: string; + os?: string; + dsNames?: string[]; + connectionCount?: number; + neighbors: { id: string; label: string; kind: NodeKind }[]; +} +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 export default function NetworkMap() { - const theme = useTheme(); - const [huntList, setHuntList] = useState([]); +<<<<<<< HEAD const [selectedHuntId, setSelectedHuntId] = useState(lastSelectedHuntId); +======= + const [selectedHuntId, setSelectedHuntId] = useState(''); +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 const [loading, setLoading] = useState(false); const [progress, setProgress] = useState(''); const [error, setError] = useState(''); - const [graph, setGraph] = useState(null); - const [stats, setStats] = useState(null); - const [hovered, setHovered] = useState(null); - const [selectedNode, setSelectedNode] = useState(null); const [search, setSearch] = useState(''); +<<<<<<< HEAD const [labelMode, setLabelMode] = useState('highlight'); const canvasRef = useRef(null); @@ -756,13 +1124,209 @@ export default function NetworkMap() { setStats(cached.stats); setError(''); simAlphaRef.current = 0; +======= + const [detail, setDetail] = useState(null); + const [stats, setStats] = useState<{ hosts: number; internalIps: number; externalIps: number; domains: number; urls: number; edges: number } | null>(null); + const [dsCount, setDsCount] = useState(0); + const [totalRows, setTotalRows] = useState(0); + const [layoutRunning, setLayoutRunning] = useState(false); + const [hiddenKinds, setHiddenKinds] = useState>(new Set()); + + const containerRef = useRef(null); + const cyRef = useRef(null); + + // Load hunts + useEffect(() => { + hunts.list(0, 200).then(r => setHuntList(r.hunts)).catch(() => {}); + }, []); + + // Initialize cytoscape + useEffect(() => { + if (!containerRef.current) return; + const container = containerRef.current; + const cy = cytoscape({ + container, + elements: [], + style: CY_STYLES, + layout: { name: 'preset' }, + minZoom: 0.05, + maxZoom: 5, + wheelSensitivity: 0.3, + }); + + // Expose for debugging + (window as any).__cy = cy; + + // Keep Cytoscape in sync with container size at all times + const ro = new ResizeObserver(() => { cy.resize(); }); + ro.observe(container); + // Also force an initial resize after a frame + requestAnimationFrame(() => { cy.resize(); }); + + // Single unified tap handler — avoids any race between two handlers + // Helper: select and show detail for a node + const selectNode = (node: any) => { + const data = node.data(); + const neighbors = node.neighborhood('node').map((n: any) => ({ + id: n.id(), + label: n.data('label'), + kind: n.data('kind'), + })); + setDetail({ + id: node.id(), + label: data.label, + kind: data.kind, + hostname: data.hostname, + localIp: data.localIp, + os: data.os, + dsNames: data.dsNames, + connectionCount: data.connectionCount, + neighbors, + }); + cy.elements().removeClass('highlighted dimmed'); + const connected = node.closedNeighborhood(); + connected.addClass('highlighted'); + cy.elements().difference(connected).addClass('dimmed'); + }; + + cy.on('tap', (evt: any) => { + if (evt.target === cy) { + // Tapped background — try to find nearest node within 30 rendered px + const pos = evt.renderedPosition || evt.position; + if (pos) { + let bestNode: any = null; + let bestDist = 30; // max snap distance in rendered pixels + cy.nodes(':visible').forEach((n: any) => { + const rp = n.renderedPosition(); + const dx = rp.x - pos.x; + const dy = rp.y - pos.y; + const dist = Math.sqrt(dx * dx + dy * dy); + if (dist < bestDist) { + bestDist = dist; + bestNode = n; + } + }); + if (bestNode) { + selectNode(bestNode); + return; + } + } + setDetail(null); + cy.elements().removeClass('highlighted dimmed'); +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 return; } + if (evt.target.isNode && evt.target.isNode()) { + selectNode(evt.target); + } + }); + cyRef.current = cy; + return () => { ro.disconnect(); cy.destroy(); cyRef.current = null; }; + }, []); + + // Search effect + useEffect(() => { + const cy = cyRef.current; + if (!cy || cy.elements().length === 0) return; + cy.elements().removeClass('highlighted dimmed'); + if (!search) return; + const lc = search.toLowerCase(); + const matched = cy.nodes().filter((n: any) => n.data('label').toLowerCase().includes(lc)); + if (matched.length > 0) { + const connected = matched.closedNeighborhood(); + connected.addClass('highlighted'); + cy.elements().difference(connected).addClass('dimmed'); + cy.animate({ fit: { eles: matched, padding: 80 } } as any, { duration: 400 }); + } + }, [search]); + + // Load graph + const loadGraph = useCallback(async (huntId: string) => { + if (!huntId || !cyRef.current) return; + const cy = cyRef.current; + setLoading(true); setError(''); setDetail(null); setStats(null); + cy.elements().remove(); + // Ensure Cytoscape knows the container dimensions (fixes click detection + // when container was previously hidden or resized) + cy.resize(); + + try { + setProgress('Fetching datasets...'); + const dsRes = await datasets.list(0, 500, huntId); + const dsList = dsRes.datasets; + setDsCount(dsList.length); + if (dsList.length === 0) { + setError('This hunt has no datasets.'); setLoading(false); setProgress(''); return; + } + + const batches: RowBatch[] = []; + let rowTotal = 0; + for (let i = 0; i < dsList.length; i++) { + const ds = dsList[i]; + setProgress(`Loading ${ds.name} (${i + 1}/${dsList.length})...`); + try { + const detail = await datasets.get(ds.id); + const r = await datasets.rows(ds.id, 0, 5000); + batches.push({ rows: r.rows, ds: detail }); + rowTotal += r.rows.length; + } catch { /* skip */ } + } + setTotalRows(rowTotal); + + if (batches.length === 0) { + setError('No datasets could be loaded.'); setLoading(false); setProgress(''); return; + } + + setProgress('Building graph model...'); + await new Promise(r => setTimeout(r, 30)); + const { elements, stats: s } = buildGraphData(batches); + setStats(s); + + if (elements.length === 0) { + setError('No network data found.'); setLoading(false); setProgress(''); return; + } + + setProgress(`Laying out ${s.hosts} hosts, ${s.edges} edges...`); + cy.add(elements); + cy.resize(); // Ensure hit-testing coordinates are in sync + + // Run layout + setLayoutRunning(true); + const layout = cy.layout({ + name: 'cola', + animate: true, + maxSimulationTime: 4000, + nodeSpacing: 25, + edgeLength: (edge: any) => { + const kind = edge.data('edgeKind'); + if (kind === 'lateral') return 100; + if (kind === 'remote') return 180; + return 150; + }, + fit: true, + padding: 40, + randomize: true, + convergenceThreshold: 0.01, + } as any); + + layout.on('layoutstop', () => { + setLayoutRunning(false); + cy.resize(); + cy.fit(undefined, 50); + }); + layout.run(); + +<<<<<<< HEAD try { // Ask backend if inventory is ready, building, or cold const st = await network.inventoryStatus(selectedHuntId); if (cancelled) return; +======= + } catch (e: any) { setError(e.message); } + setLoading(false); setProgress(''); + }, []); +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 if (st.status === 'ready') { // Instant load from backend cache @@ -795,6 +1359,7 @@ export default function NetworkMap() { return () => { cancelled = true; }; }, [selectedHuntId, loadGraph]); +<<<<<<< HEAD // Auto-fit viewport when graph loads useEffect(() => { if (graph) { @@ -934,25 +1499,34 @@ export default function NetworkMap() { const closePopover = () => { setSelectedNode(null); setPopoverAnchor(null); }; +======= +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 const zoomBy = useCallback((factor: number) => { - const vp = vpRef.current; - const cw = canvasSize.w, ch = canvasSize.h; - const newScale = Math.min(MAX_ZOOM, Math.max(MIN_ZOOM, vp.scale * factor)); - vp.x = cw / 2 - (cw / 2 - vp.x) * (newScale / vp.scale); - vp.y = ch / 2 - (ch / 2 - vp.y) * (newScale / vp.scale); - vp.scale = newScale; setVpScale(newScale); redraw(); - }, [canvasSize, redraw]); + const cy = cyRef.current; + if (cy) cy.zoom({ level: cy.zoom() * factor, renderedPosition: { x: cy.width() / 2, y: cy.height() / 2 } }); + }, []); const fitView = useCallback(() => { +<<<<<<< HEAD if (!graph) return; const vp = fitGraphToCanvas(graph, canvasSize.w, canvasSize.h); vpRef.current = vp; setVpScale(vp.scale); redraw(); }, [graph, canvasSize, redraw]); +======= + cyRef.current?.fit(undefined, 50); + }, []); +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 - const connectionCount = selectedNode && graph - ? graph.edges.filter(e => e.source === selectedNode.id || e.target === selectedNode.id).length - : 0; + // Toggle node kind visibility + const toggleKind = useCallback((kind: NodeKind) => { + setHiddenKinds(prev => { + const next = new Set(prev); + if (next.has(kind)) next.delete(kind); else next.add(kind); + return next; + }); + }, []); +<<<<<<< HEAD const nodeById = useMemo(() => { const m = new Map(); if (!graph) return m; @@ -974,10 +1548,47 @@ export default function NetworkMap() { } return neighbors.sort((a, b) => b.weight - a.weight).slice(0, 12); }, [selectedNode, graph, nodeById]); +======= + // Apply hidden kinds to cytoscape + useEffect(() => { + const cy = cyRef.current; + if (!cy) return; + const allKinds: NodeKind[] = ['host', 'internal_ip', 'external_ip', 'domain', 'url']; + for (const k of allKinds) { + const sel = cy.nodes(`[kind="${k}"]`); + if (hiddenKinds.has(k)) { + sel.style('display', 'none'); + // Also hide edges connected only to hidden nodes + sel.connectedEdges().forEach((edge: any) => { + const srcKind = edge.source().data('kind'); + const tgtKind = edge.target().data('kind'); + if (hiddenKinds.has(srcKind) || hiddenKinds.has(tgtKind)) { + edge.style('display', 'none'); + } + }); + } else { + sel.style('display', 'element'); + sel.connectedEdges().forEach((edge: any) => { + const srcKind = edge.source().data('kind'); + const tgtKind = edge.target().data('kind'); + if (!hiddenKinds.has(srcKind) && !hiddenKinds.has(tgtKind)) { + edge.style('display', 'element'); + } + }); + } + } + }, [hiddenKinds]); +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 - const hostCount = graph ? graph.nodes.filter(n => n.meta.type === 'host').length : 0; - const extCount = graph ? graph.nodes.filter(n => n.meta.type === 'external_ip').length : 0; + // Resize Cytoscape when the detail panel opens/closes (changes flex width) + useEffect(() => { + const cy = cyRef.current; + if (!cy) return; + const timer = setTimeout(() => { cy.resize(); }, 50); + return () => clearTimeout(timer); + }, [detail]); +<<<<<<< HEAD const getCursor = () => { if (dragNode.current) return 'grabbing'; if (isPanning.current) return 'grabbing'; @@ -1256,10 +1867,161 @@ export default function NetworkMap() { border: '1px solid ' + TYPE_COLORS[selectedNode.meta.type] + '44', }} /> - - - +======= + return ( + + {/* Header */} + + Network Map + + + Hunt + + + setSearch(e.target.value)} sx={{ width: 200 }} /> + + + + {/* Loading */} + {(loading || layoutRunning) && ( + + + {layoutRunning ? 'Running layout...' : progress} + + + + )} + {error && {error}} + + {/* Stats bar */} + {stats && ( + + + + + toggleKind('host')} + sx={{ bgcolor: hiddenKinds.has('host') ? 'transparent' : KIND_COLORS.host, color: '#fff', fontWeight: 600, + border: hiddenKinds.has('host') ? `2px solid ${KIND_COLORS.host}` : 'none', opacity: hiddenKinds.has('host') ? 0.5 : 1, cursor: 'pointer' }} /> + toggleKind('internal_ip')} + sx={{ bgcolor: hiddenKinds.has('internal_ip') ? 'transparent' : KIND_COLORS.internal_ip, color: '#fff', fontWeight: 600, + border: hiddenKinds.has('internal_ip') ? `2px solid ${KIND_COLORS.internal_ip}` : 'none', opacity: hiddenKinds.has('internal_ip') ? 0.5 : 1, cursor: 'pointer' }} /> + toggleKind('external_ip')} + sx={{ bgcolor: hiddenKinds.has('external_ip') ? 'transparent' : KIND_COLORS.external_ip, color: '#fff', fontWeight: 600, + border: hiddenKinds.has('external_ip') ? `2px solid ${KIND_COLORS.external_ip}` : 'none', opacity: hiddenKinds.has('external_ip') ? 0.5 : 1, cursor: 'pointer' }} /> + toggleKind('domain')} + sx={{ bgcolor: hiddenKinds.has('domain') ? 'transparent' : KIND_COLORS.domain, color: hiddenKinds.has('domain') ? '#fff' : '#000', fontWeight: 600, + border: hiddenKinds.has('domain') ? `2px solid ${KIND_COLORS.domain}` : 'none', opacity: hiddenKinds.has('domain') ? 0.5 : 1, cursor: 'pointer' }} /> + toggleKind('url')} + sx={{ bgcolor: hiddenKinds.has('url') ? 'transparent' : KIND_COLORS.url, color: '#fff', fontWeight: 600, + border: hiddenKinds.has('url') ? `2px solid ${KIND_COLORS.url}` : 'none', opacity: hiddenKinds.has('url') ? 0.5 : 1, cursor: 'pointer' }} /> + + + )} + + {/* Graph container + detail panel side-by-side */} + + {/* Cytoscape canvas */} + + + {/* Zoom controls */} + + zoomBy(1.4)} aria-label="Zoom in" + sx={{ bgcolor: 'rgba(30,41,59,0.9)', color: '#f1f5f9', '&:hover': { bgcolor: 'rgba(51,65,85,0.95)' } }}> + + + zoomBy(1 / 1.4)} aria-label="Zoom out" + sx={{ bgcolor: 'rgba(30,41,59,0.9)', color: '#f1f5f9', '&:hover': { bgcolor: 'rgba(51,65,85,0.95)' } }}> + + + + + + + + {/* Legend */} + + {([ + ['Host', KIND_COLORS.host, String.fromCharCode(9632)], + ['Internal IP', KIND_COLORS.internal_ip, String.fromCharCode(9679)], + ['External IP', KIND_COLORS.external_ip, String.fromCharCode(9679)], + ['Domain', KIND_COLORS.domain, String.fromCharCode(9670)], + ['URL', KIND_COLORS.url, String.fromCharCode(9650)], + ['Lateral', '#f59e0b', '- -'], + ] as [string, string, string][]).map(([label, color, icon]) => ( + + {icon} {label} + + ))} + + + + {/* Detail panel */} + {detail && ( + + + + { setDetail(null); cyRef.current?.elements().removeClass('highlighted dimmed'); }}> + X + + + + + {detail.hostname || detail.label} + + + {detail.localIp && ( + <> + IP Address + {detail.localIp} + + )} + + {detail.os && ( + <> + Operating System + {detail.os} + + )} + + {detail.connectionCount != null && ( + <> + Total Connections + {detail.connectionCount} + + )} + + {detail.dsNames && detail.dsNames.length > 0 && ( + + Seen in datasets + + {detail.dsNames.map(d => )} +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 + + + )} + +<<<<<<< HEAD @@ -1369,9 +2131,36 @@ export default function NetworkMap() { )} +======= + {detail.neighbors.length > 0 && ( + <> + + + Connections ({detail.neighbors.length}) + + + {detail.neighbors.slice(0, 50).map(n => ( + + + + {n.label.split('\n')[0]} + + + ))} + {detail.neighbors.length > 50 && ( + + ...and {detail.neighbors.length - 50} more + + )} + + + )} +
+>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 )} - + +<<<<<<< HEAD {/* Empty states - also fill remaining space */} {!selectedHuntId && !loading && ( No host data to display. Upload datasets with host-identifying columns (ClientId, Fqdn, Hostname). +======= + {/* Empty state */} + {!selectedHuntId && !loading && ( + + + Select a hunt to visualize its network + + + Choose a hunt from the dropdown above. The map shows hosts as green rectangles + connected to external IPs (blue), internal IPs (cyan), domains (yellow), and URLs (purple). + Lateral connections between hosts are shown as dashed amber lines. +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 )} ); -} \ No newline at end of file +} diff --git a/frontend/src/components/NetworkPicture.tsx b/frontend/src/components/NetworkPicture.tsx new file mode 100644 index 0000000..b2f00b5 --- /dev/null +++ b/frontend/src/components/NetworkPicture.tsx @@ -0,0 +1,403 @@ +/** + * NetworkPicture — deduplicated host inventory view. + * + * Select a hunt → server scans all datasets, groups by hostname, + * returns one row per unique host with IPs, users, OS, MAC, ports. + * No duplicates — sets handle dedup. All unique values shown. + */ + +import React, { useEffect, useState, useMemo, useCallback } from 'react'; +import { + Box, Typography, Paper, Stack, Alert, Chip, TextField, Tooltip, + LinearProgress, FormControl, InputLabel, Select, MenuItem, + Table, TableBody, TableCell, TableContainer, TableHead, TableRow, + TableSortLabel, Collapse, IconButton, +} from '@mui/material'; +import RefreshIcon from '@mui/icons-material/Refresh'; +import ExpandMoreIcon from '@mui/icons-material/ExpandMore'; +import ExpandLessIcon from '@mui/icons-material/ExpandLess'; +import ComputerIcon from '@mui/icons-material/Computer'; +import RouterIcon from '@mui/icons-material/Router'; +import PeopleIcon from '@mui/icons-material/People'; +import DnsIcon from '@mui/icons-material/Dns'; +import { + hunts, network, + type Hunt, type HostEntry, type PictureSummary, +} from '../api/client'; + +// ── Colour palette (matches NetworkMap) ────────────────────────────── + +const CHIP_COLORS = { + ip: '#3b82f6', + user: '#22c55e', + os: '#eab308', + mac: '#8b5cf6', + port: '#f43f5e', + proto: '#06b6d4', +}; + +// ── Collapsible chip list — show first N, expand for all ───────────── + +function ChipList({ items, color, max = 5 }: { items: string[]; color: string; max?: number }) { + const [expanded, setExpanded] = useState(false); + if (items.length === 0) return ; + const show = expanded ? items : items.slice(0, max); + const more = items.length - max; + return ( + + {show.map(v => ( + + ))} + {more > 0 && !expanded && ( + setExpanded(true)} + sx={{ + bgcolor: color, color: '#fff', fontSize: '0.7rem', height: 22, + cursor: 'pointer', '&:hover': { opacity: 0.85 }, + }} + /> + )} + {expanded && more > 0 && ( + setExpanded(false)} + sx={{ + fontSize: '0.7rem', height: 22, cursor: 'pointer', + '&:hover': { opacity: 0.85 }, + }} + /> + )} + + ); +} + +// ── Stat card ──────────────────────────────────────────────────────── + +function StatCard({ label, value, icon }: { label: string; value: number | string; icon: React.ReactNode }) { + return ( + + + {icon} + {value} + + {label} + + ); +} + +// ── Sort helpers ───────────────────────────────────────────────────── + +type SortKey = 'hostname' | 'ips' | 'users' | 'connection_count'; +type SortDir = 'asc' | 'desc'; + +function sortHosts(hosts: HostEntry[], key: SortKey, dir: SortDir): HostEntry[] { + const cmp = (a: HostEntry, b: HostEntry): number => { + switch (key) { + case 'hostname': return a.hostname.localeCompare(b.hostname); + case 'ips': return a.ips.length - b.ips.length; + case 'users': return a.users.length - b.users.length; + case 'connection_count': return a.connection_count - b.connection_count; + default: return 0; + } + }; + const sorted = [...hosts].sort(cmp); + return dir === 'desc' ? sorted.reverse() : sorted; +} + +// ── Expanded row detail panel ──────────────────────────────────────── + +function HostDetail({ host }: { host: HostEntry }) { + return ( + + + {host.remote_targets.length > 0 && ( + + Remote Targets ({host.remote_targets.length}) + + + )} + {host.open_ports.length > 0 && ( + + All Open Ports ({host.open_ports.length}) + + + )} + {host.protocols.length > 0 && ( + + Protocols + + + )} + {host.mac_addresses.length > 0 && ( + + MAC Addresses + + + )} + + Datasets + + {host.datasets.join(', ') || '—'} + + + {(host.first_seen || host.last_seen) && ( + + Time Range + + {host.first_seen || '?'} → {host.last_seen || '?'} + + + )} + + + ); +} + +// ── Main component ─────────────────────────────────────────────────── + +export default function NetworkPicture() { + // Hunt selector + const [huntList, setHuntList] = useState([]); + const [selectedHunt, setSelectedHunt] = useState(''); + + // Data + const [hosts, setHosts] = useState([]); + const [summary, setSummary] = useState(null); + const [loading, setLoading] = useState(false); + const [error, setError] = useState(''); + + // Table state + const [search, setSearch] = useState(''); + const [sortKey, setSortKey] = useState('connection_count'); + const [sortDir, setSortDir] = useState('desc'); + const [expandedRow, setExpandedRow] = useState(null); + + // Load hunts on mount + useEffect(() => { + hunts.list(0, 200).then(r => setHuntList(r.hunts)).catch(() => {}); + }, []); + + // Load network picture when hunt changes + const loadPicture = useCallback(async (huntId: string) => { + if (!huntId) return; + setLoading(true); + setError(''); + setHosts([]); + setSummary(null); + setExpandedRow(null); + try { + const resp = await network.picture(huntId); + setHosts(resp.hosts); + setSummary(resp.summary); + } catch (e: any) { + setError(e.message || 'Failed to load network picture'); + } finally { + setLoading(false); + } + }, []); + + useEffect(() => { + if (selectedHunt) loadPicture(selectedHunt); + }, [selectedHunt, loadPicture]); + + // Filter + sort + const filtered = useMemo(() => { + const q = search.toLowerCase().trim(); + let list = hosts; + if (q) { + list = hosts.filter(h => + h.hostname.toLowerCase().includes(q) || + h.ips.some(ip => ip.includes(q)) || + h.users.some(u => u.toLowerCase().includes(q)) || + h.os.some(o => o.toLowerCase().includes(q)) || + h.mac_addresses.some(m => m.toLowerCase().includes(q)) + ); + } + return sortHosts(list, sortKey, sortDir); + }, [hosts, search, sortKey, sortDir]); + + const handleSort = (key: SortKey) => { + if (sortKey === key) { + setSortDir(d => d === 'asc' ? 'desc' : 'asc'); + } else { + setSortKey(key); + setSortDir(key === 'connection_count' ? 'desc' : 'asc'); + } + }; + + const toggleExpand = (hostname: string) => { + setExpandedRow(prev => prev === hostname ? null : hostname); + }; + + return ( + + + Network Picture + + + Deduplicated host inventory — one row per machine. Hostname, IPs, users, OS, MACs aggregated from all datasets. + + + {/* Hunt selector */} + + + Select Hunt + + + + {selectedHunt && ( + + loadPicture(selectedHunt)} size="small"> + + + + )} + + setSearch(e.target.value)} + sx={{ minWidth: 280 }} + /> + + + {loading && } + {error && {error}} + + {/* Summary stats */} + {summary && !loading && ( + + } /> + } /> + } /> + } /> + {search && ( + + {filtered.length} + Matching filter + + )} + + )} + + {/* Host table */} + {!loading && hosts.length > 0 && ( + + + + + + + handleSort('hostname')} + > + Hostname + + + + handleSort('ips')} + > + IPs + + + + handleSort('users')} + > + Users + + + OS + MAC + + handleSort('connection_count')} + > + Connections + + + Ports + + + + {filtered.map(host => { + const isExpanded = expandedRow === host.hostname; + return ( + + *': { borderBottom: isExpanded ? 'none' : undefined } }} + onClick={() => toggleExpand(host.hostname)} + > + + + {isExpanded ? : } + + + + {host.hostname} + + + + + {host.os.length > 0 + ? host.os.join(', ') + : } + + + + + + + + + + + + + + + + ); + })} + +
+
+ )} + + {/* Empty state */} + {!loading && selectedHunt && hosts.length === 0 && !error && ( + + No hosts found. Upload datasets with hostname/IP columns to this hunt. + + )} + {!selectedHunt && ( + + Select a hunt to view the network picture. + + )} +
+ ); +} diff --git a/frontend/src/components/PlaybookManager.tsx b/frontend/src/components/PlaybookManager.tsx index 4ef7b47..3c77f07 100644 --- a/frontend/src/components/PlaybookManager.tsx +++ b/frontend/src/components/PlaybookManager.tsx @@ -1,4 +1,5 @@ /** +<<<<<<< HEAD * PlaybookManager - Investigation playbook workflow wizard. * Create/load playbooks from templates, track step completion, navigate to target views. */ @@ -53,11 +54,108 @@ export default function PlaybookManager() { try { const d = await playbooks.get(id); setActive(d); +======= + * PlaybookManager — Pre-defined investigation playbooks. + * + * Features: + * - Browse built-in playbook templates + * - Start a playbook run linked to a hunt/case + * - Step-by-step execution with notes and status tracking + * - View past runs and their results + */ + +import React, { useEffect, useState, useCallback } from 'react'; +import { + Box, Typography, Paper, Button, Chip, Stack, Divider, + Card, CardContent, CardActions, Stepper, Step, StepLabel, StepContent, + TextField, Dialog, DialogTitle, DialogContent, DialogActions, + FormControl, InputLabel, Select, MenuItem, Tabs, Tab, + LinearProgress, IconButton, Tooltip, +} from '@mui/material'; +import PlayArrowIcon from '@mui/icons-material/PlayArrow'; +import StopIcon from '@mui/icons-material/Stop'; +import CheckCircleIcon from '@mui/icons-material/CheckCircle'; +import SkipNextIcon from '@mui/icons-material/SkipNext'; +import HistoryIcon from '@mui/icons-material/History'; +import VisibilityIcon from '@mui/icons-material/Visibility'; +import { useSnackbar } from 'notistack'; +import { + playbooks, hunts, + PlaybookTemplate, PlaybookTemplateDetail, PlaybookRunData, Hunt, +} from '../api/client'; + +const CATEGORY_COLORS: Record = { + incident_response: 'error', + threat_hunting: 'primary', + compliance: 'info', +}; + +const STATUS_COLORS: Record = { + 'in-progress': 'warning', + completed: 'success', + aborted: 'error', +}; + +export default function PlaybookManager() { + const { enqueueSnackbar } = useSnackbar(); + const [tab, setTab] = useState(0); + + // Templates + const [templates, setTemplates] = useState([]); + const [selectedTemplate, setSelectedTemplate] = useState(null); + + // Runs + const [runs, setRuns] = useState([]); + const [activeRun, setActiveRun] = useState(null); + + // Start dialog + const [startDialog, setStartDialog] = useState(false); + const [startTemplate, setStartTemplate] = useState(''); + const [startHunt, setStartHunt] = useState(''); + const [huntList, setHuntList] = useState([]); + + // Step notes + const [stepNotes, setStepNotes] = useState(''); + + // ── Load ─────────────────────────────────────────────────────────── + + const loadTemplates = useCallback(async () => { + try { + const res = await playbooks.templates(); + setTemplates(res.templates); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + }, [enqueueSnackbar]); + + const loadRuns = useCallback(async () => { + try { + const res = await playbooks.listRuns(); + setRuns(res.runs); + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + }, [enqueueSnackbar]); + + useEffect(() => { + loadTemplates(); + loadRuns(); + hunts.list().then(r => setHuntList(r.hunts)).catch(() => {}); + }, [loadTemplates, loadRuns]); + + // ── Template detail ──────────────────────────────────────────────── + + const viewTemplate = async (name: string) => { + try { + const detail = await playbooks.templateDetail(name); + setSelectedTemplate(detail); +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 } catch (e: any) { enqueueSnackbar(e.message, { variant: 'error' }); } }; +<<<<<<< HEAD const toggleStep = async (stepId: number, current: boolean) => { if (!active) return; try { @@ -85,11 +183,29 @@ export default function PlaybookManager() { enqueueSnackbar('Playbook created from template', { variant: 'success' }); loadList(); setActive(pb); +======= + // ── Start run ────────────────────────────────────────────────────── + + const startRun = async () => { + if (!startTemplate) return; + try { + const run = await playbooks.start({ + playbook_name: startTemplate, + hunt_id: startHunt || undefined, + }); + enqueueSnackbar('Playbook started!', { variant: 'success' }); + setStartDialog(false); + setStartTemplate(''); setStartHunt(''); + setActiveRun(run); + setTab(1); + loadRuns(); +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 } catch (e: any) { enqueueSnackbar(e.message, { variant: 'error' }); } }; +<<<<<<< HEAD const createCustom = async () => { if (!newName.trim()) return; try { @@ -104,22 +220,61 @@ export default function PlaybookManager() { setNewDesc(''); loadList(); setActive(pb); +======= + // ── Open run detail ──────────────────────────────────────────────── + + const openRun = async (runId: string) => { + try { + const run = await playbooks.getRun(runId); + setActiveRun(run); } catch (e: any) { enqueueSnackbar(e.message, { variant: 'error' }); } }; + // ── Complete step ────────────────────────────────────────────────── + + const completeStep = async (status: string = 'completed') => { + if (!activeRun) return; + try { + const run = await playbooks.completeStep(activeRun.id, { + notes: stepNotes || undefined, + status, + }); + setActiveRun(run); + setStepNotes(''); + loadRuns(); + if (run.status === 'completed') { + enqueueSnackbar('Playbook completed!', { variant: 'success' }); + } +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 + } catch (e: any) { + enqueueSnackbar(e.message, { variant: 'error' }); + } + }; + +<<<<<<< HEAD const deletePlaybook = async (id: string) => { try { await playbooks.delete(id); enqueueSnackbar('Playbook deleted', { variant: 'success' }); if (active?.id === id) setActive(null); loadList(); +======= + const abortRun = async () => { + if (!activeRun) return; + try { + const run = await playbooks.abortRun(activeRun.id); + setActiveRun(run); + loadRuns(); + enqueueSnackbar('Playbook aborted', { variant: 'warning' }); +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 } catch (e: any) { enqueueSnackbar(e.message, { variant: 'error' }); } }; +<<<<<<< HEAD const completedCount = active?.steps.filter(s => s.is_completed).length || 0; const totalSteps = active?.steps.length || 1; const progress = Math.round((completedCount / totalSteps) * 100); @@ -229,9 +384,299 @@ export default function PlaybookManager() { +======= + // ── Active run view ──────────────────────────────────────────────── + + if (activeRun) { + const steps = activeRun.steps || []; + const currentIdx = activeRun.current_step - 1; + const isActive = activeRun.status === 'in-progress'; + + return ( + + + + {activeRun.playbook_name} + + + Step {activeRun.current_step} / {activeRun.total_steps} + + + + + + + {steps.map((step, i) => { + const result = activeRun.step_results.find(r => r.step === step.order); + const isCurrent = i === currentIdx && isActive; + + return ( + + + ) : undefined + } + > + + {step.title} + + + + + {step.description} + + + + + + Expected: {step.expected_outcome} + + + + {result?.notes && ( + + Notes: + {result.notes} + + )} + + {isCurrent && ( + + setStepNotes(e.target.value)} + sx={{ mb: 1 }} + /> + + + + + + + )} + + + ); + })} + + + {activeRun.status === 'completed' && ( + + Playbook Completed + + All {activeRun.total_steps} steps finished at {activeRun.completed_at ? new Date(activeRun.completed_at).toLocaleString() : 'N/A'} + + + )} + + ); + } + + // ── Main view ────────────────────────────────────────────────────── + + return ( + + + Playbooks + + + + setTab(v)} sx={{ mb: 2 }}> + + } iconPosition="start" /> + + + {/* Templates tab */} + {tab === 0 && ( + + {templates.map(t => ( + + + + {t.name} + + + + {t.description} + + + + {t.tags.map((tag, i) => )} + + + + + + + + ))} + + )} + + {/* Runs tab */} + {tab === 1 && ( + + {runs.map(run => ( + + + + + {run.playbook_name} + + + + Step {run.current_step}/{run.total_steps} • Started {new Date(run.created_at).toLocaleString()} + {run.started_by && ` by ${run.started_by}`} + + + + + + openRun(run.id)}> + + + + + + + ))} + {runs.length === 0 && ( + + No playbook runs yet. Start one from the Templates tab. + + )} + + )} + + {/* Template detail dialog */} + setSelectedTemplate(null)} maxWidth="md" fullWidth> + {selectedTemplate && ( + <> + + {selectedTemplate.name} + + + + {selectedTemplate.description} + + Steps ({selectedTemplate.steps?.length || 0}) + + {(selectedTemplate.steps || []).map((step, i) => ( + + + {step.title} + + + {step.description} + + + Expected: {step.expected_outcome} + + + + ))} + + + + + + + + )} + + + {/* Start run dialog */} + setStartDialog(false)} maxWidth="sm" fullWidth> + Start Playbook Run + + + + Playbook + + + + Linked Hunt + + + + + + + +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 ); } +<<<<<<< HEAD +======= +>>>>>>> 7c454036c7ef6a3d6517f98cbee643fd0238e0b2 diff --git a/frontend/src/components/ProcessTree.tsx b/frontend/src/components/ProcessTree.tsx new file mode 100644 index 0000000..1a2c09f --- /dev/null +++ b/frontend/src/components/ProcessTree.tsx @@ -0,0 +1,526 @@ +/** + * ProcessTree — interactive hierarchical process tree view. + * + * Key UX improvements: + * - Hunt dropdown auto-fetches the full tree to extract hostnames. + * - Host dropdown lets the user pick a single host (server-side filter). + * - Detail panel is absolutely positioned so it never re-flows the graph. + * - ResizeObserver keeps Cytoscape in sync with the container. + */ + +import React, { useEffect, useRef, useState, useCallback } from 'react'; +import { + Box, Paper, Typography, Stack, Alert, CircularProgress, + FormControl, InputLabel, Select, MenuItem, Chip, TextField, + IconButton, Tooltip, Divider, Autocomplete, +} from '@mui/material'; +import CloseIcon from '@mui/icons-material/Close'; +import RefreshIcon from '@mui/icons-material/Refresh'; +import ZoomInIcon from '@mui/icons-material/ZoomIn'; +import ZoomOutIcon from '@mui/icons-material/ZoomOut'; +import CenterFocusStrongIcon from '@mui/icons-material/CenterFocusStrong'; +import cytoscape, { Core, NodeSingular } from 'cytoscape'; +// @ts-ignore +import dagre from 'cytoscape-dagre'; +import { + analysis, hunts, datasets, type Hunt, type DatasetSummary, + type ProcessNodeData, +} from '../api/client'; + +cytoscape.use(dagre); + +/* ── helpers ───────────────────────────────────────────────────────── */ + +/** Recursively collect unique hostnames from process tree roots */ +function collectHostnames(trees: ProcessNodeData[]): string[] { + const set = new Set(); + const walk = (n: ProcessNodeData) => { + if (n.hostname) set.add(n.hostname); + n.children.forEach(walk); + }; + trees.forEach(walk); + return Array.from(set).sort((a, b) => a.localeCompare(b, undefined, { sensitivity: 'base' })); +} + +/** Recursively count processes */ +function countNodes(trees: ProcessNodeData[]): number { + let c = 0; + const walk = (n: ProcessNodeData) => { c++; n.children.forEach(walk); }; + trees.forEach(walk); + return c; +} + +/* ── flatten tree for Cytoscape elements ──────────────────────────── */ +function flattenTree( + node: ProcessNodeData, + parentId: string | null, + nodes: any[], + edges: any[], + idSet: Set, +) { + let id = `${node.hostname}_${node.pid}`; + // deduplicate: if PID appears multiple times, append row_index + if (idSet.has(id)) id = `${id}_${node.row_index}`; + idSet.add(id); + + const cmd = node.command_line || ''; + const isSuspicious = /powershell\s+-enc|certutil|mimikatz|psexec|mshta|cobalt|meterpreter/i.test(cmd); + + nodes.push({ + data: { + id, + label: `${node.name || 'unknown'}\nPID ${node.pid}`, + pid: node.pid, + ppid: node.ppid, + name: node.name, + command_line: node.command_line, + username: node.username, + hostname: node.hostname, + timestamp: node.timestamp, + dataset_name: node.dataset_name, + severity: isSuspicious ? 'high' : 'info', + extra: node.extra, + }, + }); + + if (parentId) { + edges.push({ + data: { id: `e_${parentId}_${id}`, source: parentId, target: id }, + }); + } + + for (const child of node.children) { + flattenTree(child, id, nodes, edges, idSet); + } +} + +/* ── Cytoscape stylesheet ─────────────────────────────────────────── */ +const CY_STYLE: cytoscape.StylesheetStyle[] = [ + { + selector: 'node', + style: { + label: 'data(label)', + 'text-wrap': 'wrap' as any, + 'text-valign': 'center', + 'text-halign': 'center', + 'font-size': '11px', + color: '#e2e8f0', + 'background-color': '#334155', + 'border-width': 2, + 'border-color': '#475569', + width: 160, + height: 50, + shape: 'roundrectangle', + 'text-max-width': '140px', + }, + }, + { + selector: 'node[severity = "high"], node[severity = "critical"]', + style: { + 'background-color': '#7f1d1d', + 'border-color': '#ef4444', + 'border-width': 3, + }, + }, + { + selector: 'node[severity = "medium"]', + style: { + 'background-color': '#713f12', + 'border-color': '#eab308', + }, + }, + { + selector: 'node:selected', + style: { + 'border-color': '#60a5fa', + 'border-width': 3, + 'background-color': '#1e3a5f', + }, + }, + { + selector: 'edge', + style: { + width: 2, + 'line-color': '#475569', + 'target-arrow-color': '#475569', + 'target-arrow-shape': 'triangle', + 'curve-style': 'bezier', + 'arrow-scale': 0.8, + }, + }, + { selector: '.dimmed', style: { opacity: 0.15 } }, + { selector: '.highlighted', style: { 'border-color': '#22d3ee', 'border-width': 3 } }, +]; + +/* ================================================================== */ + +export default function ProcessTree() { + /* refs */ + const containerRef = useRef(null); + const cyDivRef = useRef(null); + const cyRef = useRef(null); + + /* data */ + const [huntList, setHuntList] = useState([]); + const [datasetList, setDatasetList] = useState([]); + + /* selections */ + const [selectedHunt, setSelectedHunt] = useState(''); + const [selectedDataset, setSelectedDataset] = useState(''); + const [hostnames, setHostnames] = useState([]); + const [selectedHost, setSelectedHost] = useState(''); + const [searchText, setSearchText] = useState(''); + + /* ui */ + const [loading, setLoading] = useState(false); + const [hostsLoading, setHostsLoading] = useState(false); + const [error, setError] = useState(''); + const [totalProcs, setTotalProcs] = useState(0); + const [selectedNode, setSelectedNode] = useState | null>(null); + + /* ── load hunts + datasets on mount ─────────────────────────────── */ + useEffect(() => { + (async () => { + try { + const [h, d] = await Promise.all([ + hunts.list(0, 100), + datasets.list(0, 200), + ]); + setHuntList(h.hunts); + setDatasetList(d.datasets); + if (h.hunts.length > 0) setSelectedHunt(h.hunts[0].id); + } catch {} + })(); + }, []); + + /* ── when hunt changes, fetch all trees to extract hostnames ────── */ + useEffect(() => { + if (!selectedHunt) return; + let cancelled = false; + (async () => { + setHostsLoading(true); + try { + const res = await analysis.processTree({ hunt_id: selectedHunt }); + if (cancelled) return; + const hosts = collectHostnames(res.trees); + setHostnames(hosts); + setTotalProcs(res.total_processes); + // auto-pick first host so the user sees something reasonable + if (hosts.length > 0) { + setSelectedHost(hosts[0]); + } else { + setSelectedHost(''); + } + } catch { + if (!cancelled) setHostnames([]); + } + setHostsLoading(false); + })(); + return () => { cancelled = true; }; + }, [selectedHunt]); + + /* filter datasets when hunt changes */ + const huntDatasets = selectedHunt + ? datasetList.filter(d => d.hunt_id === selectedHunt) + : datasetList; + + /* ── fetch tree (per host) ──────────────────────────────────────── */ + const fetchTree = useCallback(async (host?: string) => { + const huntId = selectedDataset ? undefined : selectedHunt; + const dsId = selectedDataset || undefined; + if (!huntId && !dsId) return; + + setLoading(true); + setError(''); + setSelectedNode(null); + + try { + const hostname = (host ?? selectedHost) || undefined; + const res = await analysis.processTree({ + dataset_id: dsId, + hunt_id: huntId, + hostname, + }); + + setTotalProcs(res.total_processes); + + /* build Cytoscape elements */ + const nodes: any[] = []; + const edges: any[] = []; + const idSet = new Set(); + for (const tree of res.trees) { + flattenTree(tree, null, nodes, edges, idSet); + } + + /* init or update Cytoscape */ + if (cyRef.current) { + cyRef.current.destroy(); + cyRef.current = null; + } + if (!cyDivRef.current) return; + + /* choose layout based on whether there are actual parent→child edges */ + const hasEdges = edges.length > nodes.length * 0.1; // at least 10% connected + const layoutConfig = hasEdges + ? { + name: 'dagre', + rankDir: 'TB', + nodeSep: 40, + rankSep: 70, + padding: 40, + } + : { + name: 'grid', + rows: Math.max(1, Math.ceil(Math.sqrt(nodes.length))), + cols: Math.max(1, Math.ceil(Math.sqrt(nodes.length))), + padding: 30, + avoidOverlap: true, + }; + + const cy = cytoscape({ + container: cyDivRef.current, + elements: [...nodes, ...edges], + style: CY_STYLE as any, + layout: layoutConfig as any, + minZoom: 0.05, + maxZoom: 5, + wheelSensitivity: 0.3, + }); + + /* tap handlers */ + cy.on('tap', 'node', (evt) => { + const nd = (evt.target as NodeSingular).data(); + setSelectedNode(nd); + }); + cy.on('tap', (evt) => { + if (evt.target === cy) setSelectedNode(null); + }); + + cyRef.current = cy; + + /* fit with padding after layout settles */ + requestAnimationFrame(() => { + cy.resize(); + cy.fit(undefined, 40); + }); + } catch (e: any) { + setError(e.message || 'Failed to load process tree'); + } + setLoading(false); + }, [selectedHunt, selectedDataset, selectedHost]); + + /* re-fetch when host changes */ + useEffect(() => { + if (selectedHost) fetchTree(selectedHost); + // eslint-disable-next-line react-hooks/exhaustive-deps + }, [selectedHost, selectedDataset]); + + /* ── keep Cytoscape sized correctly ─────────────────────────────── */ + useEffect(() => { + const el = cyDivRef.current; + if (!el) return; + const ro = new ResizeObserver(() => cyRef.current?.resize()); + ro.observe(el); + return () => ro.disconnect(); + }, []); + + /* cleanup Cytoscape on unmount */ + useEffect(() => { + return () => { + if (cyRef.current) { + cyRef.current.destroy(); + cyRef.current = null; + } + }; + }, []); + + /* ── search highlight ───────────────────────────────────────────── */ + useEffect(() => { + const cy = cyRef.current; + if (!cy) return; + cy.elements().removeClass('dimmed highlighted'); + if (!searchText.trim()) return; + const q = searchText.toLowerCase(); + const matched = cy.nodes().filter(n => { + const d = n.data(); + return (d.name || '').toLowerCase().includes(q) + || (d.pid || '').toLowerCase().includes(q) + || (d.command_line || '').toLowerCase().includes(q) + || (d.username || '').toLowerCase().includes(q); + }); + if (matched.length === 0) return; + cy.elements().addClass('dimmed'); + matched.removeClass('dimmed').addClass('highlighted'); + matched.connectedEdges().removeClass('dimmed'); + }, [searchText]); + + /* controls */ + const zoomIn = () => { const cy = cyRef.current; if (cy) cy.zoom({ level: cy.zoom() * 1.3, renderedPosition: { x: cy.width() / 2, y: cy.height() / 2 } }); }; + const zoomOut = () => { const cy = cyRef.current; if (cy) cy.zoom({ level: cy.zoom() / 1.3, renderedPosition: { x: cy.width() / 2, y: cy.height() / 2 } }); }; + const fitAll = () => cyRef.current?.fit(undefined, 40); + + const GRAPH_HEIGHT = 'calc(100vh - 230px)'; + + return ( + + Process Tree + + {/* ── Toolbar ──────────────────────────────────────────────── */} + + + {/* Hunt */} + + Hunt + + + + {/* Dataset (optional) */} + + Dataset (optional) + + + + {/* Host dropdown */} + setSelectedHost(v || '')} + renderInput={(params) => ( + + )} + /> + + {/* Search */} + setSearchText(e.target.value)} + sx={{ width: 170 }} + /> + + fetchTree()}> + + + + + + {hostnames.length > 0 && ( + + )} + + + + {error && {error}} + + {/* ── Graph + overlay Detail panel ─────────────────────────── */} + + {/* Cytoscape canvas — dedicated div with NO React children */} +
+ + {/* Overlays — sibling elements, not children of Cytoscape div */} + {loading && ( + + + + )} + {!loading && !selectedHost && hostnames.length > 0 && ( + + + Select a host from the dropdown to view its process tree + + + {hostnames.length} hosts available with {totalProcs.toLocaleString()} total processes + + + )} + + {/* Detail panel — overlays graph on the right, doesn't affect layout */} + {selectedNode && ( + + + + {selectedNode.name || 'Process'} + + setSelectedNode(null)}> + + + + + + + + + + + {selectedNode.command_line && ( + + Command Line + + {selectedNode.command_line} + + + )} + {selectedNode.extra && Object.keys(selectedNode.extra).length > 0 && ( + + Extra Fields + + {Object.entries(selectedNode.extra as Record).map(([k, v]) => ( + + ))} + + + )} + + + )} + + + ); +} + +function DetailRow({ label, value }: { label: string; value?: string }) { + if (!value) return null; + return ( + + {label}:{' '} + {value} + + ); +} diff --git a/frontend/src/components/QueryBar.tsx b/frontend/src/components/QueryBar.tsx new file mode 100644 index 0000000..69aad19 --- /dev/null +++ b/frontend/src/components/QueryBar.tsx @@ -0,0 +1,255 @@ +/** + * QueryBar — free-text search with field filters, time-range picker, + * and result DataGrid. Works across all datasets in a hunt. + */ + +import React, { useState, useCallback, useEffect, useRef } from 'react'; +import { + Box, Typography, Paper, Stack, TextField, Button, IconButton, + FormControl, InputLabel, Select, MenuItem, CircularProgress, + Alert, Chip, Tooltip, Collapse, +} from '@mui/material'; +import { DataGrid, type GridColDef } from '@mui/x-data-grid'; +import SearchIcon from '@mui/icons-material/Search'; +import FilterListIcon from '@mui/icons-material/FilterList'; +import ClearIcon from '@mui/icons-material/Clear'; +import AddIcon from '@mui/icons-material/Add'; +import DeleteOutlineIcon from '@mui/icons-material/DeleteOutline'; +import { + hunts, datasets, analysis, + type HuntOut, type DatasetSummary, type SearchRowsResponse, +} from '../api/client'; + +interface ActiveFilter { field: string; value: string } + +export default function QueryBar() { + const [huntList, setHuntList] = useState([]); + const [dsList, setDsList] = useState([]); + const [activeHunt, setActiveHunt] = useState(''); + const [activeDs, setActiveDs] = useState(''); + const [query, setQuery] = useState(''); + const [filters, setFilters] = useState([]); + const [showFilters, setShowFilters] = useState(false); + const [timeStart, setTimeStart] = useState(''); + const [timeEnd, setTimeEnd] = useState(''); + const [results, setResults] = useState(null); + const [loading, setLoading] = useState(false); + const [error, setError] = useState(''); + const [page, setPage] = useState(0); + const [pageSize, setPageSize] = useState(50); + const [availableFields, setAvailableFields] = useState([]); + const inputRef = useRef(null); + + // Load hunts + datasets + useEffect(() => { + hunts.list(0, 200).then(r => { + setHuntList(r.hunts); + if (r.hunts.length > 0) setActiveHunt(r.hunts[0].id); + }).catch(() => {}); + datasets.list(0, 200).then(r => setDsList(r.datasets)).catch(() => {}); + }, []); + + // Load field names from field-stats + useEffect(() => { + if (!activeDs && !activeHunt) return; + analysis.fieldStats({ + dataset_id: activeDs || undefined, + hunt_id: activeHunt || undefined, + top_n: 5, + }).then(r => setAvailableFields(Object.keys(r.fields))).catch(() => {}); + }, [activeDs, activeHunt]); + + const doSearch = useCallback(async (offset = 0) => { + if (!activeDs && !activeHunt) return; + setLoading(true); + setError(''); + try { + const filterMap: Record = {}; + filters.forEach(f => { if (f.field && f.value) filterMap[f.field] = f.value; }); + const r = await analysis.searchRows({ + dataset_id: activeDs || undefined, + hunt_id: activeHunt || undefined, + query, + filters: Object.keys(filterMap).length > 0 ? filterMap : undefined, + time_start: timeStart || undefined, + time_end: timeEnd || undefined, + limit: pageSize, + offset, + }); + setResults(r); + } catch (e: any) { setError(e.message); } + setLoading(false); + }, [activeDs, activeHunt, query, filters, timeStart, timeEnd, pageSize]); + + const handleSearch = () => { setPage(0); doSearch(0); }; + const handlePageChange = (model: { page: number; pageSize: number }) => { + setPage(model.page); + setPageSize(model.pageSize); + doSearch(model.page * model.pageSize); + }; + + const handleKeyDown = (e: React.KeyboardEvent) => { + if (e.key === 'Enter') handleSearch(); + }; + + // Filter management + const addFilter = () => setFilters(prev => [...prev, { field: '', value: '' }]); + const removeFilter = (i: number) => setFilters(prev => prev.filter((_, idx) => idx !== i)); + const updateFilter = (i: number, key: 'field' | 'value', val: string) => + setFilters(prev => prev.map((f, idx) => idx === i ? { ...f, [key]: val } : f)); + + const clearAll = () => { + setQuery(''); + setFilters([]); + setTimeStart(''); + setTimeEnd(''); + setResults(null); + }; + + // Build columns from result rows + const columns: GridColDef[] = results && results.rows.length > 0 + ? Object.keys(results.rows[0]).filter(k => k !== '__id').map(k => ({ + field: k, headerName: k, flex: 1, minWidth: 120, + })) + : []; + + const gridRows = results?.rows.map((r, i) => ({ __id: `r-${page}-${i}`, ...r })) || []; + + return ( + + Search & Query + + {/* Source selectors */} + + + + Hunt + + + + Dataset + + + + + + {/* Search bar */} + + + setQuery(e.target.value)} + onKeyDown={handleKeyDown} + InputProps={{ + startAdornment: , + }} + /> + + setShowFilters(s => !s)} + color={showFilters ? 'primary' : 'default'}> + + + + + + + + + + {/* Time range */} + + setTimeStart(e.target.value)} + InputLabelProps={{ shrink: true }} sx={{ width: 220 }} + /> + setTimeEnd(e.target.value)} + InputLabelProps={{ shrink: true }} sx={{ width: 220 }} + /> + + + {/* Field filters */} + + + + Field Filters + + + {filters.map((f, i) => ( + + + Field + + + updateFilter(i, 'value', e.target.value)} + sx={{ flex: 1 }} /> + removeFilter(i)}> + + + + ))} + + + + + {error && {error}} + {loading && } + + {/* Results */} + {results && ( + <> + + + {query && setQuery('')} />} + {filters.filter(f => f.field && f.value).map((f, i) => ( + removeFilter(i)} /> + ))} + + + + r.__id} + rowCount={results.total} + loading={loading} + paginationMode="server" + paginationModel={{ page, pageSize }} + onPaginationModelChange={handlePageChange} + pageSizeOptions={[25, 50, 100]} + density="compact" + sx={{ + border: 'none', + '& .MuiDataGrid-cell': { fontSize: '0.8rem' }, + '& .MuiDataGrid-columnHeader': { fontWeight: 700 }, + }} + /> + + + )} + + ); +} diff --git a/frontend/src/components/StorylineGraph.tsx b/frontend/src/components/StorylineGraph.tsx new file mode 100644 index 0000000..b03a7a2 --- /dev/null +++ b/frontend/src/components/StorylineGraph.tsx @@ -0,0 +1,395 @@ +/** + * StorylineGraph — CrowdStrike-style attack storyline visualization. + * + * Renders events as a directed graph using Cytoscape.js with cola layout. + * Nodes are colour-coded by event type (process/network/file/registry). + * Edges show spawned (parent→child) and temporal relationships. + */ + +import React, { useEffect, useRef, useState, useCallback } from 'react'; +import { + Box, Paper, Typography, Stack, Alert, CircularProgress, + FormControl, InputLabel, Select, MenuItem, Chip, TextField, + IconButton, Tooltip, Divider, ToggleButton, ToggleButtonGroup, +} from '@mui/material'; +import RefreshIcon from '@mui/icons-material/Refresh'; +import ZoomInIcon from '@mui/icons-material/ZoomIn'; +import ZoomOutIcon from '@mui/icons-material/ZoomOut'; +import CenterFocusStrongIcon from '@mui/icons-material/CenterFocusStrong'; +import AccountTreeIcon from '@mui/icons-material/AccountTree'; +import TimelineIcon from '@mui/icons-material/Timeline'; +import cytoscape, { Core, NodeSingular } from 'cytoscape'; +// @ts-ignore +import dagre from 'cytoscape-dagre'; +// @ts-ignore +import cola from 'cytoscape-cola'; +import { + analysis, hunts, datasets, type Hunt, type DatasetSummary, + type StorylineResponse, +} from '../api/client'; + +cytoscape.use(dagre); +cytoscape.use(cola); + +/* ── colour palette by event type ──────────────────────────────────── */ +const EVENT_COLORS: Record = { + process: '#3b82f6', + network: '#8b5cf6', + file: '#10b981', + registry: '#f59e0b', + other: '#6b7280', +}; + +const SEVERITY_BG: Record = { + critical: '#7f1d1d', + high: '#7f1d1d', + medium: '#713f12', + low: '#1e3a5f', + info: '#1e293b', +}; + +const SEVERITY_BORDER: Record = { + critical: '#ef4444', + high: '#f97316', + medium: '#eab308', + low: '#3b82f6', + info: '#475569', +}; + +/* ── shapes per event type ─────────────────────────────────────────── */ +const EVENT_SHAPES: Record = { + process: 'roundrectangle', + network: 'diamond', + file: 'hexagon', + registry: 'octagon', + other: 'ellipse', +}; + +/* ── Cytoscape stylesheet ─────────────────────────────────────────── */ +const CY_STYLE: cytoscape.StylesheetStyle[] = [ + { + selector: 'node', + style: { + label: 'data(label)', + 'text-wrap': 'wrap' as any, + 'text-valign': 'center', + 'text-halign': 'center', + 'font-size': '9px', + color: '#e2e8f0', + 'background-color': '#334155', + 'border-width': 2, + 'border-color': '#475569', + width: 130, + height: 45, + shape: 'roundrectangle', + 'text-max-width': '115px', + }, + }, + /* per event type colours */ + ...Object.entries(EVENT_COLORS).map(([type, color]) => ({ + selector: `node[event_type = "${type}"]`, + style: { + 'border-color': color, + shape: EVENT_SHAPES[type] as any, + }, + })), + /* per severity background */ + ...Object.entries(SEVERITY_BG).map(([sev, bg]) => ({ + selector: `node[severity = "${sev}"]`, + style: { + 'background-color': bg, + 'border-color': SEVERITY_BORDER[sev], + 'border-width': sev === 'critical' || sev === 'high' ? 3 : 2, + }, + })), + { + selector: 'node:selected', + style: { + 'border-color': '#60a5fa', + 'border-width': 3, + 'background-color': '#1e3a5f', + }, + }, + { + selector: 'edge', + style: { + width: 1.5, + 'line-color': '#475569', + 'target-arrow-color': '#475569', + 'target-arrow-shape': 'triangle', + 'curve-style': 'bezier', + 'arrow-scale': 0.7, + }, + }, + { + selector: 'edge[relationship = "spawned"]', + style: { + 'line-color': '#3b82f6', + 'target-arrow-color': '#3b82f6', + width: 2, + }, + }, + { + selector: 'edge[relationship = "temporal"]', + style: { + 'line-color': '#334155', + 'line-style': 'dashed', + width: 1, + 'target-arrow-shape': 'vee', + }, + }, +]; + +type LayoutName = 'dagre' | 'cola'; + +export default function StorylineGraph() { + const containerRef = useRef(null); + const cyRef = useRef(null); + + const [huntList, setHuntList] = useState([]); + const [datasetList, setDatasetList] = useState([]); + const [selectedHunt, setSelectedHunt] = useState(''); + const [selectedDataset, setSelectedDataset] = useState(''); + const [hostFilter, setHostFilter] = useState(''); + const [layout, setLayout] = useState('dagre'); + const [loading, setLoading] = useState(false); + const [error, setError] = useState(''); + const [storyline, setStoryline] = useState(null); + const [selectedNode, setSelectedNode] = useState | null>(null); + + /* load hunts + datasets */ + useEffect(() => { + (async () => { + try { + const [h, d] = await Promise.all([ + hunts.list(0, 100), + datasets.list(0, 200), + ]); + setHuntList(h.hunts); + setDatasetList(d.datasets); + if (h.hunts.length > 0) setSelectedHunt(h.hunts[0].id); + } catch {} + })(); + }, []); + + const huntDatasets = selectedHunt + ? datasetList.filter(d => d.hunt_id === selectedHunt) + : datasetList; + + /* fetch storyline */ + const fetchStoryline = useCallback(async () => { + if (!selectedHunt && !selectedDataset) return; + setLoading(true); + setError(''); + setSelectedNode(null); + + try { + const res = await analysis.storyline({ + dataset_id: selectedDataset || undefined, + hunt_id: selectedDataset ? undefined : selectedHunt, + hostname: hostFilter || undefined, + }); + setStoryline(res); + renderGraph(res); + } catch (e: any) { + setError(e.message || 'Failed to load storyline'); + } + setLoading(false); + // eslint-disable-next-line react-hooks/exhaustive-deps + }, [selectedHunt, selectedDataset, hostFilter, layout]); + + /* render Cytoscape */ + const renderGraph = useCallback((data: StorylineResponse) => { + if (cyRef.current) cyRef.current.destroy(); + if (!containerRef.current) return; + + const elements = [...data.nodes, ...data.edges]; + + const layoutConfig: any = layout === 'dagre' + ? { name: 'dagre', rankDir: 'LR', nodeSep: 25, rankSep: 50, padding: 30 } + : { name: 'cola', nodeSpacing: 40, edgeLength: 120, animate: false, padding: 30, maxSimulationTime: 3000 }; + + const cy = cytoscape({ + container: containerRef.current, + elements, + style: CY_STYLE as any, + layout: layoutConfig, + minZoom: 0.05, + maxZoom: 4, + wheelSensitivity: 0.3, + }); + + cy.on('tap', 'node', (evt) => { + setSelectedNode((evt.target as NodeSingular).data()); + }); + cy.on('tap', (evt) => { + if (evt.target === cy) setSelectedNode(null); + }); + + cyRef.current = cy; + }, [layout]); + + /* refetch on param change */ + useEffect(() => { + if (selectedHunt || selectedDataset) fetchStoryline(); + }, [selectedHunt, selectedDataset, fetchStoryline]); + + /* re-render on layout change */ + useEffect(() => { + if (storyline) renderGraph(storyline); + // eslint-disable-next-line react-hooks/exhaustive-deps + }, [layout]); + + /* controls */ + const zoomIn = () => cyRef.current?.zoom(cyRef.current.zoom() * 1.3); + const zoomOut = () => cyRef.current?.zoom(cyRef.current.zoom() / 1.3); + const fitAll = () => cyRef.current?.fit(undefined, 40); + + const summary = storyline?.summary; + + return ( + + Storyline Attack Graph + + {/* Controls */} + + + + Hunt + + + + + Dataset (optional) + + + + setHostFilter(e.target.value)} + onKeyDown={e => e.key === 'Enter' && fetchStoryline()} + sx={{ width: 160 }} + /> + + v && setLayout(v)}> + + + + + + + + + + + {/* Legend + stats */} + {summary && ( + + + + + + {Object.entries(EVENT_COLORS).map(([type, color]) => ( + + ))} + + )} + + + {error && {error}} + + {/* Graph + Detail */} + + + {loading && ( + + + + )} + + + {selectedNode && ( + + + {selectedNode.process_name || selectedNode.label || 'Event'} + + + + + + + + + + + + + + + + {selectedNode.command_line && ( + + Command Line + + {selectedNode.command_line} + + + )} + + )} + + + ); +} + +function DetailRow({ label, value }: { label: string; value?: string }) { + if (!value) return null; + return ( + + {label}:{' '} + {value} + + ); +} diff --git a/frontend/src/components/TimelineScrubber.tsx b/frontend/src/components/TimelineScrubber.tsx new file mode 100644 index 0000000..6db66b0 --- /dev/null +++ b/frontend/src/components/TimelineScrubber.tsx @@ -0,0 +1,283 @@ +/** + * TimelineScrubber — interactive temporal histogram with brush selection, + * event-type stacking, and field-stats sidebar. + */ + +import React, { useEffect, useState, useCallback, useRef } from 'react'; +import { + Box, Typography, Paper, Stack, FormControl, InputLabel, Select, + MenuItem, CircularProgress, Alert, Chip, Tooltip, IconButton, + ToggleButton, ToggleButtonGroup, Slider, List, ListItem, + ListItemText, LinearProgress, +} from '@mui/material'; +import PlayArrowIcon from '@mui/icons-material/PlayArrow'; +import PauseIcon from '@mui/icons-material/Pause'; +import RestartAltIcon from '@mui/icons-material/RestartAlt'; +import BarChartIcon from '@mui/icons-material/BarChart'; +import StackedBarChartIcon from '@mui/icons-material/StackedBarChart'; +import { + AreaChart, Area, XAxis, YAxis, CartesianGrid, Tooltip as RTooltip, + ResponsiveContainer, Brush, BarChart, Bar, Legend, +} from 'recharts'; +import { + hunts, datasets, analysis, + type HuntOut, type DatasetSummary, type TimelineBin, +} from '../api/client'; + +const EVENT_COLORS: Record = { + process: '#3b82f6', + network: '#8b5cf6', + file: '#10b981', + registry: '#f59e0b', + authentication: '#ef4444', + dns: '#06b6d4', + other: '#6b7280', +}; + +function shortTime(iso: string) { + const d = new Date(iso); + if (isNaN(d.getTime())) return iso.slice(0, 19); + return d.toLocaleTimeString(undefined, { hour: '2-digit', minute: '2-digit', second: '2-digit' }); +} + +export default function TimelineScrubber() { + const [huntList, setHuntList] = useState([]); + const [dsList, setDsList] = useState([]); + const [activeHunt, setActiveHunt] = useState(''); + const [activeDs, setActiveDs] = useState(''); + const [bins, setBins] = useState([]); + const [fieldStats, setFieldStats] = useState>({}); + const [totalRows, setTotalRows] = useState(0); + const [loading, setLoading] = useState(false); + const [error, setError] = useState(''); + const [chartType, setChartType] = useState<'area' | 'bar'>('area'); + const [numBins, setNumBins] = useState(80); + const [playing, setPlaying] = useState(false); + const [playIdx, setPlayIdx] = useState(0); + const timerRef = useRef | null>(null); + + // Load hunts and datasets + useEffect(() => { + hunts.list(0, 200).then(r => { + setHuntList(r.hunts); + if (r.hunts.length > 0) setActiveHunt(r.hunts[0].id); + }).catch(() => {}); + datasets.list(0, 200).then(r => { + setDsList(r.datasets); + }).catch(() => {}); + }, []); + + // Fetch timeline bins + const fetchData = useCallback(async () => { + if (!activeDs && !activeHunt) return; + setLoading(true); + setError(''); + try { + const [tl, fs] = await Promise.all([ + analysis.timeline({ dataset_id: activeDs || undefined, hunt_id: activeHunt || undefined, bins: numBins }), + analysis.fieldStats({ dataset_id: activeDs || undefined, hunt_id: activeHunt || undefined }), + ]); + setBins(tl.bins); + setTotalRows(tl.total); + setFieldStats(fs.fields); + } catch (e: any) { + setError(e.message); + } + setLoading(false); + }, [activeDs, activeHunt, numBins]); + + useEffect(() => { fetchData(); }, [fetchData]); + + // Playback animation + useEffect(() => { + if (playing && bins.length > 0) { + timerRef.current = setInterval(() => { + setPlayIdx(prev => { + if (prev >= bins.length - 1) { + setPlaying(false); + return 0; + } + return prev + 1; + }); + }, 200); + } + return () => { if (timerRef.current) clearInterval(timerRef.current); }; + }, [playing, bins.length]); + + // Collect all event types across bins + const eventTypes = Array.from(new Set(bins.flatMap(b => Object.keys(b.types || {})))); + + // Transform bins for recharts + const chartData = bins.map((b, i) => ({ + name: shortTime(b.start), + total: b.count, + ...b.types, + _idx: i, + })); + + return ( + + Timeline Scrubber + + {/* Selectors */} + + + + Hunt + + + + Dataset + + + + + Bins: {numBins} + setNumBins(v as number)} /> + + + { if (v) setChartType(v); }}> + + + + + + + + + {error && {error}} + {loading && } + + {!loading && bins.length > 0 && ( + + {/* Main chart */} + + {/* Playback controls */} + + + setPlaying(p => !p)}> + {playing ? : } + + + + { setPlaying(false); setPlayIdx(0); }}> + + + + {playing && ( + + Bin {playIdx + 1} / {bins.length} + + )} + + + + {chartType === 'area' ? ( + + + + + + + {eventTypes.map(t => ( + + ))} + + + ) : ( + + + + + + + {eventTypes.map(t => ( + + ))} + + + )} + + + + {/* Field stats sidebar */} + + Field Statistics + {Object.entries(fieldStats).slice(0, 12).map(([field, stat]) => ( + + + {field} + + {stat.unique} unique + + + + {stat.top.slice(0, 5).map(v => ( + + + + {v.value || '(empty)'} + + + {v.count} + + + } + secondary={ + + } + /> + + ))} + + + ))} + + + )} + + {!loading && bins.length === 0 && !error && ( + Select a hunt or dataset to view the timeline. + )} + + ); +} diff --git a/frontend/src/declarations.d.ts b/frontend/src/declarations.d.ts new file mode 100644 index 0000000..b458c37 --- /dev/null +++ b/frontend/src/declarations.d.ts @@ -0,0 +1,2 @@ +declare module 'cytoscape-dagre'; +declare module 'cytoscape-cola';