Hostname,Timestamp,Pid,Name,Status,Protocol,Laddr.IP,Laddr.Port,Raddr.IP,Raddr.Port,Username
HR-WS-001,2026-02-11T09:37:25.658Z,48640,cmd.exe,LISTEN,UDP,10.10.2.101,636,0.0.0.0,0,hbrown
HR-WS-001,2026-02-16T11:18:59.115Z,53146,lsass.exe,ESTABLISHED,TCP,10.10.2.101,135,10.10.2.170,389,svc_web
HR-WS-001,2026-02-11T22:52:11.549Z,62831,steam.exe,LISTEN,TCP,10.10.2.101,139,0.0.0.0,0,svc_sql
HR-WS-001,2026-02-11T03:42:00.178Z,19313,chrome.exe,CLOSE_WAIT,TCP,10.10.2.101,3389,155.135.22.187,88,svc_web
HR-WS-001,2026-02-14T07:01:53.602Z,29814,RuntimeBroker.exe,SYN_SENT,UDP,10.10.2.101,80,170.116.148.253,443,admin
HR-WS-001,2026-02-13T03:29:13.044Z,60746,teams.exe,TIME_WAIT,TCP,10.10.2.101,389,69.36.87.137,88,admin
HR-WS-001,2026-02-19T11:05:30.863Z,20722,powershell.exe,TIME_WAIT,TCP,10.10.2.101,80,207.161.205.69,60867,cjohnson
HR-WS-001,2026-02-20T17:19:53.200Z,9165,SearchHost.exe,CLOSE_WAIT,UDP,10.10.2.101,445,10.10.1.175,3389,hbrown
HR-WS-001,2026-02-20T10:46:10.539Z,56512,explorer.exe,ESTABLISHED,UDP,10.10.2.101,54394,10.10.2.149,445,jsmith
HR-WS-001,2026-02-18T06:29:25.979Z,33371,msedge.exe,SYN_SENT,TCP,10.10.2.101,443,10.10.2.101,636,agarcia
HR-WS-001,2026-02-20T00:16:28.754Z,57687,notepad.exe,SYN_SENT,TCP,10.10.2.101,445,10.10.1.142,443,svc_web
HR-WS-001,2026-02-20T04:42:43.811Z,10921,powershell.exe,ESTABLISHED,UDP,10.10.2.101,443,188.248.35.251,389,dlee
HR-WS-001,2026-02-12T16:10:27.603Z,22256,services.exe,CLOSE_WAIT,UDP,10.10.2.101,636,10.10.2.167,3389,jsmith
HR-WS-001,2026-02-12T19:30:04.170Z,43942,powershell.exe,SYN_SENT,UDP,10.10.2.101,443,10.10.3.105,636,gwhite
HR-WS-001,2026-02-14T00:34:27.809Z,27041,outlook.exe,SYN_SENT,TCP,10.10.2.101,135,201.242.208.49,88,gwhite
FIN-WS-002,2026-02-12T05:52:19.232Z,30418,spoolsv.exe,ESTABLISHED,TCP,10.10.3.102,636,10.10.2.125,88,cjohnson
FIN-WS-002,2026-02-15T08:20:22.576Z,56765,chrome.exe,CLOSE_WAIT,TCP,10.10.3.102,80,167.7.47.238,389,fthompson
FIN-WS-002,2026-02-13T10:10:37.042Z,63585,teams.exe,CLOSE_WAIT,TCP,10.10.3.102,139,10.10.1.172,3389,jsmith
FIN-WS-002,2026-02-11T01:07:49.199Z,4553,System,ESTABLISHED,TCP,10.10.3.102,80,150.244.80.15,8080,admin
FIN-WS-002,2026-02-12T11:03:53.279Z,47036,SearchHost.exe,ESTABLISHED,TCP,10.10.3.102,88,10.10.1.175,445,emartinez
FIN-WS-002,2026-02-20T00:15:16.498Z,61424,SearchHost.exe,LISTEN,TCP,10.10.3.102,3389,0.0.0.0,0,agarcia
FIN-WS-002,2026-02-14T04:22:54.379Z,10438,services.exe,SYN_SENT,TCP,10.10.3.102,53,55.135.67.239,3389,gwhite
FIN-WS-002,2026-02-18T01:36:15.015Z,10287,OneDrive.exe,TIME_WAIT,TCP,10.10.3.102,389,10.10.1.118,443,dlee
FIN-WS-002,2026-02-10T19:01:18.085Z,21959,code.exe,TIME_WAIT,UDP,10.10.3.102,53,10.10.1.13,445,svc_sql
FIN-WS-002,2026-02-10T10:25:02.729Z,5031,cmd.exe,LISTEN,TCP,10.10.3.102,53,0.0.0.0,0,svc_backup
FIN-WS-002,2026-02-17T06:44:00.069Z,23278,System,ESTABLISHED,TCP,10.10.3.102,5985,10.10.1.106,3389,svc_sql
SLS-WS-003,2026-02-10T14:11:47.725Z,48371,outlook.exe,LISTEN,UDP,10.10.1.103,5985,0.0.0.0,0,emartinez
SLS-WS-003,2026-02-17T15:19:10.369Z,25170,lsass.exe,LISTEN,TCP,10.10.1.103,54368,0.0.0.0,0,svc_web
SLS-WS-003,2026-02-13T12:17:51.780Z,52223,winlogon.exe,LISTEN,UDP,10.10.1.103,3389,0.0.0.0,0,svc_web
SLS-WS-003,2026-02-19T08:05:17.647Z,63466,svchost.exe,LISTEN,TCP,10.10.1.103,139,0.0.0.0,0,svc_sql
SLS-WS-003,2026-02-14T20:38:27.382Z,47845,spoolsv.exe,SYN_SENT,TCP,10.10.1.103,80,30.133.91.149,8128,svc_sql
SLS-WS-003,2026-02-17T11:42:51.432Z,61721,services.exe,SYN_SENT,TCP,10.10.1.103,88,49.130.22.182,636,svc_backup
SLS-WS-003,2026-02-13T17:32:44.614Z,45792,code.exe,TIME_WAIT,TCP,10.10.1.103,389,10.10.1.139,88,dlee
SLS-WS-003,2026-02-14T19:28:19.334Z,38109,code.exe,CLOSE_WAIT,TCP,10.10.1.103,88,10.10.2.101,3389,idavis
SLS-WS-003,2026-02-17T08:11:56.103Z,14822,csrss.exe,CLOSE_WAIT,TCP,10.10.1.103,53,10.10.1.166,3389,svc_sql
SLS-WS-003,2026-02-15T11:35:39.452Z,16089,svchost.exe,ESTABLISHED,UDP,10.10.1.103,88,218.37.233.107,88,bwilson
SLS-WS-003,2026-02-18T16:21:14.941Z,43850,svchost.exe,ESTABLISHED,TCP,10.10.1.103,445,206.237.25.143,8080,hbrown
SLS-WS-003,2026-02-18T07:27:12.315Z,34263,services.exe,TIME_WAIT,TCP,10.10.1.103,53,115.81.243.116,445,gwhite
SLS-WS-003,2026-02-12T17:48:55.331Z,45578,cmd.exe,CLOSE_WAIT,TCP,10.10.1.103,135,70.171.163.229,8080,bwilson
SLS-WS-003,2026-02-20T04:30:55.830Z,1380,chrome.exe,CLOSE_WAIT,TCP,10.10.1.103,53,10.10.1.154,60323,svc_web
SLS-WS-003,2026-02-13T04:14:01.780Z,31927,smss.exe,CLOSE_WAIT,TCP,10.10.1.103,3389,77.199.214.138,3389,jsmith
SLS-WS-003,2026-02-11T17:55:29.538Z,30357,MsMpEng.exe,CLOSE_WAIT,UDP,10.10.1.103,445,160.13.201.152,88,bwilson
SLS-WS-003,2026-02-15T05:34:36.152Z,49188,SearchHost.exe,TIME_WAIT,UDP,10.10.1.103,3389,10.10.1.154,443,hbrown
SLS-WS-003,2026-02-10T15:45:26.998Z,16305,RuntimeBroker.exe,LISTEN,TCP,10.10.1.103,50471,0.0.0.0,0,cjohnson
SLS-WS-003,2026-02-17T07:21:52.960Z,37060,services.exe,LISTEN,UDP,10.10.1.103,8080,0.0.0.0,0,cjohnson
SLS-WS-003,2026-02-16T07:56:57.055Z,59608,cmd.exe,TIME_WAIT,UDP,10.10.1.103,52905,210.83.159.28,445,fthompson
SLS-WS-003,2026-02-17T14:17:53.702Z,19864,OneDrive.exe,LISTEN,TCP,10.10.1.103,443,0.0.0.0,0,svc_web
SLS-WS-003,2026-02-18T21:34:57.826Z,7016,msedge.exe,SYN_SENT,TCP,10.10.1.103,53,110.189.35.130,88,fthompson
SLS-WS-003,2026-02-18T23:40:57.917Z,5779,spoolsv.exe,CLOSE_WAIT,UDP,10.10.1.103,445,10.10.3.156,3389,dlee
SLS-WS-003,2026-02-13T21:05:04.958Z,57792,powershell.exe,CLOSE_WAIT,TCP,10.10.1.103,3389,8.253.166.47,445,idavis
SLS-WS-003,2026-02-15T00:02:37.094Z,1230,cmd.exe,SYN_SENT,TCP,10.10.1.103,443,10.10.2.131,389,agarcia
SLS-WS-003,2026-02-16T02:22:05.659Z,22628,SearchHost.exe,LISTEN,TCP,10.10.1.103,8080,0.0.0.0,0,fthompson
SLS-WS-003,2026-02-20T05:43:09.804Z,45330,System,TIME_WAIT,TCP,10.10.1.103,139,10.10.2.125,636,bwilson
SLS-WS-003,2026-02-17T17:00:16.637Z,8395,winlogon.exe,TIME_WAIT,TCP,10.10.1.103,443,214.99.151.59,80,dlee
SLS-WS-003,2026-02-14T22:07:01.918Z,12182,explorer.exe,SYN_SENT,TCP,10.10.1.103,389,10.10.3.102,389,jsmith
SLS-WS-003,2026-02-11T13:36:46.405Z,50198,winlogon.exe,ESTABLISHED,TCP,10.10.1.103,8080,10.10.2.173,3389,fthompson
SLS-WS-003,2026-02-19T19:07:33.939Z,19587,services.exe,LISTEN,TCP,10.10.1.103,8080,0.0.0.0,0,svc_web
SLS-WS-003,2026-02-11T23:15:51.384Z,11491,lsass.exe,TIME_WAIT,TCP,10.10.1.103,88,10.10.2.128,443,hbrown
SLS-WS-003,2026-02-19T22:58:39.940Z,51731,svchost.exe,CLOSE_WAIT,TCP,10.10.1.103,139,10.10.2.137,3389,svc_sql
SLS-WS-003,2026-02-12T16:12:08.505Z,9864,MsMpEng.exe,LISTEN,TCP,10.10.1.103,53,0.0.0.0,0,dlee
ENG-WS-004,2026-02-15T11:26:55.697Z,5371,teams.exe,TIME_WAIT,TCP,10.10.2.104,8080,10.10.2.152,636,idavis
ENG-WS-004,2026-02-15T05:37:30.740Z,42797,lsass.exe,TIME_WAIT,TCP,10.10.2.104,80,24.117.10.196,8080,gwhite
ENG-WS-004,2026-02-13T18:27:03.297Z,45560,teams.exe,SYN_SENT,TCP,10.10.2.104,443,121.178.209.86,8080,gwhite
ENG-WS-004,2026-02-15T03:29:38.710Z,3652,SearchHost.exe,SYN_SENT,TCP,10.10.2.104,443,81.129.165.30,636,cjohnson
ENG-WS-004,2026-02-18T15:49:42.359Z,46616,services.exe,CLOSE_WAIT,TCP,10.10.2.104,135,69.67.147.113,2915,bwilson
ENG-WS-004,2026-02-15T15:13:04.813Z,18019,svchost.exe,SYN_SENT,TCP,10.10.2.104,135,216.58.236.243,445,fthompson
ENG-WS-004,2026-02-12T07:39:09.333Z,39380,winlogon.exe,LISTEN,TCP,10.10.2.104,5985,0.0.0.0,0,hbrown
ENG-WS-004,2026-02-14T23:38:12.653Z,31841,outlook.exe,ESTABLISHED,TCP,10.10.2.104,3389,10.10.1.139,8080,emartinez
ENG-WS-004,2026-02-17T16:18:25.092Z,53276,System,CLOSE_WAIT,TCP,10.10.2.104,135,179.122.196.60,389,fthompson
ENG-WS-004,2026-02-15T13:34:22.035Z,38778,MsMpEng.exe,LISTEN,TCP,10.10.2.104,445,0.0.0.0,0,emartinez
ENG-WS-004,2026-02-13T20:38:25.110Z,45497,csrss.exe,ESTABLISHED,TCP,10.10.2.104,80,185.73.209.223,445,fthompson
ENG-WS-004,2026-02-20T17:21:23.330Z,49040,taskhostw.exe,SYN_SENT,TCP,10.10.2.104,389,184.249.18.159,445,agarcia
ENG-WS-004,2026-02-14T19:40:18.109Z,16103,msedge.exe,ESTABLISHED,TCP,10.10.2.104,636,10.10.3.108,53,hbrown
ENG-WS-004,2026-02-16T16:22:22.608Z,25170,MsMpEng.exe,LISTEN,UDP,10.10.2.104,443,0.0.0.0,0,idavis
ENG-WS-004,2026-02-17T09:24:09.797Z,10453,winlogon.exe,SYN_SENT,UDP,10.10.2.104,8080,10.10.3.102,445,agarcia
ENG-WS-004,2026-02-14T07:20:27.867Z,23624,RuntimeBroker.exe,SYN_SENT,TCP,10.10.2.104,636,10.10.3.150,3389,idavis
ENG-WS-004,2026-02-12T14:45:04.085Z,12560,OneDrive.exe,TIME_WAIT,TCP,10.10.2.104,139,3.25.254.214,53,idavis
LEG-WS-005,2026-02-18T13:09:09.435Z,2286,MsMpEng.exe,LISTEN,TCP,10.10.3.105,139,0.0.0.0,0,idavis
LEG-WS-005,2026-02-19T20:22:18.277Z,54525,outlook.exe,ESTABLISHED,TCP,10.10.3.105,636,10.10.2.170,636,bwilson
LEG-WS-005,2026-02-10T11:28:46.789Z,35264,winlogon.exe,TIME_WAIT,TCP,10.10.3.105,8080,10.10.1.151,88,agarcia
LEG-WS-005,2026-02-12T15:20:30.480Z,4242,MsMpEng.exe,TIME_WAIT,TCP,10.10.3.105,389,10.10.2.104,61006,admin
LEG-WS-005,2026-02-11T17:54:57.643Z,29829,OneDrive.exe,TIME_WAIT,TCP,10.10.3.105,445,12.19.155.127,636,emartinez
LEG-WS-005,2026-02-12T14:19:02.716Z,29243,OneDrive.exe,SYN_SENT,TCP,10.10.3.105,5985,10.10.3.153,53,cjohnson
LEG-WS-005,2026-02-17T00:25:34.020Z,39234,msedge.exe,TIME_WAIT,TCP,10.10.3.105,80,10.10.2.116,3389,jsmith
LEG-WS-005,2026-02-18T23:27:16.053Z,36420,taskhostw.exe,LISTEN,UDP,10.10.3.105,443,0.0.0.0,0,cjohnson
LEG-WS-005,2026-02-11T16:57:02.906Z,23577,powershell.exe,TIME_WAIT,UDP,10.10.3.105,139,220.74.66.139,80,svc_sql
LEG-WS-005,2026-02-18T10:30:15.335Z,33735,smss.exe,TIME_WAIT,TCP,10.10.3.105,139,14.64.215.135,389,idavis
LEG-WS-005,2026-02-18T11:48:24.296Z,56918,dwm.exe,LISTEN,TCP,10.10.3.105,636,0.0.0.0,0,admin
LEG-WS-005,2026-02-13T16:31:40.637Z,9821,csrss.exe,ESTABLISHED,TCP,10.10.3.105,5985,110.55.251.183,443,agarcia
LEG-WS-005,2026-02-19T05:11:53.463Z,42758,services.exe,SYN_SENT,TCP,10.10.3.105,5985,10.10.1.11,443,svc_sql
LEG-WS-005,2026-02-17T06:16:37.076Z,24630,code.exe,CLOSE_WAIT,TCP,10.10.3.105,5985,10.10.2.113,53,bwilson
LEG-WS-005,2026-02-16T04:25:15.043Z,44009,winlogon.exe,ESTABLISHED,TCP,10.10.3.105,443,111.49.190.208,636,agarcia
LEG-WS-005,2026-02-12T16:03:40.382Z,7192,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.3.105,88,80.180.53.148,389,emartinez
LEG-WS-005,2026-02-19T22:23:03.768Z,23104,RuntimeBroker.exe,ESTABLISHED,TCP,10.10.3.105,56562,10.10.1.124,445,jsmith
LEG-WS-005,2026-02-15T01:24:41.211Z,10415,outlook.exe,SYN_SENT,TCP,10.10.3.105,445,190.15.46.192,88,emartinez
LEG-WS-005,2026-02-15T09:24:55.534Z,29069,taskhostw.exe,SYN_SENT,TCP,10.10.3.105,80,10.10.3.111,88,fthompson
LEG-WS-005,2026-02-10T09:55:18.377Z,19853,dwm.exe,ESTABLISHED,TCP,10.10.3.105,443,10.10.3.129,80,cjohnson
LEG-WS-005,2026-02-19T00:20:18.782Z,52935,cmd.exe,TIME_WAIT,TCP,10.10.3.105,80,128.220.89.34,636,emartinez
LEG-WS-005,2026-02-14T13:15:29.076Z,63420,spotify.exe,ESTABLISHED,TCP,10.10.3.105,8080,10.10.2.152,443,emartinez
LEG-WS-005,2026-02-14T10:56:30.027Z,20434,services.exe,CLOSE_WAIT,TCP,10.10.3.105,5985,10.10.1.10,443,svc_backup
LEG-WS-005,2026-02-15T15:29:16.856Z,59470,taskhostw.exe,LISTEN,TCP,10.10.3.105,53,0.0.0.0,0,svc_sql
MKT-WS-006,2026-02-12T23:59:31.399Z,11470,spoolsv.exe,LISTEN,UDP,10.10.1.106,445,0.0.0.0,0,idavis
MKT-WS-006,2026-02-11T01:04:17.632Z,29080,spoolsv.exe,ESTABLISHED,UDP,10.10.1.106,8080,10.10.2.11,389,admin
MKT-WS-006,2026-02-11T03:10:57.901Z,56739,cmd.exe,SYN_SENT,TCP,10.10.1.106,53,19.158.236.116,445,svc_web
MKT-WS-006,2026-02-15T06:54:26.125Z,9986,services.exe,SYN_SENT,TCP,10.10.1.106,88,142.21.230.233,22095,jsmith
MKT-WS-006,2026-02-19T21:29:03.110Z,25489,taskhostw.exe,ESTABLISHED,TCP,10.10.1.106,80,64.224.224.135,53,fthompson
MKT-WS-006,2026-02-16T09:41:05.563Z,9368,MsMpEng.exe,SYN_SENT,TCP,10.10.1.106,443,85.48.197.73,443,emartinez
MKT-WS-006,2026-02-15T15:07:19.637Z,1294,spoolsv.exe,CLOSE_WAIT,UDP,10.10.1.106,139,144.192.168.209,88,emartinez
MKT-WS-006,2026-02-19T11:05:53.495Z,40603,code.exe,TIME_WAIT,TCP,10.10.1.106,135,36.79.39.76,53,bwilson
MKT-WS-006,2026-02-14T21:25:06.064Z,27026,outlook.exe,LISTEN,UDP,10.10.1.106,636,0.0.0.0,0,emartinez
MKT-WS-006,2026-02-19T17:59:36.904Z,12815,powershell.exe,CLOSE_WAIT,TCP,10.10.1.106,58488,10.10.2.131,389,emartinez
MKT-WS-006,2026-02-10T21:02:41.822Z,31595,smss.exe,CLOSE_WAIT,TCP,10.10.1.106,58385,98.214.82.210,445,svc_web
MKT-WS-006,2026-02-11T06:55:42.212Z,59770,msedge.exe,SYN_SENT,TCP,10.10.1.106,443,196.82.139.116,88,cjohnson
MKT-WS-006,2026-02-13T15:40:16.387Z,6593,RuntimeBroker.exe,ESTABLISHED,TCP,10.10.1.106,5985,10.10.3.111,80,svc_web
MKT-WS-006,2026-02-19T21:20:56.554Z,31062,taskhostw.exe,LISTEN,UDP,10.10.1.106,139,0.0.0.0,0,svc_backup
MKT-WS-006,2026-02-12T19:24:36.203Z,8085,OneDrive.exe,CLOSE_WAIT,TCP,10.10.1.106,443,10.10.3.120,445,jsmith
MKT-WS-006,2026-02-13T08:49:04.788Z,202,spoolsv.exe,SYN_SENT,TCP,10.10.1.106,443,215.255.8.162,8080,idavis
MKT-WS-006,2026-02-20T13:15:35.480Z,16723,smss.exe,CLOSE_WAIT,UDP,10.10.1.106,53,93.34.10.100,88,svc_backup
MKT-WS-006,2026-02-18T19:22:37.979Z,11574,steam.exe,ESTABLISHED,TCP,10.10.1.106,636,10.10.1.106,53,svc_web
MKT-WS-006,2026-02-19T13:26:51.347Z,20782,csrss.exe,CLOSE_WAIT,UDP,10.10.1.106,443,184.234.18.76,3389,dlee
MKT-WS-006,2026-02-18T15:50:08.170Z,28736,System,CLOSE_WAIT,TCP,10.10.1.106,50351,10.10.2.107,443,fthompson
MKT-WS-006,2026-02-16T14:36:47.968Z,53992,SearchHost.exe,TIME_WAIT,UDP,10.10.1.106,636,10.10.3.111,88,bwilson
MKT-WS-006,2026-02-13T23:53:12.285Z,2875,taskhostw.exe,ESTABLISHED,TCP,10.10.1.106,389,76.156.228.155,389,svc_backup
MKT-WS-006,2026-02-18T16:16:26.378Z,44625,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.106,389,10.10.1.13,636,bwilson
MKT-WS-006,2026-02-17T09:45:55.851Z,62282,outlook.exe,SYN_SENT,TCP,10.10.1.106,445,18.120.187.93,8080,emartinez
MKT-WS-006,2026-02-15T12:45:39.564Z,25461,chrome.exe,SYN_SENT,UDP,10.10.1.106,5985,81.142.127.246,8080,hbrown
MKT-WS-006,2026-02-20T17:18:56.163Z,53217,cmd.exe,CLOSE_WAIT,UDP,10.10.1.106,636,10.10.2.110,389,admin
MKT-WS-006,2026-02-18T14:00:59.106Z,15614,taskhostw.exe,TIME_WAIT,TCP,10.10.1.106,139,218.80.89.204,3389,svc_sql
MKT-WS-006,2026-02-15T19:25:26.089Z,50507,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.106,8080,10.10.2.140,389,fthompson
MKT-WS-006,2026-02-15T04:27:29.879Z,34005,chrome.exe,LISTEN,TCP,10.10.1.106,8080,0.0.0.0,0,emartinez
MKT-WS-006,2026-02-13T16:39:54.676Z,46586,System,SYN_SENT,UDP,10.10.1.106,5985,10.10.3.120,8080,cjohnson
EXEC-WS-007,2026-02-16T11:57:07.600Z,38153,dwm.exe,TIME_WAIT,TCP,10.10.2.107,135,163.140.64.161,8080,bwilson
EXEC-WS-007,2026-02-15T12:30:34.254Z,41201,services.exe,SYN_SENT,TCP,10.10.2.107,80,10.10.1.127,80,hbrown
EXEC-WS-007,2026-02-12T11:00:20.712Z,39858,notepad.exe,CLOSE_WAIT,UDP,10.10.2.107,139,10.10.1.157,389,bwilson
EXEC-WS-007,2026-02-15T00:23:56.410Z,9332,OneDrive.exe,TIME_WAIT,TCP,10.10.2.107,445,10.10.2.131,445,agarcia
EXEC-WS-007,2026-02-15T12:41:23.737Z,20320,SearchHost.exe,SYN_SENT,TCP,10.10.2.107,445,10.10.1.121,389,gwhite
EXEC-WS-007,2026-02-13T07:26:13.543Z,635,SearchHost.exe,SYN_SENT,TCP,10.10.2.107,135,10.10.2.137,389,svc_web
EXEC-WS-007,2026-02-13T08:09:01.527Z,25419,outlook.exe,TIME_WAIT,TCP,10.10.2.107,3389,12.205.26.146,636,hbrown
EXEC-WS-007,2026-02-12T09:45:52.093Z,33465,System,TIME_WAIT,TCP,10.10.2.107,445,10.10.3.144,8080,fthompson
EXEC-WS-007,2026-02-13T15:37:57.028Z,25852,explorer.exe,ESTABLISHED,UDP,10.10.2.107,60065,122.233.76.156,22517,idavis
EXEC-WS-007,2026-02-20T12:58:28.228Z,38353,notepad.exe,SYN_SENT,TCP,10.10.2.107,636,10.10.1.103,443,dlee
EXEC-WS-007,2026-02-18T09:39:05.516Z,25016,OneDrive.exe,ESTABLISHED,TCP,10.10.2.107,139,168.116.26.150,35380,bwilson
EXEC-WS-007,2026-02-14T14:35:39.668Z,50888,powershell.exe,ESTABLISHED,TCP,10.10.2.107,135,10.10.3.120,3389,idavis
EXEC-WS-007,2026-02-13T17:15:44.580Z,43499,explorer.exe,LISTEN,TCP,10.10.2.107,53,0.0.0.0,0,gwhite
EXEC-WS-007,2026-02-14T00:34:18.289Z,50693,taskhostw.exe,LISTEN,TCP,10.10.2.107,53,0.0.0.0,0,svc_web
EXEC-WS-007,2026-02-17T12:33:35.920Z,32147,spoolsv.exe,TIME_WAIT,TCP,10.10.2.107,135,10.10.1.139,3389,emartinez
EXEC-WS-007,2026-02-13T07:54:27.307Z,46901,System,TIME_WAIT,TCP,10.10.2.107,88,174.194.202.210,80,agarcia
EXEC-WS-007,2026-02-17T07:27:30.568Z,34902,csrss.exe,TIME_WAIT,TCP,10.10.2.107,135,212.138.139.36,80,cjohnson
EXEC-WS-007,2026-02-15T07:21:43.668Z,13171,explorer.exe,ESTABLISHED,TCP,10.10.2.107,636,121.51.70.2,389,svc_sql
EXEC-WS-007,2026-02-20T01:28:50.349Z,2481,taskhostw.exe,TIME_WAIT,TCP,10.10.2.107,389,10.10.3.123,8080,svc_web
EXEC-WS-007,2026-02-13T10:35:52.989Z,39603,winlogon.exe,LISTEN,TCP,10.10.2.107,80,0.0.0.0,0,agarcia
EXEC-WS-007,2026-02-17T02:04:16.804Z,47194,taskhostw.exe,TIME_WAIT,TCP,10.10.2.107,445,10.10.1.115,389,bwilson
EXEC-WS-007,2026-02-12T06:11:43.080Z,9315,taskhostw.exe,TIME_WAIT,TCP,10.10.2.107,445,157.207.218.132,443,gwhite
EXEC-WS-007,2026-02-17T13:11:31.731Z,4171,powershell.exe,ESTABLISHED,TCP,10.10.2.107,135,115.136.168.78,53,admin
EXEC-WS-007,2026-02-11T13:21:14.171Z,60139,notepad.exe,LISTEN,TCP,10.10.2.107,636,0.0.0.0,0,dlee
EXEC-WS-007,2026-02-15T01:44:40.805Z,64904,powershell.exe,LISTEN,UDP,10.10.2.107,445,0.0.0.0,0,idavis
EXEC-WS-007,2026-02-11T12:03:07.912Z,54414,OneDrive.exe,SYN_SENT,TCP,10.10.2.107,56308,64.41.228.136,61136,hbrown
EXEC-WS-007,2026-02-14T23:22:14.422Z,3746,code.exe,SYN_SENT,TCP,10.10.2.107,445,10.10.1.127,636,gwhite
EXEC-WS-007,2026-02-16T08:34:40.138Z,3068,lsass.exe,CLOSE_WAIT,TCP,10.10.2.107,53,119.157.11.102,3389,fthompson
EXEC-WS-007,2026-02-15T00:08:03.419Z,60204,chrome.exe,SYN_SENT,TCP,10.10.2.107,8080,10.10.1.118,88,fthompson
EXEC-WS-007,2026-02-20T12:37:21.614Z,30443,MsMpEng.exe,SYN_SENT,UDP,10.10.2.107,443,46.201.65.187,80,admin
IT-WS-008,2026-02-13T04:54:44.755Z,61534,powershell.exe,LISTEN,TCP,10.10.3.108,445,0.0.0.0,0,svc_backup
IT-WS-008,2026-02-12T21:11:00.736Z,2999,explorer.exe,CLOSE_WAIT,TCP,10.10.3.108,135,10.10.3.105,80,fthompson
IT-WS-008,2026-02-20T16:22:15.097Z,15446,System,LISTEN,TCP,10.10.3.108,53,0.0.0.0,0,svc_web
IT-WS-008,2026-02-20T05:07:48.229Z,57752,smss.exe,TIME_WAIT,TCP,10.10.3.108,135,10.10.1.139,636,svc_backup
IT-WS-008,2026-02-14T06:06:54.169Z,49541,spoolsv.exe,CLOSE_WAIT,TCP,10.10.3.108,80,10.10.1.154,445,hbrown
IT-WS-008,2026-02-12T23:44:56.081Z,21744,powershell.exe,TIME_WAIT,UDP,10.10.3.108,80,144.211.213.143,3389,admin
IT-WS-008,2026-02-17T21:04:34.715Z,36724,csrss.exe,TIME_WAIT,TCP,10.10.3.108,80,69.193.20.224,53757,cjohnson
IT-WS-008,2026-02-16T02:01:11.363Z,50924,taskhostw.exe,TIME_WAIT,TCP,10.10.3.108,135,190.60.245.235,3389,dlee
IT-WS-008,2026-02-14T04:40:34.429Z,27227,System,TIME_WAIT,TCP,10.10.3.108,3389,10.10.2.161,3389,jsmith
IT-WS-008,2026-02-20T01:41:22.425Z,38054,powershell.exe,LISTEN,TCP,10.10.3.108,53,0.0.0.0,0,svc_backup
IT-WS-008,2026-02-16T06:26:50.561Z,16204,outlook.exe,LISTEN,TCP,10.10.3.108,5985,0.0.0.0,0,gwhite
IT-WS-008,2026-02-15T10:04:44.689Z,60189,MsMpEng.exe,TIME_WAIT,TCP,10.10.3.108,636,165.251.235.44,636,hbrown
IT-WS-008,2026-02-10T10:17:07.315Z,33243,explorer.exe,SYN_SENT,TCP,10.10.3.108,389,13.3.211.36,8080,gwhite
IT-WS-008,2026-02-10T12:17:08.337Z,53391,services.exe,SYN_SENT,TCP,10.10.3.108,80,10.10.3.168,445,svc_backup
IT-WS-008,2026-02-15T02:44:57.970Z,16038,teams.exe,ESTABLISHED,TCP,10.10.3.108,135,50.129.181.69,88,svc_backup
IT-WS-008,2026-02-11T04:40:17.510Z,55499,MsMpEng.exe,ESTABLISHED,TCP,10.10.3.108,5985,98.193.243.15,8080,fthompson
IT-WS-008,2026-02-16T04:52:38.877Z,2256,taskhostw.exe,SYN_SENT,TCP,10.10.3.108,135,10.10.2.110,636,bwilson
IT-WS-008,2026-02-17T09:15:31.469Z,35526,taskhostw.exe,ESTABLISHED,UDP,10.10.3.108,53876,211.203.39.77,88,emartinez
IT-WS-008,2026-02-20T06:42:52.557Z,26098,outlook.exe,ESTABLISHED,TCP,10.10.3.108,80,10.10.2.110,40684,svc_sql
IT-WS-008,2026-02-13T09:50:41.532Z,16251,spoolsv.exe,TIME_WAIT,TCP,10.10.3.108,135,10.10.1.175,6640,svc_backup
IT-WS-008,2026-02-14T09:24:19.777Z,23738,cmd.exe,LISTEN,TCP,10.10.3.108,636,0.0.0.0,0,agarcia
IT-WS-008,2026-02-11T06:24:16.957Z,36421,notepad.exe,CLOSE_WAIT,TCP,10.10.3.108,443,10.10.2.158,80,agarcia
IT-WS-008,2026-02-12T02:22:31.570Z,17723,taskhostw.exe,CLOSE_WAIT,TCP,10.10.3.108,5985,100.43.124.147,88,dlee
IT-WS-008,2026-02-17T20:13:29.507Z,32592,outlook.exe,ESTABLISHED,UDP,10.10.3.108,139,10.10.2.110,3389,idavis
IT-WS-008,2026-02-18T19:52:07.923Z,56428,csrss.exe,ESTABLISHED,UDP,10.10.3.108,80,10.10.2.143,88,admin
IT-WS-008,2026-02-20T09:56:26.776Z,51347,outlook.exe,TIME_WAIT,TCP,10.10.3.108,8080,10.10.3.141,389,cjohnson
IT-WS-008,2026-02-18T23:49:13.627Z,4632,cmd.exe,CLOSE_WAIT,TCP,10.10.3.108,88,52.92.13.244,445,svc_web
IT-WS-008,2026-02-15T07:48:31.229Z,26367,lsass.exe,CLOSE_WAIT,UDP,10.10.3.108,135,65.78.216.203,30454,hbrown
IT-WS-008,2026-02-10T19:04:27.024Z,64561,OneDrive.exe,CLOSE_WAIT,TCP,10.10.3.108,50356,10.10.3.132,11925,admin
IT-WS-008,2026-02-14T09:47:00.751Z,50716,SearchHost.exe,TIME_WAIT,TCP,10.10.3.108,80,26.132.113.131,53,admin
IT-WS-008,2026-02-11T10:08:14.422Z,27361,dwm.exe,LISTEN,TCP,10.10.3.108,8080,0.0.0.0,0,agarcia
IT-WS-008,2026-02-13T15:43:38.526Z,19778,outlook.exe,TIME_WAIT,TCP,10.10.3.108,8080,201.105.247.90,389,jsmith
IT-WS-008,2026-02-14T18:35:32.445Z,30381,msedge.exe,ESTABLISHED,TCP,10.10.3.108,389,205.84.124.133,636,cjohnson
IT-WS-008,2026-02-10T15:17:53.046Z,40346,spoolsv.exe,LISTEN,UDP,10.10.3.108,5985,0.0.0.0,0,cjohnson
IT-WS-008,2026-02-12T09:16:06.847Z,7568,lsass.exe,CLOSE_WAIT,TCP,10.10.3.108,135,72.32.52.205,53,dlee
HR-WS-009,2026-02-19T21:40:14.321Z,38777,spoolsv.exe,TIME_WAIT,TCP,10.10.1.109,88,101.58.178.91,445,agarcia
HR-WS-009,2026-02-16T07:42:05.440Z,27824,taskhostw.exe,ESTABLISHED,UDP,10.10.1.109,443,10.10.3.150,8080,bwilson
HR-WS-009,2026-02-13T08:12:31.296Z,12361,System,LISTEN,TCP,10.10.1.109,8080,0.0.0.0,0,emartinez
HR-WS-009,2026-02-14T15:54:27.391Z,55143,services.exe,ESTABLISHED,TCP,10.10.1.109,8080,10.10.1.172,389,gwhite
HR-WS-009,2026-02-16T05:24:45.415Z,50729,chrome.exe,SYN_SENT,TCP,10.10.1.109,139,9.140.115.138,389,svc_sql
HR-WS-009,2026-02-17T23:59:49.827Z,42939,dwm.exe,ESTABLISHED,TCP,10.10.1.109,139,199.187.21.195,443,svc_sql
HR-WS-009,2026-02-16T22:11:33.567Z,10977,explorer.exe,CLOSE_WAIT,TCP,10.10.1.109,443,10.10.1.10,57453,idavis
HR-WS-009,2026-02-13T06:16:16.516Z,35408,code.exe,LISTEN,TCP,10.10.1.109,53,0.0.0.0,0,bwilson
HR-WS-009,2026-02-17T15:21:23.874Z,8796,OneDrive.exe,TIME_WAIT,TCP,10.10.1.109,53,174.48.69.247,8080,cjohnson
HR-WS-009,2026-02-16T08:21:22.976Z,17710,taskhostw.exe,LISTEN,TCP,10.10.1.109,445,0.0.0.0,0,admin
HR-WS-009,2026-02-19T09:13:36.986Z,55619,csrss.exe,ESTABLISHED,TCP,10.10.1.109,53,10.10.1.163,80,svc_backup
HR-WS-009,2026-02-16T08:29:00.276Z,37202,csrss.exe,TIME_WAIT,TCP,10.10.1.109,135,10.10.1.142,636,svc_web
HR-WS-009,2026-02-20T15:57:34.414Z,28136,taskhostw.exe,ESTABLISHED,TCP,10.10.1.109,389,10.10.1.121,80,cjohnson
HR-WS-009,2026-02-16T20:24:03.846Z,47678,outlook.exe,TIME_WAIT,UDP,10.10.1.109,443,168.184.128.22,88,svc_backup
HR-WS-009,2026-02-17T13:53:57.396Z,53650,lsass.exe,ESTABLISHED,TCP,10.10.1.109,135,10.10.3.129,80,agarcia
HR-WS-009,2026-02-14T07:46:02.933Z,47991,lsass.exe,LISTEN,TCP,10.10.1.109,135,0.0.0.0,0,svc_sql
HR-WS-009,2026-02-14T22:01:29.478Z,47445,taskhostw.exe,TIME_WAIT,TCP,10.10.1.109,5985,199.68.73.18,8080,cjohnson
HR-WS-009,2026-02-13T14:37:33.301Z,9263,outlook.exe,CLOSE_WAIT,TCP,10.10.1.109,135,10.10.2.116,88,cjohnson
HR-WS-009,2026-02-20T03:19:11.320Z,1857,chrome.exe,LISTEN,TCP,10.10.1.109,58488,0.0.0.0,0,svc_web
HR-WS-009,2026-02-14T09:56:15.914Z,42447,notepad.exe,LISTEN,TCP,10.10.1.109,636,0.0.0.0,0,jsmith
HR-WS-009,2026-02-19T07:12:12.603Z,37349,powershell.exe,CLOSE_WAIT,TCP,10.10.1.109,135,10.10.3.147,88,fthompson
HR-WS-009,2026-02-16T10:50:27.147Z,1003,MsMpEng.exe,LISTEN,TCP,10.10.1.109,80,0.0.0.0,0,dlee
HR-WS-009,2026-02-15T22:24:49.822Z,10106,explorer.exe,CLOSE_WAIT,TCP,10.10.1.109,389,183.212.216.180,636,dlee
HR-WS-009,2026-02-11T05:33:11.518Z,28574,chrome.exe,SYN_SENT,UDP,10.10.1.109,53,84.200.33.80,3389,agarcia
HR-WS-009,2026-02-18T11:44:48.391Z,47336,services.exe,ESTABLISHED,TCP,10.10.1.109,443,10.10.2.164,636,dlee
HR-WS-009,2026-02-16T20:52:59.549Z,32615,outlook.exe,TIME_WAIT,TCP,10.10.1.109,3389,10.10.1.109,47706,gwhite
HR-WS-009,2026-02-10T08:38:31.655Z,56375,explorer.exe,CLOSE_WAIT,TCP,10.10.1.109,3389,41.130.52.229,636,svc_web
HR-WS-009,2026-02-13T03:48:52.162Z,5204,explorer.exe,CLOSE_WAIT,TCP,10.10.1.109,445,46.18.214.58,53,idavis
HR-WS-009,2026-02-13T17:49:30.829Z,36347,dwm.exe,ESTABLISHED,UDP,10.10.1.109,56465,10.10.1.160,445,gwhite
HR-WS-009,2026-02-17T23:06:57.003Z,35919,code.exe,TIME_WAIT,TCP,10.10.1.109,636,10.10.1.10,3389,svc_sql
HR-WS-009,2026-02-19T04:15:05.389Z,47758,outlook.exe,ESTABLISHED,TCP,10.10.1.109,135,139.177.4.244,88,dlee
HR-WS-009,2026-02-20T11:08:23.312Z,9430,dwm.exe,LISTEN,TCP,10.10.1.109,80,0.0.0.0,0,svc_backup
HR-WS-009,2026-02-19T15:53:40.146Z,30145,explorer.exe,LISTEN,TCP,10.10.1.109,636,0.0.0.0,0,svc_backup
HR-WS-009,2026-02-19T04:43:42.335Z,60789,msedge.exe,SYN_SENT,UDP,10.10.1.109,443,152.31.222.170,445,svc_sql
HR-WS-009,2026-02-12T01:05:37.482Z,30643,taskhostw.exe,TIME_WAIT,TCP,10.10.1.109,135,20.103.69.200,443,emartinez
HR-WS-009,2026-02-10T18:04:56.827Z,54883,System,TIME_WAIT,UDP,10.10.1.109,139,10.10.1.121,55182,svc_web
HR-WS-009,2026-02-10T20:14:15.555Z,19684,chrome.exe,LISTEN,TCP,10.10.1.109,53,0.0.0.0,0,dlee
HR-WS-009,2026-02-10T23:25:02.266Z,51280,teams.exe,ESTABLISHED,TCP,10.10.1.109,53,192.127.48.119,80,cjohnson
HR-WS-009,2026-02-11T14:37:54.893Z,61853,SearchHost.exe,TIME_WAIT,TCP,10.10.1.109,443,6.33.101.232,53,gwhite
FIN-WS-010,2026-02-14T23:30:10.287Z,9840,smss.exe,CLOSE_WAIT,TCP,10.10.2.110,80,98.218.88.91,445,jsmith
FIN-WS-010,2026-02-19T12:41:40.716Z,31493,services.exe,LISTEN,TCP,10.10.2.110,5985,0.0.0.0,0,jsmith
FIN-WS-010,2026-02-19T13:09:47.264Z,34559,SearchHost.exe,LISTEN,TCP,10.10.2.110,389,0.0.0.0,0,cjohnson
FIN-WS-010,2026-02-12T04:57:14.286Z,20997,System,ESTABLISHED,TCP,10.10.2.110,8080,10.10.2.173,445,idavis
FIN-WS-010,2026-02-18T20:04:16.645Z,60213,cmd.exe,ESTABLISHED,TCP,10.10.2.110,60864,150.119.81.26,636,svc_backup
FIN-WS-010,2026-02-20T04:53:22.861Z,37036,powershell.exe,SYN_SENT,TCP,10.10.2.110,445,46.121.162.207,53,bwilson
FIN-WS-010,2026-02-15T07:29:50.089Z,21840,code.exe,CLOSE_WAIT,TCP,10.10.2.110,445,126.19.46.15,636,idavis
FIN-WS-010,2026-02-14T05:23:51.702Z,61829,outlook.exe,TIME_WAIT,UDP,10.10.2.110,80,10.10.1.115,443,admin
FIN-WS-010,2026-02-17T13:23:24.358Z,60972,msedge.exe,TIME_WAIT,TCP,10.10.2.110,445,41.223.249.167,636,idavis
FIN-WS-010,2026-02-10T16:05:44.468Z,39578,powershell.exe,SYN_SENT,UDP,10.10.2.110,139,10.10.2.101,56779,emartinez
FIN-WS-010,2026-02-11T19:09:39.031Z,48946,services.exe,LISTEN,TCP,10.10.2.110,8080,0.0.0.0,0,agarcia
SLS-WS-011,2026-02-10T10:50:56.058Z,13841,taskhostw.exe,LISTEN,TCP,10.10.3.111,8080,0.0.0.0,0,cjohnson
SLS-WS-011,2026-02-13T23:48:28.052Z,24698,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.3.111,80,10.10.2.122,88,agarcia
SLS-WS-011,2026-02-18T15:47:55.109Z,2289,smss.exe,LISTEN,UDP,10.10.3.111,443,0.0.0.0,0,dlee
SLS-WS-011,2026-02-19T15:18:23.555Z,46270,cmd.exe,ESTABLISHED,TCP,10.10.3.111,445,10.10.1.112,39954,jsmith
SLS-WS-011,2026-02-10T21:23:20.168Z,21798,spoolsv.exe,LISTEN,TCP,10.10.3.111,445,0.0.0.0,0,cjohnson
SLS-WS-011,2026-02-19T01:57:49.054Z,10165,lsass.exe,SYN_SENT,TCP,10.10.3.111,389,10.10.2.107,636,jsmith
SLS-WS-011,2026-02-15T06:23:33.586Z,7669,lsass.exe,ESTABLISHED,TCP,10.10.3.111,135,10.10.1.13,443,dlee
SLS-WS-011,2026-02-10T19:09:15.232Z,28918,winlogon.exe,CLOSE_WAIT,TCP,10.10.3.111,389,10.10.2.149,389,gwhite
SLS-WS-011,2026-02-12T16:52:41.482Z,4096,cmd.exe,SYN_SENT,TCP,10.10.3.111,54104,10.10.1.145,64640,svc_web
SLS-WS-011,2026-02-19T17:06:49.555Z,52558,dwm.exe,CLOSE_WAIT,TCP,10.10.3.111,88,61.243.153.21,33929,idavis
SLS-WS-011,2026-02-20T05:15:55.334Z,11055,services.exe,LISTEN,TCP,10.10.3.111,445,0.0.0.0,0,cjohnson
SLS-WS-011,2026-02-11T05:45:24.696Z,36561,outlook.exe,ESTABLISHED,TCP,10.10.3.111,389,10.10.2.10,443,fthompson
SLS-WS-011,2026-02-16T09:40:09.378Z,63331,cmd.exe,SYN_SENT,TCP,10.10.3.111,49557,180.214.57.107,38156,agarcia
SLS-WS-011,2026-02-13T04:51:12.727Z,9527,smss.exe,ESTABLISHED,TCP,10.10.3.111,5985,10.10.1.11,8080,idavis
SLS-WS-011,2026-02-10T13:03:29.599Z,53668,OneDrive.exe,CLOSE_WAIT,TCP,10.10.3.111,3389,10.10.2.161,53,svc_sql
SLS-WS-011,2026-02-12T12:50:51.451Z,54099,cmd.exe,CLOSE_WAIT,TCP,10.10.3.111,445,77.226.164.69,389,fthompson
SLS-WS-011,2026-02-19T10:47:42.500Z,13254,dwm.exe,TIME_WAIT,TCP,10.10.3.111,443,80.206.69.200,3389,svc_web
SLS-WS-011,2026-02-17T10:17:36.924Z,15955,explorer.exe,CLOSE_WAIT,TCP,10.10.3.111,636,10.10.1.160,443,emartinez
SLS-WS-011,2026-02-12T00:52:42.253Z,58721,csrss.exe,LISTEN,TCP,10.10.3.111,3389,0.0.0.0,0,dlee
SLS-WS-011,2026-02-13T03:16:15.221Z,26937,OneDrive.exe,ESTABLISHED,TCP,10.10.3.111,5985,13.83.109.220,3389,hbrown
SLS-WS-011,2026-02-14T17:57:06.120Z,24772,qbittorrent.exe,ESTABLISHED,TCP,10.10.3.111,389,10.10.1.11,445,svc_web
SLS-WS-011,2026-02-15T18:09:34.108Z,40968,cmd.exe,LISTEN,TCP,10.10.3.111,389,0.0.0.0,0,fthompson
SLS-WS-011,2026-02-19T07:22:22.440Z,17214,svchost.exe,SYN_SENT,TCP,10.10.3.111,139,10.10.3.144,53,admin
ENG-WS-012,2026-02-13T15:53:47.164Z,9270,dwm.exe,LISTEN,TCP,10.10.1.112,389,0.0.0.0,0,svc_backup
ENG-WS-012,2026-02-15T14:49:43.370Z,55505,winlogon.exe,TIME_WAIT,TCP,10.10.1.112,5985,10.10.3.129,53,bwilson
ENG-WS-012,2026-02-11T15:59:09.725Z,17051,System,LISTEN,TCP,10.10.1.112,8080,0.0.0.0,0,svc_backup
ENG-WS-012,2026-02-13T09:30:46.009Z,55885,teams.exe,TIME_WAIT,TCP,10.10.1.112,3389,10.10.2.143,18100,agarcia
ENG-WS-012,2026-02-11T18:20:28.733Z,13226,spoolsv.exe,SYN_SENT,TCP,10.10.1.112,8080,10.10.1.139,8080,emartinez
ENG-WS-012,2026-02-10T09:10:42.151Z,18025,smss.exe,CLOSE_WAIT,UDP,10.10.1.112,636,47.41.249.86,80,cjohnson
ENG-WS-012,2026-02-20T09:19:55.056Z,25221,teams.exe,SYN_SENT,UDP,10.10.1.112,65194,10.10.3.156,88,jsmith
ENG-WS-012,2026-02-13T14:01:23.034Z,6831,code.exe,TIME_WAIT,TCP,10.10.1.112,59710,214.97.9.174,53,fthompson
ENG-WS-012,2026-02-20T05:06:57.037Z,29979,notepad.exe,LISTEN,TCP,10.10.1.112,139,0.0.0.0,0,svc_backup
ENG-WS-012,2026-02-17T21:47:31.945Z,8698,dwm.exe,TIME_WAIT,TCP,10.10.1.112,3389,126.183.96.43,3389,cjohnson
ENG-WS-012,2026-02-16T19:47:01.299Z,39023,smss.exe,SYN_SENT,UDP,10.10.1.112,3389,10.10.1.13,636,jsmith
ENG-WS-012,2026-02-12T11:22:25.424Z,45040,spoolsv.exe,ESTABLISHED,TCP,10.10.1.112,5985,10.10.1.133,8080,admin
ENG-WS-012,2026-02-18T12:11:24.059Z,32719,lsass.exe,ESTABLISHED,TCP,10.10.1.112,88,156.70.214.213,443,cjohnson
ENG-WS-012,2026-02-17T12:03:03.523Z,31600,cmd.exe,SYN_SENT,UDP,10.10.1.112,636,10.10.3.171,3389,emartinez
ENG-WS-012,2026-02-13T02:01:52.520Z,3382,svchost.exe,ESTABLISHED,TCP,10.10.1.112,445,24.38.51.232,445,agarcia
ENG-WS-012,2026-02-17T05:50:19.524Z,11274,explorer.exe,TIME_WAIT,TCP,10.10.1.112,5985,190.59.48.218,8080,emartinez
ENG-WS-012,2026-02-13T03:57:29.781Z,25378,csrss.exe,SYN_SENT,TCP,10.10.1.112,3389,10.10.2.152,389,svc_backup
ENG-WS-012,2026-02-17T21:36:10.000Z,64428,lsass.exe,LISTEN,TCP,10.10.1.112,636,0.0.0.0,0,svc_web
ENG-WS-012,2026-02-11T12:14:03.731Z,27053,lsass.exe,SYN_SENT,TCP,10.10.1.112,445,157.194.183.157,389,gwhite
ENG-WS-012,2026-02-11T21:09:49.007Z,54261,cmd.exe,TIME_WAIT,TCP,10.10.1.112,389,10.10.3.132,88,hbrown
ENG-WS-012,2026-02-13T16:09:30.433Z,21785,services.exe,ESTABLISHED,TCP,10.10.1.112,53,218.240.253.223,389,dlee
ENG-WS-012,2026-02-14T23:46:01.307Z,7879,powershell.exe,SYN_SENT,TCP,10.10.1.112,135,10.10.3.174,389,gwhite
ENG-WS-012,2026-02-16T04:34:59.314Z,42999,svchost.exe,ESTABLISHED,TCP,10.10.1.112,80,10.10.1.11,636,admin
ENG-WS-012,2026-02-10T08:32:57.253Z,23374,taskhostw.exe,TIME_WAIT,TCP,10.10.1.112,8080,85.242.186.184,3389,svc_web
ENG-WS-012,2026-02-16T16:42:46.589Z,12390,notepad.exe,SYN_SENT,TCP,10.10.1.112,636,10.10.1.118,445,agarcia
ENG-WS-012,2026-02-13T20:29:00.193Z,49720,SearchHost.exe,LISTEN,TCP,10.10.1.112,636,0.0.0.0,0,fthompson
ENG-WS-012,2026-02-19T01:42:14.499Z,31749,spoolsv.exe,SYN_SENT,TCP,10.10.1.112,8080,169.68.255.2,88,hbrown
LEG-WS-013,2026-02-16T14:08:11.419Z,57948,teams.exe,LISTEN,TCP,10.10.2.113,389,0.0.0.0,0,emartinez
LEG-WS-013,2026-02-17T15:00:12.856Z,49148,SearchHost.exe,CLOSE_WAIT,TCP,10.10.2.113,139,102.175.150.116,28073,hbrown
LEG-WS-013,2026-02-17T13:34:40.776Z,21227,OneDrive.exe,SYN_SENT,TCP,10.10.2.113,135,54.148.176.236,636,svc_backup
LEG-WS-013,2026-02-11T20:19:54.040Z,44025,RuntimeBroker.exe,SYN_SENT,TCP,10.10.2.113,389,192.146.216.207,88,jsmith
LEG-WS-013,2026-02-11T09:37:12.005Z,56987,teams.exe,TIME_WAIT,TCP,10.10.2.113,80,177.151.104.193,389,admin
LEG-WS-013,2026-02-20T09:27:29.892Z,3625,powershell.exe,SYN_SENT,TCP,10.10.2.113,53,10.10.2.149,53,jsmith
LEG-WS-013,2026-02-20T13:51:47.991Z,4980,code.exe,SYN_SENT,TCP,10.10.2.113,389,10.10.2.125,8080,bwilson
LEG-WS-013,2026-02-15T04:34:58.204Z,61539,dwm.exe,ESTABLISHED,TCP,10.10.2.113,5985,10.10.1.175,53,bwilson
LEG-WS-013,2026-02-15T18:09:05.658Z,51628,taskhostw.exe,SYN_SENT,TCP,10.10.2.113,8080,203.183.37.201,8080,hbrown
LEG-WS-013,2026-02-15T20:37:29.006Z,36887,System,SYN_SENT,TCP,10.10.2.113,3389,10.10.3.147,15340,svc_web
LEG-WS-013,2026-02-14T08:28:08.341Z,35504,spoolsv.exe,ESTABLISHED,TCP,10.10.2.113,8080,10.10.1.142,443,svc_backup
LEG-WS-013,2026-02-12T01:50:55.328Z,62770,dwm.exe,TIME_WAIT,TCP,10.10.2.113,8080,12.151.98.83,443,svc_sql
LEG-WS-013,2026-02-10T13:56:17.651Z,47080,svchost.exe,ESTABLISHED,UDP,10.10.2.113,389,109.53.105.138,8080,emartinez
LEG-WS-013,2026-02-14T20:15:22.531Z,1206,chrome.exe,ESTABLISHED,UDP,10.10.2.113,53,10.10.3.150,88,fthompson
LEG-WS-013,2026-02-16T15:38:29.257Z,18549,System,ESTABLISHED,TCP,10.10.2.113,51224,191.23.37.92,445,svc_sql
LEG-WS-013,2026-02-13T10:30:50.852Z,58228,SearchHost.exe,CLOSE_WAIT,TCP,10.10.2.113,445,10.10.1.151,8080,svc_sql
LEG-WS-013,2026-02-18T03:04:26.928Z,59314,spoolsv.exe,TIME_WAIT,TCP,10.10.2.113,443,11.2.201.138,3389,svc_backup
LEG-WS-013,2026-02-15T03:18:58.683Z,36122,lsass.exe,SYN_SENT,UDP,10.10.2.113,445,57.129.99.30,636,agarcia
LEG-WS-013,2026-02-16T18:52:44.199Z,59090,chrome.exe,TIME_WAIT,TCP,10.10.2.113,636,149.249.169.92,445,cjohnson
MKT-WS-014,2026-02-12T21:32:37.624Z,14617,taskhostw.exe,SYN_SENT,TCP,10.10.3.114,88,146.186.161.246,53,svc_backup
MKT-WS-014,2026-02-15T09:44:34.244Z,7232,lsass.exe,TIME_WAIT,TCP,10.10.3.114,389,10.10.2.158,445,bwilson
MKT-WS-014,2026-02-16T08:43:30.708Z,50510,chrome.exe,TIME_WAIT,UDP,10.10.3.114,139,188.39.38.229,54281,idavis
MKT-WS-014,2026-02-15T13:16:50.854Z,6034,explorer.exe,SYN_SENT,TCP,10.10.3.114,389,10.10.3.129,389,fthompson
MKT-WS-014,2026-02-15T16:32:03.012Z,29343,svchost.exe,LISTEN,TCP,10.10.3.114,54586,0.0.0.0,0,bwilson
MKT-WS-014,2026-02-12T14:42:17.205Z,32058,smss.exe,LISTEN,TCP,10.10.3.114,80,0.0.0.0,0,cjohnson
MKT-WS-014,2026-02-19T18:55:53.483Z,23774,RuntimeBroker.exe,LISTEN,TCP,10.10.3.114,53,0.0.0.0,0,fthompson
MKT-WS-014,2026-02-14T03:19:27.100Z,42917,csrss.exe,ESTABLISHED,TCP,10.10.3.114,443,181.140.134.149,88,svc_web
MKT-WS-014,2026-02-14T21:58:28.830Z,15172,cmd.exe,CLOSE_WAIT,UDP,10.10.3.114,3389,210.176.249.203,8080,agarcia
MKT-WS-014,2026-02-14T02:33:20.649Z,47109,cmd.exe,LISTEN,UDP,10.10.3.114,445,0.0.0.0,0,svc_web
MKT-WS-014,2026-02-10T13:36:41.434Z,2927,powershell.exe,CLOSE_WAIT,TCP,10.10.3.114,8080,173.245.245.54,88,bwilson
MKT-WS-014,2026-02-11T20:42:58.590Z,11001,teams.exe,LISTEN,TCP,10.10.3.114,88,0.0.0.0,0,dlee
MKT-WS-014,2026-02-12T02:38:30.105Z,54518,dwm.exe,CLOSE_WAIT,TCP,10.10.3.114,636,10.10.2.158,389,fthompson
MKT-WS-014,2026-02-17T21:02:48.118Z,22557,smss.exe,LISTEN,TCP,10.10.3.114,445,0.0.0.0,0,gwhite
MKT-WS-014,2026-02-11T11:08:33.102Z,13361,chrome.exe,LISTEN,TCP,10.10.3.114,445,0.0.0.0,0,hbrown
MKT-WS-014,2026-02-15T22:49:17.387Z,178,dwm.exe,CLOSE_WAIT,UDP,10.10.3.114,445,122.19.60.24,60136,svc_sql
MKT-WS-014,2026-02-18T17:09:18.935Z,59597,lsass.exe,SYN_SENT,TCP,10.10.3.114,80,10.10.3.162,23995,svc_sql
MKT-WS-014,2026-02-10T09:22:02.508Z,48835,smss.exe,ESTABLISHED,TCP,10.10.3.114,139,10.10.2.10,3389,svc_sql
MKT-WS-014,2026-02-17T02:53:38.341Z,16722,dwm.exe,ESTABLISHED,TCP,10.10.3.114,5985,168.105.161.105,88,dlee
MKT-WS-014,2026-02-16T03:46:24.446Z,31803,lsass.exe,SYN_SENT,TCP,10.10.3.114,389,10.10.1.172,53,dlee
MKT-WS-014,2026-02-14T12:08:24.815Z,22279,smss.exe,TIME_WAIT,TCP,10.10.3.114,389,31.117.228.201,636,svc_sql
MKT-WS-014,2026-02-13T01:46:22.798Z,24403,OneDrive.exe,ESTABLISHED,UDP,10.10.3.114,389,10.10.2.10,443,agarcia
MKT-WS-014,2026-02-19T04:38:30.872Z,61098,SearchHost.exe,CLOSE_WAIT,TCP,10.10.3.114,636,10.10.2.164,3389,svc_sql
MKT-WS-014,2026-02-18T10:55:05.591Z,23242,code.exe,ESTABLISHED,TCP,10.10.3.114,88,44.18.184.62,445,admin
MKT-WS-014,2026-02-17T15:54:19.731Z,60339,smss.exe,LISTEN,TCP,10.10.3.114,636,0.0.0.0,0,agarcia
MKT-WS-014,2026-02-14T13:47:01.163Z,7077,System,SYN_SENT,TCP,10.10.3.114,139,58.99.232.239,8080,hbrown
MKT-WS-014,2026-02-18T05:22:05.956Z,63095,notepad.exe,TIME_WAIT,TCP,10.10.3.114,53,10.10.2.149,3389,svc_sql
MKT-WS-014,2026-02-14T15:06:23.374Z,23240,csrss.exe,SYN_SENT,TCP,10.10.3.114,443,67.34.195.163,53,hbrown
EXEC-WS-015,2026-02-17T08:25:28.125Z,53909,cmd.exe,LISTEN,TCP,10.10.1.115,5985,0.0.0.0,0,emartinez
EXEC-WS-015,2026-02-12T18:42:55.234Z,15963,teams.exe,CLOSE_WAIT,TCP,10.10.1.115,135,10.10.2.125,3389,svc_web
EXEC-WS-015,2026-02-18T10:44:04.632Z,7956,powershell.exe,LISTEN,UDP,10.10.1.115,445,0.0.0.0,0,agarcia
EXEC-WS-015,2026-02-19T09:11:31.952Z,32265,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.1.115,49369,10.10.3.10,33290,bwilson
EXEC-WS-015,2026-02-10T16:08:26.382Z,22859,dwm.exe,TIME_WAIT,TCP,10.10.1.115,56429,10.10.2.155,636,fthompson
EXEC-WS-015,2026-02-13T17:21:32.579Z,40259,teams.exe,CLOSE_WAIT,TCP,10.10.1.115,3389,10.10.1.127,443,svc_web
EXEC-WS-015,2026-02-17T15:10:41.364Z,24499,System,TIME_WAIT,UDP,10.10.1.115,8080,10.10.2.164,88,emartinez
EXEC-WS-015,2026-02-19T06:04:37.864Z,12949,cmd.exe,CLOSE_WAIT,UDP,10.10.1.115,88,176.117.51.185,88,bwilson
IT-WS-016,2026-02-20T16:53:25.593Z,55765,svchost.exe,LISTEN,TCP,10.10.2.116,445,0.0.0.0,0,admin
IT-WS-016,2026-02-15T07:08:05.481Z,41378,taskhostw.exe,CLOSE_WAIT,TCP,10.10.2.116,53,220.24.203.26,445,agarcia
IT-WS-016,2026-02-12T09:44:22.299Z,37841,taskhostw.exe,TIME_WAIT,TCP,10.10.2.116,53,143.131.176.6,24033,admin
IT-WS-016,2026-02-15T03:56:16.872Z,62791,teams.exe,TIME_WAIT,TCP,10.10.2.116,389,10.10.3.111,445,bwilson
IT-WS-016,2026-02-17T17:36:30.136Z,39774,spoolsv.exe,TIME_WAIT,TCP,10.10.2.116,443,10.10.3.141,445,admin
IT-WS-016,2026-02-12T12:38:34.342Z,26120,csrss.exe,TIME_WAIT,TCP,10.10.2.116,5985,10.10.2.131,443,agarcia
IT-WS-016,2026-02-13T13:20:33.588Z,16313,winlogon.exe,SYN_SENT,TCP,10.10.2.116,50015,102.42.53.68,88,svc_backup
IT-WS-016,2026-02-10T16:47:19.482Z,23485,spoolsv.exe,LISTEN,UDP,10.10.2.116,80,0.0.0.0,0,svc_web
IT-WS-016,2026-02-14T20:44:39.634Z,42029,winlogon.exe,CLOSE_WAIT,TCP,10.10.2.116,53,10.10.2.10,42380,admin
IT-WS-016,2026-02-10T10:38:20.236Z,34396,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.2.116,56594,10.10.3.153,445,svc_web
IT-WS-016,2026-02-16T13:15:03.377Z,52316,outlook.exe,TIME_WAIT,TCP,10.10.2.116,53,10.10.3.102,445,jsmith
IT-WS-016,2026-02-14T17:33:35.444Z,15799,code.exe,CLOSE_WAIT,TCP,10.10.2.116,5985,64.83.199.213,443,hbrown
IT-WS-016,2026-02-16T18:25:56.472Z,17934,services.exe,TIME_WAIT,TCP,10.10.2.116,5985,49.35.93.35,389,svc_backup
IT-WS-016,2026-02-17T18:47:56.347Z,47751,code.exe,TIME_WAIT,TCP,10.10.2.116,80,10.10.3.114,8080,jsmith
IT-WS-016,2026-02-19T02:53:11.669Z,62466,outlook.exe,ESTABLISHED,TCP,10.10.2.116,3389,108.159.255.96,443,bwilson
IT-WS-016,2026-02-14T08:11:58.109Z,63995,qbittorrent.exe,CLOSE_WAIT,TCP,10.10.2.116,445,50.128.195.213,3389,gwhite
IT-WS-016,2026-02-17T06:30:07.095Z,13760,explorer.exe,LISTEN,TCP,10.10.2.116,53,0.0.0.0,0,gwhite
HR-WS-017,2026-02-19T13:52:47.618Z,56700,notepad.exe,TIME_WAIT,UDP,10.10.3.117,636,10.10.1.13,53,admin
HR-WS-017,2026-02-12T01:50:24.320Z,18194,msedge.exe,LISTEN,TCP,10.10.3.117,80,0.0.0.0,0,idavis
HR-WS-017,2026-02-11T06:51:01.397Z,40643,powershell.exe,ESTABLISHED,TCP,10.10.3.117,636,153.79.190.198,389,emartinez
HR-WS-017,2026-02-18T13:08:25.643Z,49690,spoolsv.exe,ESTABLISHED,TCP,10.10.3.117,389,10.10.1.130,636,emartinez
HR-WS-017,2026-02-17T21:05:59.242Z,16529,csrss.exe,LISTEN,TCP,10.10.3.117,3389,0.0.0.0,0,jsmith
HR-WS-017,2026-02-19T20:37:06.601Z,36441,csrss.exe,SYN_SENT,TCP,10.10.3.117,135,10.10.1.160,57887,bwilson
HR-WS-017,2026-02-19T12:43:59.135Z,40714,outlook.exe,CLOSE_WAIT,TCP,10.10.3.117,53,10.10.1.13,8080,svc_web
HR-WS-017,2026-02-20T09:47:26.841Z,53777,services.exe,LISTEN,TCP,10.10.3.117,389,0.0.0.0,0,fthompson
HR-WS-017,2026-02-17T04:43:21.927Z,2968,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.3.117,88,73.165.209.165,636,svc_web
HR-WS-017,2026-02-17T15:19:42.619Z,16873,teams.exe,ESTABLISHED,UDP,10.10.3.117,8080,10.10.3.150,35484,jsmith
HR-WS-017,2026-02-18T01:52:09.696Z,58455,services.exe,ESTABLISHED,TCP,10.10.3.117,389,126.40.239.206,636,fthompson
HR-WS-017,2026-02-15T20:54:54.946Z,12516,OneDrive.exe,ESTABLISHED,TCP,10.10.3.117,53,11.36.155.20,3389,cjohnson
HR-WS-017,2026-02-16T01:29:28.919Z,33175,powershell.exe,SYN_SENT,UDP,10.10.3.117,636,28.183.234.180,8080,emartinez
HR-WS-017,2026-02-16T16:06:12.033Z,37006,System,SYN_SENT,TCP,10.10.3.117,3389,10.10.1.13,53,hbrown
HR-WS-017,2026-02-20T16:21:10.808Z,19881,System,TIME_WAIT,TCP,10.10.3.117,8080,102.0.17.252,8080,jsmith
HR-WS-017,2026-02-18T21:29:05.930Z,45301,powershell.exe,LISTEN,TCP,10.10.3.117,49863,0.0.0.0,0,svc_web
HR-WS-017,2026-02-12T22:27:51.215Z,16893,System,SYN_SENT,TCP,10.10.3.117,443,10.10.1.118,25081,svc_sql
HR-WS-017,2026-02-10T17:20:34.436Z,53075,smss.exe,CLOSE_WAIT,TCP,10.10.3.117,636,20.166.247.45,445,idavis
HR-WS-017,2026-02-10T21:31:55.153Z,34465,explorer.exe,TIME_WAIT,TCP,10.10.3.117,5985,223.61.116.192,88,jsmith
HR-WS-017,2026-02-10T20:37:47.832Z,48044,smss.exe,LISTEN,TCP,10.10.3.117,445,0.0.0.0,0,fthompson
HR-WS-017,2026-02-16T06:51:36.531Z,3331,services.exe,SYN_SENT,TCP,10.10.3.117,135,10.10.3.117,389,hbrown
HR-WS-017,2026-02-17T03:03:43.595Z,12951,chrome.exe,CLOSE_WAIT,TCP,10.10.3.117,63389,179.66.69.124,88,hbrown
HR-WS-017,2026-02-18T10:11:34.708Z,21295,dwm.exe,LISTEN,UDP,10.10.3.117,139,0.0.0.0,0,admin
HR-WS-017,2026-02-12T02:18:49.737Z,23019,chrome.exe,ESTABLISHED,TCP,10.10.3.117,3389,90.97.164.89,445,idavis
HR-WS-017,2026-02-11T12:05:34.566Z,3674,csrss.exe,SYN_SENT,UDP,10.10.3.117,80,210.119.102.176,443,cjohnson
HR-WS-017,2026-02-18T01:00:11.686Z,13985,outlook.exe,TIME_WAIT,TCP,10.10.3.117,636,206.56.156.116,3389,cjohnson
HR-WS-017,2026-02-10T23:01:39.044Z,13252,cmd.exe,SYN_SENT,TCP,10.10.3.117,636,179.9.192.150,8080,svc_sql
HR-WS-017,2026-02-12T17:47:31.758Z,25049,cmd.exe,ESTABLISHED,TCP,10.10.3.117,443,100.138.184.222,88,hbrown
HR-WS-017,2026-02-14T10:20:59.836Z,10389,msedge.exe,TIME_WAIT,TCP,10.10.3.117,445,10.10.3.132,389,jsmith
HR-WS-017,2026-02-20T05:16:44.776Z,14883,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.3.117,53,71.31.131.225,636,bwilson
HR-WS-017,2026-02-20T08:09:05.124Z,40237,SearchHost.exe,LISTEN,TCP,10.10.3.117,53,0.0.0.0,0,svc_web
HR-WS-017,2026-02-16T09:15:27.630Z,44929,powershell.exe,CLOSE_WAIT,UDP,10.10.3.117,5985,80.168.229.139,8080,svc_sql
FIN-WS-018,2026-02-19T01:52:50.258Z,9636,notepad.exe,SYN_SENT,UDP,10.10.1.118,63244,38.80.162.18,53,svc_backup
FIN-WS-018,2026-02-10T14:32:58.399Z,64715,taskhostw.exe,CLOSE_WAIT,TCP,10.10.1.118,8080,191.140.77.200,8080,idavis
FIN-WS-018,2026-02-19T03:32:04.412Z,30820,services.exe,SYN_SENT,TCP,10.10.1.118,88,10.10.3.111,636,svc_backup
FIN-WS-018,2026-02-20T05:32:58.238Z,14685,teams.exe,CLOSE_WAIT,TCP,10.10.1.118,445,42.98.115.9,445,svc_backup
FIN-WS-018,2026-02-19T08:46:56.102Z,32208,code.exe,LISTEN,TCP,10.10.1.118,8080,0.0.0.0,0,svc_backup
FIN-WS-018,2026-02-10T18:27:23.647Z,48290,csrss.exe,LISTEN,TCP,10.10.1.118,62418,0.0.0.0,0,svc_web
FIN-WS-018,2026-02-14T10:54:10.076Z,48280,taskhostw.exe,CLOSE_WAIT,TCP,10.10.1.118,53,28.231.233.212,636,jsmith
FIN-WS-018,2026-02-19T21:45:29.537Z,45316,dwm.exe,ESTABLISHED,UDP,10.10.1.118,8080,10.10.2.122,20319,hbrown
FIN-WS-018,2026-02-15T01:25:12.662Z,58860,csrss.exe,CLOSE_WAIT,TCP,10.10.1.118,445,10.10.1.142,8080,svc_backup
FIN-WS-018,2026-02-11T05:19:35.889Z,46452,csrss.exe,ESTABLISHED,TCP,10.10.1.118,636,10.10.1.115,53,fthompson
FIN-WS-018,2026-02-12T04:43:00.088Z,46764,dwm.exe,SYN_SENT,UDP,10.10.1.118,53,98.22.87.234,8080,jsmith
FIN-WS-018,2026-02-19T05:51:09.950Z,35718,notepad.exe,CLOSE_WAIT,TCP,10.10.1.118,443,34.103.1.160,389,svc_sql
FIN-WS-018,2026-02-10T09:38:35.720Z,57913,epicgameslauncher.exe,CLOSE_WAIT,UDP,10.10.1.118,88,169.243.232.105,40425,hbrown
FIN-WS-018,2026-02-19T01:30:12.992Z,19658,spoolsv.exe,SYN_SENT,UDP,10.10.1.118,445,38.28.178.10,44736,emartinez
FIN-WS-018,2026-02-11T07:16:53.659Z,19714,explorer.exe,ESTABLISHED,TCP,10.10.1.118,445,10.10.3.159,80,emartinez
FIN-WS-018,2026-02-15T19:09:41.588Z,45701,SearchHost.exe,ESTABLISHED,TCP,10.10.1.118,139,10.10.1.136,88,cjohnson
FIN-WS-018,2026-02-20T16:45:21.902Z,23290,msedge.exe,SYN_SENT,TCP,10.10.1.118,8080,10.10.3.141,35456,bwilson
FIN-WS-018,2026-02-15T04:13:17.070Z,52314,winlogon.exe,SYN_SENT,TCP,10.10.1.118,65290,47.119.148.251,80,agarcia
FIN-WS-018,2026-02-12T23:36:15.769Z,4545,code.exe,SYN_SENT,TCP,10.10.1.118,80,86.179.108.3,445,dlee
FIN-WS-018,2026-02-12T08:30:14.021Z,54745,System,TIME_WAIT,TCP,10.10.1.118,389,86.174.202.186,8080,emartinez
SLS-WS-019,2026-02-15T03:09:16.142Z,56803,explorer.exe,LISTEN,TCP,10.10.2.119,389,0.0.0.0,0,hbrown
SLS-WS-019,2026-02-11T00:33:11.737Z,9884,csrss.exe,CLOSE_WAIT,TCP,10.10.2.119,88,10.10.3.174,53,dlee
SLS-WS-019,2026-02-17T17:27:36.013Z,17892,taskhostw.exe,CLOSE_WAIT,TCP,10.10.2.119,88,10.10.1.115,53,fthompson
SLS-WS-019,2026-02-19T20:20:18.461Z,29183,powershell.exe,TIME_WAIT,TCP,10.10.2.119,135,135.154.89.29,3389,hbrown
SLS-WS-019,2026-02-15T02:50:31.569Z,46871,winlogon.exe,SYN_SENT,UDP,10.10.2.119,3389,124.158.167.37,80,svc_web
SLS-WS-019,2026-02-16T23:42:45.766Z,13852,svchost.exe,TIME_WAIT,TCP,10.10.2.119,3389,120.23.52.134,445,emartinez
SLS-WS-019,2026-02-20T07:34:28.249Z,36775,notepad.exe,TIME_WAIT,TCP,10.10.2.119,59609,10.10.1.121,80,hbrown
SLS-WS-019,2026-02-15T23:08:39.391Z,3424,System,TIME_WAIT,TCP,10.10.2.119,139,10.10.2.110,53,bwilson
SLS-WS-019,2026-02-13T14:06:36.586Z,53671,epicgameslauncher.exe,ESTABLISHED,TCP,10.10.2.119,80,10.10.2.10,53,cjohnson
SLS-WS-019,2026-02-15T05:38:11.287Z,62191,MsMpEng.exe,SYN_SENT,TCP,10.10.2.119,88,10.10.3.159,389,cjohnson
SLS-WS-019,2026-02-11T12:13:18.351Z,31468,services.exe,TIME_WAIT,TCP,10.10.2.119,445,180.169.166.117,389,gwhite
SLS-WS-019,2026-02-15T21:11:11.009Z,26367,notepad.exe,TIME_WAIT,TCP,10.10.2.119,53,27.207.54.84,445,idavis
SLS-WS-019,2026-02-14T07:57:14.812Z,22429,services.exe,LISTEN,TCP,10.10.2.119,8080,0.0.0.0,0,cjohnson
SLS-WS-019,2026-02-16T13:01:07.944Z,21423,smss.exe,CLOSE_WAIT,TCP,10.10.2.119,53,10.10.2.110,8516,hbrown
SLS-WS-019,2026-02-16T13:33:53.263Z,45025,csrss.exe,LISTEN,TCP,10.10.2.119,443,0.0.0.0,0,svc_web
SLS-WS-019,2026-02-13T08:52:32.928Z,40442,SearchHost.exe,TIME_WAIT,TCP,10.10.2.119,443,56.71.0.194,636,idavis
SLS-WS-019,2026-02-19T05:07:34.661Z,4190,code.exe,TIME_WAIT,TCP,10.10.2.119,5985,10.10.3.102,8080,emartinez
SLS-WS-019,2026-02-17T17:56:36.286Z,26709,explorer.exe,ESTABLISHED,TCP,10.10.2.119,443,10.10.3.156,53,fthompson
SLS-WS-019,2026-02-16T02:51:19.420Z,55368,code.exe,LISTEN,TCP,10.10.2.119,135,0.0.0.0,0,emartinez
SLS-WS-019,2026-02-11T05:09:57.099Z,42190,outlook.exe,TIME_WAIT,UDP,10.10.2.119,80,10.10.1.163,8080,svc_sql
SLS-WS-019,2026-02-16T15:08:35.931Z,37975,csrss.exe,SYN_SENT,TCP,10.10.2.119,8080,131.217.230.99,88,gwhite
SLS-WS-019,2026-02-11T12:17:27.932Z,31657,powershell.exe,SYN_SENT,TCP,10.10.2.119,53,10.10.3.105,53,svc_backup
SLS-WS-019,2026-02-18T15:31:28.416Z,20579,dwm.exe,TIME_WAIT,TCP,10.10.2.119,53,157.45.125.121,636,idavis
SLS-WS-019,2026-02-10T16:49:53.616Z,60580,taskhostw.exe,SYN_SENT,TCP,10.10.2.119,8080,10.10.2.146,8080,idavis
SLS-WS-019,2026-02-11T04:37:39.150Z,33234,smss.exe,TIME_WAIT,TCP,10.10.2.119,88,44.26.149.208,389,agarcia
SLS-WS-019,2026-02-18T00:44:30.510Z,43298,cmd.exe,TIME_WAIT,UDP,10.10.2.119,139,220.131.7.190,60670,gwhite
SLS-WS-019,2026-02-19T01:24:12.797Z,49432,teams.exe,TIME_WAIT,UDP,10.10.2.119,445,205.16.175.252,8080,fthompson
SLS-WS-019,2026-02-15T04:00:13.435Z,31310,powershell.exe,CLOSE_WAIT,UDP,10.10.2.119,88,188.176.27.165,8080,dlee
SLS-WS-019,2026-02-13T01:39:22.636Z,34863,System,LISTEN,TCP,10.10.2.119,8080,0.0.0.0,0,svc_web
SLS-WS-019,2026-02-16T16:37:17.011Z,42833,notepad.exe,CLOSE_WAIT,TCP,10.10.2.119,53,10.10.1.169,88,svc_web
SLS-WS-019,2026-02-17T09:25:46.344Z,11891,cmd.exe,TIME_WAIT,TCP,10.10.2.119,389,150.200.236.198,53,emartinez
SLS-WS-019,2026-02-10T16:30:37.586Z,40692,MsMpEng.exe,ESTABLISHED,TCP,10.10.2.119,5985,10.10.3.129,3389,agarcia
SLS-WS-019,2026-02-20T07:26:55.803Z,5761,services.exe,LISTEN,TCP,10.10.2.119,636,0.0.0.0,0,svc_web
SLS-WS-019,2026-02-18T08:20:23.216Z,45465,SearchHost.exe,SYN_SENT,UDP,10.10.2.119,636,10.10.2.110,445,admin
SLS-WS-019,2026-02-12T04:28:56.537Z,4648,taskhostw.exe,TIME_WAIT,UDP,10.10.2.119,139,199.31.195.100,445,gwhite
SLS-WS-019,2026-02-19T20:09:08.300Z,46984,code.exe,SYN_SENT,TCP,10.10.2.119,389,126.55.73.139,443,dlee
SLS-WS-019,2026-02-17T06:09:05.252Z,17561,chrome.exe,ESTABLISHED,TCP,10.10.2.119,57363,115.9.254.39,80,bwilson
SLS-WS-019,2026-02-11T14:18:03.285Z,35181,SearchHost.exe,SYN_SENT,TCP,10.10.2.119,8080,112.206.35.139,389,emartinez
ENG-WS-020,2026-02-12T04:09:16.474Z,2677,SearchHost.exe,ESTABLISHED,TCP,10.10.3.120,53,10.10.3.159,3389,fthompson
ENG-WS-020,2026-02-12T19:37:16.618Z,25578,notepad.exe,CLOSE_WAIT,TCP,10.10.3.120,8080,22.224.97.36,2686,agarcia
ENG-WS-020,2026-02-18T17:46:33.335Z,43833,spoolsv.exe,TIME_WAIT,TCP,10.10.3.120,80,10.10.1.106,3389,hbrown
ENG-WS-020,2026-02-10T19:27:01.524Z,46060,MsMpEng.exe,SYN_SENT,UDP,10.10.3.120,443,10.10.1.103,60476,admin
ENG-WS-020,2026-02-18T15:47:37.700Z,14555,teams.exe,ESTABLISHED,TCP,10.10.3.120,8080,157.87.32.210,33604,agarcia
ENG-WS-020,2026-02-13T19:52:33.354Z,8013,lsass.exe,TIME_WAIT,TCP,10.10.3.120,443,176.70.164.215,8080,dlee
ENG-WS-020,2026-02-12T20:54:40.148Z,38241,lsass.exe,LISTEN,TCP,10.10.3.120,8080,0.0.0.0,0,jsmith
ENG-WS-020,2026-02-19T13:43:43.627Z,27377,spoolsv.exe,SYN_SENT,TCP,10.10.3.120,80,125.41.3.2,47340,svc_backup
ENG-WS-020,2026-02-13T03:44:14.772Z,29618,winlogon.exe,LISTEN,UDP,10.10.3.120,389,0.0.0.0,0,fthompson
ENG-WS-020,2026-02-12T07:58:32.575Z,64758,teams.exe,SYN_SENT,TCP,10.10.3.120,636,128.45.154.90,3389,hbrown
ENG-WS-020,2026-02-17T11:18:39.378Z,63576,services.exe,TIME_WAIT,TCP,10.10.3.120,8080,198.106.141.14,8080,gwhite
ENG-WS-020,2026-02-18T01:06:15.196Z,60711,teams.exe,ESTABLISHED,TCP,10.10.3.120,139,10.10.1.12,443,hbrown
ENG-WS-020,2026-02-13T17:31:59.002Z,6526,svchost.exe,CLOSE_WAIT,TCP,10.10.3.120,443,10.10.3.126,443,cjohnson
ENG-WS-020,2026-02-15T01:44:51.785Z,25484,code.exe,CLOSE_WAIT,UDP,10.10.3.120,8080,150.248.27.228,15190,emartinez
ENG-WS-020,2026-02-15T02:38:41.032Z,11319,code.exe,TIME_WAIT,TCP,10.10.3.120,3389,33.16.30.72,389,svc_sql
ENG-WS-020,2026-02-16T11:53:42.784Z,54952,notepad.exe,SYN_SENT,UDP,10.10.3.120,88,10.10.2.167,3389,gwhite
ENG-WS-020,2026-02-16T08:52:00.327Z,58546,lsass.exe,LISTEN,UDP,10.10.3.120,5985,0.0.0.0,0,idavis
ENG-WS-020,2026-02-15T01:06:37.231Z,15862,smss.exe,ESTABLISHED,TCP,10.10.3.120,80,10.10.1.151,443,agarcia
ENG-WS-020,2026-02-19T06:28:49.900Z,49074,svchost.exe,CLOSE_WAIT,UDP,10.10.3.120,3389,10.10.3.162,389,idavis
ENG-WS-020,2026-02-14T08:13:11.341Z,45369,csrss.exe,CLOSE_WAIT,UDP,10.10.3.120,445,203.189.237.181,443,emartinez
ENG-WS-020,2026-02-11T11:44:29.889Z,24059,notepad.exe,CLOSE_WAIT,TCP,10.10.3.120,55939,10.10.3.108,80,gwhite
ENG-WS-020,2026-02-17T02:15:34.560Z,48424,RuntimeBroker.exe,TIME_WAIT,UDP,10.10.3.120,53,182.104.70.252,443,svc_sql
ENG-WS-020,2026-02-19T16:28:59.734Z,33101,OneDrive.exe,LISTEN,UDP,10.10.3.120,3389,0.0.0.0,0,admin
ENG-WS-020,2026-02-14T04:02:11.266Z,44225,explorer.exe,ESTABLISHED,TCP,10.10.3.120,8080,10.10.1.169,30644,svc_backup
ENG-WS-020,2026-02-14T09:40:14.252Z,11818,chrome.exe,LISTEN,TCP,10.10.3.120,443,0.0.0.0,0,dlee
ENG-WS-020,2026-02-20T10:23:37.144Z,35583,chrome.exe,ESTABLISHED,UDP,10.10.3.120,443,179.75.254.39,88,bwilson
ENG-WS-020,2026-02-13T21:41:53.230Z,42439,lsass.exe,CLOSE_WAIT,TCP,10.10.3.120,135,10.10.2.167,28004,svc_sql
ENG-WS-020,2026-02-20T10:40:51.643Z,50546,smss.exe,SYN_SENT,TCP,10.10.3.120,8080,78.67.156.44,53,svc_web
ENG-WS-020,2026-02-11T13:13:45.601Z,20850,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.3.120,88,42.146.93.250,3389,idavis
LEG-WS-021,2026-02-13T15:14:09.388Z,22634,RuntimeBroker.exe,LISTEN,UDP,10.10.1.121,389,0.0.0.0,0,bwilson
LEG-WS-021,2026-02-19T22:06:30.578Z,26613,System,LISTEN,TCP,10.10.1.121,443,0.0.0.0,0,gwhite
LEG-WS-021,2026-02-17T22:08:09.408Z,60543,csrss.exe,TIME_WAIT,UDP,10.10.1.121,636,140.169.151.122,53425,gwhite
LEG-WS-021,2026-02-11T07:07:13.018Z,3706,msedge.exe,CLOSE_WAIT,TCP,10.10.1.121,389,142.59.157.7,53,idavis
LEG-WS-021,2026-02-13T15:26:22.030Z,39754,smss.exe,SYN_SENT,UDP,10.10.1.121,135,10.10.1.112,389,hbrown
LEG-WS-021,2026-02-13T23:50:19.530Z,64162,MsMpEng.exe,TIME_WAIT,TCP,10.10.1.121,636,219.218.189.99,53,gwhite
LEG-WS-021,2026-02-14T22:37:33.927Z,10834,chrome.exe,LISTEN,TCP,10.10.1.121,62770,0.0.0.0,0,svc_sql
LEG-WS-021,2026-02-18T05:01:42.648Z,5896,lsass.exe,CLOSE_WAIT,UDP,10.10.1.121,445,10.10.3.168,5356,jsmith
LEG-WS-021,2026-02-10T18:33:29.622Z,54249,cmd.exe,CLOSE_WAIT,UDP,10.10.1.121,636,10.10.2.149,389,dlee
LEG-WS-021,2026-02-14T16:17:21.094Z,32336,notepad.exe,CLOSE_WAIT,TCP,10.10.1.121,135,10.10.1.139,445,svc_backup
LEG-WS-021,2026-02-20T11:33:52.873Z,53726,svchost.exe,ESTABLISHED,TCP,10.10.1.121,443,10.10.3.156,389,agarcia
LEG-WS-021,2026-02-13T04:10:03.318Z,27593,smss.exe,ESTABLISHED,TCP,10.10.1.121,88,10.10.1.118,80,admin
LEG-WS-021,2026-02-16T13:41:26.239Z,11053,RuntimeBroker.exe,ESTABLISHED,TCP,10.10.1.121,53,164.39.99.197,443,hbrown
LEG-WS-021,2026-02-14T14:59:55.054Z,60452,taskhostw.exe,TIME_WAIT,TCP,10.10.1.121,443,10.10.1.118,389,bwilson
LEG-WS-021,2026-02-19T22:51:08.777Z,31525,outlook.exe,SYN_SENT,UDP,10.10.1.121,55326,144.58.213.118,8080,emartinez
LEG-WS-021,2026-02-17T17:28:25.394Z,1984,RuntimeBroker.exe,LISTEN,TCP,10.10.1.121,445,0.0.0.0,0,svc_backup
MKT-WS-022,2026-02-12T12:27:36.905Z,64397,OneDrive.exe,LISTEN,UDP,10.10.2.122,445,0.0.0.0,0,agarcia
MKT-WS-022,2026-02-19T19:07:56.368Z,2936,msedge.exe,ESTABLISHED,TCP,10.10.2.122,65020,111.21.100.28,443,agarcia
MKT-WS-022,2026-02-20T05:11:52.444Z,22895,svchost.exe,ESTABLISHED,TCP,10.10.2.122,88,52.94.179.8,445,emartinez
MKT-WS-022,2026-02-10T09:04:56.035Z,47636,dwm.exe,SYN_SENT,UDP,10.10.2.122,443,10.10.2.125,636,agarcia
MKT-WS-022,2026-02-15T16:33:45.902Z,26811,dwm.exe,CLOSE_WAIT,TCP,10.10.2.122,8080,10.10.2.146,3389,agarcia
MKT-WS-022,2026-02-15T11:25:41.518Z,25317,taskhostw.exe,ESTABLISHED,TCP,10.10.2.122,53,35.253.184.181,53,dlee
MKT-WS-022,2026-02-12T04:49:27.555Z,44281,notepad.exe,CLOSE_WAIT,UDP,10.10.2.122,139,10.10.1.109,53,gwhite
MKT-WS-022,2026-02-11T00:10:39.370Z,64011,SearchHost.exe,CLOSE_WAIT,TCP,10.10.2.122,443,37.202.205.178,8080,cjohnson
MKT-WS-022,2026-02-14T01:01:27.576Z,43791,services.exe,CLOSE_WAIT,TCP,10.10.2.122,5985,10.10.1.175,88,idavis
MKT-WS-022,2026-02-10T15:25:51.166Z,48452,winlogon.exe,SYN_SENT,TCP,10.10.2.122,53981,10.10.1.163,8080,jsmith
MKT-WS-022,2026-02-17T05:16:12.543Z,34175,winlogon.exe,ESTABLISHED,UDP,10.10.2.122,88,174.167.78.78,443,svc_sql
MKT-WS-022,2026-02-15T14:11:55.280Z,35649,csrss.exe,LISTEN,TCP,10.10.2.122,8080,0.0.0.0,0,emartinez
MKT-WS-022,2026-02-10T16:12:53.816Z,36581,System,SYN_SENT,TCP,10.10.2.122,5985,10.10.2.149,80,admin
MKT-WS-022,2026-02-13T14:06:53.707Z,25598,notepad.exe,LISTEN,TCP,10.10.2.122,445,0.0.0.0,0,gwhite
MKT-WS-022,2026-02-16T18:14:05.708Z,23218,smss.exe,CLOSE_WAIT,TCP,10.10.2.122,8080,10.10.2.134,88,svc_sql
EXEC-WS-023,2026-02-14T14:58:56.642Z,3799,svchost.exe,SYN_SENT,TCP,10.10.3.123,3389,10.10.2.113,53,admin
EXEC-WS-023,2026-02-10T17:20:39.859Z,43207,powershell.exe,TIME_WAIT,TCP,10.10.3.123,636,17.156.58.87,53,svc_web
EXEC-WS-023,2026-02-11T08:25:53.105Z,32105,dwm.exe,CLOSE_WAIT,TCP,10.10.3.123,636,10.10.3.174,22154,agarcia
EXEC-WS-023,2026-02-19T02:05:42.439Z,35216,code.exe,TIME_WAIT,TCP,10.10.3.123,445,158.153.186.249,443,cjohnson
EXEC-WS-023,2026-02-18T16:17:47.104Z,31247,explorer.exe,TIME_WAIT,TCP,10.10.3.123,62325,10.10.3.144,5432,fthompson
EXEC-WS-023,2026-02-15T01:18:25.744Z,50132,chrome.exe,TIME_WAIT,TCP,10.10.3.123,5985,10.10.2.152,636,hbrown
EXEC-WS-023,2026-02-17T21:39:13.561Z,4024,svchost.exe,SYN_SENT,UDP,10.10.3.123,135,10.10.1.13,62276,hbrown
EXEC-WS-023,2026-02-17T11:19:35.973Z,19778,csrss.exe,LISTEN,UDP,10.10.3.123,636,0.0.0.0,0,svc_web
EXEC-WS-023,2026-02-11T12:23:22.718Z,12677,taskhostw.exe,ESTABLISHED,UDP,10.10.3.123,139,211.146.82.66,3389,jsmith
EXEC-WS-023,2026-02-18T13:25:02.856Z,18304,notepad.exe,CLOSE_WAIT,TCP,10.10.3.123,5985,166.18.103.41,445,admin
EXEC-WS-023,2026-02-19T16:11:35.919Z,44118,spoolsv.exe,ESTABLISHED,TCP,10.10.3.123,80,221.42.160.155,88,admin
EXEC-WS-023,2026-02-17T23:37:12.366Z,61240,SearchHost.exe,LISTEN,UDP,10.10.3.123,88,0.0.0.0,0,agarcia
EXEC-WS-023,2026-02-20T01:52:30.086Z,14387,smss.exe,SYN_SENT,TCP,10.10.3.123,443,10.10.1.175,3389,bwilson
EXEC-WS-023,2026-02-14T17:56:43.184Z,44843,code.exe,TIME_WAIT,TCP,10.10.3.123,139,221.28.251.137,636,cjohnson
EXEC-WS-023,2026-02-13T13:19:01.651Z,62915,outlook.exe,TIME_WAIT,TCP,10.10.3.123,139,10.10.2.131,88,svc_backup
EXEC-WS-023,2026-02-13T10:21:20.612Z,56422,MsMpEng.exe,ESTABLISHED,TCP,10.10.3.123,8080,10.10.1.133,3389,bwilson
EXEC-WS-023,2026-02-19T11:11:25.104Z,53855,spoolsv.exe,TIME_WAIT,TCP,10.10.3.123,139,10.10.3.153,88,agarcia
EXEC-WS-023,2026-02-16T21:32:20.707Z,51940,OneDrive.exe,TIME_WAIT,TCP,10.10.3.123,3389,108.167.232.178,8080,admin
EXEC-WS-023,2026-02-11T04:33:28.846Z,10443,SearchHost.exe,LISTEN,TCP,10.10.3.123,88,0.0.0.0,0,cjohnson
EXEC-WS-023,2026-02-20T02:51:16.399Z,29688,spoolsv.exe,LISTEN,TCP,10.10.3.123,62597,0.0.0.0,0,gwhite
EXEC-WS-023,2026-02-20T04:11:21.439Z,58056,outlook.exe,TIME_WAIT,UDP,10.10.3.123,59886,73.101.43.107,88,idavis
EXEC-WS-023,2026-02-14T19:13:33.031Z,17149,svchost.exe,SYN_SENT,TCP,10.10.3.123,443,119.101.134.180,27306,bwilson
EXEC-WS-023,2026-02-17T19:38:45.081Z,28618,RuntimeBroker.exe,LISTEN,TCP,10.10.3.123,80,0.0.0.0,0,svc_sql
EXEC-WS-023,2026-02-19T06:05:03.954Z,39427,csrss.exe,CLOSE_WAIT,TCP,10.10.3.123,636,10.10.2.164,88,cjohnson
EXEC-WS-023,2026-02-18T14:06:57.181Z,1985,notepad.exe,LISTEN,TCP,10.10.3.123,5985,0.0.0.0,0,dlee
EXEC-WS-023,2026-02-20T11:35:59.259Z,26154,powershell.exe,SYN_SENT,TCP,10.10.3.123,3389,150.234.43.3,53,admin
IT-WS-024,2026-02-20T17:11:05.493Z,61659,OneDrive.exe,CLOSE_WAIT,TCP,10.10.1.124,443,10.10.2.131,53,admin
IT-WS-024,2026-02-10T18:16:52.490Z,11855,services.exe,ESTABLISHED,TCP,10.10.1.124,53,10.10.1.151,636,dlee
IT-WS-024,2026-02-15T12:48:09.555Z,63890,winlogon.exe,TIME_WAIT,TCP,10.10.1.124,443,10.10.1.115,8080,svc_web
IT-WS-024,2026-02-18T06:55:07.872Z,10013,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.1.124,88,10.10.2.122,389,hbrown
IT-WS-024,2026-02-14T21:06:26.879Z,58766,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.1.124,445,10.10.2.161,389,gwhite
IT-WS-024,2026-02-12T05:09:49.467Z,11129,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.124,8080,29.75.63.90,445,svc_backup
IT-WS-024,2026-02-17T09:13:37.664Z,58254,cmd.exe,SYN_SENT,TCP,10.10.1.124,88,2.92.213.236,389,emartinez
IT-WS-024,2026-02-15T01:30:49.963Z,62700,MsMpEng.exe,ESTABLISHED,TCP,10.10.1.124,88,10.10.3.111,389,dlee
IT-WS-024,2026-02-18T01:56:59.993Z,35958,svchost.exe,TIME_WAIT,TCP,10.10.1.124,3389,10.10.2.107,80,idavis
IT-WS-024,2026-02-13T07:14:02.300Z,49419,SearchHost.exe,TIME_WAIT,UDP,10.10.1.124,57018,222.204.45.6,88,admin
IT-WS-024,2026-02-15T10:24:20.732Z,58126,notepad.exe,CLOSE_WAIT,TCP,10.10.1.124,389,10.10.2.113,3389,fthompson
IT-WS-024,2026-02-15T16:20:07.313Z,63884,smss.exe,SYN_SENT,TCP,10.10.1.124,52108,10.10.2.11,80,gwhite
IT-WS-024,2026-02-15T05:03:17.254Z,5289,spoolsv.exe,LISTEN,TCP,10.10.1.124,139,0.0.0.0,0,svc_sql
IT-WS-024,2026-02-14T18:55:58.626Z,37359,outlook.exe,LISTEN,TCP,10.10.1.124,53,0.0.0.0,0,jsmith
IT-WS-024,2026-02-10T12:04:01.824Z,48630,explorer.exe,SYN_SENT,TCP,10.10.1.124,5985,25.237.129.91,636,admin
IT-WS-024,2026-02-13T21:20:00.941Z,60269,teams.exe,CLOSE_WAIT,TCP,10.10.1.124,5985,10.10.3.159,445,svc_web
IT-WS-024,2026-02-11T10:34:57.592Z,35120,code.exe,LISTEN,TCP,10.10.1.124,389,0.0.0.0,0,jsmith
IT-WS-024,2026-02-18T17:09:36.661Z,5843,msedge.exe,ESTABLISHED,UDP,10.10.1.124,8080,10.10.3.10,88,bwilson
IT-WS-024,2026-02-12T07:43:43.007Z,19820,code.exe,ESTABLISHED,TCP,10.10.1.124,80,10.10.2.131,636,svc_sql
IT-WS-024,2026-02-12T10:20:04.578Z,37418,winlogon.exe,CLOSE_WAIT,TCP,10.10.1.124,445,10.10.1.103,3389,svc_web
IT-WS-024,2026-02-14T11:55:12.335Z,33743,explorer.exe,TIME_WAIT,TCP,10.10.1.124,389,10.10.2.164,389,idavis
HR-WS-025,2026-02-16T19:40:27.020Z,42448,explorer.exe,SYN_SENT,TCP,10.10.2.125,88,10.10.1.154,389,emartinez
HR-WS-025,2026-02-19T22:26:02.037Z,56031,lsass.exe,ESTABLISHED,UDP,10.10.2.125,636,50.240.176.113,53,svc_web
HR-WS-025,2026-02-19T00:16:12.671Z,44212,csrss.exe,LISTEN,TCP,10.10.2.125,5985,0.0.0.0,0,admin
HR-WS-025,2026-02-17T12:40:27.794Z,5748,winlogon.exe,LISTEN,TCP,10.10.2.125,139,0.0.0.0,0,admin
HR-WS-025,2026-02-18T14:22:14.210Z,61904,teams.exe,LISTEN,UDP,10.10.2.125,443,0.0.0.0,0,gwhite
HR-WS-025,2026-02-13T20:26:01.279Z,7569,code.exe,SYN_SENT,TCP,10.10.2.125,3389,67.182.81.45,443,idavis
HR-WS-025,2026-02-18T12:13:17.223Z,50521,System,LISTEN,TCP,10.10.2.125,3389,0.0.0.0,0,jsmith
HR-WS-025,2026-02-16T16:24:50.263Z,56355,System,TIME_WAIT,UDP,10.10.2.125,636,13.224.234.247,52250,agarcia
HR-WS-025,2026-02-15T12:35:51.900Z,57148,explorer.exe,SYN_SENT,TCP,10.10.2.125,389,10.10.3.138,636,agarcia
HR-WS-025,2026-02-12T02:48:55.615Z,17533,RuntimeBroker.exe,TIME_WAIT,UDP,10.10.2.125,135,10.10.2.161,636,emartinez
HR-WS-025,2026-02-19T16:30:58.731Z,62479,lsass.exe,TIME_WAIT,UDP,10.10.2.125,54119,10.10.2.155,88,svc_web
HR-WS-025,2026-02-14T20:31:05.051Z,25873,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.125,445,10.10.3.144,8080,svc_sql
HR-WS-025,2026-02-20T13:00:42.367Z,52467,spoolsv.exe,LISTEN,TCP,10.10.2.125,389,0.0.0.0,0,admin
HR-WS-025,2026-02-14T23:32:50.145Z,13543,notepad.exe,CLOSE_WAIT,TCP,10.10.2.125,636,191.160.176.3,88,hbrown
HR-WS-025,2026-02-15T18:07:02.732Z,35541,services.exe,CLOSE_WAIT,TCP,10.10.2.125,62406,10.10.1.169,8080,dlee
HR-WS-025,2026-02-17T21:37:38.321Z,64781,dwm.exe,SYN_SENT,TCP,10.10.2.125,60316,10.10.2.170,445,hbrown
HR-WS-025,2026-02-20T13:44:15.506Z,52881,explorer.exe,TIME_WAIT,TCP,10.10.2.125,443,13.63.229.77,53,svc_backup
HR-WS-025,2026-02-15T17:06:46.642Z,12719,smss.exe,SYN_SENT,TCP,10.10.2.125,3389,77.145.71.183,53,svc_web
HR-WS-025,2026-02-11T03:31:05.423Z,44456,csrss.exe,ESTABLISHED,UDP,10.10.2.125,5985,10.10.3.117,389,hbrown
HR-WS-025,2026-02-11T20:05:11.563Z,8431,System,SYN_SENT,TCP,10.10.2.125,88,10.10.1.163,8080,gwhite
HR-WS-025,2026-02-16T14:24:00.192Z,26879,outlook.exe,SYN_SENT,TCP,10.10.2.125,636,10.10.1.121,443,agarcia
HR-WS-025,2026-02-11T19:32:05.825Z,38741,smss.exe,TIME_WAIT,TCP,10.10.2.125,443,10.10.3.138,8080,fthompson
HR-WS-025,2026-02-14T16:23:37.638Z,37656,epicgameslauncher.exe,TIME_WAIT,TCP,10.10.2.125,445,10.10.3.171,80,dlee
HR-WS-025,2026-02-11T06:19:43.482Z,41044,taskhostw.exe,CLOSE_WAIT,TCP,10.10.2.125,53503,36.235.230.171,53,admin
HR-WS-025,2026-02-10T19:27:17.742Z,44038,SearchHost.exe,LISTEN,TCP,10.10.2.125,53,0.0.0.0,0,gwhite
HR-WS-025,2026-02-15T23:27:30.896Z,49751,spoolsv.exe,ESTABLISHED,UDP,10.10.2.125,88,162.158.63.165,13634,jsmith
HR-WS-025,2026-02-17T04:33:48.972Z,34955,dwm.exe,LISTEN,TCP,10.10.2.125,443,0.0.0.0,0,bwilson
HR-WS-025,2026-02-18T17:43:48.921Z,39870,cmd.exe,LISTEN,UDP,10.10.2.125,443,0.0.0.0,0,emartinez
HR-WS-025,2026-02-11T06:45:22.576Z,64311,explorer.exe,CLOSE_WAIT,TCP,10.10.2.125,5985,10.10.3.168,445,agarcia
HR-WS-025,2026-02-11T06:24:25.707Z,20206,notepad.exe,LISTEN,UDP,10.10.2.125,57526,0.0.0.0,0,fthompson
HR-WS-025,2026-02-19T15:15:09.918Z,17003,explorer.exe,SYN_SENT,TCP,10.10.2.125,80,10.10.2.113,88,fthompson
HR-WS-025,2026-02-13T03:19:18.774Z,20962,msedge.exe,ESTABLISHED,UDP,10.10.2.125,57003,10.10.3.165,443,gwhite
HR-WS-025,2026-02-17T02:53:15.818Z,8329,chrome.exe,CLOSE_WAIT,TCP,10.10.2.125,389,60.9.137.142,636,dlee
HR-WS-025,2026-02-15T00:56:07.801Z,165,csrss.exe,ESTABLISHED,TCP,10.10.2.125,55818,10.10.3.132,636,svc_web
HR-WS-025,2026-02-16T10:17:23.249Z,33544,services.exe,TIME_WAIT,UDP,10.10.2.125,80,10.10.2.149,3389,dlee
HR-WS-025,2026-02-12T12:42:45.158Z,33183,utorrent.exe,SYN_SENT,TCP,10.10.2.125,139,10.10.1.118,88,svc_sql
HR-WS-025,2026-02-17T01:36:38.962Z,234,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.125,139,10.10.3.159,8080,idavis
HR-WS-025,2026-02-14T10:11:51.973Z,5418,svchost.exe,LISTEN,TCP,10.10.2.125,65174,0.0.0.0,0,svc_sql
HR-WS-025,2026-02-19T01:47:11.213Z,53306,spoolsv.exe,ESTABLISHED,TCP,10.10.2.125,389,10.10.2.149,8080,svc_backup
FIN-WS-026,2026-02-18T01:47:10.000Z,49803,RuntimeBroker.exe,LISTEN,TCP,10.10.3.126,135,0.0.0.0,0,dlee
FIN-WS-026,2026-02-15T11:12:34.087Z,46240,OneDrive.exe,TIME_WAIT,UDP,10.10.3.126,88,10.10.2.164,445,svc_backup
FIN-WS-026,2026-02-16T06:16:32.008Z,32475,svchost.exe,LISTEN,TCP,10.10.3.126,139,0.0.0.0,0,bwilson
FIN-WS-026,2026-02-17T22:13:28.979Z,18078,MsMpEng.exe,SYN_SENT,TCP,10.10.3.126,443,151.65.33.33,636,cjohnson
FIN-WS-026,2026-02-14T20:08:13.354Z,26765,svchost.exe,SYN_SENT,TCP,10.10.3.126,389,144.232.1.241,53,dlee
FIN-WS-026,2026-02-13T15:03:37.768Z,25780,dwm.exe,CLOSE_WAIT,TCP,10.10.3.126,53,10.10.1.136,389,cjohnson
FIN-WS-026,2026-02-10T14:58:05.477Z,28408,smss.exe,ESTABLISHED,UDP,10.10.3.126,443,64.100.84.85,443,svc_sql
FIN-WS-026,2026-02-20T03:53:12.819Z,50939,steam.exe,TIME_WAIT,TCP,10.10.3.126,443,10.10.2.107,3389,idavis
SLS-WS-027,2026-02-10T21:41:49.947Z,40125,spoolsv.exe,CLOSE_WAIT,TCP,10.10.1.127,443,16.17.193.81,389,admin
SLS-WS-027,2026-02-18T12:52:07.327Z,40994,msedge.exe,ESTABLISHED,TCP,10.10.1.127,139,10.10.3.10,16301,jsmith
SLS-WS-027,2026-02-10T11:04:19.724Z,46846,csrss.exe,CLOSE_WAIT,TCP,10.10.1.127,3389,167.13.232.133,443,agarcia
SLS-WS-027,2026-02-10T23:07:22.064Z,20525,code.exe,SYN_SENT,UDP,10.10.1.127,3389,108.246.227.48,80,idavis
SLS-WS-027,2026-02-17T04:25:09.125Z,9576,spoolsv.exe,TIME_WAIT,TCP,10.10.1.127,445,121.158.175.75,34950,jsmith
SLS-WS-027,2026-02-16T13:56:26.072Z,21801,System,ESTABLISHED,TCP,10.10.1.127,135,10.10.2.125,389,svc_web
SLS-WS-027,2026-02-16T23:41:30.345Z,45530,taskhostw.exe,SYN_SENT,TCP,10.10.1.127,3389,10.10.1.106,80,cjohnson
SLS-WS-027,2026-02-18T01:01:13.248Z,13555,code.exe,LISTEN,TCP,10.10.1.127,60015,0.0.0.0,0,fthompson
SLS-WS-027,2026-02-19T20:10:37.888Z,23687,svchost.exe,TIME_WAIT,TCP,10.10.1.127,3389,8.58.72.75,42399,jsmith
SLS-WS-027,2026-02-19T13:20:44.006Z,47209,code.exe,LISTEN,TCP,10.10.1.127,135,0.0.0.0,0,bwilson
SLS-WS-027,2026-02-12T04:01:09.681Z,17256,System,LISTEN,UDP,10.10.1.127,80,0.0.0.0,0,agarcia
SLS-WS-027,2026-02-20T02:01:42.693Z,20093,MsMpEng.exe,LISTEN,TCP,10.10.1.127,3389,0.0.0.0,0,gwhite
SLS-WS-027,2026-02-11T00:20:39.767Z,9565,RuntimeBroker.exe,LISTEN,TCP,10.10.1.127,636,0.0.0.0,0,bwilson
SLS-WS-027,2026-02-13T09:32:44.471Z,9836,code.exe,SYN_SENT,TCP,10.10.1.127,3389,154.219.125.236,636,emartinez
SLS-WS-027,2026-02-14T09:01:44.259Z,57930,spoolsv.exe,TIME_WAIT,UDP,10.10.1.127,135,187.41.240.203,636,admin
SLS-WS-027,2026-02-14T12:14:11.463Z,60470,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.1.127,445,10.10.2.164,18609,svc_sql
SLS-WS-027,2026-02-19T07:47:31.437Z,26045,explorer.exe,LISTEN,UDP,10.10.1.127,8080,0.0.0.0,0,cjohnson
SLS-WS-027,2026-02-13T23:53:37.456Z,38370,SearchHost.exe,SYN_SENT,UDP,10.10.1.127,139,10.10.3.111,636,jsmith
SLS-WS-027,2026-02-10T14:10:46.376Z,29046,services.exe,TIME_WAIT,TCP,10.10.1.127,8080,10.10.2.164,88,cjohnson
SLS-WS-027,2026-02-14T02:03:33.201Z,35884,chrome.exe,TIME_WAIT,TCP,10.10.1.127,53,132.40.141.238,443,cjohnson
SLS-WS-027,2026-02-19T20:05:44.277Z,659,MsMpEng.exe,TIME_WAIT,TCP,10.10.1.127,636,209.140.97.181,636,svc_sql
SLS-WS-027,2026-02-15T16:57:22.815Z,51609,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.1.127,8080,168.76.203.59,3389,hbrown
SLS-WS-027,2026-02-16T08:22:37.603Z,8511,csrss.exe,TIME_WAIT,TCP,10.10.1.127,135,110.213.107.113,8080,dlee
SLS-WS-027,2026-02-10T13:48:35.856Z,51569,svchost.exe,CLOSE_WAIT,TCP,10.10.1.127,135,10.10.1.169,22393,jsmith
SLS-WS-027,2026-02-13T18:12:37.226Z,63141,outlook.exe,TIME_WAIT,TCP,10.10.1.127,5985,53.200.32.137,443,gwhite
SLS-WS-027,2026-02-12T09:44:58.861Z,59825,notepad.exe,ESTABLISHED,UDP,10.10.1.127,389,10.10.1.11,8080,fthompson
SLS-WS-027,2026-02-20T15:23:55.611Z,8563,powershell.exe,TIME_WAIT,TCP,10.10.1.127,8080,10.10.1.142,8080,hbrown
SLS-WS-027,2026-02-15T13:37:07.519Z,44981,chrome.exe,CLOSE_WAIT,UDP,10.10.1.127,135,10.10.1.11,3389,gwhite
SLS-WS-027,2026-02-16T15:12:43.739Z,16276,svchost.exe,LISTEN,TCP,10.10.1.127,5985,0.0.0.0,0,hbrown
SLS-WS-027,2026-02-14T09:46:21.331Z,54064,smss.exe,CLOSE_WAIT,TCP,10.10.1.127,88,10.10.3.159,445,svc_sql
SLS-WS-027,2026-02-14T08:09:58.497Z,43293,lsass.exe,LISTEN,UDP,10.10.1.127,8080,0.0.0.0,0,bwilson
SLS-WS-027,2026-02-11T14:18:27.562Z,24265,msedge.exe,CLOSE_WAIT,TCP,10.10.1.127,445,10.10.2.128,636,agarcia
SLS-WS-027,2026-02-14T07:17:20.011Z,48987,dwm.exe,TIME_WAIT,TCP,10.10.1.127,445,65.106.22.119,389,fthompson
SLS-WS-027,2026-02-11T04:38:13.766Z,43158,SearchHost.exe,ESTABLISHED,TCP,10.10.1.127,443,10.10.1.160,443,cjohnson
SLS-WS-027,2026-02-12T02:38:50.186Z,1283,csrss.exe,LISTEN,TCP,10.10.1.127,445,0.0.0.0,0,idavis
SLS-WS-027,2026-02-17T18:36:11.045Z,58603,notepad.exe,ESTABLISHED,TCP,10.10.1.127,445,10.10.1.157,3389,admin
ENG-WS-028,2026-02-18T07:46:42.814Z,60971,explorer.exe,SYN_SENT,TCP,10.10.2.128,636,79.227.26.154,88,cjohnson
ENG-WS-028,2026-02-10T14:59:09.752Z,1054,powershell.exe,LISTEN,TCP,10.10.2.128,5985,0.0.0.0,0,emartinez
ENG-WS-028,2026-02-13T16:40:11.618Z,41177,MsMpEng.exe,ESTABLISHED,UDP,10.10.2.128,52317,214.85.85.12,53,cjohnson
ENG-WS-028,2026-02-10T10:59:43.240Z,14043,System,CLOSE_WAIT,TCP,10.10.2.128,135,55.54.182.83,53,gwhite
ENG-WS-028,2026-02-17T18:07:57.997Z,51956,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.128,80,10.10.2.10,443,svc_web
ENG-WS-028,2026-02-11T00:52:42.134Z,1256,cmd.exe,ESTABLISHED,TCP,10.10.2.128,389,10.10.3.123,389,idavis
ENG-WS-028,2026-02-18T00:28:41.955Z,49726,csrss.exe,CLOSE_WAIT,TCP,10.10.2.128,53,151.6.119.6,3389,cjohnson
ENG-WS-028,2026-02-12T10:30:10.608Z,24725,explorer.exe,LISTEN,TCP,10.10.2.128,139,0.0.0.0,0,cjohnson
ENG-WS-028,2026-02-12T17:15:09.019Z,48129,powershell.exe,SYN_SENT,TCP,10.10.2.128,445,10.10.1.154,80,emartinez
ENG-WS-028,2026-02-11T00:09:15.192Z,32320,code.exe,SYN_SENT,TCP,10.10.2.128,57289,176.113.195.134,80,agarcia
ENG-WS-028,2026-02-12T03:25:08.242Z,36069,explorer.exe,LISTEN,UDP,10.10.2.128,443,0.0.0.0,0,svc_web
ENG-WS-028,2026-02-17T21:14:50.194Z,20512,code.exe,LISTEN,TCP,10.10.2.128,5985,0.0.0.0,0,bwilson
ENG-WS-028,2026-02-14T11:33:40.025Z,11094,powershell.exe,CLOSE_WAIT,UDP,10.10.2.128,139,74.229.103.70,53,gwhite
ENG-WS-028,2026-02-11T22:11:58.838Z,47721,dwm.exe,SYN_SENT,TCP,10.10.2.128,54259,10.10.3.111,636,bwilson
ENG-WS-028,2026-02-19T21:01:58.743Z,373,csrss.exe,TIME_WAIT,TCP,10.10.2.128,5985,10.10.1.118,8080,jsmith
ENG-WS-028,2026-02-20T16:07:05.222Z,8257,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.2.128,5985,191.191.196.126,80,fthompson
ENG-WS-028,2026-02-19T20:16:17.395Z,47433,teams.exe,LISTEN,TCP,10.10.2.128,57516,0.0.0.0,0,emartinez
ENG-WS-028,2026-02-17T14:22:04.280Z,42392,winlogon.exe,TIME_WAIT,TCP,10.10.2.128,5985,10.10.3.105,80,bwilson
ENG-WS-028,2026-02-16T08:35:07.616Z,43524,csrss.exe,LISTEN,TCP,10.10.2.128,88,0.0.0.0,0,svc_web
ENG-WS-028,2026-02-12T23:13:04.111Z,19906,msedge.exe,ESTABLISHED,TCP,10.10.2.128,636,151.41.96.225,88,hbrown
ENG-WS-028,2026-02-13T03:15:19.204Z,13831,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.2.128,636,10.10.3.174,8080,svc_backup
LEG-WS-029,2026-02-11T01:27:37.345Z,45733,svchost.exe,LISTEN,TCP,10.10.3.129,443,0.0.0.0,0,fthompson
LEG-WS-029,2026-02-15T00:39:54.705Z,53470,spoolsv.exe,TIME_WAIT,TCP,10.10.3.129,445,96.95.68.51,443,cjohnson
LEG-WS-029,2026-02-14T22:10:57.404Z,59932,explorer.exe,LISTEN,UDP,10.10.3.129,5985,0.0.0.0,0,idavis
LEG-WS-029,2026-02-14T06:25:55.683Z,18237,spoolsv.exe,LISTEN,TCP,10.10.3.129,443,0.0.0.0,0,agarcia
LEG-WS-029,2026-02-18T06:08:00.234Z,723,smss.exe,LISTEN,TCP,10.10.3.129,389,0.0.0.0,0,jsmith
LEG-WS-029,2026-02-15T06:18:28.604Z,22187,svchost.exe,SYN_SENT,TCP,10.10.3.129,135,10.10.2.167,389,idavis
LEG-WS-029,2026-02-18T17:34:03.184Z,302,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.3.129,3389,10.10.3.108,53,gwhite
LEG-WS-029,2026-02-13T05:52:00.777Z,45927,SearchHost.exe,LISTEN,TCP,10.10.3.129,53,0.0.0.0,0,svc_sql
LEG-WS-029,2026-02-19T10:21:31.042Z,63643,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.3.129,53,10.10.1.13,53,svc_sql
LEG-WS-029,2026-02-13T09:27:56.675Z,12884,MsMpEng.exe,CLOSE_WAIT,UDP,10.10.3.129,5985,190.41.178.110,88,svc_backup
LEG-WS-029,2026-02-20T06:45:46.099Z,31699,dwm.exe,SYN_SENT,TCP,10.10.3.129,445,10.10.3.171,389,admin
LEG-WS-029,2026-02-14T20:43:24.066Z,47008,powershell.exe,LISTEN,UDP,10.10.3.129,443,0.0.0.0,0,jsmith
LEG-WS-029,2026-02-19T09:59:06.546Z,61165,taskhostw.exe,CLOSE_WAIT,TCP,10.10.3.129,636,10.10.1.118,53,idavis
LEG-WS-029,2026-02-13T08:44:38.852Z,7399,services.exe,ESTABLISHED,TCP,10.10.3.129,636,191.195.223.207,443,agarcia
LEG-WS-029,2026-02-19T05:19:57.278Z,62625,smss.exe,LISTEN,TCP,10.10.3.129,445,0.0.0.0,0,fthompson
LEG-WS-029,2026-02-10T10:17:49.669Z,55960,svchost.exe,TIME_WAIT,TCP,10.10.3.129,5985,109.163.186.205,88,gwhite
LEG-WS-029,2026-02-16T14:21:58.872Z,9659,notepad.exe,LISTEN,TCP,10.10.3.129,445,0.0.0.0,0,svc_backup
LEG-WS-029,2026-02-15T11:45:22.972Z,46246,OneDrive.exe,ESTABLISHED,TCP,10.10.3.129,139,10.10.3.174,3389,fthompson
LEG-WS-029,2026-02-13T10:46:31.599Z,53512,steam.exe,TIME_WAIT,UDP,10.10.3.129,636,10.10.3.123,88,admin
LEG-WS-029,2026-02-17T21:41:19.140Z,18605,teams.exe,ESTABLISHED,TCP,10.10.3.129,3389,10.10.1.151,636,svc_backup
LEG-WS-029,2026-02-13T08:46:13.412Z,9591,OneDrive.exe,SYN_SENT,TCP,10.10.3.129,445,83.27.155.118,389,cjohnson
LEG-WS-029,2026-02-11T08:00:42.958Z,63942,code.exe,ESTABLISHED,TCP,10.10.3.129,389,202.75.192.244,80,gwhite
LEG-WS-029,2026-02-15T10:09:23.304Z,45187,explorer.exe,ESTABLISHED,TCP,10.10.3.129,88,112.76.206.63,88,idavis
LEG-WS-029,2026-02-11T14:30:46.406Z,42135,spoolsv.exe,CLOSE_WAIT,TCP,10.10.3.129,389,98.140.227.95,443,admin
LEG-WS-029,2026-02-11T15:18:32.793Z,21414,powershell.exe,ESTABLISHED,TCP,10.10.3.129,139,10.10.3.162,20577,agarcia
LEG-WS-029,2026-02-16T03:00:54.147Z,35254,System,LISTEN,TCP,10.10.3.129,5985,0.0.0.0,0,svc_sql
LEG-WS-029,2026-02-14T23:48:29.590Z,20697,winlogon.exe,ESTABLISHED,TCP,10.10.3.129,53218,193.106.60.47,636,agarcia
LEG-WS-029,2026-02-13T00:11:24.435Z,49453,smss.exe,LISTEN,UDP,10.10.3.129,53,0.0.0.0,0,jsmith
LEG-WS-029,2026-02-19T18:09:17.561Z,19328,msedge.exe,SYN_SENT,TCP,10.10.3.129,53,44.216.0.64,636,admin
LEG-WS-029,2026-02-11T19:25:00.597Z,56204,outlook.exe,SYN_SENT,TCP,10.10.3.129,53,91.107.50.170,3389,svc_web
LEG-WS-029,2026-02-12T23:44:30.633Z,25120,outlook.exe,SYN_SENT,TCP,10.10.3.129,88,10.10.3.10,636,admin
LEG-WS-029,2026-02-17T18:36:40.471Z,37038,SearchHost.exe,CLOSE_WAIT,TCP,10.10.3.129,389,10.10.2.11,3389,admin
LEG-WS-029,2026-02-11T15:09:19.101Z,7308,dwm.exe,SYN_SENT,UDP,10.10.3.129,445,81.222.194.7,445,admin
MKT-WS-030,2026-02-14T06:39:29.116Z,6981,spoolsv.exe,ESTABLISHED,TCP,10.10.1.130,60080,70.74.115.71,3389,svc_sql
MKT-WS-030,2026-02-12T02:41:12.674Z,62130,teams.exe,SYN_SENT,TCP,10.10.1.130,443,136.178.144.142,80,svc_sql
MKT-WS-030,2026-02-11T19:40:03.128Z,37295,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.130,8080,152.65.132.3,8080,svc_backup
MKT-WS-030,2026-02-13T04:57:20.676Z,28134,spoolsv.exe,TIME_WAIT,UDP,10.10.1.130,636,10.10.2.146,445,hbrown
MKT-WS-030,2026-02-20T04:13:00.253Z,10920,powershell.exe,TIME_WAIT,TCP,10.10.1.130,5985,198.160.46.163,3389,idavis
MKT-WS-030,2026-02-16T18:04:17.946Z,59795,utorrent.exe,TIME_WAIT,TCP,10.10.1.130,65301,3.217.69.123,80,svc_web
MKT-WS-030,2026-02-14T03:45:45.843Z,8837,OneDrive.exe,CLOSE_WAIT,TCP,10.10.1.130,135,190.21.229.247,443,hbrown
MKT-WS-030,2026-02-15T08:46:52.214Z,17450,explorer.exe,CLOSE_WAIT,TCP,10.10.1.130,445,96.57.173.234,445,cjohnson
MKT-WS-030,2026-02-10T09:28:21.993Z,30269,spoolsv.exe,SYN_SENT,TCP,10.10.1.130,139,10.10.3.10,53,emartinez
MKT-WS-030,2026-02-15T16:34:46.739Z,10173,msedge.exe,ESTABLISHED,TCP,10.10.1.130,5985,91.4.51.111,636,fthompson
MKT-WS-030,2026-02-15T22:06:24.646Z,17760,winlogon.exe,ESTABLISHED,UDP,10.10.1.130,135,10.10.3.147,8080,agarcia
MKT-WS-030,2026-02-10T18:03:50.676Z,25956,MsMpEng.exe,CLOSE_WAIT,UDP,10.10.1.130,3389,192.222.2.92,445,fthompson
MKT-WS-030,2026-02-20T13:43:55.832Z,7885,explorer.exe,LISTEN,UDP,10.10.1.130,389,0.0.0.0,0,fthompson
MKT-WS-030,2026-02-17T21:29:55.100Z,48720,winlogon.exe,LISTEN,TCP,10.10.1.130,53,0.0.0.0,0,svc_web
MKT-WS-030,2026-02-14T19:24:58.546Z,39230,outlook.exe,ESTABLISHED,TCP,10.10.1.130,445,40.176.6.197,53,svc_backup
MKT-WS-030,2026-02-18T07:40:54.844Z,56734,winlogon.exe,TIME_WAIT,TCP,10.10.1.130,443,195.219.126.159,445,dlee
MKT-WS-030,2026-02-11T17:04:26.231Z,2614,powershell.exe,CLOSE_WAIT,UDP,10.10.1.130,636,201.52.92.49,443,dlee
MKT-WS-030,2026-02-12T15:26:37.712Z,28023,outlook.exe,CLOSE_WAIT,TCP,10.10.1.130,443,10.10.3.168,3389,gwhite
MKT-WS-030,2026-02-12T05:26:16.461Z,135,lsass.exe,ESTABLISHED,TCP,10.10.1.130,139,94.143.179.183,80,jsmith
MKT-WS-030,2026-02-19T19:07:13.777Z,6703,taskhostw.exe,LISTEN,TCP,10.10.1.130,139,0.0.0.0,0,fthompson
MKT-WS-030,2026-02-15T20:12:55.857Z,24452,winlogon.exe,TIME_WAIT,TCP,10.10.1.130,443,10.10.3.147,49712,cjohnson
MKT-WS-030,2026-02-19T23:22:30.575Z,5007,code.exe,SYN_SENT,TCP,10.10.1.130,443,34.61.21.151,389,hbrown
MKT-WS-030,2026-02-15T00:07:13.998Z,47110,notepad.exe,CLOSE_WAIT,UDP,10.10.1.130,80,10.10.1.133,53,agarcia
MKT-WS-030,2026-02-18T01:10:43.677Z,26150,chrome.exe,CLOSE_WAIT,TCP,10.10.1.130,445,154.140.66.75,3389,gwhite
MKT-WS-030,2026-02-10T08:54:00.491Z,37579,dwm.exe,ESTABLISHED,UDP,10.10.1.130,63496,10.10.1.11,8080,cjohnson
MKT-WS-030,2026-02-10T19:24:11.219Z,15711,svchost.exe,SYN_SENT,TCP,10.10.1.130,139,219.112.151.182,3389,dlee
MKT-WS-030,2026-02-16T22:10:14.591Z,63815,outlook.exe,TIME_WAIT,UDP,10.10.1.130,58013,14.127.107.137,53,emartinez
MKT-WS-030,2026-02-12T14:49:11.633Z,63357,OneDrive.exe,SYN_SENT,TCP,10.10.1.130,5985,157.150.166.253,53,dlee
MKT-WS-030,2026-02-12T15:09:35.133Z,17715,svchost.exe,SYN_SENT,TCP,10.10.1.130,636,191.195.131.223,389,cjohnson
MKT-WS-030,2026-02-17T21:34:17.511Z,24259,SearchHost.exe,LISTEN,TCP,10.10.1.130,636,0.0.0.0,0,bwilson
MKT-WS-030,2026-02-10T13:15:42.573Z,10777,chrome.exe,CLOSE_WAIT,UDP,10.10.1.130,445,209.90.96.146,445,bwilson
MKT-WS-030,2026-02-11T18:19:22.165Z,49281,MsMpEng.exe,SYN_SENT,UDP,10.10.1.130,445,19.218.125.117,636,svc_sql
MKT-WS-030,2026-02-20T02:38:58.552Z,39397,msedge.exe,CLOSE_WAIT,TCP,10.10.1.130,443,212.6.22.34,8080,jsmith
MKT-WS-030,2026-02-13T12:50:46.493Z,31485,svchost.exe,ESTABLISHED,TCP,10.10.1.130,636,10.10.2.173,8080,bwilson
EXEC-WS-031,2026-02-11T19:27:31.523Z,59879,OneDrive.exe,TIME_WAIT,TCP,10.10.2.131,80,212.22.52.140,88,cjohnson
EXEC-WS-031,2026-02-12T16:07:50.211Z,62782,lsass.exe,CLOSE_WAIT,UDP,10.10.2.131,389,10.10.1.115,443,dlee
EXEC-WS-031,2026-02-17T09:51:29.980Z,9944,services.exe,TIME_WAIT,TCP,10.10.2.131,443,10.10.3.168,8080,admin
EXEC-WS-031,2026-02-18T10:26:45.635Z,9706,services.exe,TIME_WAIT,TCP,10.10.2.131,139,128.188.135.208,8080,emartinez
EXEC-WS-031,2026-02-14T00:09:07.881Z,32488,csrss.exe,CLOSE_WAIT,TCP,10.10.2.131,88,110.142.74.24,88,fthompson
EXEC-WS-031,2026-02-15T11:09:01.265Z,35241,lsass.exe,SYN_SENT,TCP,10.10.2.131,53681,10.10.3.171,636,svc_web
EXEC-WS-031,2026-02-15T06:28:53.715Z,8855,chrome.exe,SYN_SENT,TCP,10.10.2.131,636,23.120.185.1,636,agarcia
EXEC-WS-031,2026-02-11T13:18:32.228Z,45698,RuntimeBroker.exe,TIME_WAIT,UDP,10.10.2.131,8080,37.215.124.54,8080,svc_backup
EXEC-WS-031,2026-02-14T03:18:39.796Z,5276,svchost.exe,CLOSE_WAIT,TCP,10.10.2.131,636,28.37.244.215,8080,cjohnson
EXEC-WS-031,2026-02-13T07:41:32.163Z,10316,smss.exe,CLOSE_WAIT,UDP,10.10.2.131,8080,10.10.3.153,80,jsmith
EXEC-WS-031,2026-02-14T17:55:03.235Z,10376,explorer.exe,SYN_SENT,UDP,10.10.2.131,80,10.10.2.134,3389,dlee
EXEC-WS-031,2026-02-15T07:21:14.637Z,42875,dwm.exe,CLOSE_WAIT,UDP,10.10.2.131,5985,159.28.112.101,389,admin
EXEC-WS-031,2026-02-14T18:03:19.700Z,17789,SearchHost.exe,LISTEN,TCP,10.10.2.131,389,0.0.0.0,0,agarcia
EXEC-WS-031,2026-02-12T06:56:09.428Z,13320,RuntimeBroker.exe,SYN_SENT,TCP,10.10.2.131,135,73.83.54.17,445,admin
EXEC-WS-031,2026-02-10T10:07:10.857Z,23473,powershell.exe,TIME_WAIT,TCP,10.10.2.131,88,203.247.23.13,445,svc_sql
EXEC-WS-031,2026-02-11T09:15:02.594Z,53019,SearchHost.exe,SYN_SENT,UDP,10.10.2.131,59456,10.10.2.113,636,svc_sql
EXEC-WS-031,2026-02-19T13:06:01.861Z,53018,smss.exe,CLOSE_WAIT,TCP,10.10.2.131,139,42.77.237.21,3389,admin
EXEC-WS-031,2026-02-18T12:20:16.672Z,22318,OneDrive.exe,LISTEN,TCP,10.10.2.131,8080,0.0.0.0,0,dlee
EXEC-WS-031,2026-02-11T19:39:20.269Z,57146,lsass.exe,ESTABLISHED,TCP,10.10.2.131,135,10.10.2.11,80,dlee
EXEC-WS-031,2026-02-11T01:47:00.528Z,46673,chrome.exe,CLOSE_WAIT,TCP,10.10.2.131,3389,10.10.1.136,443,svc_sql
EXEC-WS-031,2026-02-19T21:17:06.104Z,8553,winlogon.exe,TIME_WAIT,TCP,10.10.2.131,443,10.10.2.137,27830,gwhite
EXEC-WS-031,2026-02-17T14:56:10.766Z,36852,services.exe,TIME_WAIT,TCP,10.10.2.131,389,106.230.134.225,3389,jsmith
EXEC-WS-031,2026-02-15T05:07:19.828Z,35169,msedge.exe,TIME_WAIT,TCP,10.10.2.131,88,103.37.114.100,389,svc_web
IT-WS-032,2026-02-11T12:34:53.790Z,29891,teams.exe,ESTABLISHED,TCP,10.10.3.132,135,10.10.3.144,389,jsmith
IT-WS-032,2026-02-10T15:49:50.928Z,39492,winlogon.exe,LISTEN,UDP,10.10.3.132,88,0.0.0.0,0,svc_sql
IT-WS-032,2026-02-11T01:18:53.144Z,26646,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.3.132,80,55.11.216.70,8080,agarcia
IT-WS-032,2026-02-12T01:07:59.953Z,22990,OneDrive.exe,CLOSE_WAIT,TCP,10.10.3.132,389,10.10.2.155,445,fthompson
IT-WS-032,2026-02-16T06:34:45.182Z,54037,System,LISTEN,TCP,10.10.3.132,636,0.0.0.0,0,jsmith
IT-WS-032,2026-02-17T06:00:56.645Z,54069,services.exe,LISTEN,TCP,10.10.3.132,3389,0.0.0.0,0,svc_backup
IT-WS-032,2026-02-20T15:03:34.745Z,61921,taskhostw.exe,ESTABLISHED,UDP,10.10.3.132,445,10.10.3.153,80,svc_web
IT-WS-032,2026-02-12T14:02:03.556Z,13847,spoolsv.exe,CLOSE_WAIT,TCP,10.10.3.132,80,56.96.215.179,88,cjohnson
IT-WS-032,2026-02-13T23:55:56.080Z,54375,smss.exe,ESTABLISHED,TCP,10.10.3.132,80,10.10.2.164,88,hbrown
IT-WS-032,2026-02-16T22:31:36.510Z,46112,taskhostw.exe,ESTABLISHED,UDP,10.10.3.132,5985,10.10.3.156,88,idavis
IT-WS-032,2026-02-15T13:50:25.368Z,52913,msedge.exe,ESTABLISHED,TCP,10.10.3.132,389,5.210.53.128,389,jsmith
IT-WS-032,2026-02-14T07:16:11.847Z,12916,lsass.exe,LISTEN,UDP,10.10.3.132,53,0.0.0.0,0,svc_web
IT-WS-032,2026-02-13T02:54:08.226Z,43267,msedge.exe,TIME_WAIT,TCP,10.10.3.132,389,181.202.3.241,445,dlee
IT-WS-032,2026-02-10T11:52:57.058Z,10151,lsass.exe,LISTEN,TCP,10.10.3.132,80,0.0.0.0,0,svc_sql
IT-WS-032,2026-02-18T23:08:14.909Z,52616,dwm.exe,SYN_SENT,TCP,10.10.3.132,445,147.220.123.143,88,idavis
IT-WS-032,2026-02-16T21:51:36.961Z,51498,spoolsv.exe,CLOSE_WAIT,UDP,10.10.3.132,3389,133.81.223.60,443,fthompson
IT-WS-032,2026-02-11T22:15:43.751Z,40607,spoolsv.exe,TIME_WAIT,TCP,10.10.3.132,3389,53.47.47.7,42239,svc_backup
IT-WS-032,2026-02-17T03:07:50.447Z,14632,chrome.exe,SYN_SENT,TCP,10.10.3.132,636,10.10.2.11,3389,dlee
IT-WS-032,2026-02-19T23:47:59.122Z,8140,powershell.exe,CLOSE_WAIT,TCP,10.10.3.132,139,22.73.11.164,389,agarcia
IT-WS-032,2026-02-19T03:09:21.251Z,59915,cmd.exe,LISTEN,TCP,10.10.3.132,8080,0.0.0.0,0,svc_web
IT-WS-032,2026-02-16T22:23:16.618Z,29648,msedge.exe,CLOSE_WAIT,TCP,10.10.3.132,443,10.10.1.154,53,svc_sql
IT-WS-032,2026-02-18T01:25:27.146Z,60824,notepad.exe,ESTABLISHED,UDP,10.10.3.132,443,88.177.247.158,636,agarcia
IT-WS-032,2026-02-12T14:56:25.000Z,47793,svchost.exe,SYN_SENT,TCP,10.10.3.132,135,222.186.58.231,8080,svc_backup
IT-WS-032,2026-02-19T22:35:13.288Z,16490,cmd.exe,TIME_WAIT,TCP,10.10.3.132,443,10.10.2.164,88,bwilson
IT-WS-032,2026-02-14T17:56:03.589Z,49060,OneDrive.exe,TIME_WAIT,TCP,10.10.3.132,88,10.10.1.127,389,dlee
IT-WS-032,2026-02-19T14:21:44.717Z,62889,services.exe,ESTABLISHED,TCP,10.10.3.132,5985,52.180.191.230,8080,hbrown
IT-WS-032,2026-02-14T01:26:10.065Z,4860,lsass.exe,TIME_WAIT,TCP,10.10.3.132,5985,10.10.1.142,8080,cjohnson
IT-WS-032,2026-02-13T15:38:50.227Z,814,RuntimeBroker.exe,LISTEN,TCP,10.10.3.132,80,0.0.0.0,0,svc_backup
IT-WS-032,2026-02-13T05:30:43.621Z,39939,csrss.exe,SYN_SENT,TCP,10.10.3.132,53,17.197.145.155,636,svc_sql
IT-WS-032,2026-02-20T15:33:53.744Z,27706,chrome.exe,SYN_SENT,TCP,10.10.3.132,3389,10.10.2.107,80,agarcia
IT-WS-032,2026-02-13T07:05:29.236Z,55257,teams.exe,SYN_SENT,TCP,10.10.3.132,135,148.10.145.5,389,fthompson
IT-WS-032,2026-02-18T04:25:23.051Z,26336,System,SYN_SENT,TCP,10.10.3.132,389,10.10.1.154,53,agarcia
IT-WS-032,2026-02-11T09:41:09.249Z,14781,taskhostw.exe,CLOSE_WAIT,TCP,10.10.3.132,5985,10.10.2.116,62477,jsmith
IT-WS-032,2026-02-13T00:55:18.921Z,51542,outlook.exe,ESTABLISHED,TCP,10.10.3.132,135,44.45.97.186,80,jsmith
IT-WS-032,2026-02-11T13:58:31.277Z,21027,notepad.exe,ESTABLISHED,TCP,10.10.3.132,636,157.194.138.179,389,svc_web
IT-WS-032,2026-02-12T16:27:27.466Z,17389,smss.exe,CLOSE_WAIT,TCP,10.10.3.132,53,10.10.1.163,389,svc_sql
IT-WS-032,2026-02-17T07:37:29.058Z,30780,chrome.exe,TIME_WAIT,TCP,10.10.3.132,389,166.105.39.20,80,svc_web
HR-WS-033,2026-02-12T14:41:46.347Z,23931,msedge.exe,TIME_WAIT,UDP,10.10.1.133,59420,80.232.78.218,8080,fthompson
HR-WS-033,2026-02-19T11:02:56.612Z,48926,services.exe,SYN_SENT,UDP,10.10.1.133,135,18.142.216.43,389,agarcia
HR-WS-033,2026-02-17T05:28:16.953Z,29764,csrss.exe,LISTEN,TCP,10.10.1.133,8080,0.0.0.0,0,emartinez
HR-WS-033,2026-02-14T04:26:42.607Z,3320,System,ESTABLISHED,TCP,10.10.1.133,135,39.203.220.131,445,admin
HR-WS-033,2026-02-12T04:09:40.594Z,18183,lsass.exe,LISTEN,TCP,10.10.1.133,5985,0.0.0.0,0,hbrown
HR-WS-033,2026-02-12T19:41:30.419Z,34973,dwm.exe,CLOSE_WAIT,TCP,10.10.1.133,389,64.56.112.30,445,agarcia
HR-WS-033,2026-02-17T16:27:48.012Z,18972,services.exe,CLOSE_WAIT,TCP,10.10.1.133,443,57.137.253.53,445,svc_backup
HR-WS-033,2026-02-19T16:58:02.299Z,9395,teams.exe,SYN_SENT,TCP,10.10.1.133,636,79.122.87.81,53,jsmith
HR-WS-033,2026-02-15T10:04:36.606Z,16320,lsass.exe,TIME_WAIT,TCP,10.10.1.133,139,10.10.2.146,80,gwhite
HR-WS-033,2026-02-15T01:09:14.717Z,48256,svchost.exe,SYN_SENT,TCP,10.10.1.133,53,129.85.75.199,53,emartinez
HR-WS-033,2026-02-17T11:26:45.741Z,47824,cmd.exe,CLOSE_WAIT,TCP,10.10.1.133,8080,10.10.2.143,445,admin
HR-WS-033,2026-02-10T15:43:34.207Z,37952,lsass.exe,LISTEN,UDP,10.10.1.133,8080,0.0.0.0,0,svc_backup
HR-WS-033,2026-02-12T03:44:17.023Z,59759,lsass.exe,TIME_WAIT,UDP,10.10.1.133,135,10.10.2.11,636,admin
HR-WS-033,2026-02-11T14:44:25.137Z,52222,taskhostw.exe,CLOSE_WAIT,TCP,10.10.1.133,139,10.10.2.167,55692,gwhite
HR-WS-033,2026-02-17T06:04:48.288Z,19999,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.1.133,8080,10.10.3.120,636,gwhite
HR-WS-033,2026-02-17T05:03:47.983Z,142,notepad.exe,ESTABLISHED,TCP,10.10.1.133,135,73.63.27.126,53,jsmith
HR-WS-033,2026-02-13T08:42:01.823Z,2206,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.1.133,443,10.10.3.126,443,gwhite
HR-WS-033,2026-02-18T17:05:42.224Z,9221,powershell.exe,CLOSE_WAIT,TCP,10.10.1.133,443,10.10.2.173,53,admin
HR-WS-033,2026-02-13T12:14:56.486Z,19586,cmd.exe,LISTEN,TCP,10.10.1.133,139,0.0.0.0,0,idavis
HR-WS-033,2026-02-15T13:57:13.656Z,45002,csrss.exe,SYN_SENT,UDP,10.10.1.133,61471,10.10.3.168,53,svc_backup
HR-WS-033,2026-02-16T17:48:07.695Z,19917,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.1.133,5985,119.14.13.246,8080,svc_sql
HR-WS-033,2026-02-15T03:03:18.677Z,3661,dwm.exe,TIME_WAIT,UDP,10.10.1.133,80,10.10.2.101,636,agarcia
HR-WS-033,2026-02-17T08:36:11.699Z,48554,discord.exe,ESTABLISHED,TCP,10.10.1.133,139,145.246.169.222,49551,svc_backup
HR-WS-033,2026-02-16T19:54:57.530Z,13253,code.exe,SYN_SENT,UDP,10.10.1.133,445,58.79.154.161,389,agarcia
HR-WS-033,2026-02-19T23:30:39.998Z,19755,outlook.exe,SYN_SENT,TCP,10.10.1.133,135,10.10.3.165,80,fthompson
HR-WS-033,2026-02-17T10:19:48.402Z,56415,teams.exe,LISTEN,TCP,10.10.1.133,88,0.0.0.0,0,admin
HR-WS-033,2026-02-18T20:38:15.090Z,43187,lsass.exe,LISTEN,TCP,10.10.1.133,445,0.0.0.0,0,cjohnson
HR-WS-033,2026-02-14T09:47:50.298Z,45821,OneDrive.exe,SYN_SENT,UDP,10.10.1.133,8080,10.10.1.10,445,svc_sql
HR-WS-033,2026-02-14T23:07:11.445Z,59613,lsass.exe,CLOSE_WAIT,UDP,10.10.1.133,139,10.10.1.175,3257,emartinez
HR-WS-033,2026-02-12T03:37:27.191Z,10022,csrss.exe,CLOSE_WAIT,TCP,10.10.1.133,445,10.10.3.168,443,emartinez
HR-WS-033,2026-02-16T15:27:37.618Z,11921,smss.exe,TIME_WAIT,TCP,10.10.1.133,139,10.10.3.162,389,idavis
HR-WS-033,2026-02-12T17:55:33.879Z,43698,dwm.exe,SYN_SENT,TCP,10.10.1.133,636,83.178.206.18,8080,agarcia
FIN-WS-034,2026-02-11T12:37:06.404Z,55596,winlogon.exe,TIME_WAIT,UDP,10.10.2.134,443,45.196.215.237,445,svc_backup
FIN-WS-034,2026-02-15T10:46:32.717Z,44589,qbittorrent.exe,TIME_WAIT,TCP,10.10.2.134,445,83.55.230.97,445,dlee
FIN-WS-034,2026-02-14T01:53:24.901Z,26840,teams.exe,CLOSE_WAIT,TCP,10.10.2.134,443,150.12.49.53,80,idavis
FIN-WS-034,2026-02-19T05:21:19.439Z,52633,chrome.exe,TIME_WAIT,UDP,10.10.2.134,135,10.10.2.146,636,agarcia
FIN-WS-034,2026-02-15T23:08:04.220Z,1577,spoolsv.exe,CLOSE_WAIT,TCP,10.10.2.134,445,201.152.51.31,4397,cjohnson
FIN-WS-034,2026-02-20T00:57:08.144Z,32871,notepad.exe,TIME_WAIT,TCP,10.10.2.134,443,41.147.38.137,636,dlee
FIN-WS-034,2026-02-19T14:00:25.228Z,3992,explorer.exe,SYN_SENT,TCP,10.10.2.134,139,10.10.1.154,53,bwilson
FIN-WS-034,2026-02-20T00:20:27.227Z,58264,taskhostw.exe,ESTABLISHED,UDP,10.10.2.134,443,10.10.2.110,40224,hbrown
FIN-WS-034,2026-02-10T13:21:38.935Z,3727,outlook.exe,TIME_WAIT,TCP,10.10.2.134,80,10.10.3.162,3389,jsmith
FIN-WS-034,2026-02-14T19:25:46.783Z,28072,code.exe,SYN_SENT,TCP,10.10.2.134,389,10.10.3.150,8080,hbrown
FIN-WS-034,2026-02-16T11:09:15.726Z,14984,csrss.exe,ESTABLISHED,TCP,10.10.2.134,3389,50.175.223.236,443,fthompson
FIN-WS-034,2026-02-10T18:55:47.485Z,23015,System,SYN_SENT,TCP,10.10.2.134,636,10.10.3.117,445,idavis
FIN-WS-034,2026-02-19T16:24:36.157Z,56379,powershell.exe,TIME_WAIT,UDP,10.10.2.134,8080,169.62.39.20,53,cjohnson
FIN-WS-034,2026-02-19T17:06:22.839Z,46335,notepad.exe,TIME_WAIT,TCP,10.10.2.134,389,63.136.163.179,53,idavis
FIN-WS-034,2026-02-18T01:28:37.792Z,13912,chrome.exe,LISTEN,UDP,10.10.2.134,139,0.0.0.0,0,agarcia
FIN-WS-034,2026-02-16T11:03:36.141Z,19787,outlook.exe,ESTABLISHED,UDP,10.10.2.134,389,196.232.58.6,445,svc_web
FIN-WS-034,2026-02-12T06:06:24.117Z,28351,explorer.exe,TIME_WAIT,TCP,10.10.2.134,8080,5.195.196.114,88,hbrown
FIN-WS-034,2026-02-13T21:14:09.946Z,54445,notepad.exe,ESTABLISHED,TCP,10.10.2.134,80,156.172.134.208,80,idavis
FIN-WS-034,2026-02-15T04:49:59.225Z,60698,lsass.exe,ESTABLISHED,TCP,10.10.2.134,636,10.10.3.174,88,cjohnson
FIN-WS-034,2026-02-14T02:25:25.380Z,43303,svchost.exe,TIME_WAIT,TCP,10.10.2.134,135,198.151.172.147,445,dlee
FIN-WS-034,2026-02-14T21:58:38.351Z,30668,services.exe,ESTABLISHED,TCP,10.10.2.134,88,10.10.3.123,80,jsmith
FIN-WS-034,2026-02-14T22:06:35.564Z,17008,winlogon.exe,SYN_SENT,UDP,10.10.2.134,80,10.10.1.12,443,svc_sql
FIN-WS-034,2026-02-19T07:08:33.249Z,38103,cmd.exe,CLOSE_WAIT,UDP,10.10.2.134,389,45.75.25.60,636,emartinez
FIN-WS-034,2026-02-10T12:01:46.356Z,55473,OneDrive.exe,LISTEN,TCP,10.10.2.134,139,0.0.0.0,0,svc_web
FIN-WS-034,2026-02-13T17:26:50.141Z,24437,System,ESTABLISHED,TCP,10.10.2.134,3389,28.39.227.29,3389,svc_web
FIN-WS-034,2026-02-16T19:28:44.731Z,10606,lsass.exe,ESTABLISHED,TCP,10.10.2.134,445,10.10.3.153,445,emartinez
FIN-WS-034,2026-02-10T16:08:59.575Z,47696,outlook.exe,SYN_SENT,TCP,10.10.2.134,88,10.10.2.128,55466,bwilson
FIN-WS-034,2026-02-17T04:47:57.983Z,34200,spoolsv.exe,ESTABLISHED,TCP,10.10.2.134,88,129.214.62.217,389,gwhite
FIN-WS-034,2026-02-14T23:15:06.737Z,62857,code.exe,SYN_SENT,TCP,10.10.2.134,3389,63.185.118.117,3389,fthompson
FIN-WS-034,2026-02-19T23:25:45.253Z,16152,RuntimeBroker.exe,SYN_SENT,TCP,10.10.2.134,3389,168.247.117.115,8080,svc_sql
FIN-WS-034,2026-02-20T13:48:42.975Z,37849,MsMpEng.exe,SYN_SENT,UDP,10.10.2.134,57680,10.10.3.111,636,gwhite
FIN-WS-034,2026-02-11T14:11:49.961Z,17360,code.exe,LISTEN,TCP,10.10.2.134,445,0.0.0.0,0,svc_sql
FIN-WS-034,2026-02-14T00:35:30.994Z,26466,winlogon.exe,ESTABLISHED,UDP,10.10.2.134,5985,10.10.1.166,88,svc_backup
FIN-WS-034,2026-02-16T21:42:28.797Z,48642,OneDrive.exe,TIME_WAIT,TCP,10.10.2.134,3389,10.10.2.146,88,svc_web
FIN-WS-034,2026-02-19T15:53:59.254Z,38999,winlogon.exe,LISTEN,UDP,10.10.2.134,445,0.0.0.0,0,idavis
FIN-WS-034,2026-02-16T05:01:58.204Z,58905,spoolsv.exe,CLOSE_WAIT,TCP,10.10.2.134,8080,10.10.1.139,80,hbrown
FIN-WS-034,2026-02-16T07:47:04.040Z,40435,lsass.exe,TIME_WAIT,TCP,10.10.2.134,3389,10.10.1.127,445,emartinez
FIN-WS-034,2026-02-15T09:39:32.152Z,14756,notepad.exe,LISTEN,TCP,10.10.2.134,139,0.0.0.0,0,bwilson
FIN-WS-034,2026-02-19T17:38:07.172Z,63005,cmd.exe,SYN_SENT,TCP,10.10.2.134,389,72.72.49.53,2816,hbrown
SLS-WS-035,2026-02-17T19:03:45.818Z,60339,discord.exe,ESTABLISHED,TCP,10.10.3.135,139,10.10.3.117,443,svc_web
SLS-WS-035,2026-02-13T17:46:44.144Z,33330,lsass.exe,CLOSE_WAIT,TCP,10.10.3.135,445,72.59.181.206,443,emartinez
SLS-WS-035,2026-02-12T21:28:42.357Z,38526,spoolsv.exe,SYN_SENT,TCP,10.10.3.135,80,111.51.162.49,80,fthompson
SLS-WS-035,2026-02-15T09:07:36.454Z,12362,powershell.exe,LISTEN,TCP,10.10.3.135,445,0.0.0.0,0,svc_backup
SLS-WS-035,2026-02-14T20:34:46.903Z,32257,outlook.exe,LISTEN,TCP,10.10.3.135,80,0.0.0.0,0,hbrown
SLS-WS-035,2026-02-13T01:46:06.432Z,25022,OneDrive.exe,LISTEN,TCP,10.10.3.135,636,0.0.0.0,0,admin
SLS-WS-035,2026-02-16T13:27:37.896Z,35713,spoolsv.exe,TIME_WAIT,TCP,10.10.3.135,139,10.10.1.163,88,gwhite
SLS-WS-035,2026-02-17T05:09:11.573Z,22878,powershell.exe,ESTABLISHED,TCP,10.10.3.135,8080,10.10.3.123,53,svc_backup
SLS-WS-035,2026-02-10T23:12:02.935Z,50680,outlook.exe,CLOSE_WAIT,TCP,10.10.3.135,389,61.14.148.69,88,emartinez
SLS-WS-035,2026-02-13T13:07:39.584Z,26957,taskhostw.exe,CLOSE_WAIT,TCP,10.10.3.135,5985,103.133.27.69,80,cjohnson
SLS-WS-035,2026-02-18T16:36:11.590Z,6014,teams.exe,SYN_SENT,UDP,10.10.3.135,88,157.168.66.155,80,svc_sql
SLS-WS-035,2026-02-13T08:32:48.735Z,10677,RuntimeBroker.exe,SYN_SENT,TCP,10.10.3.135,53,10.10.1.121,3389,emartinez
SLS-WS-035,2026-02-13T06:46:20.749Z,1688,code.exe,SYN_SENT,UDP,10.10.3.135,80,10.10.1.151,8080,cjohnson
SLS-WS-035,2026-02-11T14:54:38.547Z,51483,OneDrive.exe,LISTEN,TCP,10.10.3.135,636,0.0.0.0,0,fthompson
SLS-WS-035,2026-02-18T14:09:18.005Z,12832,outlook.exe,TIME_WAIT,TCP,10.10.3.135,443,130.212.10.4,7286,svc_web
SLS-WS-035,2026-02-14T19:23:01.113Z,14665,notepad.exe,TIME_WAIT,TCP,10.10.3.135,139,10.10.2.134,445,fthompson
SLS-WS-035,2026-02-16T08:28:11.539Z,1731,winlogon.exe,TIME_WAIT,TCP,10.10.3.135,5985,5.254.201.244,3389,fthompson
SLS-WS-035,2026-02-12T02:18:50.141Z,56777,csrss.exe,TIME_WAIT,TCP,10.10.3.135,389,80.170.73.208,636,gwhite
SLS-WS-035,2026-02-17T20:45:29.172Z,37235,chrome.exe,LISTEN,TCP,10.10.3.135,53,0.0.0.0,0,svc_sql
SLS-WS-035,2026-02-13T03:02:10.406Z,13811,winlogon.exe,TIME_WAIT,TCP,10.10.3.135,636,10.10.2.173,80,svc_sql
ENG-WS-036,2026-02-15T08:44:56.700Z,36459,taskhostw.exe,LISTEN,TCP,10.10.1.136,636,0.0.0.0,0,svc_web
ENG-WS-036,2026-02-19T09:26:14.255Z,7549,chrome.exe,ESTABLISHED,TCP,10.10.1.136,5985,33.6.82.134,389,jsmith
ENG-WS-036,2026-02-18T03:14:54.089Z,35953,winlogon.exe,LISTEN,TCP,10.10.1.136,445,0.0.0.0,0,fthompson
ENG-WS-036,2026-02-15T18:48:46.116Z,13499,notepad.exe,ESTABLISHED,TCP,10.10.1.136,636,174.138.165.158,445,svc_sql
ENG-WS-036,2026-02-10T10:27:19.067Z,27382,OneDrive.exe,TIME_WAIT,TCP,10.10.1.136,8080,119.107.169.238,389,bwilson
ENG-WS-036,2026-02-16T12:36:49.014Z,4475,chrome.exe,ESTABLISHED,TCP,10.10.1.136,135,178.48.234.85,389,emartinez
ENG-WS-036,2026-02-16T04:16:41.066Z,42147,powershell.exe,TIME_WAIT,TCP,10.10.1.136,139,10.10.3.10,445,admin
ENG-WS-036,2026-02-12T04:34:52.734Z,37040,smss.exe,LISTEN,TCP,10.10.1.136,139,0.0.0.0,0,agarcia
ENG-WS-036,2026-02-20T15:16:18.503Z,6085,dwm.exe,SYN_SENT,TCP,10.10.1.136,88,198.141.242.54,3389,svc_sql
ENG-WS-036,2026-02-11T03:26:48.685Z,63659,outlook.exe,LISTEN,TCP,10.10.1.136,3389,0.0.0.0,0,jsmith
ENG-WS-036,2026-02-17T16:33:40.132Z,23364,csrss.exe,CLOSE_WAIT,TCP,10.10.1.136,139,10.10.1.151,88,dlee
ENG-WS-036,2026-02-17T11:20:30.826Z,36662,taskhostw.exe,SYN_SENT,TCP,10.10.1.136,445,10.10.3.156,445,fthompson
ENG-WS-036,2026-02-12T04:45:05.040Z,49096,teams.exe,ESTABLISHED,TCP,10.10.1.136,64424,172.177.217.55,53,jsmith
ENG-WS-036,2026-02-16T15:41:36.972Z,2297,RuntimeBroker.exe,SYN_SENT,UDP,10.10.1.136,88,10.10.1.148,80,admin
ENG-WS-036,2026-02-15T06:21:43.574Z,57439,winlogon.exe,CLOSE_WAIT,TCP,10.10.1.136,139,10.10.2.161,8080,admin
ENG-WS-036,2026-02-10T22:00:43.194Z,41877,msedge.exe,ESTABLISHED,TCP,10.10.1.136,88,183.78.90.223,443,svc_backup
ENG-WS-036,2026-02-17T20:32:01.982Z,24102,msedge.exe,SYN_SENT,TCP,10.10.1.136,389,158.8.170.215,60381,hbrown
ENG-WS-036,2026-02-16T16:07:56.122Z,45235,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.1.136,443,10.10.3.123,445,hbrown
ENG-WS-036,2026-02-11T06:02:25.758Z,60262,spoolsv.exe,ESTABLISHED,TCP,10.10.1.136,53,90.60.174.120,389,agarcia
ENG-WS-036,2026-02-12T02:20:02.256Z,784,chrome.exe,LISTEN,TCP,10.10.1.136,49810,0.0.0.0,0,cjohnson
ENG-WS-036,2026-02-12T04:30:03.632Z,9302,csrss.exe,ESTABLISHED,UDP,10.10.1.136,389,10.10.2.107,445,idavis
ENG-WS-036,2026-02-20T12:49:10.388Z,17097,powershell.exe,LISTEN,TCP,10.10.1.136,445,0.0.0.0,0,svc_backup
ENG-WS-036,2026-02-16T06:10:40.174Z,46118,chrome.exe,CLOSE_WAIT,TCP,10.10.1.136,3389,10.10.1.175,636,fthompson
ENG-WS-036,2026-02-13T01:12:41.323Z,60518,MsMpEng.exe,TIME_WAIT,UDP,10.10.1.136,636,10.10.1.127,389,agarcia
ENG-WS-036,2026-02-16T10:42:18.685Z,24497,spoolsv.exe,LISTEN,TCP,10.10.1.136,8080,0.0.0.0,0,idavis
ENG-WS-036,2026-02-12T06:46:40.366Z,23562,smss.exe,ESTABLISHED,TCP,10.10.1.136,389,10.10.2.161,443,dlee
ENG-WS-036,2026-02-16T18:09:11.093Z,39000,System,LISTEN,TCP,10.10.1.136,63537,0.0.0.0,0,idavis
ENG-WS-036,2026-02-18T06:47:35.691Z,59139,SearchHost.exe,CLOSE_WAIT,UDP,10.10.1.136,636,10.10.2.152,3389,hbrown
ENG-WS-036,2026-02-18T03:57:45.082Z,8612,lsass.exe,TIME_WAIT,TCP,10.10.1.136,88,8.83.85.237,63381,admin
ENG-WS-036,2026-02-12T10:06:05.882Z,11376,explorer.exe,ESTABLISHED,TCP,10.10.1.136,53787,89.234.202.43,8080,dlee
ENG-WS-036,2026-02-17T21:02:00.948Z,10201,teams.exe,LISTEN,UDP,10.10.1.136,443,0.0.0.0,0,admin
ENG-WS-036,2026-02-18T23:50:12.292Z,46383,RuntimeBroker.exe,ESTABLISHED,TCP,10.10.1.136,3389,10.10.2.128,88,cjohnson
ENG-WS-036,2026-02-15T21:31:43.656Z,22832,msedge.exe,CLOSE_WAIT,UDP,10.10.1.136,59583,10.10.2.137,88,gwhite
ENG-WS-036,2026-02-18T03:55:16.014Z,60038,smss.exe,ESTABLISHED,UDP,10.10.1.136,54989,61.188.185.88,41038,agarcia
ENG-WS-036,2026-02-13T07:14:27.711Z,25450,outlook.exe,CLOSE_WAIT,UDP,10.10.1.136,135,78.222.47.87,8080,admin
ENG-WS-036,2026-02-17T03:58:01.743Z,26607,explorer.exe,TIME_WAIT,TCP,10.10.1.136,445,10.10.3.111,443,svc_sql
ENG-WS-036,2026-02-13T11:44:19.061Z,17050,teams.exe,TIME_WAIT,UDP,10.10.1.136,389,10.10.2.152,80,svc_backup
ENG-WS-036,2026-02-19T09:34:42.867Z,5343,services.exe,CLOSE_WAIT,TCP,10.10.1.136,61368,10.10.3.123,88,bwilson
ENG-WS-036,2026-02-19T08:58:27.045Z,30262,OneDrive.exe,SYN_SENT,TCP,10.10.1.136,53,10.10.1.160,443,emartinez
LEG-WS-037,2026-02-14T16:15:54.210Z,29379,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.137,3389,173.151.12.139,53,emartinez
LEG-WS-037,2026-02-16T22:13:48.020Z,28352,explorer.exe,SYN_SENT,TCP,10.10.2.137,636,10.202.127.45,8080,dlee
LEG-WS-037,2026-02-20T13:03:59.838Z,5261,csrss.exe,SYN_SENT,UDP,10.10.2.137,80,20.167.190.10,636,emartinez
LEG-WS-037,2026-02-16T06:43:25.610Z,19970,notepad.exe,CLOSE_WAIT,TCP,10.10.2.137,445,192.131.40.215,3389,idavis
LEG-WS-037,2026-02-16T15:09:20.311Z,59721,powershell.exe,ESTABLISHED,TCP,10.10.2.137,135,10.10.1.124,80,bwilson
LEG-WS-037,2026-02-11T08:17:12.927Z,14834,cmd.exe,ESTABLISHED,TCP,10.10.2.137,80,10.10.3.135,53,jsmith
LEG-WS-037,2026-02-15T06:54:02.598Z,36646,powershell.exe,ESTABLISHED,TCP,10.10.2.137,636,10.10.2.10,88,jsmith
LEG-WS-037,2026-02-10T16:03:59.858Z,55955,taskhostw.exe,TIME_WAIT,TCP,10.10.2.137,8080,10.10.2.122,88,idavis
LEG-WS-037,2026-02-10T15:23:28.111Z,41051,spoolsv.exe,CLOSE_WAIT,TCP,10.10.2.137,443,10.10.3.141,389,idavis
LEG-WS-037,2026-02-11T16:55:27.650Z,39888,RuntimeBroker.exe,SYN_SENT,TCP,10.10.2.137,62763,10.10.2.131,636,svc_web
LEG-WS-037,2026-02-13T08:20:14.078Z,56781,SearchHost.exe,LISTEN,UDP,10.10.2.137,88,0.0.0.0,0,bwilson
MKT-WS-038,2026-02-18T08:37:29.704Z,41405,RuntimeBroker.exe,LISTEN,TCP,10.10.3.138,3389,0.0.0.0,0,agarcia
MKT-WS-038,2026-02-11T23:14:31.022Z,57335,MsMpEng.exe,TIME_WAIT,TCP,10.10.3.138,135,10.10.1.160,389,bwilson
MKT-WS-038,2026-02-16T23:06:15.187Z,40658,svchost.exe,SYN_SENT,TCP,10.10.3.138,389,10.10.1.154,3389,cjohnson
MKT-WS-038,2026-02-20T05:57:41.472Z,1588,services.exe,SYN_SENT,TCP,10.10.3.138,80,10.10.2.11,443,svc_backup
MKT-WS-038,2026-02-13T09:14:43.724Z,58718,spoolsv.exe,CLOSE_WAIT,TCP,10.10.3.138,445,118.188.122.45,8080,jsmith
MKT-WS-038,2026-02-12T21:12:57.108Z,47420,csrss.exe,CLOSE_WAIT,UDP,10.10.3.138,135,10.10.1.115,8080,agarcia
MKT-WS-038,2026-02-17T01:46:20.405Z,35107,explorer.exe,CLOSE_WAIT,TCP,10.10.3.138,5985,19.213.133.227,47934,svc_backup
MKT-WS-038,2026-02-11T09:54:20.710Z,55613,winlogon.exe,ESTABLISHED,TCP,10.10.3.138,636,10.10.1.166,443,dlee
MKT-WS-038,2026-02-11T08:16:53.133Z,42176,smss.exe,ESTABLISHED,UDP,10.10.3.138,5985,10.10.3.132,445,svc_backup
MKT-WS-038,2026-02-16T12:36:25.316Z,49994,epicgameslauncher.exe,CLOSE_WAIT,UDP,10.10.3.138,3389,10.10.2.158,445,bwilson
MKT-WS-038,2026-02-17T08:19:10.842Z,10221,notepad.exe,ESTABLISHED,UDP,10.10.3.138,88,10.10.1.121,389,svc_backup
MKT-WS-038,2026-02-13T00:19:35.184Z,15036,outlook.exe,LISTEN,TCP,10.10.3.138,5985,0.0.0.0,0,jsmith
MKT-WS-038,2026-02-16T10:47:01.883Z,32939,smss.exe,TIME_WAIT,UDP,10.10.3.138,139,10.10.2.122,8080,emartinez
MKT-WS-038,2026-02-12T11:36:26.333Z,9936,SearchHost.exe,CLOSE_WAIT,UDP,10.10.3.138,445,10.10.1.109,445,dlee
MKT-WS-038,2026-02-16T06:21:07.192Z,41953,msedge.exe,LISTEN,TCP,10.10.3.138,8080,0.0.0.0,0,jsmith
MKT-WS-038,2026-02-10T16:12:36.477Z,41151,dwm.exe,LISTEN,UDP,10.10.3.138,389,0.0.0.0,0,agarcia
MKT-WS-038,2026-02-12T17:05:05.937Z,47114,dwm.exe,ESTABLISHED,TCP,10.10.3.138,51755,15.228.126.63,3389,gwhite
MKT-WS-038,2026-02-12T16:53:47.623Z,38482,services.exe,TIME_WAIT,TCP,10.10.3.138,443,10.10.3.117,3389,svc_sql
MKT-WS-038,2026-02-12T09:20:56.617Z,35644,csrss.exe,ESTABLISHED,TCP,10.10.3.138,3389,10.10.1.115,389,idavis
MKT-WS-038,2026-02-18T04:38:24.225Z,39510,winlogon.exe,TIME_WAIT,TCP,10.10.3.138,88,10.10.2.125,445,dlee
MKT-WS-038,2026-02-17T09:27:38.298Z,33068,teams.exe,TIME_WAIT,TCP,10.10.3.138,53,73.153.135.223,445,dlee
MKT-WS-038,2026-02-19T15:20:30.480Z,33493,msedge.exe,LISTEN,TCP,10.10.3.138,3389,0.0.0.0,0,gwhite
MKT-WS-038,2026-02-18T06:42:47.383Z,14073,teams.exe,ESTABLISHED,TCP,10.10.3.138,443,221.226.175.164,443,dlee
MKT-WS-038,2026-02-18T12:27:10.014Z,55960,taskhostw.exe,SYN_SENT,TCP,10.10.3.138,389,77.107.79.83,88,bwilson
MKT-WS-038,2026-02-14T04:41:52.017Z,20169,teams.exe,TIME_WAIT,TCP,10.10.3.138,389,10.10.2.134,445,emartinez
MKT-WS-038,2026-02-14T00:24:10.762Z,52880,taskhostw.exe,CLOSE_WAIT,TCP,10.10.3.138,88,101.213.2.196,88,bwilson
MKT-WS-038,2026-02-18T13:43:47.972Z,21444,cmd.exe,ESTABLISHED,UDP,10.10.3.138,389,184.131.150.214,88,hbrown
MKT-WS-038,2026-02-11T10:42:31.118Z,16034,code.exe,LISTEN,TCP,10.10.3.138,139,0.0.0.0,0,bwilson
MKT-WS-038,2026-02-10T22:01:43.109Z,22558,winlogon.exe,SYN_SENT,TCP,10.10.3.138,50659,10.10.1.136,443,dlee
MKT-WS-038,2026-02-16T11:27:07.485Z,37723,csrss.exe,TIME_WAIT,TCP,10.10.3.138,445,192.37.166.251,8080,cjohnson
MKT-WS-038,2026-02-15T20:45:24.731Z,19198,csrss.exe,LISTEN,TCP,10.10.3.138,53,0.0.0.0,0,svc_backup
MKT-WS-038,2026-02-13T19:15:10.888Z,44511,qbittorrent.exe,ESTABLISHED,TCP,10.10.3.138,60988,115.109.94.83,53,svc_backup
MKT-WS-038,2026-02-10T23:04:17.721Z,64957,services.exe,ESTABLISHED,UDP,10.10.3.138,389,106.218.202.207,636,hbrown
EXEC-WS-039,2026-02-16T05:19:36.125Z,63946,lsass.exe,ESTABLISHED,TCP,10.10.1.139,59869,138.251.144.148,443,hbrown
EXEC-WS-039,2026-02-19T22:37:27.192Z,40079,System,LISTEN,TCP,10.10.1.139,88,0.0.0.0,0,admin
EXEC-WS-039,2026-02-18T11:16:41.623Z,48561,chrome.exe,CLOSE_WAIT,TCP,10.10.1.139,8080,10.10.1.124,636,svc_web
EXEC-WS-039,2026-02-13T00:42:47.655Z,14707,svchost.exe,CLOSE_WAIT,TCP,10.10.1.139,80,10.10.3.129,8080,idavis
EXEC-WS-039,2026-02-11T09:13:26.843Z,35058,taskhostw.exe,SYN_SENT,TCP,10.10.1.139,55716,211.181.78.49,8080,idavis
EXEC-WS-039,2026-02-13T17:51:54.943Z,20765,explorer.exe,LISTEN,TCP,10.10.1.139,443,0.0.0.0,0,cjohnson
EXEC-WS-039,2026-02-10T14:21:21.498Z,56954,code.exe,TIME_WAIT,UDP,10.10.1.139,139,10.10.1.118,88,svc_backup
EXEC-WS-039,2026-02-15T14:40:32.998Z,37999,code.exe,CLOSE_WAIT,TCP,10.10.1.139,8080,103.101.105.198,8080,svc_backup
EXEC-WS-039,2026-02-16T15:12:43.568Z,49231,teams.exe,LISTEN,TCP,10.10.1.139,636,0.0.0.0,0,emartinez
EXEC-WS-039,2026-02-14T12:04:37.513Z,56296,code.exe,ESTABLISHED,TCP,10.10.1.139,8080,10.10.2.101,88,agarcia
EXEC-WS-039,2026-02-17T22:24:26.200Z,58907,notepad.exe,ESTABLISHED,TCP,10.10.1.139,135,180.43.199.225,445,emartinez
EXEC-WS-039,2026-02-15T17:39:19.817Z,9289,spotify.exe,LISTEN,UDP,10.10.1.139,445,0.0.0.0,0,svc_backup
EXEC-WS-039,2026-02-12T03:39:33.732Z,34086,explorer.exe,ESTABLISHED,TCP,10.10.1.139,636,170.150.190.159,8080,bwilson
EXEC-WS-039,2026-02-12T00:35:36.342Z,32707,MsMpEng.exe,LISTEN,TCP,10.10.1.139,52736,0.0.0.0,0,cjohnson
EXEC-WS-039,2026-02-19T20:23:39.240Z,3147,spoolsv.exe,TIME_WAIT,TCP,10.10.1.139,80,201.13.169.8,8080,hbrown
EXEC-WS-039,2026-02-15T04:06:29.987Z,27302,services.exe,SYN_SENT,UDP,10.10.1.139,443,4.178.114.24,389,svc_web
EXEC-WS-039,2026-02-15T07:03:39.122Z,59052,csrss.exe,LISTEN,TCP,10.10.1.139,139,0.0.0.0,0,dlee
EXEC-WS-039,2026-02-12T16:23:16.656Z,5486,MsMpEng.exe,SYN_SENT,TCP,10.10.1.139,8080,127.100.64.57,8080,svc_backup
EXEC-WS-039,2026-02-17T07:05:20.727Z,34173,SearchHost.exe,TIME_WAIT,TCP,10.10.1.139,135,10.10.1.139,389,hbrown
EXEC-WS-039,2026-02-17T05:18:01.645Z,38069,cmd.exe,LISTEN,TCP,10.10.1.139,3389,0.0.0.0,0,svc_backup
EXEC-WS-039,2026-02-10T10:55:41.259Z,31608,explorer.exe,CLOSE_WAIT,TCP,10.10.1.139,445,4.73.17.214,53,gwhite
EXEC-WS-039,2026-02-12T23:49:15.981Z,52986,code.exe,SYN_SENT,TCP,10.10.1.139,135,10.10.1.136,8080,svc_web
EXEC-WS-039,2026-02-20T09:11:18.194Z,8372,System,CLOSE_WAIT,TCP,10.10.1.139,60370,10.10.3.147,80,agarcia
EXEC-WS-039,2026-02-12T05:39:11.139Z,53841,csrss.exe,ESTABLISHED,TCP,10.10.1.139,445,89.157.231.112,636,hbrown
EXEC-WS-039,2026-02-18T02:08:56.218Z,34544,MsMpEng.exe,LISTEN,TCP,10.10.1.139,636,0.0.0.0,0,idavis
EXEC-WS-039,2026-02-11T09:02:04.265Z,10955,smss.exe,SYN_SENT,TCP,10.10.1.139,50691,137.185.117.178,8080,admin
EXEC-WS-039,2026-02-13T05:36:19.241Z,62952,services.exe,LISTEN,UDP,10.10.1.139,135,0.0.0.0,0,fthompson
EXEC-WS-039,2026-02-16T12:29:46.438Z,4478,dwm.exe,CLOSE_WAIT,TCP,10.10.1.139,3389,10.10.1.133,14704,jsmith
EXEC-WS-039,2026-02-20T11:01:25.510Z,64092,outlook.exe,LISTEN,TCP,10.10.1.139,54403,0.0.0.0,0,cjohnson
EXEC-WS-039,2026-02-11T14:52:04.279Z,48574,teams.exe,CLOSE_WAIT,TCP,10.10.1.139,135,214.179.36.58,88,idavis
EXEC-WS-039,2026-02-13T04:52:03.269Z,21561,outlook.exe,LISTEN,TCP,10.10.1.139,389,0.0.0.0,0,jsmith
IT-WS-040,2026-02-19T12:03:24.192Z,49530,dwm.exe,ESTABLISHED,TCP,10.10.2.140,135,10.10.2.116,443,svc_backup
IT-WS-040,2026-02-12T16:09:30.073Z,6853,cmd.exe,ESTABLISHED,TCP,10.10.2.140,443,10.10.2.122,445,agarcia
IT-WS-040,2026-02-19T02:34:52.499Z,48101,services.exe,SYN_SENT,TCP,10.10.2.140,389,127.221.215.15,445,dlee
IT-WS-040,2026-02-12T20:41:09.797Z,32538,spoolsv.exe,SYN_SENT,TCP,10.10.2.140,389,215.128.182.22,389,cjohnson
IT-WS-040,2026-02-16T07:54:22.972Z,7798,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.140,53,156.192.195.11,443,svc_sql
IT-WS-040,2026-02-10T17:19:08.613Z,26228,smss.exe,SYN_SENT,TCP,10.10.2.140,636,10.10.1.157,636,svc_web
IT-WS-040,2026-02-19T04:21:27.075Z,16714,lsass.exe,ESTABLISHED,UDP,10.10.2.140,80,162.168.50.75,389,emartinez
IT-WS-040,2026-02-12T12:20:42.916Z,50615,RuntimeBroker.exe,TIME_WAIT,UDP,10.10.2.140,8080,10.10.1.13,8080,svc_web
IT-WS-040,2026-02-11T09:19:28.350Z,47413,taskhostw.exe,CLOSE_WAIT,TCP,10.10.2.140,8080,220.45.170.91,445,agarcia
IT-WS-040,2026-02-19T15:56:42.207Z,49564,taskhostw.exe,SYN_SENT,TCP,10.10.2.140,55253,10.10.1.163,389,bwilson
IT-WS-040,2026-02-11T06:38:07.995Z,39288,taskhostw.exe,ESTABLISHED,TCP,10.10.2.140,88,80.151.91.102,443,admin
IT-WS-040,2026-02-11T17:15:29.055Z,25347,cmd.exe,LISTEN,TCP,10.10.2.140,5985,0.0.0.0,0,agarcia
IT-WS-040,2026-02-10T14:35:23.270Z,14810,notepad.exe,SYN_SENT,TCP,10.10.2.140,3389,58.226.20.63,445,svc_web
IT-WS-040,2026-02-18T18:52:52.791Z,9627,powershell.exe,LISTEN,UDP,10.10.2.140,389,0.0.0.0,0,jsmith
IT-WS-040,2026-02-19T14:09:03.726Z,64268,svchost.exe,SYN_SENT,TCP,10.10.2.140,5985,10.10.2.167,42131,fthompson
HR-WS-041,2026-02-18T14:53:21.370Z,38042,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.3.141,3389,10.10.1.118,3389,bwilson
HR-WS-041,2026-02-16T07:33:53.237Z,3586,dwm.exe,CLOSE_WAIT,TCP,10.10.3.141,443,207.116.178.184,445,gwhite
HR-WS-041,2026-02-10T23:56:39.150Z,23326,winlogon.exe,SYN_SENT,TCP,10.10.3.141,445,10.10.1.145,8080,agarcia
HR-WS-041,2026-02-13T13:27:22.747Z,45792,cmd.exe,SYN_SENT,TCP,10.10.3.141,636,10.10.1.118,389,admin
HR-WS-041,2026-02-16T10:51:42.906Z,50865,powershell.exe,SYN_SENT,TCP,10.10.3.141,445,197.161.3.249,53,agarcia
HR-WS-041,2026-02-11T07:32:25.285Z,26547,dwm.exe,CLOSE_WAIT,UDP,10.10.3.141,135,154.91.92.8,443,idavis
HR-WS-041,2026-02-17T16:48:56.656Z,57710,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.3.141,636,10.10.2.113,8080,dlee
HR-WS-041,2026-02-10T23:13:30.800Z,36611,teams.exe,TIME_WAIT,TCP,10.10.3.141,135,10.10.2.113,2360,jsmith
HR-WS-041,2026-02-13T17:42:53.696Z,20171,msedge.exe,LISTEN,TCP,10.10.3.141,80,0.0.0.0,0,jsmith
HR-WS-041,2026-02-16T13:55:46.474Z,37716,smss.exe,SYN_SENT,TCP,10.10.3.141,445,10.10.2.128,8080,bwilson
HR-WS-041,2026-02-10T15:35:07.500Z,2641,OneDrive.exe,LISTEN,TCP,10.10.3.141,8080,0.0.0.0,0,hbrown
HR-WS-041,2026-02-11T22:48:47.358Z,40286,msedge.exe,TIME_WAIT,TCP,10.10.3.141,3389,10.10.2.113,13682,emartinez
HR-WS-041,2026-02-12T07:05:06.166Z,26595,MsMpEng.exe,SYN_SENT,TCP,10.10.3.141,443,172.33.173.64,389,jsmith
HR-WS-041,2026-02-11T17:52:08.101Z,50138,winlogon.exe,SYN_SENT,TCP,10.10.3.141,389,168.164.201.194,53,cjohnson
HR-WS-041,2026-02-16T16:24:56.912Z,20147,spoolsv.exe,CLOSE_WAIT,TCP,10.10.3.141,5985,10.10.3.114,389,gwhite
HR-WS-041,2026-02-10T19:48:06.794Z,19953,notepad.exe,ESTABLISHED,TCP,10.10.3.141,135,23.157.88.165,80,fthompson
HR-WS-041,2026-02-17T18:06:09.521Z,4881,System,ESTABLISHED,TCP,10.10.3.141,53,95.22.109.26,3389,svc_backup
HR-WS-041,2026-02-17T04:53:54.772Z,60081,code.exe,SYN_SENT,TCP,10.10.3.141,80,98.105.59.237,3389,svc_web
HR-WS-041,2026-02-17T10:05:56.147Z,46641,teams.exe,CLOSE_WAIT,UDP,10.10.3.141,5985,10.10.3.132,88,svc_web
HR-WS-041,2026-02-10T10:33:24.660Z,54072,notepad.exe,LISTEN,TCP,10.10.3.141,636,0.0.0.0,0,fthompson
HR-WS-041,2026-02-11T01:37:51.919Z,7596,code.exe,CLOSE_WAIT,TCP,10.10.3.141,389,178.202.21.179,3389,agarcia
HR-WS-041,2026-02-13T01:22:29.270Z,49972,winlogon.exe,ESTABLISHED,UDP,10.10.3.141,445,10.10.1.169,19682,agarcia
HR-WS-041,2026-02-19T00:16:25.260Z,12189,code.exe,ESTABLISHED,TCP,10.10.3.141,135,33.18.240.123,80,agarcia
HR-WS-041,2026-02-18T00:35:11.698Z,29068,chrome.exe,LISTEN,TCP,10.10.3.141,8080,0.0.0.0,0,idavis
FIN-WS-042,2026-02-16T06:12:01.215Z,62266,dwm.exe,LISTEN,UDP,10.10.1.142,80,0.0.0.0,0,bwilson
FIN-WS-042,2026-02-19T17:23:26.533Z,3798,cmd.exe,LISTEN,TCP,10.10.1.142,135,0.0.0.0,0,fthompson
FIN-WS-042,2026-02-11T01:20:44.594Z,16207,notepad.exe,SYN_SENT,TCP,10.10.1.142,445,161.99.171.169,389,idavis
FIN-WS-042,2026-02-11T11:50:29.220Z,4368,System,LISTEN,UDP,10.10.1.142,80,0.0.0.0,0,fthompson
FIN-WS-042,2026-02-16T04:40:40.490Z,53427,svchost.exe,SYN_SENT,UDP,10.10.1.142,3389,10.73.53.176,80,fthompson
FIN-WS-042,2026-02-17T02:12:56.365Z,59790,msedge.exe,LISTEN,TCP,10.10.1.142,80,0.0.0.0,0,gwhite
FIN-WS-042,2026-02-15T07:46:56.174Z,58989,spoolsv.exe,CLOSE_WAIT,TCP,10.10.1.142,8080,10.10.1.133,389,bwilson
FIN-WS-042,2026-02-17T22:44:40.681Z,63213,RuntimeBroker.exe,LISTEN,UDP,10.10.1.142,389,0.0.0.0,0,fthompson
FIN-WS-042,2026-02-19T02:02:01.813Z,23230,teams.exe,TIME_WAIT,TCP,10.10.1.142,63299,77.73.21.118,8080,cjohnson
FIN-WS-042,2026-02-12T11:28:43.572Z,14318,lsass.exe,CLOSE_WAIT,TCP,10.10.1.142,8080,10.10.1.142,636,svc_backup
SLS-WS-043,2026-02-15T05:33:29.205Z,35674,MsMpEng.exe,SYN_SENT,TCP,10.10.2.143,53,221.209.191.165,8080,admin
SLS-WS-043,2026-02-10T13:57:31.856Z,13630,services.exe,CLOSE_WAIT,TCP,10.10.2.143,135,10.10.2.167,389,fthompson
SLS-WS-043,2026-02-18T06:39:18.242Z,31995,teams.exe,TIME_WAIT,TCP,10.10.2.143,389,10.10.3.141,8080,emartinez
SLS-WS-043,2026-02-13T14:19:24.493Z,59200,services.exe,SYN_SENT,TCP,10.10.2.143,52332,10.10.2.107,443,emartinez
SLS-WS-043,2026-02-16T19:48:28.517Z,20776,outlook.exe,LISTEN,TCP,10.10.2.143,3389,0.0.0.0,0,idavis
SLS-WS-043,2026-02-15T21:04:34.662Z,40620,csrss.exe,CLOSE_WAIT,TCP,10.10.2.143,139,78.51.81.231,443,fthompson
SLS-WS-043,2026-02-15T06:12:11.778Z,31352,System,CLOSE_WAIT,TCP,10.10.2.143,443,170.75.227.25,88,bwilson
SLS-WS-043,2026-02-11T01:13:20.992Z,8943,smss.exe,TIME_WAIT,TCP,10.10.2.143,8080,6.251.176.227,53,idavis
SLS-WS-043,2026-02-13T16:10:28.725Z,46722,SearchHost.exe,LISTEN,TCP,10.10.2.143,389,0.0.0.0,0,svc_sql
SLS-WS-043,2026-02-20T13:30:32.753Z,59362,chrome.exe,TIME_WAIT,TCP,10.10.2.143,80,160.213.86.94,445,jsmith
SLS-WS-043,2026-02-13T19:13:46.977Z,2156,teams.exe,ESTABLISHED,UDP,10.10.2.143,139,10.10.3.135,443,bwilson
SLS-WS-043,2026-02-17T14:12:50.482Z,22096,services.exe,ESTABLISHED,TCP,10.10.2.143,139,98.102.240.98,445,emartinez
SLS-WS-043,2026-02-19T21:41:38.503Z,5657,lsass.exe,CLOSE_WAIT,TCP,10.10.2.143,3389,10.10.2.137,389,svc_sql
SLS-WS-043,2026-02-16T06:58:37.926Z,15628,taskhostw.exe,SYN_SENT,TCP,10.10.2.143,49905,10.10.3.123,8080,svc_sql
SLS-WS-043,2026-02-10T22:02:29.774Z,9190,chrome.exe,ESTABLISHED,TCP,10.10.2.143,88,19.79.235.162,443,cjohnson
SLS-WS-043,2026-02-14T20:14:32.430Z,45031,chrome.exe,LISTEN,TCP,10.10.2.143,80,0.0.0.0,0,cjohnson
SLS-WS-043,2026-02-15T05:18:09.409Z,48043,OneDrive.exe,ESTABLISHED,TCP,10.10.2.143,389,10.10.3.126,8080,admin
SLS-WS-043,2026-02-17T15:43:01.285Z,5066,explorer.exe,CLOSE_WAIT,UDP,10.10.2.143,443,46.101.134.37,443,cjohnson
SLS-WS-043,2026-02-19T01:00:36.363Z,19545,taskhostw.exe,LISTEN,UDP,10.10.2.143,389,0.0.0.0,0,idavis
SLS-WS-043,2026-02-11T00:09:48.003Z,4214,spoolsv.exe,TIME_WAIT,UDP,10.10.2.143,139,10.10.2.101,8080,gwhite
ENG-WS-044,2026-02-17T14:31:08.379Z,39782,explorer.exe,SYN_SENT,TCP,10.10.3.144,389,10.10.1.112,53,admin
ENG-WS-044,2026-02-20T17:46:27.684Z,12570,smss.exe,TIME_WAIT,TCP,10.10.3.144,3389,10.10.1.139,636,cjohnson
ENG-WS-044,2026-02-18T00:27:53.275Z,25368,explorer.exe,TIME_WAIT,TCP,10.10.3.144,8080,10.10.1.160,8080,fthompson
ENG-WS-044,2026-02-12T14:14:54.408Z,1174,outlook.exe,TIME_WAIT,TCP,10.10.3.144,5985,94.7.222.203,8080,fthompson
ENG-WS-044,2026-02-15T09:38:01.294Z,47530,cmd.exe,TIME_WAIT,UDP,10.10.3.144,8080,10.10.3.171,3389,gwhite
ENG-WS-044,2026-02-20T03:50:04.189Z,52766,teams.exe,CLOSE_WAIT,TCP,10.10.3.144,443,18.165.244.156,636,cjohnson
ENG-WS-044,2026-02-18T17:46:51.856Z,56729,svchost.exe,TIME_WAIT,UDP,10.10.3.144,389,10.10.3.117,53,bwilson
ENG-WS-044,2026-02-16T22:28:04.285Z,59202,winlogon.exe,ESTABLISHED,TCP,10.10.3.144,3389,107.126.107.242,53,gwhite
ENG-WS-044,2026-02-16T16:20:48.404Z,53401,System,TIME_WAIT,TCP,10.10.3.144,636,50.65.164.201,47430,svc_web
ENG-WS-044,2026-02-15T03:40:20.336Z,59110,smss.exe,CLOSE_WAIT,TCP,10.10.3.144,53,25.196.75.160,389,svc_backup
ENG-WS-044,2026-02-13T17:48:12.940Z,54156,csrss.exe,CLOSE_WAIT,UDP,10.10.3.144,636,37.186.30.122,80,idavis
ENG-WS-044,2026-02-17T23:52:25.392Z,12875,outlook.exe,TIME_WAIT,TCP,10.10.3.144,3389,155.102.96.246,80,hbrown
ENG-WS-044,2026-02-18T20:38:47.881Z,815,notepad.exe,LISTEN,TCP,10.10.3.144,636,0.0.0.0,0,dlee
ENG-WS-044,2026-02-16T02:48:57.926Z,39018,outlook.exe,TIME_WAIT,TCP,10.10.3.144,389,165.215.40.95,88,gwhite
ENG-WS-044,2026-02-11T14:58:43.448Z,56968,msedge.exe,TIME_WAIT,TCP,10.10.3.144,135,181.232.145.42,80,emartinez
ENG-WS-044,2026-02-10T14:21:58.735Z,28559,RuntimeBroker.exe,LISTEN,TCP,10.10.3.144,53,0.0.0.0,0,admin
ENG-WS-044,2026-02-15T12:10:08.948Z,60848,teams.exe,TIME_WAIT,TCP,10.10.3.144,389,73.165.20.227,8080,agarcia
ENG-WS-044,2026-02-15T11:06:50.131Z,35824,msedge.exe,SYN_SENT,UDP,10.10.3.144,443,10.10.3.111,443,jsmith
ENG-WS-044,2026-02-17T01:11:22.721Z,36648,spoolsv.exe,CLOSE_WAIT,UDP,10.10.3.144,135,115.81.59.196,80,jsmith
ENG-WS-044,2026-02-12T14:45:00.813Z,15347,discord.exe,LISTEN,TCP,10.10.3.144,80,0.0.0.0,0,bwilson
ENG-WS-044,2026-02-16T01:30:27.973Z,2729,outlook.exe,SYN_SENT,TCP,10.10.3.144,5985,10.10.3.138,88,cjohnson
ENG-WS-044,2026-02-13T23:20:43.380Z,5383,code.exe,LISTEN,TCP,10.10.3.144,80,0.0.0.0,0,idavis
ENG-WS-044,2026-02-15T22:03:26.984Z,60078,dwm.exe,LISTEN,TCP,10.10.3.144,445,0.0.0.0,0,admin
ENG-WS-044,2026-02-13T17:45:52.275Z,17161,notepad.exe,TIME_WAIT,TCP,10.10.3.144,53,10.10.1.11,3389,fthompson
ENG-WS-044,2026-02-18T01:42:12.067Z,57393,notepad.exe,CLOSE_WAIT,TCP,10.10.3.144,88,167.207.104.48,443,cjohnson
ENG-WS-044,2026-02-13T13:28:31.408Z,14283,smss.exe,TIME_WAIT,UDP,10.10.3.144,3389,119.27.117.146,80,svc_web
ENG-WS-044,2026-02-13T17:50:22.913Z,64602,taskhostw.exe,LISTEN,TCP,10.10.3.144,636,0.0.0.0,0,fthompson
ENG-WS-044,2026-02-16T18:49:09.066Z,56275,teams.exe,CLOSE_WAIT,TCP,10.10.3.144,58502,171.127.39.158,80,jsmith
ENG-WS-044,2026-02-20T10:44:06.178Z,48717,svchost.exe,TIME_WAIT,TCP,10.10.3.144,636,146.81.49.14,3389,emartinez
ENG-WS-044,2026-02-19T12:04:21.510Z,61182,lsass.exe,ESTABLISHED,TCP,10.10.3.144,443,78.72.134.117,80,gwhite
LEG-WS-045,2026-02-10T13:38:23.052Z,37011,chrome.exe,LISTEN,TCP,10.10.1.145,139,0.0.0.0,0,gwhite
LEG-WS-045,2026-02-17T09:30:17.339Z,2059,OneDrive.exe,LISTEN,UDP,10.10.1.145,5985,0.0.0.0,0,jsmith
LEG-WS-045,2026-02-10T14:06:11.587Z,17923,csrss.exe,CLOSE_WAIT,UDP,10.10.1.145,88,10.10.2.137,445,svc_web
LEG-WS-045,2026-02-11T06:06:14.399Z,24171,OneDrive.exe,CLOSE_WAIT,TCP,10.10.1.145,88,214.222.250.203,53,gwhite
LEG-WS-045,2026-02-16T01:45:21.654Z,9648,System,LISTEN,TCP,10.10.1.145,636,0.0.0.0,0,emartinez
LEG-WS-045,2026-02-11T05:36:41.003Z,16693,RuntimeBroker.exe,CLOSE_WAIT,UDP,10.10.1.145,3389,10.10.2.164,88,bwilson
LEG-WS-045,2026-02-11T18:52:49.170Z,53594,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.1.145,80,88.74.174.139,56801,svc_sql
LEG-WS-045,2026-02-17T06:09:33.245Z,10893,OneDrive.exe,CLOSE_WAIT,TCP,10.10.1.145,443,10.10.2.101,636,svc_backup
LEG-WS-045,2026-02-18T03:27:23.683Z,45175,OneDrive.exe,TIME_WAIT,TCP,10.10.1.145,3389,188.191.202.134,53,svc_sql
LEG-WS-045,2026-02-13T11:42:51.845Z,13813,powershell.exe,CLOSE_WAIT,UDP,10.10.1.145,636,10.10.2.110,88,hbrown
LEG-WS-045,2026-02-20T05:45:11.391Z,27750,code.exe,ESTABLISHED,TCP,10.10.1.145,139,31.106.95.212,389,emartinez
LEG-WS-045,2026-02-16T12:20:02.568Z,44606,svchost.exe,SYN_SENT,TCP,10.10.1.145,5985,10.10.3.10,42653,gwhite
LEG-WS-045,2026-02-16T19:03:28.551Z,23106,winlogon.exe,TIME_WAIT,TCP,10.10.1.145,139,180.242.196.193,28726,admin
LEG-WS-045,2026-02-15T01:40:17.577Z,49189,svchost.exe,CLOSE_WAIT,TCP,10.10.1.145,65124,23.243.129.140,443,emartinez
LEG-WS-045,2026-02-16T12:21:26.158Z,44352,winlogon.exe,ESTABLISHED,TCP,10.10.1.145,53,199.231.110.158,8080,svc_sql
LEG-WS-045,2026-02-15T10:46:29.101Z,59230,dwm.exe,CLOSE_WAIT,TCP,10.10.1.145,8080,71.198.24.65,636,gwhite
LEG-WS-045,2026-02-14T08:49:33.310Z,48893,teams.exe,ESTABLISHED,TCP,10.10.1.145,5985,10.10.3.162,80,svc_sql
LEG-WS-045,2026-02-11T18:48:04.776Z,48619,teams.exe,CLOSE_WAIT,TCP,10.10.1.145,445,58.174.252.59,8080,idavis
LEG-WS-045,2026-02-16T03:19:13.403Z,27772,csrss.exe,CLOSE_WAIT,TCP,10.10.1.145,80,182.188.54.108,88,agarcia
MKT-WS-046,2026-02-17T06:09:36.854Z,29335,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.146,53,63.70.61.7,8080,admin
MKT-WS-046,2026-02-11T20:50:48.508Z,8830,RuntimeBroker.exe,SYN_SENT,TCP,10.10.2.146,443,203.94.211.30,3389,svc_backup
MKT-WS-046,2026-02-19T07:08:47.117Z,52609,svchost.exe,TIME_WAIT,TCP,10.10.2.146,443,10.10.1.118,3389,cjohnson
MKT-WS-046,2026-02-15T07:25:19.558Z,64971,winlogon.exe,CLOSE_WAIT,TCP,10.10.2.146,443,45.198.36.38,443,agarcia
MKT-WS-046,2026-02-17T07:54:50.382Z,61099,powershell.exe,CLOSE_WAIT,TCP,10.10.2.146,139,10.10.1.142,3389,emartinez
MKT-WS-046,2026-02-20T05:20:49.115Z,33493,services.exe,LISTEN,UDP,10.10.2.146,88,0.0.0.0,0,fthompson
MKT-WS-046,2026-02-18T09:16:29.252Z,28460,spoolsv.exe,LISTEN,UDP,10.10.2.146,8080,0.0.0.0,0,idavis
MKT-WS-046,2026-02-13T11:52:27.199Z,35180,chrome.exe,SYN_SENT,TCP,10.10.2.146,53921,10.10.1.151,53,idavis
MKT-WS-046,2026-02-15T21:11:05.202Z,40494,notepad.exe,CLOSE_WAIT,TCP,10.10.2.146,5985,10.10.1.112,53,admin
MKT-WS-046,2026-02-13T23:07:41.894Z,20176,spoolsv.exe,TIME_WAIT,TCP,10.10.2.146,88,132.116.160.238,3389,cjohnson
MKT-WS-046,2026-02-17T18:09:18.933Z,36335,dwm.exe,CLOSE_WAIT,TCP,10.10.2.146,88,109.96.71.206,53,emartinez
MKT-WS-046,2026-02-14T05:44:58.761Z,25765,csrss.exe,SYN_SENT,TCP,10.10.2.146,443,10.10.2.10,389,gwhite
EXEC-WS-047,2026-02-12T07:13:55.279Z,61318,csrss.exe,SYN_SENT,TCP,10.10.3.147,139,10.10.2.149,443,dlee
EXEC-WS-047,2026-02-16T12:49:04.596Z,31319,csrss.exe,SYN_SENT,TCP,10.10.3.147,53,10.10.2.107,389,fthompson
EXEC-WS-047,2026-02-18T06:01:51.979Z,3671,msedge.exe,LISTEN,UDP,10.10.3.147,3389,0.0.0.0,0,jsmith
EXEC-WS-047,2026-02-13T20:24:05.304Z,41018,cmd.exe,ESTABLISHED,TCP,10.10.3.147,445,201.49.216.53,443,svc_backup
EXEC-WS-047,2026-02-16T14:54:55.165Z,49365,lsass.exe,LISTEN,UDP,10.10.3.147,88,0.0.0.0,0,dlee
EXEC-WS-047,2026-02-16T10:01:48.006Z,50061,RuntimeBroker.exe,LISTEN,UDP,10.10.3.147,53,0.0.0.0,0,cjohnson
EXEC-WS-047,2026-02-11T06:47:39.975Z,48626,SearchHost.exe,LISTEN,TCP,10.10.3.147,445,0.0.0.0,0,idavis
EXEC-WS-047,2026-02-19T21:24:22.979Z,18415,cmd.exe,CLOSE_WAIT,TCP,10.10.3.147,135,217.208.113.62,8080,agarcia
EXEC-WS-047,2026-02-14T22:37:54.800Z,48541,MsMpEng.exe,TIME_WAIT,TCP,10.10.3.147,8080,10.10.3.111,389,fthompson
EXEC-WS-047,2026-02-15T12:45:28.935Z,40446,SearchHost.exe,ESTABLISHED,TCP,10.10.3.147,135,10.10.3.168,80,fthompson
EXEC-WS-047,2026-02-11T03:20:21.258Z,54949,services.exe,LISTEN,TCP,10.10.3.147,636,0.0.0.0,0,svc_backup
EXEC-WS-047,2026-02-19T11:25:57.510Z,63057,teams.exe,CLOSE_WAIT,UDP,10.10.3.147,3389,91.207.140.64,25891,jsmith
EXEC-WS-047,2026-02-18T16:01:30.575Z,25584,smss.exe,LISTEN,TCP,10.10.3.147,636,0.0.0.0,0,idavis
EXEC-WS-047,2026-02-14T03:38:55.278Z,17130,SearchHost.exe,ESTABLISHED,TCP,10.10.3.147,636,10.10.1.133,445,gwhite
EXEC-WS-047,2026-02-11T07:05:39.102Z,45668,powershell.exe,SYN_SENT,TCP,10.10.3.147,80,98.186.24.195,8080,hbrown
EXEC-WS-047,2026-02-12T01:39:25.917Z,4476,chrome.exe,SYN_SENT,TCP,10.10.3.147,445,76.72.223.72,445,cjohnson
EXEC-WS-047,2026-02-16T14:39:30.904Z,5149,services.exe,ESTABLISHED,TCP,10.10.3.147,139,141.240.216.230,3389,agarcia
EXEC-WS-047,2026-02-15T03:38:03.415Z,49963,cmd.exe,LISTEN,TCP,10.10.3.147,53219,0.0.0.0,0,emartinez
EXEC-WS-047,2026-02-19T15:42:34.366Z,25908,outlook.exe,SYN_SENT,UDP,10.10.3.147,57201,3.166.87.197,636,bwilson
EXEC-WS-047,2026-02-19T00:34:11.927Z,37708,winlogon.exe,LISTEN,UDP,10.10.3.147,88,0.0.0.0,0,svc_sql
EXEC-WS-047,2026-02-15T03:11:35.434Z,52452,powershell.exe,CLOSE_WAIT,UDP,10.10.3.147,636,64.82.21.18,445,gwhite
EXEC-WS-047,2026-02-19T06:28:54.150Z,8373,SearchHost.exe,SYN_SENT,TCP,10.10.3.147,53,10.10.1.133,636,svc_sql
EXEC-WS-047,2026-02-15T09:48:19.433Z,49272,chrome.exe,SYN_SENT,TCP,10.10.3.147,443,10.10.1.139,53,jsmith
EXEC-WS-047,2026-02-18T14:26:24.472Z,26075,spoolsv.exe,LISTEN,TCP,10.10.3.147,389,0.0.0.0,0,cjohnson
EXEC-WS-047,2026-02-20T07:54:16.524Z,16180,powershell.exe,CLOSE_WAIT,TCP,10.10.3.147,5985,10.10.1.127,88,bwilson
IT-WS-048,2026-02-11T00:56:20.091Z,21822,explorer.exe,TIME_WAIT,TCP,10.10.1.148,389,10.10.1.166,389,cjohnson
IT-WS-048,2026-02-18T02:05:03.941Z,36904,dwm.exe,LISTEN,TCP,10.10.1.148,445,0.0.0.0,0,dlee
IT-WS-048,2026-02-15T00:05:22.792Z,21991,dwm.exe,LISTEN,TCP,10.10.1.148,80,0.0.0.0,0,svc_sql
IT-WS-048,2026-02-10T17:02:20.329Z,51172,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.148,3389,10.10.1.163,636,hbrown
IT-WS-048,2026-02-14T07:58:20.582Z,25947,smss.exe,SYN_SENT,TCP,10.10.1.148,5985,85.225.136.37,7131,cjohnson
IT-WS-048,2026-02-12T23:47:13.093Z,60135,notepad.exe,ESTABLISHED,UDP,10.10.1.148,5985,10.10.3.120,36875,cjohnson
IT-WS-048,2026-02-15T08:39:58.118Z,4431,chrome.exe,LISTEN,TCP,10.10.1.148,636,0.0.0.0,0,cjohnson
IT-WS-048,2026-02-16T00:58:52.823Z,59169,teams.exe,CLOSE_WAIT,TCP,10.10.1.148,389,10.10.2.161,636,svc_web
IT-WS-048,2026-02-13T18:02:18.262Z,33447,spoolsv.exe,TIME_WAIT,TCP,10.10.1.148,389,10.10.1.103,445,dlee
IT-WS-048,2026-02-19T12:11:11.540Z,16401,SearchHost.exe,ESTABLISHED,TCP,10.10.1.148,58993,221.131.54.211,3389,gwhite
IT-WS-048,2026-02-12T00:36:40.927Z,31634,msedge.exe,SYN_SENT,TCP,10.10.1.148,5985,10.10.2.143,3389,admin
IT-WS-048,2026-02-11T13:33:23.763Z,15545,taskhostw.exe,ESTABLISHED,TCP,10.10.1.148,5985,10.10.2.104,53,gwhite
IT-WS-048,2026-02-16T13:29:43.946Z,38992,winlogon.exe,CLOSE_WAIT,TCP,10.10.1.148,5985,111.120.146.63,8080,fthompson
IT-WS-048,2026-02-15T05:48:07.327Z,2242,msedge.exe,ESTABLISHED,TCP,10.10.1.148,445,139.219.252.230,80,bwilson
HR-WS-049,2026-02-10T08:03:11.803Z,60560,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.2.149,80,43.158.169.26,3613,cjohnson
HR-WS-049,2026-02-11T23:20:54.637Z,50960,SearchHost.exe,CLOSE_WAIT,TCP,10.10.2.149,88,10.10.1.109,445,svc_backup
HR-WS-049,2026-02-13T12:35:58.883Z,42927,winlogon.exe,SYN_SENT,UDP,10.10.2.149,80,10.10.2.161,636,svc_backup
HR-WS-049,2026-02-12T20:10:13.151Z,9846,lsass.exe,LISTEN,TCP,10.10.2.149,135,0.0.0.0,0,svc_backup
HR-WS-049,2026-02-17T11:55:53.226Z,38063,chrome.exe,ESTABLISHED,TCP,10.10.2.149,445,10.10.2.110,53,cjohnson
HR-WS-049,2026-02-11T00:30:49.815Z,2156,lsass.exe,CLOSE_WAIT,TCP,10.10.2.149,636,10.10.1.121,53,svc_web
HR-WS-049,2026-02-17T04:36:04.333Z,62887,cmd.exe,CLOSE_WAIT,UDP,10.10.2.149,8080,10.10.1.118,88,svc_sql
HR-WS-049,2026-02-14T15:57:00.930Z,32009,OneDrive.exe,LISTEN,TCP,10.10.2.149,139,0.0.0.0,0,emartinez
HR-WS-049,2026-02-19T18:49:36.206Z,47337,outlook.exe,LISTEN,TCP,10.10.2.149,139,0.0.0.0,0,bwilson
HR-WS-049,2026-02-13T19:07:46.127Z,43266,svchost.exe,TIME_WAIT,TCP,10.10.2.149,3389,1.53.247.198,8080,svc_web
HR-WS-049,2026-02-16T00:46:50.862Z,35410,dwm.exe,TIME_WAIT,TCP,10.10.2.149,53,10.10.1.106,64210,svc_sql
HR-WS-049,2026-02-16T06:58:27.884Z,60595,notepad.exe,TIME_WAIT,TCP,10.10.2.149,88,10.10.1.154,60930,emartinez
HR-WS-049,2026-02-10T09:04:16.517Z,15122,powershell.exe,CLOSE_WAIT,TCP,10.10.2.149,389,10.10.1.175,445,jsmith
HR-WS-049,2026-02-10T19:56:27.381Z,5087,csrss.exe,LISTEN,TCP,10.10.2.149,5985,0.0.0.0,0,svc_sql
HR-WS-049,2026-02-13T07:53:21.424Z,7693,System,SYN_SENT,TCP,10.10.2.149,53,223.156.26.128,636,svc_web
HR-WS-049,2026-02-20T04:38:40.702Z,1455,SearchHost.exe,SYN_SENT,TCP,10.10.2.149,53,168.102.7.176,3389,agarcia
HR-WS-049,2026-02-12T00:27:55.324Z,28047,cmd.exe,LISTEN,TCP,10.10.2.149,5985,0.0.0.0,0,cjohnson
HR-WS-049,2026-02-20T06:23:46.976Z,4424,RuntimeBroker.exe,ESTABLISHED,TCP,10.10.2.149,53,178.35.39.252,80,svc_sql
HR-WS-049,2026-02-11T14:21:35.139Z,50300,cmd.exe,LISTEN,TCP,10.10.2.149,3389,0.0.0.0,0,svc_web
HR-WS-049,2026-02-18T17:39:01.708Z,35837,csrss.exe,SYN_SENT,TCP,10.10.2.149,389,10.10.1.112,88,dlee
HR-WS-049,2026-02-19T05:22:35.602Z,52048,services.exe,ESTABLISHED,TCP,10.10.2.149,445,10.10.2.11,53,svc_sql
HR-WS-049,2026-02-14T08:49:08.041Z,42208,dwm.exe,CLOSE_WAIT,UDP,10.10.2.149,135,10.10.1.130,389,emartinez
HR-WS-049,2026-02-20T10:23:45.356Z,56592,explorer.exe,ESTABLISHED,TCP,10.10.2.149,80,10.10.1.148,80,gwhite
HR-WS-049,2026-02-18T18:42:26.373Z,51620,msedge.exe,SYN_SENT,TCP,10.10.2.149,88,10.10.3.171,8872,svc_web
HR-WS-049,2026-02-18T19:55:24.016Z,10129,powershell.exe,TIME_WAIT,TCP,10.10.2.149,139,10.54.28.241,445,dlee
HR-WS-049,2026-02-13T17:56:18.458Z,46748,lsass.exe,ESTABLISHED,TCP,10.10.2.149,443,128.157.153.105,445,agarcia
FIN-WS-050,2026-02-16T09:33:25.377Z,5266,services.exe,SYN_SENT,TCP,10.10.3.150,443,25.135.170.82,3389,cjohnson
FIN-WS-050,2026-02-11T07:14:30.730Z,21940,notepad.exe,SYN_SENT,TCP,10.10.3.150,51762,183.152.152.26,88,dlee
FIN-WS-050,2026-02-13T02:04:14.025Z,38822,outlook.exe,ESTABLISHED,TCP,10.10.3.150,443,10.10.3.147,443,hbrown
FIN-WS-050,2026-02-12T19:38:47.883Z,26832,powershell.exe,ESTABLISHED,TCP,10.10.3.150,445,167.53.8.121,636,jsmith
FIN-WS-050,2026-02-13T09:10:35.675Z,9026,cmd.exe,SYN_SENT,UDP,10.10.3.150,53,10.10.1.12,636,fthompson
FIN-WS-050,2026-02-14T13:23:10.467Z,12628,lsass.exe,SYN_SENT,TCP,10.10.3.150,135,10.10.1.11,443,svc_backup
FIN-WS-050,2026-02-17T11:01:01.351Z,8813,outlook.exe,SYN_SENT,UDP,10.10.3.150,389,64.67.20.60,443,cjohnson
FIN-WS-050,2026-02-11T20:44:48.799Z,42564,msedge.exe,SYN_SENT,TCP,10.10.3.150,636,29.7.211.28,8080,svc_sql
FIN-WS-050,2026-02-14T00:17:40.370Z,57113,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.3.150,389,133.140.227.170,88,admin
FIN-WS-050,2026-02-14T21:21:45.737Z,16622,MsMpEng.exe,LISTEN,TCP,10.10.3.150,139,0.0.0.0,0,jsmith
FIN-WS-050,2026-02-12T04:15:54.070Z,50500,teams.exe,ESTABLISHED,TCP,10.10.3.150,53,75.104.211.29,445,jsmith
FIN-WS-050,2026-02-13T03:24:35.543Z,31580,dwm.exe,ESTABLISHED,TCP,10.10.3.150,3389,10.10.1.136,88,cjohnson
FIN-WS-050,2026-02-13T03:57:10.899Z,43241,outlook.exe,ESTABLISHED,UDP,10.10.3.150,5985,10.10.1.148,443,hbrown
FIN-WS-050,2026-02-20T12:21:46.571Z,320,SearchHost.exe,ESTABLISHED,TCP,10.10.3.150,135,73.129.125.194,389,bwilson
FIN-WS-050,2026-02-16T10:32:53.120Z,41312,taskhostw.exe,SYN_SENT,TCP,10.10.3.150,80,10.10.2.140,445,fthompson
FIN-WS-050,2026-02-14T01:13:12.588Z,49837,services.exe,SYN_SENT,TCP,10.10.3.150,443,10.10.3.132,53,cjohnson
SLS-WS-051,2026-02-15T21:44:42.642Z,48505,lsass.exe,SYN_SENT,TCP,10.10.1.151,443,145.70.118.106,88,agarcia
SLS-WS-051,2026-02-14T14:17:04.363Z,18477,System,CLOSE_WAIT,UDP,10.10.1.151,636,10.10.3.105,1790,admin
SLS-WS-051,2026-02-16T16:56:36.632Z,6228,csrss.exe,LISTEN,TCP,10.10.1.151,135,0.0.0.0,0,svc_sql
SLS-WS-051,2026-02-18T14:55:50.057Z,58261,services.exe,SYN_SENT,UDP,10.10.1.151,8080,10.10.2.101,3389,emartinez
SLS-WS-051,2026-02-20T13:10:34.410Z,37567,dwm.exe,SYN_SENT,UDP,10.10.1.151,80,110.178.182.193,443,jsmith
SLS-WS-051,2026-02-10T19:18:03.751Z,11856,code.exe,LISTEN,UDP,10.10.1.151,636,0.0.0.0,0,cjohnson
SLS-WS-051,2026-02-17T05:24:55.143Z,14886,code.exe,LISTEN,TCP,10.10.1.151,80,0.0.0.0,0,idavis
SLS-WS-051,2026-02-14T19:57:20.272Z,45183,msedge.exe,LISTEN,TCP,10.10.1.151,389,0.0.0.0,0,agarcia
SLS-WS-051,2026-02-12T12:56:46.657Z,10175,teams.exe,CLOSE_WAIT,TCP,10.10.1.151,445,96.17.89.176,8080,fthompson
SLS-WS-051,2026-02-11T23:20:57.441Z,39046,powershell.exe,LISTEN,TCP,10.10.1.151,8080,0.0.0.0,0,hbrown
SLS-WS-051,2026-02-12T09:04:02.684Z,19468,code.exe,CLOSE_WAIT,TCP,10.10.1.151,88,215.227.142.81,80,fthompson
SLS-WS-051,2026-02-14T10:39:06.346Z,42675,csrss.exe,ESTABLISHED,TCP,10.10.1.151,52931,178.64.27.59,389,idavis
SLS-WS-051,2026-02-16T02:04:09.574Z,22324,outlook.exe,ESTABLISHED,TCP,10.10.1.151,53,60.64.123.233,636,hbrown
SLS-WS-051,2026-02-17T14:41:37.967Z,5957,cmd.exe,TIME_WAIT,TCP,10.10.1.151,445,12.218.251.218,3389,hbrown
SLS-WS-051,2026-02-18T07:22:11.500Z,51221,csrss.exe,ESTABLISHED,TCP,10.10.1.151,636,10.10.1.136,80,jsmith
SLS-WS-051,2026-02-14T21:44:41.152Z,58708,OneDrive.exe,ESTABLISHED,TCP,10.10.1.151,3389,10.10.2.125,443,hbrown
SLS-WS-051,2026-02-13T01:12:03.659Z,5673,explorer.exe,SYN_SENT,TCP,10.10.1.151,3389,10.10.3.165,445,hbrown
SLS-WS-051,2026-02-15T05:13:06.948Z,33336,services.exe,SYN_SENT,TCP,10.10.1.151,139,126.39.77.45,88,fthompson
SLS-WS-051,2026-02-17T20:58:29.304Z,18127,explorer.exe,SYN_SENT,TCP,10.10.1.151,389,10.10.1.13,53,hbrown
SLS-WS-051,2026-02-14T03:33:09.577Z,53942,SearchHost.exe,SYN_SENT,TCP,10.10.1.151,5985,10.10.1.142,80,bwilson
SLS-WS-051,2026-02-16T03:33:56.136Z,40607,SearchHost.exe,ESTABLISHED,TCP,10.10.1.151,389,10.10.2.131,40483,emartinez
SLS-WS-051,2026-02-12T23:12:13.606Z,34740,svchost.exe,SYN_SENT,TCP,10.10.1.151,445,17.31.137.206,88,agarcia
SLS-WS-051,2026-02-15T20:04:49.170Z,4305,dwm.exe,ESTABLISHED,TCP,10.10.1.151,389,46.242.255.226,3389,fthompson
SLS-WS-051,2026-02-11T23:38:53.578Z,16006,outlook.exe,ESTABLISHED,UDP,10.10.1.151,88,10.10.3.174,445,fthompson
SLS-WS-051,2026-02-13T08:54:22.788Z,64470,outlook.exe,TIME_WAIT,TCP,10.10.1.151,135,27.158.128.22,88,admin
SLS-WS-051,2026-02-20T07:48:16.583Z,59831,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.1.151,445,104.117.188.88,3389,svc_backup
SLS-WS-051,2026-02-17T22:41:42.065Z,24241,chrome.exe,CLOSE_WAIT,TCP,10.10.1.151,5985,203.143.148.132,3389,cjohnson
SLS-WS-051,2026-02-17T11:42:24.710Z,3869,dwm.exe,SYN_SENT,UDP,10.10.1.151,3389,10.10.3.108,445,svc_web
SLS-WS-051,2026-02-18T23:07:53.019Z,16989,code.exe,LISTEN,UDP,10.10.1.151,135,0.0.0.0,0,idavis
ENG-WS-052,2026-02-17T20:18:46.552Z,51701,msedge.exe,CLOSE_WAIT,UDP,10.10.2.152,53785,10.10.2.10,389,agarcia
ENG-WS-052,2026-02-17T09:41:44.667Z,32381,services.exe,LISTEN,UDP,10.10.2.152,389,0.0.0.0,0,cjohnson
ENG-WS-052,2026-02-20T15:51:19.760Z,6346,spoolsv.exe,TIME_WAIT,UDP,10.10.2.152,5985,10.10.3.111,53,gwhite
ENG-WS-052,2026-02-11T12:00:13.163Z,8482,lsass.exe,SYN_SENT,TCP,10.10.2.152,80,48.106.13.208,88,svc_web
ENG-WS-052,2026-02-16T23:12:30.091Z,32694,svchost.exe,LISTEN,TCP,10.10.2.152,8080,0.0.0.0,0,dlee
ENG-WS-052,2026-02-11T03:03:46.747Z,39663,services.exe,ESTABLISHED,TCP,10.10.2.152,88,10.10.1.12,80,agarcia
ENG-WS-052,2026-02-16T10:38:21.375Z,49679,dwm.exe,SYN_SENT,TCP,10.10.2.152,53,10.10.3.168,80,fthompson
ENG-WS-052,2026-02-12T20:02:08.147Z,18123,teams.exe,LISTEN,TCP,10.10.2.152,443,0.0.0.0,0,emartinez
ENG-WS-052,2026-02-18T23:23:44.766Z,41419,chrome.exe,ESTABLISHED,TCP,10.10.2.152,636,10.10.1.169,80,jsmith
ENG-WS-052,2026-02-14T20:50:34.124Z,51921,taskhostw.exe,LISTEN,TCP,10.10.2.152,5985,0.0.0.0,0,svc_backup
ENG-WS-052,2026-02-14T02:19:49.890Z,26172,OneDrive.exe,ESTABLISHED,TCP,10.10.2.152,5985,200.9.21.242,3389,idavis
ENG-WS-052,2026-02-14T00:56:55.805Z,53668,svchost.exe,CLOSE_WAIT,UDP,10.10.2.152,443,83.108.51.244,53,fthompson
ENG-WS-052,2026-02-20T13:58:47.889Z,54586,teams.exe,CLOSE_WAIT,TCP,10.10.2.152,8080,161.248.217.196,3389,dlee
ENG-WS-052,2026-02-18T00:09:52.306Z,34742,explorer.exe,ESTABLISHED,UDP,10.10.2.152,53,2.229.99.88,636,bwilson
ENG-WS-052,2026-02-11T09:37:07.265Z,24385,code.exe,LISTEN,TCP,10.10.2.152,80,0.0.0.0,0,gwhite
ENG-WS-052,2026-02-17T18:39:47.492Z,29794,svchost.exe,SYN_SENT,TCP,10.10.2.152,88,149.33.148.74,80,dlee
ENG-WS-052,2026-02-13T09:53:12.764Z,35179,teams.exe,CLOSE_WAIT,TCP,10.10.2.152,62938,10.10.3.171,636,svc_sql
ENG-WS-052,2026-02-18T14:04:28.699Z,56253,SearchHost.exe,SYN_SENT,UDP,10.10.2.152,3389,10.10.3.165,38345,cjohnson
ENG-WS-052,2026-02-17T14:55:09.828Z,64982,code.exe,ESTABLISHED,UDP,10.10.2.152,139,200.72.220.104,27750,hbrown
ENG-WS-052,2026-02-15T17:59:54.401Z,14543,SearchHost.exe,ESTABLISHED,TCP,10.10.2.152,80,10.10.2.128,3389,emartinez
ENG-WS-052,2026-02-19T13:49:14.447Z,7820,services.exe,TIME_WAIT,UDP,10.10.2.152,389,10.10.2.101,88,bwilson
ENG-WS-052,2026-02-11T07:22:27.654Z,36185,smss.exe,SYN_SENT,TCP,10.10.2.152,80,141.75.207.152,445,fthompson
ENG-WS-052,2026-02-13T14:25:25.214Z,22175,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.2.152,80,144.246.218.26,636,svc_sql
ENG-WS-052,2026-02-15T07:36:15.594Z,14762,code.exe,TIME_WAIT,TCP,10.10.2.152,135,151.159.139.161,8080,jsmith
ENG-WS-052,2026-02-17T07:04:43.542Z,53466,spotify.exe,SYN_SENT,TCP,10.10.2.152,5985,17.28.59.214,443,idavis
ENG-WS-052,2026-02-10T21:34:51.181Z,26824,svchost.exe,ESTABLISHED,TCP,10.10.2.152,53,15.142.41.76,53,svc_sql
ENG-WS-052,2026-02-13T03:31:49.356Z,58801,spoolsv.exe,SYN_SENT,UDP,10.10.2.152,389,106.73.25.187,445,gwhite
ENG-WS-052,2026-02-16T13:04:40.808Z,22680,services.exe,TIME_WAIT,TCP,10.10.2.152,80,10.10.2.152,8080,jsmith
LEG-WS-053,2026-02-12T09:36:35.324Z,29844,winlogon.exe,CLOSE_WAIT,TCP,10.10.3.153,445,10.10.1.151,3389,cjohnson
LEG-WS-053,2026-02-12T11:13:45.338Z,59024,outlook.exe,TIME_WAIT,TCP,10.10.3.153,135,89.205.55.120,80,bwilson
LEG-WS-053,2026-02-15T11:56:13.275Z,37680,chrome.exe,SYN_SENT,UDP,10.10.3.153,5985,10.10.1.166,389,emartinez
LEG-WS-053,2026-02-16T00:17:49.914Z,20225,code.exe,LISTEN,TCP,10.10.3.153,389,0.0.0.0,0,dlee
LEG-WS-053,2026-02-13T07:11:24.561Z,3566,teams.exe,SYN_SENT,TCP,10.10.3.153,445,222.202.150.131,445,cjohnson
LEG-WS-053,2026-02-12T02:34:46.373Z,12332,MsMpEng.exe,TIME_WAIT,TCP,10.10.3.153,8080,10.10.1.160,636,agarcia
LEG-WS-053,2026-02-13T21:02:03.798Z,54478,teams.exe,ESTABLISHED,TCP,10.10.3.153,443,161.99.133.133,636,gwhite
LEG-WS-053,2026-02-14T14:06:22.650Z,22282,MsMpEng.exe,SYN_SENT,TCP,10.10.3.153,56815,110.118.124.225,53,cjohnson
LEG-WS-053,2026-02-12T18:59:14.926Z,26647,csrss.exe,ESTABLISHED,TCP,10.10.3.153,5985,10.10.3.108,389,hbrown
LEG-WS-053,2026-02-13T17:58:21.542Z,10534,outlook.exe,ESTABLISHED,TCP,10.10.3.153,5985,139.73.43.169,53,agarcia
LEG-WS-053,2026-02-15T18:42:33.711Z,50568,MsMpEng.exe,TIME_WAIT,TCP,10.10.3.153,53,115.53.135.104,443,bwilson
LEG-WS-053,2026-02-18T04:44:26.713Z,62679,smss.exe,LISTEN,TCP,10.10.3.153,8080,0.0.0.0,0,jsmith
LEG-WS-053,2026-02-19T04:43:05.213Z,52422,System,TIME_WAIT,UDP,10.10.3.153,88,156.147.8.244,80,jsmith
MKT-WS-054,2026-02-15T16:03:05.071Z,41355,System,CLOSE_WAIT,TCP,10.10.1.154,53,10.10.1.11,56476,agarcia
MKT-WS-054,2026-02-14T12:24:47.997Z,25691,notepad.exe,TIME_WAIT,TCP,10.10.1.154,64155,193.18.225.24,636,gwhite
MKT-WS-054,2026-02-14T07:06:43.465Z,5211,MsMpEng.exe,LISTEN,TCP,10.10.1.154,139,0.0.0.0,0,idavis
MKT-WS-054,2026-02-13T16:01:44.650Z,37901,spoolsv.exe,CLOSE_WAIT,TCP,10.10.1.154,5985,139.76.223.130,8080,cjohnson
MKT-WS-054,2026-02-17T05:53:33.101Z,56971,explorer.exe,SYN_SENT,TCP,10.10.1.154,5985,10.10.2.107,80,emartinez
MKT-WS-054,2026-02-12T03:58:36.487Z,49020,SearchHost.exe,CLOSE_WAIT,TCP,10.10.1.154,389,117.19.15.173,636,emartinez
MKT-WS-054,2026-02-16T22:29:14.116Z,8822,cmd.exe,TIME_WAIT,UDP,10.10.1.154,8080,10.10.2.146,3389,admin
MKT-WS-054,2026-02-12T06:39:01.612Z,50005,smss.exe,TIME_WAIT,TCP,10.10.1.154,135,10.10.2.122,53,emartinez
MKT-WS-054,2026-02-20T10:09:25.194Z,11362,winlogon.exe,LISTEN,TCP,10.10.1.154,445,0.0.0.0,0,fthompson
MKT-WS-054,2026-02-12T15:53:18.290Z,61676,powershell.exe,LISTEN,TCP,10.10.1.154,443,0.0.0.0,0,hbrown
MKT-WS-054,2026-02-13T16:06:37.274Z,32066,OneDrive.exe,CLOSE_WAIT,TCP,10.10.1.154,80,10.10.3.150,2048,svc_sql
MKT-WS-054,2026-02-16T21:01:54.975Z,7962,cmd.exe,LISTEN,TCP,10.10.1.154,139,0.0.0.0,0,admin
MKT-WS-054,2026-02-13T03:17:00.404Z,2570,smss.exe,ESTABLISHED,TCP,10.10.1.154,88,10.10.2.167,3389,agarcia
MKT-WS-054,2026-02-17T22:13:59.224Z,24093,code.exe,CLOSE_WAIT,TCP,10.10.1.154,3389,76.232.55.84,3389,idavis
MKT-WS-054,2026-02-13T02:26:18.981Z,55583,lsass.exe,CLOSE_WAIT,TCP,10.10.1.154,135,205.218.229.218,2076,bwilson
MKT-WS-054,2026-02-15T18:55:48.898Z,36897,spoolsv.exe,ESTABLISHED,TCP,10.10.1.154,80,199.181.90.117,46642,jsmith
MKT-WS-054,2026-02-16T03:21:05.929Z,59927,outlook.exe,CLOSE_WAIT,TCP,10.10.1.154,3389,34.120.178.103,53,svc_sql
MKT-WS-054,2026-02-17T16:31:31.485Z,33537,lsass.exe,ESTABLISHED,TCP,10.10.1.154,62767,194.230.226.72,389,emartinez
MKT-WS-054,2026-02-11T16:13:27.157Z,62883,MsMpEng.exe,TIME_WAIT,TCP,10.10.1.154,636,10.10.3.141,636,idavis
MKT-WS-054,2026-02-16T10:34:58.194Z,57667,chrome.exe,CLOSE_WAIT,TCP,10.10.1.154,445,10.10.3.120,3389,cjohnson
MKT-WS-054,2026-02-11T01:18:38.318Z,465,powershell.exe,LISTEN,TCP,10.10.1.154,3389,0.0.0.0,0,emartinez
MKT-WS-054,2026-02-15T19:11:52.704Z,25204,explorer.exe,SYN_SENT,UDP,10.10.1.154,53,10.10.1.139,636,fthompson
EXEC-WS-055,2026-02-18T13:12:24.881Z,47244,OneDrive.exe,LISTEN,TCP,10.10.2.155,389,0.0.0.0,0,dlee
EXEC-WS-055,2026-02-18T17:20:46.285Z,11429,outlook.exe,ESTABLISHED,UDP,10.10.2.155,53,190.85.188.74,3389,svc_backup
EXEC-WS-055,2026-02-12T10:02:42.984Z,9485,msedge.exe,LISTEN,UDP,10.10.2.155,445,0.0.0.0,0,svc_web
EXEC-WS-055,2026-02-12T00:02:15.717Z,47125,spoolsv.exe,TIME_WAIT,TCP,10.10.2.155,80,10.10.3.132,389,hbrown
EXEC-WS-055,2026-02-13T16:12:43.975Z,49044,svchost.exe,SYN_SENT,UDP,10.10.2.155,5985,10.10.1.124,389,emartinez
EXEC-WS-055,2026-02-14T07:36:11.504Z,43201,cmd.exe,CLOSE_WAIT,UDP,10.10.2.155,445,221.16.166.37,389,hbrown
EXEC-WS-055,2026-02-12T09:34:49.070Z,51690,msedge.exe,CLOSE_WAIT,TCP,10.10.2.155,636,10.10.1.109,3389,svc_backup
EXEC-WS-055,2026-02-19T12:23:22.839Z,62709,smss.exe,SYN_SENT,UDP,10.10.2.155,3389,47.88.79.148,88,agarcia
EXEC-WS-055,2026-02-17T15:37:03.225Z,16124,taskhostw.exe,SYN_SENT,TCP,10.10.2.155,135,10.10.2.122,53,svc_sql
EXEC-WS-055,2026-02-14T16:28:07.855Z,32153,System,LISTEN,TCP,10.10.2.155,139,0.0.0.0,0,svc_backup
EXEC-WS-055,2026-02-12T21:47:01.773Z,1381,winlogon.exe,LISTEN,UDP,10.10.2.155,139,0.0.0.0,0,idavis
EXEC-WS-055,2026-02-12T00:31:20.614Z,21799,cmd.exe,SYN_SENT,TCP,10.10.2.155,445,115.224.1.48,443,cjohnson
EXEC-WS-055,2026-02-20T04:27:03.860Z,34109,services.exe,CLOSE_WAIT,TCP,10.10.2.155,636,29.109.251.182,636,cjohnson
EXEC-WS-055,2026-02-15T10:14:10.886Z,53238,svchost.exe,ESTABLISHED,UDP,10.10.2.155,5985,187.27.96.45,636,admin
EXEC-WS-055,2026-02-16T23:21:24.419Z,25943,dwm.exe,SYN_SENT,TCP,10.10.2.155,3389,10.10.1.166,3389,jsmith
EXEC-WS-055,2026-02-12T19:04:18.605Z,25518,explorer.exe,LISTEN,TCP,10.10.2.155,139,0.0.0.0,0,admin
EXEC-WS-055,2026-02-17T00:43:40.502Z,11075,smss.exe,SYN_SENT,TCP,10.10.2.155,8080,18.177.83.245,8080,svc_sql
EXEC-WS-055,2026-02-18T21:48:44.253Z,59846,smss.exe,TIME_WAIT,TCP,10.10.2.155,139,51.244.141.168,4739,jsmith
EXEC-WS-055,2026-02-11T12:53:23.634Z,10415,winlogon.exe,ESTABLISHED,UDP,10.10.2.155,443,156.58.74.102,8080,agarcia
EXEC-WS-055,2026-02-14T07:38:43.850Z,6948,OneDrive.exe,CLOSE_WAIT,TCP,10.10.2.155,64440,170.71.27.30,443,bwilson
EXEC-WS-055,2026-02-18T02:41:35.782Z,14130,explorer.exe,ESTABLISHED,TCP,10.10.2.155,8080,35.175.224.239,61676,jsmith
EXEC-WS-055,2026-02-12T04:02:03.448Z,6004,code.exe,CLOSE_WAIT,TCP,10.10.2.155,135,138.6.91.117,445,dlee
EXEC-WS-055,2026-02-14T05:53:39.243Z,1221,System,CLOSE_WAIT,TCP,10.10.2.155,3389,221.4.167.252,445,svc_web
EXEC-WS-055,2026-02-15T12:08:22.255Z,1219,code.exe,TIME_WAIT,TCP,10.10.2.155,61620,10.10.2.173,9425,svc_sql
EXEC-WS-055,2026-02-12T13:00:11.349Z,1872,csrss.exe,ESTABLISHED,UDP,10.10.2.155,135,10.10.3.147,8080,dlee
EXEC-WS-055,2026-02-15T11:42:51.380Z,4052,outlook.exe,ESTABLISHED,UDP,10.10.2.155,80,10.10.1.121,636,bwilson
EXEC-WS-055,2026-02-15T20:45:42.480Z,62041,explorer.exe,CLOSE_WAIT,TCP,10.10.2.155,5985,221.11.211.59,445,agarcia
EXEC-WS-055,2026-02-17T17:34:58.549Z,18807,cmd.exe,LISTEN,TCP,10.10.2.155,636,0.0.0.0,0,jsmith
EXEC-WS-055,2026-02-16T11:31:50.608Z,51111,msedge.exe,ESTABLISHED,TCP,10.10.2.155,5985,128.231.188.109,389,emartinez
EXEC-WS-055,2026-02-19T02:23:40.863Z,9069,lsass.exe,LISTEN,UDP,10.10.2.155,8080,0.0.0.0,0,svc_web
EXEC-WS-055,2026-02-10T14:39:40.871Z,59833,csrss.exe,CLOSE_WAIT,TCP,10.10.2.155,80,143.30.60.205,3389,svc_backup
EXEC-WS-055,2026-02-13T05:02:32.992Z,61914,System,LISTEN,TCP,10.10.2.155,5985,0.0.0.0,0,agarcia
EXEC-WS-055,2026-02-20T11:33:01.050Z,46257,lsass.exe,SYN_SENT,TCP,10.10.2.155,53,25.187.229.28,443,jsmith
EXEC-WS-055,2026-02-18T19:14:57.438Z,18956,code.exe,SYN_SENT,TCP,10.10.2.155,8080,10.10.1.130,80,emartinez
EXEC-WS-055,2026-02-14T20:46:26.484Z,22967,cmd.exe,CLOSE_WAIT,TCP,10.10.2.155,55689,103.89.58.181,2166,hbrown
EXEC-WS-055,2026-02-13T19:26:26.436Z,44077,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.155,636,110.129.254.8,80,svc_sql
EXEC-WS-055,2026-02-11T03:44:00.071Z,38448,code.exe,SYN_SENT,TCP,10.10.2.155,54282,10.10.1.151,8080,agarcia
EXEC-WS-055,2026-02-16T20:42:33.880Z,1734,outlook.exe,CLOSE_WAIT,TCP,10.10.2.155,80,10.10.2.113,53,svc_sql
EXEC-WS-055,2026-02-15T23:58:10.188Z,61800,msedge.exe,ESTABLISHED,TCP,10.10.2.155,389,10.10.1.103,3389,hbrown
IT-WS-056,2026-02-16T16:12:44.294Z,2583,smss.exe,TIME_WAIT,TCP,10.10.3.156,3389,64.33.162.201,17769,svc_sql
IT-WS-056,2026-02-14T21:45:15.611Z,7982,spoolsv.exe,SYN_SENT,TCP,10.10.3.156,62095,156.252.114.166,31383,svc_web
IT-WS-056,2026-02-15T09:15:19.254Z,37522,services.exe,SYN_SENT,TCP,10.10.3.156,5985,10.10.1.163,80,dlee
IT-WS-056,2026-02-12T01:17:08.456Z,28332,teams.exe,TIME_WAIT,TCP,10.10.3.156,135,189.148.58.157,445,svc_web
IT-WS-056,2026-02-10T20:44:42.715Z,30295,MsMpEng.exe,LISTEN,TCP,10.10.3.156,8080,0.0.0.0,0,svc_web
IT-WS-056,2026-02-20T03:55:42.740Z,52475,teams.exe,ESTABLISHED,TCP,10.10.3.156,80,10.10.2.11,636,agarcia
IT-WS-056,2026-02-10T15:38:02.207Z,53862,MsMpEng.exe,SYN_SENT,TCP,10.10.3.156,445,10.10.1.103,636,svc_web
IT-WS-056,2026-02-20T11:07:47.240Z,24597,System,CLOSE_WAIT,TCP,10.10.3.156,53,36.82.61.116,389,gwhite
IT-WS-056,2026-02-15T23:01:25.481Z,27545,System,LISTEN,TCP,10.10.3.156,139,0.0.0.0,0,gwhite
IT-WS-056,2026-02-20T01:32:13.803Z,33582,MsMpEng.exe,ESTABLISHED,UDP,10.10.3.156,5985,145.43.153.153,443,gwhite
IT-WS-056,2026-02-13T02:47:01.019Z,38690,smss.exe,TIME_WAIT,UDP,10.10.3.156,53,10.10.1.151,80,emartinez
IT-WS-056,2026-02-13T07:01:45.718Z,58673,msedge.exe,TIME_WAIT,TCP,10.10.3.156,443,91.218.22.127,389,svc_sql
HR-WS-057,2026-02-19T23:33:24.386Z,46106,SearchHost.exe,TIME_WAIT,TCP,10.10.1.157,88,205.203.93.75,59008,admin
HR-WS-057,2026-02-14T22:59:11.785Z,10123,services.exe,CLOSE_WAIT,TCP,10.10.1.157,636,10.10.2.158,443,hbrown
HR-WS-057,2026-02-18T06:00:44.296Z,54201,SearchHost.exe,LISTEN,UDP,10.10.1.157,88,0.0.0.0,0,admin
HR-WS-057,2026-02-19T12:05:00.848Z,9108,System,SYN_SENT,UDP,10.10.1.157,53,147.113.136.137,80,dlee
HR-WS-057,2026-02-16T10:37:28.145Z,49690,outlook.exe,SYN_SENT,TCP,10.10.1.157,5985,6.32.45.77,443,svc_backup
HR-WS-057,2026-02-13T21:25:56.114Z,64391,MsMpEng.exe,SYN_SENT,UDP,10.10.1.157,636,10.10.2.161,80,cjohnson
HR-WS-057,2026-02-13T01:32:44.462Z,40488,cmd.exe,TIME_WAIT,TCP,10.10.1.157,5985,10.10.1.136,8080,agarcia
HR-WS-057,2026-02-19T16:08:38.133Z,61137,spoolsv.exe,ESTABLISHED,UDP,10.10.1.157,139,10.10.1.109,389,svc_backup
HR-WS-057,2026-02-15T23:15:37.638Z,59577,dwm.exe,LISTEN,TCP,10.10.1.157,53,0.0.0.0,0,svc_backup
HR-WS-057,2026-02-19T01:56:01.168Z,40899,SearchHost.exe,CLOSE_WAIT,TCP,10.10.1.157,443,70.40.226.70,3389,bwilson
HR-WS-057,2026-02-14T07:17:26.175Z,20570,spoolsv.exe,CLOSE_WAIT,TCP,10.10.1.157,88,10.10.3.10,636,svc_backup
HR-WS-057,2026-02-17T09:52:50.740Z,3939,chrome.exe,TIME_WAIT,TCP,10.10.1.157,3389,206.25.56.32,48365,svc_web
HR-WS-057,2026-02-12T16:46:02.304Z,39159,winlogon.exe,TIME_WAIT,UDP,10.10.1.157,636,12.179.58.19,80,hbrown
HR-WS-057,2026-02-16T13:52:24.462Z,24937,System,CLOSE_WAIT,UDP,10.10.1.157,3389,10.10.1.166,53,gwhite
HR-WS-057,2026-02-20T17:39:36.009Z,44822,svchost.exe,SYN_SENT,TCP,10.10.1.157,59019,10.10.2.107,88,svc_web
HR-WS-057,2026-02-18T21:02:52.236Z,61139,System,SYN_SENT,TCP,10.10.1.157,8080,10.10.3.156,80,dlee
HR-WS-057,2026-02-18T17:18:58.163Z,1993,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.1.157,53,8.230.157.197,636,fthompson
HR-WS-057,2026-02-16T22:09:21.609Z,39660,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.1.157,61645,34.94.214.87,88,idavis
HR-WS-057,2026-02-17T13:29:14.666Z,31160,explorer.exe,ESTABLISHED,TCP,10.10.1.157,445,10.10.1.124,389,dlee
HR-WS-057,2026-02-18T19:49:16.959Z,16562,taskhostw.exe,SYN_SENT,TCP,10.10.1.157,80,27.40.90.72,636,hbrown
HR-WS-057,2026-02-20T15:54:33.269Z,8478,spoolsv.exe,CLOSE_WAIT,TCP,10.10.1.157,49352,10.10.1.10,389,cjohnson
HR-WS-057,2026-02-19T05:11:07.614Z,41950,teams.exe,SYN_SENT,TCP,10.10.1.157,8080,10.10.1.118,445,svc_sql
FIN-WS-058,2026-02-13T22:25:47.307Z,38683,utorrent.exe,ESTABLISHED,UDP,10.10.2.158,135,10.10.3.162,88,svc_backup
FIN-WS-058,2026-02-11T14:51:05.311Z,36635,System,ESTABLISHED,TCP,10.10.2.158,389,44.188.135.243,8080,svc_backup
FIN-WS-058,2026-02-13T07:18:06.253Z,30719,dwm.exe,TIME_WAIT,TCP,10.10.2.158,61014,10.10.2.155,53,emartinez
FIN-WS-058,2026-02-17T23:21:35.848Z,64540,code.exe,ESTABLISHED,TCP,10.10.2.158,135,10.10.1.169,45730,agarcia
FIN-WS-058,2026-02-17T00:22:44.096Z,48744,SearchHost.exe,LISTEN,UDP,10.10.2.158,389,0.0.0.0,0,bwilson
FIN-WS-058,2026-02-12T02:25:44.359Z,4869,svchost.exe,LISTEN,TCP,10.10.2.158,389,0.0.0.0,0,gwhite
FIN-WS-058,2026-02-10T16:18:00.126Z,40003,svchost.exe,SYN_SENT,TCP,10.10.2.158,88,10.10.1.106,3389,svc_sql
FIN-WS-058,2026-02-19T06:27:34.626Z,56672,taskhostw.exe,SYN_SENT,TCP,10.10.2.158,139,10.10.1.130,80,svc_backup
FIN-WS-058,2026-02-12T23:31:32.344Z,60182,msedge.exe,SYN_SENT,TCP,10.10.2.158,8080,10.10.2.155,445,admin
FIN-WS-058,2026-02-11T10:47:17.819Z,42160,cmd.exe,TIME_WAIT,TCP,10.10.2.158,53,54.185.33.122,636,admin
FIN-WS-058,2026-02-16T05:58:28.684Z,27991,MsMpEng.exe,TIME_WAIT,UDP,10.10.2.158,445,10.10.1.169,53708,idavis
FIN-WS-058,2026-02-12T23:26:53.804Z,15340,outlook.exe,SYN_SENT,TCP,10.10.2.158,3389,10.10.1.136,8080,jsmith
FIN-WS-058,2026-02-12T00:41:00.632Z,15531,services.exe,SYN_SENT,TCP,10.10.2.158,445,69.67.104.213,389,cjohnson
FIN-WS-058,2026-02-14T09:58:27.454Z,53637,msedge.exe,LISTEN,TCP,10.10.2.158,80,0.0.0.0,0,bwilson
FIN-WS-058,2026-02-16T08:31:06.658Z,60663,smss.exe,LISTEN,UDP,10.10.2.158,636,0.0.0.0,0,cjohnson
FIN-WS-058,2026-02-14T06:51:02.180Z,3069,msedge.exe,ESTABLISHED,TCP,10.10.2.158,445,10.10.1.109,88,jsmith
FIN-WS-058,2026-02-14T07:55:44.306Z,6190,spoolsv.exe,SYN_SENT,TCP,10.10.2.158,636,10.10.3.111,53,dlee
FIN-WS-058,2026-02-17T02:28:08.078Z,42118,utorrent.exe,LISTEN,TCP,10.10.2.158,3389,0.0.0.0,0,agarcia
FIN-WS-058,2026-02-13T15:05:53.004Z,44420,explorer.exe,CLOSE_WAIT,TCP,10.10.2.158,62951,10.10.2.140,57801,svc_sql
FIN-WS-058,2026-02-14T13:04:09.933Z,12052,svchost.exe,LISTEN,TCP,10.10.2.158,64128,0.0.0.0,0,jsmith
FIN-WS-058,2026-02-14T17:31:13.620Z,6131,cmd.exe,TIME_WAIT,TCP,10.10.2.158,8080,10.10.1.106,88,agarcia
FIN-WS-058,2026-02-15T23:24:48.459Z,6691,spoolsv.exe,CLOSE_WAIT,TCP,10.10.2.158,443,182.46.115.253,389,fthompson
FIN-WS-058,2026-02-16T01:03:31.286Z,19380,smss.exe,TIME_WAIT,TCP,10.10.2.158,80,134.7.188.198,88,hbrown
FIN-WS-058,2026-02-15T18:00:35.112Z,41733,System,SYN_SENT,TCP,10.10.2.158,445,10.10.1.130,636,idavis
FIN-WS-058,2026-02-16T06:20:14.725Z,58872,dwm.exe,CLOSE_WAIT,TCP,10.10.2.158,3389,10.10.3.147,443,fthompson
FIN-WS-058,2026-02-11T17:10:30.944Z,57848,services.exe,LISTEN,UDP,10.10.2.158,443,0.0.0.0,0,svc_backup
FIN-WS-058,2026-02-20T03:11:10.657Z,51477,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.2.158,5985,10.10.2.101,8080,gwhite
FIN-WS-058,2026-02-16T14:31:50.861Z,51484,dwm.exe,TIME_WAIT,TCP,10.10.2.158,8080,10.10.1.118,88,agarcia
FIN-WS-058,2026-02-16T14:47:22.686Z,31395,MsMpEng.exe,SYN_SENT,UDP,10.10.2.158,443,156.206.70.112,8080,emartinez
FIN-WS-058,2026-02-13T22:39:10.300Z,19344,chrome.exe,CLOSE_WAIT,TCP,10.10.2.158,636,188.187.136.235,636,emartinez
FIN-WS-058,2026-02-17T17:34:35.957Z,1283,explorer.exe,TIME_WAIT,TCP,10.10.2.158,80,10.10.3.147,80,svc_backup
FIN-WS-058,2026-02-20T15:58:11.524Z,33071,spoolsv.exe,CLOSE_WAIT,UDP,10.10.2.158,5985,71.27.235.44,389,bwilson
FIN-WS-058,2026-02-11T18:03:44.748Z,27604,services.exe,TIME_WAIT,TCP,10.10.2.158,80,10.10.2.134,443,agarcia
FIN-WS-058,2026-02-16T16:36:16.569Z,55401,System,TIME_WAIT,TCP,10.10.2.158,443,10.10.1.115,80,gwhite
FIN-WS-058,2026-02-11T18:02:27.851Z,2973,msedge.exe,ESTABLISHED,TCP,10.10.2.158,5985,21.22.185.59,54816,jsmith
SLS-WS-059,2026-02-17T14:46:54.157Z,14976,lsass.exe,SYN_SENT,TCP,10.10.3.159,80,10.10.3.165,53,svc_sql
SLS-WS-059,2026-02-18T07:29:51.996Z,27193,smss.exe,SYN_SENT,TCP,10.10.3.159,88,10.10.3.117,389,svc_web
SLS-WS-059,2026-02-10T19:21:03.542Z,23155,services.exe,SYN_SENT,UDP,10.10.3.159,135,207.159.42.55,53,svc_sql
SLS-WS-059,2026-02-18T06:59:06.796Z,54092,services.exe,CLOSE_WAIT,UDP,10.10.3.159,443,10.10.3.147,636,cjohnson
SLS-WS-059,2026-02-16T00:59:18.320Z,64962,outlook.exe,CLOSE_WAIT,TCP,10.10.3.159,5985,10.10.2.155,13722,svc_backup
SLS-WS-059,2026-02-14T13:28:22.973Z,9137,notepad.exe,SYN_SENT,TCP,10.10.3.159,53,10.10.1.130,445,hbrown
SLS-WS-059,2026-02-14T03:03:19.871Z,26122,taskhostw.exe,ESTABLISHED,TCP,10.10.3.159,139,10.10.2.158,443,bwilson
SLS-WS-059,2026-02-17T06:31:14.170Z,39427,teams.exe,ESTABLISHED,TCP,10.10.3.159,53,10.10.2.164,80,agarcia
SLS-WS-059,2026-02-17T16:02:23.641Z,29275,msedge.exe,ESTABLISHED,TCP,10.10.3.159,64313,130.198.48.154,445,admin
SLS-WS-059,2026-02-17T19:16:18.083Z,24410,MsMpEng.exe,LISTEN,UDP,10.10.3.159,5985,0.0.0.0,0,cjohnson
SLS-WS-059,2026-02-10T10:38:38.108Z,56456,cmd.exe,ESTABLISHED,UDP,10.10.3.159,443,10.10.3.141,80,fthompson
SLS-WS-059,2026-02-13T20:56:45.858Z,28808,OneDrive.exe,ESTABLISHED,TCP,10.10.3.159,443,10.10.1.145,29869,dlee
SLS-WS-059,2026-02-17T17:04:27.290Z,38758,discord.exe,CLOSE_WAIT,TCP,10.10.3.159,636,49.66.237.153,53,admin
SLS-WS-059,2026-02-20T13:38:30.454Z,18964,svchost.exe,LISTEN,TCP,10.10.3.159,80,0.0.0.0,0,admin
SLS-WS-059,2026-02-15T14:37:14.056Z,45891,notepad.exe,ESTABLISHED,UDP,10.10.3.159,80,72.178.64.241,80,svc_sql
SLS-WS-059,2026-02-19T19:19:32.308Z,45059,chrome.exe,SYN_SENT,TCP,10.10.3.159,135,10.10.2.170,3389,idavis
SLS-WS-059,2026-02-14T11:26:45.116Z,28180,explorer.exe,TIME_WAIT,TCP,10.10.3.159,80,16.208.249.146,80,svc_web
SLS-WS-059,2026-02-17T19:09:50.801Z,62779,chrome.exe,SYN_SENT,TCP,10.10.3.159,8080,10.10.3.165,8080,cjohnson
SLS-WS-059,2026-02-13T19:32:36.850Z,627,smss.exe,TIME_WAIT,TCP,10.10.3.159,135,10.10.3.159,8080,cjohnson
SLS-WS-059,2026-02-15T02:50:40.656Z,16796,RuntimeBroker.exe,ESTABLISHED,TCP,10.10.3.159,135,98.160.130.34,443,bwilson
SLS-WS-059,2026-02-18T13:19:09.142Z,20266,spoolsv.exe,LISTEN,TCP,10.10.3.159,135,0.0.0.0,0,emartinez
SLS-WS-059,2026-02-12T20:44:38.147Z,10026,chrome.exe,ESTABLISHED,TCP,10.10.3.159,389,10.10.2.101,445,agarcia
SLS-WS-059,2026-02-16T03:07:15.195Z,64457,SearchHost.exe,CLOSE_WAIT,UDP,10.10.3.159,88,10.10.3.159,50453,hbrown
SLS-WS-059,2026-02-18T00:14:11.982Z,50632,smss.exe,LISTEN,TCP,10.10.3.159,88,0.0.0.0,0,fthompson
SLS-WS-059,2026-02-15T18:09:54.676Z,5194,SearchHost.exe,ESTABLISHED,UDP,10.10.3.159,5985,10.10.2.119,53,dlee
SLS-WS-059,2026-02-10T09:31:47.280Z,12489,csrss.exe,ESTABLISHED,TCP,10.10.3.159,80,114.58.46.206,636,fthompson
SLS-WS-059,2026-02-14T20:26:01.364Z,50746,teams.exe,ESTABLISHED,TCP,10.10.3.159,443,10.10.2.101,443,agarcia
SLS-WS-059,2026-02-14T07:25:47.774Z,33966,code.exe,SYN_SENT,TCP,10.10.3.159,53,10.10.1.160,443,jsmith
SLS-WS-059,2026-02-16T00:52:20.008Z,24704,taskhostw.exe,LISTEN,TCP,10.10.3.159,443,0.0.0.0,0,idavis
SLS-WS-059,2026-02-20T16:51:26.037Z,9150,dwm.exe,SYN_SENT,TCP,10.10.3.159,54800,131.141.169.247,443,bwilson
SLS-WS-059,2026-02-16T01:47:59.856Z,40407,winlogon.exe,LISTEN,TCP,10.10.3.159,445,0.0.0.0,0,dlee
SLS-WS-059,2026-02-12T22:59:25.819Z,18281,spoolsv.exe,LISTEN,UDP,10.10.3.159,80,0.0.0.0,0,dlee
SLS-WS-059,2026-02-14T17:21:54.163Z,62587,cmd.exe,LISTEN,UDP,10.10.3.159,443,0.0.0.0,0,emartinez
SLS-WS-059,2026-02-16T20:49:32.500Z,954,OneDrive.exe,LISTEN,TCP,10.10.3.159,636,0.0.0.0,0,bwilson
SLS-WS-059,2026-02-17T13:51:47.339Z,6865,code.exe,ESTABLISHED,TCP,10.10.3.159,135,10.10.1.157,8080,cjohnson
SLS-WS-059,2026-02-13T22:06:30.913Z,52073,code.exe,ESTABLISHED,UDP,10.10.3.159,5985,86.24.208.65,80,idavis
SLS-WS-059,2026-02-20T15:40:01.511Z,5975,csrss.exe,CLOSE_WAIT,TCP,10.10.3.159,5985,150.49.114.34,8080,fthompson
ENG-WS-060,2026-02-18T21:17:40.165Z,4483,SearchHost.exe,SYN_SENT,TCP,10.10.1.160,88,10.10.2.104,636,idavis
ENG-WS-060,2026-02-19T09:09:30.930Z,61630,teams.exe,LISTEN,TCP,10.10.1.160,51811,0.0.0.0,0,agarcia
ENG-WS-060,2026-02-14T07:47:28.241Z,46003,svchost.exe,SYN_SENT,TCP,10.10.1.160,5985,10.10.1.151,80,fthompson
ENG-WS-060,2026-02-14T22:14:37.743Z,28377,chrome.exe,SYN_SENT,TCP,10.10.1.160,3389,10.10.2.137,80,fthompson
ENG-WS-060,2026-02-12T07:26:35.466Z,55576,MsMpEng.exe,TIME_WAIT,TCP,10.10.1.160,636,10.10.1.139,389,bwilson
ENG-WS-060,2026-02-17T13:51:23.705Z,17568,lsass.exe,ESTABLISHED,TCP,10.10.1.160,445,10.10.1.118,636,admin
ENG-WS-060,2026-02-17T21:05:19.399Z,59569,MsMpEng.exe,SYN_SENT,TCP,10.10.1.160,53,10.10.3.10,3389,svc_web
ENG-WS-060,2026-02-20T04:48:31.230Z,63939,MsMpEng.exe,SYN_SENT,TCP,10.10.1.160,139,57.102.173.207,445,bwilson
ENG-WS-060,2026-02-17T16:36:05.248Z,24075,MsMpEng.exe,ESTABLISHED,TCP,10.10.1.160,135,63.133.103.244,443,svc_web
ENG-WS-060,2026-02-18T15:00:59.430Z,26404,winlogon.exe,CLOSE_WAIT,TCP,10.10.1.160,636,10.10.3.150,53,idavis
ENG-WS-060,2026-02-18T10:13:48.672Z,25154,cmd.exe,TIME_WAIT,UDP,10.10.1.160,135,10.10.3.135,26364,svc_sql
ENG-WS-060,2026-02-19T23:19:23.731Z,61497,code.exe,TIME_WAIT,UDP,10.10.1.160,445,88.146.189.6,53,idavis
LEG-WS-061,2026-02-18T12:37:54.641Z,24427,taskhostw.exe,LISTEN,TCP,10.10.2.161,3389,0.0.0.0,0,idavis
LEG-WS-061,2026-02-20T14:49:29.217Z,17512,notepad.exe,CLOSE_WAIT,UDP,10.10.2.161,135,10.10.2.131,51940,bwilson
LEG-WS-061,2026-02-19T13:31:57.804Z,14091,notepad.exe,ESTABLISHED,TCP,10.10.2.161,135,10.10.1.115,53,svc_backup
LEG-WS-061,2026-02-15T11:55:14.176Z,34888,csrss.exe,SYN_SENT,TCP,10.10.2.161,389,198.234.115.27,443,svc_web
LEG-WS-061,2026-02-17T22:28:20.517Z,29370,teams.exe,LISTEN,TCP,10.10.2.161,3389,0.0.0.0,0,agarcia
LEG-WS-061,2026-02-19T03:02:07.379Z,42730,System,TIME_WAIT,TCP,10.10.2.161,135,10.10.3.165,445,admin
LEG-WS-061,2026-02-15T03:41:59.181Z,8754,msedge.exe,CLOSE_WAIT,UDP,10.10.2.161,389,209.12.210.204,389,idavis
LEG-WS-061,2026-02-18T19:49:21.983Z,53424,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.161,135,120.1.57.72,53,gwhite
LEG-WS-061,2026-02-17T22:22:19.402Z,4406,chrome.exe,ESTABLISHED,TCP,10.10.2.161,389,10.10.3.120,8080,dlee
LEG-WS-061,2026-02-16T15:03:13.786Z,14957,csrss.exe,LISTEN,TCP,10.10.2.161,80,0.0.0.0,0,idavis
LEG-WS-061,2026-02-20T16:21:49.139Z,59635,msedge.exe,LISTEN,TCP,10.10.2.161,8080,0.0.0.0,0,jsmith
LEG-WS-061,2026-02-18T12:01:23.728Z,22642,code.exe,CLOSE_WAIT,TCP,10.10.2.161,3389,182.78.200.46,389,bwilson
LEG-WS-061,2026-02-16T14:50:50.770Z,11523,services.exe,TIME_WAIT,UDP,10.10.2.161,445,44.77.226.59,636,jsmith
LEG-WS-061,2026-02-12T16:39:33.455Z,28072,winlogon.exe,LISTEN,TCP,10.10.2.161,445,0.0.0.0,0,agarcia
LEG-WS-061,2026-02-18T12:58:40.977Z,8016,explorer.exe,CLOSE_WAIT,TCP,10.10.2.161,80,10.10.1.124,389,svc_sql
LEG-WS-061,2026-02-10T11:32:23.520Z,8271,teams.exe,LISTEN,TCP,10.10.2.161,443,0.0.0.0,0,bwilson
LEG-WS-061,2026-02-15T07:37:08.732Z,21354,RuntimeBroker.exe,SYN_SENT,UDP,10.10.2.161,636,10.10.2.134,88,gwhite
LEG-WS-061,2026-02-20T13:37:04.454Z,9382,outlook.exe,LISTEN,UDP,10.10.2.161,636,0.0.0.0,0,bwilson
LEG-WS-061,2026-02-14T13:15:24.637Z,24808,dwm.exe,ESTABLISHED,TCP,10.10.2.161,139,40.177.78.184,53,bwilson
LEG-WS-061,2026-02-11T00:40:02.188Z,42551,services.exe,TIME_WAIT,UDP,10.10.2.161,389,10.10.1.13,3389,agarcia
LEG-WS-061,2026-02-20T05:26:40.106Z,50704,cmd.exe,CLOSE_WAIT,TCP,10.10.2.161,443,212.120.3.125,636,agarcia
LEG-WS-061,2026-02-18T09:41:31.519Z,11537,taskhostw.exe,LISTEN,TCP,10.10.2.161,135,0.0.0.0,0,fthompson
LEG-WS-061,2026-02-18T13:41:18.742Z,3051,dwm.exe,TIME_WAIT,TCP,10.10.2.161,88,10.10.1.109,445,emartinez
LEG-WS-061,2026-02-13T03:54:17.267Z,37427,smss.exe,ESTABLISHED,UDP,10.10.2.161,3389,10.10.2.110,88,admin
LEG-WS-061,2026-02-18T18:48:03.126Z,1290,SearchHost.exe,SYN_SENT,UDP,10.10.2.161,8080,141.254.183.207,80,dlee
LEG-WS-061,2026-02-18T03:58:27.988Z,28280,teams.exe,ESTABLISHED,TCP,10.10.2.161,443,35.45.76.79,3389,idavis
LEG-WS-061,2026-02-12T17:49:51.783Z,52390,System,SYN_SENT,TCP,10.10.2.161,80,10.10.2.122,389,idavis
MKT-WS-062,2026-02-19T17:01:38.301Z,45862,spoolsv.exe,CLOSE_WAIT,TCP,10.10.3.162,3389,179.243.215.91,62674,svc_backup
MKT-WS-062,2026-02-11T15:10:20.293Z,3093,msedge.exe,SYN_SENT,TCP,10.10.3.162,3389,10.10.1.166,3389,bwilson
MKT-WS-062,2026-02-15T07:59:04.146Z,46693,chrome.exe,TIME_WAIT,TCP,10.10.3.162,8080,10.10.2.173,445,jsmith
MKT-WS-062,2026-02-19T22:50:21.518Z,58087,lsass.exe,SYN_SENT,TCP,10.10.3.162,139,10.10.1.139,389,agarcia
MKT-WS-062,2026-02-13T14:41:01.252Z,14556,code.exe,CLOSE_WAIT,TCP,10.10.3.162,636,10.10.1.103,53,gwhite
MKT-WS-062,2026-02-17T13:59:10.893Z,14697,smss.exe,CLOSE_WAIT,TCP,10.10.3.162,88,10.10.1.115,10025,emartinez
MKT-WS-062,2026-02-15T03:40:05.287Z,44298,OneDrive.exe,TIME_WAIT,TCP,10.10.3.162,636,3.91.188.90,8080,cjohnson
MKT-WS-062,2026-02-12T22:00:12.309Z,63825,powershell.exe,ESTABLISHED,TCP,10.10.3.162,53,10.10.2.137,88,emartinez
MKT-WS-062,2026-02-11T02:14:54.539Z,58865,notepad.exe,LISTEN,TCP,10.10.3.162,57586,0.0.0.0,0,dlee
MKT-WS-062,2026-02-16T07:43:47.924Z,17771,SearchHost.exe,SYN_SENT,TCP,10.10.3.162,57166,10.10.1.175,3389,fthompson
MKT-WS-062,2026-02-20T15:04:54.454Z,43944,dwm.exe,SYN_SENT,UDP,10.10.3.162,135,10.10.1.11,3389,svc_web
MKT-WS-062,2026-02-17T12:49:04.752Z,7646,dwm.exe,SYN_SENT,TCP,10.10.3.162,135,10.10.3.174,80,svc_web
MKT-WS-062,2026-02-18T16:05:17.621Z,8744,explorer.exe,CLOSE_WAIT,TCP,10.10.3.162,53,10.10.3.153,389,svc_web
MKT-WS-062,2026-02-13T05:32:03.899Z,28466,explorer.exe,LISTEN,TCP,10.10.3.162,139,0.0.0.0,0,svc_web
MKT-WS-062,2026-02-10T21:39:06.912Z,1894,chrome.exe,LISTEN,TCP,10.10.3.162,88,0.0.0.0,0,bwilson
MKT-WS-062,2026-02-14T09:54:05.692Z,21777,RuntimeBroker.exe,ESTABLISHED,UDP,10.10.3.162,135,10.10.1.151,35677,idavis
MKT-WS-062,2026-02-17T13:56:26.661Z,26088,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.3.162,63250,10.10.3.147,445,fthompson
MKT-WS-062,2026-02-19T13:15:16.206Z,19539,chrome.exe,LISTEN,TCP,10.10.3.162,80,0.0.0.0,0,bwilson
MKT-WS-062,2026-02-12T08:43:32.522Z,30083,lsass.exe,LISTEN,UDP,10.10.3.162,135,0.0.0.0,0,dlee
EXEC-WS-063,2026-02-18T13:52:02.756Z,64887,code.exe,ESTABLISHED,TCP,10.10.1.163,135,170.230.212.130,636,admin
EXEC-WS-063,2026-02-18T04:18:56.915Z,62966,OneDrive.exe,LISTEN,TCP,10.10.1.163,5985,0.0.0.0,0,jsmith
EXEC-WS-063,2026-02-10T22:36:40.815Z,15067,spoolsv.exe,ESTABLISHED,TCP,10.10.1.163,139,10.10.3.105,53,hbrown
EXEC-WS-063,2026-02-17T22:27:29.443Z,49507,RuntimeBroker.exe,ESTABLISHED,UDP,10.10.1.163,53,157.143.216.101,53,svc_sql
EXEC-WS-063,2026-02-18T14:18:07.070Z,710,code.exe,LISTEN,TCP,10.10.1.163,88,0.0.0.0,0,bwilson
EXEC-WS-063,2026-02-15T05:06:41.424Z,4538,taskhostw.exe,CLOSE_WAIT,TCP,10.10.1.163,135,53.5.117.6,88,svc_backup
EXEC-WS-063,2026-02-12T22:16:51.114Z,49146,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.1.163,80,10.10.3.162,53,jsmith
EXEC-WS-063,2026-02-12T14:11:46.339Z,47072,spoolsv.exe,TIME_WAIT,UDP,10.10.1.163,443,45.118.132.209,80,svc_sql
EXEC-WS-063,2026-02-13T09:10:06.671Z,57842,outlook.exe,SYN_SENT,TCP,10.10.1.163,443,205.8.46.117,8080,emartinez
EXEC-WS-063,2026-02-14T15:28:47.974Z,40882,discord.exe,CLOSE_WAIT,TCP,10.10.1.163,636,10.10.1.13,445,svc_sql
EXEC-WS-063,2026-02-19T10:03:08.861Z,4300,teams.exe,TIME_WAIT,TCP,10.10.1.163,3389,164.116.225.40,636,bwilson
EXEC-WS-063,2026-02-15T09:22:01.007Z,41204,services.exe,ESTABLISHED,TCP,10.10.1.163,5985,101.144.130.235,3389,cjohnson
EXEC-WS-063,2026-02-11T05:29:17.409Z,3189,chrome.exe,LISTEN,TCP,10.10.1.163,443,0.0.0.0,0,agarcia
EXEC-WS-063,2026-02-19T07:44:18.476Z,31867,dwm.exe,ESTABLISHED,UDP,10.10.1.163,636,10.10.2.110,80,dlee
EXEC-WS-063,2026-02-11T09:53:32.104Z,63776,spoolsv.exe,LISTEN,TCP,10.10.1.163,3389,0.0.0.0,0,idavis
EXEC-WS-063,2026-02-20T04:20:11.802Z,49149,OneDrive.exe,TIME_WAIT,UDP,10.10.1.163,636,196.56.252.27,389,dlee
EXEC-WS-063,2026-02-17T09:46:54.483Z,44998,System,CLOSE_WAIT,UDP,10.10.1.163,80,10.10.1.115,88,svc_sql
EXEC-WS-063,2026-02-19T11:18:08.180Z,54725,spoolsv.exe,CLOSE_WAIT,UDP,10.10.1.163,636,10.10.3.138,389,jsmith
EXEC-WS-063,2026-02-16T17:27:44.700Z,24841,dwm.exe,CLOSE_WAIT,TCP,10.10.1.163,80,70.237.10.206,53,svc_sql
IT-WS-064,2026-02-16T22:39:54.753Z,13810,chrome.exe,SYN_SENT,TCP,10.10.2.164,55360,175.229.254.66,88,bwilson
IT-WS-064,2026-02-16T05:48:34.854Z,1249,services.exe,TIME_WAIT,TCP,10.10.2.164,139,48.231.254.122,53,fthompson
IT-WS-064,2026-02-13T07:27:33.778Z,4775,SearchHost.exe,TIME_WAIT,TCP,10.10.2.164,445,208.68.14.168,10913,emartinez
IT-WS-064,2026-02-13T15:26:11.501Z,49740,lsass.exe,LISTEN,TCP,10.10.2.164,88,0.0.0.0,0,admin
IT-WS-064,2026-02-17T07:05:37.558Z,53339,SearchHost.exe,LISTEN,TCP,10.10.2.164,8080,0.0.0.0,0,bwilson
IT-WS-064,2026-02-13T20:54:38.192Z,12848,teams.exe,SYN_SENT,TCP,10.10.2.164,80,111.193.38.86,636,cjohnson
IT-WS-064,2026-02-11T07:35:25.093Z,54418,powershell.exe,SYN_SENT,TCP,10.10.2.164,139,147.114.80.17,8080,bwilson
IT-WS-064,2026-02-19T15:24:26.548Z,6914,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.2.164,636,10.10.1.154,445,svc_sql
IT-WS-064,2026-02-12T04:24:55.227Z,60921,dwm.exe,TIME_WAIT,TCP,10.10.2.164,5985,80.156.68.215,88,hbrown
IT-WS-064,2026-02-18T03:14:00.897Z,50895,winlogon.exe,CLOSE_WAIT,TCP,10.10.2.164,135,10.10.3.150,88,svc_backup
IT-WS-064,2026-02-12T05:04:23.339Z,40110,lsass.exe,LISTEN,UDP,10.10.2.164,389,0.0.0.0,0,bwilson
IT-WS-064,2026-02-12T05:45:19.558Z,20130,lsass.exe,LISTEN,UDP,10.10.2.164,135,0.0.0.0,0,svc_backup
IT-WS-064,2026-02-12T14:14:22.347Z,63839,notepad.exe,LISTEN,TCP,10.10.2.164,53,0.0.0.0,0,agarcia
IT-WS-064,2026-02-11T08:08:01.568Z,10643,winlogon.exe,SYN_SENT,TCP,10.10.2.164,443,10.10.3.153,636,hbrown
IT-WS-064,2026-02-13T22:57:31.972Z,12991,msedge.exe,SYN_SENT,TCP,10.10.2.164,135,111.216.209.6,80,svc_backup
IT-WS-064,2026-02-19T10:14:31.357Z,352,taskhostw.exe,LISTEN,TCP,10.10.2.164,135,0.0.0.0,0,emartinez
IT-WS-064,2026-02-19T16:47:10.018Z,36133,taskhostw.exe,LISTEN,TCP,10.10.2.164,53,0.0.0.0,0,svc_backup
IT-WS-064,2026-02-12T01:00:12.689Z,30075,RuntimeBroker.exe,SYN_SENT,UDP,10.10.2.164,62846,10.10.2.158,88,svc_sql
IT-WS-064,2026-02-16T16:21:12.408Z,25355,powershell.exe,LISTEN,UDP,10.10.2.164,53,0.0.0.0,0,admin
IT-WS-064,2026-02-11T04:49:31.607Z,22134,code.exe,LISTEN,TCP,10.10.2.164,636,0.0.0.0,0,admin
IT-WS-064,2026-02-10T08:12:18.432Z,4974,spoolsv.exe,SYN_SENT,TCP,10.10.2.164,5985,10.10.3.171,443,cjohnson
IT-WS-064,2026-02-16T16:11:36.418Z,6597,dwm.exe,LISTEN,UDP,10.10.2.164,636,0.0.0.0,0,admin
IT-WS-064,2026-02-18T00:17:35.809Z,47831,dwm.exe,LISTEN,TCP,10.10.2.164,8080,0.0.0.0,0,svc_web
IT-WS-064,2026-02-18T22:22:49.601Z,11047,winlogon.exe,TIME_WAIT,TCP,10.10.2.164,8080,10.10.1.106,53,jsmith
IT-WS-064,2026-02-11T13:11:40.995Z,60276,System,SYN_SENT,TCP,10.10.2.164,135,10.10.1.11,88,hbrown
IT-WS-064,2026-02-20T15:40:08.177Z,53964,RuntimeBroker.exe,SYN_SENT,TCP,10.10.2.164,53,178.153.179.170,80,svc_backup
IT-WS-064,2026-02-12T11:02:06.015Z,40518,SearchHost.exe,CLOSE_WAIT,TCP,10.10.2.164,53,99.87.181.148,389,hbrown
IT-WS-064,2026-02-16T08:49:58.418Z,39934,teams.exe,TIME_WAIT,TCP,10.10.2.164,88,10.10.1.157,8080,jsmith
IT-WS-064,2026-02-16T04:36:32.278Z,36357,spoolsv.exe,CLOSE_WAIT,UDP,10.10.2.164,5985,10.10.1.157,80,svc_sql
IT-WS-064,2026-02-18T16:29:44.393Z,55607,notepad.exe,CLOSE_WAIT,TCP,10.10.2.164,389,159.145.207.71,53631,dlee
IT-WS-064,2026-02-20T03:55:51.502Z,22602,csrss.exe,LISTEN,TCP,10.10.2.164,53,0.0.0.0,0,cjohnson
IT-WS-064,2026-02-12T01:39:58.761Z,42043,smss.exe,SYN_SENT,TCP,10.10.2.164,5985,75.14.135.75,52950,hbrown
IT-WS-064,2026-02-13T08:28:10.186Z,39541,svchost.exe,TIME_WAIT,UDP,10.10.2.164,80,42.204.71.247,88,jsmith
IT-WS-064,2026-02-15T18:01:15.112Z,50574,System,LISTEN,TCP,10.10.2.164,3389,0.0.0.0,0,cjohnson
IT-WS-064,2026-02-18T00:13:24.010Z,17264,epicgameslauncher.exe,SYN_SENT,TCP,10.10.2.164,389,206.21.168.124,41581,svc_web
IT-WS-064,2026-02-12T13:12:48.658Z,44642,msedge.exe,SYN_SENT,TCP,10.10.2.164,135,4.76.228.202,80,emartinez
IT-WS-064,2026-02-18T07:48:48.706Z,12655,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.2.164,389,53.8.183.100,445,svc_web
IT-WS-064,2026-02-19T11:32:48.184Z,52767,System,TIME_WAIT,TCP,10.10.2.164,88,10.10.2.116,88,jsmith
IT-WS-064,2026-02-11T14:43:07.719Z,15233,spoolsv.exe,LISTEN,TCP,10.10.2.164,636,0.0.0.0,0,dlee
IT-WS-064,2026-02-12T01:12:31.219Z,61703,notepad.exe,TIME_WAIT,UDP,10.10.2.164,5985,10.10.2.155,53,jsmith
HR-WS-065,2026-02-12T06:03:33.121Z,56140,outlook.exe,ESTABLISHED,TCP,10.10.3.165,88,10.10.3.141,8080,bwilson
HR-WS-065,2026-02-15T08:06:00.284Z,25580,svchost.exe,TIME_WAIT,UDP,10.10.3.165,389,10.10.2.104,445,dlee
HR-WS-065,2026-02-15T10:16:29.021Z,5463,MsMpEng.exe,TIME_WAIT,TCP,10.10.3.165,88,112.167.87.25,80,bwilson
HR-WS-065,2026-02-18T23:13:29.524Z,59047,RuntimeBroker.exe,LISTEN,TCP,10.10.3.165,636,0.0.0.0,0,idavis
HR-WS-065,2026-02-12T06:12:31.387Z,6090,utorrent.exe,LISTEN,TCP,10.10.3.165,389,0.0.0.0,0,svc_web
HR-WS-065,2026-02-16T02:55:16.547Z,46785,OneDrive.exe,CLOSE_WAIT,UDP,10.10.3.165,389,119.253.80.109,53,admin
HR-WS-065,2026-02-17T10:19:01.064Z,22793,taskhostw.exe,LISTEN,UDP,10.10.3.165,445,0.0.0.0,0,bwilson
HR-WS-065,2026-02-13T19:59:49.420Z,3522,taskhostw.exe,ESTABLISHED,TCP,10.10.3.165,53,10.10.3.111,80,hbrown
HR-WS-065,2026-02-16T23:39:25.716Z,23471,explorer.exe,TIME_WAIT,TCP,10.10.3.165,139,115.232.157.69,53,svc_sql
HR-WS-065,2026-02-15T02:51:56.098Z,17136,csrss.exe,SYN_SENT,TCP,10.10.3.165,52826,10.10.1.175,47051,dlee
HR-WS-065,2026-02-15T10:04:57.351Z,35116,services.exe,LISTEN,TCP,10.10.3.165,135,0.0.0.0,0,jsmith
HR-WS-065,2026-02-15T16:14:41.868Z,33263,msedge.exe,SYN_SENT,UDP,10.10.3.165,443,202.35.102.62,80,hbrown
HR-WS-065,2026-02-17T11:04:04.088Z,20642,System,ESTABLISHED,TCP,10.10.3.165,8080,10.10.2.137,53,bwilson
HR-WS-065,2026-02-16T05:07:52.553Z,7137,OneDrive.exe,TIME_WAIT,TCP,10.10.3.165,389,55.167.115.124,636,emartinez
HR-WS-065,2026-02-15T12:08:27.621Z,48283,winlogon.exe,LISTEN,TCP,10.10.3.165,5985,0.0.0.0,0,gwhite
HR-WS-065,2026-02-20T01:02:08.193Z,64779,SearchHost.exe,LISTEN,TCP,10.10.3.165,88,0.0.0.0,0,dlee
HR-WS-065,2026-02-16T21:16:34.486Z,28281,SearchHost.exe,LISTEN,TCP,10.10.3.165,5985,0.0.0.0,0,dlee
HR-WS-065,2026-02-16T08:21:35.498Z,34918,taskhostw.exe,ESTABLISHED,TCP,10.10.3.165,636,10.10.2.10,3389,cjohnson
HR-WS-065,2026-02-14T09:27:56.198Z,48342,MsMpEng.exe,TIME_WAIT,UDP,10.10.3.165,636,22.209.148.232,445,hbrown
HR-WS-065,2026-02-13T23:07:56.530Z,34172,notepad.exe,SYN_SENT,TCP,10.10.3.165,88,10.10.1.148,22558,bwilson
HR-WS-065,2026-02-13T10:48:35.755Z,35518,msedge.exe,SYN_SENT,TCP,10.10.3.165,445,19.225.236.188,8080,cjohnson
HR-WS-065,2026-02-18T14:42:04.530Z,13607,csrss.exe,ESTABLISHED,TCP,10.10.3.165,3389,193.153.134.237,445,fthompson
HR-WS-065,2026-02-19T04:13:49.152Z,7576,teams.exe,SYN_SENT,TCP,10.10.3.165,443,10.10.3.168,88,svc_sql
HR-WS-065,2026-02-14T23:19:25.401Z,37920,powershell.exe,SYN_SENT,TCP,10.10.3.165,139,87.5.11.189,443,jsmith
HR-WS-065,2026-02-15T22:36:54.938Z,1454,outlook.exe,SYN_SENT,TCP,10.10.3.165,88,10.10.2.11,636,svc_sql
HR-WS-065,2026-02-11T03:57:18.200Z,16393,svchost.exe,TIME_WAIT,UDP,10.10.3.165,389,102.10.62.32,52618,svc_web
HR-WS-065,2026-02-10T22:46:03.727Z,34907,smss.exe,CLOSE_WAIT,TCP,10.10.3.165,389,10.10.3.132,3793,emartinez
HR-WS-065,2026-02-11T01:25:10.917Z,22595,msedge.exe,SYN_SENT,TCP,10.10.3.165,139,10.10.2.128,88,svc_backup
HR-WS-065,2026-02-14T12:14:08.908Z,16178,dwm.exe,CLOSE_WAIT,UDP,10.10.3.165,61574,10.10.2.128,34424,cjohnson
HR-WS-065,2026-02-11T05:29:13.396Z,22009,services.exe,ESTABLISHED,TCP,10.10.3.165,53,10.10.1.13,3389,svc_web
HR-WS-065,2026-02-12T06:29:03.653Z,22822,SearchHost.exe,LISTEN,TCP,10.10.3.165,88,0.0.0.0,0,svc_sql
HR-WS-065,2026-02-12T05:25:39.691Z,1946,msedge.exe,CLOSE_WAIT,TCP,10.10.3.165,5985,174.21.68.215,389,svc_web
FIN-WS-066,2026-02-13T00:06:22.273Z,53642,lsass.exe,CLOSE_WAIT,TCP,10.10.1.166,3389,10.10.3.111,445,svc_backup
FIN-WS-066,2026-02-10T18:42:48.328Z,24564,chrome.exe,ESTABLISHED,TCP,10.10.1.166,3389,10.10.1.13,445,agarcia
FIN-WS-066,2026-02-14T17:33:18.610Z,61286,MsMpEng.exe,SYN_SENT,TCP,10.10.1.166,445,10.10.2.119,3389,svc_web
FIN-WS-066,2026-02-16T07:46:59.433Z,3042,msedge.exe,TIME_WAIT,TCP,10.10.1.166,8080,30.117.162.204,88,fthompson
FIN-WS-066,2026-02-11T11:58:17.246Z,46428,cmd.exe,SYN_SENT,TCP,10.10.1.166,445,10.10.3.135,53,cjohnson
FIN-WS-066,2026-02-18T17:30:39.688Z,63005,taskhostw.exe,SYN_SENT,TCP,10.10.1.166,8080,32.232.136.228,88,hbrown
FIN-WS-066,2026-02-14T22:47:48.718Z,49082,msedge.exe,CLOSE_WAIT,TCP,10.10.1.166,135,79.106.33.130,389,emartinez
FIN-WS-066,2026-02-18T06:14:42.843Z,29558,powershell.exe,LISTEN,UDP,10.10.1.166,139,0.0.0.0,0,jsmith
FIN-WS-066,2026-02-19T20:17:09.882Z,61840,msedge.exe,LISTEN,TCP,10.10.1.166,88,0.0.0.0,0,emartinez
FIN-WS-066,2026-02-19T22:57:26.729Z,4544,spoolsv.exe,CLOSE_WAIT,TCP,10.10.1.166,53,33.202.68.90,80,admin
FIN-WS-066,2026-02-11T00:34:16.278Z,3809,powershell.exe,ESTABLISHED,TCP,10.10.1.166,636,168.182.230.119,445,svc_backup
FIN-WS-066,2026-02-15T08:40:49.066Z,40478,OneDrive.exe,SYN_SENT,TCP,10.10.1.166,88,56.81.138.96,4923,dlee
FIN-WS-066,2026-02-20T06:01:46.211Z,1945,spoolsv.exe,LISTEN,UDP,10.10.1.166,53,0.0.0.0,0,idavis
FIN-WS-066,2026-02-19T02:29:43.714Z,52099,System,CLOSE_WAIT,UDP,10.10.1.166,139,10.10.3.123,389,bwilson
FIN-WS-066,2026-02-14T19:54:19.041Z,45158,svchost.exe,TIME_WAIT,UDP,10.10.1.166,5985,10.10.2.125,636,fthompson
FIN-WS-066,2026-02-13T19:48:19.052Z,52032,winlogon.exe,ESTABLISHED,UDP,10.10.1.166,8080,178.86.28.240,3107,cjohnson
FIN-WS-066,2026-02-14T14:19:03.143Z,35732,lsass.exe,LISTEN,TCP,10.10.1.166,135,0.0.0.0,0,idavis
FIN-WS-066,2026-02-20T09:25:27.164Z,1803,taskhostw.exe,CLOSE_WAIT,TCP,10.10.1.166,80,10.10.1.118,63631,svc_sql
SLS-WS-067,2026-02-16T05:35:34.464Z,48809,csrss.exe,ESTABLISHED,UDP,10.10.2.167,389,116.87.82.24,88,hbrown
SLS-WS-067,2026-02-20T17:41:54.251Z,7371,chrome.exe,CLOSE_WAIT,TCP,10.10.2.167,445,10.10.1.136,443,idavis
SLS-WS-067,2026-02-13T09:17:02.185Z,51645,chrome.exe,CLOSE_WAIT,TCP,10.10.2.167,139,79.125.208.14,445,bwilson
SLS-WS-067,2026-02-11T19:28:44.466Z,48109,outlook.exe,ESTABLISHED,TCP,10.10.2.167,445,10.10.1.10,443,admin
SLS-WS-067,2026-02-14T17:09:59.633Z,41093,smss.exe,TIME_WAIT,TCP,10.10.2.167,63769,216.242.92.97,8080,emartinez
SLS-WS-067,2026-02-17T02:53:11.109Z,39597,powershell.exe,LISTEN,TCP,10.10.2.167,443,0.0.0.0,0,svc_web
SLS-WS-067,2026-02-11T10:34:30.570Z,43839,System,ESTABLISHED,UDP,10.10.2.167,3389,212.183.179.29,443,agarcia
SLS-WS-067,2026-02-16T03:00:02.337Z,51949,System,SYN_SENT,TCP,10.10.2.167,54746,10.10.1.11,389,hbrown
SLS-WS-067,2026-02-19T18:57:49.141Z,32881,outlook.exe,LISTEN,TCP,10.10.2.167,80,0.0.0.0,0,hbrown
SLS-WS-067,2026-02-19T03:35:33.698Z,8660,csrss.exe,TIME_WAIT,TCP,10.10.2.167,8080,10.10.3.105,20132,agarcia
SLS-WS-067,2026-02-13T03:15:13.965Z,28742,explorer.exe,ESTABLISHED,TCP,10.10.2.167,5985,156.65.101.202,636,dlee
SLS-WS-067,2026-02-12T02:02:35.284Z,11011,explorer.exe,SYN_SENT,UDP,10.10.2.167,135,147.210.163.71,80,cjohnson
SLS-WS-067,2026-02-10T08:22:21.083Z,13740,winlogon.exe,LISTEN,TCP,10.10.2.167,3389,0.0.0.0,0,svc_sql
SLS-WS-067,2026-02-10T08:50:22.819Z,34250,explorer.exe,ESTABLISHED,TCP,10.10.2.167,135,204.149.206.117,80,idavis
SLS-WS-067,2026-02-18T21:05:59.981Z,9200,smss.exe,ESTABLISHED,TCP,10.10.2.167,443,10.10.1.112,8080,admin
SLS-WS-067,2026-02-20T15:14:52.777Z,62421,csrss.exe,SYN_SENT,TCP,10.10.2.167,636,10.10.2.170,636,agarcia
SLS-WS-067,2026-02-12T22:15:37.055Z,7881,System,CLOSE_WAIT,TCP,10.10.2.167,5985,10.10.2.10,3389,agarcia
SLS-WS-067,2026-02-13T18:25:53.479Z,9374,powershell.exe,CLOSE_WAIT,TCP,10.10.2.167,53,10.10.1.11,445,svc_sql
SLS-WS-067,2026-02-13T00:56:36.812Z,55665,notepad.exe,LISTEN,TCP,10.10.2.167,389,0.0.0.0,0,admin
SLS-WS-067,2026-02-14T15:13:05.649Z,2064,RuntimeBroker.exe,LISTEN,TCP,10.10.2.167,139,0.0.0.0,0,gwhite
SLS-WS-067,2026-02-11T07:52:21.477Z,36179,smss.exe,SYN_SENT,TCP,10.10.2.167,139,149.139.207.111,80,bwilson
SLS-WS-067,2026-02-20T10:02:11.383Z,9883,spoolsv.exe,ESTABLISHED,UDP,10.10.2.167,636,10.10.3.129,445,fthompson
SLS-WS-067,2026-02-14T14:53:47.249Z,10570,dwm.exe,TIME_WAIT,TCP,10.10.2.167,8080,10.10.1.130,3389,cjohnson
SLS-WS-067,2026-02-17T11:39:16.773Z,61590,csrss.exe,ESTABLISHED,TCP,10.10.2.167,443,41.48.71.142,443,agarcia
SLS-WS-067,2026-02-12T03:13:23.737Z,3729,spoolsv.exe,TIME_WAIT,TCP,10.10.2.167,139,171.203.58.227,31475,dlee
SLS-WS-067,2026-02-12T10:07:33.450Z,59349,svchost.exe,ESTABLISHED,TCP,10.10.2.167,53,63.73.234.23,8080,bwilson
SLS-WS-067,2026-02-17T23:51:25.683Z,28622,spoolsv.exe,CLOSE_WAIT,TCP,10.10.2.167,443,10.10.1.169,389,svc_sql
SLS-WS-067,2026-02-14T07:42:17.417Z,63433,cmd.exe,TIME_WAIT,TCP,10.10.2.167,139,10.10.1.157,445,jsmith
SLS-WS-067,2026-02-16T03:35:00.841Z,27746,chrome.exe,TIME_WAIT,UDP,10.10.2.167,3389,10.10.3.120,53,agarcia
SLS-WS-067,2026-02-20T14:42:59.069Z,33483,lsass.exe,SYN_SENT,UDP,10.10.2.167,3389,194.51.64.212,389,fthompson
SLS-WS-067,2026-02-19T05:04:31.112Z,29066,OneDrive.exe,CLOSE_WAIT,TCP,10.10.2.167,445,10.10.2.110,88,hbrown
SLS-WS-067,2026-02-10T17:07:29.485Z,63995,cmd.exe,SYN_SENT,TCP,10.10.2.167,8080,213.41.81.149,80,agarcia
SLS-WS-067,2026-02-13T12:48:34.705Z,27577,notepad.exe,SYN_SENT,TCP,10.10.2.167,139,38.64.120.81,80,svc_backup
SLS-WS-067,2026-02-13T20:04:10.579Z,41859,System,LISTEN,TCP,10.10.2.167,443,0.0.0.0,0,fthompson
SLS-WS-067,2026-02-17T00:42:16.282Z,5863,services.exe,TIME_WAIT,UDP,10.10.2.167,139,10.10.2.152,445,svc_sql
SLS-WS-067,2026-02-12T18:22:31.554Z,14868,MsMpEng.exe,SYN_SENT,TCP,10.10.2.167,53,141.41.75.119,88,emartinez
SLS-WS-067,2026-02-19T08:32:34.209Z,1298,notepad.exe,SYN_SENT,TCP,10.10.2.167,636,10.10.1.103,445,emartinez
ENG-WS-068,2026-02-13T13:45:01.876Z,43125,explorer.exe,LISTEN,TCP,10.10.3.168,3389,0.0.0.0,0,svc_backup
ENG-WS-068,2026-02-14T12:21:43.720Z,20478,teams.exe,LISTEN,TCP,10.10.3.168,636,0.0.0.0,0,idavis
ENG-WS-068,2026-02-20T17:52:32.263Z,13314,dwm.exe,CLOSE_WAIT,TCP,10.10.3.168,8080,37.51.197.14,80,agarcia
ENG-WS-068,2026-02-18T19:19:22.247Z,15874,System,SYN_SENT,TCP,10.10.3.168,443,23.141.16.241,389,agarcia
ENG-WS-068,2026-02-18T06:08:23.656Z,61697,winlogon.exe,ESTABLISHED,TCP,10.10.3.168,64442,10.10.3.114,8080,emartinez
ENG-WS-068,2026-02-19T22:18:58.049Z,41301,services.exe,ESTABLISHED,TCP,10.10.3.168,443,10.10.3.168,53,agarcia
ENG-WS-068,2026-02-15T05:55:06.469Z,51178,csrss.exe,TIME_WAIT,UDP,10.10.3.168,53,10.10.2.122,80,gwhite
ENG-WS-068,2026-02-11T10:26:45.259Z,1901,explorer.exe,LISTEN,TCP,10.10.3.168,5985,0.0.0.0,0,hbrown
ENG-WS-068,2026-02-15T09:17:28.193Z,54986,msedge.exe,SYN_SENT,TCP,10.10.3.168,445,52.196.128.124,3389,cjohnson
ENG-WS-068,2026-02-15T04:22:49.878Z,63688,epicgameslauncher.exe,CLOSE_WAIT,TCP,10.10.3.168,80,10.10.3.171,53,hbrown
ENG-WS-068,2026-02-14T09:40:32.764Z,2593,teams.exe,TIME_WAIT,TCP,10.10.3.168,55514,197.69.109.225,443,svc_sql
ENG-WS-068,2026-02-11T00:34:23.898Z,40715,services.exe,CLOSE_WAIT,TCP,10.10.3.168,8080,10.10.3.150,53,svc_backup
ENG-WS-068,2026-02-10T09:06:10.638Z,60900,smss.exe,TIME_WAIT,UDP,10.10.3.168,3389,15.59.208.230,443,jsmith
ENG-WS-068,2026-02-13T08:08:22.557Z,56151,RuntimeBroker.exe,ESTABLISHED,TCP,10.10.3.168,57607,41.144.108.180,8080,dlee
LEG-WS-069,2026-02-14T04:04:30.862Z,4770,svchost.exe,ESTABLISHED,TCP,10.10.1.169,636,109.38.7.81,443,fthompson
LEG-WS-069,2026-02-16T01:29:15.553Z,6225,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.169,5985,10.10.1.12,445,jsmith
LEG-WS-069,2026-02-13T16:00:51.568Z,16273,msedge.exe,TIME_WAIT,TCP,10.10.1.169,139,10.10.1.175,443,hbrown
LEG-WS-069,2026-02-19T18:54:06.635Z,21695,msedge.exe,LISTEN,TCP,10.10.1.169,8080,0.0.0.0,0,svc_sql
LEG-WS-069,2026-02-18T06:36:24.507Z,53321,powershell.exe,SYN_SENT,TCP,10.10.1.169,53,10.10.3.120,80,idavis
LEG-WS-069,2026-02-15T05:08:27.436Z,2503,powershell.exe,CLOSE_WAIT,TCP,10.10.1.169,139,10.10.1.148,389,emartinez
LEG-WS-069,2026-02-15T20:53:22.776Z,42122,msedge.exe,ESTABLISHED,TCP,10.10.1.169,80,10.10.3.150,389,svc_sql
LEG-WS-069,2026-02-13T10:07:36.165Z,4877,MsMpEng.exe,ESTABLISHED,UDP,10.10.1.169,8080,82.157.116.136,389,svc_web
LEG-WS-069,2026-02-19T15:22:32.651Z,12285,taskhostw.exe,CLOSE_WAIT,UDP,10.10.1.169,80,10.10.1.151,8080,hbrown
LEG-WS-069,2026-02-20T04:23:55.859Z,56439,notepad.exe,ESTABLISHED,TCP,10.10.1.169,5985,65.69.5.115,389,svc_web
LEG-WS-069,2026-02-14T16:23:32.061Z,9167,taskhostw.exe,LISTEN,TCP,10.10.1.169,8080,0.0.0.0,0,emartinez
LEG-WS-069,2026-02-12T04:05:28.415Z,45576,code.exe,SYN_SENT,TCP,10.10.1.169,88,10.10.2.134,3389,emartinez
LEG-WS-069,2026-02-20T07:14:53.785Z,21554,powershell.exe,TIME_WAIT,TCP,10.10.1.169,60517,10.10.3.174,443,idavis
LEG-WS-069,2026-02-19T12:27:32.293Z,32855,lsass.exe,TIME_WAIT,TCP,10.10.1.169,135,10.10.3.108,33804,svc_backup
LEG-WS-069,2026-02-17T16:06:57.333Z,1910,cmd.exe,LISTEN,TCP,10.10.1.169,88,0.0.0.0,0,cjohnson
LEG-WS-069,2026-02-12T03:51:37.077Z,42270,dwm.exe,TIME_WAIT,UDP,10.10.1.169,8080,54.206.66.117,8080,bwilson
LEG-WS-069,2026-02-10T22:18:05.550Z,19402,msedge.exe,ESTABLISHED,TCP,10.10.1.169,389,126.218.61.248,8080,bwilson
LEG-WS-069,2026-02-19T00:53:11.129Z,62710,System,TIME_WAIT,TCP,10.10.1.169,139,215.206.119.9,443,idavis
LEG-WS-069,2026-02-18T02:43:09.624Z,63085,smss.exe,LISTEN,UDP,10.10.1.169,445,0.0.0.0,0,idavis
LEG-WS-069,2026-02-10T14:19:05.956Z,4782,svchost.exe,ESTABLISHED,TCP,10.10.1.169,389,102.137.253.213,636,gwhite
LEG-WS-069,2026-02-14T23:24:43.400Z,51121,svchost.exe,LISTEN,TCP,10.10.1.169,135,0.0.0.0,0,jsmith
LEG-WS-069,2026-02-14T06:11:01.606Z,14771,MsMpEng.exe,ESTABLISHED,TCP,10.10.1.169,88,51.106.94.106,445,svc_web
LEG-WS-069,2026-02-14T22:54:01.135Z,64252,csrss.exe,LISTEN,TCP,10.10.1.169,58282,0.0.0.0,0,cjohnson
LEG-WS-069,2026-02-18T20:24:21.293Z,36147,svchost.exe,SYN_SENT,UDP,10.10.1.169,636,10.10.1.121,41379,emartinez
LEG-WS-069,2026-02-15T03:30:15.599Z,10454,services.exe,LISTEN,TCP,10.10.1.169,445,0.0.0.0,0,svc_sql
LEG-WS-069,2026-02-18T23:36:40.656Z,47189,System,ESTABLISHED,UDP,10.10.1.169,5985,10.10.2.173,8080,fthompson
LEG-WS-069,2026-02-18T03:13:46.711Z,38529,spoolsv.exe,TIME_WAIT,UDP,10.10.1.169,445,10.10.1.127,18376,emartinez
LEG-WS-069,2026-02-19T03:37:18.775Z,1522,utorrent.exe,ESTABLISHED,TCP,10.10.1.169,139,10.10.2.164,88,bwilson
LEG-WS-069,2026-02-19T12:31:45.040Z,15710,svchost.exe,ESTABLISHED,TCP,10.10.1.169,88,10.10.2.110,445,idavis
LEG-WS-069,2026-02-10T09:38:24.487Z,11095,cmd.exe,SYN_SENT,TCP,10.10.1.169,88,58.88.80.90,8080,cjohnson
LEG-WS-069,2026-02-19T05:22:36.310Z,3991,explorer.exe,LISTEN,TCP,10.10.1.169,3389,0.0.0.0,0,agarcia
LEG-WS-069,2026-02-16T19:56:43.467Z,49583,powershell.exe,TIME_WAIT,TCP,10.10.1.169,59918,10.10.2.152,3389,svc_sql
LEG-WS-069,2026-02-18T02:39:18.963Z,35382,teams.exe,TIME_WAIT,UDP,10.10.1.169,445,152.218.67.2,23753,admin
LEG-WS-069,2026-02-16T14:17:09.135Z,8875,outlook.exe,TIME_WAIT,TCP,10.10.1.169,445,10.10.2.143,21540,jsmith
LEG-WS-069,2026-02-19T18:36:12.997Z,25261,powershell.exe,CLOSE_WAIT,TCP,10.10.1.169,443,10.10.1.148,443,bwilson
LEG-WS-069,2026-02-11T08:58:07.103Z,24504,cmd.exe,ESTABLISHED,TCP,10.10.1.169,8080,10.10.1.151,3389,cjohnson
LEG-WS-069,2026-02-19T14:35:20.609Z,28000,outlook.exe,CLOSE_WAIT,TCP,10.10.1.169,3389,39.204.128.99,80,agarcia
LEG-WS-069,2026-02-12T01:33:13.808Z,7039,powershell.exe,ESTABLISHED,TCP,10.10.1.169,389,10.10.1.118,3389,agarcia
LEG-WS-069,2026-02-13T10:52:41.424Z,43759,powershell.exe,TIME_WAIT,TCP,10.10.1.169,3389,25.138.107.185,443,svc_web
LEG-WS-069,2026-02-19T06:59:32.588Z,10148,spotify.exe,CLOSE_WAIT,TCP,10.10.1.169,389,10.10.3.117,445,agarcia
MKT-WS-070,2026-02-14T19:51:19.852Z,41652,OneDrive.exe,TIME_WAIT,TCP,10.10.2.170,88,10.10.2.170,80,fthompson
MKT-WS-070,2026-02-16T11:23:31.002Z,36681,code.exe,LISTEN,UDP,10.10.2.170,88,0.0.0.0,0,fthompson
MKT-WS-070,2026-02-18T12:24:09.130Z,23645,RuntimeBroker.exe,SYN_SENT,TCP,10.10.2.170,3389,10.10.3.108,636,svc_backup
MKT-WS-070,2026-02-13T02:31:52.939Z,31705,code.exe,SYN_SENT,UDP,10.10.2.170,636,112.244.69.104,636,bwilson
MKT-WS-070,2026-02-11T23:45:21.581Z,12130,teams.exe,TIME_WAIT,TCP,10.10.2.170,56253,10.10.1.175,636,svc_web
MKT-WS-070,2026-02-14T14:47:50.239Z,38699,msedge.exe,SYN_SENT,UDP,10.10.2.170,636,10.10.1.139,636,svc_sql
MKT-WS-070,2026-02-18T13:00:54.907Z,39781,teams.exe,ESTABLISHED,TCP,10.10.2.170,54707,42.125.140.23,80,svc_backup
MKT-WS-070,2026-02-14T14:28:38.406Z,116,SearchHost.exe,LISTEN,TCP,10.10.2.170,445,0.0.0.0,0,dlee
MKT-WS-070,2026-02-16T17:37:50.909Z,3370,taskhostw.exe,ESTABLISHED,TCP,10.10.2.170,5985,50.94.34.123,3389,svc_backup
MKT-WS-070,2026-02-12T10:11:52.977Z,40679,smss.exe,LISTEN,UDP,10.10.2.170,61300,0.0.0.0,0,bwilson
MKT-WS-070,2026-02-20T00:56:27.810Z,9508,notepad.exe,CLOSE_WAIT,TCP,10.10.2.170,88,10.10.1.106,80,gwhite
MKT-WS-070,2026-02-12T14:35:49.773Z,34553,explorer.exe,TIME_WAIT,TCP,10.10.2.170,5985,29.214.28.122,445,svc_backup
MKT-WS-070,2026-02-17T04:45:31.304Z,56289,svchost.exe,ESTABLISHED,TCP,10.10.2.170,135,119.88.102.70,88,cjohnson
MKT-WS-070,2026-02-17T00:43:42.711Z,52041,code.exe,LISTEN,TCP,10.10.2.170,80,0.0.0.0,0,idavis
MKT-WS-070,2026-02-15T02:56:30.025Z,30503,OneDrive.exe,ESTABLISHED,TCP,10.10.2.170,445,10.10.1.136,3389,gwhite
MKT-WS-070,2026-02-12T05:00:54.674Z,63976,SearchHost.exe,SYN_SENT,TCP,10.10.2.170,5985,10.10.1.127,445,jsmith
MKT-WS-070,2026-02-17T14:19:59.896Z,2798,lsass.exe,ESTABLISHED,TCP,10.10.2.170,3389,26.225.10.23,445,bwilson
MKT-WS-070,2026-02-18T11:13:34.315Z,52275,powershell.exe,CLOSE_WAIT,TCP,10.10.2.170,57888,10.10.3.129,88,cjohnson
MKT-WS-070,2026-02-14T06:37:30.293Z,49977,SearchHost.exe,SYN_SENT,TCP,10.10.2.170,88,10.10.3.138,3389,bwilson
MKT-WS-070,2026-02-12T16:47:02.866Z,57404,smss.exe,ESTABLISHED,TCP,10.10.2.170,445,51.222.136.17,53,emartinez
MKT-WS-070,2026-02-16T09:23:15.945Z,14542,taskhostw.exe,CLOSE_WAIT,TCP,10.10.2.170,443,101.142.120.83,80,gwhite
MKT-WS-070,2026-02-13T01:28:51.627Z,14011,cmd.exe,CLOSE_WAIT,TCP,10.10.2.170,8080,10.10.3.129,636,gwhite
MKT-WS-070,2026-02-18T04:45:16.526Z,26585,utorrent.exe,CLOSE_WAIT,TCP,10.10.2.170,389,10.10.1.154,88,hbrown
MKT-WS-070,2026-02-16T08:12:58.206Z,7308,chrome.exe,TIME_WAIT,TCP,10.10.2.170,53,10.10.2.158,8080,jsmith
MKT-WS-070,2026-02-10T16:18:59.577Z,59044,notepad.exe,TIME_WAIT,TCP,10.10.2.170,389,10.10.2.131,88,jsmith
MKT-WS-070,2026-02-17T06:28:04.714Z,1558,powershell.exe,CLOSE_WAIT,TCP,10.10.2.170,88,10.10.1.151,389,svc_web
MKT-WS-070,2026-02-16T17:34:37.528Z,50634,OneDrive.exe,ESTABLISHED,TCP,10.10.2.170,445,10.10.2.161,443,hbrown
MKT-WS-070,2026-02-12T11:05:15.298Z,44647,spoolsv.exe,SYN_SENT,TCP,10.10.2.170,135,129.168.23.100,88,svc_web
MKT-WS-070,2026-02-11T18:44:59.025Z,7829,dwm.exe,SYN_SENT,TCP,10.10.2.170,5985,10.10.1.103,8080,svc_backup
MKT-WS-070,2026-02-19T01:44:02.307Z,50073,cmd.exe,SYN_SENT,TCP,10.10.2.170,53,10.10.3.153,8080,agarcia
MKT-WS-070,2026-02-16T04:27:47.056Z,27538,teams.exe,SYN_SENT,TCP,10.10.2.170,135,208.90.41.173,443,svc_backup
MKT-WS-070,2026-02-18T00:23:03.960Z,60527,code.exe,LISTEN,TCP,10.10.2.170,8080,0.0.0.0,0,jsmith
MKT-WS-070,2026-02-17T08:38:34.629Z,15658,notepad.exe,SYN_SENT,TCP,10.10.2.170,5985,151.149.80.8,443,emartinez
MKT-WS-070,2026-02-13T20:59:40.723Z,35398,spoolsv.exe,SYN_SENT,TCP,10.10.2.170,139,92.214.230.7,5186,gwhite
MKT-WS-070,2026-02-15T04:28:37.572Z,35409,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.2.170,139,60.142.125.208,443,agarcia
MKT-WS-070,2026-02-17T02:37:22.246Z,16654,dwm.exe,ESTABLISHED,TCP,10.10.2.170,389,70.113.58.88,88,svc_sql
MKT-WS-070,2026-02-10T08:22:05.428Z,61669,MsMpEng.exe,LISTEN,TCP,10.10.2.170,3389,0.0.0.0,0,gwhite
MKT-WS-070,2026-02-16T21:16:33.485Z,2160,msedge.exe,CLOSE_WAIT,TCP,10.10.2.170,5985,162.152.21.115,636,hbrown
MKT-WS-070,2026-02-19T02:36:42.576Z,21481,chrome.exe,CLOSE_WAIT,UDP,10.10.2.170,445,10.10.3.123,445,svc_sql
MKT-WS-070,2026-02-14T16:44:13.534Z,243,MsMpEng.exe,ESTABLISHED,TCP,10.10.2.170,53,10.10.1.160,443,fthompson
EXEC-WS-071,2026-02-12T20:01:36.967Z,7967,SearchHost.exe,ESTABLISHED,UDP,10.10.3.171,5985,101.67.7.143,80,gwhite
EXEC-WS-071,2026-02-19T17:20:19.450Z,17438,qbittorrent.exe,LISTEN,TCP,10.10.3.171,389,0.0.0.0,0,dlee
EXEC-WS-071,2026-02-17T23:56:46.230Z,19448,taskhostw.exe,SYN_SENT,TCP,10.10.3.171,389,65.171.248.231,80,svc_sql
EXEC-WS-071,2026-02-19T11:13:34.752Z,14186,MsMpEng.exe,LISTEN,TCP,10.10.3.171,389,0.0.0.0,0,fthompson
EXEC-WS-071,2026-02-14T13:16:02.146Z,53601,smss.exe,ESTABLISHED,UDP,10.10.3.171,8080,10.10.3.171,389,svc_backup
EXEC-WS-071,2026-02-10T18:30:25.774Z,23356,services.exe,CLOSE_WAIT,TCP,10.10.3.171,445,194.150.124.97,445,cjohnson
EXEC-WS-071,2026-02-19T10:25:33.563Z,54302,lsass.exe,TIME_WAIT,TCP,10.10.3.171,636,137.225.188.200,3389,svc_backup
EXEC-WS-071,2026-02-14T14:46:42.486Z,13048,dwm.exe,SYN_SENT,UDP,10.10.3.171,3389,10.10.2.167,88,bwilson
EXEC-WS-071,2026-02-13T13:36:10.747Z,53616,explorer.exe,CLOSE_WAIT,TCP,10.10.3.171,88,199.208.145.150,25457,gwhite
EXEC-WS-071,2026-02-12T06:29:55.729Z,34469,MsMpEng.exe,LISTEN,UDP,10.10.3.171,139,0.0.0.0,0,fthompson
EXEC-WS-071,2026-02-19T15:08:06.290Z,24804,lsass.exe,SYN_SENT,TCP,10.10.3.171,80,10.10.3.159,3389,idavis
EXEC-WS-071,2026-02-13T16:09:14.639Z,36331,services.exe,LISTEN,TCP,10.10.3.171,135,0.0.0.0,0,svc_backup
EXEC-WS-071,2026-02-12T21:45:53.150Z,34518,SearchHost.exe,SYN_SENT,TCP,10.10.3.171,636,127.230.95.96,443,bwilson
EXEC-WS-071,2026-02-14T12:36:45.840Z,2022,spotify.exe,TIME_WAIT,TCP,10.10.3.171,443,84.102.97.250,8080,jsmith
EXEC-WS-071,2026-02-17T22:46:20.270Z,37063,notepad.exe,TIME_WAIT,TCP,10.10.3.171,5985,38.34.156.190,445,agarcia
IT-WS-072,2026-02-11T22:04:35.169Z,41752,svchost.exe,LISTEN,TCP,10.10.1.172,3389,0.0.0.0,0,svc_web
IT-WS-072,2026-02-13T18:22:35.868Z,63645,outlook.exe,ESTABLISHED,TCP,10.10.1.172,389,10.10.1.118,80,svc_backup
IT-WS-072,2026-02-20T03:36:08.461Z,6804,explorer.exe,SYN_SENT,UDP,10.10.1.172,3389,10.10.1.163,29080,idavis
IT-WS-072,2026-02-11T05:17:37.556Z,43280,System,SYN_SENT,TCP,10.10.1.172,88,212.17.189.103,80,emartinez
IT-WS-072,2026-02-19T04:23:36.699Z,540,svchost.exe,CLOSE_WAIT,TCP,10.10.1.172,5985,26.220.170.251,445,dlee
IT-WS-072,2026-02-13T14:56:13.687Z,26622,notepad.exe,CLOSE_WAIT,TCP,10.10.1.172,636,42.162.115.247,32622,agarcia
IT-WS-072,2026-02-11T05:32:24.893Z,37822,winlogon.exe,CLOSE_WAIT,TCP,10.10.1.172,389,44.37.254.254,88,svc_sql
IT-WS-072,2026-02-12T09:34:08.361Z,31837,explorer.exe,LISTEN,TCP,10.10.1.172,88,0.0.0.0,0,cjohnson
IT-WS-072,2026-02-13T09:28:50.891Z,20449,explorer.exe,LISTEN,TCP,10.10.1.172,55176,0.0.0.0,0,dlee
IT-WS-072,2026-02-18T09:37:00.179Z,20757,notepad.exe,SYN_SENT,TCP,10.10.1.172,49154,10.10.1.157,8080,agarcia
IT-WS-072,2026-02-17T13:46:08.867Z,63080,svchost.exe,CLOSE_WAIT,TCP,10.10.1.172,443,10.10.3.105,389,admin
IT-WS-072,2026-02-16T03:35:09.953Z,23300,System,SYN_SENT,TCP,10.10.1.172,139,91.196.98.249,443,hbrown
IT-WS-072,2026-02-12T22:13:08.724Z,43773,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.172,3389,10.10.3.10,53,agarcia
IT-WS-072,2026-02-11T13:18:26.700Z,18207,explorer.exe,CLOSE_WAIT,TCP,10.10.1.172,80,10.10.3.102,445,jsmith
IT-WS-072,2026-02-18T07:47:42.156Z,48492,powershell.exe,SYN_SENT,TCP,10.10.1.172,445,10.10.2.149,8080,svc_backup
IT-WS-072,2026-02-13T16:25:26.352Z,39951,dwm.exe,TIME_WAIT,TCP,10.10.1.172,389,72.10.227.137,88,svc_backup
IT-WS-072,2026-02-20T01:08:06.530Z,39742,SearchHost.exe,TIME_WAIT,TCP,10.10.1.172,135,185.121.175.185,80,gwhite
IT-WS-072,2026-02-16T13:08:42.777Z,2788,svchost.exe,SYN_SENT,TCP,10.10.1.172,50902,10.10.3.165,80,admin
IT-WS-072,2026-02-11T08:03:43.658Z,35300,services.exe,SYN_SENT,TCP,10.10.1.172,135,10.10.2.119,443,dlee
IT-WS-072,2026-02-10T16:05:13.697Z,29907,System,ESTABLISHED,TCP,10.10.1.172,54493,103.123.95.169,88,svc_sql
IT-WS-072,2026-02-16T14:09:17.725Z,30927,teams.exe,LISTEN,TCP,10.10.1.172,135,0.0.0.0,0,admin
HR-WS-073,2026-02-18T03:40:43.522Z,19057,cmd.exe,TIME_WAIT,TCP,10.10.2.173,8080,186.29.70.236,389,fthompson
HR-WS-073,2026-02-12T04:57:01.782Z,21511,services.exe,SYN_SENT,TCP,10.10.2.173,88,10.10.3.150,88,svc_backup
HR-WS-073,2026-02-14T05:29:33.266Z,53377,SearchHost.exe,ESTABLISHED,TCP,10.10.2.173,80,10.10.1.169,8080,hbrown
HR-WS-073,2026-02-13T18:39:39.690Z,53354,svchost.exe,LISTEN,TCP,10.10.2.173,80,0.0.0.0,0,jsmith
HR-WS-073,2026-02-13T02:29:43.700Z,625,explorer.exe,CLOSE_WAIT,TCP,10.10.2.173,5985,213.4.189.12,88,idavis
HR-WS-073,2026-02-11T17:48:50.051Z,39966,msedge.exe,ESTABLISHED,UDP,10.10.2.173,88,31.84.30.207,53,dlee
HR-WS-073,2026-02-15T04:52:21.811Z,39254,OneDrive.exe,LISTEN,TCP,10.10.2.173,88,0.0.0.0,0,emartinez
HR-WS-073,2026-02-20T01:36:40.281Z,43457,msedge.exe,SYN_SENT,UDP,10.10.2.173,80,10.10.1.160,389,emartinez
FIN-WS-074,2026-02-11T15:05:20.150Z,1167,spoolsv.exe,SYN_SENT,UDP,10.10.3.174,3389,74.144.146.237,443,admin
FIN-WS-074,2026-02-11T23:13:30.236Z,11101,OneDrive.exe,SYN_SENT,TCP,10.10.3.174,3389,10.10.2.137,88,idavis
FIN-WS-074,2026-02-15T11:45:37.408Z,20737,RuntimeBroker.exe,LISTEN,TCP,10.10.3.174,88,0.0.0.0,0,svc_backup
FIN-WS-074,2026-02-14T16:59:59.169Z,9244,svchost.exe,LISTEN,TCP,10.10.3.174,52512,0.0.0.0,0,dlee
FIN-WS-074,2026-02-14T00:19:47.518Z,4221,svchost.exe,CLOSE_WAIT,TCP,10.10.3.174,8080,222.78.215.231,3389,emartinez
FIN-WS-074,2026-02-18T18:14:26.976Z,20811,svchost.exe,ESTABLISHED,TCP,10.10.3.174,389,2.34.225.59,389,fthompson
FIN-WS-074,2026-02-13T17:35:57.531Z,29089,dwm.exe,CLOSE_WAIT,TCP,10.10.3.174,3389,34.91.130.78,17099,idavis
FIN-WS-074,2026-02-11T14:46:37.418Z,61282,OneDrive.exe,CLOSE_WAIT,TCP,10.10.3.174,135,10.10.2.107,389,svc_backup
FIN-WS-074,2026-02-19T13:17:37.236Z,36389,spoolsv.exe,SYN_SENT,TCP,10.10.3.174,5985,10.10.2.128,88,cjohnson
FIN-WS-074,2026-02-10T20:17:38.425Z,12272,taskhostw.exe,SYN_SENT,TCP,10.10.3.174,389,10.10.2.101,389,cjohnson
FIN-WS-074,2026-02-16T14:52:02.993Z,28443,OneDrive.exe,CLOSE_WAIT,TCP,10.10.3.174,53,68.125.3.207,80,gwhite
FIN-WS-074,2026-02-18T12:32:00.581Z,8833,code.exe,LISTEN,TCP,10.10.3.174,135,0.0.0.0,0,cjohnson
FIN-WS-074,2026-02-14T06:00:55.856Z,56425,SearchHost.exe,TIME_WAIT,TCP,10.10.3.174,445,10.10.1.121,389,idavis
FIN-WS-074,2026-02-16T19:29:14.517Z,46572,cmd.exe,LISTEN,TCP,10.10.3.174,135,0.0.0.0,0,bwilson
FIN-WS-074,2026-02-11T00:18:52.796Z,40525,System,TIME_WAIT,UDP,10.10.3.174,445,10.10.2.113,80,cjohnson
FIN-WS-074,2026-02-10T10:16:23.512Z,44183,teams.exe,SYN_SENT,TCP,10.10.3.174,445,55.152.253.169,59315,gwhite
FIN-WS-074,2026-02-17T12:25:53.567Z,40885,taskhostw.exe,ESTABLISHED,TCP,10.10.3.174,636,10.10.1.157,29625,agarcia
FIN-WS-074,2026-02-12T06:04:34.549Z,49800,powershell.exe,ESTABLISHED,TCP,10.10.3.174,636,214.201.145.253,8080,fthompson
FIN-WS-074,2026-02-15T04:42:55.915Z,13453,outlook.exe,LISTEN,TCP,10.10.3.174,8080,0.0.0.0,0,agarcia
FIN-WS-074,2026-02-14T02:22:35.601Z,15700,dwm.exe,ESTABLISHED,TCP,10.10.3.174,139,187.244.14.237,636,fthompson
FIN-WS-074,2026-02-17T00:04:41.863Z,51944,taskhostw.exe,SYN_SENT,TCP,10.10.3.174,88,129.155.69.162,80,svc_backup
FIN-WS-074,2026-02-17T08:50:57.754Z,57020,explorer.exe,LISTEN,TCP,10.10.3.174,80,0.0.0.0,0,fthompson
FIN-WS-074,2026-02-10T11:26:54.060Z,2722,RuntimeBroker.exe,SYN_SENT,UDP,10.10.3.174,8080,10.10.2.101,8080,cjohnson
FIN-WS-074,2026-02-16T12:45:11.347Z,42415,code.exe,SYN_SENT,TCP,10.10.3.174,62375,10.10.3.174,53,idavis
SLS-WS-075,2026-02-18T01:01:23.543Z,58344,code.exe,SYN_SENT,TCP,10.10.1.175,636,10.10.2.10,3277,emartinez
SLS-WS-075,2026-02-20T11:50:23.700Z,16959,svchost.exe,TIME_WAIT,TCP,10.10.1.175,445,211.213.223.76,3389,fthompson
SLS-WS-075,2026-02-19T08:45:21.549Z,6937,msedge.exe,LISTEN,TCP,10.10.1.175,389,0.0.0.0,0,emartinez
SLS-WS-075,2026-02-11T18:22:03.602Z,12755,System,TIME_WAIT,UDP,10.10.1.175,80,10.10.2.158,8080,svc_web
SLS-WS-075,2026-02-18T09:35:16.118Z,34595,dwm.exe,TIME_WAIT,TCP,10.10.1.175,445,10.10.1.160,636,bwilson
SLS-WS-075,2026-02-13T18:27:25.004Z,35925,outlook.exe,LISTEN,TCP,10.10.1.175,80,0.0.0.0,0,svc_web
SLS-WS-075,2026-02-18T02:53:54.062Z,37780,SearchHost.exe,SYN_SENT,TCP,10.10.1.175,636,10.10.1.148,389,idavis
SLS-WS-075,2026-02-12T20:21:37.687Z,342,cmd.exe,CLOSE_WAIT,TCP,10.10.1.175,53,110.227.137.146,636,svc_web
SLS-WS-075,2026-02-11T13:49:57.178Z,55111,csrss.exe,LISTEN,UDP,10.10.1.175,62094,0.0.0.0,0,hbrown
SLS-WS-075,2026-02-14T12:11:38.473Z,585,epicgameslauncher.exe,LISTEN,TCP,10.10.1.175,5985,0.0.0.0,0,agarcia
SLS-WS-075,2026-02-14T00:00:58.558Z,63411,RuntimeBroker.exe,TIME_WAIT,TCP,10.10.1.175,139,10.10.1.142,389,bwilson
SLS-WS-075,2026-02-14T01:21:11.983Z,27279,lsass.exe,TIME_WAIT,TCP,10.10.1.175,80,99.228.172.134,80,fthompson
SLS-WS-075,2026-02-10T09:14:04.448Z,52638,taskhostw.exe,ESTABLISHED,UDP,10.10.1.175,139,10.10.1.166,445,svc_web
SLS-WS-075,2026-02-15T01:09:31.766Z,62905,code.exe,SYN_SENT,TCP,10.10.1.175,80,132.119.162.211,443,cjohnson
SLS-WS-075,2026-02-15T23:08:21.609Z,48326,explorer.exe,SYN_SENT,TCP,10.10.1.175,445,10.10.1.106,80,hbrown
SLS-WS-075,2026-02-19T09:00:05.913Z,60346,services.exe,TIME_WAIT,TCP,10.10.1.175,139,10.10.1.109,389,svc_web
SLS-WS-075,2026-02-16T02:48:34.806Z,7277,winlogon.exe,LISTEN,TCP,10.10.1.175,445,0.0.0.0,0,cjohnson
SLS-WS-075,2026-02-13T10:47:19.611Z,33486,services.exe,TIME_WAIT,TCP,10.10.1.175,139,10.10.2.146,389,jsmith
SLS-WS-075,2026-02-10T12:42:34.671Z,22171,winlogon.exe,LISTEN,TCP,10.10.1.175,389,0.0.0.0,0,idavis
SLS-WS-075,2026-02-14T00:26:36.810Z,34863,System,ESTABLISHED,UDP,10.10.1.175,80,44.128.138.38,443,idavis
SLS-WS-075,2026-02-11T08:05:32.135Z,48865,outlook.exe,TIME_WAIT,TCP,10.10.1.175,88,216.8.239.49,3389,gwhite
DC-01,2026-02-20T16:21:26.834Z,45105,System,CLOSE_WAIT,TCP,10.10.1.10,88,10.10.1.166,445,hbrown
DC-01,2026-02-17T01:40:32.555Z,14503,code.exe,ESTABLISHED,TCP,10.10.1.10,88,10.10.3.174,3389,bwilson
DC-01,2026-02-12T12:26:48.270Z,55760,lsass.exe,ESTABLISHED,TCP,10.10.1.10,636,10.10.1.154,636,gwhite
DC-01,2026-02-15T13:09:47.458Z,19426,svchost.exe,CLOSE_WAIT,TCP,10.10.1.10,88,55.44.190.24,636,svc_sql
DC-01,2026-02-17T21:13:59.444Z,14522,SearchHost.exe,TIME_WAIT,TCP,10.10.1.10,5985,160.11.215.238,389,admin
DC-01,2026-02-13T15:05:22.567Z,17973,csrss.exe,SYN_SENT,TCP,10.10.1.10,445,44.116.241.174,88,svc_web
DC-01,2026-02-14T17:10:47.342Z,20675,System,CLOSE_WAIT,TCP,10.10.1.10,58345,120.228.165.181,389,emartinez
DC-01,2026-02-13T16:06:05.038Z,39587,dwm.exe,ESTABLISHED,TCP,10.10.1.10,8080,10.10.1.109,443,jsmith
DC-01,2026-02-15T19:16:51.263Z,56542,notepad.exe,TIME_WAIT,TCP,10.10.1.10,445,10.10.1.166,3389,bwilson
DC-01,2026-02-18T00:33:24.973Z,35960,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.1.10,445,61.204.55.47,53,svc_sql
DC-01,2026-02-14T09:00:21.573Z,49935,outlook.exe,SYN_SENT,TCP,10.10.1.10,389,10.10.2.104,88,svc_web
DC-01,2026-02-16T15:40:25.844Z,15236,explorer.exe,ESTABLISHED,TCP,10.10.1.10,88,34.112.246.200,636,cjohnson
DC-01,2026-02-13T17:58:33.268Z,33591,OneDrive.exe,SYN_SENT,TCP,10.10.1.10,88,117.23.124.183,389,idavis
DC-01,2026-02-17T12:37:45.303Z,969,dwm.exe,LISTEN,UDP,10.10.1.10,3389,0.0.0.0,0,svc_sql
DC-01,2026-02-14T01:22:08.759Z,42286,powershell.exe,ESTABLISHED,UDP,10.10.1.10,443,10.10.1.106,80,agarcia
DC-01,2026-02-15T22:20:55.421Z,6959,services.exe,SYN_SENT,UDP,10.10.1.10,636,10.10.2.140,636,agarcia
DC-01,2026-02-20T15:37:12.155Z,7560,notepad.exe,CLOSE_WAIT,TCP,10.10.1.10,52507,40.116.165.218,636,emartinez
DC-01,2026-02-12T18:01:48.688Z,63900,SearchHost.exe,SYN_SENT,TCP,10.10.1.10,636,10.224.230.159,8080,dlee
DC-01,2026-02-18T20:51:02.497Z,27838,spoolsv.exe,TIME_WAIT,TCP,10.10.1.10,53,10.10.2.161,3389,svc_backup
DC-01,2026-02-14T00:46:00.511Z,62025,notepad.exe,ESTABLISHED,TCP,10.10.1.10,135,35.163.245.56,443,gwhite
DC-01,2026-02-14T21:47:44.021Z,6945,OneDrive.exe,LISTEN,TCP,10.10.1.10,389,0.0.0.0,0,hbrown
DC-01,2026-02-18T23:27:59.728Z,21820,System,LISTEN,TCP,10.10.1.10,88,0.0.0.0,0,hbrown
DC-01,2026-02-16T20:42:25.922Z,16765,OneDrive.exe,TIME_WAIT,UDP,10.10.1.10,135,45.153.46.97,53,hbrown
DC-01,2026-02-17T21:47:19.889Z,22734,lsass.exe,CLOSE_WAIT,TCP,10.10.1.10,135,10.10.2.161,8080,svc_backup
DC-01,2026-02-10T11:16:55.137Z,10688,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.10,389,10.10.1.109,53,bwilson
DC-01,2026-02-14T08:39:03.574Z,58385,MsMpEng.exe,ESTABLISHED,TCP,10.10.1.10,389,10.10.1.139,389,jsmith
DC-01,2026-02-13T08:09:13.970Z,41841,cmd.exe,SYN_SENT,UDP,10.10.1.10,65105,116.147.13.189,88,cjohnson
DC-01,2026-02-10T15:23:33.136Z,47679,svchost.exe,LISTEN,TCP,10.10.1.10,636,0.0.0.0,0,admin
DC-01,2026-02-14T06:16:40.421Z,30225,OneDrive.exe,LISTEN,TCP,10.10.1.10,5985,0.0.0.0,0,agarcia
DC-01,2026-02-18T18:49:36.955Z,60505,SearchHost.exe,CLOSE_WAIT,TCP,10.10.1.10,443,1.71.160.192,8080,jsmith
DC-01,2026-02-16T11:05:44.787Z,2696,outlook.exe,LISTEN,UDP,10.10.1.10,88,0.0.0.0,0,agarcia
DC-01,2026-02-13T17:50:58.048Z,41758,code.exe,CLOSE_WAIT,TCP,10.10.1.10,5985,10.10.2.161,443,dlee
DC-01,2026-02-19T04:51:59.563Z,59604,SearchHost.exe,ESTABLISHED,TCP,10.10.1.10,80,158.84.108.63,445,emartinez
DC-01,2026-02-16T01:23:46.924Z,16243,notepad.exe,LISTEN,TCP,10.10.1.10,443,0.0.0.0,0,gwhite
DC-01,2026-02-19T18:08:56.311Z,25094,SearchHost.exe,LISTEN,TCP,10.10.1.10,636,0.0.0.0,0,idavis
DC-01,2026-02-10T19:14:43.077Z,14277,RuntimeBroker.exe,SYN_SENT,UDP,10.10.1.10,8080,176.224.192.218,20595,svc_web
DC-01,2026-02-19T23:20:23.637Z,16865,System,TIME_WAIT,TCP,10.10.1.10,636,10.10.1.127,445,hbrown
DC-02,2026-02-19T23:17:16.296Z,18187,teams.exe,SYN_SENT,TCP,10.10.2.10,88,1.153.240.194,445,fthompson
DC-02,2026-02-15T02:29:49.593Z,33985,OneDrive.exe,ESTABLISHED,TCP,10.10.2.10,139,149.101.76.92,18110,gwhite
DC-02,2026-02-10T10:01:09.505Z,1015,taskhostw.exe,LISTEN,TCP,10.10.2.10,636,0.0.0.0,0,idavis
DC-02,2026-02-10T22:56:37.086Z,47488,powershell.exe,CLOSE_WAIT,TCP,10.10.2.10,5985,10.10.3.168,80,svc_backup
DC-02,2026-02-15T08:20:42.976Z,27137,powershell.exe,ESTABLISHED,TCP,10.10.2.10,88,10.10.1.109,88,bwilson
DC-02,2026-02-11T16:13:06.525Z,49971,svchost.exe,CLOSE_WAIT,TCP,10.10.2.10,53,10.10.2.152,445,gwhite
DC-02,2026-02-12T04:48:05.269Z,48796,lsass.exe,SYN_SENT,TCP,10.10.2.10,5985,10.10.2.110,445,cjohnson
DC-02,2026-02-19T20:52:41.197Z,9150,explorer.exe,ESTABLISHED,UDP,10.10.2.10,80,48.221.171.251,53,bwilson
DC-02,2026-02-13T15:56:22.652Z,38689,msedge.exe,ESTABLISHED,TCP,10.10.2.10,80,10.10.3.114,445,idavis
DC-02,2026-02-20T15:48:12.420Z,15311,msedge.exe,CLOSE_WAIT,TCP,10.10.2.10,135,10.10.1.118,80,svc_web
DC-02,2026-02-14T06:26:42.649Z,43027,outlook.exe,LISTEN,UDP,10.10.2.10,3389,0.0.0.0,0,jsmith
DC-02,2026-02-11T09:15:25.874Z,15030,MsMpEng.exe,SYN_SENT,TCP,10.10.2.10,443,195.106.131.137,15679,admin
DC-02,2026-02-17T09:49:07.420Z,21940,teams.exe,SYN_SENT,TCP,10.10.2.10,52977,10.10.2.10,88,bwilson
DC-02,2026-02-15T15:59:58.945Z,28241,teams.exe,SYN_SENT,TCP,10.10.2.10,58930,206.152.226.110,18306,cjohnson
DC-02,2026-02-16T01:32:11.818Z,41065,explorer.exe,SYN_SENT,TCP,10.10.2.10,5985,10.10.3.132,44400,emartinez
DC-02,2026-02-11T07:01:43.642Z,45212,winlogon.exe,LISTEN,TCP,10.10.2.10,62415,0.0.0.0,0,bwilson
DC-02,2026-02-14T16:07:20.200Z,6996,SearchHost.exe,TIME_WAIT,TCP,10.10.2.10,139,125.199.80.95,88,dlee
DC-02,2026-02-17T14:29:32.274Z,10536,RuntimeBroker.exe,LISTEN,UDP,10.10.2.10,88,0.0.0.0,0,dlee
DC-02,2026-02-16T01:51:39.848Z,22322,cmd.exe,CLOSE_WAIT,TCP,10.10.2.10,389,10.10.1.175,9365,svc_backup
DC-02,2026-02-11T21:41:01.091Z,6867,notepad.exe,LISTEN,TCP,10.10.2.10,88,0.0.0.0,0,emartinez
DC-02,2026-02-13T18:07:51.255Z,49191,teams.exe,CLOSE_WAIT,TCP,10.10.2.10,636,10.10.2.128,636,fthompson
DC-02,2026-02-18T04:00:45.680Z,49836,smss.exe,ESTABLISHED,TCP,10.10.2.10,5985,188.75.151.145,41388,hbrown
DC-02,2026-02-11T06:05:46.044Z,16146,chrome.exe,CLOSE_WAIT,TCP,10.10.2.10,135,173.42.51.101,389,jsmith
DC-02,2026-02-14T17:54:11.058Z,31686,code.exe,CLOSE_WAIT,UDP,10.10.2.10,80,10.10.2.113,36171,hbrown
DC-02,2026-02-16T12:02:17.931Z,19619,svchost.exe,SYN_SENT,UDP,10.10.2.10,636,10.10.2.116,3389,svc_sql
DC-02,2026-02-18T03:09:58.729Z,54583,SearchHost.exe,LISTEN,TCP,10.10.2.10,445,0.0.0.0,0,admin
DC-02,2026-02-14T10:51:10.448Z,37629,OneDrive.exe,TIME_WAIT,TCP,10.10.2.10,135,10.10.1.118,3389,dlee
DC-02,2026-02-15T00:52:28.047Z,44155,MsMpEng.exe,ESTABLISHED,TCP,10.10.2.10,389,106.196.149.146,88,jsmith
DC-02,2026-02-16T14:01:14.111Z,2253,System,LISTEN,UDP,10.10.2.10,135,0.0.0.0,0,agarcia
DC-02,2026-02-14T12:20:16.895Z,47182,msedge.exe,LISTEN,TCP,10.10.2.10,443,0.0.0.0,0,cjohnson
DC-02,2026-02-19T00:18:27.683Z,43143,cmd.exe,SYN_SENT,TCP,10.10.2.10,135,58.118.139.249,88,svc_sql
DC-02,2026-02-15T11:24:21.424Z,14289,MsMpEng.exe,TIME_WAIT,TCP,10.10.2.10,139,12.135.45.187,88,jsmith
DC-02,2026-02-17T04:02:21.468Z,60570,cmd.exe,SYN_SENT,TCP,10.10.2.10,5985,3.144.42.198,445,bwilson
FILE-01,2026-02-11T20:05:41.514Z,62672,System,CLOSE_WAIT,TCP,10.10.1.11,5985,140.16.37.225,445,svc_web
FILE-01,2026-02-10T23:20:45.068Z,31429,cmd.exe,SYN_SENT,TCP,10.10.1.11,53,67.79.30.54,88,idavis
FILE-01,2026-02-18T13:40:44.121Z,7702,msedge.exe,CLOSE_WAIT,TCP,10.10.1.11,135,10.10.1.142,443,cjohnson
FILE-01,2026-02-16T02:54:40.864Z,43039,OneDrive.exe,ESTABLISHED,TCP,10.10.1.11,80,35.155.237.172,636,agarcia
FILE-01,2026-02-13T10:46:06.556Z,9059,msedge.exe,LISTEN,TCP,10.10.1.11,389,0.0.0.0,0,gwhite
FILE-01,2026-02-11T01:56:12.835Z,36414,chrome.exe,SYN_SENT,UDP,10.10.1.11,8080,10.10.3.138,13313,svc_sql
FILE-01,2026-02-13T06:59:22.999Z,3238,explorer.exe,CLOSE_WAIT,TCP,10.10.1.11,389,98.62.146.44,53,agarcia
FILE-01,2026-02-18T19:32:13.880Z,22194,chrome.exe,TIME_WAIT,UDP,10.10.1.11,80,10.10.1.109,445,bwilson
FILE-01,2026-02-16T13:18:09.619Z,40311,teams.exe,CLOSE_WAIT,TCP,10.10.1.11,80,10.10.1.109,636,dlee
FILE-01,2026-02-14T20:10:17.303Z,22897,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.1.11,53,146.113.29.8,53,admin
EXCH-01,2026-02-14T13:16:24.251Z,1796,RuntimeBroker.exe,SYN_SENT,TCP,10.10.1.12,445,10.10.3.150,53,dlee
EXCH-01,2026-02-15T15:18:39.619Z,62734,svchost.exe,CLOSE_WAIT,TCP,10.10.1.12,443,76.140.56.215,88,fthompson
EXCH-01,2026-02-16T13:52:34.553Z,44160,cmd.exe,ESTABLISHED,TCP,10.10.1.12,63736,10.10.1.13,636,dlee
EXCH-01,2026-02-19T09:32:43.463Z,43327,msedge.exe,CLOSE_WAIT,UDP,10.10.1.12,80,121.208.86.50,53,bwilson
EXCH-01,2026-02-19T08:34:55.376Z,34572,outlook.exe,SYN_SENT,UDP,10.10.1.12,445,10.10.1.169,53,cjohnson
EXCH-01,2026-02-18T16:38:00.392Z,15053,services.exe,SYN_SENT,TCP,10.10.1.12,80,10.10.3.171,30670,emartinez
EXCH-01,2026-02-16T12:00:43.808Z,60624,msedge.exe,ESTABLISHED,UDP,10.10.1.12,389,8.160.99.82,636,svc_web
EXCH-01,2026-02-10T12:17:54.259Z,4870,lsass.exe,TIME_WAIT,TCP,10.10.1.12,8080,143.20.237.135,636,jsmith
EXCH-01,2026-02-13T07:58:40.088Z,36516,msedge.exe,SYN_SENT,TCP,10.10.1.12,135,78.39.170.224,445,fthompson
EXCH-01,2026-02-11T05:15:02.204Z,33519,notepad.exe,LISTEN,TCP,10.10.1.12,445,0.0.0.0,0,admin
EXCH-01,2026-02-18T05:00:07.865Z,32718,services.exe,LISTEN,TCP,10.10.1.12,135,0.0.0.0,0,hbrown
EXCH-01,2026-02-11T20:28:38.070Z,14643,svchost.exe,LISTEN,TCP,10.10.1.12,389,0.0.0.0,0,svc_web
EXCH-01,2026-02-19T20:44:29.914Z,51496,OneDrive.exe,CLOSE_WAIT,TCP,10.10.1.12,636,10.10.2.143,53,emartinez
EXCH-01,2026-02-14T01:49:17.495Z,10141,notepad.exe,ESTABLISHED,TCP,10.10.1.12,445,148.0.214.155,445,hbrown
EXCH-01,2026-02-15T01:05:12.394Z,18015,System,CLOSE_WAIT,TCP,10.10.1.12,443,10.10.1.154,3389,emartinez
EXCH-01,2026-02-11T01:16:40.905Z,38618,explorer.exe,ESTABLISHED,TCP,10.10.1.12,445,10.10.3.129,636,hbrown
EXCH-01,2026-02-15T07:43:39.567Z,26214,RuntimeBroker.exe,LISTEN,TCP,10.10.1.12,135,0.0.0.0,0,idavis
EXCH-01,2026-02-15T20:52:33.385Z,44357,spoolsv.exe,SYN_SENT,TCP,10.10.1.12,139,10.10.1.124,80,bwilson
EXCH-01,2026-02-13T12:57:12.790Z,47295,outlook.exe,TIME_WAIT,UDP,10.10.1.12,139,10.10.3.111,8080,emartinez
EXCH-01,2026-02-19T00:31:26.718Z,37003,SearchHost.exe,SYN_SENT,TCP,10.10.1.12,53,87.161.234.73,8080,svc_sql
EXCH-01,2026-02-13T08:46:44.991Z,11980,teams.exe,TIME_WAIT,UDP,10.10.1.12,8080,10.10.2.119,45303,cjohnson
EXCH-01,2026-02-19T18:12:18.940Z,45330,taskhostw.exe,SYN_SENT,UDP,10.10.1.12,135,10.10.1.118,8080,idavis
EXCH-01,2026-02-20T05:49:10.631Z,39437,csrss.exe,LISTEN,TCP,10.10.1.12,139,0.0.0.0,0,bwilson
EXCH-01,2026-02-14T07:36:44.762Z,13857,svchost.exe,TIME_WAIT,TCP,10.10.1.12,8080,139.90.61.92,88,gwhite
EXCH-01,2026-02-13T11:31:03.318Z,51233,svchost.exe,CLOSE_WAIT,UDP,10.10.1.12,3389,193.16.110.32,80,svc_web
EXCH-01,2026-02-17T07:51:21.987Z,3294,teams.exe,LISTEN,TCP,10.10.1.12,443,0.0.0.0,0,agarcia
EXCH-01,2026-02-12T16:25:23.631Z,39696,spoolsv.exe,LISTEN,UDP,10.10.1.12,88,0.0.0.0,0,gwhite
EXCH-01,2026-02-14T06:08:35.634Z,47151,explorer.exe,ESTABLISHED,TCP,10.10.1.12,445,182.174.220.26,53,admin
EXCH-01,2026-02-13T07:24:49.202Z,51194,winlogon.exe,ESTABLISHED,TCP,10.10.1.12,3389,154.158.1.187,80,emartinez
EXCH-01,2026-02-17T02:43:20.608Z,30818,code.exe,LISTEN,UDP,10.10.1.12,5985,0.0.0.0,0,gwhite
EXCH-01,2026-02-16T17:44:04.871Z,62030,System,ESTABLISHED,TCP,10.10.1.12,5985,10.10.3.132,443,svc_sql
EXCH-01,2026-02-13T22:09:00.765Z,43277,MsMpEng.exe,SYN_SENT,TCP,10.10.1.12,389,10.10.1.154,80,gwhite
EXCH-01,2026-02-14T13:41:41.512Z,4961,lsass.exe,ESTABLISHED,UDP,10.10.1.12,50020,10.10.1.142,80,svc_sql
WEB-01,2026-02-12T11:07:27.994Z,16226,powershell.exe,ESTABLISHED,TCP,10.10.3.10,8080,10.10.2.11,88,bwilson
WEB-01,2026-02-14T03:54:30.849Z,14561,MsMpEng.exe,CLOSE_WAIT,TCP,10.10.3.10,88,10.10.1.13,636,gwhite
WEB-01,2026-02-10T13:23:36.102Z,1995,notepad.exe,LISTEN,TCP,10.10.3.10,135,0.0.0.0,0,svc_backup
WEB-01,2026-02-17T15:45:35.109Z,4893,taskhostw.exe,LISTEN,TCP,10.10.3.10,135,0.0.0.0,0,cjohnson
WEB-01,2026-02-17T04:46:39.810Z,13318,lsass.exe,TIME_WAIT,TCP,10.10.3.10,5985,10.10.3.162,389,svc_sql
WEB-01,2026-02-18T19:37:52.603Z,52779,lsass.exe,TIME_WAIT,TCP,10.10.3.10,3389,10.10.2.113,80,emartinez
WEB-01,2026-02-13T14:58:50.409Z,22737,lsass.exe,CLOSE_WAIT,TCP,10.10.3.10,5985,10.10.2.119,445,cjohnson
WEB-01,2026-02-15T15:49:38.354Z,38679,powershell.exe,CLOSE_WAIT,TCP,10.10.3.10,3389,10.10.3.153,389,fthompson
WEB-01,2026-02-16T08:38:55.015Z,63715,cmd.exe,SYN_SENT,TCP,10.10.3.10,443,10.10.1.118,88,idavis
WEB-01,2026-02-17T17:44:25.740Z,11852,SearchHost.exe,SYN_SENT,TCP,10.10.3.10,445,10.10.3.117,88,idavis
WEB-01,2026-02-16T07:52:55.223Z,19836,taskhostw.exe,ESTABLISHED,TCP,10.10.3.10,88,200.110.131.176,8080,fthompson
SQL-01,2026-02-15T03:22:02.172Z,64585,teams.exe,LISTEN,UDP,10.10.2.11,8080,0.0.0.0,0,svc_web
SQL-01,2026-02-15T02:44:19.920Z,13443,OneDrive.exe,ESTABLISHED,TCP,10.10.2.11,8080,10.10.1.115,80,cjohnson
SQL-01,2026-02-16T02:52:30.514Z,55207,dwm.exe,LISTEN,TCP,10.10.2.11,8080,0.0.0.0,0,bwilson
SQL-01,2026-02-10T10:56:15.644Z,13019,code.exe,CLOSE_WAIT,UDP,10.10.2.11,88,10.10.1.151,389,fthompson
SQL-01,2026-02-10T09:05:09.863Z,4514,MsMpEng.exe,LISTEN,TCP,10.10.2.11,135,0.0.0.0,0,bwilson
SQL-01,2026-02-14T17:42:53.647Z,29680,outlook.exe,ESTABLISHED,TCP,10.10.2.11,53,69.64.198.210,3389,admin
SQL-01,2026-02-16T15:38:50.639Z,18845,svchost.exe,SYN_SENT,UDP,10.10.2.11,8080,10.10.3.102,445,fthompson
SQL-01,2026-02-13T05:58:58.562Z,46970,services.exe,LISTEN,TCP,10.10.2.11,5985,0.0.0.0,0,svc_web
SQL-01,2026-02-14T04:23:52.063Z,56930,spotify.exe,LISTEN,UDP,10.10.2.11,88,0.0.0.0,0,agarcia
SQL-01,2026-02-17T18:50:55.682Z,58726,code.exe,TIME_WAIT,TCP,10.10.2.11,443,10.10.1.115,636,svc_backup
SQL-01,2026-02-13T23:08:33.858Z,25328,System,ESTABLISHED,UDP,10.10.2.11,139,10.10.3.108,443,hbrown
SQL-01,2026-02-16T22:34:34.866Z,6852,MsMpEng.exe,LISTEN,TCP,10.10.2.11,53,0.0.0.0,0,dlee
SQL-01,2026-02-15T17:04:47.662Z,20924,code.exe,CLOSE_WAIT,TCP,10.10.2.11,3389,91.25.100.11,88,fthompson
SQL-01,2026-02-15T19:46:43.748Z,36718,msedge.exe,CLOSE_WAIT,TCP,10.10.2.11,80,24.19.79.228,27552,admin
SQL-01,2026-02-16T06:11:15.199Z,30903,winlogon.exe,ESTABLISHED,TCP,10.10.2.11,443,10.10.2.167,443,svc_web
SQL-01,2026-02-19T08:12:33.768Z,21912,csrss.exe,TIME_WAIT,TCP,10.10.2.11,389,51.81.211.17,53,hbrown
SQL-01,2026-02-20T05:57:49.793Z,64809,code.exe,TIME_WAIT,TCP,10.10.2.11,88,10.10.3.120,53,cjohnson
SQL-01,2026-02-10T18:49:42.917Z,44750,smss.exe,SYN_SENT,UDP,10.10.2.11,445,10.10.1.160,636,emartinez
SQL-01,2026-02-13T21:14:35.149Z,10427,cmd.exe,CLOSE_WAIT,TCP,10.10.2.11,88,223.106.2.209,636,svc_web
SQL-01,2026-02-19T10:41:49.030Z,24388,winlogon.exe,CLOSE_WAIT,TCP,10.10.2.11,139,82.35.189.208,8080,dlee
SQL-01,2026-02-16T02:53:32.897Z,46959,powershell.exe,ESTABLISHED,TCP,10.10.2.11,135,10.10.3.102,3389,svc_web
SQL-01,2026-02-11T16:04:04.500Z,48104,winlogon.exe,CLOSE_WAIT,TCP,10.10.2.11,636,10.10.3.165,53,gwhite
SQL-01,2026-02-14T22:38:46.840Z,5535,SearchHost.exe,LISTEN,TCP,10.10.2.11,80,0.0.0.0,0,bwilson
SQL-01,2026-02-13T09:48:02.952Z,19122,discord.exe,LISTEN,TCP,10.10.2.11,135,0.0.0.0,0,gwhite
SQL-01,2026-02-17T09:27:50.147Z,38278,MsMpEng.exe,ESTABLISHED,TCP,10.10.2.11,636,10.10.3.10,443,admin
SQL-01,2026-02-16T15:48:50.091Z,47510,SearchHost.exe,TIME_WAIT,TCP,10.10.2.11,3389,10.10.3.159,80,admin
SQL-01,2026-02-10T12:21:58.862Z,46853,powershell.exe,LISTEN,TCP,10.10.2.11,80,0.0.0.0,0,emartinez
SQL-01,2026-02-18T11:04:58.192Z,41003,notepad.exe,LISTEN,TCP,10.10.2.11,135,0.0.0.0,0,cjohnson
SQL-01,2026-02-13T00:35:35.453Z,64592,teams.exe,LISTEN,TCP,10.10.2.11,51640,0.0.0.0,0,idavis
SQL-01,2026-02-11T12:34:20.456Z,59598,csrss.exe,ESTABLISHED,TCP,10.10.2.11,8080,10.10.1.115,33322,emartinez
SQL-01,2026-02-13T23:09:44.153Z,37574,OneDrive.exe,ESTABLISHED,TCP,10.10.2.11,5985,182.77.214.3,88,svc_backup
PROXY-01,2026-02-19T15:36:27.808Z,39429,csrss.exe,TIME_WAIT,TCP,10.10.1.13,53,219.104.112.82,389,bwilson
PROXY-01,2026-02-17T09:41:40.802Z,15832,smss.exe,CLOSE_WAIT,TCP,10.10.1.13,139,10.10.1.13,445,svc_sql
PROXY-01,2026-02-15T22:40:53.444Z,17392,code.exe,ESTABLISHED,TCP,10.10.1.13,389,105.216.186.38,88,svc_web
PROXY-01,2026-02-11T05:35:24.625Z,43782,teams.exe,CLOSE_WAIT,UDP,10.10.1.13,80,10.10.2.170,80,svc_backup
PROXY-01,2026-02-14T12:09:39.952Z,42809,svchost.exe,TIME_WAIT,TCP,10.10.1.13,53,10.10.2.119,443,cjohnson
PROXY-01,2026-02-19T03:15:14.172Z,59709,spoolsv.exe,LISTEN,UDP,10.10.1.13,5985,0.0.0.0,0,cjohnson
PROXY-01,2026-02-10T22:12:57.981Z,2571,OneDrive.exe,LISTEN,TCP,10.10.1.13,80,0.0.0.0,0,idavis
PROXY-01,2026-02-20T09:47:38.874Z,11469,discord.exe,SYN_SENT,TCP,10.10.1.13,443,10.10.2.101,636,hbrown
PROXY-01,2026-02-17T16:34:09.406Z,41607,powershell.exe,TIME_WAIT,TCP,10.10.1.13,3389,140.92.25.160,445,gwhite
PROXY-01,2026-02-15T21:26:50.630Z,42219,chrome.exe,LISTEN,TCP,10.10.1.13,445,0.0.0.0,0,jsmith
PROXY-01,2026-02-11T00:41:41.842Z,56005,chrome.exe,LISTEN,UDP,10.10.1.13,53,0.0.0.0,0,svc_web
PROXY-01,2026-02-17T10:13:12.589Z,62154,notepad.exe,CLOSE_WAIT,TCP,10.10.1.13,80,89.112.37.213,53,cjohnson
PROXY-01,2026-02-20T14:51:31.888Z,49055,powershell.exe,ESTABLISHED,TCP,10.10.1.13,8080,52.229.148.251,37573,dlee
PROXY-01,2026-02-14T18:47:06.718Z,45325,lsass.exe,SYN_SENT,UDP,10.10.1.13,5985,10.10.3.114,389,svc_web
PROXY-01,2026-02-19T18:30:46.858Z,43797,winlogon.exe,CLOSE_WAIT,TCP,10.10.1.13,389,10.10.2.131,636,emartinez
PROXY-01,2026-02-18T23:42:02.268Z,33843,utorrent.exe,CLOSE_WAIT,UDP,10.10.1.13,5985,10.10.3.156,636,jsmith
PROXY-01,2026-02-20T05:24:02.118Z,64948,OneDrive.exe,LISTEN,TCP,10.10.1.13,443,0.0.0.0,0,svc_web
PROXY-01,2026-02-13T21:20:58.560Z,31335,teams.exe,SYN_SENT,TCP,10.10.1.13,8080,75.123.162.145,53,gwhite
PROXY-01,2026-02-10T14:09:33.066Z,2021,lsass.exe,TIME_WAIT,TCP,10.10.1.13,5985,10.10.1.172,636,agarcia
PROXY-01,2026-02-20T06:20:57.646Z,9214,notepad.exe,ESTABLISHED,TCP,10.10.1.13,52735,100.168.247.142,443,idavis
PROXY-01,2026-02-10T17:50:40.021Z,57315,RuntimeBroker.exe,CLOSE_WAIT,TCP,10.10.1.13,53,10.10.1.115,88,admin