ThreatHunt/backend/tests/test_csvs/01_netstat_connections.csv at 365cf87c906f244435851cca0bec89e22c99eae0

mirror of https://github.com/mblanke/ThreatHunt.git synced 2026-03-01 05:50:21 -05:00

Files

2026-02-20 14:32:42 -05:00

209 KiB

Raw Blame History

1	Hostname	Timestamp	Pid	Name	Status	Protocol	Laddr.IP	Laddr.Port	Raddr.IP	Raddr.Port	Username
2	HR-WS-001	2026-02-11T09:37:25.658Z	48640	cmd.exe	LISTEN	UDP	10.10.2.101	636	0.0.0.0	0	hbrown
3	HR-WS-001	2026-02-16T11:18:59.115Z	53146	lsass.exe	ESTABLISHED	TCP	10.10.2.101	135	10.10.2.170	389	svc_web
4	HR-WS-001	2026-02-11T22:52:11.549Z	62831	steam.exe	LISTEN	TCP	10.10.2.101	139	0.0.0.0	0	svc_sql
5	HR-WS-001	2026-02-11T03:42:00.178Z	19313	chrome.exe	CLOSE_WAIT	TCP	10.10.2.101	3389	155.135.22.187	88	svc_web
6	HR-WS-001	2026-02-14T07:01:53.602Z	29814	RuntimeBroker.exe	SYN_SENT	UDP	10.10.2.101	80	170.116.148.253	443	admin
7	HR-WS-001	2026-02-13T03:29:13.044Z	60746	teams.exe	TIME_WAIT	TCP	10.10.2.101	389	69.36.87.137	88	admin
8	HR-WS-001	2026-02-19T11:05:30.863Z	20722	powershell.exe	TIME_WAIT	TCP	10.10.2.101	80	207.161.205.69	60867	cjohnson
9	HR-WS-001	2026-02-20T17:19:53.200Z	9165	SearchHost.exe	CLOSE_WAIT	UDP	10.10.2.101	445	10.10.1.175	3389	hbrown
10	HR-WS-001	2026-02-20T10:46:10.539Z	56512	explorer.exe	ESTABLISHED	UDP	10.10.2.101	54394	10.10.2.149	445	jsmith
11	HR-WS-001	2026-02-18T06:29:25.979Z	33371	msedge.exe	SYN_SENT	TCP	10.10.2.101	443	10.10.2.101	636	agarcia
12	HR-WS-001	2026-02-20T00:16:28.754Z	57687	notepad.exe	SYN_SENT	TCP	10.10.2.101	445	10.10.1.142	443	svc_web
13	HR-WS-001	2026-02-20T04:42:43.811Z	10921	powershell.exe	ESTABLISHED	UDP	10.10.2.101	443	188.248.35.251	389	dlee
14	HR-WS-001	2026-02-12T16:10:27.603Z	22256	services.exe	CLOSE_WAIT	UDP	10.10.2.101	636	10.10.2.167	3389	jsmith
15	HR-WS-001	2026-02-12T19:30:04.170Z	43942	powershell.exe	SYN_SENT	UDP	10.10.2.101	443	10.10.3.105	636	gwhite
16	HR-WS-001	2026-02-14T00:34:27.809Z	27041	outlook.exe	SYN_SENT	TCP	10.10.2.101	135	201.242.208.49	88	gwhite
17	FIN-WS-002	2026-02-12T05:52:19.232Z	30418	spoolsv.exe	ESTABLISHED	TCP	10.10.3.102	636	10.10.2.125	88	cjohnson
18	FIN-WS-002	2026-02-15T08:20:22.576Z	56765	chrome.exe	CLOSE_WAIT	TCP	10.10.3.102	80	167.7.47.238	389	fthompson
19	FIN-WS-002	2026-02-13T10:10:37.042Z	63585	teams.exe	CLOSE_WAIT	TCP	10.10.3.102	139	10.10.1.172	3389	jsmith
20	FIN-WS-002	2026-02-11T01:07:49.199Z	4553	System	ESTABLISHED	TCP	10.10.3.102	80	150.244.80.15	8080	admin
21	FIN-WS-002	2026-02-12T11:03:53.279Z	47036	SearchHost.exe	ESTABLISHED	TCP	10.10.3.102	88	10.10.1.175	445	emartinez
22	FIN-WS-002	2026-02-20T00:15:16.498Z	61424	SearchHost.exe	LISTEN	TCP	10.10.3.102	3389	0.0.0.0	0	agarcia
23	FIN-WS-002	2026-02-14T04:22:54.379Z	10438	services.exe	SYN_SENT	TCP	10.10.3.102	53	55.135.67.239	3389	gwhite
24	FIN-WS-002	2026-02-18T01:36:15.015Z	10287	OneDrive.exe	TIME_WAIT	TCP	10.10.3.102	389	10.10.1.118	443	dlee
25	FIN-WS-002	2026-02-10T19:01:18.085Z	21959	code.exe	TIME_WAIT	UDP	10.10.3.102	53	10.10.1.13	445	svc_sql
26	FIN-WS-002	2026-02-10T10:25:02.729Z	5031	cmd.exe	LISTEN	TCP	10.10.3.102	53	0.0.0.0	0	svc_backup
27	FIN-WS-002	2026-02-17T06:44:00.069Z	23278	System	ESTABLISHED	TCP	10.10.3.102	5985	10.10.1.106	3389	svc_sql
28	SLS-WS-003	2026-02-10T14:11:47.725Z	48371	outlook.exe	LISTEN	UDP	10.10.1.103	5985	0.0.0.0	0	emartinez
29	SLS-WS-003	2026-02-17T15:19:10.369Z	25170	lsass.exe	LISTEN	TCP	10.10.1.103	54368	0.0.0.0	0	svc_web
30	SLS-WS-003	2026-02-13T12:17:51.780Z	52223	winlogon.exe	LISTEN	UDP	10.10.1.103	3389	0.0.0.0	0	svc_web
31	SLS-WS-003	2026-02-19T08:05:17.647Z	63466	svchost.exe	LISTEN	TCP	10.10.1.103	139	0.0.0.0	0	svc_sql
32	SLS-WS-003	2026-02-14T20:38:27.382Z	47845	spoolsv.exe	SYN_SENT	TCP	10.10.1.103	80	30.133.91.149	8128	svc_sql
33	SLS-WS-003	2026-02-17T11:42:51.432Z	61721	services.exe	SYN_SENT	TCP	10.10.1.103	88	49.130.22.182	636	svc_backup
34	SLS-WS-003	2026-02-13T17:32:44.614Z	45792	code.exe	TIME_WAIT	TCP	10.10.1.103	389	10.10.1.139	88	dlee
35	SLS-WS-003	2026-02-14T19:28:19.334Z	38109	code.exe	CLOSE_WAIT	TCP	10.10.1.103	88	10.10.2.101	3389	idavis
36	SLS-WS-003	2026-02-17T08:11:56.103Z	14822	csrss.exe	CLOSE_WAIT	TCP	10.10.1.103	53	10.10.1.166	3389	svc_sql
37	SLS-WS-003	2026-02-15T11:35:39.452Z	16089	svchost.exe	ESTABLISHED	UDP	10.10.1.103	88	218.37.233.107	88	bwilson
38	SLS-WS-003	2026-02-18T16:21:14.941Z	43850	svchost.exe	ESTABLISHED	TCP	10.10.1.103	445	206.237.25.143	8080	hbrown
39	SLS-WS-003	2026-02-18T07:27:12.315Z	34263	services.exe	TIME_WAIT	TCP	10.10.1.103	53	115.81.243.116	445	gwhite
40	SLS-WS-003	2026-02-12T17:48:55.331Z	45578	cmd.exe	CLOSE_WAIT	TCP	10.10.1.103	135	70.171.163.229	8080	bwilson
41	SLS-WS-003	2026-02-20T04:30:55.830Z	1380	chrome.exe	CLOSE_WAIT	TCP	10.10.1.103	53	10.10.1.154	60323	svc_web
42	SLS-WS-003	2026-02-13T04:14:01.780Z	31927	smss.exe	CLOSE_WAIT	TCP	10.10.1.103	3389	77.199.214.138	3389	jsmith
43	SLS-WS-003	2026-02-11T17:55:29.538Z	30357	MsMpEng.exe	CLOSE_WAIT	UDP	10.10.1.103	445	160.13.201.152	88	bwilson
44	SLS-WS-003	2026-02-15T05:34:36.152Z	49188	SearchHost.exe	TIME_WAIT	UDP	10.10.1.103	3389	10.10.1.154	443	hbrown
45	SLS-WS-003	2026-02-10T15:45:26.998Z	16305	RuntimeBroker.exe	LISTEN	TCP	10.10.1.103	50471	0.0.0.0	0	cjohnson
46	SLS-WS-003	2026-02-17T07:21:52.960Z	37060	services.exe	LISTEN	UDP	10.10.1.103	8080	0.0.0.0	0	cjohnson
47	SLS-WS-003	2026-02-16T07:56:57.055Z	59608	cmd.exe	TIME_WAIT	UDP	10.10.1.103	52905	210.83.159.28	445	fthompson
48	SLS-WS-003	2026-02-17T14:17:53.702Z	19864	OneDrive.exe	LISTEN	TCP	10.10.1.103	443	0.0.0.0	0	svc_web
49	SLS-WS-003	2026-02-18T21:34:57.826Z	7016	msedge.exe	SYN_SENT	TCP	10.10.1.103	53	110.189.35.130	88	fthompson
50	SLS-WS-003	2026-02-18T23:40:57.917Z	5779	spoolsv.exe	CLOSE_WAIT	UDP	10.10.1.103	445	10.10.3.156	3389	dlee
51	SLS-WS-003	2026-02-13T21:05:04.958Z	57792	powershell.exe	CLOSE_WAIT	TCP	10.10.1.103	3389	8.253.166.47	445	idavis
52	SLS-WS-003	2026-02-15T00:02:37.094Z	1230	cmd.exe	SYN_SENT	TCP	10.10.1.103	443	10.10.2.131	389	agarcia
53	SLS-WS-003	2026-02-16T02:22:05.659Z	22628	SearchHost.exe	LISTEN	TCP	10.10.1.103	8080	0.0.0.0	0	fthompson
54	SLS-WS-003	2026-02-20T05:43:09.804Z	45330	System	TIME_WAIT	TCP	10.10.1.103	139	10.10.2.125	636	bwilson
55	SLS-WS-003	2026-02-17T17:00:16.637Z	8395	winlogon.exe	TIME_WAIT	TCP	10.10.1.103	443	214.99.151.59	80	dlee
56	SLS-WS-003	2026-02-14T22:07:01.918Z	12182	explorer.exe	SYN_SENT	TCP	10.10.1.103	389	10.10.3.102	389	jsmith
57	SLS-WS-003	2026-02-11T13:36:46.405Z	50198	winlogon.exe	ESTABLISHED	TCP	10.10.1.103	8080	10.10.2.173	3389	fthompson
58	SLS-WS-003	2026-02-19T19:07:33.939Z	19587	services.exe	LISTEN	TCP	10.10.1.103	8080	0.0.0.0	0	svc_web
59	SLS-WS-003	2026-02-11T23:15:51.384Z	11491	lsass.exe	TIME_WAIT	TCP	10.10.1.103	88	10.10.2.128	443	hbrown
60	SLS-WS-003	2026-02-19T22:58:39.940Z	51731	svchost.exe	CLOSE_WAIT	TCP	10.10.1.103	139	10.10.2.137	3389	svc_sql
61	SLS-WS-003	2026-02-12T16:12:08.505Z	9864	MsMpEng.exe	LISTEN	TCP	10.10.1.103	53	0.0.0.0	0	dlee
62	ENG-WS-004	2026-02-15T11:26:55.697Z	5371	teams.exe	TIME_WAIT	TCP	10.10.2.104	8080	10.10.2.152	636	idavis
63	ENG-WS-004	2026-02-15T05:37:30.740Z	42797	lsass.exe	TIME_WAIT	TCP	10.10.2.104	80	24.117.10.196	8080	gwhite
64	ENG-WS-004	2026-02-13T18:27:03.297Z	45560	teams.exe	SYN_SENT	TCP	10.10.2.104	443	121.178.209.86	8080	gwhite
65	ENG-WS-004	2026-02-15T03:29:38.710Z	3652	SearchHost.exe	SYN_SENT	TCP	10.10.2.104	443	81.129.165.30	636	cjohnson
66	ENG-WS-004	2026-02-18T15:49:42.359Z	46616	services.exe	CLOSE_WAIT	TCP	10.10.2.104	135	69.67.147.113	2915	bwilson
67	ENG-WS-004	2026-02-15T15:13:04.813Z	18019	svchost.exe	SYN_SENT	TCP	10.10.2.104	135	216.58.236.243	445	fthompson
68	ENG-WS-004	2026-02-12T07:39:09.333Z	39380	winlogon.exe	LISTEN	TCP	10.10.2.104	5985	0.0.0.0	0	hbrown
69	ENG-WS-004	2026-02-14T23:38:12.653Z	31841	outlook.exe	ESTABLISHED	TCP	10.10.2.104	3389	10.10.1.139	8080	emartinez
70	ENG-WS-004	2026-02-17T16:18:25.092Z	53276	System	CLOSE_WAIT	TCP	10.10.2.104	135	179.122.196.60	389	fthompson
71	ENG-WS-004	2026-02-15T13:34:22.035Z	38778	MsMpEng.exe	LISTEN	TCP	10.10.2.104	445	0.0.0.0	0	emartinez
72	ENG-WS-004	2026-02-13T20:38:25.110Z	45497	csrss.exe	ESTABLISHED	TCP	10.10.2.104	80	185.73.209.223	445	fthompson
73	ENG-WS-004	2026-02-20T17:21:23.330Z	49040	taskhostw.exe	SYN_SENT	TCP	10.10.2.104	389	184.249.18.159	445	agarcia
74	ENG-WS-004	2026-02-14T19:40:18.109Z	16103	msedge.exe	ESTABLISHED	TCP	10.10.2.104	636	10.10.3.108	53	hbrown
75	ENG-WS-004	2026-02-16T16:22:22.608Z	25170	MsMpEng.exe	LISTEN	UDP	10.10.2.104	443	0.0.0.0	0	idavis
76	ENG-WS-004	2026-02-17T09:24:09.797Z	10453	winlogon.exe	SYN_SENT	UDP	10.10.2.104	8080	10.10.3.102	445	agarcia
77	ENG-WS-004	2026-02-14T07:20:27.867Z	23624	RuntimeBroker.exe	SYN_SENT	TCP	10.10.2.104	636	10.10.3.150	3389	idavis
78	ENG-WS-004	2026-02-12T14:45:04.085Z	12560	OneDrive.exe	TIME_WAIT	TCP	10.10.2.104	139	3.25.254.214	53	idavis
79	LEG-WS-005	2026-02-18T13:09:09.435Z	2286	MsMpEng.exe	LISTEN	TCP	10.10.3.105	139	0.0.0.0	0	idavis
80	LEG-WS-005	2026-02-19T20:22:18.277Z	54525	outlook.exe	ESTABLISHED	TCP	10.10.3.105	636	10.10.2.170	636	bwilson
81	LEG-WS-005	2026-02-10T11:28:46.789Z	35264	winlogon.exe	TIME_WAIT	TCP	10.10.3.105	8080	10.10.1.151	88	agarcia
82	LEG-WS-005	2026-02-12T15:20:30.480Z	4242	MsMpEng.exe	TIME_WAIT	TCP	10.10.3.105	389	10.10.2.104	61006	admin
83	LEG-WS-005	2026-02-11T17:54:57.643Z	29829	OneDrive.exe	TIME_WAIT	TCP	10.10.3.105	445	12.19.155.127	636	emartinez
84	LEG-WS-005	2026-02-12T14:19:02.716Z	29243	OneDrive.exe	SYN_SENT	TCP	10.10.3.105	5985	10.10.3.153	53	cjohnson
85	LEG-WS-005	2026-02-17T00:25:34.020Z	39234	msedge.exe	TIME_WAIT	TCP	10.10.3.105	80	10.10.2.116	3389	jsmith
86	LEG-WS-005	2026-02-18T23:27:16.053Z	36420	taskhostw.exe	LISTEN	UDP	10.10.3.105	443	0.0.0.0	0	cjohnson
87	LEG-WS-005	2026-02-11T16:57:02.906Z	23577	powershell.exe	TIME_WAIT	UDP	10.10.3.105	139	220.74.66.139	80	svc_sql
88	LEG-WS-005	2026-02-18T10:30:15.335Z	33735	smss.exe	TIME_WAIT	TCP	10.10.3.105	139	14.64.215.135	389	idavis
89	LEG-WS-005	2026-02-18T11:48:24.296Z	56918	dwm.exe	LISTEN	TCP	10.10.3.105	636	0.0.0.0	0	admin
90	LEG-WS-005	2026-02-13T16:31:40.637Z	9821	csrss.exe	ESTABLISHED	TCP	10.10.3.105	5985	110.55.251.183	443	agarcia
91	LEG-WS-005	2026-02-19T05:11:53.463Z	42758	services.exe	SYN_SENT	TCP	10.10.3.105	5985	10.10.1.11	443	svc_sql
92	LEG-WS-005	2026-02-17T06:16:37.076Z	24630	code.exe	CLOSE_WAIT	TCP	10.10.3.105	5985	10.10.2.113	53	bwilson
93	LEG-WS-005	2026-02-16T04:25:15.043Z	44009	winlogon.exe	ESTABLISHED	TCP	10.10.3.105	443	111.49.190.208	636	agarcia
94	LEG-WS-005	2026-02-12T16:03:40.382Z	7192	MsMpEng.exe	CLOSE_WAIT	TCP	10.10.3.105	88	80.180.53.148	389	emartinez
95	LEG-WS-005	2026-02-19T22:23:03.768Z	23104	RuntimeBroker.exe	ESTABLISHED	TCP	10.10.3.105	56562	10.10.1.124	445	jsmith
96	LEG-WS-005	2026-02-15T01:24:41.211Z	10415	outlook.exe	SYN_SENT	TCP	10.10.3.105	445	190.15.46.192	88	emartinez
97	LEG-WS-005	2026-02-15T09:24:55.534Z	29069	taskhostw.exe	SYN_SENT	TCP	10.10.3.105	80	10.10.3.111	88	fthompson
98	LEG-WS-005	2026-02-10T09:55:18.377Z	19853	dwm.exe	ESTABLISHED	TCP	10.10.3.105	443	10.10.3.129	80	cjohnson
99	LEG-WS-005	2026-02-19T00:20:18.782Z	52935	cmd.exe	TIME_WAIT	TCP	10.10.3.105	80	128.220.89.34	636	emartinez
100	LEG-WS-005	2026-02-14T13:15:29.076Z	63420	spotify.exe	ESTABLISHED	TCP	10.10.3.105	8080	10.10.2.152	443	emartinez
101	LEG-WS-005	2026-02-14T10:56:30.027Z	20434	services.exe	CLOSE_WAIT	TCP	10.10.3.105	5985	10.10.1.10	443	svc_backup
102	LEG-WS-005	2026-02-15T15:29:16.856Z	59470	taskhostw.exe	LISTEN	TCP	10.10.3.105	53	0.0.0.0	0	svc_sql
103	MKT-WS-006	2026-02-12T23:59:31.399Z	11470	spoolsv.exe	LISTEN	UDP	10.10.1.106	445	0.0.0.0	0	idavis
104	MKT-WS-006	2026-02-11T01:04:17.632Z	29080	spoolsv.exe	ESTABLISHED	UDP	10.10.1.106	8080	10.10.2.11	389	admin
105	MKT-WS-006	2026-02-11T03:10:57.901Z	56739	cmd.exe	SYN_SENT	TCP	10.10.1.106	53	19.158.236.116	445	svc_web
106	MKT-WS-006	2026-02-15T06:54:26.125Z	9986	services.exe	SYN_SENT	TCP	10.10.1.106	88	142.21.230.233	22095	jsmith
107	MKT-WS-006	2026-02-19T21:29:03.110Z	25489	taskhostw.exe	ESTABLISHED	TCP	10.10.1.106	80	64.224.224.135	53	fthompson
108	MKT-WS-006	2026-02-16T09:41:05.563Z	9368	MsMpEng.exe	SYN_SENT	TCP	10.10.1.106	443	85.48.197.73	443	emartinez
109	MKT-WS-006	2026-02-15T15:07:19.637Z	1294	spoolsv.exe	CLOSE_WAIT	UDP	10.10.1.106	139	144.192.168.209	88	emartinez
110	MKT-WS-006	2026-02-19T11:05:53.495Z	40603	code.exe	TIME_WAIT	TCP	10.10.1.106	135	36.79.39.76	53	bwilson
111	MKT-WS-006	2026-02-14T21:25:06.064Z	27026	outlook.exe	LISTEN	UDP	10.10.1.106	636	0.0.0.0	0	emartinez
112	MKT-WS-006	2026-02-19T17:59:36.904Z	12815	powershell.exe	CLOSE_WAIT	TCP	10.10.1.106	58488	10.10.2.131	389	emartinez
113	MKT-WS-006	2026-02-10T21:02:41.822Z	31595	smss.exe	CLOSE_WAIT	TCP	10.10.1.106	58385	98.214.82.210	445	svc_web
114	MKT-WS-006	2026-02-11T06:55:42.212Z	59770	msedge.exe	SYN_SENT	TCP	10.10.1.106	443	196.82.139.116	88	cjohnson
115	MKT-WS-006	2026-02-13T15:40:16.387Z	6593	RuntimeBroker.exe	ESTABLISHED	TCP	10.10.1.106	5985	10.10.3.111	80	svc_web
116	MKT-WS-006	2026-02-19T21:20:56.554Z	31062	taskhostw.exe	LISTEN	UDP	10.10.1.106	139	0.0.0.0	0	svc_backup
117	MKT-WS-006	2026-02-12T19:24:36.203Z	8085	OneDrive.exe	CLOSE_WAIT	TCP	10.10.1.106	443	10.10.3.120	445	jsmith
118	MKT-WS-006	2026-02-13T08:49:04.788Z	202	spoolsv.exe	SYN_SENT	TCP	10.10.1.106	443	215.255.8.162	8080	idavis
119	MKT-WS-006	2026-02-20T13:15:35.480Z	16723	smss.exe	CLOSE_WAIT	UDP	10.10.1.106	53	93.34.10.100	88	svc_backup
120	MKT-WS-006	2026-02-18T19:22:37.979Z	11574	steam.exe	ESTABLISHED	TCP	10.10.1.106	636	10.10.1.106	53	svc_web
121	MKT-WS-006	2026-02-19T13:26:51.347Z	20782	csrss.exe	CLOSE_WAIT	UDP	10.10.1.106	443	184.234.18.76	3389	dlee
122	MKT-WS-006	2026-02-18T15:50:08.170Z	28736	System	CLOSE_WAIT	TCP	10.10.1.106	50351	10.10.2.107	443	fthompson
123	MKT-WS-006	2026-02-16T14:36:47.968Z	53992	SearchHost.exe	TIME_WAIT	UDP	10.10.1.106	636	10.10.3.111	88	bwilson
124	MKT-WS-006	2026-02-13T23:53:12.285Z	2875	taskhostw.exe	ESTABLISHED	TCP	10.10.1.106	389	76.156.228.155	389	svc_backup
125	MKT-WS-006	2026-02-18T16:16:26.378Z	44625	RuntimeBroker.exe	SYN_SENT	TCP	10.10.1.106	389	10.10.1.13	636	bwilson
126	MKT-WS-006	2026-02-17T09:45:55.851Z	62282	outlook.exe	SYN_SENT	TCP	10.10.1.106	445	18.120.187.93	8080	emartinez
127	MKT-WS-006	2026-02-15T12:45:39.564Z	25461	chrome.exe	SYN_SENT	UDP	10.10.1.106	5985	81.142.127.246	8080	hbrown
128	MKT-WS-006	2026-02-20T17:18:56.163Z	53217	cmd.exe	CLOSE_WAIT	UDP	10.10.1.106	636	10.10.2.110	389	admin
129	MKT-WS-006	2026-02-18T14:00:59.106Z	15614	taskhostw.exe	TIME_WAIT	TCP	10.10.1.106	139	218.80.89.204	3389	svc_sql
130	MKT-WS-006	2026-02-15T19:25:26.089Z	50507	RuntimeBroker.exe	SYN_SENT	TCP	10.10.1.106	8080	10.10.2.140	389	fthompson
131	MKT-WS-006	2026-02-15T04:27:29.879Z	34005	chrome.exe	LISTEN	TCP	10.10.1.106	8080	0.0.0.0	0	emartinez
132	MKT-WS-006	2026-02-13T16:39:54.676Z	46586	System	SYN_SENT	UDP	10.10.1.106	5985	10.10.3.120	8080	cjohnson
133	EXEC-WS-007	2026-02-16T11:57:07.600Z	38153	dwm.exe	TIME_WAIT	TCP	10.10.2.107	135	163.140.64.161	8080	bwilson
134	EXEC-WS-007	2026-02-15T12:30:34.254Z	41201	services.exe	SYN_SENT	TCP	10.10.2.107	80	10.10.1.127	80	hbrown
135	EXEC-WS-007	2026-02-12T11:00:20.712Z	39858	notepad.exe	CLOSE_WAIT	UDP	10.10.2.107	139	10.10.1.157	389	bwilson
136	EXEC-WS-007	2026-02-15T00:23:56.410Z	9332	OneDrive.exe	TIME_WAIT	TCP	10.10.2.107	445	10.10.2.131	445	agarcia
137	EXEC-WS-007	2026-02-15T12:41:23.737Z	20320	SearchHost.exe	SYN_SENT	TCP	10.10.2.107	445	10.10.1.121	389	gwhite
138	EXEC-WS-007	2026-02-13T07:26:13.543Z	635	SearchHost.exe	SYN_SENT	TCP	10.10.2.107	135	10.10.2.137	389	svc_web
139	EXEC-WS-007	2026-02-13T08:09:01.527Z	25419	outlook.exe	TIME_WAIT	TCP	10.10.2.107	3389	12.205.26.146	636	hbrown
140	EXEC-WS-007	2026-02-12T09:45:52.093Z	33465	System	TIME_WAIT	TCP	10.10.2.107	445	10.10.3.144	8080	fthompson
141	EXEC-WS-007	2026-02-13T15:37:57.028Z	25852	explorer.exe	ESTABLISHED	UDP	10.10.2.107	60065	122.233.76.156	22517	idavis
142	EXEC-WS-007	2026-02-20T12:58:28.228Z	38353	notepad.exe	SYN_SENT	TCP	10.10.2.107	636	10.10.1.103	443	dlee
143	EXEC-WS-007	2026-02-18T09:39:05.516Z	25016	OneDrive.exe	ESTABLISHED	TCP	10.10.2.107	139	168.116.26.150	35380	bwilson
144	EXEC-WS-007	2026-02-14T14:35:39.668Z	50888	powershell.exe	ESTABLISHED	TCP	10.10.2.107	135	10.10.3.120	3389	idavis
145	EXEC-WS-007	2026-02-13T17:15:44.580Z	43499	explorer.exe	LISTEN	TCP	10.10.2.107	53	0.0.0.0	0	gwhite
146	EXEC-WS-007	2026-02-14T00:34:18.289Z	50693	taskhostw.exe	LISTEN	TCP	10.10.2.107	53	0.0.0.0	0	svc_web
147	EXEC-WS-007	2026-02-17T12:33:35.920Z	32147	spoolsv.exe	TIME_WAIT	TCP	10.10.2.107	135	10.10.1.139	3389	emartinez
148	EXEC-WS-007	2026-02-13T07:54:27.307Z	46901	System	TIME_WAIT	TCP	10.10.2.107	88	174.194.202.210	80	agarcia
149	EXEC-WS-007	2026-02-17T07:27:30.568Z	34902	csrss.exe	TIME_WAIT	TCP	10.10.2.107	135	212.138.139.36	80	cjohnson
150	EXEC-WS-007	2026-02-15T07:21:43.668Z	13171	explorer.exe	ESTABLISHED	TCP	10.10.2.107	636	121.51.70.2	389	svc_sql
151	EXEC-WS-007	2026-02-20T01:28:50.349Z	2481	taskhostw.exe	TIME_WAIT	TCP	10.10.2.107	389	10.10.3.123	8080	svc_web
152	EXEC-WS-007	2026-02-13T10:35:52.989Z	39603	winlogon.exe	LISTEN	TCP	10.10.2.107	80	0.0.0.0	0	agarcia
153	EXEC-WS-007	2026-02-17T02:04:16.804Z	47194	taskhostw.exe	TIME_WAIT	TCP	10.10.2.107	445	10.10.1.115	389	bwilson
154	EXEC-WS-007	2026-02-12T06:11:43.080Z	9315	taskhostw.exe	TIME_WAIT	TCP	10.10.2.107	445	157.207.218.132	443	gwhite
155	EXEC-WS-007	2026-02-17T13:11:31.731Z	4171	powershell.exe	ESTABLISHED	TCP	10.10.2.107	135	115.136.168.78	53	admin
156	EXEC-WS-007	2026-02-11T13:21:14.171Z	60139	notepad.exe	LISTEN	TCP	10.10.2.107	636	0.0.0.0	0	dlee
157	EXEC-WS-007	2026-02-15T01:44:40.805Z	64904	powershell.exe	LISTEN	UDP	10.10.2.107	445	0.0.0.0	0	idavis
158	EXEC-WS-007	2026-02-11T12:03:07.912Z	54414	OneDrive.exe	SYN_SENT	TCP	10.10.2.107	56308	64.41.228.136	61136	hbrown
159	EXEC-WS-007	2026-02-14T23:22:14.422Z	3746	code.exe	SYN_SENT	TCP	10.10.2.107	445	10.10.1.127	636	gwhite
160	EXEC-WS-007	2026-02-16T08:34:40.138Z	3068	lsass.exe	CLOSE_WAIT	TCP	10.10.2.107	53	119.157.11.102	3389	fthompson
161	EXEC-WS-007	2026-02-15T00:08:03.419Z	60204	chrome.exe	SYN_SENT	TCP	10.10.2.107	8080	10.10.1.118	88	fthompson
162	EXEC-WS-007	2026-02-20T12:37:21.614Z	30443	MsMpEng.exe	SYN_SENT	UDP	10.10.2.107	443	46.201.65.187	80	admin
163	IT-WS-008	2026-02-13T04:54:44.755Z	61534	powershell.exe	LISTEN	TCP	10.10.3.108	445	0.0.0.0	0	svc_backup
164	IT-WS-008	2026-02-12T21:11:00.736Z	2999	explorer.exe	CLOSE_WAIT	TCP	10.10.3.108	135	10.10.3.105	80	fthompson
165	IT-WS-008	2026-02-20T16:22:15.097Z	15446	System	LISTEN	TCP	10.10.3.108	53	0.0.0.0	0	svc_web
166	IT-WS-008	2026-02-20T05:07:48.229Z	57752	smss.exe	TIME_WAIT	TCP	10.10.3.108	135	10.10.1.139	636	svc_backup
167	IT-WS-008	2026-02-14T06:06:54.169Z	49541	spoolsv.exe	CLOSE_WAIT	TCP	10.10.3.108	80	10.10.1.154	445	hbrown
168	IT-WS-008	2026-02-12T23:44:56.081Z	21744	powershell.exe	TIME_WAIT	UDP	10.10.3.108	80	144.211.213.143	3389	admin
169	IT-WS-008	2026-02-17T21:04:34.715Z	36724	csrss.exe	TIME_WAIT	TCP	10.10.3.108	80	69.193.20.224	53757	cjohnson
170	IT-WS-008	2026-02-16T02:01:11.363Z	50924	taskhostw.exe	TIME_WAIT	TCP	10.10.3.108	135	190.60.245.235	3389	dlee
171	IT-WS-008	2026-02-14T04:40:34.429Z	27227	System	TIME_WAIT	TCP	10.10.3.108	3389	10.10.2.161	3389	jsmith
172	IT-WS-008	2026-02-20T01:41:22.425Z	38054	powershell.exe	LISTEN	TCP	10.10.3.108	53	0.0.0.0	0	svc_backup
173	IT-WS-008	2026-02-16T06:26:50.561Z	16204	outlook.exe	LISTEN	TCP	10.10.3.108	5985	0.0.0.0	0	gwhite
174	IT-WS-008	2026-02-15T10:04:44.689Z	60189	MsMpEng.exe	TIME_WAIT	TCP	10.10.3.108	636	165.251.235.44	636	hbrown
175	IT-WS-008	2026-02-10T10:17:07.315Z	33243	explorer.exe	SYN_SENT	TCP	10.10.3.108	389	13.3.211.36	8080	gwhite
176	IT-WS-008	2026-02-10T12:17:08.337Z	53391	services.exe	SYN_SENT	TCP	10.10.3.108	80	10.10.3.168	445	svc_backup
177	IT-WS-008	2026-02-15T02:44:57.970Z	16038	teams.exe	ESTABLISHED	TCP	10.10.3.108	135	50.129.181.69	88	svc_backup
178	IT-WS-008	2026-02-11T04:40:17.510Z	55499	MsMpEng.exe	ESTABLISHED	TCP	10.10.3.108	5985	98.193.243.15	8080	fthompson
179	IT-WS-008	2026-02-16T04:52:38.877Z	2256	taskhostw.exe	SYN_SENT	TCP	10.10.3.108	135	10.10.2.110	636	bwilson
180	IT-WS-008	2026-02-17T09:15:31.469Z	35526	taskhostw.exe	ESTABLISHED	UDP	10.10.3.108	53876	211.203.39.77	88	emartinez
181	IT-WS-008	2026-02-20T06:42:52.557Z	26098	outlook.exe	ESTABLISHED	TCP	10.10.3.108	80	10.10.2.110	40684	svc_sql
182	IT-WS-008	2026-02-13T09:50:41.532Z	16251	spoolsv.exe	TIME_WAIT	TCP	10.10.3.108	135	10.10.1.175	6640	svc_backup
183	IT-WS-008	2026-02-14T09:24:19.777Z	23738	cmd.exe	LISTEN	TCP	10.10.3.108	636	0.0.0.0	0	agarcia
184	IT-WS-008	2026-02-11T06:24:16.957Z	36421	notepad.exe	CLOSE_WAIT	TCP	10.10.3.108	443	10.10.2.158	80	agarcia
185	IT-WS-008	2026-02-12T02:22:31.570Z	17723	taskhostw.exe	CLOSE_WAIT	TCP	10.10.3.108	5985	100.43.124.147	88	dlee
186	IT-WS-008	2026-02-17T20:13:29.507Z	32592	outlook.exe	ESTABLISHED	UDP	10.10.3.108	139	10.10.2.110	3389	idavis
187	IT-WS-008	2026-02-18T19:52:07.923Z	56428	csrss.exe	ESTABLISHED	UDP	10.10.3.108	80	10.10.2.143	88	admin
188	IT-WS-008	2026-02-20T09:56:26.776Z	51347	outlook.exe	TIME_WAIT	TCP	10.10.3.108	8080	10.10.3.141	389	cjohnson
189	IT-WS-008	2026-02-18T23:49:13.627Z	4632	cmd.exe	CLOSE_WAIT	TCP	10.10.3.108	88	52.92.13.244	445	svc_web
190	IT-WS-008	2026-02-15T07:48:31.229Z	26367	lsass.exe	CLOSE_WAIT	UDP	10.10.3.108	135	65.78.216.203	30454	hbrown
191	IT-WS-008	2026-02-10T19:04:27.024Z	64561	OneDrive.exe	CLOSE_WAIT	TCP	10.10.3.108	50356	10.10.3.132	11925	admin
192	IT-WS-008	2026-02-14T09:47:00.751Z	50716	SearchHost.exe	TIME_WAIT	TCP	10.10.3.108	80	26.132.113.131	53	admin
193	IT-WS-008	2026-02-11T10:08:14.422Z	27361	dwm.exe	LISTEN	TCP	10.10.3.108	8080	0.0.0.0	0	agarcia
194	IT-WS-008	2026-02-13T15:43:38.526Z	19778	outlook.exe	TIME_WAIT	TCP	10.10.3.108	8080	201.105.247.90	389	jsmith
195	IT-WS-008	2026-02-14T18:35:32.445Z	30381	msedge.exe	ESTABLISHED	TCP	10.10.3.108	389	205.84.124.133	636	cjohnson
196	IT-WS-008	2026-02-10T15:17:53.046Z	40346	spoolsv.exe	LISTEN	UDP	10.10.3.108	5985	0.0.0.0	0	cjohnson
197	IT-WS-008	2026-02-12T09:16:06.847Z	7568	lsass.exe	CLOSE_WAIT	TCP	10.10.3.108	135	72.32.52.205	53	dlee
198	HR-WS-009	2026-02-19T21:40:14.321Z	38777	spoolsv.exe	TIME_WAIT	TCP	10.10.1.109	88	101.58.178.91	445	agarcia
199	HR-WS-009	2026-02-16T07:42:05.440Z	27824	taskhostw.exe	ESTABLISHED	UDP	10.10.1.109	443	10.10.3.150	8080	bwilson
200	HR-WS-009	2026-02-13T08:12:31.296Z	12361	System	LISTEN	TCP	10.10.1.109	8080	0.0.0.0	0	emartinez
201	HR-WS-009	2026-02-14T15:54:27.391Z	55143	services.exe	ESTABLISHED	TCP	10.10.1.109	8080	10.10.1.172	389	gwhite
202	HR-WS-009	2026-02-16T05:24:45.415Z	50729	chrome.exe	SYN_SENT	TCP	10.10.1.109	139	9.140.115.138	389	svc_sql
203	HR-WS-009	2026-02-17T23:59:49.827Z	42939	dwm.exe	ESTABLISHED	TCP	10.10.1.109	139	199.187.21.195	443	svc_sql
204	HR-WS-009	2026-02-16T22:11:33.567Z	10977	explorer.exe	CLOSE_WAIT	TCP	10.10.1.109	443	10.10.1.10	57453	idavis
205	HR-WS-009	2026-02-13T06:16:16.516Z	35408	code.exe	LISTEN	TCP	10.10.1.109	53	0.0.0.0	0	bwilson
206	HR-WS-009	2026-02-17T15:21:23.874Z	8796	OneDrive.exe	TIME_WAIT	TCP	10.10.1.109	53	174.48.69.247	8080	cjohnson
207	HR-WS-009	2026-02-16T08:21:22.976Z	17710	taskhostw.exe	LISTEN	TCP	10.10.1.109	445	0.0.0.0	0	admin
208	HR-WS-009	2026-02-19T09:13:36.986Z	55619	csrss.exe	ESTABLISHED	TCP	10.10.1.109	53	10.10.1.163	80	svc_backup
209	HR-WS-009	2026-02-16T08:29:00.276Z	37202	csrss.exe	TIME_WAIT	TCP	10.10.1.109	135	10.10.1.142	636	svc_web
210	HR-WS-009	2026-02-20T15:57:34.414Z	28136	taskhostw.exe	ESTABLISHED	TCP	10.10.1.109	389	10.10.1.121	80	cjohnson
211	HR-WS-009	2026-02-16T20:24:03.846Z	47678	outlook.exe	TIME_WAIT	UDP	10.10.1.109	443	168.184.128.22	88	svc_backup
212	HR-WS-009	2026-02-17T13:53:57.396Z	53650	lsass.exe	ESTABLISHED	TCP	10.10.1.109	135	10.10.3.129	80	agarcia
213	HR-WS-009	2026-02-14T07:46:02.933Z	47991	lsass.exe	LISTEN	TCP	10.10.1.109	135	0.0.0.0	0	svc_sql
214	HR-WS-009	2026-02-14T22:01:29.478Z	47445	taskhostw.exe	TIME_WAIT	TCP	10.10.1.109	5985	199.68.73.18	8080	cjohnson
215	HR-WS-009	2026-02-13T14:37:33.301Z	9263	outlook.exe	CLOSE_WAIT	TCP	10.10.1.109	135	10.10.2.116	88	cjohnson
216	HR-WS-009	2026-02-20T03:19:11.320Z	1857	chrome.exe	LISTEN	TCP	10.10.1.109	58488	0.0.0.0	0	svc_web
217	HR-WS-009	2026-02-14T09:56:15.914Z	42447	notepad.exe	LISTEN	TCP	10.10.1.109	636	0.0.0.0	0	jsmith
218	HR-WS-009	2026-02-19T07:12:12.603Z	37349	powershell.exe	CLOSE_WAIT	TCP	10.10.1.109	135	10.10.3.147	88	fthompson
219	HR-WS-009	2026-02-16T10:50:27.147Z	1003	MsMpEng.exe	LISTEN	TCP	10.10.1.109	80	0.0.0.0	0	dlee
220	HR-WS-009	2026-02-15T22:24:49.822Z	10106	explorer.exe	CLOSE_WAIT	TCP	10.10.1.109	389	183.212.216.180	636	dlee
221	HR-WS-009	2026-02-11T05:33:11.518Z	28574	chrome.exe	SYN_SENT	UDP	10.10.1.109	53	84.200.33.80	3389	agarcia
222	HR-WS-009	2026-02-18T11:44:48.391Z	47336	services.exe	ESTABLISHED	TCP	10.10.1.109	443	10.10.2.164	636	dlee
223	HR-WS-009	2026-02-16T20:52:59.549Z	32615	outlook.exe	TIME_WAIT	TCP	10.10.1.109	3389	10.10.1.109	47706	gwhite
224	HR-WS-009	2026-02-10T08:38:31.655Z	56375	explorer.exe	CLOSE_WAIT	TCP	10.10.1.109	3389	41.130.52.229	636	svc_web
225	HR-WS-009	2026-02-13T03:48:52.162Z	5204	explorer.exe	CLOSE_WAIT	TCP	10.10.1.109	445	46.18.214.58	53	idavis
226	HR-WS-009	2026-02-13T17:49:30.829Z	36347	dwm.exe	ESTABLISHED	UDP	10.10.1.109	56465	10.10.1.160	445	gwhite
227	HR-WS-009	2026-02-17T23:06:57.003Z	35919	code.exe	TIME_WAIT	TCP	10.10.1.109	636	10.10.1.10	3389	svc_sql
228	HR-WS-009	2026-02-19T04:15:05.389Z	47758	outlook.exe	ESTABLISHED	TCP	10.10.1.109	135	139.177.4.244	88	dlee
229	HR-WS-009	2026-02-20T11:08:23.312Z	9430	dwm.exe	LISTEN	TCP	10.10.1.109	80	0.0.0.0	0	svc_backup
230	HR-WS-009	2026-02-19T15:53:40.146Z	30145	explorer.exe	LISTEN	TCP	10.10.1.109	636	0.0.0.0	0	svc_backup
231	HR-WS-009	2026-02-19T04:43:42.335Z	60789	msedge.exe	SYN_SENT	UDP	10.10.1.109	443	152.31.222.170	445	svc_sql
232	HR-WS-009	2026-02-12T01:05:37.482Z	30643	taskhostw.exe	TIME_WAIT	TCP	10.10.1.109	135	20.103.69.200	443	emartinez
233	HR-WS-009	2026-02-10T18:04:56.827Z	54883	System	TIME_WAIT	UDP	10.10.1.109	139	10.10.1.121	55182	svc_web
234	HR-WS-009	2026-02-10T20:14:15.555Z	19684	chrome.exe	LISTEN	TCP	10.10.1.109	53	0.0.0.0	0	dlee
235	HR-WS-009	2026-02-10T23:25:02.266Z	51280	teams.exe	ESTABLISHED	TCP	10.10.1.109	53	192.127.48.119	80	cjohnson
236	HR-WS-009	2026-02-11T14:37:54.893Z	61853	SearchHost.exe	TIME_WAIT	TCP	10.10.1.109	443	6.33.101.232	53	gwhite
237	FIN-WS-010	2026-02-14T23:30:10.287Z	9840	smss.exe	CLOSE_WAIT	TCP	10.10.2.110	80	98.218.88.91	445	jsmith
238	FIN-WS-010	2026-02-19T12:41:40.716Z	31493	services.exe	LISTEN	TCP	10.10.2.110	5985	0.0.0.0	0	jsmith
239	FIN-WS-010	2026-02-19T13:09:47.264Z	34559	SearchHost.exe	LISTEN	TCP	10.10.2.110	389	0.0.0.0	0	cjohnson
240	FIN-WS-010	2026-02-12T04:57:14.286Z	20997	System	ESTABLISHED	TCP	10.10.2.110	8080	10.10.2.173	445	idavis
241	FIN-WS-010	2026-02-18T20:04:16.645Z	60213	cmd.exe	ESTABLISHED	TCP	10.10.2.110	60864	150.119.81.26	636	svc_backup
242	FIN-WS-010	2026-02-20T04:53:22.861Z	37036	powershell.exe	SYN_SENT	TCP	10.10.2.110	445	46.121.162.207	53	bwilson
243	FIN-WS-010	2026-02-15T07:29:50.089Z	21840	code.exe	CLOSE_WAIT	TCP	10.10.2.110	445	126.19.46.15	636	idavis
244	FIN-WS-010	2026-02-14T05:23:51.702Z	61829	outlook.exe	TIME_WAIT	UDP	10.10.2.110	80	10.10.1.115	443	admin
245	FIN-WS-010	2026-02-17T13:23:24.358Z	60972	msedge.exe	TIME_WAIT	TCP	10.10.2.110	445	41.223.249.167	636	idavis
246	FIN-WS-010	2026-02-10T16:05:44.468Z	39578	powershell.exe	SYN_SENT	UDP	10.10.2.110	139	10.10.2.101	56779	emartinez
247	FIN-WS-010	2026-02-11T19:09:39.031Z	48946	services.exe	LISTEN	TCP	10.10.2.110	8080	0.0.0.0	0	agarcia
248	SLS-WS-011	2026-02-10T10:50:56.058Z	13841	taskhostw.exe	LISTEN	TCP	10.10.3.111	8080	0.0.0.0	0	cjohnson
249	SLS-WS-011	2026-02-13T23:48:28.052Z	24698	RuntimeBroker.exe	TIME_WAIT	TCP	10.10.3.111	80	10.10.2.122	88	agarcia
250	SLS-WS-011	2026-02-18T15:47:55.109Z	2289	smss.exe	LISTEN	UDP	10.10.3.111	443	0.0.0.0	0	dlee
251	SLS-WS-011	2026-02-19T15:18:23.555Z	46270	cmd.exe	ESTABLISHED	TCP	10.10.3.111	445	10.10.1.112	39954	jsmith
252	SLS-WS-011	2026-02-10T21:23:20.168Z	21798	spoolsv.exe	LISTEN	TCP	10.10.3.111	445	0.0.0.0	0	cjohnson
253	SLS-WS-011	2026-02-19T01:57:49.054Z	10165	lsass.exe	SYN_SENT	TCP	10.10.3.111	389	10.10.2.107	636	jsmith
254	SLS-WS-011	2026-02-15T06:23:33.586Z	7669	lsass.exe	ESTABLISHED	TCP	10.10.3.111	135	10.10.1.13	443	dlee
255	SLS-WS-011	2026-02-10T19:09:15.232Z	28918	winlogon.exe	CLOSE_WAIT	TCP	10.10.3.111	389	10.10.2.149	389	gwhite
256	SLS-WS-011	2026-02-12T16:52:41.482Z	4096	cmd.exe	SYN_SENT	TCP	10.10.3.111	54104	10.10.1.145	64640	svc_web
257	SLS-WS-011	2026-02-19T17:06:49.555Z	52558	dwm.exe	CLOSE_WAIT	TCP	10.10.3.111	88	61.243.153.21	33929	idavis
258	SLS-WS-011	2026-02-20T05:15:55.334Z	11055	services.exe	LISTEN	TCP	10.10.3.111	445	0.0.0.0	0	cjohnson
259	SLS-WS-011	2026-02-11T05:45:24.696Z	36561	outlook.exe	ESTABLISHED	TCP	10.10.3.111	389	10.10.2.10	443	fthompson
260	SLS-WS-011	2026-02-16T09:40:09.378Z	63331	cmd.exe	SYN_SENT	TCP	10.10.3.111	49557	180.214.57.107	38156	agarcia
261	SLS-WS-011	2026-02-13T04:51:12.727Z	9527	smss.exe	ESTABLISHED	TCP	10.10.3.111	5985	10.10.1.11	8080	idavis
262	SLS-WS-011	2026-02-10T13:03:29.599Z	53668	OneDrive.exe	CLOSE_WAIT	TCP	10.10.3.111	3389	10.10.2.161	53	svc_sql
263	SLS-WS-011	2026-02-12T12:50:51.451Z	54099	cmd.exe	CLOSE_WAIT	TCP	10.10.3.111	445	77.226.164.69	389	fthompson
264	SLS-WS-011	2026-02-19T10:47:42.500Z	13254	dwm.exe	TIME_WAIT	TCP	10.10.3.111	443	80.206.69.200	3389	svc_web
265	SLS-WS-011	2026-02-17T10:17:36.924Z	15955	explorer.exe	CLOSE_WAIT	TCP	10.10.3.111	636	10.10.1.160	443	emartinez
266	SLS-WS-011	2026-02-12T00:52:42.253Z	58721	csrss.exe	LISTEN	TCP	10.10.3.111	3389	0.0.0.0	0	dlee
267	SLS-WS-011	2026-02-13T03:16:15.221Z	26937	OneDrive.exe	ESTABLISHED	TCP	10.10.3.111	5985	13.83.109.220	3389	hbrown
268	SLS-WS-011	2026-02-14T17:57:06.120Z	24772	qbittorrent.exe	ESTABLISHED	TCP	10.10.3.111	389	10.10.1.11	445	svc_web
269	SLS-WS-011	2026-02-15T18:09:34.108Z	40968	cmd.exe	LISTEN	TCP	10.10.3.111	389	0.0.0.0	0	fthompson
270	SLS-WS-011	2026-02-19T07:22:22.440Z	17214	svchost.exe	SYN_SENT	TCP	10.10.3.111	139	10.10.3.144	53	admin
271	ENG-WS-012	2026-02-13T15:53:47.164Z	9270	dwm.exe	LISTEN	TCP	10.10.1.112	389	0.0.0.0	0	svc_backup
272	ENG-WS-012	2026-02-15T14:49:43.370Z	55505	winlogon.exe	TIME_WAIT	TCP	10.10.1.112	5985	10.10.3.129	53	bwilson
273	ENG-WS-012	2026-02-11T15:59:09.725Z	17051	System	LISTEN	TCP	10.10.1.112	8080	0.0.0.0	0	svc_backup
274	ENG-WS-012	2026-02-13T09:30:46.009Z	55885	teams.exe	TIME_WAIT	TCP	10.10.1.112	3389	10.10.2.143	18100	agarcia
275	ENG-WS-012	2026-02-11T18:20:28.733Z	13226	spoolsv.exe	SYN_SENT	TCP	10.10.1.112	8080	10.10.1.139	8080	emartinez
276	ENG-WS-012	2026-02-10T09:10:42.151Z	18025	smss.exe	CLOSE_WAIT	UDP	10.10.1.112	636	47.41.249.86	80	cjohnson
277	ENG-WS-012	2026-02-20T09:19:55.056Z	25221	teams.exe	SYN_SENT	UDP	10.10.1.112	65194	10.10.3.156	88	jsmith
278	ENG-WS-012	2026-02-13T14:01:23.034Z	6831	code.exe	TIME_WAIT	TCP	10.10.1.112	59710	214.97.9.174	53	fthompson
279	ENG-WS-012	2026-02-20T05:06:57.037Z	29979	notepad.exe	LISTEN	TCP	10.10.1.112	139	0.0.0.0	0	svc_backup
280	ENG-WS-012	2026-02-17T21:47:31.945Z	8698	dwm.exe	TIME_WAIT	TCP	10.10.1.112	3389	126.183.96.43	3389	cjohnson
281	ENG-WS-012	2026-02-16T19:47:01.299Z	39023	smss.exe	SYN_SENT	UDP	10.10.1.112	3389	10.10.1.13	636	jsmith
282	ENG-WS-012	2026-02-12T11:22:25.424Z	45040	spoolsv.exe	ESTABLISHED	TCP	10.10.1.112	5985	10.10.1.133	8080	admin
283	ENG-WS-012	2026-02-18T12:11:24.059Z	32719	lsass.exe	ESTABLISHED	TCP	10.10.1.112	88	156.70.214.213	443	cjohnson
284	ENG-WS-012	2026-02-17T12:03:03.523Z	31600	cmd.exe	SYN_SENT	UDP	10.10.1.112	636	10.10.3.171	3389	emartinez
285	ENG-WS-012	2026-02-13T02:01:52.520Z	3382	svchost.exe	ESTABLISHED	TCP	10.10.1.112	445	24.38.51.232	445	agarcia
286	ENG-WS-012	2026-02-17T05:50:19.524Z	11274	explorer.exe	TIME_WAIT	TCP	10.10.1.112	5985	190.59.48.218	8080	emartinez
287	ENG-WS-012	2026-02-13T03:57:29.781Z	25378	csrss.exe	SYN_SENT	TCP	10.10.1.112	3389	10.10.2.152	389	svc_backup
288	ENG-WS-012	2026-02-17T21:36:10.000Z	64428	lsass.exe	LISTEN	TCP	10.10.1.112	636	0.0.0.0	0	svc_web
289	ENG-WS-012	2026-02-11T12:14:03.731Z	27053	lsass.exe	SYN_SENT	TCP	10.10.1.112	445	157.194.183.157	389	gwhite
290	ENG-WS-012	2026-02-11T21:09:49.007Z	54261	cmd.exe	TIME_WAIT	TCP	10.10.1.112	389	10.10.3.132	88	hbrown
291	ENG-WS-012	2026-02-13T16:09:30.433Z	21785	services.exe	ESTABLISHED	TCP	10.10.1.112	53	218.240.253.223	389	dlee
292	ENG-WS-012	2026-02-14T23:46:01.307Z	7879	powershell.exe	SYN_SENT	TCP	10.10.1.112	135	10.10.3.174	389	gwhite
293	ENG-WS-012	2026-02-16T04:34:59.314Z	42999	svchost.exe	ESTABLISHED	TCP	10.10.1.112	80	10.10.1.11	636	admin
294	ENG-WS-012	2026-02-10T08:32:57.253Z	23374	taskhostw.exe	TIME_WAIT	TCP	10.10.1.112	8080	85.242.186.184	3389	svc_web
295	ENG-WS-012	2026-02-16T16:42:46.589Z	12390	notepad.exe	SYN_SENT	TCP	10.10.1.112	636	10.10.1.118	445	agarcia
296	ENG-WS-012	2026-02-13T20:29:00.193Z	49720	SearchHost.exe	LISTEN	TCP	10.10.1.112	636	0.0.0.0	0	fthompson
297	ENG-WS-012	2026-02-19T01:42:14.499Z	31749	spoolsv.exe	SYN_SENT	TCP	10.10.1.112	8080	169.68.255.2	88	hbrown
298	LEG-WS-013	2026-02-16T14:08:11.419Z	57948	teams.exe	LISTEN	TCP	10.10.2.113	389	0.0.0.0	0	emartinez
299	LEG-WS-013	2026-02-17T15:00:12.856Z	49148	SearchHost.exe	CLOSE_WAIT	TCP	10.10.2.113	139	102.175.150.116	28073	hbrown
300	LEG-WS-013	2026-02-17T13:34:40.776Z	21227	OneDrive.exe	SYN_SENT	TCP	10.10.2.113	135	54.148.176.236	636	svc_backup
301	LEG-WS-013	2026-02-11T20:19:54.040Z	44025	RuntimeBroker.exe	SYN_SENT	TCP	10.10.2.113	389	192.146.216.207	88	jsmith
302	LEG-WS-013	2026-02-11T09:37:12.005Z	56987	teams.exe	TIME_WAIT	TCP	10.10.2.113	80	177.151.104.193	389	admin
303	LEG-WS-013	2026-02-20T09:27:29.892Z	3625	powershell.exe	SYN_SENT	TCP	10.10.2.113	53	10.10.2.149	53	jsmith
304	LEG-WS-013	2026-02-20T13:51:47.991Z	4980	code.exe	SYN_SENT	TCP	10.10.2.113	389	10.10.2.125	8080	bwilson
305	LEG-WS-013	2026-02-15T04:34:58.204Z	61539	dwm.exe	ESTABLISHED	TCP	10.10.2.113	5985	10.10.1.175	53	bwilson
306	LEG-WS-013	2026-02-15T18:09:05.658Z	51628	taskhostw.exe	SYN_SENT	TCP	10.10.2.113	8080	203.183.37.201	8080	hbrown
307	LEG-WS-013	2026-02-15T20:37:29.006Z	36887	System	SYN_SENT	TCP	10.10.2.113	3389	10.10.3.147	15340	svc_web
308	LEG-WS-013	2026-02-14T08:28:08.341Z	35504	spoolsv.exe	ESTABLISHED	TCP	10.10.2.113	8080	10.10.1.142	443	svc_backup
309	LEG-WS-013	2026-02-12T01:50:55.328Z	62770	dwm.exe	TIME_WAIT	TCP	10.10.2.113	8080	12.151.98.83	443	svc_sql
310	LEG-WS-013	2026-02-10T13:56:17.651Z	47080	svchost.exe	ESTABLISHED	UDP	10.10.2.113	389	109.53.105.138	8080	emartinez
311	LEG-WS-013	2026-02-14T20:15:22.531Z	1206	chrome.exe	ESTABLISHED	UDP	10.10.2.113	53	10.10.3.150	88	fthompson
312	LEG-WS-013	2026-02-16T15:38:29.257Z	18549	System	ESTABLISHED	TCP	10.10.2.113	51224	191.23.37.92	445	svc_sql
313	LEG-WS-013	2026-02-13T10:30:50.852Z	58228	SearchHost.exe	CLOSE_WAIT	TCP	10.10.2.113	445	10.10.1.151	8080	svc_sql
314	LEG-WS-013	2026-02-18T03:04:26.928Z	59314	spoolsv.exe	TIME_WAIT	TCP	10.10.2.113	443	11.2.201.138	3389	svc_backup
315	LEG-WS-013	2026-02-15T03:18:58.683Z	36122	lsass.exe	SYN_SENT	UDP	10.10.2.113	445	57.129.99.30	636	agarcia
316	LEG-WS-013	2026-02-16T18:52:44.199Z	59090	chrome.exe	TIME_WAIT	TCP	10.10.2.113	636	149.249.169.92	445	cjohnson
317	MKT-WS-014	2026-02-12T21:32:37.624Z	14617	taskhostw.exe	SYN_SENT	TCP	10.10.3.114	88	146.186.161.246	53	svc_backup
318	MKT-WS-014	2026-02-15T09:44:34.244Z	7232	lsass.exe	TIME_WAIT	TCP	10.10.3.114	389	10.10.2.158	445	bwilson
319	MKT-WS-014	2026-02-16T08:43:30.708Z	50510	chrome.exe	TIME_WAIT	UDP	10.10.3.114	139	188.39.38.229	54281	idavis
320	MKT-WS-014	2026-02-15T13:16:50.854Z	6034	explorer.exe	SYN_SENT	TCP	10.10.3.114	389	10.10.3.129	389	fthompson
321	MKT-WS-014	2026-02-15T16:32:03.012Z	29343	svchost.exe	LISTEN	TCP	10.10.3.114	54586	0.0.0.0	0	bwilson
322	MKT-WS-014	2026-02-12T14:42:17.205Z	32058	smss.exe	LISTEN	TCP	10.10.3.114	80	0.0.0.0	0	cjohnson
323	MKT-WS-014	2026-02-19T18:55:53.483Z	23774	RuntimeBroker.exe	LISTEN	TCP	10.10.3.114	53	0.0.0.0	0	fthompson
324	MKT-WS-014	2026-02-14T03:19:27.100Z	42917	csrss.exe	ESTABLISHED	TCP	10.10.3.114	443	181.140.134.149	88	svc_web
325	MKT-WS-014	2026-02-14T21:58:28.830Z	15172	cmd.exe	CLOSE_WAIT	UDP	10.10.3.114	3389	210.176.249.203	8080	agarcia
326	MKT-WS-014	2026-02-14T02:33:20.649Z	47109	cmd.exe	LISTEN	UDP	10.10.3.114	445	0.0.0.0	0	svc_web
327	MKT-WS-014	2026-02-10T13:36:41.434Z	2927	powershell.exe	CLOSE_WAIT	TCP	10.10.3.114	8080	173.245.245.54	88	bwilson
328	MKT-WS-014	2026-02-11T20:42:58.590Z	11001	teams.exe	LISTEN	TCP	10.10.3.114	88	0.0.0.0	0	dlee
329	MKT-WS-014	2026-02-12T02:38:30.105Z	54518	dwm.exe	CLOSE_WAIT	TCP	10.10.3.114	636	10.10.2.158	389	fthompson
330	MKT-WS-014	2026-02-17T21:02:48.118Z	22557	smss.exe	LISTEN	TCP	10.10.3.114	445	0.0.0.0	0	gwhite
331	MKT-WS-014	2026-02-11T11:08:33.102Z	13361	chrome.exe	LISTEN	TCP	10.10.3.114	445	0.0.0.0	0	hbrown
332	MKT-WS-014	2026-02-15T22:49:17.387Z	178	dwm.exe	CLOSE_WAIT	UDP	10.10.3.114	445	122.19.60.24	60136	svc_sql
333	MKT-WS-014	2026-02-18T17:09:18.935Z	59597	lsass.exe	SYN_SENT	TCP	10.10.3.114	80	10.10.3.162	23995	svc_sql
334	MKT-WS-014	2026-02-10T09:22:02.508Z	48835	smss.exe	ESTABLISHED	TCP	10.10.3.114	139	10.10.2.10	3389	svc_sql
335	MKT-WS-014	2026-02-17T02:53:38.341Z	16722	dwm.exe	ESTABLISHED	TCP	10.10.3.114	5985	168.105.161.105	88	dlee
336	MKT-WS-014	2026-02-16T03:46:24.446Z	31803	lsass.exe	SYN_SENT	TCP	10.10.3.114	389	10.10.1.172	53	dlee
337	MKT-WS-014	2026-02-14T12:08:24.815Z	22279	smss.exe	TIME_WAIT	TCP	10.10.3.114	389	31.117.228.201	636	svc_sql
338	MKT-WS-014	2026-02-13T01:46:22.798Z	24403	OneDrive.exe	ESTABLISHED	UDP	10.10.3.114	389	10.10.2.10	443	agarcia
339	MKT-WS-014	2026-02-19T04:38:30.872Z	61098	SearchHost.exe	CLOSE_WAIT	TCP	10.10.3.114	636	10.10.2.164	3389	svc_sql
340	MKT-WS-014	2026-02-18T10:55:05.591Z	23242	code.exe	ESTABLISHED	TCP	10.10.3.114	88	44.18.184.62	445	admin
341	MKT-WS-014	2026-02-17T15:54:19.731Z	60339	smss.exe	LISTEN	TCP	10.10.3.114	636	0.0.0.0	0	agarcia
342	MKT-WS-014	2026-02-14T13:47:01.163Z	7077	System	SYN_SENT	TCP	10.10.3.114	139	58.99.232.239	8080	hbrown
343	MKT-WS-014	2026-02-18T05:22:05.956Z	63095	notepad.exe	TIME_WAIT	TCP	10.10.3.114	53	10.10.2.149	3389	svc_sql
344	MKT-WS-014	2026-02-14T15:06:23.374Z	23240	csrss.exe	SYN_SENT	TCP	10.10.3.114	443	67.34.195.163	53	hbrown
345	EXEC-WS-015	2026-02-17T08:25:28.125Z	53909	cmd.exe	LISTEN	TCP	10.10.1.115	5985	0.0.0.0	0	emartinez
346	EXEC-WS-015	2026-02-12T18:42:55.234Z	15963	teams.exe	CLOSE_WAIT	TCP	10.10.1.115	135	10.10.2.125	3389	svc_web
347	EXEC-WS-015	2026-02-18T10:44:04.632Z	7956	powershell.exe	LISTEN	UDP	10.10.1.115	445	0.0.0.0	0	agarcia
348	EXEC-WS-015	2026-02-19T09:11:31.952Z	32265	MsMpEng.exe	CLOSE_WAIT	TCP	10.10.1.115	49369	10.10.3.10	33290	bwilson
349	EXEC-WS-015	2026-02-10T16:08:26.382Z	22859	dwm.exe	TIME_WAIT	TCP	10.10.1.115	56429	10.10.2.155	636	fthompson
350	EXEC-WS-015	2026-02-13T17:21:32.579Z	40259	teams.exe	CLOSE_WAIT	TCP	10.10.1.115	3389	10.10.1.127	443	svc_web
351	EXEC-WS-015	2026-02-17T15:10:41.364Z	24499	System	TIME_WAIT	UDP	10.10.1.115	8080	10.10.2.164	88	emartinez
352	EXEC-WS-015	2026-02-19T06:04:37.864Z	12949	cmd.exe	CLOSE_WAIT	UDP	10.10.1.115	88	176.117.51.185	88	bwilson
353	IT-WS-016	2026-02-20T16:53:25.593Z	55765	svchost.exe	LISTEN	TCP	10.10.2.116	445	0.0.0.0	0	admin
354	IT-WS-016	2026-02-15T07:08:05.481Z	41378	taskhostw.exe	CLOSE_WAIT	TCP	10.10.2.116	53	220.24.203.26	445	agarcia
355	IT-WS-016	2026-02-12T09:44:22.299Z	37841	taskhostw.exe	TIME_WAIT	TCP	10.10.2.116	53	143.131.176.6	24033	admin
356	IT-WS-016	2026-02-15T03:56:16.872Z	62791	teams.exe	TIME_WAIT	TCP	10.10.2.116	389	10.10.3.111	445	bwilson
357	IT-WS-016	2026-02-17T17:36:30.136Z	39774	spoolsv.exe	TIME_WAIT	TCP	10.10.2.116	443	10.10.3.141	445	admin
358	IT-WS-016	2026-02-12T12:38:34.342Z	26120	csrss.exe	TIME_WAIT	TCP	10.10.2.116	5985	10.10.2.131	443	agarcia
359	IT-WS-016	2026-02-13T13:20:33.588Z	16313	winlogon.exe	SYN_SENT	TCP	10.10.2.116	50015	102.42.53.68	88	svc_backup
360	IT-WS-016	2026-02-10T16:47:19.482Z	23485	spoolsv.exe	LISTEN	UDP	10.10.2.116	80	0.0.0.0	0	svc_web
361	IT-WS-016	2026-02-14T20:44:39.634Z	42029	winlogon.exe	CLOSE_WAIT	TCP	10.10.2.116	53	10.10.2.10	42380	admin
362	IT-WS-016	2026-02-10T10:38:20.236Z	34396	RuntimeBroker.exe	CLOSE_WAIT	TCP	10.10.2.116	56594	10.10.3.153	445	svc_web
363	IT-WS-016	2026-02-16T13:15:03.377Z	52316	outlook.exe	TIME_WAIT	TCP	10.10.2.116	53	10.10.3.102	445	jsmith
364	IT-WS-016	2026-02-14T17:33:35.444Z	15799	code.exe	CLOSE_WAIT	TCP	10.10.2.116	5985	64.83.199.213	443	hbrown
365	IT-WS-016	2026-02-16T18:25:56.472Z	17934	services.exe	TIME_WAIT	TCP	10.10.2.116	5985	49.35.93.35	389	svc_backup
366	IT-WS-016	2026-02-17T18:47:56.347Z	47751	code.exe	TIME_WAIT	TCP	10.10.2.116	80	10.10.3.114	8080	jsmith
367	IT-WS-016	2026-02-19T02:53:11.669Z	62466	outlook.exe	ESTABLISHED	TCP	10.10.2.116	3389	108.159.255.96	443	bwilson
368	IT-WS-016	2026-02-14T08:11:58.109Z	63995	qbittorrent.exe	CLOSE_WAIT	TCP	10.10.2.116	445	50.128.195.213	3389	gwhite
369	IT-WS-016	2026-02-17T06:30:07.095Z	13760	explorer.exe	LISTEN	TCP	10.10.2.116	53	0.0.0.0	0	gwhite
370	HR-WS-017	2026-02-19T13:52:47.618Z	56700	notepad.exe	TIME_WAIT	UDP	10.10.3.117	636	10.10.1.13	53	admin
371	HR-WS-017	2026-02-12T01:50:24.320Z	18194	msedge.exe	LISTEN	TCP	10.10.3.117	80	0.0.0.0	0	idavis
372	HR-WS-017	2026-02-11T06:51:01.397Z	40643	powershell.exe	ESTABLISHED	TCP	10.10.3.117	636	153.79.190.198	389	emartinez
373	HR-WS-017	2026-02-18T13:08:25.643Z	49690	spoolsv.exe	ESTABLISHED	TCP	10.10.3.117	389	10.10.1.130	636	emartinez
374	HR-WS-017	2026-02-17T21:05:59.242Z	16529	csrss.exe	LISTEN	TCP	10.10.3.117	3389	0.0.0.0	0	jsmith
375	HR-WS-017	2026-02-19T20:37:06.601Z	36441	csrss.exe	SYN_SENT	TCP	10.10.3.117	135	10.10.1.160	57887	bwilson
376	HR-WS-017	2026-02-19T12:43:59.135Z	40714	outlook.exe	CLOSE_WAIT	TCP	10.10.3.117	53	10.10.1.13	8080	svc_web
377	HR-WS-017	2026-02-20T09:47:26.841Z	53777	services.exe	LISTEN	TCP	10.10.3.117	389	0.0.0.0	0	fthompson
378	HR-WS-017	2026-02-17T04:43:21.927Z	2968	MsMpEng.exe	CLOSE_WAIT	TCP	10.10.3.117	88	73.165.209.165	636	svc_web
379	HR-WS-017	2026-02-17T15:19:42.619Z	16873	teams.exe	ESTABLISHED	UDP	10.10.3.117	8080	10.10.3.150	35484	jsmith
380	HR-WS-017	2026-02-18T01:52:09.696Z	58455	services.exe	ESTABLISHED	TCP	10.10.3.117	389	126.40.239.206	636	fthompson
381	HR-WS-017	2026-02-15T20:54:54.946Z	12516	OneDrive.exe	ESTABLISHED	TCP	10.10.3.117	53	11.36.155.20	3389	cjohnson
382	HR-WS-017	2026-02-16T01:29:28.919Z	33175	powershell.exe	SYN_SENT	UDP	10.10.3.117	636	28.183.234.180	8080	emartinez
383	HR-WS-017	2026-02-16T16:06:12.033Z	37006	System	SYN_SENT	TCP	10.10.3.117	3389	10.10.1.13	53	hbrown
384	HR-WS-017	2026-02-20T16:21:10.808Z	19881	System	TIME_WAIT	TCP	10.10.3.117	8080	102.0.17.252	8080	jsmith
385	HR-WS-017	2026-02-18T21:29:05.930Z	45301	powershell.exe	LISTEN	TCP	10.10.3.117	49863	0.0.0.0	0	svc_web
386	HR-WS-017	2026-02-12T22:27:51.215Z	16893	System	SYN_SENT	TCP	10.10.3.117	443	10.10.1.118	25081	svc_sql
387	HR-WS-017	2026-02-10T17:20:34.436Z	53075	smss.exe	CLOSE_WAIT	TCP	10.10.3.117	636	20.166.247.45	445	idavis
388	HR-WS-017	2026-02-10T21:31:55.153Z	34465	explorer.exe	TIME_WAIT	TCP	10.10.3.117	5985	223.61.116.192	88	jsmith
389	HR-WS-017	2026-02-10T20:37:47.832Z	48044	smss.exe	LISTEN	TCP	10.10.3.117	445	0.0.0.0	0	fthompson
390	HR-WS-017	2026-02-16T06:51:36.531Z	3331	services.exe	SYN_SENT	TCP	10.10.3.117	135	10.10.3.117	389	hbrown
391	HR-WS-017	2026-02-17T03:03:43.595Z	12951	chrome.exe	CLOSE_WAIT	TCP	10.10.3.117	63389	179.66.69.124	88	hbrown
392	HR-WS-017	2026-02-18T10:11:34.708Z	21295	dwm.exe	LISTEN	UDP	10.10.3.117	139	0.0.0.0	0	admin
393	HR-WS-017	2026-02-12T02:18:49.737Z	23019	chrome.exe	ESTABLISHED	TCP	10.10.3.117	3389	90.97.164.89	445	idavis
394	HR-WS-017	2026-02-11T12:05:34.566Z	3674	csrss.exe	SYN_SENT	UDP	10.10.3.117	80	210.119.102.176	443	cjohnson
395	HR-WS-017	2026-02-18T01:00:11.686Z	13985	outlook.exe	TIME_WAIT	TCP	10.10.3.117	636	206.56.156.116	3389	cjohnson
396	HR-WS-017	2026-02-10T23:01:39.044Z	13252	cmd.exe	SYN_SENT	TCP	10.10.3.117	636	179.9.192.150	8080	svc_sql
397	HR-WS-017	2026-02-12T17:47:31.758Z	25049	cmd.exe	ESTABLISHED	TCP	10.10.3.117	443	100.138.184.222	88	hbrown
398	HR-WS-017	2026-02-14T10:20:59.836Z	10389	msedge.exe	TIME_WAIT	TCP	10.10.3.117	445	10.10.3.132	389	jsmith
399	HR-WS-017	2026-02-20T05:16:44.776Z	14883	RuntimeBroker.exe	TIME_WAIT	TCP	10.10.3.117	53	71.31.131.225	636	bwilson
400	HR-WS-017	2026-02-20T08:09:05.124Z	40237	SearchHost.exe	LISTEN	TCP	10.10.3.117	53	0.0.0.0	0	svc_web
401	HR-WS-017	2026-02-16T09:15:27.630Z	44929	powershell.exe	CLOSE_WAIT	UDP	10.10.3.117	5985	80.168.229.139	8080	svc_sql
402	FIN-WS-018	2026-02-19T01:52:50.258Z	9636	notepad.exe	SYN_SENT	UDP	10.10.1.118	63244	38.80.162.18	53	svc_backup
403	FIN-WS-018	2026-02-10T14:32:58.399Z	64715	taskhostw.exe	CLOSE_WAIT	TCP	10.10.1.118	8080	191.140.77.200	8080	idavis
404	FIN-WS-018	2026-02-19T03:32:04.412Z	30820	services.exe	SYN_SENT	TCP	10.10.1.118	88	10.10.3.111	636	svc_backup
405	FIN-WS-018	2026-02-20T05:32:58.238Z	14685	teams.exe	CLOSE_WAIT	TCP	10.10.1.118	445	42.98.115.9	445	svc_backup
406	FIN-WS-018	2026-02-19T08:46:56.102Z	32208	code.exe	LISTEN	TCP	10.10.1.118	8080	0.0.0.0	0	svc_backup
407	FIN-WS-018	2026-02-10T18:27:23.647Z	48290	csrss.exe	LISTEN	TCP	10.10.1.118	62418	0.0.0.0	0	svc_web
408	FIN-WS-018	2026-02-14T10:54:10.076Z	48280	taskhostw.exe	CLOSE_WAIT	TCP	10.10.1.118	53	28.231.233.212	636	jsmith
409	FIN-WS-018	2026-02-19T21:45:29.537Z	45316	dwm.exe	ESTABLISHED	UDP	10.10.1.118	8080	10.10.2.122	20319	hbrown
410	FIN-WS-018	2026-02-15T01:25:12.662Z	58860	csrss.exe	CLOSE_WAIT	TCP	10.10.1.118	445	10.10.1.142	8080	svc_backup
411	FIN-WS-018	2026-02-11T05:19:35.889Z	46452	csrss.exe	ESTABLISHED	TCP	10.10.1.118	636	10.10.1.115	53	fthompson
412	FIN-WS-018	2026-02-12T04:43:00.088Z	46764	dwm.exe	SYN_SENT	UDP	10.10.1.118	53	98.22.87.234	8080	jsmith
413	FIN-WS-018	2026-02-19T05:51:09.950Z	35718	notepad.exe	CLOSE_WAIT	TCP	10.10.1.118	443	34.103.1.160	389	svc_sql
414	FIN-WS-018	2026-02-10T09:38:35.720Z	57913	epicgameslauncher.exe	CLOSE_WAIT	UDP	10.10.1.118	88	169.243.232.105	40425	hbrown
415	FIN-WS-018	2026-02-19T01:30:12.992Z	19658	spoolsv.exe	SYN_SENT	UDP	10.10.1.118	445	38.28.178.10	44736	emartinez
416	FIN-WS-018	2026-02-11T07:16:53.659Z	19714	explorer.exe	ESTABLISHED	TCP	10.10.1.118	445	10.10.3.159	80	emartinez
417	FIN-WS-018	2026-02-15T19:09:41.588Z	45701	SearchHost.exe	ESTABLISHED	TCP	10.10.1.118	139	10.10.1.136	88	cjohnson
418	FIN-WS-018	2026-02-20T16:45:21.902Z	23290	msedge.exe	SYN_SENT	TCP	10.10.1.118	8080	10.10.3.141	35456	bwilson
419	FIN-WS-018	2026-02-15T04:13:17.070Z	52314	winlogon.exe	SYN_SENT	TCP	10.10.1.118	65290	47.119.148.251	80	agarcia
420	FIN-WS-018	2026-02-12T23:36:15.769Z	4545	code.exe	SYN_SENT	TCP	10.10.1.118	80	86.179.108.3	445	dlee
421	FIN-WS-018	2026-02-12T08:30:14.021Z	54745	System	TIME_WAIT	TCP	10.10.1.118	389	86.174.202.186	8080	emartinez
422	SLS-WS-019	2026-02-15T03:09:16.142Z	56803	explorer.exe	LISTEN	TCP	10.10.2.119	389	0.0.0.0	0	hbrown
423	SLS-WS-019	2026-02-11T00:33:11.737Z	9884	csrss.exe	CLOSE_WAIT	TCP	10.10.2.119	88	10.10.3.174	53	dlee
424	SLS-WS-019	2026-02-17T17:27:36.013Z	17892	taskhostw.exe	CLOSE_WAIT	TCP	10.10.2.119	88	10.10.1.115	53	fthompson
425	SLS-WS-019	2026-02-19T20:20:18.461Z	29183	powershell.exe	TIME_WAIT	TCP	10.10.2.119	135	135.154.89.29	3389	hbrown
426	SLS-WS-019	2026-02-15T02:50:31.569Z	46871	winlogon.exe	SYN_SENT	UDP	10.10.2.119	3389	124.158.167.37	80	svc_web
427	SLS-WS-019	2026-02-16T23:42:45.766Z	13852	svchost.exe	TIME_WAIT	TCP	10.10.2.119	3389	120.23.52.134	445	emartinez
428	SLS-WS-019	2026-02-20T07:34:28.249Z	36775	notepad.exe	TIME_WAIT	TCP	10.10.2.119	59609	10.10.1.121	80	hbrown
429	SLS-WS-019	2026-02-15T23:08:39.391Z	3424	System	TIME_WAIT	TCP	10.10.2.119	139	10.10.2.110	53	bwilson
430	SLS-WS-019	2026-02-13T14:06:36.586Z	53671	epicgameslauncher.exe	ESTABLISHED	TCP	10.10.2.119	80	10.10.2.10	53	cjohnson
431	SLS-WS-019	2026-02-15T05:38:11.287Z	62191	MsMpEng.exe	SYN_SENT	TCP	10.10.2.119	88	10.10.3.159	389	cjohnson
432	SLS-WS-019	2026-02-11T12:13:18.351Z	31468	services.exe	TIME_WAIT	TCP	10.10.2.119	445	180.169.166.117	389	gwhite
433	SLS-WS-019	2026-02-15T21:11:11.009Z	26367	notepad.exe	TIME_WAIT	TCP	10.10.2.119	53	27.207.54.84	445	idavis
434	SLS-WS-019	2026-02-14T07:57:14.812Z	22429	services.exe	LISTEN	TCP	10.10.2.119	8080	0.0.0.0	0	cjohnson
435	SLS-WS-019	2026-02-16T13:01:07.944Z	21423	smss.exe	CLOSE_WAIT	TCP	10.10.2.119	53	10.10.2.110	8516	hbrown
436	SLS-WS-019	2026-02-16T13:33:53.263Z	45025	csrss.exe	LISTEN	TCP	10.10.2.119	443	0.0.0.0	0	svc_web
437	SLS-WS-019	2026-02-13T08:52:32.928Z	40442	SearchHost.exe	TIME_WAIT	TCP	10.10.2.119	443	56.71.0.194	636	idavis
438	SLS-WS-019	2026-02-19T05:07:34.661Z	4190	code.exe	TIME_WAIT	TCP	10.10.2.119	5985	10.10.3.102	8080	emartinez
439	SLS-WS-019	2026-02-17T17:56:36.286Z	26709	explorer.exe	ESTABLISHED	TCP	10.10.2.119	443	10.10.3.156	53	fthompson
440	SLS-WS-019	2026-02-16T02:51:19.420Z	55368	code.exe	LISTEN	TCP	10.10.2.119	135	0.0.0.0	0	emartinez
441	SLS-WS-019	2026-02-11T05:09:57.099Z	42190	outlook.exe	TIME_WAIT	UDP	10.10.2.119	80	10.10.1.163	8080	svc_sql
442	SLS-WS-019	2026-02-16T15:08:35.931Z	37975	csrss.exe	SYN_SENT	TCP	10.10.2.119	8080	131.217.230.99	88	gwhite
443	SLS-WS-019	2026-02-11T12:17:27.932Z	31657	powershell.exe	SYN_SENT	TCP	10.10.2.119	53	10.10.3.105	53	svc_backup
444	SLS-WS-019	2026-02-18T15:31:28.416Z	20579	dwm.exe	TIME_WAIT	TCP	10.10.2.119	53	157.45.125.121	636	idavis
445	SLS-WS-019	2026-02-10T16:49:53.616Z	60580	taskhostw.exe	SYN_SENT	TCP	10.10.2.119	8080	10.10.2.146	8080	idavis
446	SLS-WS-019	2026-02-11T04:37:39.150Z	33234	smss.exe	TIME_WAIT	TCP	10.10.2.119	88	44.26.149.208	389	agarcia
447	SLS-WS-019	2026-02-18T00:44:30.510Z	43298	cmd.exe	TIME_WAIT	UDP	10.10.2.119	139	220.131.7.190	60670	gwhite
448	SLS-WS-019	2026-02-19T01:24:12.797Z	49432	teams.exe	TIME_WAIT	UDP	10.10.2.119	445	205.16.175.252	8080	fthompson
449	SLS-WS-019	2026-02-15T04:00:13.435Z	31310	powershell.exe	CLOSE_WAIT	UDP	10.10.2.119	88	188.176.27.165	8080	dlee
450	SLS-WS-019	2026-02-13T01:39:22.636Z	34863	System	LISTEN	TCP	10.10.2.119	8080	0.0.0.0	0	svc_web
451	SLS-WS-019	2026-02-16T16:37:17.011Z	42833	notepad.exe	CLOSE_WAIT	TCP	10.10.2.119	53	10.10.1.169	88	svc_web
452	SLS-WS-019	2026-02-17T09:25:46.344Z	11891	cmd.exe	TIME_WAIT	TCP	10.10.2.119	389	150.200.236.198	53	emartinez
453	SLS-WS-019	2026-02-10T16:30:37.586Z	40692	MsMpEng.exe	ESTABLISHED	TCP	10.10.2.119	5985	10.10.3.129	3389	agarcia
454	SLS-WS-019	2026-02-20T07:26:55.803Z	5761	services.exe	LISTEN	TCP	10.10.2.119	636	0.0.0.0	0	svc_web
455	SLS-WS-019	2026-02-18T08:20:23.216Z	45465	SearchHost.exe	SYN_SENT	UDP	10.10.2.119	636	10.10.2.110	445	admin
456	SLS-WS-019	2026-02-12T04:28:56.537Z	4648	taskhostw.exe	TIME_WAIT	UDP	10.10.2.119	139	199.31.195.100	445	gwhite
457	SLS-WS-019	2026-02-19T20:09:08.300Z	46984	code.exe	SYN_SENT	TCP	10.10.2.119	389	126.55.73.139	443	dlee
458	SLS-WS-019	2026-02-17T06:09:05.252Z	17561	chrome.exe	ESTABLISHED	TCP	10.10.2.119	57363	115.9.254.39	80	bwilson
459	SLS-WS-019	2026-02-11T14:18:03.285Z	35181	SearchHost.exe	SYN_SENT	TCP	10.10.2.119	8080	112.206.35.139	389	emartinez
460	ENG-WS-020	2026-02-12T04:09:16.474Z	2677	SearchHost.exe	ESTABLISHED	TCP	10.10.3.120	53	10.10.3.159	3389	fthompson
461	ENG-WS-020	2026-02-12T19:37:16.618Z	25578	notepad.exe	CLOSE_WAIT	TCP	10.10.3.120	8080	22.224.97.36	2686	agarcia
462	ENG-WS-020	2026-02-18T17:46:33.335Z	43833	spoolsv.exe	TIME_WAIT	TCP	10.10.3.120	80	10.10.1.106	3389	hbrown
463	ENG-WS-020	2026-02-10T19:27:01.524Z	46060	MsMpEng.exe	SYN_SENT	UDP	10.10.3.120	443	10.10.1.103	60476	admin
464	ENG-WS-020	2026-02-18T15:47:37.700Z	14555	teams.exe	ESTABLISHED	TCP	10.10.3.120	8080	157.87.32.210	33604	agarcia
465	ENG-WS-020	2026-02-13T19:52:33.354Z	8013	lsass.exe	TIME_WAIT	TCP	10.10.3.120	443	176.70.164.215	8080	dlee
466	ENG-WS-020	2026-02-12T20:54:40.148Z	38241	lsass.exe	LISTEN	TCP	10.10.3.120	8080	0.0.0.0	0	jsmith
467	ENG-WS-020	2026-02-19T13:43:43.627Z	27377	spoolsv.exe	SYN_SENT	TCP	10.10.3.120	80	125.41.3.2	47340	svc_backup
468	ENG-WS-020	2026-02-13T03:44:14.772Z	29618	winlogon.exe	LISTEN	UDP	10.10.3.120	389	0.0.0.0	0	fthompson
469	ENG-WS-020	2026-02-12T07:58:32.575Z	64758	teams.exe	SYN_SENT	TCP	10.10.3.120	636	128.45.154.90	3389	hbrown
470	ENG-WS-020	2026-02-17T11:18:39.378Z	63576	services.exe	TIME_WAIT	TCP	10.10.3.120	8080	198.106.141.14	8080	gwhite
471	ENG-WS-020	2026-02-18T01:06:15.196Z	60711	teams.exe	ESTABLISHED	TCP	10.10.3.120	139	10.10.1.12	443	hbrown
472	ENG-WS-020	2026-02-13T17:31:59.002Z	6526	svchost.exe	CLOSE_WAIT	TCP	10.10.3.120	443	10.10.3.126	443	cjohnson
473	ENG-WS-020	2026-02-15T01:44:51.785Z	25484	code.exe	CLOSE_WAIT	UDP	10.10.3.120	8080	150.248.27.228	15190	emartinez
474	ENG-WS-020	2026-02-15T02:38:41.032Z	11319	code.exe	TIME_WAIT	TCP	10.10.3.120	3389	33.16.30.72	389	svc_sql
475	ENG-WS-020	2026-02-16T11:53:42.784Z	54952	notepad.exe	SYN_SENT	UDP	10.10.3.120	88	10.10.2.167	3389	gwhite
476	ENG-WS-020	2026-02-16T08:52:00.327Z	58546	lsass.exe	LISTEN	UDP	10.10.3.120	5985	0.0.0.0	0	idavis
477	ENG-WS-020	2026-02-15T01:06:37.231Z	15862	smss.exe	ESTABLISHED	TCP	10.10.3.120	80	10.10.1.151	443	agarcia
478	ENG-WS-020	2026-02-19T06:28:49.900Z	49074	svchost.exe	CLOSE_WAIT	UDP	10.10.3.120	3389	10.10.3.162	389	idavis
479	ENG-WS-020	2026-02-14T08:13:11.341Z	45369	csrss.exe	CLOSE_WAIT	UDP	10.10.3.120	445	203.189.237.181	443	emartinez
480	ENG-WS-020	2026-02-11T11:44:29.889Z	24059	notepad.exe	CLOSE_WAIT	TCP	10.10.3.120	55939	10.10.3.108	80	gwhite
481	ENG-WS-020	2026-02-17T02:15:34.560Z	48424	RuntimeBroker.exe	TIME_WAIT	UDP	10.10.3.120	53	182.104.70.252	443	svc_sql
482	ENG-WS-020	2026-02-19T16:28:59.734Z	33101	OneDrive.exe	LISTEN	UDP	10.10.3.120	3389	0.0.0.0	0	admin
483	ENG-WS-020	2026-02-14T04:02:11.266Z	44225	explorer.exe	ESTABLISHED	TCP	10.10.3.120	8080	10.10.1.169	30644	svc_backup
484	ENG-WS-020	2026-02-14T09:40:14.252Z	11818	chrome.exe	LISTEN	TCP	10.10.3.120	443	0.0.0.0	0	dlee
485	ENG-WS-020	2026-02-20T10:23:37.144Z	35583	chrome.exe	ESTABLISHED	UDP	10.10.3.120	443	179.75.254.39	88	bwilson
486	ENG-WS-020	2026-02-13T21:41:53.230Z	42439	lsass.exe	CLOSE_WAIT	TCP	10.10.3.120	135	10.10.2.167	28004	svc_sql
487	ENG-WS-020	2026-02-20T10:40:51.643Z	50546	smss.exe	SYN_SENT	TCP	10.10.3.120	8080	78.67.156.44	53	svc_web
488	ENG-WS-020	2026-02-11T13:13:45.601Z	20850	RuntimeBroker.exe	TIME_WAIT	TCP	10.10.3.120	88	42.146.93.250	3389	idavis
489	LEG-WS-021	2026-02-13T15:14:09.388Z	22634	RuntimeBroker.exe	LISTEN	UDP	10.10.1.121	389	0.0.0.0	0	bwilson
490	LEG-WS-021	2026-02-19T22:06:30.578Z	26613	System	LISTEN	TCP	10.10.1.121	443	0.0.0.0	0	gwhite
491	LEG-WS-021	2026-02-17T22:08:09.408Z	60543	csrss.exe	TIME_WAIT	UDP	10.10.1.121	636	140.169.151.122	53425	gwhite
492	LEG-WS-021	2026-02-11T07:07:13.018Z	3706	msedge.exe	CLOSE_WAIT	TCP	10.10.1.121	389	142.59.157.7	53	idavis
493	LEG-WS-021	2026-02-13T15:26:22.030Z	39754	smss.exe	SYN_SENT	UDP	10.10.1.121	135	10.10.1.112	389	hbrown
494	LEG-WS-021	2026-02-13T23:50:19.530Z	64162	MsMpEng.exe	TIME_WAIT	TCP	10.10.1.121	636	219.218.189.99	53	gwhite
495	LEG-WS-021	2026-02-14T22:37:33.927Z	10834	chrome.exe	LISTEN	TCP	10.10.1.121	62770	0.0.0.0	0	svc_sql
496	LEG-WS-021	2026-02-18T05:01:42.648Z	5896	lsass.exe	CLOSE_WAIT	UDP	10.10.1.121	445	10.10.3.168	5356	jsmith
497	LEG-WS-021	2026-02-10T18:33:29.622Z	54249	cmd.exe	CLOSE_WAIT	UDP	10.10.1.121	636	10.10.2.149	389	dlee
498	LEG-WS-021	2026-02-14T16:17:21.094Z	32336	notepad.exe	CLOSE_WAIT	TCP	10.10.1.121	135	10.10.1.139	445	svc_backup
499	LEG-WS-021	2026-02-20T11:33:52.873Z	53726	svchost.exe	ESTABLISHED	TCP	10.10.1.121	443	10.10.3.156	389	agarcia
500	LEG-WS-021	2026-02-13T04:10:03.318Z	27593	smss.exe	ESTABLISHED	TCP	10.10.1.121	88	10.10.1.118	80	admin
501	LEG-WS-021	2026-02-16T13:41:26.239Z	11053	RuntimeBroker.exe	ESTABLISHED	TCP	10.10.1.121	53	164.39.99.197	443	hbrown
502	LEG-WS-021	2026-02-14T14:59:55.054Z	60452	taskhostw.exe	TIME_WAIT	TCP	10.10.1.121	443	10.10.1.118	389	bwilson
503	LEG-WS-021	2026-02-19T22:51:08.777Z	31525	outlook.exe	SYN_SENT	UDP	10.10.1.121	55326	144.58.213.118	8080	emartinez
504	LEG-WS-021	2026-02-17T17:28:25.394Z	1984	RuntimeBroker.exe	LISTEN	TCP	10.10.1.121	445	0.0.0.0	0	svc_backup
505	MKT-WS-022	2026-02-12T12:27:36.905Z	64397	OneDrive.exe	LISTEN	UDP	10.10.2.122	445	0.0.0.0	0	agarcia
506	MKT-WS-022	2026-02-19T19:07:56.368Z	2936	msedge.exe	ESTABLISHED	TCP	10.10.2.122	65020	111.21.100.28	443	agarcia
507	MKT-WS-022	2026-02-20T05:11:52.444Z	22895	svchost.exe	ESTABLISHED	TCP	10.10.2.122	88	52.94.179.8	445	emartinez
508	MKT-WS-022	2026-02-10T09:04:56.035Z	47636	dwm.exe	SYN_SENT	UDP	10.10.2.122	443	10.10.2.125	636	agarcia
509	MKT-WS-022	2026-02-15T16:33:45.902Z	26811	dwm.exe	CLOSE_WAIT	TCP	10.10.2.122	8080	10.10.2.146	3389	agarcia
510	MKT-WS-022	2026-02-15T11:25:41.518Z	25317	taskhostw.exe	ESTABLISHED	TCP	10.10.2.122	53	35.253.184.181	53	dlee
511	MKT-WS-022	2026-02-12T04:49:27.555Z	44281	notepad.exe	CLOSE_WAIT	UDP	10.10.2.122	139	10.10.1.109	53	gwhite
512	MKT-WS-022	2026-02-11T00:10:39.370Z	64011	SearchHost.exe	CLOSE_WAIT	TCP	10.10.2.122	443	37.202.205.178	8080	cjohnson
513	MKT-WS-022	2026-02-14T01:01:27.576Z	43791	services.exe	CLOSE_WAIT	TCP	10.10.2.122	5985	10.10.1.175	88	idavis
514	MKT-WS-022	2026-02-10T15:25:51.166Z	48452	winlogon.exe	SYN_SENT	TCP	10.10.2.122	53981	10.10.1.163	8080	jsmith
515	MKT-WS-022	2026-02-17T05:16:12.543Z	34175	winlogon.exe	ESTABLISHED	UDP	10.10.2.122	88	174.167.78.78	443	svc_sql
516	MKT-WS-022	2026-02-15T14:11:55.280Z	35649	csrss.exe	LISTEN	TCP	10.10.2.122	8080	0.0.0.0	0	emartinez
517	MKT-WS-022	2026-02-10T16:12:53.816Z	36581	System	SYN_SENT	TCP	10.10.2.122	5985	10.10.2.149	80	admin
518	MKT-WS-022	2026-02-13T14:06:53.707Z	25598	notepad.exe	LISTEN	TCP	10.10.2.122	445	0.0.0.0	0	gwhite
519	MKT-WS-022	2026-02-16T18:14:05.708Z	23218	smss.exe	CLOSE_WAIT	TCP	10.10.2.122	8080	10.10.2.134	88	svc_sql
520	EXEC-WS-023	2026-02-14T14:58:56.642Z	3799	svchost.exe	SYN_SENT	TCP	10.10.3.123	3389	10.10.2.113	53	admin
521	EXEC-WS-023	2026-02-10T17:20:39.859Z	43207	powershell.exe	TIME_WAIT	TCP	10.10.3.123	636	17.156.58.87	53	svc_web
522	EXEC-WS-023	2026-02-11T08:25:53.105Z	32105	dwm.exe	CLOSE_WAIT	TCP	10.10.3.123	636	10.10.3.174	22154	agarcia
523	EXEC-WS-023	2026-02-19T02:05:42.439Z	35216	code.exe	TIME_WAIT	TCP	10.10.3.123	445	158.153.186.249	443	cjohnson
524	EXEC-WS-023	2026-02-18T16:17:47.104Z	31247	explorer.exe	TIME_WAIT	TCP	10.10.3.123	62325	10.10.3.144	5432	fthompson
525	EXEC-WS-023	2026-02-15T01:18:25.744Z	50132	chrome.exe	TIME_WAIT	TCP	10.10.3.123	5985	10.10.2.152	636	hbrown
526	EXEC-WS-023	2026-02-17T21:39:13.561Z	4024	svchost.exe	SYN_SENT	UDP	10.10.3.123	135	10.10.1.13	62276	hbrown
527	EXEC-WS-023	2026-02-17T11:19:35.973Z	19778	csrss.exe	LISTEN	UDP	10.10.3.123	636	0.0.0.0	0	svc_web
528	EXEC-WS-023	2026-02-11T12:23:22.718Z	12677	taskhostw.exe	ESTABLISHED	UDP	10.10.3.123	139	211.146.82.66	3389	jsmith
529	EXEC-WS-023	2026-02-18T13:25:02.856Z	18304	notepad.exe	CLOSE_WAIT	TCP	10.10.3.123	5985	166.18.103.41	445	admin
530	EXEC-WS-023	2026-02-19T16:11:35.919Z	44118	spoolsv.exe	ESTABLISHED	TCP	10.10.3.123	80	221.42.160.155	88	admin
531	EXEC-WS-023	2026-02-17T23:37:12.366Z	61240	SearchHost.exe	LISTEN	UDP	10.10.3.123	88	0.0.0.0	0	agarcia
532	EXEC-WS-023	2026-02-20T01:52:30.086Z	14387	smss.exe	SYN_SENT	TCP	10.10.3.123	443	10.10.1.175	3389	bwilson
533	EXEC-WS-023	2026-02-14T17:56:43.184Z	44843	code.exe	TIME_WAIT	TCP	10.10.3.123	139	221.28.251.137	636	cjohnson
534	EXEC-WS-023	2026-02-13T13:19:01.651Z	62915	outlook.exe	TIME_WAIT	TCP	10.10.3.123	139	10.10.2.131	88	svc_backup
535	EXEC-WS-023	2026-02-13T10:21:20.612Z	56422	MsMpEng.exe	ESTABLISHED	TCP	10.10.3.123	8080	10.10.1.133	3389	bwilson
536	EXEC-WS-023	2026-02-19T11:11:25.104Z	53855	spoolsv.exe	TIME_WAIT	TCP	10.10.3.123	139	10.10.3.153	88	agarcia
537	EXEC-WS-023	2026-02-16T21:32:20.707Z	51940	OneDrive.exe	TIME_WAIT	TCP	10.10.3.123	3389	108.167.232.178	8080	admin
538	EXEC-WS-023	2026-02-11T04:33:28.846Z	10443	SearchHost.exe	LISTEN	TCP	10.10.3.123	88	0.0.0.0	0	cjohnson
539	EXEC-WS-023	2026-02-20T02:51:16.399Z	29688	spoolsv.exe	LISTEN	TCP	10.10.3.123	62597	0.0.0.0	0	gwhite
540	EXEC-WS-023	2026-02-20T04:11:21.439Z	58056	outlook.exe	TIME_WAIT	UDP	10.10.3.123	59886	73.101.43.107	88	idavis
541	EXEC-WS-023	2026-02-14T19:13:33.031Z	17149	svchost.exe	SYN_SENT	TCP	10.10.3.123	443	119.101.134.180	27306	bwilson
542	EXEC-WS-023	2026-02-17T19:38:45.081Z	28618	RuntimeBroker.exe	LISTEN	TCP	10.10.3.123	80	0.0.0.0	0	svc_sql
543	EXEC-WS-023	2026-02-19T06:05:03.954Z	39427	csrss.exe	CLOSE_WAIT	TCP	10.10.3.123	636	10.10.2.164	88	cjohnson
544	EXEC-WS-023	2026-02-18T14:06:57.181Z	1985	notepad.exe	LISTEN	TCP	10.10.3.123	5985	0.0.0.0	0	dlee
545	EXEC-WS-023	2026-02-20T11:35:59.259Z	26154	powershell.exe	SYN_SENT	TCP	10.10.3.123	3389	150.234.43.3	53	admin
546	IT-WS-024	2026-02-20T17:11:05.493Z	61659	OneDrive.exe	CLOSE_WAIT	TCP	10.10.1.124	443	10.10.2.131	53	admin
547	IT-WS-024	2026-02-10T18:16:52.490Z	11855	services.exe	ESTABLISHED	TCP	10.10.1.124	53	10.10.1.151	636	dlee
548	IT-WS-024	2026-02-15T12:48:09.555Z	63890	winlogon.exe	TIME_WAIT	TCP	10.10.1.124	443	10.10.1.115	8080	svc_web
549	IT-WS-024	2026-02-18T06:55:07.872Z	10013	RuntimeBroker.exe	CLOSE_WAIT	TCP	10.10.1.124	88	10.10.2.122	389	hbrown
550	IT-WS-024	2026-02-14T21:06:26.879Z	58766	MsMpEng.exe	CLOSE_WAIT	TCP	10.10.1.124	445	10.10.2.161	389	gwhite
551	IT-WS-024	2026-02-12T05:09:49.467Z	11129	RuntimeBroker.exe	SYN_SENT	TCP	10.10.1.124	8080	29.75.63.90	445	svc_backup
552	IT-WS-024	2026-02-17T09:13:37.664Z	58254	cmd.exe	SYN_SENT	TCP	10.10.1.124	88	2.92.213.236	389	emartinez
553	IT-WS-024	2026-02-15T01:30:49.963Z	62700	MsMpEng.exe	ESTABLISHED	TCP	10.10.1.124	88	10.10.3.111	389	dlee
554	IT-WS-024	2026-02-18T01:56:59.993Z	35958	svchost.exe	TIME_WAIT	TCP	10.10.1.124	3389	10.10.2.107	80	idavis
555	IT-WS-024	2026-02-13T07:14:02.300Z	49419	SearchHost.exe	TIME_WAIT	UDP	10.10.1.124	57018	222.204.45.6	88	admin
556	IT-WS-024	2026-02-15T10:24:20.732Z	58126	notepad.exe	CLOSE_WAIT	TCP	10.10.1.124	389	10.10.2.113	3389	fthompson
557	IT-WS-024	2026-02-15T16:20:07.313Z	63884	smss.exe	SYN_SENT	TCP	10.10.1.124	52108	10.10.2.11	80	gwhite
558	IT-WS-024	2026-02-15T05:03:17.254Z	5289	spoolsv.exe	LISTEN	TCP	10.10.1.124	139	0.0.0.0	0	svc_sql
559	IT-WS-024	2026-02-14T18:55:58.626Z	37359	outlook.exe	LISTEN	TCP	10.10.1.124	53	0.0.0.0	0	jsmith
560	IT-WS-024	2026-02-10T12:04:01.824Z	48630	explorer.exe	SYN_SENT	TCP	10.10.1.124	5985	25.237.129.91	636	admin
561	IT-WS-024	2026-02-13T21:20:00.941Z	60269	teams.exe	CLOSE_WAIT	TCP	10.10.1.124	5985	10.10.3.159	445	svc_web
562	IT-WS-024	2026-02-11T10:34:57.592Z	35120	code.exe	LISTEN	TCP	10.10.1.124	389	0.0.0.0	0	jsmith
563	IT-WS-024	2026-02-18T17:09:36.661Z	5843	msedge.exe	ESTABLISHED	UDP	10.10.1.124	8080	10.10.3.10	88	bwilson
564	IT-WS-024	2026-02-12T07:43:43.007Z	19820	code.exe	ESTABLISHED	TCP	10.10.1.124	80	10.10.2.131	636	svc_sql
565	IT-WS-024	2026-02-12T10:20:04.578Z	37418	winlogon.exe	CLOSE_WAIT	TCP	10.10.1.124	445	10.10.1.103	3389	svc_web
566	IT-WS-024	2026-02-14T11:55:12.335Z	33743	explorer.exe	TIME_WAIT	TCP	10.10.1.124	389	10.10.2.164	389	idavis
567	HR-WS-025	2026-02-16T19:40:27.020Z	42448	explorer.exe	SYN_SENT	TCP	10.10.2.125	88	10.10.1.154	389	emartinez
568	HR-WS-025	2026-02-19T22:26:02.037Z	56031	lsass.exe	ESTABLISHED	UDP	10.10.2.125	636	50.240.176.113	53	svc_web
569	HR-WS-025	2026-02-19T00:16:12.671Z	44212	csrss.exe	LISTEN	TCP	10.10.2.125	5985	0.0.0.0	0	admin
570	HR-WS-025	2026-02-17T12:40:27.794Z	5748	winlogon.exe	LISTEN	TCP	10.10.2.125	139	0.0.0.0	0	admin
571	HR-WS-025	2026-02-18T14:22:14.210Z	61904	teams.exe	LISTEN	UDP	10.10.2.125	443	0.0.0.0	0	gwhite
572	HR-WS-025	2026-02-13T20:26:01.279Z	7569	code.exe	SYN_SENT	TCP	10.10.2.125	3389	67.182.81.45	443	idavis
573	HR-WS-025	2026-02-18T12:13:17.223Z	50521	System	LISTEN	TCP	10.10.2.125	3389	0.0.0.0	0	jsmith
574	HR-WS-025	2026-02-16T16:24:50.263Z	56355	System	TIME_WAIT	UDP	10.10.2.125	636	13.224.234.247	52250	agarcia
575	HR-WS-025	2026-02-15T12:35:51.900Z	57148	explorer.exe	SYN_SENT	TCP	10.10.2.125	389	10.10.3.138	636	agarcia
576	HR-WS-025	2026-02-12T02:48:55.615Z	17533	RuntimeBroker.exe	TIME_WAIT	UDP	10.10.2.125	135	10.10.2.161	636	emartinez
577	HR-WS-025	2026-02-19T16:30:58.731Z	62479	lsass.exe	TIME_WAIT	UDP	10.10.2.125	54119	10.10.2.155	88	svc_web
578	HR-WS-025	2026-02-14T20:31:05.051Z	25873	MsMpEng.exe	TIME_WAIT	TCP	10.10.2.125	445	10.10.3.144	8080	svc_sql
579	HR-WS-025	2026-02-20T13:00:42.367Z	52467	spoolsv.exe	LISTEN	TCP	10.10.2.125	389	0.0.0.0	0	admin
580	HR-WS-025	2026-02-14T23:32:50.145Z	13543	notepad.exe	CLOSE_WAIT	TCP	10.10.2.125	636	191.160.176.3	88	hbrown
581	HR-WS-025	2026-02-15T18:07:02.732Z	35541	services.exe	CLOSE_WAIT	TCP	10.10.2.125	62406	10.10.1.169	8080	dlee
582	HR-WS-025	2026-02-17T21:37:38.321Z	64781	dwm.exe	SYN_SENT	TCP	10.10.2.125	60316	10.10.2.170	445	hbrown
583	HR-WS-025	2026-02-20T13:44:15.506Z	52881	explorer.exe	TIME_WAIT	TCP	10.10.2.125	443	13.63.229.77	53	svc_backup
584	HR-WS-025	2026-02-15T17:06:46.642Z	12719	smss.exe	SYN_SENT	TCP	10.10.2.125	3389	77.145.71.183	53	svc_web
585	HR-WS-025	2026-02-11T03:31:05.423Z	44456	csrss.exe	ESTABLISHED	UDP	10.10.2.125	5985	10.10.3.117	389	hbrown
586	HR-WS-025	2026-02-11T20:05:11.563Z	8431	System	SYN_SENT	TCP	10.10.2.125	88	10.10.1.163	8080	gwhite
587	HR-WS-025	2026-02-16T14:24:00.192Z	26879	outlook.exe	SYN_SENT	TCP	10.10.2.125	636	10.10.1.121	443	agarcia
588	HR-WS-025	2026-02-11T19:32:05.825Z	38741	smss.exe	TIME_WAIT	TCP	10.10.2.125	443	10.10.3.138	8080	fthompson
589	HR-WS-025	2026-02-14T16:23:37.638Z	37656	epicgameslauncher.exe	TIME_WAIT	TCP	10.10.2.125	445	10.10.3.171	80	dlee
590	HR-WS-025	2026-02-11T06:19:43.482Z	41044	taskhostw.exe	CLOSE_WAIT	TCP	10.10.2.125	53503	36.235.230.171	53	admin
591	HR-WS-025	2026-02-10T19:27:17.742Z	44038	SearchHost.exe	LISTEN	TCP	10.10.2.125	53	0.0.0.0	0	gwhite
592	HR-WS-025	2026-02-15T23:27:30.896Z	49751	spoolsv.exe	ESTABLISHED	UDP	10.10.2.125	88	162.158.63.165	13634	jsmith
593	HR-WS-025	2026-02-17T04:33:48.972Z	34955	dwm.exe	LISTEN	TCP	10.10.2.125	443	0.0.0.0	0	bwilson
594	HR-WS-025	2026-02-18T17:43:48.921Z	39870	cmd.exe	LISTEN	UDP	10.10.2.125	443	0.0.0.0	0	emartinez
595	HR-WS-025	2026-02-11T06:45:22.576Z	64311	explorer.exe	CLOSE_WAIT	TCP	10.10.2.125	5985	10.10.3.168	445	agarcia
596	HR-WS-025	2026-02-11T06:24:25.707Z	20206	notepad.exe	LISTEN	UDP	10.10.2.125	57526	0.0.0.0	0	fthompson
597	HR-WS-025	2026-02-19T15:15:09.918Z	17003	explorer.exe	SYN_SENT	TCP	10.10.2.125	80	10.10.2.113	88	fthompson
598	HR-WS-025	2026-02-13T03:19:18.774Z	20962	msedge.exe	ESTABLISHED	UDP	10.10.2.125	57003	10.10.3.165	443	gwhite
599	HR-WS-025	2026-02-17T02:53:15.818Z	8329	chrome.exe	CLOSE_WAIT	TCP	10.10.2.125	389	60.9.137.142	636	dlee
600	HR-WS-025	2026-02-15T00:56:07.801Z	165	csrss.exe	ESTABLISHED	TCP	10.10.2.125	55818	10.10.3.132	636	svc_web
601	HR-WS-025	2026-02-16T10:17:23.249Z	33544	services.exe	TIME_WAIT	UDP	10.10.2.125	80	10.10.2.149	3389	dlee
602	HR-WS-025	2026-02-12T12:42:45.158Z	33183	utorrent.exe	SYN_SENT	TCP	10.10.2.125	139	10.10.1.118	88	svc_sql
603	HR-WS-025	2026-02-17T01:36:38.962Z	234	MsMpEng.exe	TIME_WAIT	TCP	10.10.2.125	139	10.10.3.159	8080	idavis
604	HR-WS-025	2026-02-14T10:11:51.973Z	5418	svchost.exe	LISTEN	TCP	10.10.2.125	65174	0.0.0.0	0	svc_sql
605	HR-WS-025	2026-02-19T01:47:11.213Z	53306	spoolsv.exe	ESTABLISHED	TCP	10.10.2.125	389	10.10.2.149	8080	svc_backup
606	FIN-WS-026	2026-02-18T01:47:10.000Z	49803	RuntimeBroker.exe	LISTEN	TCP	10.10.3.126	135	0.0.0.0	0	dlee
607	FIN-WS-026	2026-02-15T11:12:34.087Z	46240	OneDrive.exe	TIME_WAIT	UDP	10.10.3.126	88	10.10.2.164	445	svc_backup
608	FIN-WS-026	2026-02-16T06:16:32.008Z	32475	svchost.exe	LISTEN	TCP	10.10.3.126	139	0.0.0.0	0	bwilson
609	FIN-WS-026	2026-02-17T22:13:28.979Z	18078	MsMpEng.exe	SYN_SENT	TCP	10.10.3.126	443	151.65.33.33	636	cjohnson
610	FIN-WS-026	2026-02-14T20:08:13.354Z	26765	svchost.exe	SYN_SENT	TCP	10.10.3.126	389	144.232.1.241	53	dlee
611	FIN-WS-026	2026-02-13T15:03:37.768Z	25780	dwm.exe	CLOSE_WAIT	TCP	10.10.3.126	53	10.10.1.136	389	cjohnson
612	FIN-WS-026	2026-02-10T14:58:05.477Z	28408	smss.exe	ESTABLISHED	UDP	10.10.3.126	443	64.100.84.85	443	svc_sql
613	FIN-WS-026	2026-02-20T03:53:12.819Z	50939	steam.exe	TIME_WAIT	TCP	10.10.3.126	443	10.10.2.107	3389	idavis
614	SLS-WS-027	2026-02-10T21:41:49.947Z	40125	spoolsv.exe	CLOSE_WAIT	TCP	10.10.1.127	443	16.17.193.81	389	admin
615	SLS-WS-027	2026-02-18T12:52:07.327Z	40994	msedge.exe	ESTABLISHED	TCP	10.10.1.127	139	10.10.3.10	16301	jsmith
616	SLS-WS-027	2026-02-10T11:04:19.724Z	46846	csrss.exe	CLOSE_WAIT	TCP	10.10.1.127	3389	167.13.232.133	443	agarcia
617	SLS-WS-027	2026-02-10T23:07:22.064Z	20525	code.exe	SYN_SENT	UDP	10.10.1.127	3389	108.246.227.48	80	idavis
618	SLS-WS-027	2026-02-17T04:25:09.125Z	9576	spoolsv.exe	TIME_WAIT	TCP	10.10.1.127	445	121.158.175.75	34950	jsmith
619	SLS-WS-027	2026-02-16T13:56:26.072Z	21801	System	ESTABLISHED	TCP	10.10.1.127	135	10.10.2.125	389	svc_web
620	SLS-WS-027	2026-02-16T23:41:30.345Z	45530	taskhostw.exe	SYN_SENT	TCP	10.10.1.127	3389	10.10.1.106	80	cjohnson
621	SLS-WS-027	2026-02-18T01:01:13.248Z	13555	code.exe	LISTEN	TCP	10.10.1.127	60015	0.0.0.0	0	fthompson
622	SLS-WS-027	2026-02-19T20:10:37.888Z	23687	svchost.exe	TIME_WAIT	TCP	10.10.1.127	3389	8.58.72.75	42399	jsmith
623	SLS-WS-027	2026-02-19T13:20:44.006Z	47209	code.exe	LISTEN	TCP	10.10.1.127	135	0.0.0.0	0	bwilson
624	SLS-WS-027	2026-02-12T04:01:09.681Z	17256	System	LISTEN	UDP	10.10.1.127	80	0.0.0.0	0	agarcia
625	SLS-WS-027	2026-02-20T02:01:42.693Z	20093	MsMpEng.exe	LISTEN	TCP	10.10.1.127	3389	0.0.0.0	0	gwhite
626	SLS-WS-027	2026-02-11T00:20:39.767Z	9565	RuntimeBroker.exe	LISTEN	TCP	10.10.1.127	636	0.0.0.0	0	bwilson
627	SLS-WS-027	2026-02-13T09:32:44.471Z	9836	code.exe	SYN_SENT	TCP	10.10.1.127	3389	154.219.125.236	636	emartinez
628	SLS-WS-027	2026-02-14T09:01:44.259Z	57930	spoolsv.exe	TIME_WAIT	UDP	10.10.1.127	135	187.41.240.203	636	admin
629	SLS-WS-027	2026-02-14T12:14:11.463Z	60470	RuntimeBroker.exe	CLOSE_WAIT	TCP	10.10.1.127	445	10.10.2.164	18609	svc_sql
630	SLS-WS-027	2026-02-19T07:47:31.437Z	26045	explorer.exe	LISTEN	UDP	10.10.1.127	8080	0.0.0.0	0	cjohnson
631	SLS-WS-027	2026-02-13T23:53:37.456Z	38370	SearchHost.exe	SYN_SENT	UDP	10.10.1.127	139	10.10.3.111	636	jsmith
632	SLS-WS-027	2026-02-10T14:10:46.376Z	29046	services.exe	TIME_WAIT	TCP	10.10.1.127	8080	10.10.2.164	88	cjohnson
633	SLS-WS-027	2026-02-14T02:03:33.201Z	35884	chrome.exe	TIME_WAIT	TCP	10.10.1.127	53	132.40.141.238	443	cjohnson
634	SLS-WS-027	2026-02-19T20:05:44.277Z	659	MsMpEng.exe	TIME_WAIT	TCP	10.10.1.127	636	209.140.97.181	636	svc_sql
635	SLS-WS-027	2026-02-15T16:57:22.815Z	51609	RuntimeBroker.exe	CLOSE_WAIT	TCP	10.10.1.127	8080	168.76.203.59	3389	hbrown
636	SLS-WS-027	2026-02-16T08:22:37.603Z	8511	csrss.exe	TIME_WAIT	TCP	10.10.1.127	135	110.213.107.113	8080	dlee
637	SLS-WS-027	2026-02-10T13:48:35.856Z	51569	svchost.exe	CLOSE_WAIT	TCP	10.10.1.127	135	10.10.1.169	22393	jsmith
638	SLS-WS-027	2026-02-13T18:12:37.226Z	63141	outlook.exe	TIME_WAIT	TCP	10.10.1.127	5985	53.200.32.137	443	gwhite
639	SLS-WS-027	2026-02-12T09:44:58.861Z	59825	notepad.exe	ESTABLISHED	UDP	10.10.1.127	389	10.10.1.11	8080	fthompson
640	SLS-WS-027	2026-02-20T15:23:55.611Z	8563	powershell.exe	TIME_WAIT	TCP	10.10.1.127	8080	10.10.1.142	8080	hbrown
641	SLS-WS-027	2026-02-15T13:37:07.519Z	44981	chrome.exe	CLOSE_WAIT	UDP	10.10.1.127	135	10.10.1.11	3389	gwhite
642	SLS-WS-027	2026-02-16T15:12:43.739Z	16276	svchost.exe	LISTEN	TCP	10.10.1.127	5985	0.0.0.0	0	hbrown
643	SLS-WS-027	2026-02-14T09:46:21.331Z	54064	smss.exe	CLOSE_WAIT	TCP	10.10.1.127	88	10.10.3.159	445	svc_sql
644	SLS-WS-027	2026-02-14T08:09:58.497Z	43293	lsass.exe	LISTEN	UDP	10.10.1.127	8080	0.0.0.0	0	bwilson
645	SLS-WS-027	2026-02-11T14:18:27.562Z	24265	msedge.exe	CLOSE_WAIT	TCP	10.10.1.127	445	10.10.2.128	636	agarcia
646	SLS-WS-027	2026-02-14T07:17:20.011Z	48987	dwm.exe	TIME_WAIT	TCP	10.10.1.127	445	65.106.22.119	389	fthompson
647	SLS-WS-027	2026-02-11T04:38:13.766Z	43158	SearchHost.exe	ESTABLISHED	TCP	10.10.1.127	443	10.10.1.160	443	cjohnson
648	SLS-WS-027	2026-02-12T02:38:50.186Z	1283	csrss.exe	LISTEN	TCP	10.10.1.127	445	0.0.0.0	0	idavis
649	SLS-WS-027	2026-02-17T18:36:11.045Z	58603	notepad.exe	ESTABLISHED	TCP	10.10.1.127	445	10.10.1.157	3389	admin
650	ENG-WS-028	2026-02-18T07:46:42.814Z	60971	explorer.exe	SYN_SENT	TCP	10.10.2.128	636	79.227.26.154	88	cjohnson
651	ENG-WS-028	2026-02-10T14:59:09.752Z	1054	powershell.exe	LISTEN	TCP	10.10.2.128	5985	0.0.0.0	0	emartinez
652	ENG-WS-028	2026-02-13T16:40:11.618Z	41177	MsMpEng.exe	ESTABLISHED	UDP	10.10.2.128	52317	214.85.85.12	53	cjohnson
653	ENG-WS-028	2026-02-10T10:59:43.240Z	14043	System	CLOSE_WAIT	TCP	10.10.2.128	135	55.54.182.83	53	gwhite
654	ENG-WS-028	2026-02-17T18:07:57.997Z	51956	MsMpEng.exe	TIME_WAIT	TCP	10.10.2.128	80	10.10.2.10	443	svc_web
655	ENG-WS-028	2026-02-11T00:52:42.134Z	1256	cmd.exe	ESTABLISHED	TCP	10.10.2.128	389	10.10.3.123	389	idavis
656	ENG-WS-028	2026-02-18T00:28:41.955Z	49726	csrss.exe	CLOSE_WAIT	TCP	10.10.2.128	53	151.6.119.6	3389	cjohnson
657	ENG-WS-028	2026-02-12T10:30:10.608Z	24725	explorer.exe	LISTEN	TCP	10.10.2.128	139	0.0.0.0	0	cjohnson
658	ENG-WS-028	2026-02-12T17:15:09.019Z	48129	powershell.exe	SYN_SENT	TCP	10.10.2.128	445	10.10.1.154	80	emartinez
659	ENG-WS-028	2026-02-11T00:09:15.192Z	32320	code.exe	SYN_SENT	TCP	10.10.2.128	57289	176.113.195.134	80	agarcia
660	ENG-WS-028	2026-02-12T03:25:08.242Z	36069	explorer.exe	LISTEN	UDP	10.10.2.128	443	0.0.0.0	0	svc_web
661	ENG-WS-028	2026-02-17T21:14:50.194Z	20512	code.exe	LISTEN	TCP	10.10.2.128	5985	0.0.0.0	0	bwilson
662	ENG-WS-028	2026-02-14T11:33:40.025Z	11094	powershell.exe	CLOSE_WAIT	UDP	10.10.2.128	139	74.229.103.70	53	gwhite
663	ENG-WS-028	2026-02-11T22:11:58.838Z	47721	dwm.exe	SYN_SENT	TCP	10.10.2.128	54259	10.10.3.111	636	bwilson
664	ENG-WS-028	2026-02-19T21:01:58.743Z	373	csrss.exe	TIME_WAIT	TCP	10.10.2.128	5985	10.10.1.118	8080	jsmith
665	ENG-WS-028	2026-02-20T16:07:05.222Z	8257	RuntimeBroker.exe	CLOSE_WAIT	TCP	10.10.2.128	5985	191.191.196.126	80	fthompson
666	ENG-WS-028	2026-02-19T20:16:17.395Z	47433	teams.exe	LISTEN	TCP	10.10.2.128	57516	0.0.0.0	0	emartinez
667	ENG-WS-028	2026-02-17T14:22:04.280Z	42392	winlogon.exe	TIME_WAIT	TCP	10.10.2.128	5985	10.10.3.105	80	bwilson
668	ENG-WS-028	2026-02-16T08:35:07.616Z	43524	csrss.exe	LISTEN	TCP	10.10.2.128	88	0.0.0.0	0	svc_web
669	ENG-WS-028	2026-02-12T23:13:04.111Z	19906	msedge.exe	ESTABLISHED	TCP	10.10.2.128	636	151.41.96.225	88	hbrown
670	ENG-WS-028	2026-02-13T03:15:19.204Z	13831	MsMpEng.exe	CLOSE_WAIT	TCP	10.10.2.128	636	10.10.3.174	8080	svc_backup
671	LEG-WS-029	2026-02-11T01:27:37.345Z	45733	svchost.exe	LISTEN	TCP	10.10.3.129	443	0.0.0.0	0	fthompson
672	LEG-WS-029	2026-02-15T00:39:54.705Z	53470	spoolsv.exe	TIME_WAIT	TCP	10.10.3.129	445	96.95.68.51	443	cjohnson
673	LEG-WS-029	2026-02-14T22:10:57.404Z	59932	explorer.exe	LISTEN	UDP	10.10.3.129	5985	0.0.0.0	0	idavis
674	LEG-WS-029	2026-02-14T06:25:55.683Z	18237	spoolsv.exe	LISTEN	TCP	10.10.3.129	443	0.0.0.0	0	agarcia
675	LEG-WS-029	2026-02-18T06:08:00.234Z	723	smss.exe	LISTEN	TCP	10.10.3.129	389	0.0.0.0	0	jsmith
676	LEG-WS-029	2026-02-15T06:18:28.604Z	22187	svchost.exe	SYN_SENT	TCP	10.10.3.129	135	10.10.2.167	389	idavis
677	LEG-WS-029	2026-02-18T17:34:03.184Z	302	RuntimeBroker.exe	TIME_WAIT	TCP	10.10.3.129	3389	10.10.3.108	53	gwhite
678	LEG-WS-029	2026-02-13T05:52:00.777Z	45927	SearchHost.exe	LISTEN	TCP	10.10.3.129	53	0.0.0.0	0	svc_sql
679	LEG-WS-029	2026-02-19T10:21:31.042Z	63643	RuntimeBroker.exe	CLOSE_WAIT	TCP	10.10.3.129	53	10.10.1.13	53	svc_sql
680	LEG-WS-029	2026-02-13T09:27:56.675Z	12884	MsMpEng.exe	CLOSE_WAIT	UDP	10.10.3.129	5985	190.41.178.110	88	svc_backup
681	LEG-WS-029	2026-02-20T06:45:46.099Z	31699	dwm.exe	SYN_SENT	TCP	10.10.3.129	445	10.10.3.171	389	admin
682	LEG-WS-029	2026-02-14T20:43:24.066Z	47008	powershell.exe	LISTEN	UDP	10.10.3.129	443	0.0.0.0	0	jsmith
683	LEG-WS-029	2026-02-19T09:59:06.546Z	61165	taskhostw.exe	CLOSE_WAIT	TCP	10.10.3.129	636	10.10.1.118	53	idavis
684	LEG-WS-029	2026-02-13T08:44:38.852Z	7399	services.exe	ESTABLISHED	TCP	10.10.3.129	636	191.195.223.207	443	agarcia
685	LEG-WS-029	2026-02-19T05:19:57.278Z	62625	smss.exe	LISTEN	TCP	10.10.3.129	445	0.0.0.0	0	fthompson
686	LEG-WS-029	2026-02-10T10:17:49.669Z	55960	svchost.exe	TIME_WAIT	TCP	10.10.3.129	5985	109.163.186.205	88	gwhite
687	LEG-WS-029	2026-02-16T14:21:58.872Z	9659	notepad.exe	LISTEN	TCP	10.10.3.129	445	0.0.0.0	0	svc_backup
688	LEG-WS-029	2026-02-15T11:45:22.972Z	46246	OneDrive.exe	ESTABLISHED	TCP	10.10.3.129	139	10.10.3.174	3389	fthompson
689	LEG-WS-029	2026-02-13T10:46:31.599Z	53512	steam.exe	TIME_WAIT	UDP	10.10.3.129	636	10.10.3.123	88	admin
690	LEG-WS-029	2026-02-17T21:41:19.140Z	18605	teams.exe	ESTABLISHED	TCP	10.10.3.129	3389	10.10.1.151	636	svc_backup
691	LEG-WS-029	2026-02-13T08:46:13.412Z	9591	OneDrive.exe	SYN_SENT	TCP	10.10.3.129	445	83.27.155.118	389	cjohnson
692	LEG-WS-029	2026-02-11T08:00:42.958Z	63942	code.exe	ESTABLISHED	TCP	10.10.3.129	389	202.75.192.244	80	gwhite
693	LEG-WS-029	2026-02-15T10:09:23.304Z	45187	explorer.exe	ESTABLISHED	TCP	10.10.3.129	88	112.76.206.63	88	idavis
694	LEG-WS-029	2026-02-11T14:30:46.406Z	42135	spoolsv.exe	CLOSE_WAIT	TCP	10.10.3.129	389	98.140.227.95	443	admin
695	LEG-WS-029	2026-02-11T15:18:32.793Z	21414	powershell.exe	ESTABLISHED	TCP	10.10.3.129	139	10.10.3.162	20577	agarcia
696	LEG-WS-029	2026-02-16T03:00:54.147Z	35254	System	LISTEN	TCP	10.10.3.129	5985	0.0.0.0	0	svc_sql
697	LEG-WS-029	2026-02-14T23:48:29.590Z	20697	winlogon.exe	ESTABLISHED	TCP	10.10.3.129	53218	193.106.60.47	636	agarcia
698	LEG-WS-029	2026-02-13T00:11:24.435Z	49453	smss.exe	LISTEN	UDP	10.10.3.129	53	0.0.0.0	0	jsmith
699	LEG-WS-029	2026-02-19T18:09:17.561Z	19328	msedge.exe	SYN_SENT	TCP	10.10.3.129	53	44.216.0.64	636	admin
700	LEG-WS-029	2026-02-11T19:25:00.597Z	56204	outlook.exe	SYN_SENT	TCP	10.10.3.129	53	91.107.50.170	3389	svc_web
701	LEG-WS-029	2026-02-12T23:44:30.633Z	25120	outlook.exe	SYN_SENT	TCP	10.10.3.129	88	10.10.3.10	636	admin
702	LEG-WS-029	2026-02-17T18:36:40.471Z	37038	SearchHost.exe	CLOSE_WAIT	TCP	10.10.3.129	389	10.10.2.11	3389	admin
703	LEG-WS-029	2026-02-11T15:09:19.101Z	7308	dwm.exe	SYN_SENT	UDP	10.10.3.129	445	81.222.194.7	445	admin
704	MKT-WS-030	2026-02-14T06:39:29.116Z	6981	spoolsv.exe	ESTABLISHED	TCP	10.10.1.130	60080	70.74.115.71	3389	svc_sql
705	MKT-WS-030	2026-02-12T02:41:12.674Z	62130	teams.exe	SYN_SENT	TCP	10.10.1.130	443	136.178.144.142	80	svc_sql
706	MKT-WS-030	2026-02-11T19:40:03.128Z	37295	RuntimeBroker.exe	SYN_SENT	TCP	10.10.1.130	8080	152.65.132.3	8080	svc_backup
707	MKT-WS-030	2026-02-13T04:57:20.676Z	28134	spoolsv.exe	TIME_WAIT	UDP	10.10.1.130	636	10.10.2.146	445	hbrown
708	MKT-WS-030	2026-02-20T04:13:00.253Z	10920	powershell.exe	TIME_WAIT	TCP	10.10.1.130	5985	198.160.46.163	3389	idavis
709	MKT-WS-030	2026-02-16T18:04:17.946Z	59795	utorrent.exe	TIME_WAIT	TCP	10.10.1.130	65301	3.217.69.123	80	svc_web
710	MKT-WS-030	2026-02-14T03:45:45.843Z	8837	OneDrive.exe	CLOSE_WAIT	TCP	10.10.1.130	135	190.21.229.247	443	hbrown
711	MKT-WS-030	2026-02-15T08:46:52.214Z	17450	explorer.exe	CLOSE_WAIT	TCP	10.10.1.130	445	96.57.173.234	445	cjohnson
712	MKT-WS-030	2026-02-10T09:28:21.993Z	30269	spoolsv.exe	SYN_SENT	TCP	10.10.1.130	139	10.10.3.10	53	emartinez
713	MKT-WS-030	2026-02-15T16:34:46.739Z	10173	msedge.exe	ESTABLISHED	TCP	10.10.1.130	5985	91.4.51.111	636	fthompson
714	MKT-WS-030	2026-02-15T22:06:24.646Z	17760	winlogon.exe	ESTABLISHED	UDP	10.10.1.130	135	10.10.3.147	8080	agarcia
715	MKT-WS-030	2026-02-10T18:03:50.676Z	25956	MsMpEng.exe	CLOSE_WAIT	UDP	10.10.1.130	3389	192.222.2.92	445	fthompson
716	MKT-WS-030	2026-02-20T13:43:55.832Z	7885	explorer.exe	LISTEN	UDP	10.10.1.130	389	0.0.0.0	0	fthompson
717	MKT-WS-030	2026-02-17T21:29:55.100Z	48720	winlogon.exe	LISTEN	TCP	10.10.1.130	53	0.0.0.0	0	svc_web
718	MKT-WS-030	2026-02-14T19:24:58.546Z	39230	outlook.exe	ESTABLISHED	TCP	10.10.1.130	445	40.176.6.197	53	svc_backup
719	MKT-WS-030	2026-02-18T07:40:54.844Z	56734	winlogon.exe	TIME_WAIT	TCP	10.10.1.130	443	195.219.126.159	445	dlee
720	MKT-WS-030	2026-02-11T17:04:26.231Z	2614	powershell.exe	CLOSE_WAIT	UDP	10.10.1.130	636	201.52.92.49	443	dlee
721	MKT-WS-030	2026-02-12T15:26:37.712Z	28023	outlook.exe	CLOSE_WAIT	TCP	10.10.1.130	443	10.10.3.168	3389	gwhite
722	MKT-WS-030	2026-02-12T05:26:16.461Z	135	lsass.exe	ESTABLISHED	TCP	10.10.1.130	139	94.143.179.183	80	jsmith
723	MKT-WS-030	2026-02-19T19:07:13.777Z	6703	taskhostw.exe	LISTEN	TCP	10.10.1.130	139	0.0.0.0	0	fthompson
724	MKT-WS-030	2026-02-15T20:12:55.857Z	24452	winlogon.exe	TIME_WAIT	TCP	10.10.1.130	443	10.10.3.147	49712	cjohnson
725	MKT-WS-030	2026-02-19T23:22:30.575Z	5007	code.exe	SYN_SENT	TCP	10.10.1.130	443	34.61.21.151	389	hbrown
726	MKT-WS-030	2026-02-15T00:07:13.998Z	47110	notepad.exe	CLOSE_WAIT	UDP	10.10.1.130	80	10.10.1.133	53	agarcia
727	MKT-WS-030	2026-02-18T01:10:43.677Z	26150	chrome.exe	CLOSE_WAIT	TCP	10.10.1.130	445	154.140.66.75	3389	gwhite
728	MKT-WS-030	2026-02-10T08:54:00.491Z	37579	dwm.exe	ESTABLISHED	UDP	10.10.1.130	63496	10.10.1.11	8080	cjohnson
729	MKT-WS-030	2026-02-10T19:24:11.219Z	15711	svchost.exe	SYN_SENT	TCP	10.10.1.130	139	219.112.151.182	3389	dlee
730	MKT-WS-030	2026-02-16T22:10:14.591Z	63815	outlook.exe	TIME_WAIT	UDP	10.10.1.130	58013	14.127.107.137	53	emartinez
731	MKT-WS-030	2026-02-12T14:49:11.633Z	63357	OneDrive.exe	SYN_SENT	TCP	10.10.1.130	5985	157.150.166.253	53	dlee
732	MKT-WS-030	2026-02-12T15:09:35.133Z	17715	svchost.exe	SYN_SENT	TCP	10.10.1.130	636	191.195.131.223	389	cjohnson
733	MKT-WS-030	2026-02-17T21:34:17.511Z	24259	SearchHost.exe	LISTEN	TCP	10.10.1.130	636	0.0.0.0	0	bwilson
734	MKT-WS-030	2026-02-10T13:15:42.573Z	10777	chrome.exe	CLOSE_WAIT	UDP	10.10.1.130	445	209.90.96.146	445	bwilson
735	MKT-WS-030	2026-02-11T18:19:22.165Z	49281	MsMpEng.exe	SYN_SENT	UDP	10.10.1.130	445	19.218.125.117	636	svc_sql
736	MKT-WS-030	2026-02-20T02:38:58.552Z	39397	msedge.exe	CLOSE_WAIT	TCP	10.10.1.130	443	212.6.22.34	8080	jsmith
737	MKT-WS-030	2026-02-13T12:50:46.493Z	31485	svchost.exe	ESTABLISHED	TCP	10.10.1.130	636	10.10.2.173	8080	bwilson
738	EXEC-WS-031	2026-02-11T19:27:31.523Z	59879	OneDrive.exe	TIME_WAIT	TCP	10.10.2.131	80	212.22.52.140	88	cjohnson
739	EXEC-WS-031	2026-02-12T16:07:50.211Z	62782	lsass.exe	CLOSE_WAIT	UDP	10.10.2.131	389	10.10.1.115	443	dlee
740	EXEC-WS-031	2026-02-17T09:51:29.980Z	9944	services.exe	TIME_WAIT	TCP	10.10.2.131	443	10.10.3.168	8080	admin
741	EXEC-WS-031	2026-02-18T10:26:45.635Z	9706	services.exe	TIME_WAIT	TCP	10.10.2.131	139	128.188.135.208	8080	emartinez
742	EXEC-WS-031	2026-02-14T00:09:07.881Z	32488	csrss.exe	CLOSE_WAIT	TCP	10.10.2.131	88	110.142.74.24	88	fthompson
743	EXEC-WS-031	2026-02-15T11:09:01.265Z	35241	lsass.exe	SYN_SENT	TCP	10.10.2.131	53681	10.10.3.171	636	svc_web
744	EXEC-WS-031	2026-02-15T06:28:53.715Z	8855	chrome.exe	SYN_SENT	TCP	10.10.2.131	636	23.120.185.1	636	agarcia
745	EXEC-WS-031	2026-02-11T13:18:32.228Z	45698	RuntimeBroker.exe	TIME_WAIT	UDP	10.10.2.131	8080	37.215.124.54	8080	svc_backup
746	EXEC-WS-031	2026-02-14T03:18:39.796Z	5276	svchost.exe	CLOSE_WAIT	TCP	10.10.2.131	636	28.37.244.215	8080	cjohnson
747	EXEC-WS-031	2026-02-13T07:41:32.163Z	10316	smss.exe	CLOSE_WAIT	UDP	10.10.2.131	8080	10.10.3.153	80	jsmith
748	EXEC-WS-031	2026-02-14T17:55:03.235Z	10376	explorer.exe	SYN_SENT	UDP	10.10.2.131	80	10.10.2.134	3389	dlee
749	EXEC-WS-031	2026-02-15T07:21:14.637Z	42875	dwm.exe	CLOSE_WAIT	UDP	10.10.2.131	5985	159.28.112.101	389	admin
750	EXEC-WS-031	2026-02-14T18:03:19.700Z	17789	SearchHost.exe	LISTEN	TCP	10.10.2.131	389	0.0.0.0	0	agarcia
751	EXEC-WS-031	2026-02-12T06:56:09.428Z	13320	RuntimeBroker.exe	SYN_SENT	TCP	10.10.2.131	135	73.83.54.17	445	admin
752	EXEC-WS-031	2026-02-10T10:07:10.857Z	23473	powershell.exe	TIME_WAIT	TCP	10.10.2.131	88	203.247.23.13	445	svc_sql
753	EXEC-WS-031	2026-02-11T09:15:02.594Z	53019	SearchHost.exe	SYN_SENT	UDP	10.10.2.131	59456	10.10.2.113	636	svc_sql
754	EXEC-WS-031	2026-02-19T13:06:01.861Z	53018	smss.exe	CLOSE_WAIT	TCP	10.10.2.131	139	42.77.237.21	3389	admin
755	EXEC-WS-031	2026-02-18T12:20:16.672Z	22318	OneDrive.exe	LISTEN	TCP	10.10.2.131	8080	0.0.0.0	0	dlee
756	EXEC-WS-031	2026-02-11T19:39:20.269Z	57146	lsass.exe	ESTABLISHED	TCP	10.10.2.131	135	10.10.2.11	80	dlee
757	EXEC-WS-031	2026-02-11T01:47:00.528Z	46673	chrome.exe	CLOSE_WAIT	TCP	10.10.2.131	3389	10.10.1.136	443	svc_sql
758	EXEC-WS-031	2026-02-19T21:17:06.104Z	8553	winlogon.exe	TIME_WAIT	TCP	10.10.2.131	443	10.10.2.137	27830	gwhite
759	EXEC-WS-031	2026-02-17T14:56:10.766Z	36852	services.exe	TIME_WAIT	TCP	10.10.2.131	389	106.230.134.225	3389	jsmith
760	EXEC-WS-031	2026-02-15T05:07:19.828Z	35169	msedge.exe	TIME_WAIT	TCP	10.10.2.131	88	103.37.114.100	389	svc_web
761	IT-WS-032	2026-02-11T12:34:53.790Z	29891	teams.exe	ESTABLISHED	TCP	10.10.3.132	135	10.10.3.144	389	jsmith
762	IT-WS-032	2026-02-10T15:49:50.928Z	39492	winlogon.exe	LISTEN	UDP	10.10.3.132	88	0.0.0.0	0	svc_sql
763	IT-WS-032	2026-02-11T01:18:53.144Z	26646	RuntimeBroker.exe	CLOSE_WAIT	TCP	10.10.3.132	80	55.11.216.70	8080	agarcia
764	IT-WS-032	2026-02-12T01:07:59.953Z	22990	OneDrive.exe	CLOSE_WAIT	TCP	10.10.3.132	389	10.10.2.155	445	fthompson
765	IT-WS-032	2026-02-16T06:34:45.182Z	54037	System	LISTEN	TCP	10.10.3.132	636	0.0.0.0	0	jsmith
766	IT-WS-032	2026-02-17T06:00:56.645Z	54069	services.exe	LISTEN	TCP	10.10.3.132	3389	0.0.0.0	0	svc_backup
767	IT-WS-032	2026-02-20T15:03:34.745Z	61921	taskhostw.exe	ESTABLISHED	UDP	10.10.3.132	445	10.10.3.153	80	svc_web
768	IT-WS-032	2026-02-12T14:02:03.556Z	13847	spoolsv.exe	CLOSE_WAIT	TCP	10.10.3.132	80	56.96.215.179	88	cjohnson
769	IT-WS-032	2026-02-13T23:55:56.080Z	54375	smss.exe	ESTABLISHED	TCP	10.10.3.132	80	10.10.2.164	88	hbrown
770	IT-WS-032	2026-02-16T22:31:36.510Z	46112	taskhostw.exe	ESTABLISHED	UDP	10.10.3.132	5985	10.10.3.156	88	idavis
771	IT-WS-032	2026-02-15T13:50:25.368Z	52913	msedge.exe	ESTABLISHED	TCP	10.10.3.132	389	5.210.53.128	389	jsmith
772	IT-WS-032	2026-02-14T07:16:11.847Z	12916	lsass.exe	LISTEN	UDP	10.10.3.132	53	0.0.0.0	0	svc_web
773	IT-WS-032	2026-02-13T02:54:08.226Z	43267	msedge.exe	TIME_WAIT	TCP	10.10.3.132	389	181.202.3.241	445	dlee
774	IT-WS-032	2026-02-10T11:52:57.058Z	10151	lsass.exe	LISTEN	TCP	10.10.3.132	80	0.0.0.0	0	svc_sql
775	IT-WS-032	2026-02-18T23:08:14.909Z	52616	dwm.exe	SYN_SENT	TCP	10.10.3.132	445	147.220.123.143	88	idavis
776	IT-WS-032	2026-02-16T21:51:36.961Z	51498	spoolsv.exe	CLOSE_WAIT	UDP	10.10.3.132	3389	133.81.223.60	443	fthompson
777	IT-WS-032	2026-02-11T22:15:43.751Z	40607	spoolsv.exe	TIME_WAIT	TCP	10.10.3.132	3389	53.47.47.7	42239	svc_backup
778	IT-WS-032	2026-02-17T03:07:50.447Z	14632	chrome.exe	SYN_SENT	TCP	10.10.3.132	636	10.10.2.11	3389	dlee
779	IT-WS-032	2026-02-19T23:47:59.122Z	8140	powershell.exe	CLOSE_WAIT	TCP	10.10.3.132	139	22.73.11.164	389	agarcia
780	IT-WS-032	2026-02-19T03:09:21.251Z	59915	cmd.exe	LISTEN	TCP	10.10.3.132	8080	0.0.0.0	0	svc_web
781	IT-WS-032	2026-02-16T22:23:16.618Z	29648	msedge.exe	CLOSE_WAIT	TCP	10.10.3.132	443	10.10.1.154	53	svc_sql
782	IT-WS-032	2026-02-18T01:25:27.146Z	60824	notepad.exe	ESTABLISHED	UDP	10.10.3.132	443	88.177.247.158	636	agarcia
783	IT-WS-032	2026-02-12T14:56:25.000Z	47793	svchost.exe	SYN_SENT	TCP	10.10.3.132	135	222.186.58.231	8080	svc_backup
784	IT-WS-032	2026-02-19T22:35:13.288Z	16490	cmd.exe	TIME_WAIT	TCP	10.10.3.132	443	10.10.2.164	88	bwilson
785	IT-WS-032	2026-02-14T17:56:03.589Z	49060	OneDrive.exe	TIME_WAIT	TCP	10.10.3.132	88	10.10.1.127	389	dlee
786	IT-WS-032	2026-02-19T14:21:44.717Z	62889	services.exe	ESTABLISHED	TCP	10.10.3.132	5985	52.180.191.230	8080	hbrown
787	IT-WS-032	2026-02-14T01:26:10.065Z	4860	lsass.exe	TIME_WAIT	TCP	10.10.3.132	5985	10.10.1.142	8080	cjohnson
788	IT-WS-032	2026-02-13T15:38:50.227Z	814	RuntimeBroker.exe	LISTEN	TCP	10.10.3.132	80	0.0.0.0	0	svc_backup
789	IT-WS-032	2026-02-13T05:30:43.621Z	39939	csrss.exe	SYN_SENT	TCP	10.10.3.132	53	17.197.145.155	636	svc_sql
790	IT-WS-032	2026-02-20T15:33:53.744Z	27706	chrome.exe	SYN_SENT	TCP	10.10.3.132	3389	10.10.2.107	80	agarcia
791	IT-WS-032	2026-02-13T07:05:29.236Z	55257	teams.exe	SYN_SENT	TCP	10.10.3.132	135	148.10.145.5	389	fthompson
792	IT-WS-032	2026-02-18T04:25:23.051Z	26336	System	SYN_SENT	TCP	10.10.3.132	389	10.10.1.154	53	agarcia
793	IT-WS-032	2026-02-11T09:41:09.249Z	14781	taskhostw.exe	CLOSE_WAIT	TCP	10.10.3.132	5985	10.10.2.116	62477	jsmith
794	IT-WS-032	2026-02-13T00:55:18.921Z	51542	outlook.exe	ESTABLISHED	TCP	10.10.3.132	135	44.45.97.186	80	jsmith
795	IT-WS-032	2026-02-11T13:58:31.277Z	21027	notepad.exe	ESTABLISHED	TCP	10.10.3.132	636	157.194.138.179	389	svc_web
796	IT-WS-032	2026-02-12T16:27:27.466Z	17389	smss.exe	CLOSE_WAIT	TCP	10.10.3.132	53	10.10.1.163	389	svc_sql
797	IT-WS-032	2026-02-17T07:37:29.058Z	30780	chrome.exe	TIME_WAIT	TCP	10.10.3.132	389	166.105.39.20	80	svc_web
798	HR-WS-033	2026-02-12T14:41:46.347Z	23931	msedge.exe	TIME_WAIT	UDP	10.10.1.133	59420	80.232.78.218	8080	fthompson
799	HR-WS-033	2026-02-19T11:02:56.612Z	48926	services.exe	SYN_SENT	UDP	10.10.1.133	135	18.142.216.43	389	agarcia
800	HR-WS-033	2026-02-17T05:28:16.953Z	29764	csrss.exe	LISTEN	TCP	10.10.1.133	8080	0.0.0.0	0	emartinez
801	HR-WS-033	2026-02-14T04:26:42.607Z	3320	System	ESTABLISHED	TCP	10.10.1.133	135	39.203.220.131	445	admin
802	HR-WS-033	2026-02-12T04:09:40.594Z	18183	lsass.exe	LISTEN	TCP	10.10.1.133	5985	0.0.0.0	0	hbrown
803	HR-WS-033	2026-02-12T19:41:30.419Z	34973	dwm.exe	CLOSE_WAIT	TCP	10.10.1.133	389	64.56.112.30	445	agarcia
804	HR-WS-033	2026-02-17T16:27:48.012Z	18972	services.exe	CLOSE_WAIT	TCP	10.10.1.133	443	57.137.253.53	445	svc_backup
805	HR-WS-033	2026-02-19T16:58:02.299Z	9395	teams.exe	SYN_SENT	TCP	10.10.1.133	636	79.122.87.81	53	jsmith
806	HR-WS-033	2026-02-15T10:04:36.606Z	16320	lsass.exe	TIME_WAIT	TCP	10.10.1.133	139	10.10.2.146	80	gwhite
807	HR-WS-033	2026-02-15T01:09:14.717Z	48256	svchost.exe	SYN_SENT	TCP	10.10.1.133	53	129.85.75.199	53	emartinez
808	HR-WS-033	2026-02-17T11:26:45.741Z	47824	cmd.exe	CLOSE_WAIT	TCP	10.10.1.133	8080	10.10.2.143	445	admin
809	HR-WS-033	2026-02-10T15:43:34.207Z	37952	lsass.exe	LISTEN	UDP	10.10.1.133	8080	0.0.0.0	0	svc_backup
810	HR-WS-033	2026-02-12T03:44:17.023Z	59759	lsass.exe	TIME_WAIT	UDP	10.10.1.133	135	10.10.2.11	636	admin
811	HR-WS-033	2026-02-11T14:44:25.137Z	52222	taskhostw.exe	CLOSE_WAIT	TCP	10.10.1.133	139	10.10.2.167	55692	gwhite
812	HR-WS-033	2026-02-17T06:04:48.288Z	19999	RuntimeBroker.exe	TIME_WAIT	TCP	10.10.1.133	8080	10.10.3.120	636	gwhite
813	HR-WS-033	2026-02-17T05:03:47.983Z	142	notepad.exe	ESTABLISHED	TCP	10.10.1.133	135	73.63.27.126	53	jsmith
814	HR-WS-033	2026-02-13T08:42:01.823Z	2206	RuntimeBroker.exe	TIME_WAIT	TCP	10.10.1.133	443	10.10.3.126	443	gwhite
815	HR-WS-033	2026-02-18T17:05:42.224Z	9221	powershell.exe	CLOSE_WAIT	TCP	10.10.1.133	443	10.10.2.173	53	admin
816	HR-WS-033	2026-02-13T12:14:56.486Z	19586	cmd.exe	LISTEN	TCP	10.10.1.133	139	0.0.0.0	0	idavis
817	HR-WS-033	2026-02-15T13:57:13.656Z	45002	csrss.exe	SYN_SENT	UDP	10.10.1.133	61471	10.10.3.168	53	svc_backup
818	HR-WS-033	2026-02-16T17:48:07.695Z	19917	RuntimeBroker.exe	CLOSE_WAIT	TCP	10.10.1.133	5985	119.14.13.246	8080	svc_sql
819	HR-WS-033	2026-02-15T03:03:18.677Z	3661	dwm.exe	TIME_WAIT	UDP	10.10.1.133	80	10.10.2.101	636	agarcia
820	HR-WS-033	2026-02-17T08:36:11.699Z	48554	discord.exe	ESTABLISHED	TCP	10.10.1.133	139	145.246.169.222	49551	svc_backup
821	HR-WS-033	2026-02-16T19:54:57.530Z	13253	code.exe	SYN_SENT	UDP	10.10.1.133	445	58.79.154.161	389	agarcia
822	HR-WS-033	2026-02-19T23:30:39.998Z	19755	outlook.exe	SYN_SENT	TCP	10.10.1.133	135	10.10.3.165	80	fthompson
823	HR-WS-033	2026-02-17T10:19:48.402Z	56415	teams.exe	LISTEN	TCP	10.10.1.133	88	0.0.0.0	0	admin
824	HR-WS-033	2026-02-18T20:38:15.090Z	43187	lsass.exe	LISTEN	TCP	10.10.1.133	445	0.0.0.0	0	cjohnson
825	HR-WS-033	2026-02-14T09:47:50.298Z	45821	OneDrive.exe	SYN_SENT	UDP	10.10.1.133	8080	10.10.1.10	445	svc_sql
826	HR-WS-033	2026-02-14T23:07:11.445Z	59613	lsass.exe	CLOSE_WAIT	UDP	10.10.1.133	139	10.10.1.175	3257	emartinez
827	HR-WS-033	2026-02-12T03:37:27.191Z	10022	csrss.exe	CLOSE_WAIT	TCP	10.10.1.133	445	10.10.3.168	443	emartinez
828	HR-WS-033	2026-02-16T15:27:37.618Z	11921	smss.exe	TIME_WAIT	TCP	10.10.1.133	139	10.10.3.162	389	idavis
829	HR-WS-033	2026-02-12T17:55:33.879Z	43698	dwm.exe	SYN_SENT	TCP	10.10.1.133	636	83.178.206.18	8080	agarcia
830	FIN-WS-034	2026-02-11T12:37:06.404Z	55596	winlogon.exe	TIME_WAIT	UDP	10.10.2.134	443	45.196.215.237	445	svc_backup
831	FIN-WS-034	2026-02-15T10:46:32.717Z	44589	qbittorrent.exe	TIME_WAIT	TCP	10.10.2.134	445	83.55.230.97	445	dlee
832	FIN-WS-034	2026-02-14T01:53:24.901Z	26840	teams.exe	CLOSE_WAIT	TCP	10.10.2.134	443	150.12.49.53	80	idavis
833	FIN-WS-034	2026-02-19T05:21:19.439Z	52633	chrome.exe	TIME_WAIT	UDP	10.10.2.134	135	10.10.2.146	636	agarcia
834	FIN-WS-034	2026-02-15T23:08:04.220Z	1577	spoolsv.exe	CLOSE_WAIT	TCP	10.10.2.134	445	201.152.51.31	4397	cjohnson
835	FIN-WS-034	2026-02-20T00:57:08.144Z	32871	notepad.exe	TIME_WAIT	TCP	10.10.2.134	443	41.147.38.137	636	dlee
836	FIN-WS-034	2026-02-19T14:00:25.228Z	3992	explorer.exe	SYN_SENT	TCP	10.10.2.134	139	10.10.1.154	53	bwilson
837	FIN-WS-034	2026-02-20T00:20:27.227Z	58264	taskhostw.exe	ESTABLISHED	UDP	10.10.2.134	443	10.10.2.110	40224	hbrown
838	FIN-WS-034	2026-02-10T13:21:38.935Z	3727	outlook.exe	TIME_WAIT	TCP	10.10.2.134	80	10.10.3.162	3389	jsmith
839	FIN-WS-034	2026-02-14T19:25:46.783Z	28072	code.exe	SYN_SENT	TCP	10.10.2.134	389	10.10.3.150	8080	hbrown
840	FIN-WS-034	2026-02-16T11:09:15.726Z	14984	csrss.exe	ESTABLISHED	TCP	10.10.2.134	3389	50.175.223.236	443	fthompson
841	FIN-WS-034	2026-02-10T18:55:47.485Z	23015	System	SYN_SENT	TCP	10.10.2.134	636	10.10.3.117	445	idavis
842	FIN-WS-034	2026-02-19T16:24:36.157Z	56379	powershell.exe	TIME_WAIT	UDP	10.10.2.134	8080	169.62.39.20	53	cjohnson
843	FIN-WS-034	2026-02-19T17:06:22.839Z	46335	notepad.exe	TIME_WAIT	TCP	10.10.2.134	389	63.136.163.179	53	idavis
844	FIN-WS-034	2026-02-18T01:28:37.792Z	13912	chrome.exe	LISTEN	UDP	10.10.2.134	139	0.0.0.0	0	agarcia
845	FIN-WS-034	2026-02-16T11:03:36.141Z	19787	outlook.exe	ESTABLISHED	UDP	10.10.2.134	389	196.232.58.6	445	svc_web
846	FIN-WS-034	2026-02-12T06:06:24.117Z	28351	explorer.exe	TIME_WAIT	TCP	10.10.2.134	8080	5.195.196.114	88	hbrown
847	FIN-WS-034	2026-02-13T21:14:09.946Z	54445	notepad.exe	ESTABLISHED	TCP	10.10.2.134	80	156.172.134.208	80	idavis
848	FIN-WS-034	2026-02-15T04:49:59.225Z	60698	lsass.exe	ESTABLISHED	TCP	10.10.2.134	636	10.10.3.174	88	cjohnson
849	FIN-WS-034	2026-02-14T02:25:25.380Z	43303	svchost.exe	TIME_WAIT	TCP	10.10.2.134	135	198.151.172.147	445	dlee
850	FIN-WS-034	2026-02-14T21:58:38.351Z	30668	services.exe	ESTABLISHED	TCP	10.10.2.134	88	10.10.3.123	80	jsmith
851	FIN-WS-034	2026-02-14T22:06:35.564Z	17008	winlogon.exe	SYN_SENT	UDP	10.10.2.134	80	10.10.1.12	443	svc_sql
852	FIN-WS-034	2026-02-19T07:08:33.249Z	38103	cmd.exe	CLOSE_WAIT	UDP	10.10.2.134	389	45.75.25.60	636	emartinez
853	FIN-WS-034	2026-02-10T12:01:46.356Z	55473	OneDrive.exe	LISTEN	TCP	10.10.2.134	139	0.0.0.0	0	svc_web
854	FIN-WS-034	2026-02-13T17:26:50.141Z	24437	System	ESTABLISHED	TCP	10.10.2.134	3389	28.39.227.29	3389	svc_web
855	FIN-WS-034	2026-02-16T19:28:44.731Z	10606	lsass.exe	ESTABLISHED	TCP	10.10.2.134	445	10.10.3.153	445	emartinez
856	FIN-WS-034	2026-02-10T16:08:59.575Z	47696	outlook.exe	SYN_SENT	TCP	10.10.2.134	88	10.10.2.128	55466	bwilson
857	FIN-WS-034	2026-02-17T04:47:57.983Z	34200	spoolsv.exe	ESTABLISHED	TCP	10.10.2.134	88	129.214.62.217	389	gwhite
858	FIN-WS-034	2026-02-14T23:15:06.737Z	62857	code.exe	SYN_SENT	TCP	10.10.2.134	3389	63.185.118.117	3389	fthompson
859	FIN-WS-034	2026-02-19T23:25:45.253Z	16152	RuntimeBroker.exe	SYN_SENT	TCP	10.10.2.134	3389	168.247.117.115	8080	svc_sql
860	FIN-WS-034	2026-02-20T13:48:42.975Z	37849	MsMpEng.exe	SYN_SENT	UDP	10.10.2.134	57680	10.10.3.111	636	gwhite
861	FIN-WS-034	2026-02-11T14:11:49.961Z	17360	code.exe	LISTEN	TCP	10.10.2.134	445	0.0.0.0	0	svc_sql
862	FIN-WS-034	2026-02-14T00:35:30.994Z	26466	winlogon.exe	ESTABLISHED	UDP	10.10.2.134	5985	10.10.1.166	88	svc_backup
863	FIN-WS-034	2026-02-16T21:42:28.797Z	48642	OneDrive.exe	TIME_WAIT	TCP	10.10.2.134	3389	10.10.2.146	88	svc_web
864	FIN-WS-034	2026-02-19T15:53:59.254Z	38999	winlogon.exe	LISTEN	UDP	10.10.2.134	445	0.0.0.0	0	idavis
865	FIN-WS-034	2026-02-16T05:01:58.204Z	58905	spoolsv.exe	CLOSE_WAIT	TCP	10.10.2.134	8080	10.10.1.139	80	hbrown
866	FIN-WS-034	2026-02-16T07:47:04.040Z	40435	lsass.exe	TIME_WAIT	TCP	10.10.2.134	3389	10.10.1.127	445	emartinez
867	FIN-WS-034	2026-02-15T09:39:32.152Z	14756	notepad.exe	LISTEN	TCP	10.10.2.134	139	0.0.0.0	0	bwilson
868	FIN-WS-034	2026-02-19T17:38:07.172Z	63005	cmd.exe	SYN_SENT	TCP	10.10.2.134	389	72.72.49.53	2816	hbrown
869	SLS-WS-035	2026-02-17T19:03:45.818Z	60339	discord.exe	ESTABLISHED	TCP	10.10.3.135	139	10.10.3.117	443	svc_web
870	SLS-WS-035	2026-02-13T17:46:44.144Z	33330	lsass.exe	CLOSE_WAIT	TCP	10.10.3.135	445	72.59.181.206	443	emartinez
871	SLS-WS-035	2026-02-12T21:28:42.357Z	38526	spoolsv.exe	SYN_SENT	TCP	10.10.3.135	80	111.51.162.49	80	fthompson
872	SLS-WS-035	2026-02-15T09:07:36.454Z	12362	powershell.exe	LISTEN	TCP	10.10.3.135	445	0.0.0.0	0	svc_backup
873	SLS-WS-035	2026-02-14T20:34:46.903Z	32257	outlook.exe	LISTEN	TCP	10.10.3.135	80	0.0.0.0	0	hbrown
874	SLS-WS-035	2026-02-13T01:46:06.432Z	25022	OneDrive.exe	LISTEN	TCP	10.10.3.135	636	0.0.0.0	0	admin
875	SLS-WS-035	2026-02-16T13:27:37.896Z	35713	spoolsv.exe	TIME_WAIT	TCP	10.10.3.135	139	10.10.1.163	88	gwhite
876	SLS-WS-035	2026-02-17T05:09:11.573Z	22878	powershell.exe	ESTABLISHED	TCP	10.10.3.135	8080	10.10.3.123	53	svc_backup
877	SLS-WS-035	2026-02-10T23:12:02.935Z	50680	outlook.exe	CLOSE_WAIT	TCP	10.10.3.135	389	61.14.148.69	88	emartinez
878	SLS-WS-035	2026-02-13T13:07:39.584Z	26957	taskhostw.exe	CLOSE_WAIT	TCP	10.10.3.135	5985	103.133.27.69	80	cjohnson
879	SLS-WS-035	2026-02-18T16:36:11.590Z	6014	teams.exe	SYN_SENT	UDP	10.10.3.135	88	157.168.66.155	80	svc_sql
880	SLS-WS-035	2026-02-13T08:32:48.735Z	10677	RuntimeBroker.exe	SYN_SENT	TCP	10.10.3.135	53	10.10.1.121	3389	emartinez
881	SLS-WS-035	2026-02-13T06:46:20.749Z	1688	code.exe	SYN_SENT	UDP	10.10.3.135	80	10.10.1.151	8080	cjohnson
882	SLS-WS-035	2026-02-11T14:54:38.547Z	51483	OneDrive.exe	LISTEN	TCP	10.10.3.135	636	0.0.0.0	0	fthompson
883	SLS-WS-035	2026-02-18T14:09:18.005Z	12832	outlook.exe	TIME_WAIT	TCP	10.10.3.135	443	130.212.10.4	7286	svc_web
884	SLS-WS-035	2026-02-14T19:23:01.113Z	14665	notepad.exe	TIME_WAIT	TCP	10.10.3.135	139	10.10.2.134	445	fthompson
885	SLS-WS-035	2026-02-16T08:28:11.539Z	1731	winlogon.exe	TIME_WAIT	TCP	10.10.3.135	5985	5.254.201.244	3389	fthompson
886	SLS-WS-035	2026-02-12T02:18:50.141Z	56777	csrss.exe	TIME_WAIT	TCP	10.10.3.135	389	80.170.73.208	636	gwhite
887	SLS-WS-035	2026-02-17T20:45:29.172Z	37235	chrome.exe	LISTEN	TCP	10.10.3.135	53	0.0.0.0	0	svc_sql
888	SLS-WS-035	2026-02-13T03:02:10.406Z	13811	winlogon.exe	TIME_WAIT	TCP	10.10.3.135	636	10.10.2.173	80	svc_sql
889	ENG-WS-036	2026-02-15T08:44:56.700Z	36459	taskhostw.exe	LISTEN	TCP	10.10.1.136	636	0.0.0.0	0	svc_web
890	ENG-WS-036	2026-02-19T09:26:14.255Z	7549	chrome.exe	ESTABLISHED	TCP	10.10.1.136	5985	33.6.82.134	389	jsmith
891	ENG-WS-036	2026-02-18T03:14:54.089Z	35953	winlogon.exe	LISTEN	TCP	10.10.1.136	445	0.0.0.0	0	fthompson
892	ENG-WS-036	2026-02-15T18:48:46.116Z	13499	notepad.exe	ESTABLISHED	TCP	10.10.1.136	636	174.138.165.158	445	svc_sql
893	ENG-WS-036	2026-02-10T10:27:19.067Z	27382	OneDrive.exe	TIME_WAIT	TCP	10.10.1.136	8080	119.107.169.238	389	bwilson
894	ENG-WS-036	2026-02-16T12:36:49.014Z	4475	chrome.exe	ESTABLISHED	TCP	10.10.1.136	135	178.48.234.85	389	emartinez
895	ENG-WS-036	2026-02-16T04:16:41.066Z	42147	powershell.exe	TIME_WAIT	TCP	10.10.1.136	139	10.10.3.10	445	admin
896	ENG-WS-036	2026-02-12T04:34:52.734Z	37040	smss.exe	LISTEN	TCP	10.10.1.136	139	0.0.0.0	0	agarcia
897	ENG-WS-036	2026-02-20T15:16:18.503Z	6085	dwm.exe	SYN_SENT	TCP	10.10.1.136	88	198.141.242.54	3389	svc_sql
898	ENG-WS-036	2026-02-11T03:26:48.685Z	63659	outlook.exe	LISTEN	TCP	10.10.1.136	3389	0.0.0.0	0	jsmith
899	ENG-WS-036	2026-02-17T16:33:40.132Z	23364	csrss.exe	CLOSE_WAIT	TCP	10.10.1.136	139	10.10.1.151	88	dlee
900	ENG-WS-036	2026-02-17T11:20:30.826Z	36662	taskhostw.exe	SYN_SENT	TCP	10.10.1.136	445	10.10.3.156	445	fthompson
901	ENG-WS-036	2026-02-12T04:45:05.040Z	49096	teams.exe	ESTABLISHED	TCP	10.10.1.136	64424	172.177.217.55	53	jsmith
902	ENG-WS-036	2026-02-16T15:41:36.972Z	2297	RuntimeBroker.exe	SYN_SENT	UDP	10.10.1.136	88	10.10.1.148	80	admin
903	ENG-WS-036	2026-02-15T06:21:43.574Z	57439	winlogon.exe	CLOSE_WAIT	TCP	10.10.1.136	139	10.10.2.161	8080	admin
904	ENG-WS-036	2026-02-10T22:00:43.194Z	41877	msedge.exe	ESTABLISHED	TCP	10.10.1.136	88	183.78.90.223	443	svc_backup
905	ENG-WS-036	2026-02-17T20:32:01.982Z	24102	msedge.exe	SYN_SENT	TCP	10.10.1.136	389	158.8.170.215	60381	hbrown
906	ENG-WS-036	2026-02-16T16:07:56.122Z	45235	MsMpEng.exe	CLOSE_WAIT	TCP	10.10.1.136	443	10.10.3.123	445	hbrown
907	ENG-WS-036	2026-02-11T06:02:25.758Z	60262	spoolsv.exe	ESTABLISHED	TCP	10.10.1.136	53	90.60.174.120	389	agarcia
908	ENG-WS-036	2026-02-12T02:20:02.256Z	784	chrome.exe	LISTEN	TCP	10.10.1.136	49810	0.0.0.0	0	cjohnson
909	ENG-WS-036	2026-02-12T04:30:03.632Z	9302	csrss.exe	ESTABLISHED	UDP	10.10.1.136	389	10.10.2.107	445	idavis
910	ENG-WS-036	2026-02-20T12:49:10.388Z	17097	powershell.exe	LISTEN	TCP	10.10.1.136	445	0.0.0.0	0	svc_backup
911	ENG-WS-036	2026-02-16T06:10:40.174Z	46118	chrome.exe	CLOSE_WAIT	TCP	10.10.1.136	3389	10.10.1.175	636	fthompson
912	ENG-WS-036	2026-02-13T01:12:41.323Z	60518	MsMpEng.exe	TIME_WAIT	UDP	10.10.1.136	636	10.10.1.127	389	agarcia
913	ENG-WS-036	2026-02-16T10:42:18.685Z	24497	spoolsv.exe	LISTEN	TCP	10.10.1.136	8080	0.0.0.0	0	idavis
914	ENG-WS-036	2026-02-12T06:46:40.366Z	23562	smss.exe	ESTABLISHED	TCP	10.10.1.136	389	10.10.2.161	443	dlee
915	ENG-WS-036	2026-02-16T18:09:11.093Z	39000	System	LISTEN	TCP	10.10.1.136	63537	0.0.0.0	0	idavis
916	ENG-WS-036	2026-02-18T06:47:35.691Z	59139	SearchHost.exe	CLOSE_WAIT	UDP	10.10.1.136	636	10.10.2.152	3389	hbrown
917	ENG-WS-036	2026-02-18T03:57:45.082Z	8612	lsass.exe	TIME_WAIT	TCP	10.10.1.136	88	8.83.85.237	63381	admin
918	ENG-WS-036	2026-02-12T10:06:05.882Z	11376	explorer.exe	ESTABLISHED	TCP	10.10.1.136	53787	89.234.202.43	8080	dlee
919	ENG-WS-036	2026-02-17T21:02:00.948Z	10201	teams.exe	LISTEN	UDP	10.10.1.136	443	0.0.0.0	0	admin
920	ENG-WS-036	2026-02-18T23:50:12.292Z	46383	RuntimeBroker.exe	ESTABLISHED	TCP	10.10.1.136	3389	10.10.2.128	88	cjohnson
921	ENG-WS-036	2026-02-15T21:31:43.656Z	22832	msedge.exe	CLOSE_WAIT	UDP	10.10.1.136	59583	10.10.2.137	88	gwhite
922	ENG-WS-036	2026-02-18T03:55:16.014Z	60038	smss.exe	ESTABLISHED	UDP	10.10.1.136	54989	61.188.185.88	41038	agarcia
923	ENG-WS-036	2026-02-13T07:14:27.711Z	25450	outlook.exe	CLOSE_WAIT	UDP	10.10.1.136	135	78.222.47.87	8080	admin
924	ENG-WS-036	2026-02-17T03:58:01.743Z	26607	explorer.exe	TIME_WAIT	TCP	10.10.1.136	445	10.10.3.111	443	svc_sql
925	ENG-WS-036	2026-02-13T11:44:19.061Z	17050	teams.exe	TIME_WAIT	UDP	10.10.1.136	389	10.10.2.152	80	svc_backup
926	ENG-WS-036	2026-02-19T09:34:42.867Z	5343	services.exe	CLOSE_WAIT	TCP	10.10.1.136	61368	10.10.3.123	88	bwilson
927	ENG-WS-036	2026-02-19T08:58:27.045Z	30262	OneDrive.exe	SYN_SENT	TCP	10.10.1.136	53	10.10.1.160	443	emartinez
928	LEG-WS-037	2026-02-14T16:15:54.210Z	29379	MsMpEng.exe	TIME_WAIT	TCP	10.10.2.137	3389	173.151.12.139	53	emartinez
929	LEG-WS-037	2026-02-16T22:13:48.020Z	28352	explorer.exe	SYN_SENT	TCP	10.10.2.137	636	10.202.127.45	8080	dlee
930	LEG-WS-037	2026-02-20T13:03:59.838Z	5261	csrss.exe	SYN_SENT	UDP	10.10.2.137	80	20.167.190.10	636	emartinez
931	LEG-WS-037	2026-02-16T06:43:25.610Z	19970	notepad.exe	CLOSE_WAIT	TCP	10.10.2.137	445	192.131.40.215	3389	idavis
932	LEG-WS-037	2026-02-16T15:09:20.311Z	59721	powershell.exe	ESTABLISHED	TCP	10.10.2.137	135	10.10.1.124	80	bwilson
933	LEG-WS-037	2026-02-11T08:17:12.927Z	14834	cmd.exe	ESTABLISHED	TCP	10.10.2.137	80	10.10.3.135	53	jsmith
934	LEG-WS-037	2026-02-15T06:54:02.598Z	36646	powershell.exe	ESTABLISHED	TCP	10.10.2.137	636	10.10.2.10	88	jsmith
935	LEG-WS-037	2026-02-10T16:03:59.858Z	55955	taskhostw.exe	TIME_WAIT	TCP	10.10.2.137	8080	10.10.2.122	88	idavis
936	LEG-WS-037	2026-02-10T15:23:28.111Z	41051	spoolsv.exe	CLOSE_WAIT	TCP	10.10.2.137	443	10.10.3.141	389	idavis
937	LEG-WS-037	2026-02-11T16:55:27.650Z	39888	RuntimeBroker.exe	SYN_SENT	TCP	10.10.2.137	62763	10.10.2.131	636	svc_web
938	LEG-WS-037	2026-02-13T08:20:14.078Z	56781	SearchHost.exe	LISTEN	UDP	10.10.2.137	88	0.0.0.0	0	bwilson
939	MKT-WS-038	2026-02-18T08:37:29.704Z	41405	RuntimeBroker.exe	LISTEN	TCP	10.10.3.138	3389	0.0.0.0	0	agarcia
940	MKT-WS-038	2026-02-11T23:14:31.022Z	57335	MsMpEng.exe	TIME_WAIT	TCP	10.10.3.138	135	10.10.1.160	389	bwilson
941	MKT-WS-038	2026-02-16T23:06:15.187Z	40658	svchost.exe	SYN_SENT	TCP	10.10.3.138	389	10.10.1.154	3389	cjohnson
942	MKT-WS-038	2026-02-20T05:57:41.472Z	1588	services.exe	SYN_SENT	TCP	10.10.3.138	80	10.10.2.11	443	svc_backup
943	MKT-WS-038	2026-02-13T09:14:43.724Z	58718	spoolsv.exe	CLOSE_WAIT	TCP	10.10.3.138	445	118.188.122.45	8080	jsmith
944	MKT-WS-038	2026-02-12T21:12:57.108Z	47420	csrss.exe	CLOSE_WAIT	UDP	10.10.3.138	135	10.10.1.115	8080	agarcia
945	MKT-WS-038	2026-02-17T01:46:20.405Z	35107	explorer.exe	CLOSE_WAIT	TCP	10.10.3.138	5985	19.213.133.227	47934	svc_backup
946	MKT-WS-038	2026-02-11T09:54:20.710Z	55613	winlogon.exe	ESTABLISHED	TCP	10.10.3.138	636	10.10.1.166	443	dlee
947	MKT-WS-038	2026-02-11T08:16:53.133Z	42176	smss.exe	ESTABLISHED	UDP	10.10.3.138	5985	10.10.3.132	445	svc_backup
948	MKT-WS-038	2026-02-16T12:36:25.316Z	49994	epicgameslauncher.exe	CLOSE_WAIT	UDP	10.10.3.138	3389	10.10.2.158	445	bwilson
949	MKT-WS-038	2026-02-17T08:19:10.842Z	10221	notepad.exe	ESTABLISHED	UDP	10.10.3.138	88	10.10.1.121	389	svc_backup
950	MKT-WS-038	2026-02-13T00:19:35.184Z	15036	outlook.exe	LISTEN	TCP	10.10.3.138	5985	0.0.0.0	0	jsmith
951	MKT-WS-038	2026-02-16T10:47:01.883Z	32939	smss.exe	TIME_WAIT	UDP	10.10.3.138	139	10.10.2.122	8080	emartinez
952	MKT-WS-038	2026-02-12T11:36:26.333Z	9936	SearchHost.exe	CLOSE_WAIT	UDP	10.10.3.138	445	10.10.1.109	445	dlee
953	MKT-WS-038	2026-02-16T06:21:07.192Z	41953	msedge.exe	LISTEN	TCP	10.10.3.138	8080	0.0.0.0	0	jsmith
954	MKT-WS-038	2026-02-10T16:12:36.477Z	41151	dwm.exe	LISTEN	UDP	10.10.3.138	389	0.0.0.0	0	agarcia
955	MKT-WS-038	2026-02-12T17:05:05.937Z	47114	dwm.exe	ESTABLISHED	TCP	10.10.3.138	51755	15.228.126.63	3389	gwhite
956	MKT-WS-038	2026-02-12T16:53:47.623Z	38482	services.exe	TIME_WAIT	TCP	10.10.3.138	443	10.10.3.117	3389	svc_sql
957	MKT-WS-038	2026-02-12T09:20:56.617Z	35644	csrss.exe	ESTABLISHED	TCP	10.10.3.138	3389	10.10.1.115	389	idavis
958	MKT-WS-038	2026-02-18T04:38:24.225Z	39510	winlogon.exe	TIME_WAIT	TCP	10.10.3.138	88	10.10.2.125	445	dlee
959	MKT-WS-038	2026-02-17T09:27:38.298Z	33068	teams.exe	TIME_WAIT	TCP	10.10.3.138	53	73.153.135.223	445	dlee
960	MKT-WS-038	2026-02-19T15:20:30.480Z	33493	msedge.exe	LISTEN	TCP	10.10.3.138	3389	0.0.0.0	0	gwhite
961	MKT-WS-038	2026-02-18T06:42:47.383Z	14073	teams.exe	ESTABLISHED	TCP	10.10.3.138	443	221.226.175.164	443	dlee
962	MKT-WS-038	2026-02-18T12:27:10.014Z	55960	taskhostw.exe	SYN_SENT	TCP	10.10.3.138	389	77.107.79.83	88	bwilson
963	MKT-WS-038	2026-02-14T04:41:52.017Z	20169	teams.exe	TIME_WAIT	TCP	10.10.3.138	389	10.10.2.134	445	emartinez
964	MKT-WS-038	2026-02-14T00:24:10.762Z	52880	taskhostw.exe	CLOSE_WAIT	TCP	10.10.3.138	88	101.213.2.196	88	bwilson
965	MKT-WS-038	2026-02-18T13:43:47.972Z	21444	cmd.exe	ESTABLISHED	UDP	10.10.3.138	389	184.131.150.214	88	hbrown
966	MKT-WS-038	2026-02-11T10:42:31.118Z	16034	code.exe	LISTEN	TCP	10.10.3.138	139	0.0.0.0	0	bwilson
967	MKT-WS-038	2026-02-10T22:01:43.109Z	22558	winlogon.exe	SYN_SENT	TCP	10.10.3.138	50659	10.10.1.136	443	dlee
968	MKT-WS-038	2026-02-16T11:27:07.485Z	37723	csrss.exe	TIME_WAIT	TCP	10.10.3.138	445	192.37.166.251	8080	cjohnson
969	MKT-WS-038	2026-02-15T20:45:24.731Z	19198	csrss.exe	LISTEN	TCP	10.10.3.138	53	0.0.0.0	0	svc_backup
970	MKT-WS-038	2026-02-13T19:15:10.888Z	44511	qbittorrent.exe	ESTABLISHED	TCP	10.10.3.138	60988	115.109.94.83	53	svc_backup
971	MKT-WS-038	2026-02-10T23:04:17.721Z	64957	services.exe	ESTABLISHED	UDP	10.10.3.138	389	106.218.202.207	636	hbrown
972	EXEC-WS-039	2026-02-16T05:19:36.125Z	63946	lsass.exe	ESTABLISHED	TCP	10.10.1.139	59869	138.251.144.148	443	hbrown
973	EXEC-WS-039	2026-02-19T22:37:27.192Z	40079	System	LISTEN	TCP	10.10.1.139	88	0.0.0.0	0	admin
974	EXEC-WS-039	2026-02-18T11:16:41.623Z	48561	chrome.exe	CLOSE_WAIT	TCP	10.10.1.139	8080	10.10.1.124	636	svc_web
975	EXEC-WS-039	2026-02-13T00:42:47.655Z	14707	svchost.exe	CLOSE_WAIT	TCP	10.10.1.139	80	10.10.3.129	8080	idavis
976	EXEC-WS-039	2026-02-11T09:13:26.843Z	35058	taskhostw.exe	SYN_SENT	TCP	10.10.1.139	55716	211.181.78.49	8080	idavis
977	EXEC-WS-039	2026-02-13T17:51:54.943Z	20765	explorer.exe	LISTEN	TCP	10.10.1.139	443	0.0.0.0	0	cjohnson
978	EXEC-WS-039	2026-02-10T14:21:21.498Z	56954	code.exe	TIME_WAIT	UDP	10.10.1.139	139	10.10.1.118	88	svc_backup
979	EXEC-WS-039	2026-02-15T14:40:32.998Z	37999	code.exe	CLOSE_WAIT	TCP	10.10.1.139	8080	103.101.105.198	8080	svc_backup
980	EXEC-WS-039	2026-02-16T15:12:43.568Z	49231	teams.exe	LISTEN	TCP	10.10.1.139	636	0.0.0.0	0	emartinez
981	EXEC-WS-039	2026-02-14T12:04:37.513Z	56296	code.exe	ESTABLISHED	TCP	10.10.1.139	8080	10.10.2.101	88	agarcia
982	EXEC-WS-039	2026-02-17T22:24:26.200Z	58907	notepad.exe	ESTABLISHED	TCP	10.10.1.139	135	180.43.199.225	445	emartinez
983	EXEC-WS-039	2026-02-15T17:39:19.817Z	9289	spotify.exe	LISTEN	UDP	10.10.1.139	445	0.0.0.0	0	svc_backup
984	EXEC-WS-039	2026-02-12T03:39:33.732Z	34086	explorer.exe	ESTABLISHED	TCP	10.10.1.139	636	170.150.190.159	8080	bwilson
985	EXEC-WS-039	2026-02-12T00:35:36.342Z	32707	MsMpEng.exe	LISTEN	TCP	10.10.1.139	52736	0.0.0.0	0	cjohnson
986	EXEC-WS-039	2026-02-19T20:23:39.240Z	3147	spoolsv.exe	TIME_WAIT	TCP	10.10.1.139	80	201.13.169.8	8080	hbrown
987	EXEC-WS-039	2026-02-15T04:06:29.987Z	27302	services.exe	SYN_SENT	UDP	10.10.1.139	443	4.178.114.24	389	svc_web
988	EXEC-WS-039	2026-02-15T07:03:39.122Z	59052	csrss.exe	LISTEN	TCP	10.10.1.139	139	0.0.0.0	0	dlee
989	EXEC-WS-039	2026-02-12T16:23:16.656Z	5486	MsMpEng.exe	SYN_SENT	TCP	10.10.1.139	8080	127.100.64.57	8080	svc_backup
990	EXEC-WS-039	2026-02-17T07:05:20.727Z	34173	SearchHost.exe	TIME_WAIT	TCP	10.10.1.139	135	10.10.1.139	389	hbrown
991	EXEC-WS-039	2026-02-17T05:18:01.645Z	38069	cmd.exe	LISTEN	TCP	10.10.1.139	3389	0.0.0.0	0	svc_backup
992	EXEC-WS-039	2026-02-10T10:55:41.259Z	31608	explorer.exe	CLOSE_WAIT	TCP	10.10.1.139	445	4.73.17.214	53	gwhite
993	EXEC-WS-039	2026-02-12T23:49:15.981Z	52986	code.exe	SYN_SENT	TCP	10.10.1.139	135	10.10.1.136	8080	svc_web
994	EXEC-WS-039	2026-02-20T09:11:18.194Z	8372	System	CLOSE_WAIT	TCP	10.10.1.139	60370	10.10.3.147	80	agarcia
995	EXEC-WS-039	2026-02-12T05:39:11.139Z	53841	csrss.exe	ESTABLISHED	TCP	10.10.1.139	445	89.157.231.112	636	hbrown
996	EXEC-WS-039	2026-02-18T02:08:56.218Z	34544	MsMpEng.exe	LISTEN	TCP	10.10.1.139	636	0.0.0.0	0	idavis
997	EXEC-WS-039	2026-02-11T09:02:04.265Z	10955	smss.exe	SYN_SENT	TCP	10.10.1.139	50691	137.185.117.178	8080	admin
998	EXEC-WS-039	2026-02-13T05:36:19.241Z	62952	services.exe	LISTEN	UDP	10.10.1.139	135	0.0.0.0	0	fthompson
999	EXEC-WS-039	2026-02-16T12:29:46.438Z	4478	dwm.exe	CLOSE_WAIT	TCP	10.10.1.139	3389	10.10.1.133	14704	jsmith
1000	EXEC-WS-039	2026-02-20T11:01:25.510Z	64092	outlook.exe	LISTEN	TCP	10.10.1.139	54403	0.0.0.0	0	cjohnson
1001	EXEC-WS-039	2026-02-11T14:52:04.279Z	48574	teams.exe	CLOSE_WAIT	TCP	10.10.1.139	135	214.179.36.58	88	idavis
1002	EXEC-WS-039	2026-02-13T04:52:03.269Z	21561	outlook.exe	LISTEN	TCP	10.10.1.139	389	0.0.0.0	0	jsmith
1003	IT-WS-040	2026-02-19T12:03:24.192Z	49530	dwm.exe	ESTABLISHED	TCP	10.10.2.140	135	10.10.2.116	443	svc_backup
1004	IT-WS-040	2026-02-12T16:09:30.073Z	6853	cmd.exe	ESTABLISHED	TCP	10.10.2.140	443	10.10.2.122	445	agarcia
1005	IT-WS-040	2026-02-19T02:34:52.499Z	48101	services.exe	SYN_SENT	TCP	10.10.2.140	389	127.221.215.15	445	dlee
1006	IT-WS-040	2026-02-12T20:41:09.797Z	32538	spoolsv.exe	SYN_SENT	TCP	10.10.2.140	389	215.128.182.22	389	cjohnson
1007	IT-WS-040	2026-02-16T07:54:22.972Z	7798	MsMpEng.exe	TIME_WAIT	TCP	10.10.2.140	53	156.192.195.11	443	svc_sql
1008	IT-WS-040	2026-02-10T17:19:08.613Z	26228	smss.exe	SYN_SENT	TCP	10.10.2.140	636	10.10.1.157	636	svc_web
1009	IT-WS-040	2026-02-19T04:21:27.075Z	16714	lsass.exe	ESTABLISHED	UDP	10.10.2.140	80	162.168.50.75	389	emartinez
1010	IT-WS-040	2026-02-12T12:20:42.916Z	50615	RuntimeBroker.exe	TIME_WAIT	UDP	10.10.2.140	8080	10.10.1.13	8080	svc_web
1011	IT-WS-040	2026-02-11T09:19:28.350Z	47413	taskhostw.exe	CLOSE_WAIT	TCP	10.10.2.140	8080	220.45.170.91	445	agarcia
1012	IT-WS-040	2026-02-19T15:56:42.207Z	49564	taskhostw.exe	SYN_SENT	TCP	10.10.2.140	55253	10.10.1.163	389	bwilson
1013	IT-WS-040	2026-02-11T06:38:07.995Z	39288	taskhostw.exe	ESTABLISHED	TCP	10.10.2.140	88	80.151.91.102	443	admin
1014	IT-WS-040	2026-02-11T17:15:29.055Z	25347	cmd.exe	LISTEN	TCP	10.10.2.140	5985	0.0.0.0	0	agarcia
1015	IT-WS-040	2026-02-10T14:35:23.270Z	14810	notepad.exe	SYN_SENT	TCP	10.10.2.140	3389	58.226.20.63	445	svc_web
1016	IT-WS-040	2026-02-18T18:52:52.791Z	9627	powershell.exe	LISTEN	UDP	10.10.2.140	389	0.0.0.0	0	jsmith
1017	IT-WS-040	2026-02-19T14:09:03.726Z	64268	svchost.exe	SYN_SENT	TCP	10.10.2.140	5985	10.10.2.167	42131	fthompson
1018	HR-WS-041	2026-02-18T14:53:21.370Z	38042	RuntimeBroker.exe	TIME_WAIT	TCP	10.10.3.141	3389	10.10.1.118	3389	bwilson
1019	HR-WS-041	2026-02-16T07:33:53.237Z	3586	dwm.exe	CLOSE_WAIT	TCP	10.10.3.141	443	207.116.178.184	445	gwhite
1020	HR-WS-041	2026-02-10T23:56:39.150Z	23326	winlogon.exe	SYN_SENT	TCP	10.10.3.141	445	10.10.1.145	8080	agarcia
1021	HR-WS-041	2026-02-13T13:27:22.747Z	45792	cmd.exe	SYN_SENT	TCP	10.10.3.141	636	10.10.1.118	389	admin
1022	HR-WS-041	2026-02-16T10:51:42.906Z	50865	powershell.exe	SYN_SENT	TCP	10.10.3.141	445	197.161.3.249	53	agarcia
1023	HR-WS-041	2026-02-11T07:32:25.285Z	26547	dwm.exe	CLOSE_WAIT	UDP	10.10.3.141	135	154.91.92.8	443	idavis
1024	HR-WS-041	2026-02-17T16:48:56.656Z	57710	MsMpEng.exe	CLOSE_WAIT	TCP	10.10.3.141	636	10.10.2.113	8080	dlee
1025	HR-WS-041	2026-02-10T23:13:30.800Z	36611	teams.exe	TIME_WAIT	TCP	10.10.3.141	135	10.10.2.113	2360	jsmith
1026	HR-WS-041	2026-02-13T17:42:53.696Z	20171	msedge.exe	LISTEN	TCP	10.10.3.141	80	0.0.0.0	0	jsmith
1027	HR-WS-041	2026-02-16T13:55:46.474Z	37716	smss.exe	SYN_SENT	TCP	10.10.3.141	445	10.10.2.128	8080	bwilson
1028	HR-WS-041	2026-02-10T15:35:07.500Z	2641	OneDrive.exe	LISTEN	TCP	10.10.3.141	8080	0.0.0.0	0	hbrown
1029	HR-WS-041	2026-02-11T22:48:47.358Z	40286	msedge.exe	TIME_WAIT	TCP	10.10.3.141	3389	10.10.2.113	13682	emartinez
1030	HR-WS-041	2026-02-12T07:05:06.166Z	26595	MsMpEng.exe	SYN_SENT	TCP	10.10.3.141	443	172.33.173.64	389	jsmith
1031	HR-WS-041	2026-02-11T17:52:08.101Z	50138	winlogon.exe	SYN_SENT	TCP	10.10.3.141	389	168.164.201.194	53	cjohnson
1032	HR-WS-041	2026-02-16T16:24:56.912Z	20147	spoolsv.exe	CLOSE_WAIT	TCP	10.10.3.141	5985	10.10.3.114	389	gwhite
1033	HR-WS-041	2026-02-10T19:48:06.794Z	19953	notepad.exe	ESTABLISHED	TCP	10.10.3.141	135	23.157.88.165	80	fthompson
1034	HR-WS-041	2026-02-17T18:06:09.521Z	4881	System	ESTABLISHED	TCP	10.10.3.141	53	95.22.109.26	3389	svc_backup
1035	HR-WS-041	2026-02-17T04:53:54.772Z	60081	code.exe	SYN_SENT	TCP	10.10.3.141	80	98.105.59.237	3389	svc_web
1036	HR-WS-041	2026-02-17T10:05:56.147Z	46641	teams.exe	CLOSE_WAIT	UDP	10.10.3.141	5985	10.10.3.132	88	svc_web
1037	HR-WS-041	2026-02-10T10:33:24.660Z	54072	notepad.exe	LISTEN	TCP	10.10.3.141	636	0.0.0.0	0	fthompson
1038	HR-WS-041	2026-02-11T01:37:51.919Z	7596	code.exe	CLOSE_WAIT	TCP	10.10.3.141	389	178.202.21.179	3389	agarcia
1039	HR-WS-041	2026-02-13T01:22:29.270Z	49972	winlogon.exe	ESTABLISHED	UDP	10.10.3.141	445	10.10.1.169	19682	agarcia
1040	HR-WS-041	2026-02-19T00:16:25.260Z	12189	code.exe	ESTABLISHED	TCP	10.10.3.141	135	33.18.240.123	80	agarcia
1041	HR-WS-041	2026-02-18T00:35:11.698Z	29068	chrome.exe	LISTEN	TCP	10.10.3.141	8080	0.0.0.0	0	idavis
1042	FIN-WS-042	2026-02-16T06:12:01.215Z	62266	dwm.exe	LISTEN	UDP	10.10.1.142	80	0.0.0.0	0	bwilson
1043	FIN-WS-042	2026-02-19T17:23:26.533Z	3798	cmd.exe	LISTEN	TCP	10.10.1.142	135	0.0.0.0	0	fthompson
1044	FIN-WS-042	2026-02-11T01:20:44.594Z	16207	notepad.exe	SYN_SENT	TCP	10.10.1.142	445	161.99.171.169	389	idavis
1045	FIN-WS-042	2026-02-11T11:50:29.220Z	4368	System	LISTEN	UDP	10.10.1.142	80	0.0.0.0	0	fthompson
1046	FIN-WS-042	2026-02-16T04:40:40.490Z	53427	svchost.exe	SYN_SENT	UDP	10.10.1.142	3389	10.73.53.176	80	fthompson
1047	FIN-WS-042	2026-02-17T02:12:56.365Z	59790	msedge.exe	LISTEN	TCP	10.10.1.142	80	0.0.0.0	0	gwhite
1048	FIN-WS-042	2026-02-15T07:46:56.174Z	58989	spoolsv.exe	CLOSE_WAIT	TCP	10.10.1.142	8080	10.10.1.133	389	bwilson
1049	FIN-WS-042	2026-02-17T22:44:40.681Z	63213	RuntimeBroker.exe	LISTEN	UDP	10.10.1.142	389	0.0.0.0	0	fthompson
1050	FIN-WS-042	2026-02-19T02:02:01.813Z	23230	teams.exe	TIME_WAIT	TCP	10.10.1.142	63299	77.73.21.118	8080	cjohnson
1051	FIN-WS-042	2026-02-12T11:28:43.572Z	14318	lsass.exe	CLOSE_WAIT	TCP	10.10.1.142	8080	10.10.1.142	636	svc_backup
1052	SLS-WS-043	2026-02-15T05:33:29.205Z	35674	MsMpEng.exe	SYN_SENT	TCP	10.10.2.143	53	221.209.191.165	8080	admin
1053	SLS-WS-043	2026-02-10T13:57:31.856Z	13630	services.exe	CLOSE_WAIT	TCP	10.10.2.143	135	10.10.2.167	389	fthompson
1054	SLS-WS-043	2026-02-18T06:39:18.242Z	31995	teams.exe	TIME_WAIT	TCP	10.10.2.143	389	10.10.3.141	8080	emartinez
1055	SLS-WS-043	2026-02-13T14:19:24.493Z	59200	services.exe	SYN_SENT	TCP	10.10.2.143	52332	10.10.2.107	443	emartinez
1056	SLS-WS-043	2026-02-16T19:48:28.517Z	20776	outlook.exe	LISTEN	TCP	10.10.2.143	3389	0.0.0.0	0	idavis
1057	SLS-WS-043	2026-02-15T21:04:34.662Z	40620	csrss.exe	CLOSE_WAIT	TCP	10.10.2.143	139	78.51.81.231	443	fthompson
1058	SLS-WS-043	2026-02-15T06:12:11.778Z	31352	System	CLOSE_WAIT	TCP	10.10.2.143	443	170.75.227.25	88	bwilson
1059	SLS-WS-043	2026-02-11T01:13:20.992Z	8943	smss.exe	TIME_WAIT	TCP	10.10.2.143	8080	6.251.176.227	53	idavis
1060	SLS-WS-043	2026-02-13T16:10:28.725Z	46722	SearchHost.exe	LISTEN	TCP	10.10.2.143	389	0.0.0.0	0	svc_sql
1061	SLS-WS-043	2026-02-20T13:30:32.753Z	59362	chrome.exe	TIME_WAIT	TCP	10.10.2.143	80	160.213.86.94	445	jsmith
1062	SLS-WS-043	2026-02-13T19:13:46.977Z	2156	teams.exe	ESTABLISHED	UDP	10.10.2.143	139	10.10.3.135	443	bwilson
1063	SLS-WS-043	2026-02-17T14:12:50.482Z	22096	services.exe	ESTABLISHED	TCP	10.10.2.143	139	98.102.240.98	445	emartinez
1064	SLS-WS-043	2026-02-19T21:41:38.503Z	5657	lsass.exe	CLOSE_WAIT	TCP	10.10.2.143	3389	10.10.2.137	389	svc_sql
1065	SLS-WS-043	2026-02-16T06:58:37.926Z	15628	taskhostw.exe	SYN_SENT	TCP	10.10.2.143	49905	10.10.3.123	8080	svc_sql
1066	SLS-WS-043	2026-02-10T22:02:29.774Z	9190	chrome.exe	ESTABLISHED	TCP	10.10.2.143	88	19.79.235.162	443	cjohnson
1067	SLS-WS-043	2026-02-14T20:14:32.430Z	45031	chrome.exe	LISTEN	TCP	10.10.2.143	80	0.0.0.0	0	cjohnson
1068	SLS-WS-043	2026-02-15T05:18:09.409Z	48043	OneDrive.exe	ESTABLISHED	TCP	10.10.2.143	389	10.10.3.126	8080	admin
1069	SLS-WS-043	2026-02-17T15:43:01.285Z	5066	explorer.exe	CLOSE_WAIT	UDP	10.10.2.143	443	46.101.134.37	443	cjohnson
1070	SLS-WS-043	2026-02-19T01:00:36.363Z	19545	taskhostw.exe	LISTEN	UDP	10.10.2.143	389	0.0.0.0	0	idavis
1071	SLS-WS-043	2026-02-11T00:09:48.003Z	4214	spoolsv.exe	TIME_WAIT	UDP	10.10.2.143	139	10.10.2.101	8080	gwhite
1072	ENG-WS-044	2026-02-17T14:31:08.379Z	39782	explorer.exe	SYN_SENT	TCP	10.10.3.144	389	10.10.1.112	53	admin
1073	ENG-WS-044	2026-02-20T17:46:27.684Z	12570	smss.exe	TIME_WAIT	TCP	10.10.3.144	3389	10.10.1.139	636	cjohnson
1074	ENG-WS-044	2026-02-18T00:27:53.275Z	25368	explorer.exe	TIME_WAIT	TCP	10.10.3.144	8080	10.10.1.160	8080	fthompson
1075	ENG-WS-044	2026-02-12T14:14:54.408Z	1174	outlook.exe	TIME_WAIT	TCP	10.10.3.144	5985	94.7.222.203	8080	fthompson
1076	ENG-WS-044	2026-02-15T09:38:01.294Z	47530	cmd.exe	TIME_WAIT	UDP	10.10.3.144	8080	10.10.3.171	3389	gwhite
1077	ENG-WS-044	2026-02-20T03:50:04.189Z	52766	teams.exe	CLOSE_WAIT	TCP	10.10.3.144	443	18.165.244.156	636	cjohnson
1078	ENG-WS-044	2026-02-18T17:46:51.856Z	56729	svchost.exe	TIME_WAIT	UDP	10.10.3.144	389	10.10.3.117	53	bwilson
1079	ENG-WS-044	2026-02-16T22:28:04.285Z	59202	winlogon.exe	ESTABLISHED	TCP	10.10.3.144	3389	107.126.107.242	53	gwhite
1080	ENG-WS-044	2026-02-16T16:20:48.404Z	53401	System	TIME_WAIT	TCP	10.10.3.144	636	50.65.164.201	47430	svc_web
1081	ENG-WS-044	2026-02-15T03:40:20.336Z	59110	smss.exe	CLOSE_WAIT	TCP	10.10.3.144	53	25.196.75.160	389	svc_backup
1082	ENG-WS-044	2026-02-13T17:48:12.940Z	54156	csrss.exe	CLOSE_WAIT	UDP	10.10.3.144	636	37.186.30.122	80	idavis
1083	ENG-WS-044	2026-02-17T23:52:25.392Z	12875	outlook.exe	TIME_WAIT	TCP	10.10.3.144	3389	155.102.96.246	80	hbrown
1084	ENG-WS-044	2026-02-18T20:38:47.881Z	815	notepad.exe	LISTEN	TCP	10.10.3.144	636	0.0.0.0	0	dlee
1085	ENG-WS-044	2026-02-16T02:48:57.926Z	39018	outlook.exe	TIME_WAIT	TCP	10.10.3.144	389	165.215.40.95	88	gwhite
1086	ENG-WS-044	2026-02-11T14:58:43.448Z	56968	msedge.exe	TIME_WAIT	TCP	10.10.3.144	135	181.232.145.42	80	emartinez
1087	ENG-WS-044	2026-02-10T14:21:58.735Z	28559	RuntimeBroker.exe	LISTEN	TCP	10.10.3.144	53	0.0.0.0	0	admin
1088	ENG-WS-044	2026-02-15T12:10:08.948Z	60848	teams.exe	TIME_WAIT	TCP	10.10.3.144	389	73.165.20.227	8080	agarcia
1089	ENG-WS-044	2026-02-15T11:06:50.131Z	35824	msedge.exe	SYN_SENT	UDP	10.10.3.144	443	10.10.3.111	443	jsmith
1090	ENG-WS-044	2026-02-17T01:11:22.721Z	36648	spoolsv.exe	CLOSE_WAIT	UDP	10.10.3.144	135	115.81.59.196	80	jsmith
1091	ENG-WS-044	2026-02-12T14:45:00.813Z	15347	discord.exe	LISTEN	TCP	10.10.3.144	80	0.0.0.0	0	bwilson
1092	ENG-WS-044	2026-02-16T01:30:27.973Z	2729	outlook.exe	SYN_SENT	TCP	10.10.3.144	5985	10.10.3.138	88	cjohnson
1093	ENG-WS-044	2026-02-13T23:20:43.380Z	5383	code.exe	LISTEN	TCP	10.10.3.144	80	0.0.0.0	0	idavis
1094	ENG-WS-044	2026-02-15T22:03:26.984Z	60078	dwm.exe	LISTEN	TCP	10.10.3.144	445	0.0.0.0	0	admin
1095	ENG-WS-044	2026-02-13T17:45:52.275Z	17161	notepad.exe	TIME_WAIT	TCP	10.10.3.144	53	10.10.1.11	3389	fthompson
1096	ENG-WS-044	2026-02-18T01:42:12.067Z	57393	notepad.exe	CLOSE_WAIT	TCP	10.10.3.144	88	167.207.104.48	443	cjohnson
1097	ENG-WS-044	2026-02-13T13:28:31.408Z	14283	smss.exe	TIME_WAIT	UDP	10.10.3.144	3389	119.27.117.146	80	svc_web
1098	ENG-WS-044	2026-02-13T17:50:22.913Z	64602	taskhostw.exe	LISTEN	TCP	10.10.3.144	636	0.0.0.0	0	fthompson
1099	ENG-WS-044	2026-02-16T18:49:09.066Z	56275	teams.exe	CLOSE_WAIT	TCP	10.10.3.144	58502	171.127.39.158	80	jsmith
1100	ENG-WS-044	2026-02-20T10:44:06.178Z	48717	svchost.exe	TIME_WAIT	TCP	10.10.3.144	636	146.81.49.14	3389	emartinez
1101	ENG-WS-044	2026-02-19T12:04:21.510Z	61182	lsass.exe	ESTABLISHED	TCP	10.10.3.144	443	78.72.134.117	80	gwhite
1102	LEG-WS-045	2026-02-10T13:38:23.052Z	37011	chrome.exe	LISTEN	TCP	10.10.1.145	139	0.0.0.0	0	gwhite
1103	LEG-WS-045	2026-02-17T09:30:17.339Z	2059	OneDrive.exe	LISTEN	UDP	10.10.1.145	5985	0.0.0.0	0	jsmith
1104	LEG-WS-045	2026-02-10T14:06:11.587Z	17923	csrss.exe	CLOSE_WAIT	UDP	10.10.1.145	88	10.10.2.137	445	svc_web
1105	LEG-WS-045	2026-02-11T06:06:14.399Z	24171	OneDrive.exe	CLOSE_WAIT	TCP	10.10.1.145	88	214.222.250.203	53	gwhite
1106	LEG-WS-045	2026-02-16T01:45:21.654Z	9648	System	LISTEN	TCP	10.10.1.145	636	0.0.0.0	0	emartinez
1107	LEG-WS-045	2026-02-11T05:36:41.003Z	16693	RuntimeBroker.exe	CLOSE_WAIT	UDP	10.10.1.145	3389	10.10.2.164	88	bwilson
1108	LEG-WS-045	2026-02-11T18:52:49.170Z	53594	RuntimeBroker.exe	CLOSE_WAIT	TCP	10.10.1.145	80	88.74.174.139	56801	svc_sql
1109	LEG-WS-045	2026-02-17T06:09:33.245Z	10893	OneDrive.exe	CLOSE_WAIT	TCP	10.10.1.145	443	10.10.2.101	636	svc_backup
1110	LEG-WS-045	2026-02-18T03:27:23.683Z	45175	OneDrive.exe	TIME_WAIT	TCP	10.10.1.145	3389	188.191.202.134	53	svc_sql
1111	LEG-WS-045	2026-02-13T11:42:51.845Z	13813	powershell.exe	CLOSE_WAIT	UDP	10.10.1.145	636	10.10.2.110	88	hbrown
1112	LEG-WS-045	2026-02-20T05:45:11.391Z	27750	code.exe	ESTABLISHED	TCP	10.10.1.145	139	31.106.95.212	389	emartinez
1113	LEG-WS-045	2026-02-16T12:20:02.568Z	44606	svchost.exe	SYN_SENT	TCP	10.10.1.145	5985	10.10.3.10	42653	gwhite
1114	LEG-WS-045	2026-02-16T19:03:28.551Z	23106	winlogon.exe	TIME_WAIT	TCP	10.10.1.145	139	180.242.196.193	28726	admin
1115	LEG-WS-045	2026-02-15T01:40:17.577Z	49189	svchost.exe	CLOSE_WAIT	TCP	10.10.1.145	65124	23.243.129.140	443	emartinez
1116	LEG-WS-045	2026-02-16T12:21:26.158Z	44352	winlogon.exe	ESTABLISHED	TCP	10.10.1.145	53	199.231.110.158	8080	svc_sql
1117	LEG-WS-045	2026-02-15T10:46:29.101Z	59230	dwm.exe	CLOSE_WAIT	TCP	10.10.1.145	8080	71.198.24.65	636	gwhite
1118	LEG-WS-045	2026-02-14T08:49:33.310Z	48893	teams.exe	ESTABLISHED	TCP	10.10.1.145	5985	10.10.3.162	80	svc_sql
1119	LEG-WS-045	2026-02-11T18:48:04.776Z	48619	teams.exe	CLOSE_WAIT	TCP	10.10.1.145	445	58.174.252.59	8080	idavis
1120	LEG-WS-045	2026-02-16T03:19:13.403Z	27772	csrss.exe	CLOSE_WAIT	TCP	10.10.1.145	80	182.188.54.108	88	agarcia
1121	MKT-WS-046	2026-02-17T06:09:36.854Z	29335	MsMpEng.exe	TIME_WAIT	TCP	10.10.2.146	53	63.70.61.7	8080	admin
1122	MKT-WS-046	2026-02-11T20:50:48.508Z	8830	RuntimeBroker.exe	SYN_SENT	TCP	10.10.2.146	443	203.94.211.30	3389	svc_backup
1123	MKT-WS-046	2026-02-19T07:08:47.117Z	52609	svchost.exe	TIME_WAIT	TCP	10.10.2.146	443	10.10.1.118	3389	cjohnson
1124	MKT-WS-046	2026-02-15T07:25:19.558Z	64971	winlogon.exe	CLOSE_WAIT	TCP	10.10.2.146	443	45.198.36.38	443	agarcia
1125	MKT-WS-046	2026-02-17T07:54:50.382Z	61099	powershell.exe	CLOSE_WAIT	TCP	10.10.2.146	139	10.10.1.142	3389	emartinez
1126	MKT-WS-046	2026-02-20T05:20:49.115Z	33493	services.exe	LISTEN	UDP	10.10.2.146	88	0.0.0.0	0	fthompson
1127	MKT-WS-046	2026-02-18T09:16:29.252Z	28460	spoolsv.exe	LISTEN	UDP	10.10.2.146	8080	0.0.0.0	0	idavis
1128	MKT-WS-046	2026-02-13T11:52:27.199Z	35180	chrome.exe	SYN_SENT	TCP	10.10.2.146	53921	10.10.1.151	53	idavis
1129	MKT-WS-046	2026-02-15T21:11:05.202Z	40494	notepad.exe	CLOSE_WAIT	TCP	10.10.2.146	5985	10.10.1.112	53	admin
1130	MKT-WS-046	2026-02-13T23:07:41.894Z	20176	spoolsv.exe	TIME_WAIT	TCP	10.10.2.146	88	132.116.160.238	3389	cjohnson
1131	MKT-WS-046	2026-02-17T18:09:18.933Z	36335	dwm.exe	CLOSE_WAIT	TCP	10.10.2.146	88	109.96.71.206	53	emartinez
1132	MKT-WS-046	2026-02-14T05:44:58.761Z	25765	csrss.exe	SYN_SENT	TCP	10.10.2.146	443	10.10.2.10	389	gwhite
1133	EXEC-WS-047	2026-02-12T07:13:55.279Z	61318	csrss.exe	SYN_SENT	TCP	10.10.3.147	139	10.10.2.149	443	dlee
1134	EXEC-WS-047	2026-02-16T12:49:04.596Z	31319	csrss.exe	SYN_SENT	TCP	10.10.3.147	53	10.10.2.107	389	fthompson
1135	EXEC-WS-047	2026-02-18T06:01:51.979Z	3671	msedge.exe	LISTEN	UDP	10.10.3.147	3389	0.0.0.0	0	jsmith
1136	EXEC-WS-047	2026-02-13T20:24:05.304Z	41018	cmd.exe	ESTABLISHED	TCP	10.10.3.147	445	201.49.216.53	443	svc_backup
1137	EXEC-WS-047	2026-02-16T14:54:55.165Z	49365	lsass.exe	LISTEN	UDP	10.10.3.147	88	0.0.0.0	0	dlee
1138	EXEC-WS-047	2026-02-16T10:01:48.006Z	50061	RuntimeBroker.exe	LISTEN	UDP	10.10.3.147	53	0.0.0.0	0	cjohnson
1139	EXEC-WS-047	2026-02-11T06:47:39.975Z	48626	SearchHost.exe	LISTEN	TCP	10.10.3.147	445	0.0.0.0	0	idavis
1140	EXEC-WS-047	2026-02-19T21:24:22.979Z	18415	cmd.exe	CLOSE_WAIT	TCP	10.10.3.147	135	217.208.113.62	8080	agarcia
1141	EXEC-WS-047	2026-02-14T22:37:54.800Z	48541	MsMpEng.exe	TIME_WAIT	TCP	10.10.3.147	8080	10.10.3.111	389	fthompson
1142	EXEC-WS-047	2026-02-15T12:45:28.935Z	40446	SearchHost.exe	ESTABLISHED	TCP	10.10.3.147	135	10.10.3.168	80	fthompson
1143	EXEC-WS-047	2026-02-11T03:20:21.258Z	54949	services.exe	LISTEN	TCP	10.10.3.147	636	0.0.0.0	0	svc_backup
1144	EXEC-WS-047	2026-02-19T11:25:57.510Z	63057	teams.exe	CLOSE_WAIT	UDP	10.10.3.147	3389	91.207.140.64	25891	jsmith
1145	EXEC-WS-047	2026-02-18T16:01:30.575Z	25584	smss.exe	LISTEN	TCP	10.10.3.147	636	0.0.0.0	0	idavis
1146	EXEC-WS-047	2026-02-14T03:38:55.278Z	17130	SearchHost.exe	ESTABLISHED	TCP	10.10.3.147	636	10.10.1.133	445	gwhite
1147	EXEC-WS-047	2026-02-11T07:05:39.102Z	45668	powershell.exe	SYN_SENT	TCP	10.10.3.147	80	98.186.24.195	8080	hbrown
1148	EXEC-WS-047	2026-02-12T01:39:25.917Z	4476	chrome.exe	SYN_SENT	TCP	10.10.3.147	445	76.72.223.72	445	cjohnson
1149	EXEC-WS-047	2026-02-16T14:39:30.904Z	5149	services.exe	ESTABLISHED	TCP	10.10.3.147	139	141.240.216.230	3389	agarcia
1150	EXEC-WS-047	2026-02-15T03:38:03.415Z	49963	cmd.exe	LISTEN	TCP	10.10.3.147	53219	0.0.0.0	0	emartinez
1151	EXEC-WS-047	2026-02-19T15:42:34.366Z	25908	outlook.exe	SYN_SENT	UDP	10.10.3.147	57201	3.166.87.197	636	bwilson
1152	EXEC-WS-047	2026-02-19T00:34:11.927Z	37708	winlogon.exe	LISTEN	UDP	10.10.3.147	88	0.0.0.0	0	svc_sql
1153	EXEC-WS-047	2026-02-15T03:11:35.434Z	52452	powershell.exe	CLOSE_WAIT	UDP	10.10.3.147	636	64.82.21.18	445	gwhite
1154	EXEC-WS-047	2026-02-19T06:28:54.150Z	8373	SearchHost.exe	SYN_SENT	TCP	10.10.3.147	53	10.10.1.133	636	svc_sql
1155	EXEC-WS-047	2026-02-15T09:48:19.433Z	49272	chrome.exe	SYN_SENT	TCP	10.10.3.147	443	10.10.1.139	53	jsmith
1156	EXEC-WS-047	2026-02-18T14:26:24.472Z	26075	spoolsv.exe	LISTEN	TCP	10.10.3.147	389	0.0.0.0	0	cjohnson
1157	EXEC-WS-047	2026-02-20T07:54:16.524Z	16180	powershell.exe	CLOSE_WAIT	TCP	10.10.3.147	5985	10.10.1.127	88	bwilson
1158	IT-WS-048	2026-02-11T00:56:20.091Z	21822	explorer.exe	TIME_WAIT	TCP	10.10.1.148	389	10.10.1.166	389	cjohnson
1159	IT-WS-048	2026-02-18T02:05:03.941Z	36904	dwm.exe	LISTEN	TCP	10.10.1.148	445	0.0.0.0	0	dlee
1160	IT-WS-048	2026-02-15T00:05:22.792Z	21991	dwm.exe	LISTEN	TCP	10.10.1.148	80	0.0.0.0	0	svc_sql
1161	IT-WS-048	2026-02-10T17:02:20.329Z	51172	RuntimeBroker.exe	SYN_SENT	TCP	10.10.1.148	3389	10.10.1.163	636	hbrown
1162	IT-WS-048	2026-02-14T07:58:20.582Z	25947	smss.exe	SYN_SENT	TCP	10.10.1.148	5985	85.225.136.37	7131	cjohnson
1163	IT-WS-048	2026-02-12T23:47:13.093Z	60135	notepad.exe	ESTABLISHED	UDP	10.10.1.148	5985	10.10.3.120	36875	cjohnson
1164	IT-WS-048	2026-02-15T08:39:58.118Z	4431	chrome.exe	LISTEN	TCP	10.10.1.148	636	0.0.0.0	0	cjohnson
1165	IT-WS-048	2026-02-16T00:58:52.823Z	59169	teams.exe	CLOSE_WAIT	TCP	10.10.1.148	389	10.10.2.161	636	svc_web
1166	IT-WS-048	2026-02-13T18:02:18.262Z	33447	spoolsv.exe	TIME_WAIT	TCP	10.10.1.148	389	10.10.1.103	445	dlee
1167	IT-WS-048	2026-02-19T12:11:11.540Z	16401	SearchHost.exe	ESTABLISHED	TCP	10.10.1.148	58993	221.131.54.211	3389	gwhite
1168	IT-WS-048	2026-02-12T00:36:40.927Z	31634	msedge.exe	SYN_SENT	TCP	10.10.1.148	5985	10.10.2.143	3389	admin
1169	IT-WS-048	2026-02-11T13:33:23.763Z	15545	taskhostw.exe	ESTABLISHED	TCP	10.10.1.148	5985	10.10.2.104	53	gwhite
1170	IT-WS-048	2026-02-16T13:29:43.946Z	38992	winlogon.exe	CLOSE_WAIT	TCP	10.10.1.148	5985	111.120.146.63	8080	fthompson
1171	IT-WS-048	2026-02-15T05:48:07.327Z	2242	msedge.exe	ESTABLISHED	TCP	10.10.1.148	445	139.219.252.230	80	bwilson
1172	HR-WS-049	2026-02-10T08:03:11.803Z	60560	RuntimeBroker.exe	TIME_WAIT	TCP	10.10.2.149	80	43.158.169.26	3613	cjohnson
1173	HR-WS-049	2026-02-11T23:20:54.637Z	50960	SearchHost.exe	CLOSE_WAIT	TCP	10.10.2.149	88	10.10.1.109	445	svc_backup
1174	HR-WS-049	2026-02-13T12:35:58.883Z	42927	winlogon.exe	SYN_SENT	UDP	10.10.2.149	80	10.10.2.161	636	svc_backup
1175	HR-WS-049	2026-02-12T20:10:13.151Z	9846	lsass.exe	LISTEN	TCP	10.10.2.149	135	0.0.0.0	0	svc_backup
1176	HR-WS-049	2026-02-17T11:55:53.226Z	38063	chrome.exe	ESTABLISHED	TCP	10.10.2.149	445	10.10.2.110	53	cjohnson
1177	HR-WS-049	2026-02-11T00:30:49.815Z	2156	lsass.exe	CLOSE_WAIT	TCP	10.10.2.149	636	10.10.1.121	53	svc_web
1178	HR-WS-049	2026-02-17T04:36:04.333Z	62887	cmd.exe	CLOSE_WAIT	UDP	10.10.2.149	8080	10.10.1.118	88	svc_sql
1179	HR-WS-049	2026-02-14T15:57:00.930Z	32009	OneDrive.exe	LISTEN	TCP	10.10.2.149	139	0.0.0.0	0	emartinez
1180	HR-WS-049	2026-02-19T18:49:36.206Z	47337	outlook.exe	LISTEN	TCP	10.10.2.149	139	0.0.0.0	0	bwilson
1181	HR-WS-049	2026-02-13T19:07:46.127Z	43266	svchost.exe	TIME_WAIT	TCP	10.10.2.149	3389	1.53.247.198	8080	svc_web
1182	HR-WS-049	2026-02-16T00:46:50.862Z	35410	dwm.exe	TIME_WAIT	TCP	10.10.2.149	53	10.10.1.106	64210	svc_sql
1183	HR-WS-049	2026-02-16T06:58:27.884Z	60595	notepad.exe	TIME_WAIT	TCP	10.10.2.149	88	10.10.1.154	60930	emartinez
1184	HR-WS-049	2026-02-10T09:04:16.517Z	15122	powershell.exe	CLOSE_WAIT	TCP	10.10.2.149	389	10.10.1.175	445	jsmith
1185	HR-WS-049	2026-02-10T19:56:27.381Z	5087	csrss.exe	LISTEN	TCP	10.10.2.149	5985	0.0.0.0	0	svc_sql
1186	HR-WS-049	2026-02-13T07:53:21.424Z	7693	System	SYN_SENT	TCP	10.10.2.149	53	223.156.26.128	636	svc_web
1187	HR-WS-049	2026-02-20T04:38:40.702Z	1455	SearchHost.exe	SYN_SENT	TCP	10.10.2.149	53	168.102.7.176	3389	agarcia
1188	HR-WS-049	2026-02-12T00:27:55.324Z	28047	cmd.exe	LISTEN	TCP	10.10.2.149	5985	0.0.0.0	0	cjohnson
1189	HR-WS-049	2026-02-20T06:23:46.976Z	4424	RuntimeBroker.exe	ESTABLISHED	TCP	10.10.2.149	53	178.35.39.252	80	svc_sql
1190	HR-WS-049	2026-02-11T14:21:35.139Z	50300	cmd.exe	LISTEN	TCP	10.10.2.149	3389	0.0.0.0	0	svc_web
1191	HR-WS-049	2026-02-18T17:39:01.708Z	35837	csrss.exe	SYN_SENT	TCP	10.10.2.149	389	10.10.1.112	88	dlee
1192	HR-WS-049	2026-02-19T05:22:35.602Z	52048	services.exe	ESTABLISHED	TCP	10.10.2.149	445	10.10.2.11	53	svc_sql
1193	HR-WS-049	2026-02-14T08:49:08.041Z	42208	dwm.exe	CLOSE_WAIT	UDP	10.10.2.149	135	10.10.1.130	389	emartinez
1194	HR-WS-049	2026-02-20T10:23:45.356Z	56592	explorer.exe	ESTABLISHED	TCP	10.10.2.149	80	10.10.1.148	80	gwhite
1195	HR-WS-049	2026-02-18T18:42:26.373Z	51620	msedge.exe	SYN_SENT	TCP	10.10.2.149	88	10.10.3.171	8872	svc_web
1196	HR-WS-049	2026-02-18T19:55:24.016Z	10129	powershell.exe	TIME_WAIT	TCP	10.10.2.149	139	10.54.28.241	445	dlee
1197	HR-WS-049	2026-02-13T17:56:18.458Z	46748	lsass.exe	ESTABLISHED	TCP	10.10.2.149	443	128.157.153.105	445	agarcia
1198	FIN-WS-050	2026-02-16T09:33:25.377Z	5266	services.exe	SYN_SENT	TCP	10.10.3.150	443	25.135.170.82	3389	cjohnson
1199	FIN-WS-050	2026-02-11T07:14:30.730Z	21940	notepad.exe	SYN_SENT	TCP	10.10.3.150	51762	183.152.152.26	88	dlee
1200	FIN-WS-050	2026-02-13T02:04:14.025Z	38822	outlook.exe	ESTABLISHED	TCP	10.10.3.150	443	10.10.3.147	443	hbrown
1201	FIN-WS-050	2026-02-12T19:38:47.883Z	26832	powershell.exe	ESTABLISHED	TCP	10.10.3.150	445	167.53.8.121	636	jsmith
1202	FIN-WS-050	2026-02-13T09:10:35.675Z	9026	cmd.exe	SYN_SENT	UDP	10.10.3.150	53	10.10.1.12	636	fthompson
1203	FIN-WS-050	2026-02-14T13:23:10.467Z	12628	lsass.exe	SYN_SENT	TCP	10.10.3.150	135	10.10.1.11	443	svc_backup
1204	FIN-WS-050	2026-02-17T11:01:01.351Z	8813	outlook.exe	SYN_SENT	UDP	10.10.3.150	389	64.67.20.60	443	cjohnson
1205	FIN-WS-050	2026-02-11T20:44:48.799Z	42564	msedge.exe	SYN_SENT	TCP	10.10.3.150	636	29.7.211.28	8080	svc_sql
1206	FIN-WS-050	2026-02-14T00:17:40.370Z	57113	RuntimeBroker.exe	TIME_WAIT	TCP	10.10.3.150	389	133.140.227.170	88	admin
1207	FIN-WS-050	2026-02-14T21:21:45.737Z	16622	MsMpEng.exe	LISTEN	TCP	10.10.3.150	139	0.0.0.0	0	jsmith
1208	FIN-WS-050	2026-02-12T04:15:54.070Z	50500	teams.exe	ESTABLISHED	TCP	10.10.3.150	53	75.104.211.29	445	jsmith
1209	FIN-WS-050	2026-02-13T03:24:35.543Z	31580	dwm.exe	ESTABLISHED	TCP	10.10.3.150	3389	10.10.1.136	88	cjohnson
1210	FIN-WS-050	2026-02-13T03:57:10.899Z	43241	outlook.exe	ESTABLISHED	UDP	10.10.3.150	5985	10.10.1.148	443	hbrown
1211	FIN-WS-050	2026-02-20T12:21:46.571Z	320	SearchHost.exe	ESTABLISHED	TCP	10.10.3.150	135	73.129.125.194	389	bwilson
1212	FIN-WS-050	2026-02-16T10:32:53.120Z	41312	taskhostw.exe	SYN_SENT	TCP	10.10.3.150	80	10.10.2.140	445	fthompson
1213	FIN-WS-050	2026-02-14T01:13:12.588Z	49837	services.exe	SYN_SENT	TCP	10.10.3.150	443	10.10.3.132	53	cjohnson
1214	SLS-WS-051	2026-02-15T21:44:42.642Z	48505	lsass.exe	SYN_SENT	TCP	10.10.1.151	443	145.70.118.106	88	agarcia
1215	SLS-WS-051	2026-02-14T14:17:04.363Z	18477	System	CLOSE_WAIT	UDP	10.10.1.151	636	10.10.3.105	1790	admin
1216	SLS-WS-051	2026-02-16T16:56:36.632Z	6228	csrss.exe	LISTEN	TCP	10.10.1.151	135	0.0.0.0	0	svc_sql
1217	SLS-WS-051	2026-02-18T14:55:50.057Z	58261	services.exe	SYN_SENT	UDP	10.10.1.151	8080	10.10.2.101	3389	emartinez
1218	SLS-WS-051	2026-02-20T13:10:34.410Z	37567	dwm.exe	SYN_SENT	UDP	10.10.1.151	80	110.178.182.193	443	jsmith
1219	SLS-WS-051	2026-02-10T19:18:03.751Z	11856	code.exe	LISTEN	UDP	10.10.1.151	636	0.0.0.0	0	cjohnson
1220	SLS-WS-051	2026-02-17T05:24:55.143Z	14886	code.exe	LISTEN	TCP	10.10.1.151	80	0.0.0.0	0	idavis
1221	SLS-WS-051	2026-02-14T19:57:20.272Z	45183	msedge.exe	LISTEN	TCP	10.10.1.151	389	0.0.0.0	0	agarcia
1222	SLS-WS-051	2026-02-12T12:56:46.657Z	10175	teams.exe	CLOSE_WAIT	TCP	10.10.1.151	445	96.17.89.176	8080	fthompson
1223	SLS-WS-051	2026-02-11T23:20:57.441Z	39046	powershell.exe	LISTEN	TCP	10.10.1.151	8080	0.0.0.0	0	hbrown
1224	SLS-WS-051	2026-02-12T09:04:02.684Z	19468	code.exe	CLOSE_WAIT	TCP	10.10.1.151	88	215.227.142.81	80	fthompson
1225	SLS-WS-051	2026-02-14T10:39:06.346Z	42675	csrss.exe	ESTABLISHED	TCP	10.10.1.151	52931	178.64.27.59	389	idavis
1226	SLS-WS-051	2026-02-16T02:04:09.574Z	22324	outlook.exe	ESTABLISHED	TCP	10.10.1.151	53	60.64.123.233	636	hbrown
1227	SLS-WS-051	2026-02-17T14:41:37.967Z	5957	cmd.exe	TIME_WAIT	TCP	10.10.1.151	445	12.218.251.218	3389	hbrown
1228	SLS-WS-051	2026-02-18T07:22:11.500Z	51221	csrss.exe	ESTABLISHED	TCP	10.10.1.151	636	10.10.1.136	80	jsmith
1229	SLS-WS-051	2026-02-14T21:44:41.152Z	58708	OneDrive.exe	ESTABLISHED	TCP	10.10.1.151	3389	10.10.2.125	443	hbrown
1230	SLS-WS-051	2026-02-13T01:12:03.659Z	5673	explorer.exe	SYN_SENT	TCP	10.10.1.151	3389	10.10.3.165	445	hbrown
1231	SLS-WS-051	2026-02-15T05:13:06.948Z	33336	services.exe	SYN_SENT	TCP	10.10.1.151	139	126.39.77.45	88	fthompson
1232	SLS-WS-051	2026-02-17T20:58:29.304Z	18127	explorer.exe	SYN_SENT	TCP	10.10.1.151	389	10.10.1.13	53	hbrown
1233	SLS-WS-051	2026-02-14T03:33:09.577Z	53942	SearchHost.exe	SYN_SENT	TCP	10.10.1.151	5985	10.10.1.142	80	bwilson
1234	SLS-WS-051	2026-02-16T03:33:56.136Z	40607	SearchHost.exe	ESTABLISHED	TCP	10.10.1.151	389	10.10.2.131	40483	emartinez
1235	SLS-WS-051	2026-02-12T23:12:13.606Z	34740	svchost.exe	SYN_SENT	TCP	10.10.1.151	445	17.31.137.206	88	agarcia
1236	SLS-WS-051	2026-02-15T20:04:49.170Z	4305	dwm.exe	ESTABLISHED	TCP	10.10.1.151	389	46.242.255.226	3389	fthompson
1237	SLS-WS-051	2026-02-11T23:38:53.578Z	16006	outlook.exe	ESTABLISHED	UDP	10.10.1.151	88	10.10.3.174	445	fthompson
1238	SLS-WS-051	2026-02-13T08:54:22.788Z	64470	outlook.exe	TIME_WAIT	TCP	10.10.1.151	135	27.158.128.22	88	admin
1239	SLS-WS-051	2026-02-20T07:48:16.583Z	59831	RuntimeBroker.exe	TIME_WAIT	TCP	10.10.1.151	445	104.117.188.88	3389	svc_backup
1240	SLS-WS-051	2026-02-17T22:41:42.065Z	24241	chrome.exe	CLOSE_WAIT	TCP	10.10.1.151	5985	203.143.148.132	3389	cjohnson
1241	SLS-WS-051	2026-02-17T11:42:24.710Z	3869	dwm.exe	SYN_SENT	UDP	10.10.1.151	3389	10.10.3.108	445	svc_web
1242	SLS-WS-051	2026-02-18T23:07:53.019Z	16989	code.exe	LISTEN	UDP	10.10.1.151	135	0.0.0.0	0	idavis
1243	ENG-WS-052	2026-02-17T20:18:46.552Z	51701	msedge.exe	CLOSE_WAIT	UDP	10.10.2.152	53785	10.10.2.10	389	agarcia
1244	ENG-WS-052	2026-02-17T09:41:44.667Z	32381	services.exe	LISTEN	UDP	10.10.2.152	389	0.0.0.0	0	cjohnson
1245	ENG-WS-052	2026-02-20T15:51:19.760Z	6346	spoolsv.exe	TIME_WAIT	UDP	10.10.2.152	5985	10.10.3.111	53	gwhite
1246	ENG-WS-052	2026-02-11T12:00:13.163Z	8482	lsass.exe	SYN_SENT	TCP	10.10.2.152	80	48.106.13.208	88	svc_web
1247	ENG-WS-052	2026-02-16T23:12:30.091Z	32694	svchost.exe	LISTEN	TCP	10.10.2.152	8080	0.0.0.0	0	dlee
1248	ENG-WS-052	2026-02-11T03:03:46.747Z	39663	services.exe	ESTABLISHED	TCP	10.10.2.152	88	10.10.1.12	80	agarcia
1249	ENG-WS-052	2026-02-16T10:38:21.375Z	49679	dwm.exe	SYN_SENT	TCP	10.10.2.152	53	10.10.3.168	80	fthompson
1250	ENG-WS-052	2026-02-12T20:02:08.147Z	18123	teams.exe	LISTEN	TCP	10.10.2.152	443	0.0.0.0	0	emartinez
1251	ENG-WS-052	2026-02-18T23:23:44.766Z	41419	chrome.exe	ESTABLISHED	TCP	10.10.2.152	636	10.10.1.169	80	jsmith
1252	ENG-WS-052	2026-02-14T20:50:34.124Z	51921	taskhostw.exe	LISTEN	TCP	10.10.2.152	5985	0.0.0.0	0	svc_backup
1253	ENG-WS-052	2026-02-14T02:19:49.890Z	26172	OneDrive.exe	ESTABLISHED	TCP	10.10.2.152	5985	200.9.21.242	3389	idavis
1254	ENG-WS-052	2026-02-14T00:56:55.805Z	53668	svchost.exe	CLOSE_WAIT	UDP	10.10.2.152	443	83.108.51.244	53	fthompson
1255	ENG-WS-052	2026-02-20T13:58:47.889Z	54586	teams.exe	CLOSE_WAIT	TCP	10.10.2.152	8080	161.248.217.196	3389	dlee
1256	ENG-WS-052	2026-02-18T00:09:52.306Z	34742	explorer.exe	ESTABLISHED	UDP	10.10.2.152	53	2.229.99.88	636	bwilson
1257	ENG-WS-052	2026-02-11T09:37:07.265Z	24385	code.exe	LISTEN	TCP	10.10.2.152	80	0.0.0.0	0	gwhite
1258	ENG-WS-052	2026-02-17T18:39:47.492Z	29794	svchost.exe	SYN_SENT	TCP	10.10.2.152	88	149.33.148.74	80	dlee
1259	ENG-WS-052	2026-02-13T09:53:12.764Z	35179	teams.exe	CLOSE_WAIT	TCP	10.10.2.152	62938	10.10.3.171	636	svc_sql
1260	ENG-WS-052	2026-02-18T14:04:28.699Z	56253	SearchHost.exe	SYN_SENT	UDP	10.10.2.152	3389	10.10.3.165	38345	cjohnson
1261	ENG-WS-052	2026-02-17T14:55:09.828Z	64982	code.exe	ESTABLISHED	UDP	10.10.2.152	139	200.72.220.104	27750	hbrown
1262	ENG-WS-052	2026-02-15T17:59:54.401Z	14543	SearchHost.exe	ESTABLISHED	TCP	10.10.2.152	80	10.10.2.128	3389	emartinez
1263	ENG-WS-052	2026-02-19T13:49:14.447Z	7820	services.exe	TIME_WAIT	UDP	10.10.2.152	389	10.10.2.101	88	bwilson
1264	ENG-WS-052	2026-02-11T07:22:27.654Z	36185	smss.exe	SYN_SENT	TCP	10.10.2.152	80	141.75.207.152	445	fthompson
1265	ENG-WS-052	2026-02-13T14:25:25.214Z	22175	RuntimeBroker.exe	CLOSE_WAIT	TCP	10.10.2.152	80	144.246.218.26	636	svc_sql
1266	ENG-WS-052	2026-02-15T07:36:15.594Z	14762	code.exe	TIME_WAIT	TCP	10.10.2.152	135	151.159.139.161	8080	jsmith
1267	ENG-WS-052	2026-02-17T07:04:43.542Z	53466	spotify.exe	SYN_SENT	TCP	10.10.2.152	5985	17.28.59.214	443	idavis
1268	ENG-WS-052	2026-02-10T21:34:51.181Z	26824	svchost.exe	ESTABLISHED	TCP	10.10.2.152	53	15.142.41.76	53	svc_sql
1269	ENG-WS-052	2026-02-13T03:31:49.356Z	58801	spoolsv.exe	SYN_SENT	UDP	10.10.2.152	389	106.73.25.187	445	gwhite
1270	ENG-WS-052	2026-02-16T13:04:40.808Z	22680	services.exe	TIME_WAIT	TCP	10.10.2.152	80	10.10.2.152	8080	jsmith
1271	LEG-WS-053	2026-02-12T09:36:35.324Z	29844	winlogon.exe	CLOSE_WAIT	TCP	10.10.3.153	445	10.10.1.151	3389	cjohnson
1272	LEG-WS-053	2026-02-12T11:13:45.338Z	59024	outlook.exe	TIME_WAIT	TCP	10.10.3.153	135	89.205.55.120	80	bwilson
1273	LEG-WS-053	2026-02-15T11:56:13.275Z	37680	chrome.exe	SYN_SENT	UDP	10.10.3.153	5985	10.10.1.166	389	emartinez
1274	LEG-WS-053	2026-02-16T00:17:49.914Z	20225	code.exe	LISTEN	TCP	10.10.3.153	389	0.0.0.0	0	dlee
1275	LEG-WS-053	2026-02-13T07:11:24.561Z	3566	teams.exe	SYN_SENT	TCP	10.10.3.153	445	222.202.150.131	445	cjohnson
1276	LEG-WS-053	2026-02-12T02:34:46.373Z	12332	MsMpEng.exe	TIME_WAIT	TCP	10.10.3.153	8080	10.10.1.160	636	agarcia
1277	LEG-WS-053	2026-02-13T21:02:03.798Z	54478	teams.exe	ESTABLISHED	TCP	10.10.3.153	443	161.99.133.133	636	gwhite
1278	LEG-WS-053	2026-02-14T14:06:22.650Z	22282	MsMpEng.exe	SYN_SENT	TCP	10.10.3.153	56815	110.118.124.225	53	cjohnson
1279	LEG-WS-053	2026-02-12T18:59:14.926Z	26647	csrss.exe	ESTABLISHED	TCP	10.10.3.153	5985	10.10.3.108	389	hbrown
1280	LEG-WS-053	2026-02-13T17:58:21.542Z	10534	outlook.exe	ESTABLISHED	TCP	10.10.3.153	5985	139.73.43.169	53	agarcia
1281	LEG-WS-053	2026-02-15T18:42:33.711Z	50568	MsMpEng.exe	TIME_WAIT	TCP	10.10.3.153	53	115.53.135.104	443	bwilson
1282	LEG-WS-053	2026-02-18T04:44:26.713Z	62679	smss.exe	LISTEN	TCP	10.10.3.153	8080	0.0.0.0	0	jsmith
1283	LEG-WS-053	2026-02-19T04:43:05.213Z	52422	System	TIME_WAIT	UDP	10.10.3.153	88	156.147.8.244	80	jsmith
1284	MKT-WS-054	2026-02-15T16:03:05.071Z	41355	System	CLOSE_WAIT	TCP	10.10.1.154	53	10.10.1.11	56476	agarcia
1285	MKT-WS-054	2026-02-14T12:24:47.997Z	25691	notepad.exe	TIME_WAIT	TCP	10.10.1.154	64155	193.18.225.24	636	gwhite
1286	MKT-WS-054	2026-02-14T07:06:43.465Z	5211	MsMpEng.exe	LISTEN	TCP	10.10.1.154	139	0.0.0.0	0	idavis
1287	MKT-WS-054	2026-02-13T16:01:44.650Z	37901	spoolsv.exe	CLOSE_WAIT	TCP	10.10.1.154	5985	139.76.223.130	8080	cjohnson
1288	MKT-WS-054	2026-02-17T05:53:33.101Z	56971	explorer.exe	SYN_SENT	TCP	10.10.1.154	5985	10.10.2.107	80	emartinez
1289	MKT-WS-054	2026-02-12T03:58:36.487Z	49020	SearchHost.exe	CLOSE_WAIT	TCP	10.10.1.154	389	117.19.15.173	636	emartinez
1290	MKT-WS-054	2026-02-16T22:29:14.116Z	8822	cmd.exe	TIME_WAIT	UDP	10.10.1.154	8080	10.10.2.146	3389	admin
1291	MKT-WS-054	2026-02-12T06:39:01.612Z	50005	smss.exe	TIME_WAIT	TCP	10.10.1.154	135	10.10.2.122	53	emartinez
1292	MKT-WS-054	2026-02-20T10:09:25.194Z	11362	winlogon.exe	LISTEN	TCP	10.10.1.154	445	0.0.0.0	0	fthompson
1293	MKT-WS-054	2026-02-12T15:53:18.290Z	61676	powershell.exe	LISTEN	TCP	10.10.1.154	443	0.0.0.0	0	hbrown
1294	MKT-WS-054	2026-02-13T16:06:37.274Z	32066	OneDrive.exe	CLOSE_WAIT	TCP	10.10.1.154	80	10.10.3.150	2048	svc_sql
1295	MKT-WS-054	2026-02-16T21:01:54.975Z	7962	cmd.exe	LISTEN	TCP	10.10.1.154	139	0.0.0.0	0	admin
1296	MKT-WS-054	2026-02-13T03:17:00.404Z	2570	smss.exe	ESTABLISHED	TCP	10.10.1.154	88	10.10.2.167	3389	agarcia
1297	MKT-WS-054	2026-02-17T22:13:59.224Z	24093	code.exe	CLOSE_WAIT	TCP	10.10.1.154	3389	76.232.55.84	3389	idavis
1298	MKT-WS-054	2026-02-13T02:26:18.981Z	55583	lsass.exe	CLOSE_WAIT	TCP	10.10.1.154	135	205.218.229.218	2076	bwilson
1299	MKT-WS-054	2026-02-15T18:55:48.898Z	36897	spoolsv.exe	ESTABLISHED	TCP	10.10.1.154	80	199.181.90.117	46642	jsmith
1300	MKT-WS-054	2026-02-16T03:21:05.929Z	59927	outlook.exe	CLOSE_WAIT	TCP	10.10.1.154	3389	34.120.178.103	53	svc_sql
1301	MKT-WS-054	2026-02-17T16:31:31.485Z	33537	lsass.exe	ESTABLISHED	TCP	10.10.1.154	62767	194.230.226.72	389	emartinez
1302	MKT-WS-054	2026-02-11T16:13:27.157Z	62883	MsMpEng.exe	TIME_WAIT	TCP	10.10.1.154	636	10.10.3.141	636	idavis
1303	MKT-WS-054	2026-02-16T10:34:58.194Z	57667	chrome.exe	CLOSE_WAIT	TCP	10.10.1.154	445	10.10.3.120	3389	cjohnson
1304	MKT-WS-054	2026-02-11T01:18:38.318Z	465	powershell.exe	LISTEN	TCP	10.10.1.154	3389	0.0.0.0	0	emartinez
1305	MKT-WS-054	2026-02-15T19:11:52.704Z	25204	explorer.exe	SYN_SENT	UDP	10.10.1.154	53	10.10.1.139	636	fthompson
1306	EXEC-WS-055	2026-02-18T13:12:24.881Z	47244	OneDrive.exe	LISTEN	TCP	10.10.2.155	389	0.0.0.0	0	dlee
1307	EXEC-WS-055	2026-02-18T17:20:46.285Z	11429	outlook.exe	ESTABLISHED	UDP	10.10.2.155	53	190.85.188.74	3389	svc_backup
1308	EXEC-WS-055	2026-02-12T10:02:42.984Z	9485	msedge.exe	LISTEN	UDP	10.10.2.155	445	0.0.0.0	0	svc_web
1309	EXEC-WS-055	2026-02-12T00:02:15.717Z	47125	spoolsv.exe	TIME_WAIT	TCP	10.10.2.155	80	10.10.3.132	389	hbrown
1310	EXEC-WS-055	2026-02-13T16:12:43.975Z	49044	svchost.exe	SYN_SENT	UDP	10.10.2.155	5985	10.10.1.124	389	emartinez
1311	EXEC-WS-055	2026-02-14T07:36:11.504Z	43201	cmd.exe	CLOSE_WAIT	UDP	10.10.2.155	445	221.16.166.37	389	hbrown
1312	EXEC-WS-055	2026-02-12T09:34:49.070Z	51690	msedge.exe	CLOSE_WAIT	TCP	10.10.2.155	636	10.10.1.109	3389	svc_backup
1313	EXEC-WS-055	2026-02-19T12:23:22.839Z	62709	smss.exe	SYN_SENT	UDP	10.10.2.155	3389	47.88.79.148	88	agarcia
1314	EXEC-WS-055	2026-02-17T15:37:03.225Z	16124	taskhostw.exe	SYN_SENT	TCP	10.10.2.155	135	10.10.2.122	53	svc_sql
1315	EXEC-WS-055	2026-02-14T16:28:07.855Z	32153	System	LISTEN	TCP	10.10.2.155	139	0.0.0.0	0	svc_backup
1316	EXEC-WS-055	2026-02-12T21:47:01.773Z	1381	winlogon.exe	LISTEN	UDP	10.10.2.155	139	0.0.0.0	0	idavis
1317	EXEC-WS-055	2026-02-12T00:31:20.614Z	21799	cmd.exe	SYN_SENT	TCP	10.10.2.155	445	115.224.1.48	443	cjohnson
1318	EXEC-WS-055	2026-02-20T04:27:03.860Z	34109	services.exe	CLOSE_WAIT	TCP	10.10.2.155	636	29.109.251.182	636	cjohnson
1319	EXEC-WS-055	2026-02-15T10:14:10.886Z	53238	svchost.exe	ESTABLISHED	UDP	10.10.2.155	5985	187.27.96.45	636	admin
1320	EXEC-WS-055	2026-02-16T23:21:24.419Z	25943	dwm.exe	SYN_SENT	TCP	10.10.2.155	3389	10.10.1.166	3389	jsmith
1321	EXEC-WS-055	2026-02-12T19:04:18.605Z	25518	explorer.exe	LISTEN	TCP	10.10.2.155	139	0.0.0.0	0	admin
1322	EXEC-WS-055	2026-02-17T00:43:40.502Z	11075	smss.exe	SYN_SENT	TCP	10.10.2.155	8080	18.177.83.245	8080	svc_sql
1323	EXEC-WS-055	2026-02-18T21:48:44.253Z	59846	smss.exe	TIME_WAIT	TCP	10.10.2.155	139	51.244.141.168	4739	jsmith
1324	EXEC-WS-055	2026-02-11T12:53:23.634Z	10415	winlogon.exe	ESTABLISHED	UDP	10.10.2.155	443	156.58.74.102	8080	agarcia
1325	EXEC-WS-055	2026-02-14T07:38:43.850Z	6948	OneDrive.exe	CLOSE_WAIT	TCP	10.10.2.155	64440	170.71.27.30	443	bwilson
1326	EXEC-WS-055	2026-02-18T02:41:35.782Z	14130	explorer.exe	ESTABLISHED	TCP	10.10.2.155	8080	35.175.224.239	61676	jsmith
1327	EXEC-WS-055	2026-02-12T04:02:03.448Z	6004	code.exe	CLOSE_WAIT	TCP	10.10.2.155	135	138.6.91.117	445	dlee
1328	EXEC-WS-055	2026-02-14T05:53:39.243Z	1221	System	CLOSE_WAIT	TCP	10.10.2.155	3389	221.4.167.252	445	svc_web
1329	EXEC-WS-055	2026-02-15T12:08:22.255Z	1219	code.exe	TIME_WAIT	TCP	10.10.2.155	61620	10.10.2.173	9425	svc_sql
1330	EXEC-WS-055	2026-02-12T13:00:11.349Z	1872	csrss.exe	ESTABLISHED	UDP	10.10.2.155	135	10.10.3.147	8080	dlee
1331	EXEC-WS-055	2026-02-15T11:42:51.380Z	4052	outlook.exe	ESTABLISHED	UDP	10.10.2.155	80	10.10.1.121	636	bwilson
1332	EXEC-WS-055	2026-02-15T20:45:42.480Z	62041	explorer.exe	CLOSE_WAIT	TCP	10.10.2.155	5985	221.11.211.59	445	agarcia
1333	EXEC-WS-055	2026-02-17T17:34:58.549Z	18807	cmd.exe	LISTEN	TCP	10.10.2.155	636	0.0.0.0	0	jsmith
1334	EXEC-WS-055	2026-02-16T11:31:50.608Z	51111	msedge.exe	ESTABLISHED	TCP	10.10.2.155	5985	128.231.188.109	389	emartinez
1335	EXEC-WS-055	2026-02-19T02:23:40.863Z	9069	lsass.exe	LISTEN	UDP	10.10.2.155	8080	0.0.0.0	0	svc_web
1336	EXEC-WS-055	2026-02-10T14:39:40.871Z	59833	csrss.exe	CLOSE_WAIT	TCP	10.10.2.155	80	143.30.60.205	3389	svc_backup
1337	EXEC-WS-055	2026-02-13T05:02:32.992Z	61914	System	LISTEN	TCP	10.10.2.155	5985	0.0.0.0	0	agarcia
1338	EXEC-WS-055	2026-02-20T11:33:01.050Z	46257	lsass.exe	SYN_SENT	TCP	10.10.2.155	53	25.187.229.28	443	jsmith
1339	EXEC-WS-055	2026-02-18T19:14:57.438Z	18956	code.exe	SYN_SENT	TCP	10.10.2.155	8080	10.10.1.130	80	emartinez
1340	EXEC-WS-055	2026-02-14T20:46:26.484Z	22967	cmd.exe	CLOSE_WAIT	TCP	10.10.2.155	55689	103.89.58.181	2166	hbrown
1341	EXEC-WS-055	2026-02-13T19:26:26.436Z	44077	MsMpEng.exe	TIME_WAIT	TCP	10.10.2.155	636	110.129.254.8	80	svc_sql
1342	EXEC-WS-055	2026-02-11T03:44:00.071Z	38448	code.exe	SYN_SENT	TCP	10.10.2.155	54282	10.10.1.151	8080	agarcia
1343	EXEC-WS-055	2026-02-16T20:42:33.880Z	1734	outlook.exe	CLOSE_WAIT	TCP	10.10.2.155	80	10.10.2.113	53	svc_sql
1344	EXEC-WS-055	2026-02-15T23:58:10.188Z	61800	msedge.exe	ESTABLISHED	TCP	10.10.2.155	389	10.10.1.103	3389	hbrown
1345	IT-WS-056	2026-02-16T16:12:44.294Z	2583	smss.exe	TIME_WAIT	TCP	10.10.3.156	3389	64.33.162.201	17769	svc_sql
1346	IT-WS-056	2026-02-14T21:45:15.611Z	7982	spoolsv.exe	SYN_SENT	TCP	10.10.3.156	62095	156.252.114.166	31383	svc_web
1347	IT-WS-056	2026-02-15T09:15:19.254Z	37522	services.exe	SYN_SENT	TCP	10.10.3.156	5985	10.10.1.163	80	dlee
1348	IT-WS-056	2026-02-12T01:17:08.456Z	28332	teams.exe	TIME_WAIT	TCP	10.10.3.156	135	189.148.58.157	445	svc_web
1349	IT-WS-056	2026-02-10T20:44:42.715Z	30295	MsMpEng.exe	LISTEN	TCP	10.10.3.156	8080	0.0.0.0	0	svc_web
1350	IT-WS-056	2026-02-20T03:55:42.740Z	52475	teams.exe	ESTABLISHED	TCP	10.10.3.156	80	10.10.2.11	636	agarcia
1351	IT-WS-056	2026-02-10T15:38:02.207Z	53862	MsMpEng.exe	SYN_SENT	TCP	10.10.3.156	445	10.10.1.103	636	svc_web
1352	IT-WS-056	2026-02-20T11:07:47.240Z	24597	System	CLOSE_WAIT	TCP	10.10.3.156	53	36.82.61.116	389	gwhite
1353	IT-WS-056	2026-02-15T23:01:25.481Z	27545	System	LISTEN	TCP	10.10.3.156	139	0.0.0.0	0	gwhite
1354	IT-WS-056	2026-02-20T01:32:13.803Z	33582	MsMpEng.exe	ESTABLISHED	UDP	10.10.3.156	5985	145.43.153.153	443	gwhite
1355	IT-WS-056	2026-02-13T02:47:01.019Z	38690	smss.exe	TIME_WAIT	UDP	10.10.3.156	53	10.10.1.151	80	emartinez
1356	IT-WS-056	2026-02-13T07:01:45.718Z	58673	msedge.exe	TIME_WAIT	TCP	10.10.3.156	443	91.218.22.127	389	svc_sql
1357	HR-WS-057	2026-02-19T23:33:24.386Z	46106	SearchHost.exe	TIME_WAIT	TCP	10.10.1.157	88	205.203.93.75	59008	admin
1358	HR-WS-057	2026-02-14T22:59:11.785Z	10123	services.exe	CLOSE_WAIT	TCP	10.10.1.157	636	10.10.2.158	443	hbrown
1359	HR-WS-057	2026-02-18T06:00:44.296Z	54201	SearchHost.exe	LISTEN	UDP	10.10.1.157	88	0.0.0.0	0	admin
1360	HR-WS-057	2026-02-19T12:05:00.848Z	9108	System	SYN_SENT	UDP	10.10.1.157	53	147.113.136.137	80	dlee
1361	HR-WS-057	2026-02-16T10:37:28.145Z	49690	outlook.exe	SYN_SENT	TCP	10.10.1.157	5985	6.32.45.77	443	svc_backup
1362	HR-WS-057	2026-02-13T21:25:56.114Z	64391	MsMpEng.exe	SYN_SENT	UDP	10.10.1.157	636	10.10.2.161	80	cjohnson
1363	HR-WS-057	2026-02-13T01:32:44.462Z	40488	cmd.exe	TIME_WAIT	TCP	10.10.1.157	5985	10.10.1.136	8080	agarcia
1364	HR-WS-057	2026-02-19T16:08:38.133Z	61137	spoolsv.exe	ESTABLISHED	UDP	10.10.1.157	139	10.10.1.109	389	svc_backup
1365	HR-WS-057	2026-02-15T23:15:37.638Z	59577	dwm.exe	LISTEN	TCP	10.10.1.157	53	0.0.0.0	0	svc_backup
1366	HR-WS-057	2026-02-19T01:56:01.168Z	40899	SearchHost.exe	CLOSE_WAIT	TCP	10.10.1.157	443	70.40.226.70	3389	bwilson
1367	HR-WS-057	2026-02-14T07:17:26.175Z	20570	spoolsv.exe	CLOSE_WAIT	TCP	10.10.1.157	88	10.10.3.10	636	svc_backup
1368	HR-WS-057	2026-02-17T09:52:50.740Z	3939	chrome.exe	TIME_WAIT	TCP	10.10.1.157	3389	206.25.56.32	48365	svc_web
1369	HR-WS-057	2026-02-12T16:46:02.304Z	39159	winlogon.exe	TIME_WAIT	UDP	10.10.1.157	636	12.179.58.19	80	hbrown
1370	HR-WS-057	2026-02-16T13:52:24.462Z	24937	System	CLOSE_WAIT	UDP	10.10.1.157	3389	10.10.1.166	53	gwhite
1371	HR-WS-057	2026-02-20T17:39:36.009Z	44822	svchost.exe	SYN_SENT	TCP	10.10.1.157	59019	10.10.2.107	88	svc_web
1372	HR-WS-057	2026-02-18T21:02:52.236Z	61139	System	SYN_SENT	TCP	10.10.1.157	8080	10.10.3.156	80	dlee
1373	HR-WS-057	2026-02-18T17:18:58.163Z	1993	RuntimeBroker.exe	CLOSE_WAIT	TCP	10.10.1.157	53	8.230.157.197	636	fthompson
1374	HR-WS-057	2026-02-16T22:09:21.609Z	39660	RuntimeBroker.exe	TIME_WAIT	TCP	10.10.1.157	61645	34.94.214.87	88	idavis
1375	HR-WS-057	2026-02-17T13:29:14.666Z	31160	explorer.exe	ESTABLISHED	TCP	10.10.1.157	445	10.10.1.124	389	dlee
1376	HR-WS-057	2026-02-18T19:49:16.959Z	16562	taskhostw.exe	SYN_SENT	TCP	10.10.1.157	80	27.40.90.72	636	hbrown
1377	HR-WS-057	2026-02-20T15:54:33.269Z	8478	spoolsv.exe	CLOSE_WAIT	TCP	10.10.1.157	49352	10.10.1.10	389	cjohnson
1378	HR-WS-057	2026-02-19T05:11:07.614Z	41950	teams.exe	SYN_SENT	TCP	10.10.1.157	8080	10.10.1.118	445	svc_sql
1379	FIN-WS-058	2026-02-13T22:25:47.307Z	38683	utorrent.exe	ESTABLISHED	UDP	10.10.2.158	135	10.10.3.162	88	svc_backup
1380	FIN-WS-058	2026-02-11T14:51:05.311Z	36635	System	ESTABLISHED	TCP	10.10.2.158	389	44.188.135.243	8080	svc_backup
1381	FIN-WS-058	2026-02-13T07:18:06.253Z	30719	dwm.exe	TIME_WAIT	TCP	10.10.2.158	61014	10.10.2.155	53	emartinez
1382	FIN-WS-058	2026-02-17T23:21:35.848Z	64540	code.exe	ESTABLISHED	TCP	10.10.2.158	135	10.10.1.169	45730	agarcia
1383	FIN-WS-058	2026-02-17T00:22:44.096Z	48744	SearchHost.exe	LISTEN	UDP	10.10.2.158	389	0.0.0.0	0	bwilson
1384	FIN-WS-058	2026-02-12T02:25:44.359Z	4869	svchost.exe	LISTEN	TCP	10.10.2.158	389	0.0.0.0	0	gwhite
1385	FIN-WS-058	2026-02-10T16:18:00.126Z	40003	svchost.exe	SYN_SENT	TCP	10.10.2.158	88	10.10.1.106	3389	svc_sql
1386	FIN-WS-058	2026-02-19T06:27:34.626Z	56672	taskhostw.exe	SYN_SENT	TCP	10.10.2.158	139	10.10.1.130	80	svc_backup
1387	FIN-WS-058	2026-02-12T23:31:32.344Z	60182	msedge.exe	SYN_SENT	TCP	10.10.2.158	8080	10.10.2.155	445	admin
1388	FIN-WS-058	2026-02-11T10:47:17.819Z	42160	cmd.exe	TIME_WAIT	TCP	10.10.2.158	53	54.185.33.122	636	admin
1389	FIN-WS-058	2026-02-16T05:58:28.684Z	27991	MsMpEng.exe	TIME_WAIT	UDP	10.10.2.158	445	10.10.1.169	53708	idavis
1390	FIN-WS-058	2026-02-12T23:26:53.804Z	15340	outlook.exe	SYN_SENT	TCP	10.10.2.158	3389	10.10.1.136	8080	jsmith
1391	FIN-WS-058	2026-02-12T00:41:00.632Z	15531	services.exe	SYN_SENT	TCP	10.10.2.158	445	69.67.104.213	389	cjohnson
1392	FIN-WS-058	2026-02-14T09:58:27.454Z	53637	msedge.exe	LISTEN	TCP	10.10.2.158	80	0.0.0.0	0	bwilson
1393	FIN-WS-058	2026-02-16T08:31:06.658Z	60663	smss.exe	LISTEN	UDP	10.10.2.158	636	0.0.0.0	0	cjohnson
1394	FIN-WS-058	2026-02-14T06:51:02.180Z	3069	msedge.exe	ESTABLISHED	TCP	10.10.2.158	445	10.10.1.109	88	jsmith
1395	FIN-WS-058	2026-02-14T07:55:44.306Z	6190	spoolsv.exe	SYN_SENT	TCP	10.10.2.158	636	10.10.3.111	53	dlee
1396	FIN-WS-058	2026-02-17T02:28:08.078Z	42118	utorrent.exe	LISTEN	TCP	10.10.2.158	3389	0.0.0.0	0	agarcia
1397	FIN-WS-058	2026-02-13T15:05:53.004Z	44420	explorer.exe	CLOSE_WAIT	TCP	10.10.2.158	62951	10.10.2.140	57801	svc_sql
1398	FIN-WS-058	2026-02-14T13:04:09.933Z	12052	svchost.exe	LISTEN	TCP	10.10.2.158	64128	0.0.0.0	0	jsmith
1399	FIN-WS-058	2026-02-14T17:31:13.620Z	6131	cmd.exe	TIME_WAIT	TCP	10.10.2.158	8080	10.10.1.106	88	agarcia
1400	FIN-WS-058	2026-02-15T23:24:48.459Z	6691	spoolsv.exe	CLOSE_WAIT	TCP	10.10.2.158	443	182.46.115.253	389	fthompson
1401	FIN-WS-058	2026-02-16T01:03:31.286Z	19380	smss.exe	TIME_WAIT	TCP	10.10.2.158	80	134.7.188.198	88	hbrown
1402	FIN-WS-058	2026-02-15T18:00:35.112Z	41733	System	SYN_SENT	TCP	10.10.2.158	445	10.10.1.130	636	idavis
1403	FIN-WS-058	2026-02-16T06:20:14.725Z	58872	dwm.exe	CLOSE_WAIT	TCP	10.10.2.158	3389	10.10.3.147	443	fthompson
1404	FIN-WS-058	2026-02-11T17:10:30.944Z	57848	services.exe	LISTEN	UDP	10.10.2.158	443	0.0.0.0	0	svc_backup
1405	FIN-WS-058	2026-02-20T03:11:10.657Z	51477	RuntimeBroker.exe	CLOSE_WAIT	TCP	10.10.2.158	5985	10.10.2.101	8080	gwhite
1406	FIN-WS-058	2026-02-16T14:31:50.861Z	51484	dwm.exe	TIME_WAIT	TCP	10.10.2.158	8080	10.10.1.118	88	agarcia
1407	FIN-WS-058	2026-02-16T14:47:22.686Z	31395	MsMpEng.exe	SYN_SENT	UDP	10.10.2.158	443	156.206.70.112	8080	emartinez
1408	FIN-WS-058	2026-02-13T22:39:10.300Z	19344	chrome.exe	CLOSE_WAIT	TCP	10.10.2.158	636	188.187.136.235	636	emartinez
1409	FIN-WS-058	2026-02-17T17:34:35.957Z	1283	explorer.exe	TIME_WAIT	TCP	10.10.2.158	80	10.10.3.147	80	svc_backup
1410	FIN-WS-058	2026-02-20T15:58:11.524Z	33071	spoolsv.exe	CLOSE_WAIT	UDP	10.10.2.158	5985	71.27.235.44	389	bwilson
1411	FIN-WS-058	2026-02-11T18:03:44.748Z	27604	services.exe	TIME_WAIT	TCP	10.10.2.158	80	10.10.2.134	443	agarcia
1412	FIN-WS-058	2026-02-16T16:36:16.569Z	55401	System	TIME_WAIT	TCP	10.10.2.158	443	10.10.1.115	80	gwhite
1413	FIN-WS-058	2026-02-11T18:02:27.851Z	2973	msedge.exe	ESTABLISHED	TCP	10.10.2.158	5985	21.22.185.59	54816	jsmith
1414	SLS-WS-059	2026-02-17T14:46:54.157Z	14976	lsass.exe	SYN_SENT	TCP	10.10.3.159	80	10.10.3.165	53	svc_sql
1415	SLS-WS-059	2026-02-18T07:29:51.996Z	27193	smss.exe	SYN_SENT	TCP	10.10.3.159	88	10.10.3.117	389	svc_web
1416	SLS-WS-059	2026-02-10T19:21:03.542Z	23155	services.exe	SYN_SENT	UDP	10.10.3.159	135	207.159.42.55	53	svc_sql
1417	SLS-WS-059	2026-02-18T06:59:06.796Z	54092	services.exe	CLOSE_WAIT	UDP	10.10.3.159	443	10.10.3.147	636	cjohnson
1418	SLS-WS-059	2026-02-16T00:59:18.320Z	64962	outlook.exe	CLOSE_WAIT	TCP	10.10.3.159	5985	10.10.2.155	13722	svc_backup
1419	SLS-WS-059	2026-02-14T13:28:22.973Z	9137	notepad.exe	SYN_SENT	TCP	10.10.3.159	53	10.10.1.130	445	hbrown
1420	SLS-WS-059	2026-02-14T03:03:19.871Z	26122	taskhostw.exe	ESTABLISHED	TCP	10.10.3.159	139	10.10.2.158	443	bwilson
1421	SLS-WS-059	2026-02-17T06:31:14.170Z	39427	teams.exe	ESTABLISHED	TCP	10.10.3.159	53	10.10.2.164	80	agarcia
1422	SLS-WS-059	2026-02-17T16:02:23.641Z	29275	msedge.exe	ESTABLISHED	TCP	10.10.3.159	64313	130.198.48.154	445	admin
1423	SLS-WS-059	2026-02-17T19:16:18.083Z	24410	MsMpEng.exe	LISTEN	UDP	10.10.3.159	5985	0.0.0.0	0	cjohnson
1424	SLS-WS-059	2026-02-10T10:38:38.108Z	56456	cmd.exe	ESTABLISHED	UDP	10.10.3.159	443	10.10.3.141	80	fthompson
1425	SLS-WS-059	2026-02-13T20:56:45.858Z	28808	OneDrive.exe	ESTABLISHED	TCP	10.10.3.159	443	10.10.1.145	29869	dlee
1426	SLS-WS-059	2026-02-17T17:04:27.290Z	38758	discord.exe	CLOSE_WAIT	TCP	10.10.3.159	636	49.66.237.153	53	admin
1427	SLS-WS-059	2026-02-20T13:38:30.454Z	18964	svchost.exe	LISTEN	TCP	10.10.3.159	80	0.0.0.0	0	admin
1428	SLS-WS-059	2026-02-15T14:37:14.056Z	45891	notepad.exe	ESTABLISHED	UDP	10.10.3.159	80	72.178.64.241	80	svc_sql
1429	SLS-WS-059	2026-02-19T19:19:32.308Z	45059	chrome.exe	SYN_SENT	TCP	10.10.3.159	135	10.10.2.170	3389	idavis
1430	SLS-WS-059	2026-02-14T11:26:45.116Z	28180	explorer.exe	TIME_WAIT	TCP	10.10.3.159	80	16.208.249.146	80	svc_web
1431	SLS-WS-059	2026-02-17T19:09:50.801Z	62779	chrome.exe	SYN_SENT	TCP	10.10.3.159	8080	10.10.3.165	8080	cjohnson
1432	SLS-WS-059	2026-02-13T19:32:36.850Z	627	smss.exe	TIME_WAIT	TCP	10.10.3.159	135	10.10.3.159	8080	cjohnson
1433	SLS-WS-059	2026-02-15T02:50:40.656Z	16796	RuntimeBroker.exe	ESTABLISHED	TCP	10.10.3.159	135	98.160.130.34	443	bwilson
1434	SLS-WS-059	2026-02-18T13:19:09.142Z	20266	spoolsv.exe	LISTEN	TCP	10.10.3.159	135	0.0.0.0	0	emartinez
1435	SLS-WS-059	2026-02-12T20:44:38.147Z	10026	chrome.exe	ESTABLISHED	TCP	10.10.3.159	389	10.10.2.101	445	agarcia
1436	SLS-WS-059	2026-02-16T03:07:15.195Z	64457	SearchHost.exe	CLOSE_WAIT	UDP	10.10.3.159	88	10.10.3.159	50453	hbrown
1437	SLS-WS-059	2026-02-18T00:14:11.982Z	50632	smss.exe	LISTEN	TCP	10.10.3.159	88	0.0.0.0	0	fthompson
1438	SLS-WS-059	2026-02-15T18:09:54.676Z	5194	SearchHost.exe	ESTABLISHED	UDP	10.10.3.159	5985	10.10.2.119	53	dlee
1439	SLS-WS-059	2026-02-10T09:31:47.280Z	12489	csrss.exe	ESTABLISHED	TCP	10.10.3.159	80	114.58.46.206	636	fthompson
1440	SLS-WS-059	2026-02-14T20:26:01.364Z	50746	teams.exe	ESTABLISHED	TCP	10.10.3.159	443	10.10.2.101	443	agarcia
1441	SLS-WS-059	2026-02-14T07:25:47.774Z	33966	code.exe	SYN_SENT	TCP	10.10.3.159	53	10.10.1.160	443	jsmith
1442	SLS-WS-059	2026-02-16T00:52:20.008Z	24704	taskhostw.exe	LISTEN	TCP	10.10.3.159	443	0.0.0.0	0	idavis
1443	SLS-WS-059	2026-02-20T16:51:26.037Z	9150	dwm.exe	SYN_SENT	TCP	10.10.3.159	54800	131.141.169.247	443	bwilson
1444	SLS-WS-059	2026-02-16T01:47:59.856Z	40407	winlogon.exe	LISTEN	TCP	10.10.3.159	445	0.0.0.0	0	dlee
1445	SLS-WS-059	2026-02-12T22:59:25.819Z	18281	spoolsv.exe	LISTEN	UDP	10.10.3.159	80	0.0.0.0	0	dlee
1446	SLS-WS-059	2026-02-14T17:21:54.163Z	62587	cmd.exe	LISTEN	UDP	10.10.3.159	443	0.0.0.0	0	emartinez
1447	SLS-WS-059	2026-02-16T20:49:32.500Z	954	OneDrive.exe	LISTEN	TCP	10.10.3.159	636	0.0.0.0	0	bwilson
1448	SLS-WS-059	2026-02-17T13:51:47.339Z	6865	code.exe	ESTABLISHED	TCP	10.10.3.159	135	10.10.1.157	8080	cjohnson
1449	SLS-WS-059	2026-02-13T22:06:30.913Z	52073	code.exe	ESTABLISHED	UDP	10.10.3.159	5985	86.24.208.65	80	idavis
1450	SLS-WS-059	2026-02-20T15:40:01.511Z	5975	csrss.exe	CLOSE_WAIT	TCP	10.10.3.159	5985	150.49.114.34	8080	fthompson
1451	ENG-WS-060	2026-02-18T21:17:40.165Z	4483	SearchHost.exe	SYN_SENT	TCP	10.10.1.160	88	10.10.2.104	636	idavis
1452	ENG-WS-060	2026-02-19T09:09:30.930Z	61630	teams.exe	LISTEN	TCP	10.10.1.160	51811	0.0.0.0	0	agarcia
1453	ENG-WS-060	2026-02-14T07:47:28.241Z	46003	svchost.exe	SYN_SENT	TCP	10.10.1.160	5985	10.10.1.151	80	fthompson
1454	ENG-WS-060	2026-02-14T22:14:37.743Z	28377	chrome.exe	SYN_SENT	TCP	10.10.1.160	3389	10.10.2.137	80	fthompson
1455	ENG-WS-060	2026-02-12T07:26:35.466Z	55576	MsMpEng.exe	TIME_WAIT	TCP	10.10.1.160	636	10.10.1.139	389	bwilson
1456	ENG-WS-060	2026-02-17T13:51:23.705Z	17568	lsass.exe	ESTABLISHED	TCP	10.10.1.160	445	10.10.1.118	636	admin
1457	ENG-WS-060	2026-02-17T21:05:19.399Z	59569	MsMpEng.exe	SYN_SENT	TCP	10.10.1.160	53	10.10.3.10	3389	svc_web
1458	ENG-WS-060	2026-02-20T04:48:31.230Z	63939	MsMpEng.exe	SYN_SENT	TCP	10.10.1.160	139	57.102.173.207	445	bwilson
1459	ENG-WS-060	2026-02-17T16:36:05.248Z	24075	MsMpEng.exe	ESTABLISHED	TCP	10.10.1.160	135	63.133.103.244	443	svc_web
1460	ENG-WS-060	2026-02-18T15:00:59.430Z	26404	winlogon.exe	CLOSE_WAIT	TCP	10.10.1.160	636	10.10.3.150	53	idavis
1461	ENG-WS-060	2026-02-18T10:13:48.672Z	25154	cmd.exe	TIME_WAIT	UDP	10.10.1.160	135	10.10.3.135	26364	svc_sql
1462	ENG-WS-060	2026-02-19T23:19:23.731Z	61497	code.exe	TIME_WAIT	UDP	10.10.1.160	445	88.146.189.6	53	idavis
1463	LEG-WS-061	2026-02-18T12:37:54.641Z	24427	taskhostw.exe	LISTEN	TCP	10.10.2.161	3389	0.0.0.0	0	idavis
1464	LEG-WS-061	2026-02-20T14:49:29.217Z	17512	notepad.exe	CLOSE_WAIT	UDP	10.10.2.161	135	10.10.2.131	51940	bwilson
1465	LEG-WS-061	2026-02-19T13:31:57.804Z	14091	notepad.exe	ESTABLISHED	TCP	10.10.2.161	135	10.10.1.115	53	svc_backup
1466	LEG-WS-061	2026-02-15T11:55:14.176Z	34888	csrss.exe	SYN_SENT	TCP	10.10.2.161	389	198.234.115.27	443	svc_web
1467	LEG-WS-061	2026-02-17T22:28:20.517Z	29370	teams.exe	LISTEN	TCP	10.10.2.161	3389	0.0.0.0	0	agarcia
1468	LEG-WS-061	2026-02-19T03:02:07.379Z	42730	System	TIME_WAIT	TCP	10.10.2.161	135	10.10.3.165	445	admin
1469	LEG-WS-061	2026-02-15T03:41:59.181Z	8754	msedge.exe	CLOSE_WAIT	UDP	10.10.2.161	389	209.12.210.204	389	idavis
1470	LEG-WS-061	2026-02-18T19:49:21.983Z	53424	MsMpEng.exe	TIME_WAIT	TCP	10.10.2.161	135	120.1.57.72	53	gwhite
1471	LEG-WS-061	2026-02-17T22:22:19.402Z	4406	chrome.exe	ESTABLISHED	TCP	10.10.2.161	389	10.10.3.120	8080	dlee
1472	LEG-WS-061	2026-02-16T15:03:13.786Z	14957	csrss.exe	LISTEN	TCP	10.10.2.161	80	0.0.0.0	0	idavis
1473	LEG-WS-061	2026-02-20T16:21:49.139Z	59635	msedge.exe	LISTEN	TCP	10.10.2.161	8080	0.0.0.0	0	jsmith
1474	LEG-WS-061	2026-02-18T12:01:23.728Z	22642	code.exe	CLOSE_WAIT	TCP	10.10.2.161	3389	182.78.200.46	389	bwilson
1475	LEG-WS-061	2026-02-16T14:50:50.770Z	11523	services.exe	TIME_WAIT	UDP	10.10.2.161	445	44.77.226.59	636	jsmith
1476	LEG-WS-061	2026-02-12T16:39:33.455Z	28072	winlogon.exe	LISTEN	TCP	10.10.2.161	445	0.0.0.0	0	agarcia
1477	LEG-WS-061	2026-02-18T12:58:40.977Z	8016	explorer.exe	CLOSE_WAIT	TCP	10.10.2.161	80	10.10.1.124	389	svc_sql
1478	LEG-WS-061	2026-02-10T11:32:23.520Z	8271	teams.exe	LISTEN	TCP	10.10.2.161	443	0.0.0.0	0	bwilson
1479	LEG-WS-061	2026-02-15T07:37:08.732Z	21354	RuntimeBroker.exe	SYN_SENT	UDP	10.10.2.161	636	10.10.2.134	88	gwhite
1480	LEG-WS-061	2026-02-20T13:37:04.454Z	9382	outlook.exe	LISTEN	UDP	10.10.2.161	636	0.0.0.0	0	bwilson
1481	LEG-WS-061	2026-02-14T13:15:24.637Z	24808	dwm.exe	ESTABLISHED	TCP	10.10.2.161	139	40.177.78.184	53	bwilson
1482	LEG-WS-061	2026-02-11T00:40:02.188Z	42551	services.exe	TIME_WAIT	UDP	10.10.2.161	389	10.10.1.13	3389	agarcia
1483	LEG-WS-061	2026-02-20T05:26:40.106Z	50704	cmd.exe	CLOSE_WAIT	TCP	10.10.2.161	443	212.120.3.125	636	agarcia
1484	LEG-WS-061	2026-02-18T09:41:31.519Z	11537	taskhostw.exe	LISTEN	TCP	10.10.2.161	135	0.0.0.0	0	fthompson
1485	LEG-WS-061	2026-02-18T13:41:18.742Z	3051	dwm.exe	TIME_WAIT	TCP	10.10.2.161	88	10.10.1.109	445	emartinez
1486	LEG-WS-061	2026-02-13T03:54:17.267Z	37427	smss.exe	ESTABLISHED	UDP	10.10.2.161	3389	10.10.2.110	88	admin
1487	LEG-WS-061	2026-02-18T18:48:03.126Z	1290	SearchHost.exe	SYN_SENT	UDP	10.10.2.161	8080	141.254.183.207	80	dlee
1488	LEG-WS-061	2026-02-18T03:58:27.988Z	28280	teams.exe	ESTABLISHED	TCP	10.10.2.161	443	35.45.76.79	3389	idavis
1489	LEG-WS-061	2026-02-12T17:49:51.783Z	52390	System	SYN_SENT	TCP	10.10.2.161	80	10.10.2.122	389	idavis
1490	MKT-WS-062	2026-02-19T17:01:38.301Z	45862	spoolsv.exe	CLOSE_WAIT	TCP	10.10.3.162	3389	179.243.215.91	62674	svc_backup
1491	MKT-WS-062	2026-02-11T15:10:20.293Z	3093	msedge.exe	SYN_SENT	TCP	10.10.3.162	3389	10.10.1.166	3389	bwilson
1492	MKT-WS-062	2026-02-15T07:59:04.146Z	46693	chrome.exe	TIME_WAIT	TCP	10.10.3.162	8080	10.10.2.173	445	jsmith
1493	MKT-WS-062	2026-02-19T22:50:21.518Z	58087	lsass.exe	SYN_SENT	TCP	10.10.3.162	139	10.10.1.139	389	agarcia
1494	MKT-WS-062	2026-02-13T14:41:01.252Z	14556	code.exe	CLOSE_WAIT	TCP	10.10.3.162	636	10.10.1.103	53	gwhite
1495	MKT-WS-062	2026-02-17T13:59:10.893Z	14697	smss.exe	CLOSE_WAIT	TCP	10.10.3.162	88	10.10.1.115	10025	emartinez
1496	MKT-WS-062	2026-02-15T03:40:05.287Z	44298	OneDrive.exe	TIME_WAIT	TCP	10.10.3.162	636	3.91.188.90	8080	cjohnson
1497	MKT-WS-062	2026-02-12T22:00:12.309Z	63825	powershell.exe	ESTABLISHED	TCP	10.10.3.162	53	10.10.2.137	88	emartinez
1498	MKT-WS-062	2026-02-11T02:14:54.539Z	58865	notepad.exe	LISTEN	TCP	10.10.3.162	57586	0.0.0.0	0	dlee
1499	MKT-WS-062	2026-02-16T07:43:47.924Z	17771	SearchHost.exe	SYN_SENT	TCP	10.10.3.162	57166	10.10.1.175	3389	fthompson
1500	MKT-WS-062	2026-02-20T15:04:54.454Z	43944	dwm.exe	SYN_SENT	UDP	10.10.3.162	135	10.10.1.11	3389	svc_web
1501	MKT-WS-062	2026-02-17T12:49:04.752Z	7646	dwm.exe	SYN_SENT	TCP	10.10.3.162	135	10.10.3.174	80	svc_web
1502	MKT-WS-062	2026-02-18T16:05:17.621Z	8744	explorer.exe	CLOSE_WAIT	TCP	10.10.3.162	53	10.10.3.153	389	svc_web
1503	MKT-WS-062	2026-02-13T05:32:03.899Z	28466	explorer.exe	LISTEN	TCP	10.10.3.162	139	0.0.0.0	0	svc_web
1504	MKT-WS-062	2026-02-10T21:39:06.912Z	1894	chrome.exe	LISTEN	TCP	10.10.3.162	88	0.0.0.0	0	bwilson
1505	MKT-WS-062	2026-02-14T09:54:05.692Z	21777	RuntimeBroker.exe	ESTABLISHED	UDP	10.10.3.162	135	10.10.1.151	35677	idavis
1506	MKT-WS-062	2026-02-17T13:56:26.661Z	26088	MsMpEng.exe	CLOSE_WAIT	TCP	10.10.3.162	63250	10.10.3.147	445	fthompson
1507	MKT-WS-062	2026-02-19T13:15:16.206Z	19539	chrome.exe	LISTEN	TCP	10.10.3.162	80	0.0.0.0	0	bwilson
1508	MKT-WS-062	2026-02-12T08:43:32.522Z	30083	lsass.exe	LISTEN	UDP	10.10.3.162	135	0.0.0.0	0	dlee
1509	EXEC-WS-063	2026-02-18T13:52:02.756Z	64887	code.exe	ESTABLISHED	TCP	10.10.1.163	135	170.230.212.130	636	admin
1510	EXEC-WS-063	2026-02-18T04:18:56.915Z	62966	OneDrive.exe	LISTEN	TCP	10.10.1.163	5985	0.0.0.0	0	jsmith
1511	EXEC-WS-063	2026-02-10T22:36:40.815Z	15067	spoolsv.exe	ESTABLISHED	TCP	10.10.1.163	139	10.10.3.105	53	hbrown
1512	EXEC-WS-063	2026-02-17T22:27:29.443Z	49507	RuntimeBroker.exe	ESTABLISHED	UDP	10.10.1.163	53	157.143.216.101	53	svc_sql
1513	EXEC-WS-063	2026-02-18T14:18:07.070Z	710	code.exe	LISTEN	TCP	10.10.1.163	88	0.0.0.0	0	bwilson
1514	EXEC-WS-063	2026-02-15T05:06:41.424Z	4538	taskhostw.exe	CLOSE_WAIT	TCP	10.10.1.163	135	53.5.117.6	88	svc_backup
1515	EXEC-WS-063	2026-02-12T22:16:51.114Z	49146	MsMpEng.exe	CLOSE_WAIT	TCP	10.10.1.163	80	10.10.3.162	53	jsmith
1516	EXEC-WS-063	2026-02-12T14:11:46.339Z	47072	spoolsv.exe	TIME_WAIT	UDP	10.10.1.163	443	45.118.132.209	80	svc_sql
1517	EXEC-WS-063	2026-02-13T09:10:06.671Z	57842	outlook.exe	SYN_SENT	TCP	10.10.1.163	443	205.8.46.117	8080	emartinez
1518	EXEC-WS-063	2026-02-14T15:28:47.974Z	40882	discord.exe	CLOSE_WAIT	TCP	10.10.1.163	636	10.10.1.13	445	svc_sql
1519	EXEC-WS-063	2026-02-19T10:03:08.861Z	4300	teams.exe	TIME_WAIT	TCP	10.10.1.163	3389	164.116.225.40	636	bwilson
1520	EXEC-WS-063	2026-02-15T09:22:01.007Z	41204	services.exe	ESTABLISHED	TCP	10.10.1.163	5985	101.144.130.235	3389	cjohnson
1521	EXEC-WS-063	2026-02-11T05:29:17.409Z	3189	chrome.exe	LISTEN	TCP	10.10.1.163	443	0.0.0.0	0	agarcia
1522	EXEC-WS-063	2026-02-19T07:44:18.476Z	31867	dwm.exe	ESTABLISHED	UDP	10.10.1.163	636	10.10.2.110	80	dlee
1523	EXEC-WS-063	2026-02-11T09:53:32.104Z	63776	spoolsv.exe	LISTEN	TCP	10.10.1.163	3389	0.0.0.0	0	idavis
1524	EXEC-WS-063	2026-02-20T04:20:11.802Z	49149	OneDrive.exe	TIME_WAIT	UDP	10.10.1.163	636	196.56.252.27	389	dlee
1525	EXEC-WS-063	2026-02-17T09:46:54.483Z	44998	System	CLOSE_WAIT	UDP	10.10.1.163	80	10.10.1.115	88	svc_sql
1526	EXEC-WS-063	2026-02-19T11:18:08.180Z	54725	spoolsv.exe	CLOSE_WAIT	UDP	10.10.1.163	636	10.10.3.138	389	jsmith
1527	EXEC-WS-063	2026-02-16T17:27:44.700Z	24841	dwm.exe	CLOSE_WAIT	TCP	10.10.1.163	80	70.237.10.206	53	svc_sql
1528	IT-WS-064	2026-02-16T22:39:54.753Z	13810	chrome.exe	SYN_SENT	TCP	10.10.2.164	55360	175.229.254.66	88	bwilson
1529	IT-WS-064	2026-02-16T05:48:34.854Z	1249	services.exe	TIME_WAIT	TCP	10.10.2.164	139	48.231.254.122	53	fthompson
1530	IT-WS-064	2026-02-13T07:27:33.778Z	4775	SearchHost.exe	TIME_WAIT	TCP	10.10.2.164	445	208.68.14.168	10913	emartinez
1531	IT-WS-064	2026-02-13T15:26:11.501Z	49740	lsass.exe	LISTEN	TCP	10.10.2.164	88	0.0.0.0	0	admin
1532	IT-WS-064	2026-02-17T07:05:37.558Z	53339	SearchHost.exe	LISTEN	TCP	10.10.2.164	8080	0.0.0.0	0	bwilson
1533	IT-WS-064	2026-02-13T20:54:38.192Z	12848	teams.exe	SYN_SENT	TCP	10.10.2.164	80	111.193.38.86	636	cjohnson
1534	IT-WS-064	2026-02-11T07:35:25.093Z	54418	powershell.exe	SYN_SENT	TCP	10.10.2.164	139	147.114.80.17	8080	bwilson
1535	IT-WS-064	2026-02-19T15:24:26.548Z	6914	RuntimeBroker.exe	TIME_WAIT	TCP	10.10.2.164	636	10.10.1.154	445	svc_sql
1536	IT-WS-064	2026-02-12T04:24:55.227Z	60921	dwm.exe	TIME_WAIT	TCP	10.10.2.164	5985	80.156.68.215	88	hbrown
1537	IT-WS-064	2026-02-18T03:14:00.897Z	50895	winlogon.exe	CLOSE_WAIT	TCP	10.10.2.164	135	10.10.3.150	88	svc_backup
1538	IT-WS-064	2026-02-12T05:04:23.339Z	40110	lsass.exe	LISTEN	UDP	10.10.2.164	389	0.0.0.0	0	bwilson
1539	IT-WS-064	2026-02-12T05:45:19.558Z	20130	lsass.exe	LISTEN	UDP	10.10.2.164	135	0.0.0.0	0	svc_backup
1540	IT-WS-064	2026-02-12T14:14:22.347Z	63839	notepad.exe	LISTEN	TCP	10.10.2.164	53	0.0.0.0	0	agarcia
1541	IT-WS-064	2026-02-11T08:08:01.568Z	10643	winlogon.exe	SYN_SENT	TCP	10.10.2.164	443	10.10.3.153	636	hbrown
1542	IT-WS-064	2026-02-13T22:57:31.972Z	12991	msedge.exe	SYN_SENT	TCP	10.10.2.164	135	111.216.209.6	80	svc_backup
1543	IT-WS-064	2026-02-19T10:14:31.357Z	352	taskhostw.exe	LISTEN	TCP	10.10.2.164	135	0.0.0.0	0	emartinez
1544	IT-WS-064	2026-02-19T16:47:10.018Z	36133	taskhostw.exe	LISTEN	TCP	10.10.2.164	53	0.0.0.0	0	svc_backup
1545	IT-WS-064	2026-02-12T01:00:12.689Z	30075	RuntimeBroker.exe	SYN_SENT	UDP	10.10.2.164	62846	10.10.2.158	88	svc_sql
1546	IT-WS-064	2026-02-16T16:21:12.408Z	25355	powershell.exe	LISTEN	UDP	10.10.2.164	53	0.0.0.0	0	admin
1547	IT-WS-064	2026-02-11T04:49:31.607Z	22134	code.exe	LISTEN	TCP	10.10.2.164	636	0.0.0.0	0	admin
1548	IT-WS-064	2026-02-10T08:12:18.432Z	4974	spoolsv.exe	SYN_SENT	TCP	10.10.2.164	5985	10.10.3.171	443	cjohnson
1549	IT-WS-064	2026-02-16T16:11:36.418Z	6597	dwm.exe	LISTEN	UDP	10.10.2.164	636	0.0.0.0	0	admin
1550	IT-WS-064	2026-02-18T00:17:35.809Z	47831	dwm.exe	LISTEN	TCP	10.10.2.164	8080	0.0.0.0	0	svc_web
1551	IT-WS-064	2026-02-18T22:22:49.601Z	11047	winlogon.exe	TIME_WAIT	TCP	10.10.2.164	8080	10.10.1.106	53	jsmith
1552	IT-WS-064	2026-02-11T13:11:40.995Z	60276	System	SYN_SENT	TCP	10.10.2.164	135	10.10.1.11	88	hbrown
1553	IT-WS-064	2026-02-20T15:40:08.177Z	53964	RuntimeBroker.exe	SYN_SENT	TCP	10.10.2.164	53	178.153.179.170	80	svc_backup
1554	IT-WS-064	2026-02-12T11:02:06.015Z	40518	SearchHost.exe	CLOSE_WAIT	TCP	10.10.2.164	53	99.87.181.148	389	hbrown
1555	IT-WS-064	2026-02-16T08:49:58.418Z	39934	teams.exe	TIME_WAIT	TCP	10.10.2.164	88	10.10.1.157	8080	jsmith
1556	IT-WS-064	2026-02-16T04:36:32.278Z	36357	spoolsv.exe	CLOSE_WAIT	UDP	10.10.2.164	5985	10.10.1.157	80	svc_sql
1557	IT-WS-064	2026-02-18T16:29:44.393Z	55607	notepad.exe	CLOSE_WAIT	TCP	10.10.2.164	389	159.145.207.71	53631	dlee
1558	IT-WS-064	2026-02-20T03:55:51.502Z	22602	csrss.exe	LISTEN	TCP	10.10.2.164	53	0.0.0.0	0	cjohnson
1559	IT-WS-064	2026-02-12T01:39:58.761Z	42043	smss.exe	SYN_SENT	TCP	10.10.2.164	5985	75.14.135.75	52950	hbrown
1560	IT-WS-064	2026-02-13T08:28:10.186Z	39541	svchost.exe	TIME_WAIT	UDP	10.10.2.164	80	42.204.71.247	88	jsmith
1561	IT-WS-064	2026-02-15T18:01:15.112Z	50574	System	LISTEN	TCP	10.10.2.164	3389	0.0.0.0	0	cjohnson
1562	IT-WS-064	2026-02-18T00:13:24.010Z	17264	epicgameslauncher.exe	SYN_SENT	TCP	10.10.2.164	389	206.21.168.124	41581	svc_web
1563	IT-WS-064	2026-02-12T13:12:48.658Z	44642	msedge.exe	SYN_SENT	TCP	10.10.2.164	135	4.76.228.202	80	emartinez
1564	IT-WS-064	2026-02-18T07:48:48.706Z	12655	MsMpEng.exe	CLOSE_WAIT	TCP	10.10.2.164	389	53.8.183.100	445	svc_web
1565	IT-WS-064	2026-02-19T11:32:48.184Z	52767	System	TIME_WAIT	TCP	10.10.2.164	88	10.10.2.116	88	jsmith
1566	IT-WS-064	2026-02-11T14:43:07.719Z	15233	spoolsv.exe	LISTEN	TCP	10.10.2.164	636	0.0.0.0	0	dlee
1567	IT-WS-064	2026-02-12T01:12:31.219Z	61703	notepad.exe	TIME_WAIT	UDP	10.10.2.164	5985	10.10.2.155	53	jsmith
1568	HR-WS-065	2026-02-12T06:03:33.121Z	56140	outlook.exe	ESTABLISHED	TCP	10.10.3.165	88	10.10.3.141	8080	bwilson
1569	HR-WS-065	2026-02-15T08:06:00.284Z	25580	svchost.exe	TIME_WAIT	UDP	10.10.3.165	389	10.10.2.104	445	dlee
1570	HR-WS-065	2026-02-15T10:16:29.021Z	5463	MsMpEng.exe	TIME_WAIT	TCP	10.10.3.165	88	112.167.87.25	80	bwilson
1571	HR-WS-065	2026-02-18T23:13:29.524Z	59047	RuntimeBroker.exe	LISTEN	TCP	10.10.3.165	636	0.0.0.0	0	idavis
1572	HR-WS-065	2026-02-12T06:12:31.387Z	6090	utorrent.exe	LISTEN	TCP	10.10.3.165	389	0.0.0.0	0	svc_web
1573	HR-WS-065	2026-02-16T02:55:16.547Z	46785	OneDrive.exe	CLOSE_WAIT	UDP	10.10.3.165	389	119.253.80.109	53	admin
1574	HR-WS-065	2026-02-17T10:19:01.064Z	22793	taskhostw.exe	LISTEN	UDP	10.10.3.165	445	0.0.0.0	0	bwilson
1575	HR-WS-065	2026-02-13T19:59:49.420Z	3522	taskhostw.exe	ESTABLISHED	TCP	10.10.3.165	53	10.10.3.111	80	hbrown
1576	HR-WS-065	2026-02-16T23:39:25.716Z	23471	explorer.exe	TIME_WAIT	TCP	10.10.3.165	139	115.232.157.69	53	svc_sql
1577	HR-WS-065	2026-02-15T02:51:56.098Z	17136	csrss.exe	SYN_SENT	TCP	10.10.3.165	52826	10.10.1.175	47051	dlee
1578	HR-WS-065	2026-02-15T10:04:57.351Z	35116	services.exe	LISTEN	TCP	10.10.3.165	135	0.0.0.0	0	jsmith
1579	HR-WS-065	2026-02-15T16:14:41.868Z	33263	msedge.exe	SYN_SENT	UDP	10.10.3.165	443	202.35.102.62	80	hbrown
1580	HR-WS-065	2026-02-17T11:04:04.088Z	20642	System	ESTABLISHED	TCP	10.10.3.165	8080	10.10.2.137	53	bwilson
1581	HR-WS-065	2026-02-16T05:07:52.553Z	7137	OneDrive.exe	TIME_WAIT	TCP	10.10.3.165	389	55.167.115.124	636	emartinez
1582	HR-WS-065	2026-02-15T12:08:27.621Z	48283	winlogon.exe	LISTEN	TCP	10.10.3.165	5985	0.0.0.0	0	gwhite
1583	HR-WS-065	2026-02-20T01:02:08.193Z	64779	SearchHost.exe	LISTEN	TCP	10.10.3.165	88	0.0.0.0	0	dlee
1584	HR-WS-065	2026-02-16T21:16:34.486Z	28281	SearchHost.exe	LISTEN	TCP	10.10.3.165	5985	0.0.0.0	0	dlee
1585	HR-WS-065	2026-02-16T08:21:35.498Z	34918	taskhostw.exe	ESTABLISHED	TCP	10.10.3.165	636	10.10.2.10	3389	cjohnson
1586	HR-WS-065	2026-02-14T09:27:56.198Z	48342	MsMpEng.exe	TIME_WAIT	UDP	10.10.3.165	636	22.209.148.232	445	hbrown
1587	HR-WS-065	2026-02-13T23:07:56.530Z	34172	notepad.exe	SYN_SENT	TCP	10.10.3.165	88	10.10.1.148	22558	bwilson
1588	HR-WS-065	2026-02-13T10:48:35.755Z	35518	msedge.exe	SYN_SENT	TCP	10.10.3.165	445	19.225.236.188	8080	cjohnson
1589	HR-WS-065	2026-02-18T14:42:04.530Z	13607	csrss.exe	ESTABLISHED	TCP	10.10.3.165	3389	193.153.134.237	445	fthompson
1590	HR-WS-065	2026-02-19T04:13:49.152Z	7576	teams.exe	SYN_SENT	TCP	10.10.3.165	443	10.10.3.168	88	svc_sql
1591	HR-WS-065	2026-02-14T23:19:25.401Z	37920	powershell.exe	SYN_SENT	TCP	10.10.3.165	139	87.5.11.189	443	jsmith
1592	HR-WS-065	2026-02-15T22:36:54.938Z	1454	outlook.exe	SYN_SENT	TCP	10.10.3.165	88	10.10.2.11	636	svc_sql
1593	HR-WS-065	2026-02-11T03:57:18.200Z	16393	svchost.exe	TIME_WAIT	UDP	10.10.3.165	389	102.10.62.32	52618	svc_web
1594	HR-WS-065	2026-02-10T22:46:03.727Z	34907	smss.exe	CLOSE_WAIT	TCP	10.10.3.165	389	10.10.3.132	3793	emartinez
1595	HR-WS-065	2026-02-11T01:25:10.917Z	22595	msedge.exe	SYN_SENT	TCP	10.10.3.165	139	10.10.2.128	88	svc_backup
1596	HR-WS-065	2026-02-14T12:14:08.908Z	16178	dwm.exe	CLOSE_WAIT	UDP	10.10.3.165	61574	10.10.2.128	34424	cjohnson
1597	HR-WS-065	2026-02-11T05:29:13.396Z	22009	services.exe	ESTABLISHED	TCP	10.10.3.165	53	10.10.1.13	3389	svc_web
1598	HR-WS-065	2026-02-12T06:29:03.653Z	22822	SearchHost.exe	LISTEN	TCP	10.10.3.165	88	0.0.0.0	0	svc_sql
1599	HR-WS-065	2026-02-12T05:25:39.691Z	1946	msedge.exe	CLOSE_WAIT	TCP	10.10.3.165	5985	174.21.68.215	389	svc_web
1600	FIN-WS-066	2026-02-13T00:06:22.273Z	53642	lsass.exe	CLOSE_WAIT	TCP	10.10.1.166	3389	10.10.3.111	445	svc_backup
1601	FIN-WS-066	2026-02-10T18:42:48.328Z	24564	chrome.exe	ESTABLISHED	TCP	10.10.1.166	3389	10.10.1.13	445	agarcia
1602	FIN-WS-066	2026-02-14T17:33:18.610Z	61286	MsMpEng.exe	SYN_SENT	TCP	10.10.1.166	445	10.10.2.119	3389	svc_web
1603	FIN-WS-066	2026-02-16T07:46:59.433Z	3042	msedge.exe	TIME_WAIT	TCP	10.10.1.166	8080	30.117.162.204	88	fthompson
1604	FIN-WS-066	2026-02-11T11:58:17.246Z	46428	cmd.exe	SYN_SENT	TCP	10.10.1.166	445	10.10.3.135	53	cjohnson
1605	FIN-WS-066	2026-02-18T17:30:39.688Z	63005	taskhostw.exe	SYN_SENT	TCP	10.10.1.166	8080	32.232.136.228	88	hbrown
1606	FIN-WS-066	2026-02-14T22:47:48.718Z	49082	msedge.exe	CLOSE_WAIT	TCP	10.10.1.166	135	79.106.33.130	389	emartinez
1607	FIN-WS-066	2026-02-18T06:14:42.843Z	29558	powershell.exe	LISTEN	UDP	10.10.1.166	139	0.0.0.0	0	jsmith
1608	FIN-WS-066	2026-02-19T20:17:09.882Z	61840	msedge.exe	LISTEN	TCP	10.10.1.166	88	0.0.0.0	0	emartinez
1609	FIN-WS-066	2026-02-19T22:57:26.729Z	4544	spoolsv.exe	CLOSE_WAIT	TCP	10.10.1.166	53	33.202.68.90	80	admin
1610	FIN-WS-066	2026-02-11T00:34:16.278Z	3809	powershell.exe	ESTABLISHED	TCP	10.10.1.166	636	168.182.230.119	445	svc_backup
1611	FIN-WS-066	2026-02-15T08:40:49.066Z	40478	OneDrive.exe	SYN_SENT	TCP	10.10.1.166	88	56.81.138.96	4923	dlee
1612	FIN-WS-066	2026-02-20T06:01:46.211Z	1945	spoolsv.exe	LISTEN	UDP	10.10.1.166	53	0.0.0.0	0	idavis
1613	FIN-WS-066	2026-02-19T02:29:43.714Z	52099	System	CLOSE_WAIT	UDP	10.10.1.166	139	10.10.3.123	389	bwilson
1614	FIN-WS-066	2026-02-14T19:54:19.041Z	45158	svchost.exe	TIME_WAIT	UDP	10.10.1.166	5985	10.10.2.125	636	fthompson
1615	FIN-WS-066	2026-02-13T19:48:19.052Z	52032	winlogon.exe	ESTABLISHED	UDP	10.10.1.166	8080	178.86.28.240	3107	cjohnson
1616	FIN-WS-066	2026-02-14T14:19:03.143Z	35732	lsass.exe	LISTEN	TCP	10.10.1.166	135	0.0.0.0	0	idavis
1617	FIN-WS-066	2026-02-20T09:25:27.164Z	1803	taskhostw.exe	CLOSE_WAIT	TCP	10.10.1.166	80	10.10.1.118	63631	svc_sql
1618	SLS-WS-067	2026-02-16T05:35:34.464Z	48809	csrss.exe	ESTABLISHED	UDP	10.10.2.167	389	116.87.82.24	88	hbrown
1619	SLS-WS-067	2026-02-20T17:41:54.251Z	7371	chrome.exe	CLOSE_WAIT	TCP	10.10.2.167	445	10.10.1.136	443	idavis
1620	SLS-WS-067	2026-02-13T09:17:02.185Z	51645	chrome.exe	CLOSE_WAIT	TCP	10.10.2.167	139	79.125.208.14	445	bwilson
1621	SLS-WS-067	2026-02-11T19:28:44.466Z	48109	outlook.exe	ESTABLISHED	TCP	10.10.2.167	445	10.10.1.10	443	admin
1622	SLS-WS-067	2026-02-14T17:09:59.633Z	41093	smss.exe	TIME_WAIT	TCP	10.10.2.167	63769	216.242.92.97	8080	emartinez
1623	SLS-WS-067	2026-02-17T02:53:11.109Z	39597	powershell.exe	LISTEN	TCP	10.10.2.167	443	0.0.0.0	0	svc_web
1624	SLS-WS-067	2026-02-11T10:34:30.570Z	43839	System	ESTABLISHED	UDP	10.10.2.167	3389	212.183.179.29	443	agarcia
1625	SLS-WS-067	2026-02-16T03:00:02.337Z	51949	System	SYN_SENT	TCP	10.10.2.167	54746	10.10.1.11	389	hbrown
1626	SLS-WS-067	2026-02-19T18:57:49.141Z	32881	outlook.exe	LISTEN	TCP	10.10.2.167	80	0.0.0.0	0	hbrown
1627	SLS-WS-067	2026-02-19T03:35:33.698Z	8660	csrss.exe	TIME_WAIT	TCP	10.10.2.167	8080	10.10.3.105	20132	agarcia
1628	SLS-WS-067	2026-02-13T03:15:13.965Z	28742	explorer.exe	ESTABLISHED	TCP	10.10.2.167	5985	156.65.101.202	636	dlee
1629	SLS-WS-067	2026-02-12T02:02:35.284Z	11011	explorer.exe	SYN_SENT	UDP	10.10.2.167	135	147.210.163.71	80	cjohnson
1630	SLS-WS-067	2026-02-10T08:22:21.083Z	13740	winlogon.exe	LISTEN	TCP	10.10.2.167	3389	0.0.0.0	0	svc_sql
1631	SLS-WS-067	2026-02-10T08:50:22.819Z	34250	explorer.exe	ESTABLISHED	TCP	10.10.2.167	135	204.149.206.117	80	idavis
1632	SLS-WS-067	2026-02-18T21:05:59.981Z	9200	smss.exe	ESTABLISHED	TCP	10.10.2.167	443	10.10.1.112	8080	admin
1633	SLS-WS-067	2026-02-20T15:14:52.777Z	62421	csrss.exe	SYN_SENT	TCP	10.10.2.167	636	10.10.2.170	636	agarcia
1634	SLS-WS-067	2026-02-12T22:15:37.055Z	7881	System	CLOSE_WAIT	TCP	10.10.2.167	5985	10.10.2.10	3389	agarcia
1635	SLS-WS-067	2026-02-13T18:25:53.479Z	9374	powershell.exe	CLOSE_WAIT	TCP	10.10.2.167	53	10.10.1.11	445	svc_sql
1636	SLS-WS-067	2026-02-13T00:56:36.812Z	55665	notepad.exe	LISTEN	TCP	10.10.2.167	389	0.0.0.0	0	admin
1637	SLS-WS-067	2026-02-14T15:13:05.649Z	2064	RuntimeBroker.exe	LISTEN	TCP	10.10.2.167	139	0.0.0.0	0	gwhite
1638	SLS-WS-067	2026-02-11T07:52:21.477Z	36179	smss.exe	SYN_SENT	TCP	10.10.2.167	139	149.139.207.111	80	bwilson
1639	SLS-WS-067	2026-02-20T10:02:11.383Z	9883	spoolsv.exe	ESTABLISHED	UDP	10.10.2.167	636	10.10.3.129	445	fthompson
1640	SLS-WS-067	2026-02-14T14:53:47.249Z	10570	dwm.exe	TIME_WAIT	TCP	10.10.2.167	8080	10.10.1.130	3389	cjohnson
1641	SLS-WS-067	2026-02-17T11:39:16.773Z	61590	csrss.exe	ESTABLISHED	TCP	10.10.2.167	443	41.48.71.142	443	agarcia
1642	SLS-WS-067	2026-02-12T03:13:23.737Z	3729	spoolsv.exe	TIME_WAIT	TCP	10.10.2.167	139	171.203.58.227	31475	dlee
1643	SLS-WS-067	2026-02-12T10:07:33.450Z	59349	svchost.exe	ESTABLISHED	TCP	10.10.2.167	53	63.73.234.23	8080	bwilson
1644	SLS-WS-067	2026-02-17T23:51:25.683Z	28622	spoolsv.exe	CLOSE_WAIT	TCP	10.10.2.167	443	10.10.1.169	389	svc_sql
1645	SLS-WS-067	2026-02-14T07:42:17.417Z	63433	cmd.exe	TIME_WAIT	TCP	10.10.2.167	139	10.10.1.157	445	jsmith
1646	SLS-WS-067	2026-02-16T03:35:00.841Z	27746	chrome.exe	TIME_WAIT	UDP	10.10.2.167	3389	10.10.3.120	53	agarcia
1647	SLS-WS-067	2026-02-20T14:42:59.069Z	33483	lsass.exe	SYN_SENT	UDP	10.10.2.167	3389	194.51.64.212	389	fthompson
1648	SLS-WS-067	2026-02-19T05:04:31.112Z	29066	OneDrive.exe	CLOSE_WAIT	TCP	10.10.2.167	445	10.10.2.110	88	hbrown
1649	SLS-WS-067	2026-02-10T17:07:29.485Z	63995	cmd.exe	SYN_SENT	TCP	10.10.2.167	8080	213.41.81.149	80	agarcia
1650	SLS-WS-067	2026-02-13T12:48:34.705Z	27577	notepad.exe	SYN_SENT	TCP	10.10.2.167	139	38.64.120.81	80	svc_backup
1651	SLS-WS-067	2026-02-13T20:04:10.579Z	41859	System	LISTEN	TCP	10.10.2.167	443	0.0.0.0	0	fthompson
1652	SLS-WS-067	2026-02-17T00:42:16.282Z	5863	services.exe	TIME_WAIT	UDP	10.10.2.167	139	10.10.2.152	445	svc_sql
1653	SLS-WS-067	2026-02-12T18:22:31.554Z	14868	MsMpEng.exe	SYN_SENT	TCP	10.10.2.167	53	141.41.75.119	88	emartinez
1654	SLS-WS-067	2026-02-19T08:32:34.209Z	1298	notepad.exe	SYN_SENT	TCP	10.10.2.167	636	10.10.1.103	445	emartinez
1655	ENG-WS-068	2026-02-13T13:45:01.876Z	43125	explorer.exe	LISTEN	TCP	10.10.3.168	3389	0.0.0.0	0	svc_backup
1656	ENG-WS-068	2026-02-14T12:21:43.720Z	20478	teams.exe	LISTEN	TCP	10.10.3.168	636	0.0.0.0	0	idavis
1657	ENG-WS-068	2026-02-20T17:52:32.263Z	13314	dwm.exe	CLOSE_WAIT	TCP	10.10.3.168	8080	37.51.197.14	80	agarcia
1658	ENG-WS-068	2026-02-18T19:19:22.247Z	15874	System	SYN_SENT	TCP	10.10.3.168	443	23.141.16.241	389	agarcia
1659	ENG-WS-068	2026-02-18T06:08:23.656Z	61697	winlogon.exe	ESTABLISHED	TCP	10.10.3.168	64442	10.10.3.114	8080	emartinez
1660	ENG-WS-068	2026-02-19T22:18:58.049Z	41301	services.exe	ESTABLISHED	TCP	10.10.3.168	443	10.10.3.168	53	agarcia
1661	ENG-WS-068	2026-02-15T05:55:06.469Z	51178	csrss.exe	TIME_WAIT	UDP	10.10.3.168	53	10.10.2.122	80	gwhite
1662	ENG-WS-068	2026-02-11T10:26:45.259Z	1901	explorer.exe	LISTEN	TCP	10.10.3.168	5985	0.0.0.0	0	hbrown
1663	ENG-WS-068	2026-02-15T09:17:28.193Z	54986	msedge.exe	SYN_SENT	TCP	10.10.3.168	445	52.196.128.124	3389	cjohnson
1664	ENG-WS-068	2026-02-15T04:22:49.878Z	63688	epicgameslauncher.exe	CLOSE_WAIT	TCP	10.10.3.168	80	10.10.3.171	53	hbrown
1665	ENG-WS-068	2026-02-14T09:40:32.764Z	2593	teams.exe	TIME_WAIT	TCP	10.10.3.168	55514	197.69.109.225	443	svc_sql
1666	ENG-WS-068	2026-02-11T00:34:23.898Z	40715	services.exe	CLOSE_WAIT	TCP	10.10.3.168	8080	10.10.3.150	53	svc_backup
1667	ENG-WS-068	2026-02-10T09:06:10.638Z	60900	smss.exe	TIME_WAIT	UDP	10.10.3.168	3389	15.59.208.230	443	jsmith
1668	ENG-WS-068	2026-02-13T08:08:22.557Z	56151	RuntimeBroker.exe	ESTABLISHED	TCP	10.10.3.168	57607	41.144.108.180	8080	dlee
1669	LEG-WS-069	2026-02-14T04:04:30.862Z	4770	svchost.exe	ESTABLISHED	TCP	10.10.1.169	636	109.38.7.81	443	fthompson
1670	LEG-WS-069	2026-02-16T01:29:15.553Z	6225	RuntimeBroker.exe	SYN_SENT	TCP	10.10.1.169	5985	10.10.1.12	445	jsmith
1671	LEG-WS-069	2026-02-13T16:00:51.568Z	16273	msedge.exe	TIME_WAIT	TCP	10.10.1.169	139	10.10.1.175	443	hbrown
1672	LEG-WS-069	2026-02-19T18:54:06.635Z	21695	msedge.exe	LISTEN	TCP	10.10.1.169	8080	0.0.0.0	0	svc_sql
1673	LEG-WS-069	2026-02-18T06:36:24.507Z	53321	powershell.exe	SYN_SENT	TCP	10.10.1.169	53	10.10.3.120	80	idavis
1674	LEG-WS-069	2026-02-15T05:08:27.436Z	2503	powershell.exe	CLOSE_WAIT	TCP	10.10.1.169	139	10.10.1.148	389	emartinez
1675	LEG-WS-069	2026-02-15T20:53:22.776Z	42122	msedge.exe	ESTABLISHED	TCP	10.10.1.169	80	10.10.3.150	389	svc_sql
1676	LEG-WS-069	2026-02-13T10:07:36.165Z	4877	MsMpEng.exe	ESTABLISHED	UDP	10.10.1.169	8080	82.157.116.136	389	svc_web
1677	LEG-WS-069	2026-02-19T15:22:32.651Z	12285	taskhostw.exe	CLOSE_WAIT	UDP	10.10.1.169	80	10.10.1.151	8080	hbrown
1678	LEG-WS-069	2026-02-20T04:23:55.859Z	56439	notepad.exe	ESTABLISHED	TCP	10.10.1.169	5985	65.69.5.115	389	svc_web
1679	LEG-WS-069	2026-02-14T16:23:32.061Z	9167	taskhostw.exe	LISTEN	TCP	10.10.1.169	8080	0.0.0.0	0	emartinez
1680	LEG-WS-069	2026-02-12T04:05:28.415Z	45576	code.exe	SYN_SENT	TCP	10.10.1.169	88	10.10.2.134	3389	emartinez
1681	LEG-WS-069	2026-02-20T07:14:53.785Z	21554	powershell.exe	TIME_WAIT	TCP	10.10.1.169	60517	10.10.3.174	443	idavis
1682	LEG-WS-069	2026-02-19T12:27:32.293Z	32855	lsass.exe	TIME_WAIT	TCP	10.10.1.169	135	10.10.3.108	33804	svc_backup
1683	LEG-WS-069	2026-02-17T16:06:57.333Z	1910	cmd.exe	LISTEN	TCP	10.10.1.169	88	0.0.0.0	0	cjohnson
1684	LEG-WS-069	2026-02-12T03:51:37.077Z	42270	dwm.exe	TIME_WAIT	UDP	10.10.1.169	8080	54.206.66.117	8080	bwilson
1685	LEG-WS-069	2026-02-10T22:18:05.550Z	19402	msedge.exe	ESTABLISHED	TCP	10.10.1.169	389	126.218.61.248	8080	bwilson
1686	LEG-WS-069	2026-02-19T00:53:11.129Z	62710	System	TIME_WAIT	TCP	10.10.1.169	139	215.206.119.9	443	idavis
1687	LEG-WS-069	2026-02-18T02:43:09.624Z	63085	smss.exe	LISTEN	UDP	10.10.1.169	445	0.0.0.0	0	idavis
1688	LEG-WS-069	2026-02-10T14:19:05.956Z	4782	svchost.exe	ESTABLISHED	TCP	10.10.1.169	389	102.137.253.213	636	gwhite
1689	LEG-WS-069	2026-02-14T23:24:43.400Z	51121	svchost.exe	LISTEN	TCP	10.10.1.169	135	0.0.0.0	0	jsmith
1690	LEG-WS-069	2026-02-14T06:11:01.606Z	14771	MsMpEng.exe	ESTABLISHED	TCP	10.10.1.169	88	51.106.94.106	445	svc_web
1691	LEG-WS-069	2026-02-14T22:54:01.135Z	64252	csrss.exe	LISTEN	TCP	10.10.1.169	58282	0.0.0.0	0	cjohnson
1692	LEG-WS-069	2026-02-18T20:24:21.293Z	36147	svchost.exe	SYN_SENT	UDP	10.10.1.169	636	10.10.1.121	41379	emartinez
1693	LEG-WS-069	2026-02-15T03:30:15.599Z	10454	services.exe	LISTEN	TCP	10.10.1.169	445	0.0.0.0	0	svc_sql
1694	LEG-WS-069	2026-02-18T23:36:40.656Z	47189	System	ESTABLISHED	UDP	10.10.1.169	5985	10.10.2.173	8080	fthompson
1695	LEG-WS-069	2026-02-18T03:13:46.711Z	38529	spoolsv.exe	TIME_WAIT	UDP	10.10.1.169	445	10.10.1.127	18376	emartinez
1696	LEG-WS-069	2026-02-19T03:37:18.775Z	1522	utorrent.exe	ESTABLISHED	TCP	10.10.1.169	139	10.10.2.164	88	bwilson
1697	LEG-WS-069	2026-02-19T12:31:45.040Z	15710	svchost.exe	ESTABLISHED	TCP	10.10.1.169	88	10.10.2.110	445	idavis
1698	LEG-WS-069	2026-02-10T09:38:24.487Z	11095	cmd.exe	SYN_SENT	TCP	10.10.1.169	88	58.88.80.90	8080	cjohnson
1699	LEG-WS-069	2026-02-19T05:22:36.310Z	3991	explorer.exe	LISTEN	TCP	10.10.1.169	3389	0.0.0.0	0	agarcia
1700	LEG-WS-069	2026-02-16T19:56:43.467Z	49583	powershell.exe	TIME_WAIT	TCP	10.10.1.169	59918	10.10.2.152	3389	svc_sql
1701	LEG-WS-069	2026-02-18T02:39:18.963Z	35382	teams.exe	TIME_WAIT	UDP	10.10.1.169	445	152.218.67.2	23753	admin
1702	LEG-WS-069	2026-02-16T14:17:09.135Z	8875	outlook.exe	TIME_WAIT	TCP	10.10.1.169	445	10.10.2.143	21540	jsmith
1703	LEG-WS-069	2026-02-19T18:36:12.997Z	25261	powershell.exe	CLOSE_WAIT	TCP	10.10.1.169	443	10.10.1.148	443	bwilson
1704	LEG-WS-069	2026-02-11T08:58:07.103Z	24504	cmd.exe	ESTABLISHED	TCP	10.10.1.169	8080	10.10.1.151	3389	cjohnson
1705	LEG-WS-069	2026-02-19T14:35:20.609Z	28000	outlook.exe	CLOSE_WAIT	TCP	10.10.1.169	3389	39.204.128.99	80	agarcia
1706	LEG-WS-069	2026-02-12T01:33:13.808Z	7039	powershell.exe	ESTABLISHED	TCP	10.10.1.169	389	10.10.1.118	3389	agarcia
1707	LEG-WS-069	2026-02-13T10:52:41.424Z	43759	powershell.exe	TIME_WAIT	TCP	10.10.1.169	3389	25.138.107.185	443	svc_web
1708	LEG-WS-069	2026-02-19T06:59:32.588Z	10148	spotify.exe	CLOSE_WAIT	TCP	10.10.1.169	389	10.10.3.117	445	agarcia
1709	MKT-WS-070	2026-02-14T19:51:19.852Z	41652	OneDrive.exe	TIME_WAIT	TCP	10.10.2.170	88	10.10.2.170	80	fthompson
1710	MKT-WS-070	2026-02-16T11:23:31.002Z	36681	code.exe	LISTEN	UDP	10.10.2.170	88	0.0.0.0	0	fthompson
1711	MKT-WS-070	2026-02-18T12:24:09.130Z	23645	RuntimeBroker.exe	SYN_SENT	TCP	10.10.2.170	3389	10.10.3.108	636	svc_backup
1712	MKT-WS-070	2026-02-13T02:31:52.939Z	31705	code.exe	SYN_SENT	UDP	10.10.2.170	636	112.244.69.104	636	bwilson
1713	MKT-WS-070	2026-02-11T23:45:21.581Z	12130	teams.exe	TIME_WAIT	TCP	10.10.2.170	56253	10.10.1.175	636	svc_web
1714	MKT-WS-070	2026-02-14T14:47:50.239Z	38699	msedge.exe	SYN_SENT	UDP	10.10.2.170	636	10.10.1.139	636	svc_sql
1715	MKT-WS-070	2026-02-18T13:00:54.907Z	39781	teams.exe	ESTABLISHED	TCP	10.10.2.170	54707	42.125.140.23	80	svc_backup
1716	MKT-WS-070	2026-02-14T14:28:38.406Z	116	SearchHost.exe	LISTEN	TCP	10.10.2.170	445	0.0.0.0	0	dlee
1717	MKT-WS-070	2026-02-16T17:37:50.909Z	3370	taskhostw.exe	ESTABLISHED	TCP	10.10.2.170	5985	50.94.34.123	3389	svc_backup
1718	MKT-WS-070	2026-02-12T10:11:52.977Z	40679	smss.exe	LISTEN	UDP	10.10.2.170	61300	0.0.0.0	0	bwilson
1719	MKT-WS-070	2026-02-20T00:56:27.810Z	9508	notepad.exe	CLOSE_WAIT	TCP	10.10.2.170	88	10.10.1.106	80	gwhite
1720	MKT-WS-070	2026-02-12T14:35:49.773Z	34553	explorer.exe	TIME_WAIT	TCP	10.10.2.170	5985	29.214.28.122	445	svc_backup
1721	MKT-WS-070	2026-02-17T04:45:31.304Z	56289	svchost.exe	ESTABLISHED	TCP	10.10.2.170	135	119.88.102.70	88	cjohnson
1722	MKT-WS-070	2026-02-17T00:43:42.711Z	52041	code.exe	LISTEN	TCP	10.10.2.170	80	0.0.0.0	0	idavis
1723	MKT-WS-070	2026-02-15T02:56:30.025Z	30503	OneDrive.exe	ESTABLISHED	TCP	10.10.2.170	445	10.10.1.136	3389	gwhite
1724	MKT-WS-070	2026-02-12T05:00:54.674Z	63976	SearchHost.exe	SYN_SENT	TCP	10.10.2.170	5985	10.10.1.127	445	jsmith
1725	MKT-WS-070	2026-02-17T14:19:59.896Z	2798	lsass.exe	ESTABLISHED	TCP	10.10.2.170	3389	26.225.10.23	445	bwilson
1726	MKT-WS-070	2026-02-18T11:13:34.315Z	52275	powershell.exe	CLOSE_WAIT	TCP	10.10.2.170	57888	10.10.3.129	88	cjohnson
1727	MKT-WS-070	2026-02-14T06:37:30.293Z	49977	SearchHost.exe	SYN_SENT	TCP	10.10.2.170	88	10.10.3.138	3389	bwilson
1728	MKT-WS-070	2026-02-12T16:47:02.866Z	57404	smss.exe	ESTABLISHED	TCP	10.10.2.170	445	51.222.136.17	53	emartinez
1729	MKT-WS-070	2026-02-16T09:23:15.945Z	14542	taskhostw.exe	CLOSE_WAIT	TCP	10.10.2.170	443	101.142.120.83	80	gwhite
1730	MKT-WS-070	2026-02-13T01:28:51.627Z	14011	cmd.exe	CLOSE_WAIT	TCP	10.10.2.170	8080	10.10.3.129	636	gwhite
1731	MKT-WS-070	2026-02-18T04:45:16.526Z	26585	utorrent.exe	CLOSE_WAIT	TCP	10.10.2.170	389	10.10.1.154	88	hbrown
1732	MKT-WS-070	2026-02-16T08:12:58.206Z	7308	chrome.exe	TIME_WAIT	TCP	10.10.2.170	53	10.10.2.158	8080	jsmith
1733	MKT-WS-070	2026-02-10T16:18:59.577Z	59044	notepad.exe	TIME_WAIT	TCP	10.10.2.170	389	10.10.2.131	88	jsmith
1734	MKT-WS-070	2026-02-17T06:28:04.714Z	1558	powershell.exe	CLOSE_WAIT	TCP	10.10.2.170	88	10.10.1.151	389	svc_web
1735	MKT-WS-070	2026-02-16T17:34:37.528Z	50634	OneDrive.exe	ESTABLISHED	TCP	10.10.2.170	445	10.10.2.161	443	hbrown
1736	MKT-WS-070	2026-02-12T11:05:15.298Z	44647	spoolsv.exe	SYN_SENT	TCP	10.10.2.170	135	129.168.23.100	88	svc_web
1737	MKT-WS-070	2026-02-11T18:44:59.025Z	7829	dwm.exe	SYN_SENT	TCP	10.10.2.170	5985	10.10.1.103	8080	svc_backup
1738	MKT-WS-070	2026-02-19T01:44:02.307Z	50073	cmd.exe	SYN_SENT	TCP	10.10.2.170	53	10.10.3.153	8080	agarcia
1739	MKT-WS-070	2026-02-16T04:27:47.056Z	27538	teams.exe	SYN_SENT	TCP	10.10.2.170	135	208.90.41.173	443	svc_backup
1740	MKT-WS-070	2026-02-18T00:23:03.960Z	60527	code.exe	LISTEN	TCP	10.10.2.170	8080	0.0.0.0	0	jsmith
1741	MKT-WS-070	2026-02-17T08:38:34.629Z	15658	notepad.exe	SYN_SENT	TCP	10.10.2.170	5985	151.149.80.8	443	emartinez
1742	MKT-WS-070	2026-02-13T20:59:40.723Z	35398	spoolsv.exe	SYN_SENT	TCP	10.10.2.170	139	92.214.230.7	5186	gwhite
1743	MKT-WS-070	2026-02-15T04:28:37.572Z	35409	RuntimeBroker.exe	TIME_WAIT	TCP	10.10.2.170	139	60.142.125.208	443	agarcia
1744	MKT-WS-070	2026-02-17T02:37:22.246Z	16654	dwm.exe	ESTABLISHED	TCP	10.10.2.170	389	70.113.58.88	88	svc_sql
1745	MKT-WS-070	2026-02-10T08:22:05.428Z	61669	MsMpEng.exe	LISTEN	TCP	10.10.2.170	3389	0.0.0.0	0	gwhite
1746	MKT-WS-070	2026-02-16T21:16:33.485Z	2160	msedge.exe	CLOSE_WAIT	TCP	10.10.2.170	5985	162.152.21.115	636	hbrown
1747	MKT-WS-070	2026-02-19T02:36:42.576Z	21481	chrome.exe	CLOSE_WAIT	UDP	10.10.2.170	445	10.10.3.123	445	svc_sql
1748	MKT-WS-070	2026-02-14T16:44:13.534Z	243	MsMpEng.exe	ESTABLISHED	TCP	10.10.2.170	53	10.10.1.160	443	fthompson
1749	EXEC-WS-071	2026-02-12T20:01:36.967Z	7967	SearchHost.exe	ESTABLISHED	UDP	10.10.3.171	5985	101.67.7.143	80	gwhite
1750	EXEC-WS-071	2026-02-19T17:20:19.450Z	17438	qbittorrent.exe	LISTEN	TCP	10.10.3.171	389	0.0.0.0	0	dlee
1751	EXEC-WS-071	2026-02-17T23:56:46.230Z	19448	taskhostw.exe	SYN_SENT	TCP	10.10.3.171	389	65.171.248.231	80	svc_sql
1752	EXEC-WS-071	2026-02-19T11:13:34.752Z	14186	MsMpEng.exe	LISTEN	TCP	10.10.3.171	389	0.0.0.0	0	fthompson
1753	EXEC-WS-071	2026-02-14T13:16:02.146Z	53601	smss.exe	ESTABLISHED	UDP	10.10.3.171	8080	10.10.3.171	389	svc_backup
1754	EXEC-WS-071	2026-02-10T18:30:25.774Z	23356	services.exe	CLOSE_WAIT	TCP	10.10.3.171	445	194.150.124.97	445	cjohnson
1755	EXEC-WS-071	2026-02-19T10:25:33.563Z	54302	lsass.exe	TIME_WAIT	TCP	10.10.3.171	636	137.225.188.200	3389	svc_backup
1756	EXEC-WS-071	2026-02-14T14:46:42.486Z	13048	dwm.exe	SYN_SENT	UDP	10.10.3.171	3389	10.10.2.167	88	bwilson
1757	EXEC-WS-071	2026-02-13T13:36:10.747Z	53616	explorer.exe	CLOSE_WAIT	TCP	10.10.3.171	88	199.208.145.150	25457	gwhite
1758	EXEC-WS-071	2026-02-12T06:29:55.729Z	34469	MsMpEng.exe	LISTEN	UDP	10.10.3.171	139	0.0.0.0	0	fthompson
1759	EXEC-WS-071	2026-02-19T15:08:06.290Z	24804	lsass.exe	SYN_SENT	TCP	10.10.3.171	80	10.10.3.159	3389	idavis
1760	EXEC-WS-071	2026-02-13T16:09:14.639Z	36331	services.exe	LISTEN	TCP	10.10.3.171	135	0.0.0.0	0	svc_backup
1761	EXEC-WS-071	2026-02-12T21:45:53.150Z	34518	SearchHost.exe	SYN_SENT	TCP	10.10.3.171	636	127.230.95.96	443	bwilson
1762	EXEC-WS-071	2026-02-14T12:36:45.840Z	2022	spotify.exe	TIME_WAIT	TCP	10.10.3.171	443	84.102.97.250	8080	jsmith
1763	EXEC-WS-071	2026-02-17T22:46:20.270Z	37063	notepad.exe	TIME_WAIT	TCP	10.10.3.171	5985	38.34.156.190	445	agarcia
1764	IT-WS-072	2026-02-11T22:04:35.169Z	41752	svchost.exe	LISTEN	TCP	10.10.1.172	3389	0.0.0.0	0	svc_web
1765	IT-WS-072	2026-02-13T18:22:35.868Z	63645	outlook.exe	ESTABLISHED	TCP	10.10.1.172	389	10.10.1.118	80	svc_backup
1766	IT-WS-072	2026-02-20T03:36:08.461Z	6804	explorer.exe	SYN_SENT	UDP	10.10.1.172	3389	10.10.1.163	29080	idavis
1767	IT-WS-072	2026-02-11T05:17:37.556Z	43280	System	SYN_SENT	TCP	10.10.1.172	88	212.17.189.103	80	emartinez
1768	IT-WS-072	2026-02-19T04:23:36.699Z	540	svchost.exe	CLOSE_WAIT	TCP	10.10.1.172	5985	26.220.170.251	445	dlee
1769	IT-WS-072	2026-02-13T14:56:13.687Z	26622	notepad.exe	CLOSE_WAIT	TCP	10.10.1.172	636	42.162.115.247	32622	agarcia
1770	IT-WS-072	2026-02-11T05:32:24.893Z	37822	winlogon.exe	CLOSE_WAIT	TCP	10.10.1.172	389	44.37.254.254	88	svc_sql
1771	IT-WS-072	2026-02-12T09:34:08.361Z	31837	explorer.exe	LISTEN	TCP	10.10.1.172	88	0.0.0.0	0	cjohnson
1772	IT-WS-072	2026-02-13T09:28:50.891Z	20449	explorer.exe	LISTEN	TCP	10.10.1.172	55176	0.0.0.0	0	dlee
1773	IT-WS-072	2026-02-18T09:37:00.179Z	20757	notepad.exe	SYN_SENT	TCP	10.10.1.172	49154	10.10.1.157	8080	agarcia
1774	IT-WS-072	2026-02-17T13:46:08.867Z	63080	svchost.exe	CLOSE_WAIT	TCP	10.10.1.172	443	10.10.3.105	389	admin
1775	IT-WS-072	2026-02-16T03:35:09.953Z	23300	System	SYN_SENT	TCP	10.10.1.172	139	91.196.98.249	443	hbrown
1776	IT-WS-072	2026-02-12T22:13:08.724Z	43773	RuntimeBroker.exe	SYN_SENT	TCP	10.10.1.172	3389	10.10.3.10	53	agarcia
1777	IT-WS-072	2026-02-11T13:18:26.700Z	18207	explorer.exe	CLOSE_WAIT	TCP	10.10.1.172	80	10.10.3.102	445	jsmith
1778	IT-WS-072	2026-02-18T07:47:42.156Z	48492	powershell.exe	SYN_SENT	TCP	10.10.1.172	445	10.10.2.149	8080	svc_backup
1779	IT-WS-072	2026-02-13T16:25:26.352Z	39951	dwm.exe	TIME_WAIT	TCP	10.10.1.172	389	72.10.227.137	88	svc_backup
1780	IT-WS-072	2026-02-20T01:08:06.530Z	39742	SearchHost.exe	TIME_WAIT	TCP	10.10.1.172	135	185.121.175.185	80	gwhite
1781	IT-WS-072	2026-02-16T13:08:42.777Z	2788	svchost.exe	SYN_SENT	TCP	10.10.1.172	50902	10.10.3.165	80	admin
1782	IT-WS-072	2026-02-11T08:03:43.658Z	35300	services.exe	SYN_SENT	TCP	10.10.1.172	135	10.10.2.119	443	dlee
1783	IT-WS-072	2026-02-10T16:05:13.697Z	29907	System	ESTABLISHED	TCP	10.10.1.172	54493	103.123.95.169	88	svc_sql
1784	IT-WS-072	2026-02-16T14:09:17.725Z	30927	teams.exe	LISTEN	TCP	10.10.1.172	135	0.0.0.0	0	admin
1785	HR-WS-073	2026-02-18T03:40:43.522Z	19057	cmd.exe	TIME_WAIT	TCP	10.10.2.173	8080	186.29.70.236	389	fthompson
1786	HR-WS-073	2026-02-12T04:57:01.782Z	21511	services.exe	SYN_SENT	TCP	10.10.2.173	88	10.10.3.150	88	svc_backup
1787	HR-WS-073	2026-02-14T05:29:33.266Z	53377	SearchHost.exe	ESTABLISHED	TCP	10.10.2.173	80	10.10.1.169	8080	hbrown
1788	HR-WS-073	2026-02-13T18:39:39.690Z	53354	svchost.exe	LISTEN	TCP	10.10.2.173	80	0.0.0.0	0	jsmith
1789	HR-WS-073	2026-02-13T02:29:43.700Z	625	explorer.exe	CLOSE_WAIT	TCP	10.10.2.173	5985	213.4.189.12	88	idavis
1790	HR-WS-073	2026-02-11T17:48:50.051Z	39966	msedge.exe	ESTABLISHED	UDP	10.10.2.173	88	31.84.30.207	53	dlee
1791	HR-WS-073	2026-02-15T04:52:21.811Z	39254	OneDrive.exe	LISTEN	TCP	10.10.2.173	88	0.0.0.0	0	emartinez
1792	HR-WS-073	2026-02-20T01:36:40.281Z	43457	msedge.exe	SYN_SENT	UDP	10.10.2.173	80	10.10.1.160	389	emartinez
1793	FIN-WS-074	2026-02-11T15:05:20.150Z	1167	spoolsv.exe	SYN_SENT	UDP	10.10.3.174	3389	74.144.146.237	443	admin
1794	FIN-WS-074	2026-02-11T23:13:30.236Z	11101	OneDrive.exe	SYN_SENT	TCP	10.10.3.174	3389	10.10.2.137	88	idavis
1795	FIN-WS-074	2026-02-15T11:45:37.408Z	20737	RuntimeBroker.exe	LISTEN	TCP	10.10.3.174	88	0.0.0.0	0	svc_backup
1796	FIN-WS-074	2026-02-14T16:59:59.169Z	9244	svchost.exe	LISTEN	TCP	10.10.3.174	52512	0.0.0.0	0	dlee
1797	FIN-WS-074	2026-02-14T00:19:47.518Z	4221	svchost.exe	CLOSE_WAIT	TCP	10.10.3.174	8080	222.78.215.231	3389	emartinez
1798	FIN-WS-074	2026-02-18T18:14:26.976Z	20811	svchost.exe	ESTABLISHED	TCP	10.10.3.174	389	2.34.225.59	389	fthompson
1799	FIN-WS-074	2026-02-13T17:35:57.531Z	29089	dwm.exe	CLOSE_WAIT	TCP	10.10.3.174	3389	34.91.130.78	17099	idavis
1800	FIN-WS-074	2026-02-11T14:46:37.418Z	61282	OneDrive.exe	CLOSE_WAIT	TCP	10.10.3.174	135	10.10.2.107	389	svc_backup
1801	FIN-WS-074	2026-02-19T13:17:37.236Z	36389	spoolsv.exe	SYN_SENT	TCP	10.10.3.174	5985	10.10.2.128	88	cjohnson
1802	FIN-WS-074	2026-02-10T20:17:38.425Z	12272	taskhostw.exe	SYN_SENT	TCP	10.10.3.174	389	10.10.2.101	389	cjohnson
1803	FIN-WS-074	2026-02-16T14:52:02.993Z	28443	OneDrive.exe	CLOSE_WAIT	TCP	10.10.3.174	53	68.125.3.207	80	gwhite
1804	FIN-WS-074	2026-02-18T12:32:00.581Z	8833	code.exe	LISTEN	TCP	10.10.3.174	135	0.0.0.0	0	cjohnson
1805	FIN-WS-074	2026-02-14T06:00:55.856Z	56425	SearchHost.exe	TIME_WAIT	TCP	10.10.3.174	445	10.10.1.121	389	idavis
1806	FIN-WS-074	2026-02-16T19:29:14.517Z	46572	cmd.exe	LISTEN	TCP	10.10.3.174	135	0.0.0.0	0	bwilson
1807	FIN-WS-074	2026-02-11T00:18:52.796Z	40525	System	TIME_WAIT	UDP	10.10.3.174	445	10.10.2.113	80	cjohnson
1808	FIN-WS-074	2026-02-10T10:16:23.512Z	44183	teams.exe	SYN_SENT	TCP	10.10.3.174	445	55.152.253.169	59315	gwhite
1809	FIN-WS-074	2026-02-17T12:25:53.567Z	40885	taskhostw.exe	ESTABLISHED	TCP	10.10.3.174	636	10.10.1.157	29625	agarcia
1810	FIN-WS-074	2026-02-12T06:04:34.549Z	49800	powershell.exe	ESTABLISHED	TCP	10.10.3.174	636	214.201.145.253	8080	fthompson
1811	FIN-WS-074	2026-02-15T04:42:55.915Z	13453	outlook.exe	LISTEN	TCP	10.10.3.174	8080	0.0.0.0	0	agarcia
1812	FIN-WS-074	2026-02-14T02:22:35.601Z	15700	dwm.exe	ESTABLISHED	TCP	10.10.3.174	139	187.244.14.237	636	fthompson
1813	FIN-WS-074	2026-02-17T00:04:41.863Z	51944	taskhostw.exe	SYN_SENT	TCP	10.10.3.174	88	129.155.69.162	80	svc_backup
1814	FIN-WS-074	2026-02-17T08:50:57.754Z	57020	explorer.exe	LISTEN	TCP	10.10.3.174	80	0.0.0.0	0	fthompson
1815	FIN-WS-074	2026-02-10T11:26:54.060Z	2722	RuntimeBroker.exe	SYN_SENT	UDP	10.10.3.174	8080	10.10.2.101	8080	cjohnson
1816	FIN-WS-074	2026-02-16T12:45:11.347Z	42415	code.exe	SYN_SENT	TCP	10.10.3.174	62375	10.10.3.174	53	idavis
1817	SLS-WS-075	2026-02-18T01:01:23.543Z	58344	code.exe	SYN_SENT	TCP	10.10.1.175	636	10.10.2.10	3277	emartinez
1818	SLS-WS-075	2026-02-20T11:50:23.700Z	16959	svchost.exe	TIME_WAIT	TCP	10.10.1.175	445	211.213.223.76	3389	fthompson
1819	SLS-WS-075	2026-02-19T08:45:21.549Z	6937	msedge.exe	LISTEN	TCP	10.10.1.175	389	0.0.0.0	0	emartinez
1820	SLS-WS-075	2026-02-11T18:22:03.602Z	12755	System	TIME_WAIT	UDP	10.10.1.175	80	10.10.2.158	8080	svc_web
1821	SLS-WS-075	2026-02-18T09:35:16.118Z	34595	dwm.exe	TIME_WAIT	TCP	10.10.1.175	445	10.10.1.160	636	bwilson
1822	SLS-WS-075	2026-02-13T18:27:25.004Z	35925	outlook.exe	LISTEN	TCP	10.10.1.175	80	0.0.0.0	0	svc_web
1823	SLS-WS-075	2026-02-18T02:53:54.062Z	37780	SearchHost.exe	SYN_SENT	TCP	10.10.1.175	636	10.10.1.148	389	idavis
1824	SLS-WS-075	2026-02-12T20:21:37.687Z	342	cmd.exe	CLOSE_WAIT	TCP	10.10.1.175	53	110.227.137.146	636	svc_web
1825	SLS-WS-075	2026-02-11T13:49:57.178Z	55111	csrss.exe	LISTEN	UDP	10.10.1.175	62094	0.0.0.0	0	hbrown
1826	SLS-WS-075	2026-02-14T12:11:38.473Z	585	epicgameslauncher.exe	LISTEN	TCP	10.10.1.175	5985	0.0.0.0	0	agarcia
1827	SLS-WS-075	2026-02-14T00:00:58.558Z	63411	RuntimeBroker.exe	TIME_WAIT	TCP	10.10.1.175	139	10.10.1.142	389	bwilson
1828	SLS-WS-075	2026-02-14T01:21:11.983Z	27279	lsass.exe	TIME_WAIT	TCP	10.10.1.175	80	99.228.172.134	80	fthompson
1829	SLS-WS-075	2026-02-10T09:14:04.448Z	52638	taskhostw.exe	ESTABLISHED	UDP	10.10.1.175	139	10.10.1.166	445	svc_web
1830	SLS-WS-075	2026-02-15T01:09:31.766Z	62905	code.exe	SYN_SENT	TCP	10.10.1.175	80	132.119.162.211	443	cjohnson
1831	SLS-WS-075	2026-02-15T23:08:21.609Z	48326	explorer.exe	SYN_SENT	TCP	10.10.1.175	445	10.10.1.106	80	hbrown
1832	SLS-WS-075	2026-02-19T09:00:05.913Z	60346	services.exe	TIME_WAIT	TCP	10.10.1.175	139	10.10.1.109	389	svc_web
1833	SLS-WS-075	2026-02-16T02:48:34.806Z	7277	winlogon.exe	LISTEN	TCP	10.10.1.175	445	0.0.0.0	0	cjohnson
1834	SLS-WS-075	2026-02-13T10:47:19.611Z	33486	services.exe	TIME_WAIT	TCP	10.10.1.175	139	10.10.2.146	389	jsmith
1835	SLS-WS-075	2026-02-10T12:42:34.671Z	22171	winlogon.exe	LISTEN	TCP	10.10.1.175	389	0.0.0.0	0	idavis
1836	SLS-WS-075	2026-02-14T00:26:36.810Z	34863	System	ESTABLISHED	UDP	10.10.1.175	80	44.128.138.38	443	idavis
1837	SLS-WS-075	2026-02-11T08:05:32.135Z	48865	outlook.exe	TIME_WAIT	TCP	10.10.1.175	88	216.8.239.49	3389	gwhite
1838	DC-01	2026-02-20T16:21:26.834Z	45105	System	CLOSE_WAIT	TCP	10.10.1.10	88	10.10.1.166	445	hbrown
1839	DC-01	2026-02-17T01:40:32.555Z	14503	code.exe	ESTABLISHED	TCP	10.10.1.10	88	10.10.3.174	3389	bwilson
1840	DC-01	2026-02-12T12:26:48.270Z	55760	lsass.exe	ESTABLISHED	TCP	10.10.1.10	636	10.10.1.154	636	gwhite
1841	DC-01	2026-02-15T13:09:47.458Z	19426	svchost.exe	CLOSE_WAIT	TCP	10.10.1.10	88	55.44.190.24	636	svc_sql
1842	DC-01	2026-02-17T21:13:59.444Z	14522	SearchHost.exe	TIME_WAIT	TCP	10.10.1.10	5985	160.11.215.238	389	admin
1843	DC-01	2026-02-13T15:05:22.567Z	17973	csrss.exe	SYN_SENT	TCP	10.10.1.10	445	44.116.241.174	88	svc_web
1844	DC-01	2026-02-14T17:10:47.342Z	20675	System	CLOSE_WAIT	TCP	10.10.1.10	58345	120.228.165.181	389	emartinez
1845	DC-01	2026-02-13T16:06:05.038Z	39587	dwm.exe	ESTABLISHED	TCP	10.10.1.10	8080	10.10.1.109	443	jsmith
1846	DC-01	2026-02-15T19:16:51.263Z	56542	notepad.exe	TIME_WAIT	TCP	10.10.1.10	445	10.10.1.166	3389	bwilson
1847	DC-01	2026-02-18T00:33:24.973Z	35960	MsMpEng.exe	CLOSE_WAIT	TCP	10.10.1.10	445	61.204.55.47	53	svc_sql
1848	DC-01	2026-02-14T09:00:21.573Z	49935	outlook.exe	SYN_SENT	TCP	10.10.1.10	389	10.10.2.104	88	svc_web
1849	DC-01	2026-02-16T15:40:25.844Z	15236	explorer.exe	ESTABLISHED	TCP	10.10.1.10	88	34.112.246.200	636	cjohnson
1850	DC-01	2026-02-13T17:58:33.268Z	33591	OneDrive.exe	SYN_SENT	TCP	10.10.1.10	88	117.23.124.183	389	idavis
1851	DC-01	2026-02-17T12:37:45.303Z	969	dwm.exe	LISTEN	UDP	10.10.1.10	3389	0.0.0.0	0	svc_sql
1852	DC-01	2026-02-14T01:22:08.759Z	42286	powershell.exe	ESTABLISHED	UDP	10.10.1.10	443	10.10.1.106	80	agarcia
1853	DC-01	2026-02-15T22:20:55.421Z	6959	services.exe	SYN_SENT	UDP	10.10.1.10	636	10.10.2.140	636	agarcia
1854	DC-01	2026-02-20T15:37:12.155Z	7560	notepad.exe	CLOSE_WAIT	TCP	10.10.1.10	52507	40.116.165.218	636	emartinez
1855	DC-01	2026-02-12T18:01:48.688Z	63900	SearchHost.exe	SYN_SENT	TCP	10.10.1.10	636	10.224.230.159	8080	dlee
1856	DC-01	2026-02-18T20:51:02.497Z	27838	spoolsv.exe	TIME_WAIT	TCP	10.10.1.10	53	10.10.2.161	3389	svc_backup
1857	DC-01	2026-02-14T00:46:00.511Z	62025	notepad.exe	ESTABLISHED	TCP	10.10.1.10	135	35.163.245.56	443	gwhite
1858	DC-01	2026-02-14T21:47:44.021Z	6945	OneDrive.exe	LISTEN	TCP	10.10.1.10	389	0.0.0.0	0	hbrown
1859	DC-01	2026-02-18T23:27:59.728Z	21820	System	LISTEN	TCP	10.10.1.10	88	0.0.0.0	0	hbrown
1860	DC-01	2026-02-16T20:42:25.922Z	16765	OneDrive.exe	TIME_WAIT	UDP	10.10.1.10	135	45.153.46.97	53	hbrown
1861	DC-01	2026-02-17T21:47:19.889Z	22734	lsass.exe	CLOSE_WAIT	TCP	10.10.1.10	135	10.10.2.161	8080	svc_backup
1862	DC-01	2026-02-10T11:16:55.137Z	10688	RuntimeBroker.exe	SYN_SENT	TCP	10.10.1.10	389	10.10.1.109	53	bwilson
1863	DC-01	2026-02-14T08:39:03.574Z	58385	MsMpEng.exe	ESTABLISHED	TCP	10.10.1.10	389	10.10.1.139	389	jsmith
1864	DC-01	2026-02-13T08:09:13.970Z	41841	cmd.exe	SYN_SENT	UDP	10.10.1.10	65105	116.147.13.189	88	cjohnson
1865	DC-01	2026-02-10T15:23:33.136Z	47679	svchost.exe	LISTEN	TCP	10.10.1.10	636	0.0.0.0	0	admin
1866	DC-01	2026-02-14T06:16:40.421Z	30225	OneDrive.exe	LISTEN	TCP	10.10.1.10	5985	0.0.0.0	0	agarcia
1867	DC-01	2026-02-18T18:49:36.955Z	60505	SearchHost.exe	CLOSE_WAIT	TCP	10.10.1.10	443	1.71.160.192	8080	jsmith
1868	DC-01	2026-02-16T11:05:44.787Z	2696	outlook.exe	LISTEN	UDP	10.10.1.10	88	0.0.0.0	0	agarcia
1869	DC-01	2026-02-13T17:50:58.048Z	41758	code.exe	CLOSE_WAIT	TCP	10.10.1.10	5985	10.10.2.161	443	dlee
1870	DC-01	2026-02-19T04:51:59.563Z	59604	SearchHost.exe	ESTABLISHED	TCP	10.10.1.10	80	158.84.108.63	445	emartinez
1871	DC-01	2026-02-16T01:23:46.924Z	16243	notepad.exe	LISTEN	TCP	10.10.1.10	443	0.0.0.0	0	gwhite
1872	DC-01	2026-02-19T18:08:56.311Z	25094	SearchHost.exe	LISTEN	TCP	10.10.1.10	636	0.0.0.0	0	idavis
1873	DC-01	2026-02-10T19:14:43.077Z	14277	RuntimeBroker.exe	SYN_SENT	UDP	10.10.1.10	8080	176.224.192.218	20595	svc_web
1874	DC-01	2026-02-19T23:20:23.637Z	16865	System	TIME_WAIT	TCP	10.10.1.10	636	10.10.1.127	445	hbrown
1875	DC-02	2026-02-19T23:17:16.296Z	18187	teams.exe	SYN_SENT	TCP	10.10.2.10	88	1.153.240.194	445	fthompson
1876	DC-02	2026-02-15T02:29:49.593Z	33985	OneDrive.exe	ESTABLISHED	TCP	10.10.2.10	139	149.101.76.92	18110	gwhite
1877	DC-02	2026-02-10T10:01:09.505Z	1015	taskhostw.exe	LISTEN	TCP	10.10.2.10	636	0.0.0.0	0	idavis
1878	DC-02	2026-02-10T22:56:37.086Z	47488	powershell.exe	CLOSE_WAIT	TCP	10.10.2.10	5985	10.10.3.168	80	svc_backup
1879	DC-02	2026-02-15T08:20:42.976Z	27137	powershell.exe	ESTABLISHED	TCP	10.10.2.10	88	10.10.1.109	88	bwilson
1880	DC-02	2026-02-11T16:13:06.525Z	49971	svchost.exe	CLOSE_WAIT	TCP	10.10.2.10	53	10.10.2.152	445	gwhite
1881	DC-02	2026-02-12T04:48:05.269Z	48796	lsass.exe	SYN_SENT	TCP	10.10.2.10	5985	10.10.2.110	445	cjohnson
1882	DC-02	2026-02-19T20:52:41.197Z	9150	explorer.exe	ESTABLISHED	UDP	10.10.2.10	80	48.221.171.251	53	bwilson
1883	DC-02	2026-02-13T15:56:22.652Z	38689	msedge.exe	ESTABLISHED	TCP	10.10.2.10	80	10.10.3.114	445	idavis
1884	DC-02	2026-02-20T15:48:12.420Z	15311	msedge.exe	CLOSE_WAIT	TCP	10.10.2.10	135	10.10.1.118	80	svc_web
1885	DC-02	2026-02-14T06:26:42.649Z	43027	outlook.exe	LISTEN	UDP	10.10.2.10	3389	0.0.0.0	0	jsmith
1886	DC-02	2026-02-11T09:15:25.874Z	15030	MsMpEng.exe	SYN_SENT	TCP	10.10.2.10	443	195.106.131.137	15679	admin
1887	DC-02	2026-02-17T09:49:07.420Z	21940	teams.exe	SYN_SENT	TCP	10.10.2.10	52977	10.10.2.10	88	bwilson
1888	DC-02	2026-02-15T15:59:58.945Z	28241	teams.exe	SYN_SENT	TCP	10.10.2.10	58930	206.152.226.110	18306	cjohnson
1889	DC-02	2026-02-16T01:32:11.818Z	41065	explorer.exe	SYN_SENT	TCP	10.10.2.10	5985	10.10.3.132	44400	emartinez
1890	DC-02	2026-02-11T07:01:43.642Z	45212	winlogon.exe	LISTEN	TCP	10.10.2.10	62415	0.0.0.0	0	bwilson
1891	DC-02	2026-02-14T16:07:20.200Z	6996	SearchHost.exe	TIME_WAIT	TCP	10.10.2.10	139	125.199.80.95	88	dlee
1892	DC-02	2026-02-17T14:29:32.274Z	10536	RuntimeBroker.exe	LISTEN	UDP	10.10.2.10	88	0.0.0.0	0	dlee
1893	DC-02	2026-02-16T01:51:39.848Z	22322	cmd.exe	CLOSE_WAIT	TCP	10.10.2.10	389	10.10.1.175	9365	svc_backup
1894	DC-02	2026-02-11T21:41:01.091Z	6867	notepad.exe	LISTEN	TCP	10.10.2.10	88	0.0.0.0	0	emartinez
1895	DC-02	2026-02-13T18:07:51.255Z	49191	teams.exe	CLOSE_WAIT	TCP	10.10.2.10	636	10.10.2.128	636	fthompson
1896	DC-02	2026-02-18T04:00:45.680Z	49836	smss.exe	ESTABLISHED	TCP	10.10.2.10	5985	188.75.151.145	41388	hbrown
1897	DC-02	2026-02-11T06:05:46.044Z	16146	chrome.exe	CLOSE_WAIT	TCP	10.10.2.10	135	173.42.51.101	389	jsmith
1898	DC-02	2026-02-14T17:54:11.058Z	31686	code.exe	CLOSE_WAIT	UDP	10.10.2.10	80	10.10.2.113	36171	hbrown
1899	DC-02	2026-02-16T12:02:17.931Z	19619	svchost.exe	SYN_SENT	UDP	10.10.2.10	636	10.10.2.116	3389	svc_sql
1900	DC-02	2026-02-18T03:09:58.729Z	54583	SearchHost.exe	LISTEN	TCP	10.10.2.10	445	0.0.0.0	0	admin
1901	DC-02	2026-02-14T10:51:10.448Z	37629	OneDrive.exe	TIME_WAIT	TCP	10.10.2.10	135	10.10.1.118	3389	dlee
1902	DC-02	2026-02-15T00:52:28.047Z	44155	MsMpEng.exe	ESTABLISHED	TCP	10.10.2.10	389	106.196.149.146	88	jsmith
1903	DC-02	2026-02-16T14:01:14.111Z	2253	System	LISTEN	UDP	10.10.2.10	135	0.0.0.0	0	agarcia
1904	DC-02	2026-02-14T12:20:16.895Z	47182	msedge.exe	LISTEN	TCP	10.10.2.10	443	0.0.0.0	0	cjohnson
1905	DC-02	2026-02-19T00:18:27.683Z	43143	cmd.exe	SYN_SENT	TCP	10.10.2.10	135	58.118.139.249	88	svc_sql
1906	DC-02	2026-02-15T11:24:21.424Z	14289	MsMpEng.exe	TIME_WAIT	TCP	10.10.2.10	139	12.135.45.187	88	jsmith
1907	DC-02	2026-02-17T04:02:21.468Z	60570	cmd.exe	SYN_SENT	TCP	10.10.2.10	5985	3.144.42.198	445	bwilson
1908	FILE-01	2026-02-11T20:05:41.514Z	62672	System	CLOSE_WAIT	TCP	10.10.1.11	5985	140.16.37.225	445	svc_web
1909	FILE-01	2026-02-10T23:20:45.068Z	31429	cmd.exe	SYN_SENT	TCP	10.10.1.11	53	67.79.30.54	88	idavis
1910	FILE-01	2026-02-18T13:40:44.121Z	7702	msedge.exe	CLOSE_WAIT	TCP	10.10.1.11	135	10.10.1.142	443	cjohnson
1911	FILE-01	2026-02-16T02:54:40.864Z	43039	OneDrive.exe	ESTABLISHED	TCP	10.10.1.11	80	35.155.237.172	636	agarcia
1912	FILE-01	2026-02-13T10:46:06.556Z	9059	msedge.exe	LISTEN	TCP	10.10.1.11	389	0.0.0.0	0	gwhite
1913	FILE-01	2026-02-11T01:56:12.835Z	36414	chrome.exe	SYN_SENT	UDP	10.10.1.11	8080	10.10.3.138	13313	svc_sql
1914	FILE-01	2026-02-13T06:59:22.999Z	3238	explorer.exe	CLOSE_WAIT	TCP	10.10.1.11	389	98.62.146.44	53	agarcia
1915	FILE-01	2026-02-18T19:32:13.880Z	22194	chrome.exe	TIME_WAIT	UDP	10.10.1.11	80	10.10.1.109	445	bwilson
1916	FILE-01	2026-02-16T13:18:09.619Z	40311	teams.exe	CLOSE_WAIT	TCP	10.10.1.11	80	10.10.1.109	636	dlee
1917	FILE-01	2026-02-14T20:10:17.303Z	22897	RuntimeBroker.exe	CLOSE_WAIT	TCP	10.10.1.11	53	146.113.29.8	53	admin
1918	EXCH-01	2026-02-14T13:16:24.251Z	1796	RuntimeBroker.exe	SYN_SENT	TCP	10.10.1.12	445	10.10.3.150	53	dlee
1919	EXCH-01	2026-02-15T15:18:39.619Z	62734	svchost.exe	CLOSE_WAIT	TCP	10.10.1.12	443	76.140.56.215	88	fthompson
1920	EXCH-01	2026-02-16T13:52:34.553Z	44160	cmd.exe	ESTABLISHED	TCP	10.10.1.12	63736	10.10.1.13	636	dlee
1921	EXCH-01	2026-02-19T09:32:43.463Z	43327	msedge.exe	CLOSE_WAIT	UDP	10.10.1.12	80	121.208.86.50	53	bwilson
1922	EXCH-01	2026-02-19T08:34:55.376Z	34572	outlook.exe	SYN_SENT	UDP	10.10.1.12	445	10.10.1.169	53	cjohnson
1923	EXCH-01	2026-02-18T16:38:00.392Z	15053	services.exe	SYN_SENT	TCP	10.10.1.12	80	10.10.3.171	30670	emartinez
1924	EXCH-01	2026-02-16T12:00:43.808Z	60624	msedge.exe	ESTABLISHED	UDP	10.10.1.12	389	8.160.99.82	636	svc_web
1925	EXCH-01	2026-02-10T12:17:54.259Z	4870	lsass.exe	TIME_WAIT	TCP	10.10.1.12	8080	143.20.237.135	636	jsmith
1926	EXCH-01	2026-02-13T07:58:40.088Z	36516	msedge.exe	SYN_SENT	TCP	10.10.1.12	135	78.39.170.224	445	fthompson
1927	EXCH-01	2026-02-11T05:15:02.204Z	33519	notepad.exe	LISTEN	TCP	10.10.1.12	445	0.0.0.0	0	admin
1928	EXCH-01	2026-02-18T05:00:07.865Z	32718	services.exe	LISTEN	TCP	10.10.1.12	135	0.0.0.0	0	hbrown
1929	EXCH-01	2026-02-11T20:28:38.070Z	14643	svchost.exe	LISTEN	TCP	10.10.1.12	389	0.0.0.0	0	svc_web
1930	EXCH-01	2026-02-19T20:44:29.914Z	51496	OneDrive.exe	CLOSE_WAIT	TCP	10.10.1.12	636	10.10.2.143	53	emartinez
1931	EXCH-01	2026-02-14T01:49:17.495Z	10141	notepad.exe	ESTABLISHED	TCP	10.10.1.12	445	148.0.214.155	445	hbrown
1932	EXCH-01	2026-02-15T01:05:12.394Z	18015	System	CLOSE_WAIT	TCP	10.10.1.12	443	10.10.1.154	3389	emartinez
1933	EXCH-01	2026-02-11T01:16:40.905Z	38618	explorer.exe	ESTABLISHED	TCP	10.10.1.12	445	10.10.3.129	636	hbrown
1934	EXCH-01	2026-02-15T07:43:39.567Z	26214	RuntimeBroker.exe	LISTEN	TCP	10.10.1.12	135	0.0.0.0	0	idavis
1935	EXCH-01	2026-02-15T20:52:33.385Z	44357	spoolsv.exe	SYN_SENT	TCP	10.10.1.12	139	10.10.1.124	80	bwilson
1936	EXCH-01	2026-02-13T12:57:12.790Z	47295	outlook.exe	TIME_WAIT	UDP	10.10.1.12	139	10.10.3.111	8080	emartinez
1937	EXCH-01	2026-02-19T00:31:26.718Z	37003	SearchHost.exe	SYN_SENT	TCP	10.10.1.12	53	87.161.234.73	8080	svc_sql
1938	EXCH-01	2026-02-13T08:46:44.991Z	11980	teams.exe	TIME_WAIT	UDP	10.10.1.12	8080	10.10.2.119	45303	cjohnson
1939	EXCH-01	2026-02-19T18:12:18.940Z	45330	taskhostw.exe	SYN_SENT	UDP	10.10.1.12	135	10.10.1.118	8080	idavis
1940	EXCH-01	2026-02-20T05:49:10.631Z	39437	csrss.exe	LISTEN	TCP	10.10.1.12	139	0.0.0.0	0	bwilson
1941	EXCH-01	2026-02-14T07:36:44.762Z	13857	svchost.exe	TIME_WAIT	TCP	10.10.1.12	8080	139.90.61.92	88	gwhite
1942	EXCH-01	2026-02-13T11:31:03.318Z	51233	svchost.exe	CLOSE_WAIT	UDP	10.10.1.12	3389	193.16.110.32	80	svc_web
1943	EXCH-01	2026-02-17T07:51:21.987Z	3294	teams.exe	LISTEN	TCP	10.10.1.12	443	0.0.0.0	0	agarcia
1944	EXCH-01	2026-02-12T16:25:23.631Z	39696	spoolsv.exe	LISTEN	UDP	10.10.1.12	88	0.0.0.0	0	gwhite
1945	EXCH-01	2026-02-14T06:08:35.634Z	47151	explorer.exe	ESTABLISHED	TCP	10.10.1.12	445	182.174.220.26	53	admin
1946	EXCH-01	2026-02-13T07:24:49.202Z	51194	winlogon.exe	ESTABLISHED	TCP	10.10.1.12	3389	154.158.1.187	80	emartinez
1947	EXCH-01	2026-02-17T02:43:20.608Z	30818	code.exe	LISTEN	UDP	10.10.1.12	5985	0.0.0.0	0	gwhite
1948	EXCH-01	2026-02-16T17:44:04.871Z	62030	System	ESTABLISHED	TCP	10.10.1.12	5985	10.10.3.132	443	svc_sql
1949	EXCH-01	2026-02-13T22:09:00.765Z	43277	MsMpEng.exe	SYN_SENT	TCP	10.10.1.12	389	10.10.1.154	80	gwhite
1950	EXCH-01	2026-02-14T13:41:41.512Z	4961	lsass.exe	ESTABLISHED	UDP	10.10.1.12	50020	10.10.1.142	80	svc_sql
1951	WEB-01	2026-02-12T11:07:27.994Z	16226	powershell.exe	ESTABLISHED	TCP	10.10.3.10	8080	10.10.2.11	88	bwilson
1952	WEB-01	2026-02-14T03:54:30.849Z	14561	MsMpEng.exe	CLOSE_WAIT	TCP	10.10.3.10	88	10.10.1.13	636	gwhite
1953	WEB-01	2026-02-10T13:23:36.102Z	1995	notepad.exe	LISTEN	TCP	10.10.3.10	135	0.0.0.0	0	svc_backup
1954	WEB-01	2026-02-17T15:45:35.109Z	4893	taskhostw.exe	LISTEN	TCP	10.10.3.10	135	0.0.0.0	0	cjohnson
1955	WEB-01	2026-02-17T04:46:39.810Z	13318	lsass.exe	TIME_WAIT	TCP	10.10.3.10	5985	10.10.3.162	389	svc_sql
1956	WEB-01	2026-02-18T19:37:52.603Z	52779	lsass.exe	TIME_WAIT	TCP	10.10.3.10	3389	10.10.2.113	80	emartinez
1957	WEB-01	2026-02-13T14:58:50.409Z	22737	lsass.exe	CLOSE_WAIT	TCP	10.10.3.10	5985	10.10.2.119	445	cjohnson
1958	WEB-01	2026-02-15T15:49:38.354Z	38679	powershell.exe	CLOSE_WAIT	TCP	10.10.3.10	3389	10.10.3.153	389	fthompson
1959	WEB-01	2026-02-16T08:38:55.015Z	63715	cmd.exe	SYN_SENT	TCP	10.10.3.10	443	10.10.1.118	88	idavis
1960	WEB-01	2026-02-17T17:44:25.740Z	11852	SearchHost.exe	SYN_SENT	TCP	10.10.3.10	445	10.10.3.117	88	idavis
1961	WEB-01	2026-02-16T07:52:55.223Z	19836	taskhostw.exe	ESTABLISHED	TCP	10.10.3.10	88	200.110.131.176	8080	fthompson
1962	SQL-01	2026-02-15T03:22:02.172Z	64585	teams.exe	LISTEN	UDP	10.10.2.11	8080	0.0.0.0	0	svc_web
1963	SQL-01	2026-02-15T02:44:19.920Z	13443	OneDrive.exe	ESTABLISHED	TCP	10.10.2.11	8080	10.10.1.115	80	cjohnson
1964	SQL-01	2026-02-16T02:52:30.514Z	55207	dwm.exe	LISTEN	TCP	10.10.2.11	8080	0.0.0.0	0	bwilson
1965	SQL-01	2026-02-10T10:56:15.644Z	13019	code.exe	CLOSE_WAIT	UDP	10.10.2.11	88	10.10.1.151	389	fthompson
1966	SQL-01	2026-02-10T09:05:09.863Z	4514	MsMpEng.exe	LISTEN	TCP	10.10.2.11	135	0.0.0.0	0	bwilson
1967	SQL-01	2026-02-14T17:42:53.647Z	29680	outlook.exe	ESTABLISHED	TCP	10.10.2.11	53	69.64.198.210	3389	admin
1968	SQL-01	2026-02-16T15:38:50.639Z	18845	svchost.exe	SYN_SENT	UDP	10.10.2.11	8080	10.10.3.102	445	fthompson
1969	SQL-01	2026-02-13T05:58:58.562Z	46970	services.exe	LISTEN	TCP	10.10.2.11	5985	0.0.0.0	0	svc_web
1970	SQL-01	2026-02-14T04:23:52.063Z	56930	spotify.exe	LISTEN	UDP	10.10.2.11	88	0.0.0.0	0	agarcia
1971	SQL-01	2026-02-17T18:50:55.682Z	58726	code.exe	TIME_WAIT	TCP	10.10.2.11	443	10.10.1.115	636	svc_backup
1972	SQL-01	2026-02-13T23:08:33.858Z	25328	System	ESTABLISHED	UDP	10.10.2.11	139	10.10.3.108	443	hbrown
1973	SQL-01	2026-02-16T22:34:34.866Z	6852	MsMpEng.exe	LISTEN	TCP	10.10.2.11	53	0.0.0.0	0	dlee
1974	SQL-01	2026-02-15T17:04:47.662Z	20924	code.exe	CLOSE_WAIT	TCP	10.10.2.11	3389	91.25.100.11	88	fthompson
1975	SQL-01	2026-02-15T19:46:43.748Z	36718	msedge.exe	CLOSE_WAIT	TCP	10.10.2.11	80	24.19.79.228	27552	admin
1976	SQL-01	2026-02-16T06:11:15.199Z	30903	winlogon.exe	ESTABLISHED	TCP	10.10.2.11	443	10.10.2.167	443	svc_web
1977	SQL-01	2026-02-19T08:12:33.768Z	21912	csrss.exe	TIME_WAIT	TCP	10.10.2.11	389	51.81.211.17	53	hbrown
1978	SQL-01	2026-02-20T05:57:49.793Z	64809	code.exe	TIME_WAIT	TCP	10.10.2.11	88	10.10.3.120	53	cjohnson
1979	SQL-01	2026-02-10T18:49:42.917Z	44750	smss.exe	SYN_SENT	UDP	10.10.2.11	445	10.10.1.160	636	emartinez
1980	SQL-01	2026-02-13T21:14:35.149Z	10427	cmd.exe	CLOSE_WAIT	TCP	10.10.2.11	88	223.106.2.209	636	svc_web
1981	SQL-01	2026-02-19T10:41:49.030Z	24388	winlogon.exe	CLOSE_WAIT	TCP	10.10.2.11	139	82.35.189.208	8080	dlee
1982	SQL-01	2026-02-16T02:53:32.897Z	46959	powershell.exe	ESTABLISHED	TCP	10.10.2.11	135	10.10.3.102	3389	svc_web
1983	SQL-01	2026-02-11T16:04:04.500Z	48104	winlogon.exe	CLOSE_WAIT	TCP	10.10.2.11	636	10.10.3.165	53	gwhite
1984	SQL-01	2026-02-14T22:38:46.840Z	5535	SearchHost.exe	LISTEN	TCP	10.10.2.11	80	0.0.0.0	0	bwilson
1985	SQL-01	2026-02-13T09:48:02.952Z	19122	discord.exe	LISTEN	TCP	10.10.2.11	135	0.0.0.0	0	gwhite
1986	SQL-01	2026-02-17T09:27:50.147Z	38278	MsMpEng.exe	ESTABLISHED	TCP	10.10.2.11	636	10.10.3.10	443	admin
1987	SQL-01	2026-02-16T15:48:50.091Z	47510	SearchHost.exe	TIME_WAIT	TCP	10.10.2.11	3389	10.10.3.159	80	admin
1988	SQL-01	2026-02-10T12:21:58.862Z	46853	powershell.exe	LISTEN	TCP	10.10.2.11	80	0.0.0.0	0	emartinez
1989	SQL-01	2026-02-18T11:04:58.192Z	41003	notepad.exe	LISTEN	TCP	10.10.2.11	135	0.0.0.0	0	cjohnson
1990	SQL-01	2026-02-13T00:35:35.453Z	64592	teams.exe	LISTEN	TCP	10.10.2.11	51640	0.0.0.0	0	idavis
1991	SQL-01	2026-02-11T12:34:20.456Z	59598	csrss.exe	ESTABLISHED	TCP	10.10.2.11	8080	10.10.1.115	33322	emartinez
1992	SQL-01	2026-02-13T23:09:44.153Z	37574	OneDrive.exe	ESTABLISHED	TCP	10.10.2.11	5985	182.77.214.3	88	svc_backup
1993	PROXY-01	2026-02-19T15:36:27.808Z	39429	csrss.exe	TIME_WAIT	TCP	10.10.1.13	53	219.104.112.82	389	bwilson
1994	PROXY-01	2026-02-17T09:41:40.802Z	15832	smss.exe	CLOSE_WAIT	TCP	10.10.1.13	139	10.10.1.13	445	svc_sql
1995	PROXY-01	2026-02-15T22:40:53.444Z	17392	code.exe	ESTABLISHED	TCP	10.10.1.13	389	105.216.186.38	88	svc_web
1996	PROXY-01	2026-02-11T05:35:24.625Z	43782	teams.exe	CLOSE_WAIT	UDP	10.10.1.13	80	10.10.2.170	80	svc_backup
1997	PROXY-01	2026-02-14T12:09:39.952Z	42809	svchost.exe	TIME_WAIT	TCP	10.10.1.13	53	10.10.2.119	443	cjohnson
1998	PROXY-01	2026-02-19T03:15:14.172Z	59709	spoolsv.exe	LISTEN	UDP	10.10.1.13	5985	0.0.0.0	0	cjohnson
1999	PROXY-01	2026-02-10T22:12:57.981Z	2571	OneDrive.exe	LISTEN	TCP	10.10.1.13	80	0.0.0.0	0	idavis
2000	PROXY-01	2026-02-20T09:47:38.874Z	11469	discord.exe	SYN_SENT	TCP	10.10.1.13	443	10.10.2.101	636	hbrown
2001	PROXY-01	2026-02-17T16:34:09.406Z	41607	powershell.exe	TIME_WAIT	TCP	10.10.1.13	3389	140.92.25.160	445	gwhite
2002	PROXY-01	2026-02-15T21:26:50.630Z	42219	chrome.exe	LISTEN	TCP	10.10.1.13	445	0.0.0.0	0	jsmith
2003	PROXY-01	2026-02-11T00:41:41.842Z	56005	chrome.exe	LISTEN	UDP	10.10.1.13	53	0.0.0.0	0	svc_web
2004	PROXY-01	2026-02-17T10:13:12.589Z	62154	notepad.exe	CLOSE_WAIT	TCP	10.10.1.13	80	89.112.37.213	53	cjohnson
2005	PROXY-01	2026-02-20T14:51:31.888Z	49055	powershell.exe	ESTABLISHED	TCP	10.10.1.13	8080	52.229.148.251	37573	dlee
2006	PROXY-01	2026-02-14T18:47:06.718Z	45325	lsass.exe	SYN_SENT	UDP	10.10.1.13	5985	10.10.3.114	389	svc_web
2007	PROXY-01	2026-02-19T18:30:46.858Z	43797	winlogon.exe	CLOSE_WAIT	TCP	10.10.1.13	389	10.10.2.131	636	emartinez
2008	PROXY-01	2026-02-18T23:42:02.268Z	33843	utorrent.exe	CLOSE_WAIT	UDP	10.10.1.13	5985	10.10.3.156	636	jsmith
2009	PROXY-01	2026-02-20T05:24:02.118Z	64948	OneDrive.exe	LISTEN	TCP	10.10.1.13	443	0.0.0.0	0	svc_web
2010	PROXY-01	2026-02-13T21:20:58.560Z	31335	teams.exe	SYN_SENT	TCP	10.10.1.13	8080	75.123.162.145	53	gwhite
2011	PROXY-01	2026-02-10T14:09:33.066Z	2021	lsass.exe	TIME_WAIT	TCP	10.10.1.13	5985	10.10.1.172	636	agarcia
2012	PROXY-01	2026-02-20T06:20:57.646Z	9214	notepad.exe	ESTABLISHED	TCP	10.10.1.13	52735	100.168.247.142	443	idavis
2013	PROXY-01	2026-02-10T17:50:40.021Z	57315	RuntimeBroker.exe	CLOSE_WAIT	TCP	10.10.1.13	53	10.10.1.115	88	admin

209 KiB Raw Blame History

209 KiB

Raw Blame History