mirror of
https://github.com/mblanke/ThreatHunt.git
synced 2026-03-01 05:50:21 -05:00
204 KiB
204 KiB
| 1 | ComputerName | CreateTime | Pid | PPid | Name | CommandLine | Username | MemoryUsage |
|---|---|---|---|---|---|---|---|---|
| 2 | HR-WS-001 | 2026-02-12T10:06:34.315Z | 60870 | 14 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\emartinez | 250928 |
| 3 | HR-WS-001 | 2026-02-19T08:38:47.946Z | 23596 | 37264 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\emartinez | 365399 |
| 4 | HR-WS-001 | 2026-02-16T12:03:51.097Z | 47361 | 17701 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\emartinez | 45600 |
| 5 | HR-WS-001 | 2026-02-15T23:09:10.835Z | 16008 | 48097 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\emartinez | 249301 |
| 6 | HR-WS-001 | 2026-02-15T20:11:09.667Z | 58466 | 46416 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\emartinez | 457525 |
| 7 | HR-WS-001 | 2026-02-16T04:17:25.731Z | 278 | 7505 | teams.exe | C:\Windows\System32\teams.exe | ACME\emartinez | 47458 |
| 8 | HR-WS-001 | 2026-02-17T05:34:43.018Z | 41379 | 51444 | code.exe | C:\Windows\System32\code.exe | ACME\emartinez | 449326 |
| 9 | HR-WS-001 | 2026-02-11T05:51:05.650Z | 46303 | 44714 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\emartinez | 378961 |
| 10 | HR-WS-001 | 2026-02-18T15:05:34.732Z | 15204 | 15412 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\emartinez | 320894 |
| 11 | HR-WS-001 | 2026-02-17T07:07:31.406Z | 21451 | 57602 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\emartinez | 84824 |
| 12 | HR-WS-001 | 2026-02-11T07:26:25.898Z | 13761 | 13340 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\emartinez | 124299 |
| 13 | HR-WS-001 | 2026-02-11T04:23:03.888Z | 11006 | 18154 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\emartinez | 475629 |
| 14 | HR-WS-001 | 2026-02-17T07:17:28.027Z | 29078 | 916 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\emartinez | 461502 |
| 15 | HR-WS-001 | 2026-02-11T20:08:16.320Z | 49805 | 4 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\emartinez | 264858 |
| 16 | HR-WS-001 | 2026-02-14T16:03:53.763Z | 31895 | 20 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 129833 |
| 17 | HR-WS-001 | 2026-02-15T09:19:41.824Z | 48968 | 33516 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\emartinez | 427268 |
| 18 | HR-WS-001 | 2026-02-10T18:14:01.796Z | 40488 | 42428 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\emartinez | 269811 |
| 19 | HR-WS-001 | 2026-02-12T07:59:43.731Z | 47590 | 4595 | System | System | NT AUTHORITY\SYSTEM | 497791 |
| 20 | HR-WS-001 | 2026-02-18T00:05:25.977Z | 11383 | 11416 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 436464 |
| 21 | HR-WS-001 | 2026-02-12T05:15:44.444Z | 33358 | 9387 | services.exe | C:\Windows\System32\services.exe | ACME\emartinez | 29428 |
| 22 | HR-WS-001 | 2026-02-15T17:45:53.312Z | 20104 | 18576 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\emartinez | 346429 |
| 23 | HR-WS-001 | 2026-02-12T19:48:20.393Z | 53454 | 47043 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\emartinez | 167777 |
| 24 | HR-WS-001 | 2026-02-15T10:42:07.641Z | 7454 | 39665 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\emartinez | 408032 |
| 25 | FIN-WS-002 | 2026-02-19T12:10:36.653Z | 6528 | 14 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\hbrown | 308324 |
| 26 | FIN-WS-002 | 2026-02-11T11:51:08.327Z | 23251 | 31282 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\hbrown | 398898 |
| 27 | FIN-WS-002 | 2026-02-13T08:43:40.044Z | 2353 | 52608 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\hbrown | 75069 |
| 28 | FIN-WS-002 | 2026-02-13T21:10:38.731Z | 43918 | 57140 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\hbrown | 327213 |
| 29 | FIN-WS-002 | 2026-02-10T11:42:53.693Z | 38845 | 1217 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\hbrown | 410881 |
| 30 | FIN-WS-002 | 2026-02-12T06:35:39.917Z | 56827 | 41518 | teams.exe | C:\Windows\System32\teams.exe | ACME\hbrown | 155508 |
| 31 | FIN-WS-002 | 2026-02-13T04:44:54.102Z | 10852 | 8823 | code.exe | C:\Windows\System32\code.exe | ACME\hbrown | 52140 |
| 32 | FIN-WS-002 | 2026-02-17T16:37:31.926Z | 32773 | 2964 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\hbrown | 283707 |
| 33 | FIN-WS-002 | 2026-02-17T03:22:10.477Z | 52575 | 51295 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\hbrown | 497169 |
| 34 | FIN-WS-002 | 2026-02-19T04:57:44.356Z | 64621 | 14724 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\hbrown | 412728 |
| 35 | FIN-WS-002 | 2026-02-15T11:36:21.898Z | 6370 | 15734 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\hbrown | 355424 |
| 36 | FIN-WS-002 | 2026-02-13T00:21:40.185Z | 18172 | 13837 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\hbrown | 118551 |
| 37 | FIN-WS-002 | 2026-02-19T18:52:12.933Z | 64781 | 58408 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\hbrown | 441230 |
| 38 | FIN-WS-002 | 2026-02-16T07:29:35.888Z | 22473 | 16 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\hbrown | 175136 |
| 39 | FIN-WS-002 | 2026-02-15T12:30:13.670Z | 46447 | 3 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 117921 |
| 40 | FIN-WS-002 | 2026-02-15T18:08:20.228Z | 16217 | 22868 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\hbrown | 122995 |
| 41 | FIN-WS-002 | 2026-02-12T00:49:22.997Z | 26871 | 32922 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\hbrown | 86091 |
| 42 | FIN-WS-002 | 2026-02-16T21:02:33.601Z | 3172 | 5454 | System | System | NT AUTHORITY\SYSTEM | 176488 |
| 43 | FIN-WS-002 | 2026-02-16T17:17:59.062Z | 56242 | 10320 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 487267 |
| 44 | FIN-WS-002 | 2026-02-16T18:04:02.344Z | 45246 | 31983 | services.exe | C:\Windows\System32\services.exe | ACME\hbrown | 290973 |
| 45 | FIN-WS-002 | 2026-02-14T13:00:40.226Z | 24218 | 18958 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\hbrown | 43666 |
| 46 | FIN-WS-002 | 2026-02-20T06:16:01.299Z | 6156 | 25355 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\hbrown | 5580 |
| 47 | FIN-WS-002 | 2026-02-14T16:15:55.881Z | 41641 | 3608 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\hbrown | 23860 |
| 48 | SLS-WS-003 | 2026-02-13T02:57:25.289Z | 54065 | 5 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\agarcia | 240655 |
| 49 | SLS-WS-003 | 2026-02-17T04:06:20.563Z | 55135 | 50893 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\agarcia | 227887 |
| 50 | SLS-WS-003 | 2026-02-16T23:10:45.048Z | 18743 | 47222 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\agarcia | 178154 |
| 51 | SLS-WS-003 | 2026-02-12T13:16:16.083Z | 43866 | 53654 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\agarcia | 80907 |
| 52 | SLS-WS-003 | 2026-02-11T15:58:02.304Z | 54372 | 37785 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\agarcia | 397572 |
| 53 | SLS-WS-003 | 2026-02-19T14:09:32.063Z | 45720 | 16171 | teams.exe | C:\Windows\System32\teams.exe | ACME\agarcia | 175452 |
| 54 | SLS-WS-003 | 2026-02-19T05:25:12.738Z | 2972 | 41583 | code.exe | C:\Windows\System32\code.exe | ACME\agarcia | 56007 |
| 55 | SLS-WS-003 | 2026-02-13T00:04:18.025Z | 15816 | 17851 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\agarcia | 318607 |
| 56 | SLS-WS-003 | 2026-02-19T21:46:02.023Z | 24805 | 35605 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\agarcia | 463398 |
| 57 | SLS-WS-003 | 2026-02-13T17:33:21.063Z | 53870 | 38108 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\agarcia | 310301 |
| 58 | SLS-WS-003 | 2026-02-16T04:51:17.911Z | 8789 | 53829 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\agarcia | 442395 |
| 59 | SLS-WS-003 | 2026-02-13T07:19:31.506Z | 54184 | 34613 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\agarcia | 494116 |
| 60 | SLS-WS-003 | 2026-02-13T00:08:39.134Z | 38468 | 38994 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\agarcia | 143407 |
| 61 | SLS-WS-003 | 2026-02-13T05:30:05.091Z | 43917 | 19 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\agarcia | 312345 |
| 62 | SLS-WS-003 | 2026-02-13T23:57:00.707Z | 28881 | 5 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 245444 |
| 63 | SLS-WS-003 | 2026-02-17T04:40:41.925Z | 55323 | 9715 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\agarcia | 401343 |
| 64 | SLS-WS-003 | 2026-02-15T10:22:26.214Z | 3708 | 19029 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\agarcia | 413577 |
| 65 | SLS-WS-003 | 2026-02-20T15:54:27.177Z | 54781 | 20195 | System | System | NT AUTHORITY\SYSTEM | 356956 |
| 66 | SLS-WS-003 | 2026-02-19T01:09:30.068Z | 7162 | 29444 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 216991 |
| 67 | SLS-WS-003 | 2026-02-13T00:16:57.691Z | 15234 | 37390 | services.exe | C:\Windows\System32\services.exe | ACME\agarcia | 2017 |
| 68 | SLS-WS-003 | 2026-02-18T19:19:38.007Z | 61790 | 17328 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\agarcia | 171712 |
| 69 | SLS-WS-003 | 2026-02-13T06:52:31.558Z | 6712 | 57312 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\agarcia | 136602 |
| 70 | SLS-WS-003 | 2026-02-17T13:26:28.900Z | 20099 | 27667 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\agarcia | 191395 |
| 71 | ENG-WS-004 | 2026-02-18T00:48:38.454Z | 4570 | 10 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\hbrown | 84936 |
| 72 | ENG-WS-004 | 2026-02-17T15:49:40.358Z | 20879 | 8923 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\hbrown | 269259 |
| 73 | ENG-WS-004 | 2026-02-15T21:32:07.370Z | 49658 | 33576 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\hbrown | 418993 |
| 74 | ENG-WS-004 | 2026-02-14T06:43:35.995Z | 25914 | 19629 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\hbrown | 454318 |
| 75 | ENG-WS-004 | 2026-02-16T04:03:53.150Z | 1225 | 58084 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\hbrown | 121262 |
| 76 | ENG-WS-004 | 2026-02-12T22:30:02.013Z | 58759 | 1731 | teams.exe | C:\Windows\System32\teams.exe | ACME\hbrown | 44127 |
| 77 | ENG-WS-004 | 2026-02-13T09:26:11.376Z | 31272 | 36675 | code.exe | C:\Windows\System32\code.exe | ACME\hbrown | 41100 |
| 78 | ENG-WS-004 | 2026-02-11T08:28:45.943Z | 15671 | 39156 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\hbrown | 408322 |
| 79 | ENG-WS-004 | 2026-02-16T16:20:27.761Z | 28730 | 46165 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\hbrown | 498274 |
| 80 | ENG-WS-004 | 2026-02-13T01:09:29.273Z | 32818 | 22397 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\hbrown | 115732 |
| 81 | ENG-WS-004 | 2026-02-15T09:55:08.539Z | 40420 | 14167 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\hbrown | 254628 |
| 82 | ENG-WS-004 | 2026-02-18T03:06:03.501Z | 58784 | 8783 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\hbrown | 232391 |
| 83 | ENG-WS-004 | 2026-02-20T17:39:33.314Z | 48453 | 8094 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\hbrown | 132808 |
| 84 | ENG-WS-004 | 2026-02-12T00:48:26.473Z | 54878 | 5 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\hbrown | 61624 |
| 85 | ENG-WS-004 | 2026-02-20T10:40:20.754Z | 10858 | 11 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 418236 |
| 86 | ENG-WS-004 | 2026-02-12T10:53:26.173Z | 198 | 47061 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\hbrown | 277352 |
| 87 | ENG-WS-004 | 2026-02-13T04:45:48.980Z | 44494 | 13899 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\hbrown | 52373 |
| 88 | ENG-WS-004 | 2026-02-15T06:42:06.087Z | 12292 | 18972 | System | System | NT AUTHORITY\SYSTEM | 95620 |
| 89 | ENG-WS-004 | 2026-02-19T05:52:09.133Z | 15145 | 56785 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 480094 |
| 90 | ENG-WS-004 | 2026-02-14T23:08:12.655Z | 9683 | 2955 | services.exe | C:\Windows\System32\services.exe | ACME\hbrown | 480223 |
| 91 | ENG-WS-004 | 2026-02-15T08:45:14.931Z | 4611 | 39369 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\hbrown | 114550 |
| 92 | ENG-WS-004 | 2026-02-10T20:19:27.210Z | 54042 | 31393 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\hbrown | 354808 |
| 93 | ENG-WS-004 | 2026-02-14T19:23:57.024Z | 3505 | 56192 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\hbrown | 85536 |
| 94 | LEG-WS-005 | 2026-02-19T17:39:55.046Z | 36606 | 18 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\idavis | 492809 |
| 95 | LEG-WS-005 | 2026-02-12T16:31:42.550Z | 29987 | 13845 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\idavis | 196491 |
| 96 | LEG-WS-005 | 2026-02-20T16:03:29.217Z | 10539 | 6455 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\idavis | 279409 |
| 97 | LEG-WS-005 | 2026-02-12T07:17:50.711Z | 22478 | 34797 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\idavis | 336651 |
| 98 | LEG-WS-005 | 2026-02-14T01:05:40.094Z | 30249 | 24066 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\idavis | 488008 |
| 99 | LEG-WS-005 | 2026-02-18T12:20:12.774Z | 35887 | 58593 | teams.exe | C:\Windows\System32\teams.exe | ACME\idavis | 94989 |
| 100 | LEG-WS-005 | 2026-02-20T04:02:48.315Z | 63626 | 27301 | code.exe | C:\Windows\System32\code.exe | ACME\idavis | 84447 |
| 101 | LEG-WS-005 | 2026-02-15T19:51:43.075Z | 62195 | 5841 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\idavis | 148426 |
| 102 | LEG-WS-005 | 2026-02-18T07:28:05.990Z | 52535 | 50623 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\idavis | 461883 |
| 103 | LEG-WS-005 | 2026-02-10T23:14:03.996Z | 6659 | 47761 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\idavis | 275393 |
| 104 | LEG-WS-005 | 2026-02-15T14:51:00.062Z | 22819 | 50249 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\idavis | 371082 |
| 105 | LEG-WS-005 | 2026-02-15T16:58:24.079Z | 45259 | 38007 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\idavis | 373268 |
| 106 | LEG-WS-005 | 2026-02-15T19:56:32.549Z | 43878 | 6216 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\idavis | 479135 |
| 107 | LEG-WS-005 | 2026-02-16T19:05:19.309Z | 6634 | 20 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\idavis | 96100 |
| 108 | LEG-WS-005 | 2026-02-15T12:13:44.562Z | 36889 | 4 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 467014 |
| 109 | LEG-WS-005 | 2026-02-12T18:47:13.414Z | 46681 | 36818 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\idavis | 71752 |
| 110 | LEG-WS-005 | 2026-02-10T08:31:02.897Z | 51219 | 42208 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\idavis | 134825 |
| 111 | LEG-WS-005 | 2026-02-17T04:30:20.732Z | 12532 | 13238 | System | System | NT AUTHORITY\SYSTEM | 309426 |
| 112 | LEG-WS-005 | 2026-02-19T15:17:46.678Z | 48937 | 43085 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 168355 |
| 113 | LEG-WS-005 | 2026-02-18T18:41:20.923Z | 22343 | 12425 | services.exe | C:\Windows\System32\services.exe | ACME\idavis | 103504 |
| 114 | LEG-WS-005 | 2026-02-16T04:57:34.336Z | 12393 | 18698 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\idavis | 238916 |
| 115 | LEG-WS-005 | 2026-02-18T08:09:48.017Z | 46780 | 6574 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\idavis | 234233 |
| 116 | LEG-WS-005 | 2026-02-10T11:08:43.195Z | 8463 | 41089 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\idavis | 27493 |
| 117 | MKT-WS-006 | 2026-02-12T06:18:39.522Z | 37134 | 7 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\svc_web | 78784 |
| 118 | MKT-WS-006 | 2026-02-12T08:59:37.235Z | 18255 | 50901 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\svc_web | 329567 |
| 119 | MKT-WS-006 | 2026-02-19T01:05:25.454Z | 63744 | 50703 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\svc_web | 17767 |
| 120 | MKT-WS-006 | 2026-02-16T17:13:37.859Z | 56848 | 1700 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\svc_web | 43516 |
| 121 | MKT-WS-006 | 2026-02-20T09:26:50.445Z | 44709 | 48627 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\svc_web | 241958 |
| 122 | MKT-WS-006 | 2026-02-14T06:02:42.015Z | 14843 | 7413 | teams.exe | C:\Windows\System32\teams.exe | ACME\svc_web | 117180 |
| 123 | MKT-WS-006 | 2026-02-17T01:59:08.142Z | 8867 | 19327 | code.exe | C:\Windows\System32\code.exe | ACME\svc_web | 3016 |
| 124 | MKT-WS-006 | 2026-02-17T03:50:00.299Z | 43200 | 33901 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\svc_web | 349645 |
| 125 | MKT-WS-006 | 2026-02-20T08:10:53.797Z | 32733 | 50228 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\svc_web | 161341 |
| 126 | MKT-WS-006 | 2026-02-15T13:40:53.900Z | 16778 | 31565 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\svc_web | 440906 |
| 127 | MKT-WS-006 | 2026-02-10T15:06:02.725Z | 37641 | 48382 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\svc_web | 255796 |
| 128 | MKT-WS-006 | 2026-02-11T17:50:28.126Z | 7887 | 58793 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\svc_web | 478500 |
| 129 | MKT-WS-006 | 2026-02-14T03:27:03.886Z | 59404 | 11045 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\svc_web | 325780 |
| 130 | MKT-WS-006 | 2026-02-20T03:36:30.742Z | 53261 | 18 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\svc_web | 227345 |
| 131 | MKT-WS-006 | 2026-02-20T14:10:02.120Z | 61346 | 20 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 27159 |
| 132 | MKT-WS-006 | 2026-02-19T04:51:16.331Z | 9700 | 19976 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\svc_web | 299292 |
| 133 | MKT-WS-006 | 2026-02-19T01:00:49.917Z | 64932 | 33072 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\svc_web | 346553 |
| 134 | MKT-WS-006 | 2026-02-18T07:18:32.620Z | 11841 | 30951 | System | System | NT AUTHORITY\SYSTEM | 148339 |
| 135 | MKT-WS-006 | 2026-02-16T19:52:17.815Z | 19163 | 42793 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 93551 |
| 136 | MKT-WS-006 | 2026-02-14T07:58:30.964Z | 2545 | 28978 | services.exe | C:\Windows\System32\services.exe | ACME\svc_web | 306635 |
| 137 | MKT-WS-006 | 2026-02-11T03:16:23.572Z | 41289 | 53488 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\svc_web | 76178 |
| 138 | MKT-WS-006 | 2026-02-15T23:06:30.255Z | 53585 | 59476 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\svc_web | 45724 |
| 139 | MKT-WS-006 | 2026-02-16T05:22:07.229Z | 5999 | 50839 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\svc_web | 259500 |
| 140 | EXEC-WS-007 | 2026-02-14T13:25:20.961Z | 7095 | 14 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\emartinez | 449012 |
| 141 | EXEC-WS-007 | 2026-02-20T00:48:20.477Z | 60008 | 3792 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\emartinez | 461992 |
| 142 | EXEC-WS-007 | 2026-02-10T21:09:36.852Z | 35152 | 3266 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\emartinez | 145751 |
| 143 | EXEC-WS-007 | 2026-02-18T03:51:25.181Z | 19548 | 1465 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\emartinez | 245746 |
| 144 | EXEC-WS-007 | 2026-02-10T22:46:25.892Z | 28777 | 25649 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\emartinez | 349869 |
| 145 | EXEC-WS-007 | 2026-02-12T15:34:04.788Z | 56807 | 8387 | teams.exe | C:\Windows\System32\teams.exe | ACME\emartinez | 204952 |
| 146 | EXEC-WS-007 | 2026-02-19T02:54:09.301Z | 9118 | 22349 | code.exe | C:\Windows\System32\code.exe | ACME\emartinez | 193905 |
| 147 | EXEC-WS-007 | 2026-02-20T13:43:43.861Z | 6136 | 1705 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\emartinez | 11167 |
| 148 | EXEC-WS-007 | 2026-02-19T07:04:04.157Z | 14229 | 25392 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\emartinez | 394450 |
| 149 | EXEC-WS-007 | 2026-02-15T05:52:08.797Z | 35321 | 22959 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\emartinez | 164735 |
| 150 | EXEC-WS-007 | 2026-02-18T10:40:54.911Z | 15773 | 38476 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\emartinez | 249948 |
| 151 | EXEC-WS-007 | 2026-02-16T01:10:21.530Z | 42233 | 15617 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\emartinez | 450660 |
| 152 | EXEC-WS-007 | 2026-02-20T10:52:59.349Z | 52395 | 29658 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\emartinez | 429389 |
| 153 | EXEC-WS-007 | 2026-02-18T02:16:18.007Z | 52146 | 3 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\emartinez | 287696 |
| 154 | EXEC-WS-007 | 2026-02-15T13:43:47.928Z | 17760 | 12 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 454942 |
| 155 | EXEC-WS-007 | 2026-02-19T07:14:49.554Z | 25554 | 14968 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\emartinez | 486453 |
| 156 | EXEC-WS-007 | 2026-02-12T03:30:32.581Z | 11657 | 7122 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\emartinez | 423040 |
| 157 | EXEC-WS-007 | 2026-02-11T23:44:02.999Z | 5197 | 35224 | System | System | NT AUTHORITY\SYSTEM | 214434 |
| 158 | EXEC-WS-007 | 2026-02-15T06:38:41.199Z | 12793 | 56020 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 71330 |
| 159 | EXEC-WS-007 | 2026-02-11T12:18:10.784Z | 21740 | 54191 | services.exe | C:\Windows\System32\services.exe | ACME\emartinez | 74081 |
| 160 | EXEC-WS-007 | 2026-02-15T18:19:25.281Z | 39143 | 43600 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\emartinez | 17426 |
| 161 | EXEC-WS-007 | 2026-02-12T11:23:41.365Z | 48854 | 57148 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\emartinez | 396659 |
| 162 | EXEC-WS-007 | 2026-02-10T21:10:46.253Z | 47291 | 5764 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\emartinez | 200594 |
| 163 | IT-WS-008 | 2026-02-10T17:15:51.709Z | 1714 | 12 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\gwhite | 411189 |
| 164 | IT-WS-008 | 2026-02-13T09:42:19.032Z | 29876 | 44231 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\gwhite | 379927 |
| 165 | IT-WS-008 | 2026-02-17T09:07:20.044Z | 61224 | 11530 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\gwhite | 84946 |
| 166 | IT-WS-008 | 2026-02-16T07:56:22.793Z | 56708 | 10088 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\gwhite | 171946 |
| 167 | IT-WS-008 | 2026-02-19T14:28:23.707Z | 18538 | 55730 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\gwhite | 207234 |
| 168 | IT-WS-008 | 2026-02-18T04:51:36.746Z | 22163 | 53633 | teams.exe | C:\Windows\System32\teams.exe | ACME\gwhite | 353556 |
| 169 | IT-WS-008 | 2026-02-14T06:00:53.426Z | 18356 | 32495 | code.exe | C:\Windows\System32\code.exe | ACME\gwhite | 426612 |
| 170 | IT-WS-008 | 2026-02-16T14:28:39.385Z | 5137 | 28444 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\gwhite | 156682 |
| 171 | IT-WS-008 | 2026-02-19T16:50:39.897Z | 24386 | 23293 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\gwhite | 442670 |
| 172 | IT-WS-008 | 2026-02-14T08:13:09.634Z | 3609 | 13620 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\gwhite | 119149 |
| 173 | IT-WS-008 | 2026-02-19T23:21:18.677Z | 23365 | 49112 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\gwhite | 467311 |
| 174 | IT-WS-008 | 2026-02-19T00:15:09.397Z | 18590 | 10491 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\gwhite | 107991 |
| 175 | IT-WS-008 | 2026-02-20T15:02:32.689Z | 28999 | 10533 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\gwhite | 135051 |
| 176 | IT-WS-008 | 2026-02-15T00:58:25.880Z | 28738 | 14 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\gwhite | 202337 |
| 177 | IT-WS-008 | 2026-02-12T01:50:27.282Z | 48947 | 5 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 478918 |
| 178 | IT-WS-008 | 2026-02-14T09:27:36.502Z | 45841 | 31677 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\gwhite | 259503 |
| 179 | IT-WS-008 | 2026-02-14T22:03:13.784Z | 20031 | 42306 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\gwhite | 7246 |
| 180 | IT-WS-008 | 2026-02-14T00:54:55.440Z | 18285 | 52839 | System | System | NT AUTHORITY\SYSTEM | 395081 |
| 181 | IT-WS-008 | 2026-02-18T05:01:55.655Z | 22076 | 10987 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 155293 |
| 182 | IT-WS-008 | 2026-02-12T02:40:29.574Z | 47552 | 49698 | services.exe | C:\Windows\System32\services.exe | ACME\gwhite | 23691 |
| 183 | IT-WS-008 | 2026-02-18T11:25:57.643Z | 23694 | 39249 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\gwhite | 137718 |
| 184 | IT-WS-008 | 2026-02-14T03:33:18.797Z | 63675 | 9754 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\gwhite | 317845 |
| 185 | IT-WS-008 | 2026-02-10T21:08:58.865Z | 29584 | 34991 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\gwhite | 143532 |
| 186 | HR-WS-009 | 2026-02-10T18:00:01.505Z | 40560 | 13 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\agarcia | 340138 |
| 187 | HR-WS-009 | 2026-02-19T04:37:06.088Z | 12489 | 19108 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\agarcia | 422343 |
| 188 | HR-WS-009 | 2026-02-15T09:27:16.774Z | 33626 | 40887 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\agarcia | 496736 |
| 189 | HR-WS-009 | 2026-02-11T11:07:54.421Z | 14656 | 4628 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\agarcia | 25344 |
| 190 | HR-WS-009 | 2026-02-14T07:01:08.176Z | 8151 | 22905 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\agarcia | 180971 |
| 191 | HR-WS-009 | 2026-02-19T13:01:57.427Z | 15471 | 58294 | teams.exe | C:\Windows\System32\teams.exe | ACME\agarcia | 317160 |
| 192 | HR-WS-009 | 2026-02-19T23:44:43.324Z | 24382 | 12232 | code.exe | C:\Windows\System32\code.exe | ACME\agarcia | 51286 |
| 193 | HR-WS-009 | 2026-02-16T23:47:43.598Z | 50709 | 48737 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\agarcia | 498231 |
| 194 | HR-WS-009 | 2026-02-13T05:59:23.287Z | 44785 | 20937 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\agarcia | 97262 |
| 195 | HR-WS-009 | 2026-02-11T07:20:49.395Z | 16816 | 416 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\agarcia | 13037 |
| 196 | HR-WS-009 | 2026-02-13T01:16:42.166Z | 44441 | 48683 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\agarcia | 441750 |
| 197 | HR-WS-009 | 2026-02-16T16:45:59.056Z | 41998 | 30594 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\agarcia | 414660 |
| 198 | HR-WS-009 | 2026-02-15T19:10:10.778Z | 4084 | 46220 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\agarcia | 440241 |
| 199 | HR-WS-009 | 2026-02-15T20:48:21.388Z | 36017 | 1 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\agarcia | 269315 |
| 200 | HR-WS-009 | 2026-02-15T19:49:31.902Z | 15891 | 11 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 393375 |
| 201 | HR-WS-009 | 2026-02-14T00:04:23.109Z | 24297 | 58585 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\agarcia | 264560 |
| 202 | HR-WS-009 | 2026-02-14T18:47:22.796Z | 42363 | 14806 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\agarcia | 169156 |
| 203 | HR-WS-009 | 2026-02-16T04:27:32.628Z | 17330 | 41626 | System | System | NT AUTHORITY\SYSTEM | 196613 |
| 204 | HR-WS-009 | 2026-02-15T00:14:15.929Z | 50269 | 40268 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 297327 |
| 205 | HR-WS-009 | 2026-02-17T17:49:44.755Z | 50690 | 49987 | services.exe | C:\Windows\System32\services.exe | ACME\agarcia | 137308 |
| 206 | HR-WS-009 | 2026-02-17T23:24:45.671Z | 8815 | 23000 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\agarcia | 484404 |
| 207 | HR-WS-009 | 2026-02-16T09:13:36.567Z | 10718 | 41521 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\agarcia | 31341 |
| 208 | HR-WS-009 | 2026-02-19T04:02:09.825Z | 48021 | 50474 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\agarcia | 112695 |
| 209 | FIN-WS-010 | 2026-02-13T17:39:14.828Z | 52349 | 16 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\bwilson | 271101 |
| 210 | FIN-WS-010 | 2026-02-20T12:53:15.999Z | 16865 | 38451 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\bwilson | 465649 |
| 211 | FIN-WS-010 | 2026-02-13T17:57:02.567Z | 44133 | 34702 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\bwilson | 424019 |
| 212 | FIN-WS-010 | 2026-02-19T22:28:01.434Z | 45502 | 58415 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\bwilson | 274962 |
| 213 | FIN-WS-010 | 2026-02-19T10:30:02.388Z | 56582 | 42100 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\bwilson | 476763 |
| 214 | FIN-WS-010 | 2026-02-19T23:36:06.899Z | 52663 | 31636 | teams.exe | C:\Windows\System32\teams.exe | ACME\bwilson | 401035 |
| 215 | FIN-WS-010 | 2026-02-10T22:10:54.230Z | 20903 | 15341 | code.exe | C:\Windows\System32\code.exe | ACME\bwilson | 269240 |
| 216 | FIN-WS-010 | 2026-02-15T20:29:05.760Z | 7111 | 21959 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\bwilson | 285887 |
| 217 | FIN-WS-010 | 2026-02-20T08:51:13.781Z | 56364 | 26580 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\bwilson | 274932 |
| 218 | FIN-WS-010 | 2026-02-19T23:11:53.884Z | 44314 | 51069 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\bwilson | 313164 |
| 219 | FIN-WS-010 | 2026-02-11T11:04:37.041Z | 17240 | 24553 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\bwilson | 444632 |
| 220 | FIN-WS-010 | 2026-02-16T14:36:44.293Z | 62633 | 58769 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\bwilson | 117650 |
| 221 | FIN-WS-010 | 2026-02-19T06:05:06.194Z | 44620 | 59449 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\bwilson | 422268 |
| 222 | FIN-WS-010 | 2026-02-15T08:35:02.567Z | 18673 | 14 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\bwilson | 339559 |
| 223 | FIN-WS-010 | 2026-02-16T18:13:38.530Z | 46885 | 19 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 81923 |
| 224 | FIN-WS-010 | 2026-02-12T02:46:10.640Z | 30519 | 22133 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\bwilson | 231241 |
| 225 | FIN-WS-010 | 2026-02-10T13:04:05.021Z | 59065 | 7014 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\bwilson | 5451 |
| 226 | FIN-WS-010 | 2026-02-17T22:02:48.421Z | 47538 | 9726 | System | System | NT AUTHORITY\SYSTEM | 327492 |
| 227 | FIN-WS-010 | 2026-02-14T04:02:17.295Z | 63102 | 52003 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 322116 |
| 228 | FIN-WS-010 | 2026-02-12T07:37:59.954Z | 42084 | 25374 | services.exe | C:\Windows\System32\services.exe | ACME\bwilson | 39684 |
| 229 | FIN-WS-010 | 2026-02-16T03:52:23.180Z | 52634 | 50325 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\bwilson | 255748 |
| 230 | FIN-WS-010 | 2026-02-10T21:53:49.222Z | 23094 | 29748 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\bwilson | 107931 |
| 231 | FIN-WS-010 | 2026-02-10T18:23:23.971Z | 53488 | 11970 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\bwilson | 377634 |
| 232 | SLS-WS-011 | 2026-02-11T00:16:31.282Z | 14600 | 1 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\agarcia | 164478 |
| 233 | SLS-WS-011 | 2026-02-13T04:23:54.068Z | 52987 | 26796 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\agarcia | 57830 |
| 234 | SLS-WS-011 | 2026-02-11T23:25:43.015Z | 40848 | 31713 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\agarcia | 296926 |
| 235 | SLS-WS-011 | 2026-02-13T08:14:36.374Z | 54577 | 43124 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\agarcia | 345886 |
| 236 | SLS-WS-011 | 2026-02-14T18:50:31.887Z | 3858 | 13949 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\agarcia | 173046 |
| 237 | SLS-WS-011 | 2026-02-14T08:54:04.547Z | 34872 | 1031 | teams.exe | C:\Windows\System32\teams.exe | ACME\agarcia | 410310 |
| 238 | SLS-WS-011 | 2026-02-11T22:25:24.306Z | 47287 | 14657 | code.exe | C:\Windows\System32\code.exe | ACME\agarcia | 383757 |
| 239 | SLS-WS-011 | 2026-02-17T20:46:24.839Z | 50695 | 50770 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\agarcia | 468929 |
| 240 | SLS-WS-011 | 2026-02-10T17:57:02.296Z | 38859 | 17543 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\agarcia | 48940 |
| 241 | SLS-WS-011 | 2026-02-19T00:07:07.185Z | 29988 | 5186 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\agarcia | 464835 |
| 242 | SLS-WS-011 | 2026-02-12T22:06:22.847Z | 2319 | 49279 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\agarcia | 371644 |
| 243 | SLS-WS-011 | 2026-02-16T18:46:37.919Z | 31854 | 1932 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\agarcia | 54156 |
| 244 | SLS-WS-011 | 2026-02-14T15:01:37.370Z | 34770 | 17432 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\agarcia | 241604 |
| 245 | SLS-WS-011 | 2026-02-16T01:58:20.158Z | 38835 | 2 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\agarcia | 250633 |
| 246 | SLS-WS-011 | 2026-02-15T06:56:59.217Z | 52508 | 8 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 334980 |
| 247 | SLS-WS-011 | 2026-02-18T16:29:24.385Z | 7019 | 27372 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\agarcia | 417651 |
| 248 | SLS-WS-011 | 2026-02-13T22:15:32.652Z | 9484 | 29422 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\agarcia | 89834 |
| 249 | SLS-WS-011 | 2026-02-14T15:26:41.962Z | 32234 | 20385 | System | System | NT AUTHORITY\SYSTEM | 25827 |
| 250 | SLS-WS-011 | 2026-02-10T12:03:21.670Z | 5627 | 2926 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 210589 |
| 251 | SLS-WS-011 | 2026-02-19T20:01:32.903Z | 41863 | 40028 | services.exe | C:\Windows\System32\services.exe | ACME\agarcia | 428262 |
| 252 | SLS-WS-011 | 2026-02-13T09:00:50.844Z | 29101 | 30944 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\agarcia | 1873 |
| 253 | SLS-WS-011 | 2026-02-15T03:29:14.548Z | 39054 | 45256 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\agarcia | 34048 |
| 254 | SLS-WS-011 | 2026-02-11T17:03:58.631Z | 33761 | 14217 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\agarcia | 331178 |
| 255 | ENG-WS-012 | 2026-02-18T01:55:02.222Z | 26198 | 13 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\svc_sql | 38430 |
| 256 | ENG-WS-012 | 2026-02-14T06:28:54.747Z | 35763 | 669 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\svc_sql | 2718 |
| 257 | ENG-WS-012 | 2026-02-13T20:40:59.097Z | 34614 | 59764 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\svc_sql | 128779 |
| 258 | ENG-WS-012 | 2026-02-10T18:15:13.177Z | 53234 | 29838 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\svc_sql | 262972 |
| 259 | ENG-WS-012 | 2026-02-10T13:10:13.572Z | 4186 | 54452 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\svc_sql | 4259 |
| 260 | ENG-WS-012 | 2026-02-18T03:34:25.432Z | 60341 | 9908 | teams.exe | C:\Windows\System32\teams.exe | ACME\svc_sql | 70444 |
| 261 | ENG-WS-012 | 2026-02-12T02:19:06.647Z | 47607 | 7749 | code.exe | C:\Windows\System32\code.exe | ACME\svc_sql | 208519 |
| 262 | ENG-WS-012 | 2026-02-12T14:32:39.699Z | 36774 | 54414 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\svc_sql | 495905 |
| 263 | ENG-WS-012 | 2026-02-13T15:39:27.914Z | 40342 | 2841 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\svc_sql | 443978 |
| 264 | ENG-WS-012 | 2026-02-11T14:28:25.204Z | 48937 | 2443 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\svc_sql | 437354 |
| 265 | ENG-WS-012 | 2026-02-19T20:36:55.189Z | 5123 | 49997 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\svc_sql | 287314 |
| 266 | ENG-WS-012 | 2026-02-17T23:29:04.639Z | 59650 | 4567 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\svc_sql | 297924 |
| 267 | ENG-WS-012 | 2026-02-13T03:09:08.026Z | 12940 | 51854 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\svc_sql | 309316 |
| 268 | ENG-WS-012 | 2026-02-18T11:43:28.954Z | 7433 | 1 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\svc_sql | 481216 |
| 269 | ENG-WS-012 | 2026-02-16T17:59:56.225Z | 30456 | 14 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 473405 |
| 270 | ENG-WS-012 | 2026-02-11T00:11:39.308Z | 31351 | 55352 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\svc_sql | 440796 |
| 271 | ENG-WS-012 | 2026-02-13T06:24:11.241Z | 64373 | 7301 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\svc_sql | 160887 |
| 272 | ENG-WS-012 | 2026-02-18T13:52:13.813Z | 5300 | 5445 | System | System | NT AUTHORITY\SYSTEM | 493926 |
| 273 | ENG-WS-012 | 2026-02-12T17:20:34.834Z | 51018 | 27988 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 95119 |
| 274 | ENG-WS-012 | 2026-02-18T01:55:16.158Z | 36711 | 9918 | services.exe | C:\Windows\System32\services.exe | ACME\svc_sql | 191236 |
| 275 | ENG-WS-012 | 2026-02-14T07:17:00.745Z | 7444 | 37286 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\svc_sql | 406303 |
| 276 | ENG-WS-012 | 2026-02-20T10:29:06.649Z | 8955 | 59875 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\svc_sql | 310392 |
| 277 | ENG-WS-012 | 2026-02-15T14:43:02.556Z | 61500 | 21684 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\svc_sql | 203475 |
| 278 | ENG-WS-012 | 2026-02-11T20:27:48.469Z | 14123 | 58967 | discord.exe | C:\Users\svc_sql\AppData\Local\discord\discord.exe | ACME\svc_sql | 304112 |
| 279 | LEG-WS-013 | 2026-02-18T19:11:08.615Z | 56961 | 5 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\jsmith | 133766 |
| 280 | LEG-WS-013 | 2026-02-18T12:40:24.053Z | 56054 | 19854 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\jsmith | 313010 |
| 281 | LEG-WS-013 | 2026-02-13T17:42:35.509Z | 25690 | 20818 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\jsmith | 83362 |
| 282 | LEG-WS-013 | 2026-02-19T22:53:15.389Z | 46375 | 18149 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\jsmith | 83170 |
| 283 | LEG-WS-013 | 2026-02-11T04:54:25.620Z | 59151 | 47023 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\jsmith | 272739 |
| 284 | LEG-WS-013 | 2026-02-11T19:28:49.857Z | 43574 | 52054 | teams.exe | C:\Windows\System32\teams.exe | ACME\jsmith | 171731 |
| 285 | LEG-WS-013 | 2026-02-13T01:50:37.081Z | 54745 | 52495 | code.exe | C:\Windows\System32\code.exe | ACME\jsmith | 276209 |
| 286 | LEG-WS-013 | 2026-02-17T13:49:44.478Z | 3403 | 21814 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\jsmith | 497802 |
| 287 | LEG-WS-013 | 2026-02-19T01:16:52.502Z | 22728 | 40580 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\jsmith | 173349 |
| 288 | LEG-WS-013 | 2026-02-12T02:39:26.392Z | 229 | 57780 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\jsmith | 75289 |
| 289 | LEG-WS-013 | 2026-02-17T02:42:43.447Z | 63564 | 16604 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\jsmith | 73542 |
| 290 | LEG-WS-013 | 2026-02-12T21:16:37.113Z | 27555 | 14207 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\jsmith | 197526 |
| 291 | LEG-WS-013 | 2026-02-11T12:50:31.741Z | 11859 | 14986 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\jsmith | 243740 |
| 292 | LEG-WS-013 | 2026-02-13T07:52:14.367Z | 41345 | 11 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\jsmith | 233090 |
| 293 | LEG-WS-013 | 2026-02-19T02:57:57.793Z | 32719 | 4 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 102890 |
| 294 | LEG-WS-013 | 2026-02-11T22:38:34.373Z | 10168 | 256 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\jsmith | 211064 |
| 295 | LEG-WS-013 | 2026-02-12T11:35:22.358Z | 6004 | 45333 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\jsmith | 421493 |
| 296 | LEG-WS-013 | 2026-02-10T11:35:11.773Z | 41884 | 8636 | System | System | NT AUTHORITY\SYSTEM | 56528 |
| 297 | LEG-WS-013 | 2026-02-14T15:49:48.775Z | 51096 | 34441 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 224009 |
| 298 | LEG-WS-013 | 2026-02-18T12:27:41.246Z | 54606 | 48074 | services.exe | C:\Windows\System32\services.exe | ACME\jsmith | 243370 |
| 299 | LEG-WS-013 | 2026-02-15T17:30:56.418Z | 18454 | 20234 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\jsmith | 88693 |
| 300 | LEG-WS-013 | 2026-02-18T02:23:24.464Z | 11757 | 33541 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\jsmith | 291814 |
| 301 | LEG-WS-013 | 2026-02-19T20:00:17.670Z | 812 | 32802 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\jsmith | 323430 |
| 302 | LEG-WS-013 | 2026-02-16T17:02:05.312Z | 25098 | 2150 | steam.exe | C:\Users\jsmith\AppData\Local\steam\steam.exe | ACME\jsmith | 353358 |
| 303 | MKT-WS-014 | 2026-02-19T08:44:27.057Z | 27455 | 13 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\fthompson | 398247 |
| 304 | MKT-WS-014 | 2026-02-12T03:39:31.236Z | 54935 | 28738 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\fthompson | 199384 |
| 305 | MKT-WS-014 | 2026-02-11T23:09:52.911Z | 2173 | 41569 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\fthompson | 416279 |
| 306 | MKT-WS-014 | 2026-02-19T04:14:58.681Z | 46568 | 39990 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\fthompson | 496723 |
| 307 | MKT-WS-014 | 2026-02-19T03:05:08.267Z | 42747 | 20539 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\fthompson | 314662 |
| 308 | MKT-WS-014 | 2026-02-20T13:11:10.245Z | 4692 | 59536 | teams.exe | C:\Windows\System32\teams.exe | ACME\fthompson | 22815 |
| 309 | MKT-WS-014 | 2026-02-17T18:41:33.691Z | 16943 | 52005 | code.exe | C:\Windows\System32\code.exe | ACME\fthompson | 65516 |
| 310 | MKT-WS-014 | 2026-02-13T10:27:04.703Z | 64586 | 27299 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\fthompson | 313161 |
| 311 | MKT-WS-014 | 2026-02-13T00:15:28.497Z | 21572 | 56783 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\fthompson | 436420 |
| 312 | MKT-WS-014 | 2026-02-16T23:29:15.046Z | 63676 | 21119 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\fthompson | 445989 |
| 313 | MKT-WS-014 | 2026-02-13T12:10:15.638Z | 17446 | 48131 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\fthompson | 214427 |
| 314 | MKT-WS-014 | 2026-02-15T03:27:15.395Z | 22655 | 30756 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\fthompson | 497308 |
| 315 | MKT-WS-014 | 2026-02-17T11:57:59.655Z | 7835 | 16164 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\fthompson | 472989 |
| 316 | MKT-WS-014 | 2026-02-11T11:48:54.509Z | 41602 | 15 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\fthompson | 104581 |
| 317 | MKT-WS-014 | 2026-02-15T04:23:50.990Z | 16789 | 6 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 392342 |
| 318 | MKT-WS-014 | 2026-02-16T22:54:10.956Z | 38242 | 13986 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\fthompson | 92519 |
| 319 | MKT-WS-014 | 2026-02-19T04:13:38.114Z | 34252 | 59667 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\fthompson | 404596 |
| 320 | MKT-WS-014 | 2026-02-20T02:19:15.229Z | 14188 | 9669 | System | System | NT AUTHORITY\SYSTEM | 408317 |
| 321 | MKT-WS-014 | 2026-02-15T05:06:35.686Z | 11472 | 52910 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 199005 |
| 322 | MKT-WS-014 | 2026-02-13T00:15:52.770Z | 28034 | 21098 | services.exe | C:\Windows\System32\services.exe | ACME\fthompson | 385659 |
| 323 | MKT-WS-014 | 2026-02-13T08:22:58.122Z | 35115 | 41490 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\fthompson | 262968 |
| 324 | MKT-WS-014 | 2026-02-18T08:07:11.530Z | 56542 | 20096 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\fthompson | 404958 |
| 325 | MKT-WS-014 | 2026-02-20T13:11:41.444Z | 52463 | 19081 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\fthompson | 362045 |
| 326 | EXEC-WS-015 | 2026-02-12T07:16:34.268Z | 18131 | 2 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\admin | 383512 |
| 327 | EXEC-WS-015 | 2026-02-10T14:58:42.656Z | 2070 | 47291 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\admin | 338246 |
| 328 | EXEC-WS-015 | 2026-02-13T11:03:46.370Z | 6661 | 55791 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\admin | 202741 |
| 329 | EXEC-WS-015 | 2026-02-18T05:12:05.406Z | 27344 | 21488 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\admin | 468943 |
| 330 | EXEC-WS-015 | 2026-02-13T09:28:16.971Z | 63340 | 37026 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\admin | 472422 |
| 331 | EXEC-WS-015 | 2026-02-16T02:31:55.292Z | 60092 | 13288 | teams.exe | C:\Windows\System32\teams.exe | ACME\admin | 291024 |
| 332 | EXEC-WS-015 | 2026-02-11T18:06:45.274Z | 11385 | 14195 | code.exe | C:\Windows\System32\code.exe | ACME\admin | 131486 |
| 333 | EXEC-WS-015 | 2026-02-20T07:06:16.524Z | 20131 | 51838 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\admin | 380212 |
| 334 | EXEC-WS-015 | 2026-02-13T23:16:38.036Z | 16136 | 14410 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\admin | 219775 |
| 335 | EXEC-WS-015 | 2026-02-12T00:28:40.291Z | 33831 | 53122 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\admin | 70495 |
| 336 | EXEC-WS-015 | 2026-02-15T18:57:50.054Z | 50837 | 49997 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\admin | 385997 |
| 337 | EXEC-WS-015 | 2026-02-18T19:59:31.154Z | 50246 | 27323 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\admin | 404917 |
| 338 | EXEC-WS-015 | 2026-02-14T04:08:49.061Z | 31837 | 44064 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\admin | 318109 |
| 339 | EXEC-WS-015 | 2026-02-17T06:08:05.088Z | 59189 | 5 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\admin | 413756 |
| 340 | EXEC-WS-015 | 2026-02-19T02:19:08.020Z | 64179 | 8 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 323328 |
| 341 | EXEC-WS-015 | 2026-02-11T12:15:37.637Z | 35959 | 147 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\admin | 123057 |
| 342 | EXEC-WS-015 | 2026-02-15T04:40:53.496Z | 53149 | 41751 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\admin | 209019 |
| 343 | EXEC-WS-015 | 2026-02-16T16:52:21.003Z | 4898 | 52026 | System | System | NT AUTHORITY\SYSTEM | 472986 |
| 344 | EXEC-WS-015 | 2026-02-15T02:13:59.320Z | 24048 | 44139 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 5233 |
| 345 | EXEC-WS-015 | 2026-02-19T11:09:43.443Z | 6607 | 20462 | services.exe | C:\Windows\System32\services.exe | ACME\admin | 61421 |
| 346 | EXEC-WS-015 | 2026-02-14T01:02:01.950Z | 60744 | 5276 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\admin | 405792 |
| 347 | EXEC-WS-015 | 2026-02-16T23:10:37.489Z | 34724 | 7174 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\admin | 440234 |
| 348 | EXEC-WS-015 | 2026-02-11T01:17:00.230Z | 10177 | 13984 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\admin | 128609 |
| 349 | IT-WS-016 | 2026-02-11T12:17:19.240Z | 36067 | 3 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\bwilson | 286948 |
| 350 | IT-WS-016 | 2026-02-17T20:36:19.420Z | 30420 | 57463 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\bwilson | 213366 |
| 351 | IT-WS-016 | 2026-02-16T08:12:50.011Z | 22243 | 2659 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\bwilson | 34686 |
| 352 | IT-WS-016 | 2026-02-19T16:35:24.801Z | 24765 | 13337 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\bwilson | 236161 |
| 353 | IT-WS-016 | 2026-02-14T03:04:21.173Z | 57803 | 41884 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\bwilson | 194551 |
| 354 | IT-WS-016 | 2026-02-18T21:04:05.474Z | 58229 | 28881 | teams.exe | C:\Windows\System32\teams.exe | ACME\bwilson | 318481 |
| 355 | IT-WS-016 | 2026-02-18T05:55:43.794Z | 49462 | 51582 | code.exe | C:\Windows\System32\code.exe | ACME\bwilson | 64340 |
| 356 | IT-WS-016 | 2026-02-14T04:39:38.932Z | 57231 | 52691 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\bwilson | 21194 |
| 357 | IT-WS-016 | 2026-02-16T03:09:56.255Z | 43061 | 39657 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\bwilson | 49508 |
| 358 | IT-WS-016 | 2026-02-17T01:06:56.344Z | 4171 | 2094 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\bwilson | 449268 |
| 359 | IT-WS-016 | 2026-02-12T15:14:23.864Z | 17454 | 19426 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\bwilson | 19632 |
| 360 | IT-WS-016 | 2026-02-15T10:01:49.655Z | 9218 | 30209 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\bwilson | 73546 |
| 361 | IT-WS-016 | 2026-02-17T09:20:01.416Z | 49252 | 1026 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\bwilson | 177131 |
| 362 | IT-WS-016 | 2026-02-13T08:16:30.496Z | 26116 | 19 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\bwilson | 235102 |
| 363 | IT-WS-016 | 2026-02-16T21:07:38.074Z | 42255 | 14 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 291274 |
| 364 | IT-WS-016 | 2026-02-16T22:13:32.564Z | 658 | 54770 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\bwilson | 91795 |
| 365 | IT-WS-016 | 2026-02-12T09:25:04.023Z | 25177 | 56690 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\bwilson | 87511 |
| 366 | IT-WS-016 | 2026-02-18T18:27:47.162Z | 57203 | 25893 | System | System | NT AUTHORITY\SYSTEM | 219747 |
| 367 | IT-WS-016 | 2026-02-17T13:44:38.520Z | 48373 | 14932 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 53692 |
| 368 | IT-WS-016 | 2026-02-12T21:37:15.617Z | 5848 | 20376 | services.exe | C:\Windows\System32\services.exe | ACME\bwilson | 392459 |
| 369 | IT-WS-016 | 2026-02-13T20:55:34.834Z | 4124 | 30167 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\bwilson | 451673 |
| 370 | IT-WS-016 | 2026-02-19T08:08:51.713Z | 39207 | 33060 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\bwilson | 462350 |
| 371 | IT-WS-016 | 2026-02-20T16:07:31.676Z | 56535 | 31278 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\bwilson | 145895 |
| 372 | IT-WS-016 | 2026-02-14T19:58:06.617Z | 29125 | 8883 | qbittorrent.exe | C:\Users\bwilson\AppData\Local\qbittorrent\qbittorrent.exe | ACME\bwilson | 360336 |
| 373 | HR-WS-017 | 2026-02-17T07:33:56.532Z | 2114 | 13 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\cjohnson | 420874 |
| 374 | HR-WS-017 | 2026-02-14T07:21:57.589Z | 16960 | 47976 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\cjohnson | 59753 |
| 375 | HR-WS-017 | 2026-02-15T14:33:10.828Z | 18534 | 13125 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\cjohnson | 106813 |
| 376 | HR-WS-017 | 2026-02-17T21:57:11.621Z | 54739 | 59420 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\cjohnson | 458245 |
| 377 | HR-WS-017 | 2026-02-14T15:15:26.888Z | 48988 | 4244 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\cjohnson | 158553 |
| 378 | HR-WS-017 | 2026-02-11T17:35:27.693Z | 46543 | 47562 | teams.exe | C:\Windows\System32\teams.exe | ACME\cjohnson | 284252 |
| 379 | HR-WS-017 | 2026-02-19T00:16:36.780Z | 47696 | 39098 | code.exe | C:\Windows\System32\code.exe | ACME\cjohnson | 477224 |
| 380 | HR-WS-017 | 2026-02-10T20:46:40.691Z | 20457 | 57252 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\cjohnson | 280103 |
| 381 | HR-WS-017 | 2026-02-15T06:38:36.829Z | 18737 | 43133 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\cjohnson | 130064 |
| 382 | HR-WS-017 | 2026-02-16T09:59:21.846Z | 36645 | 51905 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\cjohnson | 257175 |
| 383 | HR-WS-017 | 2026-02-11T17:23:44.532Z | 57583 | 22123 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\cjohnson | 267519 |
| 384 | HR-WS-017 | 2026-02-15T09:04:50.171Z | 62270 | 38729 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\cjohnson | 432825 |
| 385 | HR-WS-017 | 2026-02-13T12:17:46.593Z | 10712 | 42809 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\cjohnson | 429284 |
| 386 | HR-WS-017 | 2026-02-19T20:07:24.298Z | 39888 | 15 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\cjohnson | 292450 |
| 387 | HR-WS-017 | 2026-02-15T23:47:59.921Z | 61874 | 19 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 99136 |
| 388 | HR-WS-017 | 2026-02-13T07:56:01.931Z | 60771 | 52372 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\cjohnson | 181810 |
| 389 | HR-WS-017 | 2026-02-10T14:35:42.429Z | 45446 | 19439 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\cjohnson | 342455 |
| 390 | HR-WS-017 | 2026-02-11T21:50:40.487Z | 61556 | 18421 | System | System | NT AUTHORITY\SYSTEM | 12206 |
| 391 | HR-WS-017 | 2026-02-13T11:03:06.046Z | 717 | 7490 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 311167 |
| 392 | HR-WS-017 | 2026-02-11T13:36:47.744Z | 40148 | 26278 | services.exe | C:\Windows\System32\services.exe | ACME\cjohnson | 400042 |
| 393 | HR-WS-017 | 2026-02-15T06:18:20.737Z | 54471 | 54942 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\cjohnson | 277190 |
| 394 | HR-WS-017 | 2026-02-13T05:56:28.940Z | 21184 | 52542 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\cjohnson | 110465 |
| 395 | HR-WS-017 | 2026-02-19T01:03:15.781Z | 37184 | 48525 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\cjohnson | 17458 |
| 396 | FIN-WS-018 | 2026-02-16T00:35:53.641Z | 46202 | 20 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\gwhite | 202527 |
| 397 | FIN-WS-018 | 2026-02-20T12:07:02.885Z | 61278 | 8492 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\gwhite | 227053 |
| 398 | FIN-WS-018 | 2026-02-19T04:23:48.674Z | 39064 | 11681 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\gwhite | 113721 |
| 399 | FIN-WS-018 | 2026-02-13T20:36:03.450Z | 15626 | 37227 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\gwhite | 127502 |
| 400 | FIN-WS-018 | 2026-02-19T00:45:35.895Z | 60811 | 48005 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\gwhite | 18078 |
| 401 | FIN-WS-018 | 2026-02-16T21:12:31.720Z | 48993 | 44118 | teams.exe | C:\Windows\System32\teams.exe | ACME\gwhite | 68054 |
| 402 | FIN-WS-018 | 2026-02-18T00:33:29.863Z | 42983 | 22802 | code.exe | C:\Windows\System32\code.exe | ACME\gwhite | 495075 |
| 403 | FIN-WS-018 | 2026-02-13T19:40:07.323Z | 12901 | 39083 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\gwhite | 346407 |
| 404 | FIN-WS-018 | 2026-02-16T23:53:58.722Z | 12112 | 56877 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\gwhite | 210902 |
| 405 | FIN-WS-018 | 2026-02-15T01:36:27.393Z | 45529 | 13609 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\gwhite | 432137 |
| 406 | FIN-WS-018 | 2026-02-18T02:35:09.990Z | 32048 | 43890 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\gwhite | 56342 |
| 407 | FIN-WS-018 | 2026-02-14T01:41:57.300Z | 11615 | 53652 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\gwhite | 164316 |
| 408 | FIN-WS-018 | 2026-02-17T19:50:53.310Z | 23833 | 34888 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\gwhite | 257661 |
| 409 | FIN-WS-018 | 2026-02-11T14:45:11.719Z | 52968 | 2 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\gwhite | 50816 |
| 410 | FIN-WS-018 | 2026-02-10T23:37:39.565Z | 48471 | 4 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 185078 |
| 411 | FIN-WS-018 | 2026-02-12T19:24:14.406Z | 8090 | 32247 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\gwhite | 109152 |
| 412 | FIN-WS-018 | 2026-02-12T09:01:43.336Z | 24010 | 36615 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\gwhite | 75509 |
| 413 | FIN-WS-018 | 2026-02-19T00:04:36.226Z | 58532 | 19366 | System | System | NT AUTHORITY\SYSTEM | 332362 |
| 414 | FIN-WS-018 | 2026-02-13T20:13:31.988Z | 11657 | 8248 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 179173 |
| 415 | FIN-WS-018 | 2026-02-13T13:15:22.942Z | 28197 | 38054 | services.exe | C:\Windows\System32\services.exe | ACME\gwhite | 116513 |
| 416 | FIN-WS-018 | 2026-02-19T13:28:35.064Z | 36354 | 32571 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\gwhite | 250373 |
| 417 | FIN-WS-018 | 2026-02-20T00:57:08.684Z | 4682 | 30089 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\gwhite | 122124 |
| 418 | FIN-WS-018 | 2026-02-19T13:00:10.930Z | 21311 | 44932 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\gwhite | 114139 |
| 419 | SLS-WS-019 | 2026-02-17T10:12:50.508Z | 43946 | 17 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\svc_backup | 44972 |
| 420 | SLS-WS-019 | 2026-02-19T20:29:44.228Z | 59933 | 3796 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\svc_backup | 411782 |
| 421 | SLS-WS-019 | 2026-02-15T22:37:45.297Z | 53898 | 18358 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\svc_backup | 405391 |
| 422 | SLS-WS-019 | 2026-02-13T18:41:56.794Z | 50963 | 11510 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\svc_backup | 84411 |
| 423 | SLS-WS-019 | 2026-02-15T08:58:38.614Z | 47389 | 59646 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\svc_backup | 321317 |
| 424 | SLS-WS-019 | 2026-02-13T06:09:19.108Z | 27922 | 51614 | teams.exe | C:\Windows\System32\teams.exe | ACME\svc_backup | 354035 |
| 425 | SLS-WS-019 | 2026-02-19T05:54:29.323Z | 51135 | 13344 | code.exe | C:\Windows\System32\code.exe | ACME\svc_backup | 226709 |
| 426 | SLS-WS-019 | 2026-02-11T22:33:06.687Z | 5503 | 50382 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\svc_backup | 338727 |
| 427 | SLS-WS-019 | 2026-02-11T19:17:59.622Z | 39386 | 40495 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\svc_backup | 289063 |
| 428 | SLS-WS-019 | 2026-02-15T21:22:59.650Z | 27670 | 43415 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\svc_backup | 379742 |
| 429 | SLS-WS-019 | 2026-02-16T03:35:19.692Z | 46215 | 31271 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\svc_backup | 81329 |
| 430 | SLS-WS-019 | 2026-02-15T06:01:44.699Z | 43789 | 45624 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\svc_backup | 174308 |
| 431 | SLS-WS-019 | 2026-02-12T15:33:29.318Z | 6843 | 20710 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\svc_backup | 345643 |
| 432 | SLS-WS-019 | 2026-02-10T19:47:05.631Z | 28918 | 5 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\svc_backup | 310313 |
| 433 | SLS-WS-019 | 2026-02-10T17:01:56.693Z | 28908 | 12 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 202260 |
| 434 | SLS-WS-019 | 2026-02-16T12:11:45.301Z | 24708 | 40467 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\svc_backup | 359672 |
| 435 | SLS-WS-019 | 2026-02-11T16:06:28.610Z | 61260 | 42151 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\svc_backup | 385231 |
| 436 | SLS-WS-019 | 2026-02-20T09:27:07.645Z | 35916 | 20660 | System | System | NT AUTHORITY\SYSTEM | 388070 |
| 437 | SLS-WS-019 | 2026-02-13T18:24:27.119Z | 26038 | 34046 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 452549 |
| 438 | SLS-WS-019 | 2026-02-11T03:40:49.118Z | 18141 | 19191 | services.exe | C:\Windows\System32\services.exe | ACME\svc_backup | 150778 |
| 439 | SLS-WS-019 | 2026-02-12T19:08:35.845Z | 53945 | 37577 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\svc_backup | 53111 |
| 440 | SLS-WS-019 | 2026-02-11T04:56:55.155Z | 50291 | 59426 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\svc_backup | 168713 |
| 441 | SLS-WS-019 | 2026-02-16T23:18:14.942Z | 25103 | 49696 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\svc_backup | 285150 |
| 442 | ENG-WS-020 | 2026-02-18T03:07:46.049Z | 11250 | 13 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\jsmith | 66655 |
| 443 | ENG-WS-020 | 2026-02-10T18:19:19.091Z | 6613 | 34040 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\jsmith | 376713 |
| 444 | ENG-WS-020 | 2026-02-18T12:14:23.538Z | 45528 | 43113 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\jsmith | 376291 |
| 445 | ENG-WS-020 | 2026-02-20T12:14:06.209Z | 16190 | 49264 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\jsmith | 132003 |
| 446 | ENG-WS-020 | 2026-02-17T11:11:07.202Z | 11226 | 15231 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\jsmith | 388841 |
| 447 | ENG-WS-020 | 2026-02-13T17:20:03.875Z | 8121 | 36135 | teams.exe | C:\Windows\System32\teams.exe | ACME\jsmith | 91054 |
| 448 | ENG-WS-020 | 2026-02-17T04:47:37.454Z | 9577 | 39073 | code.exe | C:\Windows\System32\code.exe | ACME\jsmith | 225178 |
| 449 | ENG-WS-020 | 2026-02-14T11:44:39.210Z | 53783 | 23306 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\jsmith | 105498 |
| 450 | ENG-WS-020 | 2026-02-10T23:27:29.459Z | 45664 | 58756 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\jsmith | 231823 |
| 451 | ENG-WS-020 | 2026-02-12T20:06:46.341Z | 48247 | 53303 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\jsmith | 326145 |
| 452 | ENG-WS-020 | 2026-02-11T03:38:00.825Z | 33887 | 28790 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\jsmith | 352380 |
| 453 | ENG-WS-020 | 2026-02-13T08:16:57.046Z | 19169 | 33599 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\jsmith | 169484 |
| 454 | ENG-WS-020 | 2026-02-13T12:58:48.731Z | 62571 | 17856 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\jsmith | 457025 |
| 455 | ENG-WS-020 | 2026-02-10T08:59:38.740Z | 13130 | 1 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\jsmith | 339573 |
| 456 | ENG-WS-020 | 2026-02-18T19:43:06.618Z | 19252 | 11 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 401216 |
| 457 | ENG-WS-020 | 2026-02-18T00:31:18.134Z | 58913 | 29638 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\jsmith | 246850 |
| 458 | ENG-WS-020 | 2026-02-11T14:16:35.342Z | 60411 | 19171 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\jsmith | 466928 |
| 459 | ENG-WS-020 | 2026-02-14T17:01:37.726Z | 19334 | 58997 | System | System | NT AUTHORITY\SYSTEM | 441857 |
| 460 | ENG-WS-020 | 2026-02-18T13:51:34.495Z | 49138 | 54170 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 456009 |
| 461 | ENG-WS-020 | 2026-02-12T12:29:30.591Z | 6671 | 32961 | services.exe | C:\Windows\System32\services.exe | ACME\jsmith | 211460 |
| 462 | ENG-WS-020 | 2026-02-18T05:26:31.406Z | 16122 | 13249 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\jsmith | 465360 |
| 463 | ENG-WS-020 | 2026-02-19T06:50:27.507Z | 24144 | 14628 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\jsmith | 499935 |
| 464 | ENG-WS-020 | 2026-02-17T16:26:51.403Z | 58353 | 15974 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\jsmith | 104231 |
| 465 | ENG-WS-020 | 2026-02-17T23:38:56.904Z | 40364 | 45156 | discord.exe | C:\Users\jsmith\AppData\Local\discord\discord.exe | ACME\jsmith | 315104 |
| 466 | LEG-WS-021 | 2026-02-19T10:41:24.659Z | 24986 | 13 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\svc_web | 238638 |
| 467 | LEG-WS-021 | 2026-02-18T22:49:21.246Z | 3924 | 12344 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\svc_web | 455248 |
| 468 | LEG-WS-021 | 2026-02-15T02:07:15.253Z | 22156 | 1622 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\svc_web | 201192 |
| 469 | LEG-WS-021 | 2026-02-10T19:09:09.852Z | 28128 | 28067 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\svc_web | 203689 |
| 470 | LEG-WS-021 | 2026-02-17T08:26:43.707Z | 37821 | 42091 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\svc_web | 11132 |
| 471 | LEG-WS-021 | 2026-02-17T17:57:32.792Z | 33890 | 23760 | teams.exe | C:\Windows\System32\teams.exe | ACME\svc_web | 224652 |
| 472 | LEG-WS-021 | 2026-02-14T17:12:55.056Z | 5465 | 3196 | code.exe | C:\Windows\System32\code.exe | ACME\svc_web | 324133 |
| 473 | LEG-WS-021 | 2026-02-13T22:32:07.337Z | 26953 | 24509 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\svc_web | 445297 |
| 474 | LEG-WS-021 | 2026-02-11T17:59:10.562Z | 48285 | 13809 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\svc_web | 401183 |
| 475 | LEG-WS-021 | 2026-02-15T12:06:47.207Z | 64190 | 16788 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\svc_web | 454872 |
| 476 | LEG-WS-021 | 2026-02-17T17:17:04.663Z | 7131 | 42600 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\svc_web | 34636 |
| 477 | LEG-WS-021 | 2026-02-13T04:00:19.922Z | 11938 | 44172 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\svc_web | 354588 |
| 478 | LEG-WS-021 | 2026-02-13T00:59:55.842Z | 49419 | 55008 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\svc_web | 299241 |
| 479 | LEG-WS-021 | 2026-02-13T06:53:00.219Z | 28670 | 17 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\svc_web | 443411 |
| 480 | LEG-WS-021 | 2026-02-16T09:46:00.774Z | 13885 | 11 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 405755 |
| 481 | LEG-WS-021 | 2026-02-10T09:46:51.056Z | 25513 | 3382 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\svc_web | 463375 |
| 482 | LEG-WS-021 | 2026-02-17T05:01:18.704Z | 4507 | 36287 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\svc_web | 82488 |
| 483 | LEG-WS-021 | 2026-02-15T16:24:40.175Z | 606 | 59192 | System | System | NT AUTHORITY\SYSTEM | 56428 |
| 484 | LEG-WS-021 | 2026-02-12T14:10:57.874Z | 25493 | 41530 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 466270 |
| 485 | LEG-WS-021 | 2026-02-16T12:06:15.128Z | 36236 | 8079 | services.exe | C:\Windows\System32\services.exe | ACME\svc_web | 373753 |
| 486 | LEG-WS-021 | 2026-02-16T21:51:04.165Z | 44468 | 38223 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\svc_web | 77095 |
| 487 | LEG-WS-021 | 2026-02-16T05:35:46.508Z | 31344 | 5423 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\svc_web | 266289 |
| 488 | LEG-WS-021 | 2026-02-18T17:41:47.449Z | 38924 | 37829 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\svc_web | 294117 |
| 489 | MKT-WS-022 | 2026-02-15T21:34:17.262Z | 62594 | 20 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\agarcia | 459906 |
| 490 | MKT-WS-022 | 2026-02-11T08:04:51.613Z | 39679 | 8526 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\agarcia | 175335 |
| 491 | MKT-WS-022 | 2026-02-19T03:54:56.395Z | 278 | 6478 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\agarcia | 39825 |
| 492 | MKT-WS-022 | 2026-02-14T02:30:35.659Z | 30597 | 48401 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\agarcia | 221740 |
| 493 | MKT-WS-022 | 2026-02-11T09:38:11.570Z | 48889 | 621 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\agarcia | 17793 |
| 494 | MKT-WS-022 | 2026-02-14T19:45:36.732Z | 63356 | 34173 | teams.exe | C:\Windows\System32\teams.exe | ACME\agarcia | 231467 |
| 495 | MKT-WS-022 | 2026-02-13T15:51:06.104Z | 44905 | 55294 | code.exe | C:\Windows\System32\code.exe | ACME\agarcia | 66625 |
| 496 | MKT-WS-022 | 2026-02-11T16:47:30.679Z | 8366 | 27067 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\agarcia | 314077 |
| 497 | MKT-WS-022 | 2026-02-13T19:26:52.231Z | 51393 | 5769 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\agarcia | 360750 |
| 498 | MKT-WS-022 | 2026-02-12T16:12:41.124Z | 34069 | 40383 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\agarcia | 268602 |
| 499 | MKT-WS-022 | 2026-02-18T14:59:56.234Z | 7135 | 59539 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\agarcia | 438182 |
| 500 | MKT-WS-022 | 2026-02-14T21:07:15.871Z | 26557 | 57267 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\agarcia | 417114 |
| 501 | MKT-WS-022 | 2026-02-15T09:52:23.512Z | 49216 | 5370 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\agarcia | 257524 |
| 502 | MKT-WS-022 | 2026-02-12T11:33:24.331Z | 13267 | 3 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\agarcia | 444440 |
| 503 | MKT-WS-022 | 2026-02-19T17:13:03.688Z | 40358 | 15 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 299531 |
| 504 | MKT-WS-022 | 2026-02-12T19:49:20.484Z | 16220 | 7683 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\agarcia | 73178 |
| 505 | MKT-WS-022 | 2026-02-18T01:57:29.024Z | 46839 | 52076 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\agarcia | 355635 |
| 506 | MKT-WS-022 | 2026-02-18T16:01:34.472Z | 62370 | 28065 | System | System | NT AUTHORITY\SYSTEM | 411761 |
| 507 | MKT-WS-022 | 2026-02-13T21:40:18.079Z | 52627 | 22685 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 130543 |
| 508 | MKT-WS-022 | 2026-02-14T17:46:06.013Z | 62519 | 32334 | services.exe | C:\Windows\System32\services.exe | ACME\agarcia | 194955 |
| 509 | MKT-WS-022 | 2026-02-19T07:20:30.084Z | 4203 | 6183 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\agarcia | 461425 |
| 510 | MKT-WS-022 | 2026-02-14T21:19:24.510Z | 8458 | 21103 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\agarcia | 461058 |
| 511 | MKT-WS-022 | 2026-02-18T09:29:42.564Z | 27878 | 41128 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\agarcia | 58827 |
| 512 | EXEC-WS-023 | 2026-02-12T02:22:36.193Z | 7290 | 15 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\idavis | 51166 |
| 513 | EXEC-WS-023 | 2026-02-12T22:57:29.394Z | 50383 | 21708 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\idavis | 364475 |
| 514 | EXEC-WS-023 | 2026-02-12T03:02:19.604Z | 12833 | 27193 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\idavis | 49783 |
| 515 | EXEC-WS-023 | 2026-02-20T14:43:31.161Z | 57014 | 48469 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\idavis | 103376 |
| 516 | EXEC-WS-023 | 2026-02-12T18:34:06.115Z | 18930 | 8061 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\idavis | 176003 |
| 517 | EXEC-WS-023 | 2026-02-12T10:25:16.994Z | 1639 | 12409 | teams.exe | C:\Windows\System32\teams.exe | ACME\idavis | 211919 |
| 518 | EXEC-WS-023 | 2026-02-15T06:20:51.040Z | 911 | 46866 | code.exe | C:\Windows\System32\code.exe | ACME\idavis | 311798 |
| 519 | EXEC-WS-023 | 2026-02-16T22:40:32.782Z | 27351 | 55514 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\idavis | 265795 |
| 520 | EXEC-WS-023 | 2026-02-14T23:27:46.758Z | 28999 | 21449 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\idavis | 339568 |
| 521 | EXEC-WS-023 | 2026-02-14T18:58:24.836Z | 48917 | 19483 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\idavis | 166333 |
| 522 | EXEC-WS-023 | 2026-02-12T23:14:12.989Z | 20060 | 46555 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\idavis | 75687 |
| 523 | EXEC-WS-023 | 2026-02-19T03:50:10.286Z | 7630 | 33869 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\idavis | 449296 |
| 524 | EXEC-WS-023 | 2026-02-16T17:41:51.328Z | 32109 | 14365 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\idavis | 293432 |
| 525 | EXEC-WS-023 | 2026-02-11T10:25:59.027Z | 43322 | 6 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\idavis | 67658 |
| 526 | EXEC-WS-023 | 2026-02-19T18:22:26.617Z | 58708 | 11 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 268465 |
| 527 | EXEC-WS-023 | 2026-02-20T07:36:03.164Z | 35705 | 32186 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\idavis | 147560 |
| 528 | EXEC-WS-023 | 2026-02-19T16:57:59.304Z | 53932 | 2720 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\idavis | 185238 |
| 529 | EXEC-WS-023 | 2026-02-18T08:22:54.759Z | 3906 | 14382 | System | System | NT AUTHORITY\SYSTEM | 179513 |
| 530 | EXEC-WS-023 | 2026-02-13T13:35:08.193Z | 4444 | 13731 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 349852 |
| 531 | EXEC-WS-023 | 2026-02-10T21:28:17.963Z | 24954 | 24572 | services.exe | C:\Windows\System32\services.exe | ACME\idavis | 370449 |
| 532 | EXEC-WS-023 | 2026-02-13T16:48:14.926Z | 43534 | 27349 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\idavis | 220240 |
| 533 | EXEC-WS-023 | 2026-02-19T21:56:20.110Z | 40709 | 36974 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\idavis | 362642 |
| 534 | EXEC-WS-023 | 2026-02-16T00:22:41.834Z | 48930 | 14461 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\idavis | 414793 |
| 535 | IT-WS-024 | 2026-02-11T03:33:11.371Z | 58072 | 16 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\gwhite | 162464 |
| 536 | IT-WS-024 | 2026-02-13T20:51:57.384Z | 5787 | 10935 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\gwhite | 125990 |
| 537 | IT-WS-024 | 2026-02-15T17:39:30.537Z | 42122 | 52636 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\gwhite | 365973 |
| 538 | IT-WS-024 | 2026-02-18T10:12:03.611Z | 60533 | 59186 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\gwhite | 131521 |
| 539 | IT-WS-024 | 2026-02-18T23:48:25.411Z | 17376 | 56717 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\gwhite | 14399 |
| 540 | IT-WS-024 | 2026-02-18T10:08:01.929Z | 27882 | 24259 | teams.exe | C:\Windows\System32\teams.exe | ACME\gwhite | 434615 |
| 541 | IT-WS-024 | 2026-02-16T16:43:09.438Z | 58903 | 8969 | code.exe | C:\Windows\System32\code.exe | ACME\gwhite | 381105 |
| 542 | IT-WS-024 | 2026-02-20T04:04:33.043Z | 64159 | 40782 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\gwhite | 222053 |
| 543 | IT-WS-024 | 2026-02-14T03:40:16.002Z | 55076 | 25163 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\gwhite | 401807 |
| 544 | IT-WS-024 | 2026-02-18T09:19:54.019Z | 10389 | 46831 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\gwhite | 460666 |
| 545 | IT-WS-024 | 2026-02-15T12:42:29.952Z | 27690 | 53708 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\gwhite | 26849 |
| 546 | IT-WS-024 | 2026-02-19T14:59:30.208Z | 56920 | 15586 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\gwhite | 123233 |
| 547 | IT-WS-024 | 2026-02-14T22:09:00.079Z | 14124 | 24732 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\gwhite | 357592 |
| 548 | IT-WS-024 | 2026-02-12T23:58:50.516Z | 32015 | 15 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\gwhite | 445041 |
| 549 | IT-WS-024 | 2026-02-19T07:35:01.843Z | 6323 | 2 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 470782 |
| 550 | IT-WS-024 | 2026-02-12T22:58:54.230Z | 44906 | 36713 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\gwhite | 307947 |
| 551 | IT-WS-024 | 2026-02-11T14:30:03.278Z | 30844 | 59214 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\gwhite | 405808 |
| 552 | IT-WS-024 | 2026-02-15T17:56:34.795Z | 50032 | 7438 | System | System | NT AUTHORITY\SYSTEM | 370444 |
| 553 | IT-WS-024 | 2026-02-10T11:03:38.207Z | 3702 | 59220 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 352961 |
| 554 | IT-WS-024 | 2026-02-10T16:47:35.937Z | 60203 | 18146 | services.exe | C:\Windows\System32\services.exe | ACME\gwhite | 386762 |
| 555 | IT-WS-024 | 2026-02-18T00:15:55.187Z | 16189 | 22076 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\gwhite | 269009 |
| 556 | IT-WS-024 | 2026-02-18T00:00:05.423Z | 12104 | 31383 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\gwhite | 60453 |
| 557 | IT-WS-024 | 2026-02-15T09:24:25.604Z | 60360 | 57953 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\gwhite | 361462 |
| 558 | HR-WS-025 | 2026-02-12T12:47:28.631Z | 53546 | 2 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\bwilson | 349314 |
| 559 | HR-WS-025 | 2026-02-14T11:20:43.285Z | 805 | 28748 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\bwilson | 148578 |
| 560 | HR-WS-025 | 2026-02-17T15:34:51.424Z | 59156 | 28646 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\bwilson | 51588 |
| 561 | HR-WS-025 | 2026-02-20T01:01:25.674Z | 55317 | 32970 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\bwilson | 250003 |
| 562 | HR-WS-025 | 2026-02-15T15:03:10.132Z | 33443 | 51918 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\bwilson | 376490 |
| 563 | HR-WS-025 | 2026-02-16T19:32:53.006Z | 59473 | 42206 | teams.exe | C:\Windows\System32\teams.exe | ACME\bwilson | 276774 |
| 564 | HR-WS-025 | 2026-02-20T15:00:39.267Z | 36086 | 33653 | code.exe | C:\Windows\System32\code.exe | ACME\bwilson | 184344 |
| 565 | HR-WS-025 | 2026-02-16T20:25:52.887Z | 56038 | 32905 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\bwilson | 381303 |
| 566 | HR-WS-025 | 2026-02-17T23:06:54.045Z | 32317 | 40681 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\bwilson | 187418 |
| 567 | HR-WS-025 | 2026-02-16T09:14:37.352Z | 30590 | 46012 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\bwilson | 45746 |
| 568 | HR-WS-025 | 2026-02-19T10:26:58.986Z | 6585 | 19254 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\bwilson | 46429 |
| 569 | HR-WS-025 | 2026-02-19T02:39:15.621Z | 30122 | 39527 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\bwilson | 219513 |
| 570 | HR-WS-025 | 2026-02-19T08:52:55.592Z | 4493 | 42521 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\bwilson | 29419 |
| 571 | HR-WS-025 | 2026-02-16T11:13:35.496Z | 61115 | 13 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\bwilson | 477022 |
| 572 | HR-WS-025 | 2026-02-18T15:58:46.519Z | 61707 | 6 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 335843 |
| 573 | HR-WS-025 | 2026-02-18T16:45:30.079Z | 47138 | 37525 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\bwilson | 51583 |
| 574 | HR-WS-025 | 2026-02-19T07:04:33.032Z | 1459 | 35417 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\bwilson | 449677 |
| 575 | HR-WS-025 | 2026-02-17T23:58:26.049Z | 47463 | 51298 | System | System | NT AUTHORITY\SYSTEM | 108093 |
| 576 | HR-WS-025 | 2026-02-18T06:28:52.413Z | 62244 | 8809 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 352616 |
| 577 | HR-WS-025 | 2026-02-14T10:07:13.935Z | 33965 | 26164 | services.exe | C:\Windows\System32\services.exe | ACME\bwilson | 450151 |
| 578 | HR-WS-025 | 2026-02-20T10:47:29.357Z | 27995 | 35620 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\bwilson | 318974 |
| 579 | HR-WS-025 | 2026-02-13T11:25:03.215Z | 37540 | 34516 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\bwilson | 10325 |
| 580 | HR-WS-025 | 2026-02-12T06:49:16.122Z | 1468 | 15106 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\bwilson | 203014 |
| 581 | FIN-WS-026 | 2026-02-20T17:00:34.700Z | 4062 | 8 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\emartinez | 461469 |
| 582 | FIN-WS-026 | 2026-02-13T01:22:54.376Z | 20865 | 9262 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\emartinez | 51691 |
| 583 | FIN-WS-026 | 2026-02-12T02:05:59.729Z | 17963 | 49573 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\emartinez | 386026 |
| 584 | FIN-WS-026 | 2026-02-14T05:28:46.772Z | 29131 | 26773 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\emartinez | 50929 |
| 585 | FIN-WS-026 | 2026-02-12T14:00:01.442Z | 52957 | 14711 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\emartinez | 94232 |
| 586 | FIN-WS-026 | 2026-02-13T06:33:29.455Z | 55094 | 36987 | teams.exe | C:\Windows\System32\teams.exe | ACME\emartinez | 196878 |
| 587 | FIN-WS-026 | 2026-02-10T21:15:39.935Z | 31320 | 28755 | code.exe | C:\Windows\System32\code.exe | ACME\emartinez | 374315 |
| 588 | FIN-WS-026 | 2026-02-18T04:16:58.502Z | 64948 | 41416 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\emartinez | 219956 |
| 589 | FIN-WS-026 | 2026-02-11T01:39:49.703Z | 56649 | 45277 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\emartinez | 16897 |
| 590 | FIN-WS-026 | 2026-02-18T12:38:22.282Z | 35485 | 17825 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\emartinez | 494844 |
| 591 | FIN-WS-026 | 2026-02-16T05:48:29.040Z | 41558 | 44645 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\emartinez | 396949 |
| 592 | FIN-WS-026 | 2026-02-15T07:27:48.096Z | 47187 | 38804 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\emartinez | 158846 |
| 593 | FIN-WS-026 | 2026-02-12T11:30:07.084Z | 50744 | 20897 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\emartinez | 223405 |
| 594 | FIN-WS-026 | 2026-02-14T11:36:27.842Z | 35669 | 15 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\emartinez | 76247 |
| 595 | FIN-WS-026 | 2026-02-15T00:09:39.466Z | 45631 | 19 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 258404 |
| 596 | FIN-WS-026 | 2026-02-11T12:23:00.824Z | 24790 | 10083 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\emartinez | 334826 |
| 597 | FIN-WS-026 | 2026-02-12T09:02:24.421Z | 61706 | 56289 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\emartinez | 158321 |
| 598 | FIN-WS-026 | 2026-02-14T13:00:23.936Z | 41454 | 21128 | System | System | NT AUTHORITY\SYSTEM | 36804 |
| 599 | FIN-WS-026 | 2026-02-12T16:40:11.794Z | 18498 | 47368 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 447060 |
| 600 | FIN-WS-026 | 2026-02-18T01:15:33.150Z | 7996 | 22673 | services.exe | C:\Windows\System32\services.exe | ACME\emartinez | 490972 |
| 601 | FIN-WS-026 | 2026-02-16T20:43:58.045Z | 43690 | 33661 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\emartinez | 359613 |
| 602 | FIN-WS-026 | 2026-02-16T03:37:05.100Z | 57732 | 20034 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\emartinez | 438773 |
| 603 | FIN-WS-026 | 2026-02-19T08:56:47.770Z | 42092 | 37873 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\emartinez | 374958 |
| 604 | SLS-WS-027 | 2026-02-12T04:33:47.044Z | 64316 | 3 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\cjohnson | 479306 |
| 605 | SLS-WS-027 | 2026-02-15T17:57:03.183Z | 3411 | 2189 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\cjohnson | 174967 |
| 606 | SLS-WS-027 | 2026-02-13T13:57:11.248Z | 37912 | 2888 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\cjohnson | 409292 |
| 607 | SLS-WS-027 | 2026-02-12T03:50:33.042Z | 2035 | 56962 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\cjohnson | 55550 |
| 608 | SLS-WS-027 | 2026-02-15T00:47:27.043Z | 64132 | 44494 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\cjohnson | 113706 |
| 609 | SLS-WS-027 | 2026-02-12T22:52:55.585Z | 26606 | 47049 | teams.exe | C:\Windows\System32\teams.exe | ACME\cjohnson | 464732 |
| 610 | SLS-WS-027 | 2026-02-15T10:43:49.090Z | 16067 | 52412 | code.exe | C:\Windows\System32\code.exe | ACME\cjohnson | 131178 |
| 611 | SLS-WS-027 | 2026-02-12T11:08:21.390Z | 14369 | 5187 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\cjohnson | 429498 |
| 612 | SLS-WS-027 | 2026-02-13T13:49:49.233Z | 41616 | 9871 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\cjohnson | 154302 |
| 613 | SLS-WS-027 | 2026-02-14T21:57:25.000Z | 58062 | 41143 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\cjohnson | 421438 |
| 614 | SLS-WS-027 | 2026-02-19T16:39:04.023Z | 33692 | 37609 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\cjohnson | 457742 |
| 615 | SLS-WS-027 | 2026-02-12T00:36:44.221Z | 54257 | 25890 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\cjohnson | 40270 |
| 616 | SLS-WS-027 | 2026-02-18T11:54:57.809Z | 49883 | 31578 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\cjohnson | 246942 |
| 617 | SLS-WS-027 | 2026-02-17T21:53:38.798Z | 39784 | 10 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\cjohnson | 497236 |
| 618 | SLS-WS-027 | 2026-02-12T04:24:49.832Z | 42160 | 20 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 19407 |
| 619 | SLS-WS-027 | 2026-02-15T11:45:10.546Z | 53554 | 6890 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\cjohnson | 260929 |
| 620 | SLS-WS-027 | 2026-02-15T23:29:43.767Z | 58580 | 17635 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\cjohnson | 70954 |
| 621 | SLS-WS-027 | 2026-02-13T21:09:47.345Z | 5402 | 46534 | System | System | NT AUTHORITY\SYSTEM | 46581 |
| 622 | SLS-WS-027 | 2026-02-18T07:39:25.581Z | 59273 | 31566 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 11397 |
| 623 | SLS-WS-027 | 2026-02-17T10:57:50.775Z | 48074 | 32234 | services.exe | C:\Windows\System32\services.exe | ACME\cjohnson | 222184 |
| 624 | SLS-WS-027 | 2026-02-12T16:13:41.071Z | 15562 | 5354 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\cjohnson | 144605 |
| 625 | SLS-WS-027 | 2026-02-17T05:36:33.727Z | 45151 | 4056 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\cjohnson | 381954 |
| 626 | SLS-WS-027 | 2026-02-16T10:41:43.468Z | 61296 | 18085 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\cjohnson | 429089 |
| 627 | SLS-WS-027 | 2026-02-17T14:46:26.104Z | 51493 | 21005 | discord.exe | C:\Users\cjohnson\AppData\Local\discord\discord.exe | ACME\cjohnson | 98268 |
| 628 | ENG-WS-028 | 2026-02-12T02:55:29.950Z | 26078 | 13 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\idavis | 49209 |
| 629 | ENG-WS-028 | 2026-02-15T09:03:32.214Z | 18210 | 23096 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\idavis | 223381 |
| 630 | ENG-WS-028 | 2026-02-15T20:49:19.539Z | 20836 | 45327 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\idavis | 362376 |
| 631 | ENG-WS-028 | 2026-02-15T14:51:37.552Z | 28509 | 51143 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\idavis | 86435 |
| 632 | ENG-WS-028 | 2026-02-19T22:46:11.775Z | 54881 | 50572 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\idavis | 113315 |
| 633 | ENG-WS-028 | 2026-02-14T05:00:31.776Z | 29047 | 33622 | teams.exe | C:\Windows\System32\teams.exe | ACME\idavis | 394646 |
| 634 | ENG-WS-028 | 2026-02-11T08:07:56.479Z | 29496 | 30409 | code.exe | C:\Windows\System32\code.exe | ACME\idavis | 464630 |
| 635 | ENG-WS-028 | 2026-02-11T14:44:40.363Z | 63813 | 30450 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\idavis | 35540 |
| 636 | ENG-WS-028 | 2026-02-16T06:41:02.103Z | 37797 | 38814 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\idavis | 103244 |
| 637 | ENG-WS-028 | 2026-02-17T03:55:58.556Z | 56085 | 45589 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\idavis | 318244 |
| 638 | ENG-WS-028 | 2026-02-15T11:09:48.840Z | 51724 | 5761 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\idavis | 379199 |
| 639 | ENG-WS-028 | 2026-02-10T08:15:37.014Z | 48785 | 31444 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\idavis | 453310 |
| 640 | ENG-WS-028 | 2026-02-16T23:14:00.295Z | 49390 | 32177 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\idavis | 1781 |
| 641 | ENG-WS-028 | 2026-02-17T01:40:15.091Z | 8420 | 6 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\idavis | 303758 |
| 642 | ENG-WS-028 | 2026-02-18T09:43:02.284Z | 56579 | 14 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 387193 |
| 643 | ENG-WS-028 | 2026-02-13T20:12:30.211Z | 18230 | 20159 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\idavis | 232997 |
| 644 | ENG-WS-028 | 2026-02-13T08:33:18.797Z | 33246 | 55655 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\idavis | 103760 |
| 645 | ENG-WS-028 | 2026-02-20T10:20:18.006Z | 105 | 45935 | System | System | NT AUTHORITY\SYSTEM | 116060 |
| 646 | ENG-WS-028 | 2026-02-15T12:14:40.793Z | 39843 | 35823 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 335061 |
| 647 | ENG-WS-028 | 2026-02-14T17:00:39.993Z | 49560 | 2720 | services.exe | C:\Windows\System32\services.exe | ACME\idavis | 411590 |
| 648 | ENG-WS-028 | 2026-02-14T17:54:30.344Z | 63476 | 18898 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\idavis | 499868 |
| 649 | ENG-WS-028 | 2026-02-16T05:00:31.393Z | 22414 | 54723 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\idavis | 387836 |
| 650 | ENG-WS-028 | 2026-02-17T04:40:18.931Z | 39212 | 5846 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\idavis | 449472 |
| 651 | LEG-WS-029 | 2026-02-16T14:15:47.227Z | 42405 | 10 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\hbrown | 269041 |
| 652 | LEG-WS-029 | 2026-02-13T03:56:07.563Z | 31987 | 45775 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\hbrown | 373435 |
| 653 | LEG-WS-029 | 2026-02-12T04:36:14.546Z | 12775 | 45895 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\hbrown | 110872 |
| 654 | LEG-WS-029 | 2026-02-11T19:18:17.870Z | 47397 | 38196 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\hbrown | 199250 |
| 655 | LEG-WS-029 | 2026-02-20T00:52:10.378Z | 36335 | 56393 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\hbrown | 263800 |
| 656 | LEG-WS-029 | 2026-02-17T02:02:35.105Z | 30954 | 1779 | teams.exe | C:\Windows\System32\teams.exe | ACME\hbrown | 109560 |
| 657 | LEG-WS-029 | 2026-02-14T05:02:21.353Z | 30930 | 24154 | code.exe | C:\Windows\System32\code.exe | ACME\hbrown | 387890 |
| 658 | LEG-WS-029 | 2026-02-15T20:49:27.663Z | 52039 | 32285 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\hbrown | 413182 |
| 659 | LEG-WS-029 | 2026-02-13T17:55:11.425Z | 56370 | 18905 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\hbrown | 370737 |
| 660 | LEG-WS-029 | 2026-02-14T08:37:49.405Z | 45559 | 58886 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\hbrown | 171049 |
| 661 | LEG-WS-029 | 2026-02-16T08:59:50.356Z | 14148 | 378 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\hbrown | 137685 |
| 662 | LEG-WS-029 | 2026-02-13T07:58:02.576Z | 49071 | 27530 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\hbrown | 10495 |
| 663 | LEG-WS-029 | 2026-02-11T11:54:22.160Z | 59804 | 33213 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\hbrown | 68639 |
| 664 | LEG-WS-029 | 2026-02-13T22:30:10.521Z | 9936 | 6 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\hbrown | 242455 |
| 665 | LEG-WS-029 | 2026-02-13T00:40:15.783Z | 24390 | 1 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 73440 |
| 666 | LEG-WS-029 | 2026-02-14T10:18:31.473Z | 10823 | 27727 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\hbrown | 395532 |
| 667 | LEG-WS-029 | 2026-02-18T15:26:16.025Z | 15732 | 45464 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\hbrown | 384236 |
| 668 | LEG-WS-029 | 2026-02-16T06:59:55.553Z | 49931 | 298 | System | System | NT AUTHORITY\SYSTEM | 440535 |
| 669 | LEG-WS-029 | 2026-02-14T04:28:01.369Z | 59473 | 20756 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 388531 |
| 670 | LEG-WS-029 | 2026-02-14T22:52:55.419Z | 42493 | 42324 | services.exe | C:\Windows\System32\services.exe | ACME\hbrown | 52427 |
| 671 | LEG-WS-029 | 2026-02-16T06:31:38.914Z | 18874 | 50568 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\hbrown | 346790 |
| 672 | LEG-WS-029 | 2026-02-14T17:28:18.504Z | 62832 | 27883 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\hbrown | 77301 |
| 673 | LEG-WS-029 | 2026-02-12T23:18:33.083Z | 53049 | 43202 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\hbrown | 230868 |
| 674 | MKT-WS-030 | 2026-02-11T22:03:18.766Z | 64328 | 18 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\cjohnson | 357727 |
| 675 | MKT-WS-030 | 2026-02-10T22:50:49.649Z | 63459 | 33019 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\cjohnson | 37864 |
| 676 | MKT-WS-030 | 2026-02-11T20:07:19.201Z | 4088 | 3308 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\cjohnson | 166764 |
| 677 | MKT-WS-030 | 2026-02-19T03:21:50.965Z | 34546 | 50728 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\cjohnson | 277941 |
| 678 | MKT-WS-030 | 2026-02-14T19:08:37.449Z | 44466 | 49769 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\cjohnson | 60376 |
| 679 | MKT-WS-030 | 2026-02-17T03:48:38.363Z | 41319 | 30235 | teams.exe | C:\Windows\System32\teams.exe | ACME\cjohnson | 126480 |
| 680 | MKT-WS-030 | 2026-02-19T01:29:06.418Z | 39278 | 39618 | code.exe | C:\Windows\System32\code.exe | ACME\cjohnson | 322207 |
| 681 | MKT-WS-030 | 2026-02-12T21:09:10.630Z | 31448 | 39621 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\cjohnson | 458923 |
| 682 | MKT-WS-030 | 2026-02-18T13:13:46.341Z | 49699 | 51311 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\cjohnson | 118381 |
| 683 | MKT-WS-030 | 2026-02-16T17:12:10.420Z | 49635 | 52230 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\cjohnson | 107489 |
| 684 | MKT-WS-030 | 2026-02-12T08:55:22.445Z | 16206 | 33226 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\cjohnson | 103741 |
| 685 | MKT-WS-030 | 2026-02-18T20:44:03.165Z | 34636 | 29336 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\cjohnson | 291435 |
| 686 | MKT-WS-030 | 2026-02-16T01:55:30.195Z | 33678 | 13879 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\cjohnson | 418602 |
| 687 | MKT-WS-030 | 2026-02-16T09:12:47.725Z | 26219 | 17 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\cjohnson | 278540 |
| 688 | MKT-WS-030 | 2026-02-15T16:10:53.033Z | 9907 | 12 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 235596 |
| 689 | MKT-WS-030 | 2026-02-19T09:38:16.097Z | 13888 | 36622 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\cjohnson | 228398 |
| 690 | MKT-WS-030 | 2026-02-11T09:37:26.632Z | 63457 | 35392 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\cjohnson | 199673 |
| 691 | MKT-WS-030 | 2026-02-18T01:41:40.089Z | 22945 | 11931 | System | System | NT AUTHORITY\SYSTEM | 131820 |
| 692 | MKT-WS-030 | 2026-02-15T10:47:19.752Z | 21898 | 2534 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 435103 |
| 693 | MKT-WS-030 | 2026-02-19T00:27:08.798Z | 41714 | 39631 | services.exe | C:\Windows\System32\services.exe | ACME\cjohnson | 332273 |
| 694 | MKT-WS-030 | 2026-02-15T07:58:50.155Z | 40450 | 15542 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\cjohnson | 258181 |
| 695 | MKT-WS-030 | 2026-02-16T21:57:02.660Z | 15359 | 48121 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\cjohnson | 70790 |
| 696 | MKT-WS-030 | 2026-02-16T14:54:29.563Z | 7571 | 38095 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\cjohnson | 14165 |
| 697 | EXEC-WS-031 | 2026-02-14T12:58:07.681Z | 16854 | 20 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\hbrown | 350668 |
| 698 | EXEC-WS-031 | 2026-02-20T00:17:28.238Z | 13008 | 13771 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\hbrown | 93565 |
| 699 | EXEC-WS-031 | 2026-02-19T01:25:51.390Z | 39045 | 59652 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\hbrown | 324405 |
| 700 | EXEC-WS-031 | 2026-02-10T22:22:42.258Z | 47593 | 23094 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\hbrown | 207913 |
| 701 | EXEC-WS-031 | 2026-02-20T17:23:54.737Z | 30488 | 10190 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\hbrown | 81901 |
| 702 | EXEC-WS-031 | 2026-02-16T21:47:40.014Z | 26860 | 43528 | teams.exe | C:\Windows\System32\teams.exe | ACME\hbrown | 98069 |
| 703 | EXEC-WS-031 | 2026-02-19T16:33:55.171Z | 35135 | 5878 | code.exe | C:\Windows\System32\code.exe | ACME\hbrown | 236703 |
| 704 | EXEC-WS-031 | 2026-02-15T02:13:37.120Z | 26586 | 28959 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\hbrown | 233952 |
| 705 | EXEC-WS-031 | 2026-02-15T22:34:27.062Z | 52957 | 50811 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\hbrown | 217717 |
| 706 | EXEC-WS-031 | 2026-02-17T07:40:19.811Z | 63134 | 29141 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\hbrown | 121044 |
| 707 | EXEC-WS-031 | 2026-02-15T08:32:15.459Z | 46055 | 39536 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\hbrown | 280351 |
| 708 | EXEC-WS-031 | 2026-02-10T19:21:06.239Z | 4530 | 39998 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\hbrown | 342891 |
| 709 | EXEC-WS-031 | 2026-02-13T02:11:32.685Z | 37863 | 28794 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\hbrown | 226574 |
| 710 | EXEC-WS-031 | 2026-02-19T15:40:28.768Z | 32958 | 19 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\hbrown | 120390 |
| 711 | EXEC-WS-031 | 2026-02-14T02:23:15.775Z | 14334 | 2 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 363910 |
| 712 | EXEC-WS-031 | 2026-02-10T18:43:32.911Z | 31944 | 18491 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\hbrown | 223566 |
| 713 | EXEC-WS-031 | 2026-02-11T19:04:17.294Z | 10443 | 16896 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\hbrown | 62548 |
| 714 | EXEC-WS-031 | 2026-02-12T18:50:46.120Z | 3726 | 46577 | System | System | NT AUTHORITY\SYSTEM | 80414 |
| 715 | EXEC-WS-031 | 2026-02-17T13:13:49.853Z | 18427 | 36544 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 262170 |
| 716 | EXEC-WS-031 | 2026-02-13T23:32:45.608Z | 12408 | 25628 | services.exe | C:\Windows\System32\services.exe | ACME\hbrown | 277927 |
| 717 | EXEC-WS-031 | 2026-02-18T10:58:55.417Z | 35263 | 18040 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\hbrown | 59235 |
| 718 | EXEC-WS-031 | 2026-02-18T21:57:23.630Z | 40346 | 35261 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\hbrown | 396490 |
| 719 | EXEC-WS-031 | 2026-02-12T12:52:07.333Z | 25885 | 5412 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\hbrown | 305279 |
| 720 | IT-WS-032 | 2026-02-20T10:56:09.671Z | 15711 | 12 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\fthompson | 96699 |
| 721 | IT-WS-032 | 2026-02-14T12:44:20.165Z | 17428 | 30712 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\fthompson | 107922 |
| 722 | IT-WS-032 | 2026-02-13T23:03:36.086Z | 39383 | 36192 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\fthompson | 402355 |
| 723 | IT-WS-032 | 2026-02-14T11:11:05.083Z | 9761 | 53053 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\fthompson | 367831 |
| 724 | IT-WS-032 | 2026-02-10T16:37:48.395Z | 34401 | 21255 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\fthompson | 244857 |
| 725 | IT-WS-032 | 2026-02-20T00:11:13.677Z | 9266 | 36325 | teams.exe | C:\Windows\System32\teams.exe | ACME\fthompson | 371649 |
| 726 | IT-WS-032 | 2026-02-12T16:39:19.233Z | 19699 | 55379 | code.exe | C:\Windows\System32\code.exe | ACME\fthompson | 340938 |
| 727 | IT-WS-032 | 2026-02-14T00:43:38.193Z | 46764 | 45618 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\fthompson | 407231 |
| 728 | IT-WS-032 | 2026-02-10T10:04:19.706Z | 57317 | 52009 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\fthompson | 304556 |
| 729 | IT-WS-032 | 2026-02-16T11:12:01.902Z | 40857 | 53301 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\fthompson | 268914 |
| 730 | IT-WS-032 | 2026-02-19T16:50:40.507Z | 28197 | 28522 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\fthompson | 490102 |
| 731 | IT-WS-032 | 2026-02-12T00:15:41.886Z | 45975 | 37353 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\fthompson | 366595 |
| 732 | IT-WS-032 | 2026-02-17T01:13:05.551Z | 64057 | 17646 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\fthompson | 460563 |
| 733 | IT-WS-032 | 2026-02-17T12:31:17.694Z | 64910 | 11 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\fthompson | 488494 |
| 734 | IT-WS-032 | 2026-02-19T09:48:30.058Z | 21512 | 3 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 324165 |
| 735 | IT-WS-032 | 2026-02-15T13:48:18.500Z | 1981 | 20446 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\fthompson | 245953 |
| 736 | IT-WS-032 | 2026-02-13T22:11:06.537Z | 49097 | 14746 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\fthompson | 319455 |
| 737 | IT-WS-032 | 2026-02-13T04:18:15.368Z | 32066 | 24656 | System | System | NT AUTHORITY\SYSTEM | 439509 |
| 738 | IT-WS-032 | 2026-02-13T16:23:53.971Z | 18915 | 52191 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 201146 |
| 739 | IT-WS-032 | 2026-02-16T18:39:19.962Z | 55207 | 19346 | services.exe | C:\Windows\System32\services.exe | ACME\fthompson | 206414 |
| 740 | IT-WS-032 | 2026-02-10T23:22:28.760Z | 6675 | 47011 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\fthompson | 262889 |
| 741 | IT-WS-032 | 2026-02-16T15:18:00.681Z | 47390 | 37709 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\fthompson | 234137 |
| 742 | IT-WS-032 | 2026-02-11T21:22:28.959Z | 30018 | 9433 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\fthompson | 75150 |
| 743 | HR-WS-033 | 2026-02-17T22:36:55.589Z | 57132 | 13 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\dlee | 45364 |
| 744 | HR-WS-033 | 2026-02-20T01:34:49.888Z | 49658 | 21317 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\dlee | 125250 |
| 745 | HR-WS-033 | 2026-02-10T10:37:10.004Z | 62346 | 2337 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\dlee | 261478 |
| 746 | HR-WS-033 | 2026-02-15T03:03:12.970Z | 828 | 9000 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\dlee | 191507 |
| 747 | HR-WS-033 | 2026-02-19T06:01:00.454Z | 48737 | 4024 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\dlee | 250718 |
| 748 | HR-WS-033 | 2026-02-18T17:13:59.320Z | 55305 | 27590 | teams.exe | C:\Windows\System32\teams.exe | ACME\dlee | 321625 |
| 749 | HR-WS-033 | 2026-02-19T15:12:50.855Z | 30926 | 50168 | code.exe | C:\Windows\System32\code.exe | ACME\dlee | 230083 |
| 750 | HR-WS-033 | 2026-02-12T20:48:33.550Z | 45568 | 36996 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\dlee | 282840 |
| 751 | HR-WS-033 | 2026-02-19T16:16:47.236Z | 45443 | 2636 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\dlee | 57789 |
| 752 | HR-WS-033 | 2026-02-12T20:04:48.157Z | 16624 | 23584 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\dlee | 291526 |
| 753 | HR-WS-033 | 2026-02-16T12:35:03.151Z | 24829 | 42638 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\dlee | 6146 |
| 754 | HR-WS-033 | 2026-02-15T16:55:49.523Z | 7768 | 28597 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\dlee | 458595 |
| 755 | HR-WS-033 | 2026-02-18T06:25:06.138Z | 4711 | 10254 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\dlee | 465436 |
| 756 | HR-WS-033 | 2026-02-13T21:30:36.852Z | 2556 | 16 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\dlee | 4377 |
| 757 | HR-WS-033 | 2026-02-14T12:38:08.738Z | 3682 | 1 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 451215 |
| 758 | HR-WS-033 | 2026-02-16T18:26:40.368Z | 50581 | 59400 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\dlee | 43427 |
| 759 | HR-WS-033 | 2026-02-14T03:29:13.256Z | 62419 | 22905 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\dlee | 464820 |
| 760 | HR-WS-033 | 2026-02-19T23:59:07.737Z | 60873 | 22801 | System | System | NT AUTHORITY\SYSTEM | 115865 |
| 761 | HR-WS-033 | 2026-02-19T15:25:29.598Z | 56895 | 38466 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 83219 |
| 762 | HR-WS-033 | 2026-02-19T08:39:27.037Z | 56785 | 9514 | services.exe | C:\Windows\System32\services.exe | ACME\dlee | 135313 |
| 763 | HR-WS-033 | 2026-02-20T03:57:50.148Z | 20994 | 23425 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\dlee | 178610 |
| 764 | HR-WS-033 | 2026-02-12T05:22:27.850Z | 12075 | 14001 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\dlee | 51311 |
| 765 | HR-WS-033 | 2026-02-20T11:08:40.964Z | 20003 | 48797 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\dlee | 323478 |
| 766 | FIN-WS-034 | 2026-02-16T19:28:31.084Z | 5599 | 7 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\svc_sql | 406620 |
| 767 | FIN-WS-034 | 2026-02-14T05:24:17.994Z | 37574 | 37756 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\svc_sql | 45795 |
| 768 | FIN-WS-034 | 2026-02-14T12:30:23.743Z | 59733 | 29409 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\svc_sql | 315437 |
| 769 | FIN-WS-034 | 2026-02-20T02:26:27.389Z | 13146 | 13771 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\svc_sql | 126050 |
| 770 | FIN-WS-034 | 2026-02-13T15:12:28.291Z | 36251 | 5286 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\svc_sql | 307102 |
| 771 | FIN-WS-034 | 2026-02-19T20:02:27.133Z | 21539 | 38586 | teams.exe | C:\Windows\System32\teams.exe | ACME\svc_sql | 253533 |
| 772 | FIN-WS-034 | 2026-02-18T00:30:07.392Z | 969 | 22986 | code.exe | C:\Windows\System32\code.exe | ACME\svc_sql | 354294 |
| 773 | FIN-WS-034 | 2026-02-16T13:26:03.543Z | 50161 | 28631 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\svc_sql | 372418 |
| 774 | FIN-WS-034 | 2026-02-19T01:52:11.008Z | 4370 | 953 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\svc_sql | 432105 |
| 775 | FIN-WS-034 | 2026-02-14T14:48:02.294Z | 53658 | 13775 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\svc_sql | 59730 |
| 776 | FIN-WS-034 | 2026-02-10T23:55:32.216Z | 42750 | 51563 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\svc_sql | 74518 |
| 777 | FIN-WS-034 | 2026-02-15T09:10:13.943Z | 34106 | 55910 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\svc_sql | 22538 |
| 778 | FIN-WS-034 | 2026-02-15T13:37:21.305Z | 46298 | 52982 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\svc_sql | 60307 |
| 779 | FIN-WS-034 | 2026-02-18T22:51:38.154Z | 4284 | 15 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\svc_sql | 14062 |
| 780 | FIN-WS-034 | 2026-02-16T08:28:35.926Z | 45112 | 13 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 316188 |
| 781 | FIN-WS-034 | 2026-02-15T20:35:30.490Z | 15120 | 54679 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\svc_sql | 37330 |
| 782 | FIN-WS-034 | 2026-02-11T17:05:02.153Z | 18148 | 20676 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\svc_sql | 232132 |
| 783 | FIN-WS-034 | 2026-02-15T17:51:39.184Z | 58372 | 52879 | System | System | NT AUTHORITY\SYSTEM | 316905 |
| 784 | FIN-WS-034 | 2026-02-19T14:11:57.437Z | 49757 | 38136 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 208916 |
| 785 | FIN-WS-034 | 2026-02-16T08:04:17.556Z | 8944 | 33216 | services.exe | C:\Windows\System32\services.exe | ACME\svc_sql | 493422 |
| 786 | FIN-WS-034 | 2026-02-18T11:12:12.053Z | 15472 | 587 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\svc_sql | 99114 |
| 787 | FIN-WS-034 | 2026-02-10T22:06:07.070Z | 36308 | 18902 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\svc_sql | 76787 |
| 788 | FIN-WS-034 | 2026-02-14T01:47:36.357Z | 4996 | 33029 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\svc_sql | 169015 |
| 789 | SLS-WS-035 | 2026-02-18T02:00:42.449Z | 36776 | 7 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\jsmith | 300369 |
| 790 | SLS-WS-035 | 2026-02-17T03:09:10.669Z | 6388 | 9915 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\jsmith | 29008 |
| 791 | SLS-WS-035 | 2026-02-17T22:23:21.390Z | 17314 | 46086 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\jsmith | 186561 |
| 792 | SLS-WS-035 | 2026-02-16T05:48:51.546Z | 48878 | 34722 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\jsmith | 171915 |
| 793 | SLS-WS-035 | 2026-02-20T01:56:10.263Z | 17365 | 40290 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\jsmith | 36655 |
| 794 | SLS-WS-035 | 2026-02-13T04:05:06.073Z | 36009 | 17914 | teams.exe | C:\Windows\System32\teams.exe | ACME\jsmith | 9125 |
| 795 | SLS-WS-035 | 2026-02-12T20:27:11.030Z | 39043 | 57371 | code.exe | C:\Windows\System32\code.exe | ACME\jsmith | 495827 |
| 796 | SLS-WS-035 | 2026-02-14T18:58:02.229Z | 61732 | 54492 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\jsmith | 162426 |
| 797 | SLS-WS-035 | 2026-02-16T19:33:05.145Z | 30184 | 4647 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\jsmith | 98933 |
| 798 | SLS-WS-035 | 2026-02-17T00:21:59.881Z | 59375 | 32840 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\jsmith | 494961 |
| 799 | SLS-WS-035 | 2026-02-20T06:13:27.266Z | 3471 | 45145 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\jsmith | 133924 |
| 800 | SLS-WS-035 | 2026-02-13T12:30:47.849Z | 33546 | 30073 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\jsmith | 248448 |
| 801 | SLS-WS-035 | 2026-02-14T11:46:39.536Z | 2520 | 22136 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\jsmith | 81332 |
| 802 | SLS-WS-035 | 2026-02-19T06:28:30.690Z | 14848 | 1 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\jsmith | 486829 |
| 803 | SLS-WS-035 | 2026-02-19T00:25:15.492Z | 47728 | 2 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 206805 |
| 804 | SLS-WS-035 | 2026-02-17T02:10:52.918Z | 544 | 38400 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\jsmith | 162888 |
| 805 | SLS-WS-035 | 2026-02-14T09:50:03.386Z | 17939 | 41135 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\jsmith | 57681 |
| 806 | SLS-WS-035 | 2026-02-19T06:45:55.721Z | 23739 | 788 | System | System | NT AUTHORITY\SYSTEM | 73652 |
| 807 | SLS-WS-035 | 2026-02-19T18:57:46.270Z | 55153 | 58398 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 353758 |
| 808 | SLS-WS-035 | 2026-02-12T15:17:32.537Z | 51129 | 47663 | services.exe | C:\Windows\System32\services.exe | ACME\jsmith | 176414 |
| 809 | SLS-WS-035 | 2026-02-14T10:40:59.285Z | 3549 | 27431 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\jsmith | 197618 |
| 810 | SLS-WS-035 | 2026-02-14T20:11:28.786Z | 56444 | 24751 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\jsmith | 30014 |
| 811 | SLS-WS-035 | 2026-02-14T02:01:12.265Z | 55572 | 54493 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\jsmith | 183951 |
| 812 | ENG-WS-036 | 2026-02-17T00:58:47.865Z | 33610 | 12 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\svc_web | 366050 |
| 813 | ENG-WS-036 | 2026-02-13T18:27:26.176Z | 30100 | 28162 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\svc_web | 283000 |
| 814 | ENG-WS-036 | 2026-02-12T13:11:24.402Z | 58512 | 37749 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\svc_web | 422775 |
| 815 | ENG-WS-036 | 2026-02-17T14:53:10.650Z | 31314 | 37647 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\svc_web | 131388 |
| 816 | ENG-WS-036 | 2026-02-19T23:41:11.876Z | 38349 | 6405 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\svc_web | 162705 |
| 817 | ENG-WS-036 | 2026-02-12T16:26:16.544Z | 32049 | 17568 | teams.exe | C:\Windows\System32\teams.exe | ACME\svc_web | 80697 |
| 818 | ENG-WS-036 | 2026-02-19T02:49:58.683Z | 57531 | 37255 | code.exe | C:\Windows\System32\code.exe | ACME\svc_web | 22869 |
| 819 | ENG-WS-036 | 2026-02-13T17:24:05.811Z | 46299 | 12597 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\svc_web | 80928 |
| 820 | ENG-WS-036 | 2026-02-18T13:41:06.754Z | 5516 | 45575 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\svc_web | 407894 |
| 821 | ENG-WS-036 | 2026-02-19T23:59:11.474Z | 37227 | 48067 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\svc_web | 204240 |
| 822 | ENG-WS-036 | 2026-02-10T12:34:11.172Z | 53054 | 55596 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\svc_web | 66428 |
| 823 | ENG-WS-036 | 2026-02-15T01:53:32.128Z | 1863 | 9149 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\svc_web | 476300 |
| 824 | ENG-WS-036 | 2026-02-15T12:16:20.964Z | 51331 | 17925 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\svc_web | 477749 |
| 825 | ENG-WS-036 | 2026-02-12T06:49:22.682Z | 50183 | 10 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\svc_web | 355220 |
| 826 | ENG-WS-036 | 2026-02-12T02:05:03.228Z | 42850 | 8 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 53825 |
| 827 | ENG-WS-036 | 2026-02-16T22:05:11.233Z | 4967 | 53407 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\svc_web | 26809 |
| 828 | ENG-WS-036 | 2026-02-17T02:00:31.393Z | 8670 | 28729 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\svc_web | 400486 |
| 829 | ENG-WS-036 | 2026-02-12T18:38:18.543Z | 44254 | 8859 | System | System | NT AUTHORITY\SYSTEM | 236963 |
| 830 | ENG-WS-036 | 2026-02-20T00:57:04.382Z | 12692 | 41545 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 58206 |
| 831 | ENG-WS-036 | 2026-02-20T05:05:39.123Z | 51400 | 14465 | services.exe | C:\Windows\System32\services.exe | ACME\svc_web | 414618 |
| 832 | ENG-WS-036 | 2026-02-16T17:01:04.321Z | 16439 | 587 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\svc_web | 282693 |
| 833 | ENG-WS-036 | 2026-02-20T17:10:30.575Z | 16049 | 6505 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\svc_web | 195007 |
| 834 | ENG-WS-036 | 2026-02-12T22:28:21.499Z | 64209 | 10748 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\svc_web | 280999 |
| 835 | LEG-WS-037 | 2026-02-13T13:10:19.826Z | 956 | 7 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\svc_sql | 114725 |
| 836 | LEG-WS-037 | 2026-02-18T00:27:05.908Z | 52542 | 12950 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\svc_sql | 95748 |
| 837 | LEG-WS-037 | 2026-02-13T02:04:02.273Z | 33849 | 29130 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\svc_sql | 81454 |
| 838 | LEG-WS-037 | 2026-02-14T16:12:41.455Z | 52733 | 23981 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\svc_sql | 212527 |
| 839 | LEG-WS-037 | 2026-02-19T18:50:12.787Z | 63303 | 59009 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\svc_sql | 206904 |
| 840 | LEG-WS-037 | 2026-02-15T20:52:08.325Z | 27227 | 49934 | teams.exe | C:\Windows\System32\teams.exe | ACME\svc_sql | 393148 |
| 841 | LEG-WS-037 | 2026-02-19T22:02:26.997Z | 43248 | 21966 | code.exe | C:\Windows\System32\code.exe | ACME\svc_sql | 22381 |
| 842 | LEG-WS-037 | 2026-02-17T18:52:56.473Z | 2156 | 3351 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\svc_sql | 476773 |
| 843 | LEG-WS-037 | 2026-02-17T04:23:54.531Z | 36548 | 37833 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\svc_sql | 483759 |
| 844 | LEG-WS-037 | 2026-02-18T04:24:56.429Z | 57804 | 45945 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\svc_sql | 286486 |
| 845 | LEG-WS-037 | 2026-02-15T05:16:47.606Z | 7691 | 21571 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\svc_sql | 196304 |
| 846 | LEG-WS-037 | 2026-02-10T21:17:03.075Z | 56799 | 58590 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\svc_sql | 49536 |
| 847 | LEG-WS-037 | 2026-02-13T03:23:22.936Z | 56017 | 20676 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\svc_sql | 359950 |
| 848 | LEG-WS-037 | 2026-02-15T01:30:51.002Z | 35718 | 11 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\svc_sql | 56879 |
| 849 | LEG-WS-037 | 2026-02-20T08:20:40.820Z | 36788 | 2 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 239100 |
| 850 | LEG-WS-037 | 2026-02-17T18:06:21.513Z | 40797 | 59791 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\svc_sql | 144542 |
| 851 | LEG-WS-037 | 2026-02-19T21:56:10.512Z | 40681 | 47547 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\svc_sql | 419985 |
| 852 | LEG-WS-037 | 2026-02-15T20:37:33.381Z | 18584 | 57765 | System | System | NT AUTHORITY\SYSTEM | 273453 |
| 853 | LEG-WS-037 | 2026-02-11T12:36:53.109Z | 57203 | 52985 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 352142 |
| 854 | LEG-WS-037 | 2026-02-16T22:39:01.715Z | 49756 | 55341 | services.exe | C:\Windows\System32\services.exe | ACME\svc_sql | 413695 |
| 855 | LEG-WS-037 | 2026-02-20T06:47:31.692Z | 55153 | 7580 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\svc_sql | 143158 |
| 856 | LEG-WS-037 | 2026-02-11T07:09:51.084Z | 28128 | 26730 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\svc_sql | 313825 |
| 857 | LEG-WS-037 | 2026-02-13T21:16:52.565Z | 43210 | 39022 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\svc_sql | 58969 |
| 858 | MKT-WS-038 | 2026-02-19T21:40:39.868Z | 344 | 14 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\jsmith | 218617 |
| 859 | MKT-WS-038 | 2026-02-19T19:40:29.480Z | 55374 | 9373 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\jsmith | 205962 |
| 860 | MKT-WS-038 | 2026-02-16T02:19:16.270Z | 28162 | 35248 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\jsmith | 153326 |
| 861 | MKT-WS-038 | 2026-02-13T14:25:32.175Z | 56242 | 51465 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\jsmith | 175365 |
| 862 | MKT-WS-038 | 2026-02-19T10:26:36.630Z | 15497 | 51039 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\jsmith | 360150 |
| 863 | MKT-WS-038 | 2026-02-15T12:24:22.855Z | 26251 | 14506 | teams.exe | C:\Windows\System32\teams.exe | ACME\jsmith | 421855 |
| 864 | MKT-WS-038 | 2026-02-14T20:23:23.612Z | 32624 | 27989 | code.exe | C:\Windows\System32\code.exe | ACME\jsmith | 317951 |
| 865 | MKT-WS-038 | 2026-02-14T00:02:55.754Z | 40779 | 58391 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\jsmith | 315348 |
| 866 | MKT-WS-038 | 2026-02-17T05:40:35.853Z | 3085 | 11154 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\jsmith | 145482 |
| 867 | MKT-WS-038 | 2026-02-18T15:22:56.326Z | 18553 | 50817 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\jsmith | 123178 |
| 868 | MKT-WS-038 | 2026-02-16T04:15:41.605Z | 58693 | 52667 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\jsmith | 438671 |
| 869 | MKT-WS-038 | 2026-02-12T06:08:14.179Z | 28141 | 11962 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\jsmith | 225964 |
| 870 | MKT-WS-038 | 2026-02-15T15:35:34.998Z | 63833 | 17753 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\jsmith | 163409 |
| 871 | MKT-WS-038 | 2026-02-15T19:37:23.259Z | 40332 | 4 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\jsmith | 206586 |
| 872 | MKT-WS-038 | 2026-02-14T08:13:54.504Z | 6436 | 10 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 84999 |
| 873 | MKT-WS-038 | 2026-02-12T18:25:27.246Z | 36057 | 33964 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\jsmith | 115278 |
| 874 | MKT-WS-038 | 2026-02-15T22:22:26.815Z | 46783 | 22064 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\jsmith | 32378 |
| 875 | MKT-WS-038 | 2026-02-18T03:58:00.096Z | 43301 | 24613 | System | System | NT AUTHORITY\SYSTEM | 106282 |
| 876 | MKT-WS-038 | 2026-02-14T02:11:30.642Z | 5782 | 43239 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 331298 |
| 877 | MKT-WS-038 | 2026-02-17T09:23:20.775Z | 13184 | 5161 | services.exe | C:\Windows\System32\services.exe | ACME\jsmith | 104295 |
| 878 | MKT-WS-038 | 2026-02-11T12:25:14.410Z | 22743 | 28344 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\jsmith | 58315 |
| 879 | MKT-WS-038 | 2026-02-19T16:10:26.314Z | 62112 | 29216 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\jsmith | 86931 |
| 880 | MKT-WS-038 | 2026-02-13T08:22:56.575Z | 31894 | 33310 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\jsmith | 99411 |
| 881 | EXEC-WS-039 | 2026-02-18T13:10:47.435Z | 64196 | 19 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\gwhite | 234654 |
| 882 | EXEC-WS-039 | 2026-02-12T03:55:40.047Z | 11294 | 49130 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\gwhite | 404630 |
| 883 | EXEC-WS-039 | 2026-02-18T17:34:55.539Z | 40771 | 58354 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\gwhite | 58823 |
| 884 | EXEC-WS-039 | 2026-02-14T07:03:57.331Z | 31726 | 50146 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\gwhite | 320918 |
| 885 | EXEC-WS-039 | 2026-02-14T13:49:44.342Z | 45905 | 56966 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\gwhite | 85161 |
| 886 | EXEC-WS-039 | 2026-02-13T22:33:39.811Z | 57845 | 11251 | teams.exe | C:\Windows\System32\teams.exe | ACME\gwhite | 287434 |
| 887 | EXEC-WS-039 | 2026-02-20T04:45:00.376Z | 22455 | 43765 | code.exe | C:\Windows\System32\code.exe | ACME\gwhite | 497893 |
| 888 | EXEC-WS-039 | 2026-02-13T04:20:27.436Z | 61244 | 53441 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\gwhite | 104323 |
| 889 | EXEC-WS-039 | 2026-02-16T22:38:50.763Z | 7972 | 14220 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\gwhite | 394908 |
| 890 | EXEC-WS-039 | 2026-02-17T10:22:10.990Z | 20684 | 45727 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\gwhite | 260849 |
| 891 | EXEC-WS-039 | 2026-02-15T19:55:51.111Z | 20049 | 1090 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\gwhite | 162213 |
| 892 | EXEC-WS-039 | 2026-02-10T14:54:09.197Z | 29393 | 18048 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\gwhite | 237804 |
| 893 | EXEC-WS-039 | 2026-02-15T07:10:05.667Z | 12899 | 40082 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\gwhite | 302335 |
| 894 | EXEC-WS-039 | 2026-02-11T10:05:18.619Z | 41286 | 14 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\gwhite | 256406 |
| 895 | EXEC-WS-039 | 2026-02-13T21:23:14.017Z | 22854 | 14 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 255358 |
| 896 | EXEC-WS-039 | 2026-02-18T18:30:11.232Z | 38751 | 37569 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\gwhite | 30158 |
| 897 | EXEC-WS-039 | 2026-02-15T14:41:47.194Z | 25322 | 8272 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\gwhite | 128381 |
| 898 | EXEC-WS-039 | 2026-02-13T01:38:08.003Z | 48647 | 19050 | System | System | NT AUTHORITY\SYSTEM | 173411 |
| 899 | EXEC-WS-039 | 2026-02-15T14:30:34.832Z | 8247 | 5757 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 314191 |
| 900 | EXEC-WS-039 | 2026-02-13T19:26:08.486Z | 20826 | 17185 | services.exe | C:\Windows\System32\services.exe | ACME\gwhite | 41880 |
| 901 | EXEC-WS-039 | 2026-02-20T05:16:34.613Z | 38440 | 58944 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\gwhite | 67104 |
| 902 | EXEC-WS-039 | 2026-02-14T04:16:56.745Z | 19065 | 6946 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\gwhite | 68847 |
| 903 | EXEC-WS-039 | 2026-02-12T19:13:24.377Z | 33777 | 28410 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\gwhite | 287889 |
| 904 | IT-WS-040 | 2026-02-19T03:13:27.521Z | 63198 | 14 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\agarcia | 46704 |
| 905 | IT-WS-040 | 2026-02-10T19:59:19.176Z | 44064 | 29684 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\agarcia | 437229 |
| 906 | IT-WS-040 | 2026-02-14T07:09:30.865Z | 42703 | 43845 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\agarcia | 319182 |
| 907 | IT-WS-040 | 2026-02-13T12:04:17.686Z | 59745 | 7787 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\agarcia | 171640 |
| 908 | IT-WS-040 | 2026-02-15T11:03:48.822Z | 14016 | 16185 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\agarcia | 184286 |
| 909 | IT-WS-040 | 2026-02-10T13:01:03.417Z | 55356 | 11845 | teams.exe | C:\Windows\System32\teams.exe | ACME\agarcia | 430414 |
| 910 | IT-WS-040 | 2026-02-16T17:15:20.128Z | 23654 | 25080 | code.exe | C:\Windows\System32\code.exe | ACME\agarcia | 145774 |
| 911 | IT-WS-040 | 2026-02-11T11:17:38.498Z | 28633 | 44217 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\agarcia | 360099 |
| 912 | IT-WS-040 | 2026-02-20T16:25:57.846Z | 62038 | 19681 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\agarcia | 184893 |
| 913 | IT-WS-040 | 2026-02-12T16:58:30.241Z | 57843 | 31166 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\agarcia | 250150 |
| 914 | IT-WS-040 | 2026-02-20T10:56:17.590Z | 27982 | 58792 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\agarcia | 142649 |
| 915 | IT-WS-040 | 2026-02-16T18:46:22.883Z | 572 | 47537 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\agarcia | 106724 |
| 916 | IT-WS-040 | 2026-02-16T21:19:21.083Z | 17606 | 4799 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\agarcia | 266748 |
| 917 | IT-WS-040 | 2026-02-16T18:39:42.348Z | 4608 | 1 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\agarcia | 256332 |
| 918 | IT-WS-040 | 2026-02-14T05:35:04.834Z | 7392 | 19 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 337802 |
| 919 | IT-WS-040 | 2026-02-20T07:15:49.631Z | 6793 | 43156 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\agarcia | 474778 |
| 920 | IT-WS-040 | 2026-02-13T13:54:25.578Z | 22697 | 6762 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\agarcia | 188946 |
| 921 | IT-WS-040 | 2026-02-16T09:36:18.306Z | 6564 | 18435 | System | System | NT AUTHORITY\SYSTEM | 363082 |
| 922 | IT-WS-040 | 2026-02-13T17:43:22.578Z | 42797 | 23636 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 407243 |
| 923 | IT-WS-040 | 2026-02-15T09:35:02.808Z | 12514 | 35662 | services.exe | C:\Windows\System32\services.exe | ACME\agarcia | 112529 |
| 924 | IT-WS-040 | 2026-02-10T17:04:14.258Z | 25243 | 36082 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\agarcia | 458232 |
| 925 | IT-WS-040 | 2026-02-16T12:41:30.427Z | 30705 | 11558 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\agarcia | 224548 |
| 926 | IT-WS-040 | 2026-02-19T03:13:33.496Z | 47710 | 5204 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\agarcia | 272322 |
| 927 | IT-WS-040 | 2026-02-12T20:18:39.380Z | 44108 | 34085 | steam.exe | C:\Users\agarcia\AppData\Local\steam\steam.exe | ACME\agarcia | 85957 |
| 928 | HR-WS-041 | 2026-02-13T13:44:00.549Z | 54349 | 18 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\fthompson | 74382 |
| 929 | HR-WS-041 | 2026-02-17T18:22:46.651Z | 56303 | 30797 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\fthompson | 103457 |
| 930 | HR-WS-041 | 2026-02-10T13:47:57.321Z | 42838 | 58123 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\fthompson | 312720 |
| 931 | HR-WS-041 | 2026-02-15T01:55:07.350Z | 39693 | 2161 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\fthompson | 10191 |
| 932 | HR-WS-041 | 2026-02-17T20:51:56.383Z | 51718 | 20529 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\fthompson | 202962 |
| 933 | HR-WS-041 | 2026-02-13T21:05:46.665Z | 18153 | 16532 | teams.exe | C:\Windows\System32\teams.exe | ACME\fthompson | 124809 |
| 934 | HR-WS-041 | 2026-02-10T09:42:49.418Z | 1535 | 43550 | code.exe | C:\Windows\System32\code.exe | ACME\fthompson | 353118 |
| 935 | HR-WS-041 | 2026-02-14T01:24:15.839Z | 269 | 17251 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\fthompson | 380463 |
| 936 | HR-WS-041 | 2026-02-16T16:33:06.544Z | 8251 | 44276 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\fthompson | 25968 |
| 937 | HR-WS-041 | 2026-02-19T01:39:33.740Z | 33629 | 5581 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\fthompson | 252371 |
| 938 | HR-WS-041 | 2026-02-10T21:11:23.434Z | 15223 | 13928 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\fthompson | 94006 |
| 939 | HR-WS-041 | 2026-02-18T22:02:03.405Z | 32407 | 41921 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\fthompson | 126412 |
| 940 | HR-WS-041 | 2026-02-18T17:56:33.689Z | 46925 | 9190 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\fthompson | 240612 |
| 941 | HR-WS-041 | 2026-02-12T11:40:55.852Z | 12115 | 6 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\fthompson | 261199 |
| 942 | HR-WS-041 | 2026-02-16T17:16:37.569Z | 14647 | 14 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 170880 |
| 943 | HR-WS-041 | 2026-02-18T23:47:13.729Z | 3983 | 17252 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\fthompson | 77644 |
| 944 | HR-WS-041 | 2026-02-14T08:27:34.958Z | 60183 | 42632 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\fthompson | 24535 |
| 945 | HR-WS-041 | 2026-02-10T20:01:05.763Z | 21854 | 38447 | System | System | NT AUTHORITY\SYSTEM | 244465 |
| 946 | HR-WS-041 | 2026-02-12T12:42:39.859Z | 15423 | 23472 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 443183 |
| 947 | HR-WS-041 | 2026-02-14T16:34:52.028Z | 9330 | 10867 | services.exe | C:\Windows\System32\services.exe | ACME\fthompson | 433246 |
| 948 | HR-WS-041 | 2026-02-14T03:30:46.977Z | 43150 | 59795 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\fthompson | 310199 |
| 949 | HR-WS-041 | 2026-02-20T09:19:58.987Z | 13602 | 3535 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\fthompson | 428939 |
| 950 | HR-WS-041 | 2026-02-19T07:18:13.423Z | 50002 | 22642 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\fthompson | 296373 |
| 951 | FIN-WS-042 | 2026-02-19T02:52:02.076Z | 50488 | 10 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\cjohnson | 51643 |
| 952 | FIN-WS-042 | 2026-02-17T04:38:51.642Z | 12862 | 44470 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\cjohnson | 425358 |
| 953 | FIN-WS-042 | 2026-02-14T20:35:09.167Z | 40376 | 38596 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\cjohnson | 77080 |
| 954 | FIN-WS-042 | 2026-02-16T22:21:50.066Z | 27678 | 3982 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\cjohnson | 433020 |
| 955 | FIN-WS-042 | 2026-02-10T14:22:31.297Z | 4158 | 46959 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\cjohnson | 295498 |
| 956 | FIN-WS-042 | 2026-02-15T02:35:52.453Z | 40873 | 46406 | teams.exe | C:\Windows\System32\teams.exe | ACME\cjohnson | 245893 |
| 957 | FIN-WS-042 | 2026-02-10T10:46:04.035Z | 16828 | 57934 | code.exe | C:\Windows\System32\code.exe | ACME\cjohnson | 165784 |
| 958 | FIN-WS-042 | 2026-02-17T03:40:52.645Z | 5979 | 17032 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\cjohnson | 128088 |
| 959 | FIN-WS-042 | 2026-02-14T08:41:16.595Z | 7600 | 55966 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\cjohnson | 48801 |
| 960 | FIN-WS-042 | 2026-02-16T16:00:09.582Z | 51947 | 4612 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\cjohnson | 449091 |
| 961 | FIN-WS-042 | 2026-02-12T10:01:42.962Z | 5933 | 46054 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\cjohnson | 193535 |
| 962 | FIN-WS-042 | 2026-02-17T19:17:46.840Z | 27617 | 20447 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\cjohnson | 337044 |
| 963 | FIN-WS-042 | 2026-02-11T23:05:51.430Z | 64196 | 49986 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\cjohnson | 190137 |
| 964 | FIN-WS-042 | 2026-02-19T13:18:17.628Z | 60668 | 10 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\cjohnson | 91901 |
| 965 | FIN-WS-042 | 2026-02-10T18:32:13.492Z | 28150 | 2 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 67695 |
| 966 | FIN-WS-042 | 2026-02-17T01:28:55.454Z | 35490 | 49414 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\cjohnson | 346470 |
| 967 | FIN-WS-042 | 2026-02-12T07:20:05.362Z | 12103 | 11061 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\cjohnson | 137208 |
| 968 | FIN-WS-042 | 2026-02-19T04:44:03.049Z | 13446 | 23692 | System | System | NT AUTHORITY\SYSTEM | 320428 |
| 969 | FIN-WS-042 | 2026-02-12T06:54:24.044Z | 59948 | 40471 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 339859 |
| 970 | FIN-WS-042 | 2026-02-19T22:56:55.054Z | 39218 | 21018 | services.exe | C:\Windows\System32\services.exe | ACME\cjohnson | 158631 |
| 971 | FIN-WS-042 | 2026-02-19T18:10:24.602Z | 24170 | 57510 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\cjohnson | 297368 |
| 972 | FIN-WS-042 | 2026-02-13T17:30:34.846Z | 11059 | 10298 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\cjohnson | 337075 |
| 973 | FIN-WS-042 | 2026-02-19T08:47:54.868Z | 31726 | 18366 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\cjohnson | 169887 |
| 974 | SLS-WS-043 | 2026-02-15T02:36:18.291Z | 40907 | 15 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\dlee | 209768 |
| 975 | SLS-WS-043 | 2026-02-11T09:32:00.832Z | 24100 | 20723 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\dlee | 270986 |
| 976 | SLS-WS-043 | 2026-02-18T18:34:15.673Z | 55543 | 51018 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\dlee | 353970 |
| 977 | SLS-WS-043 | 2026-02-17T07:49:09.223Z | 58251 | 40596 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\dlee | 229424 |
| 978 | SLS-WS-043 | 2026-02-12T07:02:03.593Z | 13328 | 35231 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\dlee | 258162 |
| 979 | SLS-WS-043 | 2026-02-13T22:45:50.842Z | 26828 | 27849 | teams.exe | C:\Windows\System32\teams.exe | ACME\dlee | 239084 |
| 980 | SLS-WS-043 | 2026-02-11T04:04:15.919Z | 3916 | 13874 | code.exe | C:\Windows\System32\code.exe | ACME\dlee | 2729 |
| 981 | SLS-WS-043 | 2026-02-11T15:54:18.229Z | 5229 | 11087 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\dlee | 38451 |
| 982 | SLS-WS-043 | 2026-02-17T01:00:08.026Z | 16181 | 14812 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\dlee | 490074 |
| 983 | SLS-WS-043 | 2026-02-15T11:15:11.543Z | 45963 | 33905 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\dlee | 413128 |
| 984 | SLS-WS-043 | 2026-02-18T10:15:27.124Z | 13876 | 42108 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\dlee | 412676 |
| 985 | SLS-WS-043 | 2026-02-11T02:25:27.537Z | 17252 | 11801 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\dlee | 151622 |
| 986 | SLS-WS-043 | 2026-02-12T13:37:13.840Z | 48406 | 33610 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\dlee | 416658 |
| 987 | SLS-WS-043 | 2026-02-17T08:58:27.803Z | 22106 | 10 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\dlee | 398352 |
| 988 | SLS-WS-043 | 2026-02-13T08:08:04.701Z | 21828 | 15 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 266565 |
| 989 | SLS-WS-043 | 2026-02-16T21:10:35.978Z | 34596 | 46772 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\dlee | 325260 |
| 990 | SLS-WS-043 | 2026-02-15T18:05:07.202Z | 27949 | 58136 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\dlee | 105984 |
| 991 | SLS-WS-043 | 2026-02-11T15:47:55.140Z | 36926 | 45525 | System | System | NT AUTHORITY\SYSTEM | 80029 |
| 992 | SLS-WS-043 | 2026-02-13T07:35:16.882Z | 24456 | 56958 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 19855 |
| 993 | SLS-WS-043 | 2026-02-12T08:04:23.568Z | 40945 | 56272 | services.exe | C:\Windows\System32\services.exe | ACME\dlee | 180119 |
| 994 | SLS-WS-043 | 2026-02-20T00:59:31.322Z | 45270 | 16411 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\dlee | 179084 |
| 995 | SLS-WS-043 | 2026-02-13T23:59:34.698Z | 11429 | 4298 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\dlee | 258023 |
| 996 | SLS-WS-043 | 2026-02-20T14:14:54.040Z | 12924 | 44682 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\dlee | 415082 |
| 997 | ENG-WS-044 | 2026-02-20T06:12:49.153Z | 1492 | 14 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\svc_web | 380481 |
| 998 | ENG-WS-044 | 2026-02-16T05:16:06.924Z | 37718 | 42064 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\svc_web | 374781 |
| 999 | ENG-WS-044 | 2026-02-20T11:01:51.299Z | 48260 | 10037 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\svc_web | 135113 |
| 1000 | ENG-WS-044 | 2026-02-20T08:37:17.253Z | 30916 | 6785 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\svc_web | 250493 |
| 1001 | ENG-WS-044 | 2026-02-14T15:48:16.731Z | 51186 | 21129 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\svc_web | 56283 |
| 1002 | ENG-WS-044 | 2026-02-10T19:36:21.947Z | 1226 | 35852 | teams.exe | C:\Windows\System32\teams.exe | ACME\svc_web | 478128 |
| 1003 | ENG-WS-044 | 2026-02-18T16:12:19.483Z | 5135 | 2649 | code.exe | C:\Windows\System32\code.exe | ACME\svc_web | 430548 |
| 1004 | ENG-WS-044 | 2026-02-12T04:52:39.580Z | 1427 | 10738 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\svc_web | 54815 |
| 1005 | ENG-WS-044 | 2026-02-12T12:24:43.725Z | 47006 | 9267 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\svc_web | 178364 |
| 1006 | ENG-WS-044 | 2026-02-11T10:39:08.538Z | 63091 | 23915 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\svc_web | 51635 |
| 1007 | ENG-WS-044 | 2026-02-14T16:22:49.071Z | 56471 | 53389 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\svc_web | 269472 |
| 1008 | ENG-WS-044 | 2026-02-12T07:45:26.822Z | 14810 | 9038 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\svc_web | 292259 |
| 1009 | ENG-WS-044 | 2026-02-13T00:50:27.132Z | 23371 | 59817 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\svc_web | 138260 |
| 1010 | ENG-WS-044 | 2026-02-20T01:52:11.040Z | 64074 | 5 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\svc_web | 215606 |
| 1011 | ENG-WS-044 | 2026-02-16T20:58:38.198Z | 53763 | 8 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 217271 |
| 1012 | ENG-WS-044 | 2026-02-11T15:54:12.794Z | 48847 | 49024 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\svc_web | 155674 |
| 1013 | ENG-WS-044 | 2026-02-12T10:43:41.204Z | 17406 | 21034 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\svc_web | 249958 |
| 1014 | ENG-WS-044 | 2026-02-17T01:30:01.849Z | 7073 | 22125 | System | System | NT AUTHORITY\SYSTEM | 140836 |
| 1015 | ENG-WS-044 | 2026-02-19T00:41:04.815Z | 21192 | 8268 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 206946 |
| 1016 | ENG-WS-044 | 2026-02-19T07:28:05.073Z | 32114 | 35722 | services.exe | C:\Windows\System32\services.exe | ACME\svc_web | 259887 |
| 1017 | ENG-WS-044 | 2026-02-18T18:27:00.314Z | 36174 | 32870 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\svc_web | 402514 |
| 1018 | ENG-WS-044 | 2026-02-17T09:44:54.641Z | 54469 | 5241 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\svc_web | 335974 |
| 1019 | ENG-WS-044 | 2026-02-16T15:22:32.607Z | 23231 | 50009 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\svc_web | 110104 |
| 1020 | LEG-WS-045 | 2026-02-12T08:55:22.667Z | 19663 | 6 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\hbrown | 92718 |
| 1021 | LEG-WS-045 | 2026-02-14T10:18:39.841Z | 46385 | 45066 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\hbrown | 178072 |
| 1022 | LEG-WS-045 | 2026-02-13T03:10:45.750Z | 23386 | 52076 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\hbrown | 321274 |
| 1023 | LEG-WS-045 | 2026-02-12T11:54:20.926Z | 44695 | 2762 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\hbrown | 377077 |
| 1024 | LEG-WS-045 | 2026-02-18T00:01:27.927Z | 25455 | 53999 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\hbrown | 371013 |
| 1025 | LEG-WS-045 | 2026-02-10T16:46:27.751Z | 12438 | 5772 | teams.exe | C:\Windows\System32\teams.exe | ACME\hbrown | 461735 |
| 1026 | LEG-WS-045 | 2026-02-14T23:06:28.503Z | 55986 | 22462 | code.exe | C:\Windows\System32\code.exe | ACME\hbrown | 298595 |
| 1027 | LEG-WS-045 | 2026-02-12T03:59:49.553Z | 29918 | 16309 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\hbrown | 369705 |
| 1028 | LEG-WS-045 | 2026-02-14T00:30:06.662Z | 36026 | 6666 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\hbrown | 179666 |
| 1029 | LEG-WS-045 | 2026-02-15T01:31:03.383Z | 22286 | 9120 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\hbrown | 493478 |
| 1030 | LEG-WS-045 | 2026-02-15T05:19:27.241Z | 36746 | 47913 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\hbrown | 335960 |
| 1031 | LEG-WS-045 | 2026-02-16T21:30:02.358Z | 51099 | 10693 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\hbrown | 4482 |
| 1032 | LEG-WS-045 | 2026-02-19T11:42:37.952Z | 57737 | 12037 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\hbrown | 173898 |
| 1033 | LEG-WS-045 | 2026-02-10T13:28:31.111Z | 28247 | 10 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\hbrown | 355393 |
| 1034 | LEG-WS-045 | 2026-02-10T11:38:08.721Z | 38325 | 8 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 321866 |
| 1035 | LEG-WS-045 | 2026-02-15T21:31:06.845Z | 49897 | 40465 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\hbrown | 267797 |
| 1036 | LEG-WS-045 | 2026-02-16T13:55:36.492Z | 39882 | 5231 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\hbrown | 196623 |
| 1037 | LEG-WS-045 | 2026-02-17T13:57:56.597Z | 915 | 31668 | System | System | NT AUTHORITY\SYSTEM | 229942 |
| 1038 | LEG-WS-045 | 2026-02-20T15:48:00.337Z | 32569 | 37388 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 299607 |
| 1039 | LEG-WS-045 | 2026-02-16T05:33:09.338Z | 37549 | 39860 | services.exe | C:\Windows\System32\services.exe | ACME\hbrown | 351186 |
| 1040 | LEG-WS-045 | 2026-02-20T17:38:41.709Z | 34480 | 7193 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\hbrown | 339755 |
| 1041 | LEG-WS-045 | 2026-02-19T15:39:38.195Z | 8182 | 58224 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\hbrown | 298900 |
| 1042 | LEG-WS-045 | 2026-02-20T10:30:29.180Z | 19131 | 36928 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\hbrown | 478752 |
| 1043 | MKT-WS-046 | 2026-02-12T03:19:52.892Z | 25578 | 4 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\dlee | 346759 |
| 1044 | MKT-WS-046 | 2026-02-17T13:59:01.018Z | 5570 | 39331 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\dlee | 5626 |
| 1045 | MKT-WS-046 | 2026-02-13T08:16:05.497Z | 2466 | 9407 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\dlee | 190966 |
| 1046 | MKT-WS-046 | 2026-02-15T11:36:35.955Z | 22175 | 7510 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\dlee | 479599 |
| 1047 | MKT-WS-046 | 2026-02-18T06:07:53.967Z | 21521 | 34159 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\dlee | 476045 |
| 1048 | MKT-WS-046 | 2026-02-19T22:30:14.475Z | 14370 | 58993 | teams.exe | C:\Windows\System32\teams.exe | ACME\dlee | 238569 |
| 1049 | MKT-WS-046 | 2026-02-12T11:05:29.728Z | 13911 | 21938 | code.exe | C:\Windows\System32\code.exe | ACME\dlee | 87961 |
| 1050 | MKT-WS-046 | 2026-02-10T16:33:54.487Z | 57741 | 31132 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\dlee | 265629 |
| 1051 | MKT-WS-046 | 2026-02-16T12:17:05.057Z | 50902 | 53507 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\dlee | 211700 |
| 1052 | MKT-WS-046 | 2026-02-15T13:24:20.311Z | 26864 | 28574 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\dlee | 425323 |
| 1053 | MKT-WS-046 | 2026-02-14T04:14:39.019Z | 58267 | 35033 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\dlee | 283792 |
| 1054 | MKT-WS-046 | 2026-02-13T03:08:44.365Z | 54713 | 48994 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\dlee | 37513 |
| 1055 | MKT-WS-046 | 2026-02-12T00:23:29.376Z | 5925 | 25345 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\dlee | 36165 |
| 1056 | MKT-WS-046 | 2026-02-14T00:37:58.198Z | 3991 | 13 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\dlee | 445781 |
| 1057 | MKT-WS-046 | 2026-02-13T12:10:26.968Z | 49548 | 3 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 323855 |
| 1058 | MKT-WS-046 | 2026-02-15T03:24:51.974Z | 16684 | 55305 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\dlee | 413670 |
| 1059 | MKT-WS-046 | 2026-02-17T23:30:53.422Z | 40315 | 26483 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\dlee | 359852 |
| 1060 | MKT-WS-046 | 2026-02-18T03:15:46.515Z | 51902 | 19117 | System | System | NT AUTHORITY\SYSTEM | 42008 |
| 1061 | MKT-WS-046 | 2026-02-14T00:24:59.926Z | 1293 | 22376 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 260688 |
| 1062 | MKT-WS-046 | 2026-02-10T19:17:49.322Z | 4451 | 43551 | services.exe | C:\Windows\System32\services.exe | ACME\dlee | 108454 |
| 1063 | MKT-WS-046 | 2026-02-20T17:34:18.719Z | 44685 | 3706 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\dlee | 406057 |
| 1064 | MKT-WS-046 | 2026-02-13T18:38:02.357Z | 9530 | 30308 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\dlee | 218262 |
| 1065 | MKT-WS-046 | 2026-02-19T22:10:01.236Z | 2819 | 36618 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\dlee | 287176 |
| 1066 | EXEC-WS-047 | 2026-02-14T07:45:39.722Z | 21770 | 18 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\svc_sql | 237669 |
| 1067 | EXEC-WS-047 | 2026-02-20T15:09:51.581Z | 39939 | 12489 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\svc_sql | 455922 |
| 1068 | EXEC-WS-047 | 2026-02-12T10:57:09.087Z | 34270 | 19721 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\svc_sql | 473732 |
| 1069 | EXEC-WS-047 | 2026-02-11T08:57:23.818Z | 10658 | 12443 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\svc_sql | 298490 |
| 1070 | EXEC-WS-047 | 2026-02-13T19:21:20.382Z | 18223 | 50506 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\svc_sql | 389933 |
| 1071 | EXEC-WS-047 | 2026-02-13T22:24:14.892Z | 6746 | 11163 | teams.exe | C:\Windows\System32\teams.exe | ACME\svc_sql | 457060 |
| 1072 | EXEC-WS-047 | 2026-02-14T20:18:36.989Z | 63359 | 36027 | code.exe | C:\Windows\System32\code.exe | ACME\svc_sql | 223459 |
| 1073 | EXEC-WS-047 | 2026-02-20T10:14:00.309Z | 9206 | 42219 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\svc_sql | 3590 |
| 1074 | EXEC-WS-047 | 2026-02-19T15:50:42.336Z | 49684 | 41031 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\svc_sql | 57377 |
| 1075 | EXEC-WS-047 | 2026-02-17T10:31:55.501Z | 36246 | 3016 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\svc_sql | 26059 |
| 1076 | EXEC-WS-047 | 2026-02-19T10:12:01.313Z | 42913 | 37733 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\svc_sql | 378804 |
| 1077 | EXEC-WS-047 | 2026-02-18T23:04:28.943Z | 47866 | 47828 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\svc_sql | 307600 |
| 1078 | EXEC-WS-047 | 2026-02-11T15:01:56.927Z | 7665 | 20872 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\svc_sql | 159350 |
| 1079 | EXEC-WS-047 | 2026-02-13T08:57:09.260Z | 48934 | 4 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\svc_sql | 188862 |
| 1080 | EXEC-WS-047 | 2026-02-16T03:35:20.290Z | 51713 | 2 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 8501 |
| 1081 | EXEC-WS-047 | 2026-02-17T16:00:31.795Z | 43696 | 5290 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\svc_sql | 354656 |
| 1082 | EXEC-WS-047 | 2026-02-16T21:18:42.572Z | 17548 | 31504 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\svc_sql | 375984 |
| 1083 | EXEC-WS-047 | 2026-02-17T12:00:43.851Z | 10687 | 39513 | System | System | NT AUTHORITY\SYSTEM | 477535 |
| 1084 | EXEC-WS-047 | 2026-02-14T15:39:37.559Z | 14463 | 51453 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 38858 |
| 1085 | EXEC-WS-047 | 2026-02-12T02:56:23.422Z | 58362 | 12068 | services.exe | C:\Windows\System32\services.exe | ACME\svc_sql | 216994 |
| 1086 | EXEC-WS-047 | 2026-02-11T17:54:51.380Z | 19971 | 29737 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\svc_sql | 363878 |
| 1087 | EXEC-WS-047 | 2026-02-12T14:48:09.137Z | 17594 | 45275 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\svc_sql | 302432 |
| 1088 | EXEC-WS-047 | 2026-02-12T04:34:35.098Z | 48583 | 56668 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\svc_sql | 179581 |
| 1089 | IT-WS-048 | 2026-02-19T03:48:45.048Z | 26172 | 1 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\svc_backup | 67342 |
| 1090 | IT-WS-048 | 2026-02-15T22:13:01.620Z | 16713 | 1814 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\svc_backup | 44884 |
| 1091 | IT-WS-048 | 2026-02-17T16:57:33.445Z | 29823 | 18658 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\svc_backup | 145961 |
| 1092 | IT-WS-048 | 2026-02-17T08:10:25.766Z | 9159 | 24178 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\svc_backup | 488139 |
| 1093 | IT-WS-048 | 2026-02-17T15:27:05.862Z | 37534 | 45928 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\svc_backup | 384940 |
| 1094 | IT-WS-048 | 2026-02-14T12:02:27.812Z | 52866 | 55847 | teams.exe | C:\Windows\System32\teams.exe | ACME\svc_backup | 342515 |
| 1095 | IT-WS-048 | 2026-02-16T20:26:08.065Z | 22213 | 49348 | code.exe | C:\Windows\System32\code.exe | ACME\svc_backup | 238109 |
| 1096 | IT-WS-048 | 2026-02-20T04:46:05.697Z | 52102 | 53384 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\svc_backup | 227783 |
| 1097 | IT-WS-048 | 2026-02-12T04:13:55.185Z | 33072 | 56208 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\svc_backup | 299024 |
| 1098 | IT-WS-048 | 2026-02-17T01:52:44.649Z | 6515 | 36019 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\svc_backup | 54557 |
| 1099 | IT-WS-048 | 2026-02-13T12:39:54.297Z | 10943 | 10088 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\svc_backup | 404318 |
| 1100 | IT-WS-048 | 2026-02-11T14:43:56.722Z | 25277 | 25646 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\svc_backup | 137160 |
| 1101 | IT-WS-048 | 2026-02-18T10:50:09.383Z | 58015 | 10557 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\svc_backup | 282512 |
| 1102 | IT-WS-048 | 2026-02-18T17:03:03.296Z | 2664 | 20 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\svc_backup | 1863 |
| 1103 | IT-WS-048 | 2026-02-16T15:59:42.439Z | 10677 | 1 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 442508 |
| 1104 | IT-WS-048 | 2026-02-17T16:29:00.153Z | 30773 | 38564 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\svc_backup | 319473 |
| 1105 | IT-WS-048 | 2026-02-12T21:42:33.561Z | 28629 | 44276 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\svc_backup | 455468 |
| 1106 | IT-WS-048 | 2026-02-18T23:45:16.333Z | 59989 | 6752 | System | System | NT AUTHORITY\SYSTEM | 360836 |
| 1107 | IT-WS-048 | 2026-02-11T03:21:08.153Z | 20950 | 40912 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 247009 |
| 1108 | IT-WS-048 | 2026-02-12T13:18:22.286Z | 22485 | 42658 | services.exe | C:\Windows\System32\services.exe | ACME\svc_backup | 62522 |
| 1109 | IT-WS-048 | 2026-02-11T17:49:07.671Z | 28926 | 3696 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\svc_backup | 444353 |
| 1110 | IT-WS-048 | 2026-02-12T10:57:01.242Z | 23056 | 58775 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\svc_backup | 262569 |
| 1111 | IT-WS-048 | 2026-02-10T08:25:33.777Z | 39327 | 31161 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\svc_backup | 205116 |
| 1112 | IT-WS-048 | 2026-02-12T18:55:02.621Z | 60026 | 31465 | epicgameslauncher.exe | C:\Users\svc_backup\AppData\Local\epicgameslauncher\epicgameslauncher.exe | ACME\svc_backup | 231186 |
| 1113 | HR-WS-049 | 2026-02-18T08:09:39.915Z | 30296 | 6 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\hbrown | 104996 |
| 1114 | HR-WS-049 | 2026-02-15T11:05:08.695Z | 30717 | 5763 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\hbrown | 19625 |
| 1115 | HR-WS-049 | 2026-02-13T16:49:57.638Z | 44969 | 7627 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\hbrown | 126919 |
| 1116 | HR-WS-049 | 2026-02-10T09:50:54.810Z | 14987 | 1726 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\hbrown | 485969 |
| 1117 | HR-WS-049 | 2026-02-13T20:09:58.168Z | 57031 | 12313 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\hbrown | 201720 |
| 1118 | HR-WS-049 | 2026-02-18T17:57:59.328Z | 37808 | 59916 | teams.exe | C:\Windows\System32\teams.exe | ACME\hbrown | 143424 |
| 1119 | HR-WS-049 | 2026-02-12T22:51:21.163Z | 29266 | 50136 | code.exe | C:\Windows\System32\code.exe | ACME\hbrown | 473481 |
| 1120 | HR-WS-049 | 2026-02-19T22:59:23.691Z | 4500 | 12607 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\hbrown | 124698 |
| 1121 | HR-WS-049 | 2026-02-14T01:11:44.025Z | 4684 | 6679 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\hbrown | 312895 |
| 1122 | HR-WS-049 | 2026-02-12T16:42:02.205Z | 27268 | 33074 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\hbrown | 153423 |
| 1123 | HR-WS-049 | 2026-02-18T03:38:25.407Z | 64779 | 35449 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\hbrown | 364016 |
| 1124 | HR-WS-049 | 2026-02-11T19:15:14.080Z | 19835 | 10447 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\hbrown | 344960 |
| 1125 | HR-WS-049 | 2026-02-11T05:43:40.841Z | 28434 | 13043 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\hbrown | 159690 |
| 1126 | HR-WS-049 | 2026-02-10T12:24:15.983Z | 57989 | 7 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\hbrown | 462666 |
| 1127 | HR-WS-049 | 2026-02-10T15:20:18.498Z | 54736 | 20 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 109208 |
| 1128 | HR-WS-049 | 2026-02-20T03:55:55.282Z | 42176 | 42904 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\hbrown | 363527 |
| 1129 | HR-WS-049 | 2026-02-12T21:41:27.731Z | 37350 | 7800 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\hbrown | 187556 |
| 1130 | HR-WS-049 | 2026-02-17T00:08:53.836Z | 53902 | 25067 | System | System | NT AUTHORITY\SYSTEM | 103776 |
| 1131 | HR-WS-049 | 2026-02-17T17:22:19.112Z | 56386 | 53827 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 227570 |
| 1132 | HR-WS-049 | 2026-02-12T11:47:19.908Z | 32614 | 5864 | services.exe | C:\Windows\System32\services.exe | ACME\hbrown | 161520 |
| 1133 | HR-WS-049 | 2026-02-19T18:44:15.665Z | 27540 | 57880 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\hbrown | 103653 |
| 1134 | HR-WS-049 | 2026-02-18T02:43:19.967Z | 21641 | 5570 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\hbrown | 159087 |
| 1135 | HR-WS-049 | 2026-02-12T05:56:15.972Z | 21387 | 11160 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\hbrown | 396791 |
| 1136 | FIN-WS-050 | 2026-02-17T11:44:05.994Z | 9222 | 11 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\cjohnson | 436561 |
| 1137 | FIN-WS-050 | 2026-02-17T04:59:13.938Z | 20337 | 33622 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\cjohnson | 381225 |
| 1138 | FIN-WS-050 | 2026-02-17T19:10:24.822Z | 12353 | 54093 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\cjohnson | 235304 |
| 1139 | FIN-WS-050 | 2026-02-16T06:01:53.489Z | 50054 | 40230 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\cjohnson | 374334 |
| 1140 | FIN-WS-050 | 2026-02-19T04:12:45.590Z | 16854 | 39165 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\cjohnson | 187296 |
| 1141 | FIN-WS-050 | 2026-02-15T02:01:08.197Z | 63900 | 28813 | teams.exe | C:\Windows\System32\teams.exe | ACME\cjohnson | 289267 |
| 1142 | FIN-WS-050 | 2026-02-12T15:18:05.652Z | 15822 | 42128 | code.exe | C:\Windows\System32\code.exe | ACME\cjohnson | 93447 |
| 1143 | FIN-WS-050 | 2026-02-16T15:51:21.715Z | 7917 | 43945 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\cjohnson | 1088 |
| 1144 | FIN-WS-050 | 2026-02-14T08:53:25.968Z | 64278 | 44885 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\cjohnson | 4440 |
| 1145 | FIN-WS-050 | 2026-02-13T08:06:21.667Z | 62660 | 28491 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\cjohnson | 76346 |
| 1146 | FIN-WS-050 | 2026-02-20T04:18:51.808Z | 12963 | 45455 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\cjohnson | 387991 |
| 1147 | FIN-WS-050 | 2026-02-13T16:51:58.204Z | 42086 | 5100 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\cjohnson | 22472 |
| 1148 | FIN-WS-050 | 2026-02-13T01:19:20.723Z | 10295 | 20296 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\cjohnson | 242311 |
| 1149 | FIN-WS-050 | 2026-02-10T10:05:08.347Z | 33067 | 7 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\cjohnson | 497285 |
| 1150 | FIN-WS-050 | 2026-02-10T11:38:01.087Z | 29758 | 11 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 210676 |
| 1151 | FIN-WS-050 | 2026-02-15T12:21:43.946Z | 12999 | 9389 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\cjohnson | 11999 |
| 1152 | FIN-WS-050 | 2026-02-17T02:41:07.287Z | 62924 | 12523 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\cjohnson | 300457 |
| 1153 | FIN-WS-050 | 2026-02-11T09:33:03.829Z | 7638 | 16660 | System | System | NT AUTHORITY\SYSTEM | 9683 |
| 1154 | FIN-WS-050 | 2026-02-11T15:20:32.428Z | 44386 | 22791 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 498334 |
| 1155 | FIN-WS-050 | 2026-02-14T11:12:59.435Z | 39762 | 41291 | services.exe | C:\Windows\System32\services.exe | ACME\cjohnson | 431534 |
| 1156 | FIN-WS-050 | 2026-02-20T01:35:05.894Z | 60955 | 27193 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\cjohnson | 88649 |
| 1157 | FIN-WS-050 | 2026-02-17T22:35:20.313Z | 30538 | 10113 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\cjohnson | 99326 |
| 1158 | FIN-WS-050 | 2026-02-14T13:33:22.241Z | 59817 | 57360 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\cjohnson | 497311 |
| 1159 | SLS-WS-051 | 2026-02-12T10:40:29.261Z | 61778 | 10 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\emartinez | 256062 |
| 1160 | SLS-WS-051 | 2026-02-17T01:58:05.994Z | 27505 | 33501 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\emartinez | 403574 |
| 1161 | SLS-WS-051 | 2026-02-20T07:03:43.833Z | 31626 | 40155 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\emartinez | 252034 |
| 1162 | SLS-WS-051 | 2026-02-14T09:28:02.636Z | 43295 | 20139 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\emartinez | 331103 |
| 1163 | SLS-WS-051 | 2026-02-14T08:36:00.680Z | 56166 | 12284 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\emartinez | 270414 |
| 1164 | SLS-WS-051 | 2026-02-12T08:37:14.724Z | 26860 | 46581 | teams.exe | C:\Windows\System32\teams.exe | ACME\emartinez | 468855 |
| 1165 | SLS-WS-051 | 2026-02-17T12:43:47.427Z | 51738 | 5932 | code.exe | C:\Windows\System32\code.exe | ACME\emartinez | 109092 |
| 1166 | SLS-WS-051 | 2026-02-15T10:02:47.700Z | 14557 | 8789 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\emartinez | 407284 |
| 1167 | SLS-WS-051 | 2026-02-18T16:36:19.070Z | 36861 | 48377 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\emartinez | 377869 |
| 1168 | SLS-WS-051 | 2026-02-18T18:56:45.244Z | 36154 | 8936 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\emartinez | 436110 |
| 1169 | SLS-WS-051 | 2026-02-12T02:45:14.102Z | 29735 | 176 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\emartinez | 499096 |
| 1170 | SLS-WS-051 | 2026-02-19T07:14:22.715Z | 27430 | 43765 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\emartinez | 64266 |
| 1171 | SLS-WS-051 | 2026-02-14T08:12:06.674Z | 39619 | 37237 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\emartinez | 156533 |
| 1172 | SLS-WS-051 | 2026-02-13T06:46:44.455Z | 56246 | 20 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\emartinez | 50318 |
| 1173 | SLS-WS-051 | 2026-02-13T23:57:31.029Z | 56271 | 18 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 162607 |
| 1174 | SLS-WS-051 | 2026-02-14T00:40:17.992Z | 48252 | 30224 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\emartinez | 499559 |
| 1175 | SLS-WS-051 | 2026-02-18T00:45:14.772Z | 8172 | 27350 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\emartinez | 418471 |
| 1176 | SLS-WS-051 | 2026-02-13T06:47:25.687Z | 13787 | 35798 | System | System | NT AUTHORITY\SYSTEM | 498336 |
| 1177 | SLS-WS-051 | 2026-02-11T21:33:30.641Z | 21483 | 45388 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 16358 |
| 1178 | SLS-WS-051 | 2026-02-15T16:51:31.521Z | 53782 | 27541 | services.exe | C:\Windows\System32\services.exe | ACME\emartinez | 97453 |
| 1179 | SLS-WS-051 | 2026-02-20T10:40:22.335Z | 55194 | 10434 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\emartinez | 241367 |
| 1180 | SLS-WS-051 | 2026-02-17T17:40:24.006Z | 37213 | 20638 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\emartinez | 38579 |
| 1181 | SLS-WS-051 | 2026-02-11T05:09:26.245Z | 20209 | 51131 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\emartinez | 6672 |
| 1182 | ENG-WS-052 | 2026-02-17T08:06:12.818Z | 25169 | 3 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\fthompson | 194281 |
| 1183 | ENG-WS-052 | 2026-02-16T19:09:43.524Z | 40405 | 11222 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\fthompson | 100633 |
| 1184 | ENG-WS-052 | 2026-02-13T20:20:12.655Z | 10456 | 48053 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\fthompson | 498731 |
| 1185 | ENG-WS-052 | 2026-02-16T13:46:25.159Z | 29708 | 34691 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\fthompson | 478703 |
| 1186 | ENG-WS-052 | 2026-02-13T19:44:49.196Z | 35958 | 33174 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\fthompson | 465026 |
| 1187 | ENG-WS-052 | 2026-02-16T06:06:48.745Z | 2936 | 27858 | teams.exe | C:\Windows\System32\teams.exe | ACME\fthompson | 101283 |
| 1188 | ENG-WS-052 | 2026-02-17T15:51:48.977Z | 3694 | 53443 | code.exe | C:\Windows\System32\code.exe | ACME\fthompson | 404866 |
| 1189 | ENG-WS-052 | 2026-02-17T23:58:51.328Z | 14686 | 18817 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\fthompson | 254065 |
| 1190 | ENG-WS-052 | 2026-02-18T20:32:06.568Z | 48381 | 54950 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\fthompson | 400216 |
| 1191 | ENG-WS-052 | 2026-02-11T03:35:16.409Z | 48231 | 4765 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\fthompson | 26853 |
| 1192 | ENG-WS-052 | 2026-02-12T13:08:34.479Z | 9099 | 30820 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\fthompson | 436926 |
| 1193 | ENG-WS-052 | 2026-02-11T18:44:36.649Z | 55345 | 42696 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\fthompson | 123894 |
| 1194 | ENG-WS-052 | 2026-02-16T20:19:52.735Z | 57330 | 34713 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\fthompson | 191150 |
| 1195 | ENG-WS-052 | 2026-02-19T00:05:58.287Z | 41940 | 19 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\fthompson | 369195 |
| 1196 | ENG-WS-052 | 2026-02-17T13:33:27.485Z | 57257 | 4 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 74054 |
| 1197 | ENG-WS-052 | 2026-02-11T22:30:51.443Z | 38932 | 41133 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\fthompson | 19475 |
| 1198 | ENG-WS-052 | 2026-02-11T20:47:30.875Z | 30554 | 10090 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\fthompson | 24989 |
| 1199 | ENG-WS-052 | 2026-02-12T20:37:50.762Z | 51833 | 13512 | System | System | NT AUTHORITY\SYSTEM | 386886 |
| 1200 | ENG-WS-052 | 2026-02-12T15:38:49.203Z | 36370 | 9936 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 303194 |
| 1201 | ENG-WS-052 | 2026-02-17T08:56:11.410Z | 35551 | 40554 | services.exe | C:\Windows\System32\services.exe | ACME\fthompson | 36475 |
| 1202 | ENG-WS-052 | 2026-02-11T13:59:30.700Z | 7018 | 45892 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\fthompson | 127427 |
| 1203 | ENG-WS-052 | 2026-02-20T15:58:12.848Z | 41156 | 50204 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\fthompson | 306455 |
| 1204 | ENG-WS-052 | 2026-02-18T01:20:59.577Z | 32679 | 50110 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\fthompson | 483027 |
| 1205 | LEG-WS-053 | 2026-02-16T14:24:11.654Z | 54082 | 15 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\hbrown | 231188 |
| 1206 | LEG-WS-053 | 2026-02-14T09:30:19.573Z | 36229 | 30756 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\hbrown | 230458 |
| 1207 | LEG-WS-053 | 2026-02-18T21:24:22.663Z | 61847 | 35060 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\hbrown | 129927 |
| 1208 | LEG-WS-053 | 2026-02-16T22:42:14.522Z | 25757 | 603 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\hbrown | 375510 |
| 1209 | LEG-WS-053 | 2026-02-11T16:33:32.920Z | 19305 | 12050 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\hbrown | 404923 |
| 1210 | LEG-WS-053 | 2026-02-19T10:08:19.433Z | 25212 | 53171 | teams.exe | C:\Windows\System32\teams.exe | ACME\hbrown | 445538 |
| 1211 | LEG-WS-053 | 2026-02-13T18:15:31.057Z | 54895 | 26845 | code.exe | C:\Windows\System32\code.exe | ACME\hbrown | 160716 |
| 1212 | LEG-WS-053 | 2026-02-13T01:03:16.468Z | 16859 | 45077 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\hbrown | 267873 |
| 1213 | LEG-WS-053 | 2026-02-15T02:52:38.296Z | 24794 | 22304 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\hbrown | 104808 |
| 1214 | LEG-WS-053 | 2026-02-14T12:43:59.923Z | 1649 | 58976 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\hbrown | 430973 |
| 1215 | LEG-WS-053 | 2026-02-15T19:57:32.690Z | 1621 | 25142 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\hbrown | 163251 |
| 1216 | LEG-WS-053 | 2026-02-20T11:24:00.481Z | 44398 | 44418 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\hbrown | 293099 |
| 1217 | LEG-WS-053 | 2026-02-18T18:22:19.437Z | 41778 | 19679 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\hbrown | 323149 |
| 1218 | LEG-WS-053 | 2026-02-16T10:54:06.574Z | 41141 | 4 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\hbrown | 369614 |
| 1219 | LEG-WS-053 | 2026-02-10T20:35:22.735Z | 28873 | 5 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 442979 |
| 1220 | LEG-WS-053 | 2026-02-11T03:47:01.729Z | 38777 | 33781 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\hbrown | 110330 |
| 1221 | LEG-WS-053 | 2026-02-10T09:10:36.733Z | 761 | 49855 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\hbrown | 143465 |
| 1222 | LEG-WS-053 | 2026-02-12T14:36:45.891Z | 15672 | 42493 | System | System | NT AUTHORITY\SYSTEM | 63749 |
| 1223 | LEG-WS-053 | 2026-02-11T05:02:32.338Z | 19077 | 58979 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 370886 |
| 1224 | LEG-WS-053 | 2026-02-18T04:41:57.806Z | 36125 | 7714 | services.exe | C:\Windows\System32\services.exe | ACME\hbrown | 40587 |
| 1225 | LEG-WS-053 | 2026-02-14T21:30:12.617Z | 46024 | 41582 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\hbrown | 216092 |
| 1226 | LEG-WS-053 | 2026-02-12T08:45:17.307Z | 16430 | 58612 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\hbrown | 329044 |
| 1227 | LEG-WS-053 | 2026-02-20T17:40:13.078Z | 22225 | 185 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\hbrown | 395834 |
| 1228 | MKT-WS-054 | 2026-02-10T21:11:57.645Z | 62980 | 11 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\idavis | 149023 |
| 1229 | MKT-WS-054 | 2026-02-19T03:43:36.209Z | 18638 | 15766 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\idavis | 90576 |
| 1230 | MKT-WS-054 | 2026-02-18T22:26:43.538Z | 29002 | 6445 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\idavis | 310666 |
| 1231 | MKT-WS-054 | 2026-02-16T03:36:44.340Z | 10984 | 37480 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\idavis | 341858 |
| 1232 | MKT-WS-054 | 2026-02-11T19:31:15.130Z | 63325 | 491 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\idavis | 273697 |
| 1233 | MKT-WS-054 | 2026-02-13T01:55:31.735Z | 18513 | 42689 | teams.exe | C:\Windows\System32\teams.exe | ACME\idavis | 486520 |
| 1234 | MKT-WS-054 | 2026-02-18T12:01:14.992Z | 7405 | 52278 | code.exe | C:\Windows\System32\code.exe | ACME\idavis | 46358 |
| 1235 | MKT-WS-054 | 2026-02-16T11:58:32.434Z | 44282 | 24857 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\idavis | 359563 |
| 1236 | MKT-WS-054 | 2026-02-18T18:13:39.448Z | 63117 | 26869 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\idavis | 144158 |
| 1237 | MKT-WS-054 | 2026-02-15T17:54:22.854Z | 54551 | 3915 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\idavis | 276921 |
| 1238 | MKT-WS-054 | 2026-02-20T13:26:13.279Z | 50346 | 21756 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\idavis | 61138 |
| 1239 | MKT-WS-054 | 2026-02-17T03:41:44.794Z | 61995 | 58498 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\idavis | 225337 |
| 1240 | MKT-WS-054 | 2026-02-12T20:07:53.857Z | 15346 | 8797 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\idavis | 55427 |
| 1241 | MKT-WS-054 | 2026-02-10T11:29:12.744Z | 12932 | 16 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\idavis | 472994 |
| 1242 | MKT-WS-054 | 2026-02-15T08:41:40.504Z | 48344 | 11 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 349534 |
| 1243 | MKT-WS-054 | 2026-02-10T17:24:53.078Z | 19384 | 5110 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\idavis | 250496 |
| 1244 | MKT-WS-054 | 2026-02-12T03:48:11.255Z | 27030 | 10502 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\idavis | 448255 |
| 1245 | MKT-WS-054 | 2026-02-16T14:14:41.719Z | 47899 | 22028 | System | System | NT AUTHORITY\SYSTEM | 65078 |
| 1246 | MKT-WS-054 | 2026-02-11T16:09:25.310Z | 47202 | 21484 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 489196 |
| 1247 | MKT-WS-054 | 2026-02-15T21:30:55.846Z | 57575 | 52271 | services.exe | C:\Windows\System32\services.exe | ACME\idavis | 277002 |
| 1248 | MKT-WS-054 | 2026-02-18T16:37:07.118Z | 23032 | 5583 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\idavis | 123848 |
| 1249 | MKT-WS-054 | 2026-02-15T17:15:20.416Z | 20732 | 32413 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\idavis | 419904 |
| 1250 | MKT-WS-054 | 2026-02-13T06:43:04.381Z | 7873 | 27059 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\idavis | 408052 |
| 1251 | EXEC-WS-055 | 2026-02-13T04:40:29.194Z | 27005 | 17 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\fthompson | 252085 |
| 1252 | EXEC-WS-055 | 2026-02-12T07:30:58.920Z | 7072 | 54042 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\fthompson | 359966 |
| 1253 | EXEC-WS-055 | 2026-02-10T22:40:30.503Z | 59780 | 40717 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\fthompson | 473781 |
| 1254 | EXEC-WS-055 | 2026-02-10T22:42:42.395Z | 6684 | 50959 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\fthompson | 94219 |
| 1255 | EXEC-WS-055 | 2026-02-17T02:13:14.814Z | 54629 | 39679 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\fthompson | 493803 |
| 1256 | EXEC-WS-055 | 2026-02-18T09:05:29.863Z | 22279 | 34271 | teams.exe | C:\Windows\System32\teams.exe | ACME\fthompson | 485318 |
| 1257 | EXEC-WS-055 | 2026-02-19T07:30:51.476Z | 56267 | 44278 | code.exe | C:\Windows\System32\code.exe | ACME\fthompson | 360236 |
| 1258 | EXEC-WS-055 | 2026-02-11T08:36:39.503Z | 8015 | 55088 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\fthompson | 193772 |
| 1259 | EXEC-WS-055 | 2026-02-19T20:55:30.064Z | 34549 | 5422 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\fthompson | 434421 |
| 1260 | EXEC-WS-055 | 2026-02-11T07:26:15.317Z | 62005 | 3585 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\fthompson | 202340 |
| 1261 | EXEC-WS-055 | 2026-02-12T07:49:48.449Z | 3091 | 8727 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\fthompson | 391903 |
| 1262 | EXEC-WS-055 | 2026-02-19T14:29:57.052Z | 24394 | 16482 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\fthompson | 333342 |
| 1263 | EXEC-WS-055 | 2026-02-20T10:55:00.422Z | 51573 | 38900 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\fthompson | 268081 |
| 1264 | EXEC-WS-055 | 2026-02-16T12:02:45.184Z | 10782 | 17 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\fthompson | 52076 |
| 1265 | EXEC-WS-055 | 2026-02-20T08:27:40.067Z | 51518 | 9 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 283012 |
| 1266 | EXEC-WS-055 | 2026-02-11T19:08:43.391Z | 7550 | 55747 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\fthompson | 128075 |
| 1267 | EXEC-WS-055 | 2026-02-12T16:57:05.279Z | 22159 | 28201 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\fthompson | 43795 |
| 1268 | EXEC-WS-055 | 2026-02-18T20:14:14.822Z | 26256 | 32552 | System | System | NT AUTHORITY\SYSTEM | 208228 |
| 1269 | EXEC-WS-055 | 2026-02-15T01:14:50.480Z | 3315 | 9462 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 209188 |
| 1270 | EXEC-WS-055 | 2026-02-12T05:01:05.589Z | 36864 | 38308 | services.exe | C:\Windows\System32\services.exe | ACME\fthompson | 278202 |
| 1271 | EXEC-WS-055 | 2026-02-16T02:41:15.623Z | 58827 | 41577 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\fthompson | 145020 |
| 1272 | EXEC-WS-055 | 2026-02-15T16:08:45.760Z | 57170 | 30805 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\fthompson | 360901 |
| 1273 | EXEC-WS-055 | 2026-02-20T07:34:55.141Z | 51896 | 30238 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\fthompson | 286908 |
| 1274 | EXEC-WS-055 | 2026-02-12T09:41:22.056Z | 44851 | 15143 | spotify.exe | C:\Users\fthompson\AppData\Local\spotify\spotify.exe | ACME\fthompson | 211046 |
| 1275 | IT-WS-056 | 2026-02-18T02:47:34.476Z | 43975 | 15 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\gwhite | 183520 |
| 1276 | IT-WS-056 | 2026-02-10T11:09:21.265Z | 63986 | 5914 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\gwhite | 429920 |
| 1277 | IT-WS-056 | 2026-02-17T19:08:41.703Z | 50094 | 48730 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\gwhite | 249704 |
| 1278 | IT-WS-056 | 2026-02-20T15:27:52.594Z | 15343 | 209 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\gwhite | 291873 |
| 1279 | IT-WS-056 | 2026-02-20T17:27:54.908Z | 2107 | 12208 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\gwhite | 87326 |
| 1280 | IT-WS-056 | 2026-02-12T13:53:33.948Z | 61808 | 6284 | teams.exe | C:\Windows\System32\teams.exe | ACME\gwhite | 370282 |
| 1281 | IT-WS-056 | 2026-02-13T10:30:58.960Z | 5252 | 45794 | code.exe | C:\Windows\System32\code.exe | ACME\gwhite | 269026 |
| 1282 | IT-WS-056 | 2026-02-16T21:16:02.461Z | 11418 | 20484 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\gwhite | 449686 |
| 1283 | IT-WS-056 | 2026-02-18T00:51:37.304Z | 6152 | 54560 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\gwhite | 387930 |
| 1284 | IT-WS-056 | 2026-02-13T04:30:26.797Z | 15439 | 1470 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\gwhite | 155984 |
| 1285 | IT-WS-056 | 2026-02-16T05:46:16.836Z | 20359 | 25121 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\gwhite | 280220 |
| 1286 | IT-WS-056 | 2026-02-13T10:10:04.802Z | 41176 | 38681 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\gwhite | 418570 |
| 1287 | IT-WS-056 | 2026-02-14T15:10:28.798Z | 21572 | 36971 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\gwhite | 158479 |
| 1288 | IT-WS-056 | 2026-02-18T06:10:57.441Z | 38087 | 1 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\gwhite | 488500 |
| 1289 | IT-WS-056 | 2026-02-15T00:53:53.096Z | 6092 | 19 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 276775 |
| 1290 | IT-WS-056 | 2026-02-16T16:15:56.204Z | 47292 | 47966 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\gwhite | 130388 |
| 1291 | IT-WS-056 | 2026-02-10T09:48:28.890Z | 18237 | 23673 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\gwhite | 136458 |
| 1292 | IT-WS-056 | 2026-02-14T03:00:27.459Z | 6915 | 40631 | System | System | NT AUTHORITY\SYSTEM | 350524 |
| 1293 | IT-WS-056 | 2026-02-16T21:24:21.816Z | 5778 | 13083 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 113471 |
| 1294 | IT-WS-056 | 2026-02-18T10:00:52.292Z | 1825 | 29151 | services.exe | C:\Windows\System32\services.exe | ACME\gwhite | 451347 |
| 1295 | IT-WS-056 | 2026-02-15T07:10:37.510Z | 25671 | 4722 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\gwhite | 203972 |
| 1296 | IT-WS-056 | 2026-02-14T08:56:13.877Z | 46161 | 7064 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\gwhite | 380259 |
| 1297 | IT-WS-056 | 2026-02-17T23:25:46.047Z | 26441 | 36561 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\gwhite | 449187 |
| 1298 | HR-WS-057 | 2026-02-17T08:36:01.114Z | 45327 | 18 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\svc_sql | 72057 |
| 1299 | HR-WS-057 | 2026-02-20T11:28:09.546Z | 52260 | 42106 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\svc_sql | 489204 |
| 1300 | HR-WS-057 | 2026-02-15T10:11:13.635Z | 39376 | 34323 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\svc_sql | 279384 |
| 1301 | HR-WS-057 | 2026-02-15T18:48:55.344Z | 20384 | 50456 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\svc_sql | 437927 |
| 1302 | HR-WS-057 | 2026-02-15T15:58:19.815Z | 58122 | 4743 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\svc_sql | 281283 |
| 1303 | HR-WS-057 | 2026-02-14T10:17:56.291Z | 25608 | 37723 | teams.exe | C:\Windows\System32\teams.exe | ACME\svc_sql | 74260 |
| 1304 | HR-WS-057 | 2026-02-13T06:11:46.852Z | 14932 | 51266 | code.exe | C:\Windows\System32\code.exe | ACME\svc_sql | 471196 |
| 1305 | HR-WS-057 | 2026-02-13T17:38:31.376Z | 16883 | 3753 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\svc_sql | 231675 |
| 1306 | HR-WS-057 | 2026-02-19T22:58:36.547Z | 9418 | 55847 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\svc_sql | 262362 |
| 1307 | HR-WS-057 | 2026-02-12T02:46:56.673Z | 49647 | 30325 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\svc_sql | 415673 |
| 1308 | HR-WS-057 | 2026-02-16T06:40:35.847Z | 14677 | 51252 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\svc_sql | 448481 |
| 1309 | HR-WS-057 | 2026-02-20T09:15:55.675Z | 12947 | 42706 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\svc_sql | 81091 |
| 1310 | HR-WS-057 | 2026-02-20T10:59:46.219Z | 1777 | 46444 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\svc_sql | 40020 |
| 1311 | HR-WS-057 | 2026-02-20T05:35:02.506Z | 26849 | 1 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\svc_sql | 143895 |
| 1312 | HR-WS-057 | 2026-02-20T06:01:59.492Z | 38387 | 10 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 251145 |
| 1313 | HR-WS-057 | 2026-02-11T23:23:33.385Z | 48308 | 46029 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\svc_sql | 102588 |
| 1314 | HR-WS-057 | 2026-02-16T20:01:05.129Z | 4574 | 58707 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\svc_sql | 33810 |
| 1315 | HR-WS-057 | 2026-02-17T14:41:20.058Z | 28862 | 3763 | System | System | NT AUTHORITY\SYSTEM | 205689 |
| 1316 | HR-WS-057 | 2026-02-15T19:45:26.039Z | 27853 | 54090 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 198103 |
| 1317 | HR-WS-057 | 2026-02-14T21:28:07.208Z | 16011 | 53692 | services.exe | C:\Windows\System32\services.exe | ACME\svc_sql | 53384 |
| 1318 | HR-WS-057 | 2026-02-18T14:26:31.903Z | 45815 | 35852 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\svc_sql | 413472 |
| 1319 | HR-WS-057 | 2026-02-12T13:51:55.509Z | 36457 | 37846 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\svc_sql | 182335 |
| 1320 | HR-WS-057 | 2026-02-17T21:39:41.417Z | 33759 | 16496 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\svc_sql | 484765 |
| 1321 | FIN-WS-058 | 2026-02-15T08:21:20.852Z | 52966 | 10 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\jsmith | 409450 |
| 1322 | FIN-WS-058 | 2026-02-17T13:27:33.103Z | 56751 | 24098 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\jsmith | 47346 |
| 1323 | FIN-WS-058 | 2026-02-18T17:00:26.070Z | 54295 | 58832 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\jsmith | 437075 |
| 1324 | FIN-WS-058 | 2026-02-14T09:04:07.403Z | 27397 | 20916 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\jsmith | 182669 |
| 1325 | FIN-WS-058 | 2026-02-19T18:42:39.045Z | 25272 | 56260 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\jsmith | 146913 |
| 1326 | FIN-WS-058 | 2026-02-14T19:05:48.437Z | 6708 | 44703 | teams.exe | C:\Windows\System32\teams.exe | ACME\jsmith | 208139 |
| 1327 | FIN-WS-058 | 2026-02-15T02:23:15.426Z | 25643 | 27598 | code.exe | C:\Windows\System32\code.exe | ACME\jsmith | 176750 |
| 1328 | FIN-WS-058 | 2026-02-18T14:10:34.432Z | 30140 | 50763 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\jsmith | 59810 |
| 1329 | FIN-WS-058 | 2026-02-18T21:32:41.842Z | 63744 | 5548 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\jsmith | 74606 |
| 1330 | FIN-WS-058 | 2026-02-10T12:29:14.093Z | 2654 | 32484 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\jsmith | 274864 |
| 1331 | FIN-WS-058 | 2026-02-10T12:25:23.501Z | 45238 | 43166 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\jsmith | 178022 |
| 1332 | FIN-WS-058 | 2026-02-18T08:00:25.584Z | 41125 | 34602 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\jsmith | 101563 |
| 1333 | FIN-WS-058 | 2026-02-16T06:25:10.532Z | 50248 | 24166 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\jsmith | 258204 |
| 1334 | FIN-WS-058 | 2026-02-18T18:04:44.722Z | 41462 | 19 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\jsmith | 422553 |
| 1335 | FIN-WS-058 | 2026-02-12T05:36:18.740Z | 62241 | 14 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 379265 |
| 1336 | FIN-WS-058 | 2026-02-11T18:18:43.096Z | 57207 | 22321 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\jsmith | 242420 |
| 1337 | FIN-WS-058 | 2026-02-13T23:21:35.364Z | 27692 | 5223 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\jsmith | 374013 |
| 1338 | FIN-WS-058 | 2026-02-20T14:55:43.028Z | 46785 | 55589 | System | System | NT AUTHORITY\SYSTEM | 125618 |
| 1339 | FIN-WS-058 | 2026-02-19T09:56:18.047Z | 12390 | 22855 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 319476 |
| 1340 | FIN-WS-058 | 2026-02-15T16:18:58.194Z | 52404 | 41262 | services.exe | C:\Windows\System32\services.exe | ACME\jsmith | 136370 |
| 1341 | FIN-WS-058 | 2026-02-19T02:07:09.797Z | 35195 | 3191 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\jsmith | 220066 |
| 1342 | FIN-WS-058 | 2026-02-14T19:46:43.090Z | 4397 | 33128 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\jsmith | 399482 |
| 1343 | FIN-WS-058 | 2026-02-16T22:55:33.787Z | 43955 | 45398 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\jsmith | 389221 |
| 1344 | SLS-WS-059 | 2026-02-12T11:02:19.003Z | 758 | 9 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\svc_sql | 77078 |
| 1345 | SLS-WS-059 | 2026-02-16T14:43:44.743Z | 10654 | 38941 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\svc_sql | 349906 |
| 1346 | SLS-WS-059 | 2026-02-15T23:02:47.532Z | 55210 | 32604 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\svc_sql | 114739 |
| 1347 | SLS-WS-059 | 2026-02-19T08:58:10.406Z | 8670 | 54244 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\svc_sql | 363275 |
| 1348 | SLS-WS-059 | 2026-02-11T00:08:12.977Z | 45315 | 319 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\svc_sql | 127084 |
| 1349 | SLS-WS-059 | 2026-02-16T09:44:05.243Z | 14452 | 59149 | teams.exe | C:\Windows\System32\teams.exe | ACME\svc_sql | 297371 |
| 1350 | SLS-WS-059 | 2026-02-10T10:24:01.155Z | 54258 | 14335 | code.exe | C:\Windows\System32\code.exe | ACME\svc_sql | 8201 |
| 1351 | SLS-WS-059 | 2026-02-10T19:51:35.491Z | 18487 | 582 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\svc_sql | 257918 |
| 1352 | SLS-WS-059 | 2026-02-19T10:44:48.549Z | 61199 | 53396 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\svc_sql | 181743 |
| 1353 | SLS-WS-059 | 2026-02-19T00:25:35.028Z | 36416 | 20368 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\svc_sql | 483301 |
| 1354 | SLS-WS-059 | 2026-02-16T05:48:42.662Z | 58652 | 43112 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\svc_sql | 437656 |
| 1355 | SLS-WS-059 | 2026-02-19T14:55:37.605Z | 1141 | 7049 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\svc_sql | 23243 |
| 1356 | SLS-WS-059 | 2026-02-14T20:09:46.396Z | 57485 | 22326 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\svc_sql | 386785 |
| 1357 | SLS-WS-059 | 2026-02-19T00:31:22.479Z | 126 | 5 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\svc_sql | 237008 |
| 1358 | SLS-WS-059 | 2026-02-10T17:19:08.229Z | 36031 | 16 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 388647 |
| 1359 | SLS-WS-059 | 2026-02-16T13:26:46.208Z | 53633 | 52585 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\svc_sql | 321202 |
| 1360 | SLS-WS-059 | 2026-02-10T22:04:35.726Z | 21393 | 40115 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\svc_sql | 358691 |
| 1361 | SLS-WS-059 | 2026-02-17T23:51:46.680Z | 60201 | 30308 | System | System | NT AUTHORITY\SYSTEM | 296527 |
| 1362 | SLS-WS-059 | 2026-02-14T09:43:39.396Z | 554 | 17875 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 208081 |
| 1363 | SLS-WS-059 | 2026-02-11T01:00:00.135Z | 39725 | 56378 | services.exe | C:\Windows\System32\services.exe | ACME\svc_sql | 312912 |
| 1364 | SLS-WS-059 | 2026-02-19T19:35:54.632Z | 50084 | 37806 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\svc_sql | 271733 |
| 1365 | SLS-WS-059 | 2026-02-18T08:05:26.159Z | 50237 | 12742 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\svc_sql | 221212 |
| 1366 | SLS-WS-059 | 2026-02-15T20:39:27.796Z | 57830 | 17579 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\svc_sql | 284550 |
| 1367 | ENG-WS-060 | 2026-02-19T19:20:49.030Z | 26875 | 19 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\bwilson | 218425 |
| 1368 | ENG-WS-060 | 2026-02-17T15:07:05.516Z | 5311 | 27167 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\bwilson | 204894 |
| 1369 | ENG-WS-060 | 2026-02-17T07:56:31.972Z | 62593 | 29268 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\bwilson | 250068 |
| 1370 | ENG-WS-060 | 2026-02-15T01:51:14.715Z | 58129 | 4456 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\bwilson | 372937 |
| 1371 | ENG-WS-060 | 2026-02-12T06:18:14.593Z | 30095 | 20958 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\bwilson | 216531 |
| 1372 | ENG-WS-060 | 2026-02-16T06:38:09.139Z | 47014 | 44735 | teams.exe | C:\Windows\System32\teams.exe | ACME\bwilson | 157865 |
| 1373 | ENG-WS-060 | 2026-02-18T13:08:49.880Z | 61269 | 44225 | code.exe | C:\Windows\System32\code.exe | ACME\bwilson | 362225 |
| 1374 | ENG-WS-060 | 2026-02-11T08:49:02.259Z | 25313 | 40914 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\bwilson | 449084 |
| 1375 | ENG-WS-060 | 2026-02-15T23:03:49.647Z | 17929 | 46454 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\bwilson | 322996 |
| 1376 | ENG-WS-060 | 2026-02-16T00:02:53.630Z | 30386 | 35480 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\bwilson | 47124 |
| 1377 | ENG-WS-060 | 2026-02-13T02:11:43.770Z | 44114 | 41815 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\bwilson | 362865 |
| 1378 | ENG-WS-060 | 2026-02-13T17:58:18.686Z | 9160 | 16996 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\bwilson | 86931 |
| 1379 | ENG-WS-060 | 2026-02-18T04:03:39.152Z | 52196 | 29240 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\bwilson | 248652 |
| 1380 | ENG-WS-060 | 2026-02-10T17:32:35.193Z | 2423 | 12 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\bwilson | 280585 |
| 1381 | ENG-WS-060 | 2026-02-13T20:27:40.450Z | 52832 | 16 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 178216 |
| 1382 | ENG-WS-060 | 2026-02-14T19:29:21.021Z | 2783 | 21209 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\bwilson | 140229 |
| 1383 | ENG-WS-060 | 2026-02-18T21:45:57.737Z | 19452 | 55320 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\bwilson | 43149 |
| 1384 | ENG-WS-060 | 2026-02-20T06:07:02.238Z | 35717 | 48780 | System | System | NT AUTHORITY\SYSTEM | 456583 |
| 1385 | ENG-WS-060 | 2026-02-17T20:18:55.304Z | 48981 | 57430 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 282387 |
| 1386 | ENG-WS-060 | 2026-02-18T21:17:21.025Z | 35021 | 43305 | services.exe | C:\Windows\System32\services.exe | ACME\bwilson | 203112 |
| 1387 | ENG-WS-060 | 2026-02-20T08:13:59.951Z | 29060 | 33955 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\bwilson | 376218 |
| 1388 | ENG-WS-060 | 2026-02-10T14:14:43.577Z | 24217 | 56719 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\bwilson | 119372 |
| 1389 | ENG-WS-060 | 2026-02-11T12:13:27.964Z | 58240 | 37716 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\bwilson | 303537 |
| 1390 | LEG-WS-061 | 2026-02-19T22:14:22.990Z | 4178 | 15 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\gwhite | 440332 |
| 1391 | LEG-WS-061 | 2026-02-13T10:42:05.315Z | 46977 | 5388 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\gwhite | 89230 |
| 1392 | LEG-WS-061 | 2026-02-12T20:11:23.967Z | 1538 | 6734 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\gwhite | 439489 |
| 1393 | LEG-WS-061 | 2026-02-17T04:04:29.697Z | 40956 | 53548 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\gwhite | 283070 |
| 1394 | LEG-WS-061 | 2026-02-12T12:56:54.902Z | 56360 | 20393 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\gwhite | 466254 |
| 1395 | LEG-WS-061 | 2026-02-16T00:27:25.780Z | 49064 | 11532 | teams.exe | C:\Windows\System32\teams.exe | ACME\gwhite | 401719 |
| 1396 | LEG-WS-061 | 2026-02-20T01:54:07.990Z | 60970 | 5025 | code.exe | C:\Windows\System32\code.exe | ACME\gwhite | 163900 |
| 1397 | LEG-WS-061 | 2026-02-14T09:36:10.334Z | 1191 | 19299 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\gwhite | 164580 |
| 1398 | LEG-WS-061 | 2026-02-14T21:21:58.508Z | 31213 | 35027 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\gwhite | 382526 |
| 1399 | LEG-WS-061 | 2026-02-14T01:25:42.723Z | 12946 | 52228 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\gwhite | 231734 |
| 1400 | LEG-WS-061 | 2026-02-12T06:14:27.106Z | 60851 | 49421 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\gwhite | 216270 |
| 1401 | LEG-WS-061 | 2026-02-15T08:22:49.619Z | 43563 | 10753 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\gwhite | 120160 |
| 1402 | LEG-WS-061 | 2026-02-15T13:23:15.671Z | 15343 | 3207 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\gwhite | 300113 |
| 1403 | LEG-WS-061 | 2026-02-13T12:27:07.973Z | 854 | 8 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\gwhite | 408169 |
| 1404 | LEG-WS-061 | 2026-02-14T11:11:31.174Z | 19545 | 10 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 263173 |
| 1405 | LEG-WS-061 | 2026-02-19T17:43:21.260Z | 18667 | 52757 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\gwhite | 400139 |
| 1406 | LEG-WS-061 | 2026-02-10T23:42:36.542Z | 11807 | 54829 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\gwhite | 392855 |
| 1407 | LEG-WS-061 | 2026-02-19T08:19:09.815Z | 61811 | 2852 | System | System | NT AUTHORITY\SYSTEM | 312381 |
| 1408 | LEG-WS-061 | 2026-02-20T07:34:42.665Z | 21194 | 19493 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 203940 |
| 1409 | LEG-WS-061 | 2026-02-11T09:25:51.823Z | 36939 | 27532 | services.exe | C:\Windows\System32\services.exe | ACME\gwhite | 242456 |
| 1410 | LEG-WS-061 | 2026-02-17T06:19:27.550Z | 52671 | 47151 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\gwhite | 31033 |
| 1411 | LEG-WS-061 | 2026-02-15T06:03:48.168Z | 51337 | 59253 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\gwhite | 489638 |
| 1412 | LEG-WS-061 | 2026-02-16T19:05:52.373Z | 295 | 37645 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\gwhite | 365447 |
| 1413 | MKT-WS-062 | 2026-02-19T03:17:47.193Z | 40131 | 17 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\idavis | 432973 |
| 1414 | MKT-WS-062 | 2026-02-13T05:43:57.519Z | 60849 | 58488 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\idavis | 234812 |
| 1415 | MKT-WS-062 | 2026-02-15T04:20:34.394Z | 27583 | 4566 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\idavis | 313863 |
| 1416 | MKT-WS-062 | 2026-02-11T13:31:32.047Z | 37735 | 24494 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\idavis | 395474 |
| 1417 | MKT-WS-062 | 2026-02-17T18:41:16.232Z | 2697 | 14215 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\idavis | 185099 |
| 1418 | MKT-WS-062 | 2026-02-20T10:23:05.712Z | 26574 | 47881 | teams.exe | C:\Windows\System32\teams.exe | ACME\idavis | 168016 |
| 1419 | MKT-WS-062 | 2026-02-14T11:27:31.951Z | 31717 | 45524 | code.exe | C:\Windows\System32\code.exe | ACME\idavis | 37179 |
| 1420 | MKT-WS-062 | 2026-02-16T20:27:34.194Z | 3819 | 47693 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\idavis | 18677 |
| 1421 | MKT-WS-062 | 2026-02-10T14:27:37.175Z | 9438 | 34616 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\idavis | 238857 |
| 1422 | MKT-WS-062 | 2026-02-16T11:35:00.517Z | 49783 | 56513 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\idavis | 369586 |
| 1423 | MKT-WS-062 | 2026-02-10T13:49:34.579Z | 22607 | 24585 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\idavis | 422628 |
| 1424 | MKT-WS-062 | 2026-02-13T00:12:11.236Z | 3691 | 50245 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\idavis | 144774 |
| 1425 | MKT-WS-062 | 2026-02-14T18:36:33.156Z | 4929 | 22669 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\idavis | 442909 |
| 1426 | MKT-WS-062 | 2026-02-17T09:58:47.460Z | 54714 | 13 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\idavis | 22657 |
| 1427 | MKT-WS-062 | 2026-02-17T21:46:02.530Z | 62038 | 12 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 470774 |
| 1428 | MKT-WS-062 | 2026-02-14T05:14:24.171Z | 10348 | 32663 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\idavis | 82161 |
| 1429 | MKT-WS-062 | 2026-02-19T18:16:51.204Z | 52656 | 58052 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\idavis | 99267 |
| 1430 | MKT-WS-062 | 2026-02-11T12:24:12.033Z | 1524 | 10832 | System | System | NT AUTHORITY\SYSTEM | 168437 |
| 1431 | MKT-WS-062 | 2026-02-12T04:43:05.996Z | 35533 | 37340 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 483920 |
| 1432 | MKT-WS-062 | 2026-02-16T05:06:46.040Z | 36889 | 14001 | services.exe | C:\Windows\System32\services.exe | ACME\idavis | 12498 |
| 1433 | MKT-WS-062 | 2026-02-15T02:52:15.348Z | 21099 | 12806 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\idavis | 62642 |
| 1434 | MKT-WS-062 | 2026-02-17T00:31:02.395Z | 48877 | 14965 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\idavis | 372672 |
| 1435 | MKT-WS-062 | 2026-02-18T01:14:09.531Z | 25817 | 46133 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\idavis | 495249 |
| 1436 | EXEC-WS-063 | 2026-02-11T22:09:51.495Z | 415 | 7 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\bwilson | 384715 |
| 1437 | EXEC-WS-063 | 2026-02-20T13:05:39.320Z | 18399 | 34140 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\bwilson | 102367 |
| 1438 | EXEC-WS-063 | 2026-02-11T19:11:42.278Z | 54552 | 50960 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\bwilson | 340789 |
| 1439 | EXEC-WS-063 | 2026-02-19T22:51:59.299Z | 30607 | 58503 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\bwilson | 481572 |
| 1440 | EXEC-WS-063 | 2026-02-15T10:52:59.840Z | 24063 | 27654 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\bwilson | 321539 |
| 1441 | EXEC-WS-063 | 2026-02-20T01:52:47.761Z | 60655 | 17858 | teams.exe | C:\Windows\System32\teams.exe | ACME\bwilson | 204430 |
| 1442 | EXEC-WS-063 | 2026-02-13T17:17:47.769Z | 56812 | 35836 | code.exe | C:\Windows\System32\code.exe | ACME\bwilson | 436580 |
| 1443 | EXEC-WS-063 | 2026-02-11T13:11:21.331Z | 12305 | 18272 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\bwilson | 400739 |
| 1444 | EXEC-WS-063 | 2026-02-13T06:43:46.608Z | 19337 | 33218 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\bwilson | 220475 |
| 1445 | EXEC-WS-063 | 2026-02-16T15:04:50.978Z | 42668 | 36901 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\bwilson | 289547 |
| 1446 | EXEC-WS-063 | 2026-02-19T13:52:38.039Z | 47820 | 2410 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\bwilson | 232396 |
| 1447 | EXEC-WS-063 | 2026-02-19T09:03:21.344Z | 23627 | 31311 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\bwilson | 491399 |
| 1448 | EXEC-WS-063 | 2026-02-18T14:17:33.060Z | 18828 | 28753 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\bwilson | 278716 |
| 1449 | EXEC-WS-063 | 2026-02-16T01:17:10.065Z | 22301 | 15 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\bwilson | 207843 |
| 1450 | EXEC-WS-063 | 2026-02-14T03:40:18.072Z | 53943 | 10 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 407729 |
| 1451 | EXEC-WS-063 | 2026-02-12T04:52:17.226Z | 45682 | 38226 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\bwilson | 73137 |
| 1452 | EXEC-WS-063 | 2026-02-12T20:31:08.571Z | 29489 | 37312 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\bwilson | 203356 |
| 1453 | EXEC-WS-063 | 2026-02-11T15:51:35.769Z | 35368 | 44757 | System | System | NT AUTHORITY\SYSTEM | 343128 |
| 1454 | EXEC-WS-063 | 2026-02-16T03:52:23.617Z | 40530 | 43906 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 191449 |
| 1455 | EXEC-WS-063 | 2026-02-13T22:28:04.753Z | 6076 | 26216 | services.exe | C:\Windows\System32\services.exe | ACME\bwilson | 97277 |
| 1456 | EXEC-WS-063 | 2026-02-15T10:38:00.868Z | 43814 | 34268 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\bwilson | 464950 |
| 1457 | EXEC-WS-063 | 2026-02-11T10:57:59.250Z | 13718 | 21480 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\bwilson | 289784 |
| 1458 | EXEC-WS-063 | 2026-02-15T20:34:25.455Z | 30700 | 31592 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\bwilson | 127131 |
| 1459 | IT-WS-064 | 2026-02-13T07:09:43.674Z | 4553 | 9 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\admin | 474079 |
| 1460 | IT-WS-064 | 2026-02-15T09:18:18.961Z | 31455 | 43690 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\admin | 158612 |
| 1461 | IT-WS-064 | 2026-02-18T10:23:20.161Z | 29259 | 26811 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\admin | 307308 |
| 1462 | IT-WS-064 | 2026-02-17T20:15:54.067Z | 29314 | 43284 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\admin | 10576 |
| 1463 | IT-WS-064 | 2026-02-15T18:58:06.603Z | 12765 | 4511 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\admin | 231103 |
| 1464 | IT-WS-064 | 2026-02-20T17:28:18.065Z | 55973 | 50959 | teams.exe | C:\Windows\System32\teams.exe | ACME\admin | 431176 |
| 1465 | IT-WS-064 | 2026-02-15T09:36:46.013Z | 11834 | 32691 | code.exe | C:\Windows\System32\code.exe | ACME\admin | 299094 |
| 1466 | IT-WS-064 | 2026-02-20T10:09:29.549Z | 62290 | 27505 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\admin | 459715 |
| 1467 | IT-WS-064 | 2026-02-15T22:50:26.955Z | 26957 | 43836 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\admin | 417609 |
| 1468 | IT-WS-064 | 2026-02-14T07:30:17.094Z | 34305 | 44001 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\admin | 351047 |
| 1469 | IT-WS-064 | 2026-02-13T06:40:52.671Z | 46929 | 51397 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\admin | 483025 |
| 1470 | IT-WS-064 | 2026-02-13T18:37:40.062Z | 11550 | 700 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\admin | 369548 |
| 1471 | IT-WS-064 | 2026-02-18T21:07:45.201Z | 2092 | 43660 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\admin | 171106 |
| 1472 | IT-WS-064 | 2026-02-20T09:58:34.428Z | 30945 | 18 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\admin | 212542 |
| 1473 | IT-WS-064 | 2026-02-18T21:43:53.118Z | 11597 | 5 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 213491 |
| 1474 | IT-WS-064 | 2026-02-18T08:54:26.228Z | 13812 | 17261 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\admin | 174279 |
| 1475 | IT-WS-064 | 2026-02-17T20:18:27.438Z | 6171 | 34917 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\admin | 450630 |
| 1476 | IT-WS-064 | 2026-02-11T12:19:17.157Z | 20939 | 50687 | System | System | NT AUTHORITY\SYSTEM | 123034 |
| 1477 | IT-WS-064 | 2026-02-10T23:55:12.317Z | 5729 | 8792 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 468777 |
| 1478 | IT-WS-064 | 2026-02-19T06:39:47.488Z | 4801 | 44445 | services.exe | C:\Windows\System32\services.exe | ACME\admin | 374470 |
| 1479 | IT-WS-064 | 2026-02-16T21:09:23.568Z | 34261 | 8315 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\admin | 264112 |
| 1480 | IT-WS-064 | 2026-02-15T09:04:15.167Z | 42150 | 55265 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\admin | 25611 |
| 1481 | IT-WS-064 | 2026-02-18T23:42:42.977Z | 34941 | 49168 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\admin | 226556 |
| 1482 | HR-WS-065 | 2026-02-19T22:10:53.345Z | 20739 | 4 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\fthompson | 133912 |
| 1483 | HR-WS-065 | 2026-02-14T14:27:52.919Z | 28719 | 55026 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\fthompson | 28845 |
| 1484 | HR-WS-065 | 2026-02-11T09:37:16.101Z | 51436 | 51786 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\fthompson | 8404 |
| 1485 | HR-WS-065 | 2026-02-18T00:29:29.644Z | 52519 | 50317 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\fthompson | 298123 |
| 1486 | HR-WS-065 | 2026-02-14T15:41:44.408Z | 15627 | 40344 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\fthompson | 20419 |
| 1487 | HR-WS-065 | 2026-02-18T19:42:29.342Z | 7113 | 58911 | teams.exe | C:\Windows\System32\teams.exe | ACME\fthompson | 176541 |
| 1488 | HR-WS-065 | 2026-02-19T08:45:56.265Z | 24321 | 45451 | code.exe | C:\Windows\System32\code.exe | ACME\fthompson | 97480 |
| 1489 | HR-WS-065 | 2026-02-11T03:27:42.140Z | 25505 | 20300 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\fthompson | 71133 |
| 1490 | HR-WS-065 | 2026-02-20T07:12:04.484Z | 17333 | 25386 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\fthompson | 197137 |
| 1491 | HR-WS-065 | 2026-02-17T12:04:11.482Z | 22044 | 10204 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\fthompson | 491324 |
| 1492 | HR-WS-065 | 2026-02-14T02:19:25.196Z | 48305 | 39493 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\fthompson | 255994 |
| 1493 | HR-WS-065 | 2026-02-20T09:29:57.683Z | 36881 | 29744 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\fthompson | 490234 |
| 1494 | HR-WS-065 | 2026-02-11T12:41:10.139Z | 12922 | 20885 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\fthompson | 285711 |
| 1495 | HR-WS-065 | 2026-02-10T09:25:16.279Z | 15729 | 5 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\fthompson | 428962 |
| 1496 | HR-WS-065 | 2026-02-18T15:31:39.784Z | 11890 | 6 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 243834 |
| 1497 | HR-WS-065 | 2026-02-11T04:38:07.729Z | 47063 | 8248 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\fthompson | 343127 |
| 1498 | HR-WS-065 | 2026-02-10T20:32:52.671Z | 5390 | 32899 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\fthompson | 76063 |
| 1499 | HR-WS-065 | 2026-02-13T05:30:19.688Z | 5491 | 49036 | System | System | NT AUTHORITY\SYSTEM | 273045 |
| 1500 | HR-WS-065 | 2026-02-17T19:57:14.625Z | 3474 | 2188 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 280770 |
| 1501 | HR-WS-065 | 2026-02-20T11:26:23.315Z | 16747 | 29122 | services.exe | C:\Windows\System32\services.exe | ACME\fthompson | 166198 |
| 1502 | HR-WS-065 | 2026-02-13T19:12:59.702Z | 53547 | 56045 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\fthompson | 235196 |
| 1503 | HR-WS-065 | 2026-02-12T21:38:59.373Z | 44955 | 31943 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\fthompson | 361025 |
| 1504 | HR-WS-065 | 2026-02-11T21:25:11.262Z | 42383 | 14294 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\fthompson | 95643 |
| 1505 | FIN-WS-066 | 2026-02-11T15:50:54.725Z | 4575 | 7 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\idavis | 348332 |
| 1506 | FIN-WS-066 | 2026-02-16T01:26:56.921Z | 46376 | 4444 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\idavis | 432675 |
| 1507 | FIN-WS-066 | 2026-02-14T15:58:23.470Z | 41687 | 15897 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\idavis | 305188 |
| 1508 | FIN-WS-066 | 2026-02-20T16:06:25.997Z | 53300 | 47705 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\idavis | 328011 |
| 1509 | FIN-WS-066 | 2026-02-14T01:34:54.814Z | 34016 | 16416 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\idavis | 269965 |
| 1510 | FIN-WS-066 | 2026-02-15T19:05:34.865Z | 42117 | 750 | teams.exe | C:\Windows\System32\teams.exe | ACME\idavis | 205518 |
| 1511 | FIN-WS-066 | 2026-02-18T19:14:45.642Z | 39449 | 33913 | code.exe | C:\Windows\System32\code.exe | ACME\idavis | 261726 |
| 1512 | FIN-WS-066 | 2026-02-16T08:24:26.012Z | 13621 | 9157 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\idavis | 410812 |
| 1513 | FIN-WS-066 | 2026-02-13T14:54:35.831Z | 29798 | 58594 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\idavis | 144090 |
| 1514 | FIN-WS-066 | 2026-02-14T18:44:52.471Z | 49707 | 22048 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\idavis | 249634 |
| 1515 | FIN-WS-066 | 2026-02-17T01:57:09.012Z | 7114 | 59128 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\idavis | 245467 |
| 1516 | FIN-WS-066 | 2026-02-11T19:54:32.049Z | 3595 | 41068 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\idavis | 480624 |
| 1517 | FIN-WS-066 | 2026-02-19T04:19:48.019Z | 19685 | 25814 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\idavis | 276391 |
| 1518 | FIN-WS-066 | 2026-02-16T04:59:27.913Z | 18228 | 12 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\idavis | 323189 |
| 1519 | FIN-WS-066 | 2026-02-16T14:28:27.884Z | 47696 | 1 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 200044 |
| 1520 | FIN-WS-066 | 2026-02-10T15:01:26.931Z | 26264 | 53401 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\idavis | 156693 |
| 1521 | FIN-WS-066 | 2026-02-12T09:36:32.949Z | 30729 | 34470 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\idavis | 29679 |
| 1522 | FIN-WS-066 | 2026-02-11T20:45:39.950Z | 53602 | 27407 | System | System | NT AUTHORITY\SYSTEM | 443821 |
| 1523 | FIN-WS-066 | 2026-02-14T13:22:14.483Z | 27997 | 19171 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 174877 |
| 1524 | FIN-WS-066 | 2026-02-15T20:58:45.834Z | 33001 | 58801 | services.exe | C:\Windows\System32\services.exe | ACME\idavis | 297875 |
| 1525 | FIN-WS-066 | 2026-02-15T12:55:29.822Z | 38782 | 36366 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\idavis | 141318 |
| 1526 | FIN-WS-066 | 2026-02-13T11:07:56.796Z | 17657 | 49851 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\idavis | 477036 |
| 1527 | FIN-WS-066 | 2026-02-11T04:31:36.066Z | 62938 | 15993 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\idavis | 382638 |
| 1528 | SLS-WS-067 | 2026-02-17T11:49:58.756Z | 52311 | 5 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\dlee | 23504 |
| 1529 | SLS-WS-067 | 2026-02-15T02:37:58.726Z | 38059 | 11421 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\dlee | 308209 |
| 1530 | SLS-WS-067 | 2026-02-16T05:46:48.321Z | 16200 | 45023 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\dlee | 24243 |
| 1531 | SLS-WS-067 | 2026-02-11T07:00:43.376Z | 38693 | 33895 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\dlee | 42957 |
| 1532 | SLS-WS-067 | 2026-02-10T17:30:54.633Z | 9487 | 9169 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\dlee | 395232 |
| 1533 | SLS-WS-067 | 2026-02-17T03:57:22.276Z | 4948 | 22463 | teams.exe | C:\Windows\System32\teams.exe | ACME\dlee | 73628 |
| 1534 | SLS-WS-067 | 2026-02-15T14:57:08.563Z | 42398 | 44976 | code.exe | C:\Windows\System32\code.exe | ACME\dlee | 42057 |
| 1535 | SLS-WS-067 | 2026-02-15T15:24:25.280Z | 13876 | 25218 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\dlee | 17826 |
| 1536 | SLS-WS-067 | 2026-02-19T02:03:15.516Z | 21379 | 19148 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\dlee | 375931 |
| 1537 | SLS-WS-067 | 2026-02-13T18:58:40.784Z | 25508 | 43957 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\dlee | 121573 |
| 1538 | SLS-WS-067 | 2026-02-10T08:18:20.361Z | 32117 | 614 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\dlee | 282789 |
| 1539 | SLS-WS-067 | 2026-02-15T01:00:20.387Z | 56435 | 59478 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\dlee | 250640 |
| 1540 | SLS-WS-067 | 2026-02-16T17:37:20.164Z | 24465 | 5166 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\dlee | 394713 |
| 1541 | SLS-WS-067 | 2026-02-12T03:58:34.840Z | 3130 | 7 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\dlee | 381328 |
| 1542 | SLS-WS-067 | 2026-02-15T06:57:09.268Z | 28340 | 1 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 151462 |
| 1543 | SLS-WS-067 | 2026-02-15T04:04:24.765Z | 49916 | 57271 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\dlee | 392646 |
| 1544 | SLS-WS-067 | 2026-02-12T00:11:28.019Z | 18904 | 15817 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\dlee | 246234 |
| 1545 | SLS-WS-067 | 2026-02-19T12:09:49.796Z | 62695 | 16915 | System | System | NT AUTHORITY\SYSTEM | 163331 |
| 1546 | SLS-WS-067 | 2026-02-20T17:08:06.455Z | 27770 | 17936 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 115967 |
| 1547 | SLS-WS-067 | 2026-02-10T23:27:58.440Z | 5187 | 50985 | services.exe | C:\Windows\System32\services.exe | ACME\dlee | 423334 |
| 1548 | SLS-WS-067 | 2026-02-11T19:04:54.723Z | 64929 | 13787 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\dlee | 122633 |
| 1549 | SLS-WS-067 | 2026-02-18T18:00:35.318Z | 35801 | 43616 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\dlee | 426222 |
| 1550 | SLS-WS-067 | 2026-02-14T23:38:51.593Z | 16978 | 16005 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\dlee | 228915 |
| 1551 | ENG-WS-068 | 2026-02-18T02:44:50.367Z | 15574 | 2 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\gwhite | 288324 |
| 1552 | ENG-WS-068 | 2026-02-12T03:30:19.998Z | 22569 | 35362 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\gwhite | 326591 |
| 1553 | ENG-WS-068 | 2026-02-18T01:54:32.251Z | 27810 | 58128 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\gwhite | 400559 |
| 1554 | ENG-WS-068 | 2026-02-20T07:56:28.070Z | 22465 | 39586 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\gwhite | 220997 |
| 1555 | ENG-WS-068 | 2026-02-11T18:38:56.527Z | 35851 | 9833 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\gwhite | 109044 |
| 1556 | ENG-WS-068 | 2026-02-11T18:02:51.981Z | 6206 | 59838 | teams.exe | C:\Windows\System32\teams.exe | ACME\gwhite | 349834 |
| 1557 | ENG-WS-068 | 2026-02-11T21:18:50.481Z | 57723 | 5338 | code.exe | C:\Windows\System32\code.exe | ACME\gwhite | 192750 |
| 1558 | ENG-WS-068 | 2026-02-15T13:27:18.082Z | 61838 | 32960 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\gwhite | 273495 |
| 1559 | ENG-WS-068 | 2026-02-16T18:11:14.674Z | 12908 | 48298 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\gwhite | 362426 |
| 1560 | ENG-WS-068 | 2026-02-15T07:17:47.331Z | 13600 | 1473 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\gwhite | 63669 |
| 1561 | ENG-WS-068 | 2026-02-11T15:54:05.886Z | 17613 | 7378 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\gwhite | 407637 |
| 1562 | ENG-WS-068 | 2026-02-15T04:50:31.320Z | 50455 | 21716 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\gwhite | 348616 |
| 1563 | ENG-WS-068 | 2026-02-19T17:45:00.641Z | 27137 | 29626 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\gwhite | 240763 |
| 1564 | ENG-WS-068 | 2026-02-17T15:51:56.814Z | 32751 | 20 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\gwhite | 384016 |
| 1565 | ENG-WS-068 | 2026-02-19T02:24:44.021Z | 63839 | 6 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 158378 |
| 1566 | ENG-WS-068 | 2026-02-17T18:13:10.202Z | 16723 | 58928 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\gwhite | 181140 |
| 1567 | ENG-WS-068 | 2026-02-18T22:25:50.089Z | 19789 | 48342 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\gwhite | 246860 |
| 1568 | ENG-WS-068 | 2026-02-16T14:37:20.450Z | 21456 | 42966 | System | System | NT AUTHORITY\SYSTEM | 230719 |
| 1569 | ENG-WS-068 | 2026-02-12T17:38:22.031Z | 4648 | 6856 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 58787 |
| 1570 | ENG-WS-068 | 2026-02-18T04:40:58.132Z | 24601 | 53070 | services.exe | C:\Windows\System32\services.exe | ACME\gwhite | 218716 |
| 1571 | ENG-WS-068 | 2026-02-19T00:27:21.839Z | 52555 | 34599 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\gwhite | 111591 |
| 1572 | ENG-WS-068 | 2026-02-10T18:22:23.243Z | 7775 | 44256 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\gwhite | 157514 |
| 1573 | ENG-WS-068 | 2026-02-18T17:04:54.010Z | 10409 | 25475 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\gwhite | 167377 |
| 1574 | LEG-WS-069 | 2026-02-16T06:58:22.042Z | 28231 | 8 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\svc_sql | 147697 |
| 1575 | LEG-WS-069 | 2026-02-15T20:04:49.114Z | 63434 | 28111 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\svc_sql | 195630 |
| 1576 | LEG-WS-069 | 2026-02-17T17:11:11.019Z | 33755 | 14106 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\svc_sql | 424363 |
| 1577 | LEG-WS-069 | 2026-02-16T07:08:05.396Z | 923 | 52549 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\svc_sql | 101884 |
| 1578 | LEG-WS-069 | 2026-02-16T02:41:50.278Z | 56257 | 22788 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\svc_sql | 181882 |
| 1579 | LEG-WS-069 | 2026-02-15T07:03:29.270Z | 33092 | 46762 | teams.exe | C:\Windows\System32\teams.exe | ACME\svc_sql | 199211 |
| 1580 | LEG-WS-069 | 2026-02-12T06:51:40.967Z | 12578 | 44747 | code.exe | C:\Windows\System32\code.exe | ACME\svc_sql | 421963 |
| 1581 | LEG-WS-069 | 2026-02-10T16:36:58.639Z | 31134 | 23035 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\svc_sql | 99230 |
| 1582 | LEG-WS-069 | 2026-02-11T01:44:10.733Z | 32270 | 41639 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\svc_sql | 82086 |
| 1583 | LEG-WS-069 | 2026-02-12T06:03:52.313Z | 25584 | 20134 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\svc_sql | 392091 |
| 1584 | LEG-WS-069 | 2026-02-12T18:49:58.385Z | 538 | 11437 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\svc_sql | 410621 |
| 1585 | LEG-WS-069 | 2026-02-12T00:35:35.457Z | 28861 | 53452 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\svc_sql | 448820 |
| 1586 | LEG-WS-069 | 2026-02-16T00:50:16.486Z | 33935 | 55261 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\svc_sql | 257198 |
| 1587 | LEG-WS-069 | 2026-02-20T11:57:52.963Z | 16445 | 14 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\svc_sql | 490589 |
| 1588 | LEG-WS-069 | 2026-02-16T06:16:36.665Z | 48425 | 10 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 259830 |
| 1589 | LEG-WS-069 | 2026-02-17T02:09:51.801Z | 2843 | 24922 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\svc_sql | 433208 |
| 1590 | LEG-WS-069 | 2026-02-17T17:36:10.008Z | 20605 | 38032 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\svc_sql | 2408 |
| 1591 | LEG-WS-069 | 2026-02-17T10:49:04.533Z | 47819 | 48199 | System | System | NT AUTHORITY\SYSTEM | 62365 |
| 1592 | LEG-WS-069 | 2026-02-14T13:10:22.745Z | 37009 | 53948 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 331635 |
| 1593 | LEG-WS-069 | 2026-02-12T15:09:26.620Z | 53665 | 17604 | services.exe | C:\Windows\System32\services.exe | ACME\svc_sql | 348149 |
| 1594 | LEG-WS-069 | 2026-02-13T22:22:22.928Z | 46710 | 15807 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\svc_sql | 76283 |
| 1595 | LEG-WS-069 | 2026-02-13T19:19:39.233Z | 12480 | 38186 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\svc_sql | 14980 |
| 1596 | LEG-WS-069 | 2026-02-19T14:25:35.830Z | 11382 | 4893 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\svc_sql | 452982 |
| 1597 | LEG-WS-069 | 2026-02-15T05:53:51.386Z | 54988 | 2993 | spotify.exe | C:\Users\svc_sql\AppData\Local\spotify\spotify.exe | ACME\svc_sql | 52162 |
| 1598 | MKT-WS-070 | 2026-02-12T04:41:43.211Z | 35330 | 5 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\jsmith | 29890 |
| 1599 | MKT-WS-070 | 2026-02-11T16:48:51.269Z | 23623 | 15552 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\jsmith | 88480 |
| 1600 | MKT-WS-070 | 2026-02-16T10:36:33.625Z | 2886 | 35606 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\jsmith | 302941 |
| 1601 | MKT-WS-070 | 2026-02-14T07:52:13.030Z | 47187 | 23651 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\jsmith | 402805 |
| 1602 | MKT-WS-070 | 2026-02-16T06:48:42.628Z | 3330 | 34777 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\jsmith | 16920 |
| 1603 | MKT-WS-070 | 2026-02-14T07:44:35.104Z | 19201 | 27931 | teams.exe | C:\Windows\System32\teams.exe | ACME\jsmith | 446296 |
| 1604 | MKT-WS-070 | 2026-02-19T00:56:56.317Z | 29393 | 7737 | code.exe | C:\Windows\System32\code.exe | ACME\jsmith | 9154 |
| 1605 | MKT-WS-070 | 2026-02-13T07:30:07.632Z | 56755 | 6139 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\jsmith | 453657 |
| 1606 | MKT-WS-070 | 2026-02-13T01:53:24.820Z | 35262 | 11985 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\jsmith | 245229 |
| 1607 | MKT-WS-070 | 2026-02-19T16:13:54.953Z | 54130 | 23197 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\jsmith | 322857 |
| 1608 | MKT-WS-070 | 2026-02-18T08:14:30.765Z | 47351 | 6628 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\jsmith | 475274 |
| 1609 | MKT-WS-070 | 2026-02-16T05:55:55.486Z | 32021 | 12647 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\jsmith | 415497 |
| 1610 | MKT-WS-070 | 2026-02-13T17:02:55.732Z | 25801 | 27540 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\jsmith | 387014 |
| 1611 | MKT-WS-070 | 2026-02-15T20:42:47.807Z | 26503 | 17 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\jsmith | 382524 |
| 1612 | MKT-WS-070 | 2026-02-15T03:30:43.447Z | 33042 | 12 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 226262 |
| 1613 | MKT-WS-070 | 2026-02-12T05:42:08.226Z | 51142 | 2638 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\jsmith | 498127 |
| 1614 | MKT-WS-070 | 2026-02-11T14:16:47.304Z | 60373 | 13001 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\jsmith | 11455 |
| 1615 | MKT-WS-070 | 2026-02-20T14:50:07.299Z | 15738 | 54439 | System | System | NT AUTHORITY\SYSTEM | 28917 |
| 1616 | MKT-WS-070 | 2026-02-13T12:20:35.570Z | 10174 | 45235 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 457372 |
| 1617 | MKT-WS-070 | 2026-02-14T10:28:48.525Z | 22399 | 1123 | services.exe | C:\Windows\System32\services.exe | ACME\jsmith | 105484 |
| 1618 | MKT-WS-070 | 2026-02-15T03:45:15.407Z | 8399 | 48727 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\jsmith | 438959 |
| 1619 | MKT-WS-070 | 2026-02-20T01:17:37.079Z | 62438 | 4084 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\jsmith | 365402 |
| 1620 | MKT-WS-070 | 2026-02-11T22:37:14.757Z | 44160 | 23002 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\jsmith | 476875 |
| 1621 | EXEC-WS-071 | 2026-02-16T16:06:15.195Z | 43421 | 14 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\agarcia | 135851 |
| 1622 | EXEC-WS-071 | 2026-02-16T22:55:38.784Z | 51082 | 50337 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\agarcia | 165631 |
| 1623 | EXEC-WS-071 | 2026-02-13T10:56:42.381Z | 28363 | 58907 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\agarcia | 282493 |
| 1624 | EXEC-WS-071 | 2026-02-15T04:42:08.160Z | 27342 | 24931 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\agarcia | 406429 |
| 1625 | EXEC-WS-071 | 2026-02-17T23:00:31.353Z | 41746 | 43362 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\agarcia | 134372 |
| 1626 | EXEC-WS-071 | 2026-02-19T06:13:45.609Z | 27083 | 40340 | teams.exe | C:\Windows\System32\teams.exe | ACME\agarcia | 63994 |
| 1627 | EXEC-WS-071 | 2026-02-17T18:34:15.693Z | 18322 | 10967 | code.exe | C:\Windows\System32\code.exe | ACME\agarcia | 160938 |
| 1628 | EXEC-WS-071 | 2026-02-10T09:15:42.380Z | 647 | 1236 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\agarcia | 474979 |
| 1629 | EXEC-WS-071 | 2026-02-19T01:13:21.739Z | 54848 | 985 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\agarcia | 58559 |
| 1630 | EXEC-WS-071 | 2026-02-20T03:11:40.168Z | 13975 | 49910 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\agarcia | 233597 |
| 1631 | EXEC-WS-071 | 2026-02-14T23:50:11.807Z | 17342 | 12641 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\agarcia | 143221 |
| 1632 | EXEC-WS-071 | 2026-02-11T08:24:18.807Z | 32153 | 48050 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\agarcia | 398395 |
| 1633 | EXEC-WS-071 | 2026-02-15T14:54:36.411Z | 31210 | 15845 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\agarcia | 94500 |
| 1634 | EXEC-WS-071 | 2026-02-11T20:49:02.976Z | 12583 | 6 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\agarcia | 445138 |
| 1635 | EXEC-WS-071 | 2026-02-17T12:27:04.033Z | 47517 | 18 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 118046 |
| 1636 | EXEC-WS-071 | 2026-02-18T11:05:54.279Z | 31615 | 28116 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\agarcia | 474753 |
| 1637 | EXEC-WS-071 | 2026-02-17T22:34:44.620Z | 10876 | 42187 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\agarcia | 457639 |
| 1638 | EXEC-WS-071 | 2026-02-12T18:49:40.667Z | 13802 | 47330 | System | System | NT AUTHORITY\SYSTEM | 173778 |
| 1639 | EXEC-WS-071 | 2026-02-13T21:34:40.628Z | 3010 | 7676 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 63208 |
| 1640 | EXEC-WS-071 | 2026-02-14T13:13:02.147Z | 30948 | 32462 | services.exe | C:\Windows\System32\services.exe | ACME\agarcia | 243150 |
| 1641 | EXEC-WS-071 | 2026-02-20T17:40:20.926Z | 35424 | 27726 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\agarcia | 230185 |
| 1642 | EXEC-WS-071 | 2026-02-17T14:34:42.319Z | 5245 | 2872 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\agarcia | 27481 |
| 1643 | EXEC-WS-071 | 2026-02-19T13:47:48.158Z | 2442 | 1345 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\agarcia | 314787 |
| 1644 | EXEC-WS-071 | 2026-02-15T20:25:03.857Z | 34983 | 10761 | utorrent.exe | C:\Users\agarcia\AppData\Local\utorrent\utorrent.exe | ACME\agarcia | 387704 |
| 1645 | IT-WS-072 | 2026-02-16T16:05:51.296Z | 17672 | 16 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\svc_backup | 126189 |
| 1646 | IT-WS-072 | 2026-02-16T20:22:26.493Z | 40938 | 14206 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\svc_backup | 109086 |
| 1647 | IT-WS-072 | 2026-02-15T15:03:01.631Z | 62822 | 19851 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\svc_backup | 304008 |
| 1648 | IT-WS-072 | 2026-02-10T22:01:23.204Z | 5686 | 18789 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\svc_backup | 207992 |
| 1649 | IT-WS-072 | 2026-02-17T00:32:11.376Z | 63704 | 38690 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\svc_backup | 204925 |
| 1650 | IT-WS-072 | 2026-02-12T16:19:23.495Z | 63262 | 58779 | teams.exe | C:\Windows\System32\teams.exe | ACME\svc_backup | 168812 |
| 1651 | IT-WS-072 | 2026-02-13T22:54:37.553Z | 63679 | 45930 | code.exe | C:\Windows\System32\code.exe | ACME\svc_backup | 185039 |
| 1652 | IT-WS-072 | 2026-02-10T19:57:37.257Z | 44407 | 34552 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\svc_backup | 10914 |
| 1653 | IT-WS-072 | 2026-02-14T04:38:03.462Z | 33089 | 31617 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\svc_backup | 405944 |
| 1654 | IT-WS-072 | 2026-02-13T18:07:24.880Z | 22281 | 30307 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\svc_backup | 497489 |
| 1655 | IT-WS-072 | 2026-02-11T11:24:42.596Z | 45293 | 13992 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\svc_backup | 488074 |
| 1656 | IT-WS-072 | 2026-02-17T23:50:58.380Z | 50059 | 14738 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\svc_backup | 290202 |
| 1657 | IT-WS-072 | 2026-02-15T10:48:03.762Z | 9000 | 12720 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\svc_backup | 349831 |
| 1658 | IT-WS-072 | 2026-02-13T06:13:04.388Z | 48727 | 18 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\svc_backup | 135305 |
| 1659 | IT-WS-072 | 2026-02-20T01:12:22.161Z | 25538 | 18 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 168630 |
| 1660 | IT-WS-072 | 2026-02-17T06:54:22.356Z | 1183 | 7007 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\svc_backup | 331856 |
| 1661 | IT-WS-072 | 2026-02-12T21:08:17.649Z | 35599 | 5843 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\svc_backup | 193369 |
| 1662 | IT-WS-072 | 2026-02-17T09:04:50.524Z | 46952 | 59464 | System | System | NT AUTHORITY\SYSTEM | 448038 |
| 1663 | IT-WS-072 | 2026-02-20T03:14:53.376Z | 7252 | 36089 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 93805 |
| 1664 | IT-WS-072 | 2026-02-12T00:12:35.608Z | 40479 | 14896 | services.exe | C:\Windows\System32\services.exe | ACME\svc_backup | 212284 |
| 1665 | IT-WS-072 | 2026-02-20T15:42:05.903Z | 48587 | 18438 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\svc_backup | 238825 |
| 1666 | IT-WS-072 | 2026-02-15T05:29:02.457Z | 3110 | 4407 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\svc_backup | 425652 |
| 1667 | IT-WS-072 | 2026-02-12T22:24:03.328Z | 62965 | 29512 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\svc_backup | 441934 |
| 1668 | HR-WS-073 | 2026-02-10T19:48:20.992Z | 2591 | 3 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\admin | 190476 |
| 1669 | HR-WS-073 | 2026-02-10T19:03:19.786Z | 12721 | 26421 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\admin | 155436 |
| 1670 | HR-WS-073 | 2026-02-18T22:33:21.475Z | 51869 | 47566 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\admin | 256032 |
| 1671 | HR-WS-073 | 2026-02-15T06:14:43.479Z | 5534 | 12148 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\admin | 123159 |
| 1672 | HR-WS-073 | 2026-02-10T17:30:58.887Z | 5278 | 41192 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\admin | 82704 |
| 1673 | HR-WS-073 | 2026-02-12T01:15:25.578Z | 57667 | 25532 | teams.exe | C:\Windows\System32\teams.exe | ACME\admin | 340775 |
| 1674 | HR-WS-073 | 2026-02-13T14:23:15.380Z | 31589 | 30762 | code.exe | C:\Windows\System32\code.exe | ACME\admin | 446310 |
| 1675 | HR-WS-073 | 2026-02-16T13:28:00.053Z | 50863 | 47764 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\admin | 369924 |
| 1676 | HR-WS-073 | 2026-02-10T08:03:57.814Z | 40348 | 49220 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\admin | 365502 |
| 1677 | HR-WS-073 | 2026-02-11T12:57:25.867Z | 1544 | 19805 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\admin | 228384 |
| 1678 | HR-WS-073 | 2026-02-14T09:03:07.449Z | 40485 | 53889 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\admin | 321219 |
| 1679 | HR-WS-073 | 2026-02-14T08:03:20.440Z | 63646 | 23654 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\admin | 453934 |
| 1680 | HR-WS-073 | 2026-02-11T05:14:09.279Z | 55201 | 6675 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\admin | 387435 |
| 1681 | HR-WS-073 | 2026-02-12T06:43:03.816Z | 56444 | 18 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\admin | 303645 |
| 1682 | HR-WS-073 | 2026-02-17T16:32:09.276Z | 8597 | 3 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 253109 |
| 1683 | HR-WS-073 | 2026-02-14T19:41:35.129Z | 20626 | 33042 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\admin | 116039 |
| 1684 | HR-WS-073 | 2026-02-18T18:13:21.625Z | 23761 | 36937 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\admin | 12747 |
| 1685 | HR-WS-073 | 2026-02-13T16:26:38.008Z | 38449 | 32412 | System | System | NT AUTHORITY\SYSTEM | 104937 |
| 1686 | HR-WS-073 | 2026-02-12T09:33:25.148Z | 45389 | 24834 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 138309 |
| 1687 | HR-WS-073 | 2026-02-20T13:29:00.938Z | 37996 | 56779 | services.exe | C:\Windows\System32\services.exe | ACME\admin | 71612 |
| 1688 | HR-WS-073 | 2026-02-16T11:56:07.589Z | 32972 | 41353 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\admin | 304516 |
| 1689 | HR-WS-073 | 2026-02-17T11:30:39.052Z | 6289 | 33917 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\admin | 63979 |
| 1690 | HR-WS-073 | 2026-02-13T15:56:28.136Z | 43305 | 31220 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\admin | 207956 |
| 1691 | FIN-WS-074 | 2026-02-17T04:53:44.060Z | 16506 | 11 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\cjohnson | 419713 |
| 1692 | FIN-WS-074 | 2026-02-20T02:04:21.936Z | 38862 | 25137 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\cjohnson | 350988 |
| 1693 | FIN-WS-074 | 2026-02-12T03:08:08.958Z | 44931 | 11213 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\cjohnson | 219152 |
| 1694 | FIN-WS-074 | 2026-02-18T07:57:15.791Z | 53132 | 54320 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\cjohnson | 468092 |
| 1695 | FIN-WS-074 | 2026-02-17T06:05:27.864Z | 49910 | 37677 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\cjohnson | 178407 |
| 1696 | FIN-WS-074 | 2026-02-15T20:10:37.898Z | 50808 | 22587 | teams.exe | C:\Windows\System32\teams.exe | ACME\cjohnson | 127168 |
| 1697 | FIN-WS-074 | 2026-02-12T09:32:15.113Z | 3669 | 810 | code.exe | C:\Windows\System32\code.exe | ACME\cjohnson | 437806 |
| 1698 | FIN-WS-074 | 2026-02-10T22:45:55.117Z | 23017 | 35142 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\cjohnson | 369515 |
| 1699 | FIN-WS-074 | 2026-02-18T10:16:27.230Z | 46497 | 36261 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\cjohnson | 194087 |
| 1700 | FIN-WS-074 | 2026-02-20T14:27:34.926Z | 26688 | 41151 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\cjohnson | 129795 |
| 1701 | FIN-WS-074 | 2026-02-13T08:27:40.662Z | 16743 | 48890 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\cjohnson | 51811 |
| 1702 | FIN-WS-074 | 2026-02-19T07:34:07.175Z | 47222 | 56247 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\cjohnson | 266815 |
| 1703 | FIN-WS-074 | 2026-02-19T02:42:11.547Z | 34030 | 22905 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\cjohnson | 153204 |
| 1704 | FIN-WS-074 | 2026-02-19T20:42:16.783Z | 64391 | 18 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\cjohnson | 126851 |
| 1705 | FIN-WS-074 | 2026-02-19T15:24:49.150Z | 60478 | 3 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 438170 |
| 1706 | FIN-WS-074 | 2026-02-12T06:36:21.349Z | 49515 | 59285 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\cjohnson | 381002 |
| 1707 | FIN-WS-074 | 2026-02-20T01:56:44.225Z | 64884 | 10820 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\cjohnson | 444395 |
| 1708 | FIN-WS-074 | 2026-02-19T19:01:09.203Z | 61750 | 53191 | System | System | NT AUTHORITY\SYSTEM | 266352 |
| 1709 | FIN-WS-074 | 2026-02-13T08:08:20.610Z | 51440 | 13843 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 261438 |
| 1710 | FIN-WS-074 | 2026-02-17T11:23:49.749Z | 38303 | 54843 | services.exe | C:\Windows\System32\services.exe | ACME\cjohnson | 425693 |
| 1711 | FIN-WS-074 | 2026-02-20T02:56:10.078Z | 12414 | 9123 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\cjohnson | 264187 |
| 1712 | FIN-WS-074 | 2026-02-11T06:14:00.908Z | 5277 | 36597 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\cjohnson | 348180 |
| 1713 | FIN-WS-074 | 2026-02-19T16:39:03.410Z | 31152 | 5737 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\cjohnson | 258489 |
| 1714 | SLS-WS-075 | 2026-02-12T16:28:36.742Z | 7912 | 1 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\agarcia | 23809 |
| 1715 | SLS-WS-075 | 2026-02-20T09:04:01.969Z | 11536 | 3591 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\agarcia | 258679 |
| 1716 | SLS-WS-075 | 2026-02-14T21:11:18.442Z | 57229 | 14437 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\agarcia | 262174 |
| 1717 | SLS-WS-075 | 2026-02-15T01:45:03.423Z | 20475 | 21028 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\agarcia | 138236 |
| 1718 | SLS-WS-075 | 2026-02-16T20:39:25.884Z | 7013 | 31146 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\agarcia | 35811 |
| 1719 | SLS-WS-075 | 2026-02-16T23:42:32.668Z | 32997 | 17925 | teams.exe | C:\Windows\System32\teams.exe | ACME\agarcia | 4046 |
| 1720 | SLS-WS-075 | 2026-02-10T23:32:32.549Z | 1277 | 52030 | code.exe | C:\Windows\System32\code.exe | ACME\agarcia | 395113 |
| 1721 | SLS-WS-075 | 2026-02-18T22:32:27.459Z | 1106 | 57540 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\agarcia | 120384 |
| 1722 | SLS-WS-075 | 2026-02-19T00:22:43.803Z | 15749 | 3965 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\agarcia | 361340 |
| 1723 | SLS-WS-075 | 2026-02-17T20:21:33.267Z | 41924 | 11143 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\agarcia | 145877 |
| 1724 | SLS-WS-075 | 2026-02-16T11:11:31.439Z | 54137 | 35984 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\agarcia | 134856 |
| 1725 | SLS-WS-075 | 2026-02-11T03:55:20.231Z | 60111 | 626 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\agarcia | 381993 |
| 1726 | SLS-WS-075 | 2026-02-12T21:48:31.975Z | 53902 | 58901 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\agarcia | 413754 |
| 1727 | SLS-WS-075 | 2026-02-12T00:24:58.447Z | 50615 | 19 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\agarcia | 187264 |
| 1728 | SLS-WS-075 | 2026-02-19T08:06:04.805Z | 43386 | 18 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 462315 |
| 1729 | SLS-WS-075 | 2026-02-11T21:29:56.025Z | 5212 | 38125 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\agarcia | 403604 |
| 1730 | SLS-WS-075 | 2026-02-13T02:38:30.180Z | 32345 | 9750 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\agarcia | 131993 |
| 1731 | SLS-WS-075 | 2026-02-17T17:40:11.735Z | 42377 | 29479 | System | System | NT AUTHORITY\SYSTEM | 499397 |
| 1732 | SLS-WS-075 | 2026-02-14T06:21:16.116Z | 19039 | 21222 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 272452 |
| 1733 | SLS-WS-075 | 2026-02-19T12:28:04.549Z | 48035 | 48704 | services.exe | C:\Windows\System32\services.exe | ACME\agarcia | 163684 |
| 1734 | SLS-WS-075 | 2026-02-16T07:21:08.721Z | 28036 | 36857 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\agarcia | 52749 |
| 1735 | SLS-WS-075 | 2026-02-17T12:04:12.702Z | 24564 | 59333 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\agarcia | 286937 |
| 1736 | SLS-WS-075 | 2026-02-12T09:00:57.449Z | 48881 | 54400 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\agarcia | 479229 |
| 1737 | DC-01 | 2026-02-13T13:23:32.191Z | 40800 | 15 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\emartinez | 464474 |
| 1738 | DC-01 | 2026-02-20T08:40:27.698Z | 3016 | 41357 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\emartinez | 55690 |
| 1739 | DC-01 | 2026-02-15T03:20:47.293Z | 19203 | 33873 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\emartinez | 361539 |
| 1740 | DC-01 | 2026-02-12T06:16:50.359Z | 7879 | 39635 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\emartinez | 354027 |
| 1741 | DC-01 | 2026-02-10T11:44:01.205Z | 40009 | 49506 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\emartinez | 268884 |
| 1742 | DC-01 | 2026-02-12T15:41:42.331Z | 51765 | 14795 | teams.exe | C:\Windows\System32\teams.exe | ACME\emartinez | 274792 |
| 1743 | DC-01 | 2026-02-19T02:42:15.795Z | 58296 | 8705 | code.exe | C:\Windows\System32\code.exe | ACME\emartinez | 198090 |
| 1744 | DC-01 | 2026-02-11T14:19:19.969Z | 22876 | 27760 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\emartinez | 247494 |
| 1745 | DC-01 | 2026-02-18T16:49:15.039Z | 35141 | 41719 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\emartinez | 305451 |
| 1746 | DC-01 | 2026-02-19T13:43:39.549Z | 24911 | 35715 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\emartinez | 72125 |
| 1747 | DC-01 | 2026-02-14T14:51:25.979Z | 24806 | 26521 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\emartinez | 324494 |
| 1748 | DC-01 | 2026-02-14T08:15:31.572Z | 38128 | 7845 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\emartinez | 444476 |
| 1749 | DC-01 | 2026-02-16T05:37:55.976Z | 37721 | 55406 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\emartinez | 83771 |
| 1750 | DC-01 | 2026-02-19T09:19:23.304Z | 47856 | 15 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\emartinez | 354423 |
| 1751 | DC-01 | 2026-02-18T18:57:22.886Z | 1857 | 17 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 223494 |
| 1752 | DC-01 | 2026-02-14T06:12:26.798Z | 45715 | 51529 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\emartinez | 240073 |
| 1753 | DC-01 | 2026-02-18T13:48:48.466Z | 60408 | 59417 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\emartinez | 486684 |
| 1754 | DC-01 | 2026-02-14T18:03:16.939Z | 35425 | 48159 | System | System | NT AUTHORITY\SYSTEM | 441359 |
| 1755 | DC-01 | 2026-02-14T22:34:44.447Z | 39234 | 29585 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 168667 |
| 1756 | DC-01 | 2026-02-19T19:24:42.138Z | 39451 | 59646 | services.exe | C:\Windows\System32\services.exe | ACME\emartinez | 258157 |
| 1757 | DC-01 | 2026-02-12T13:29:06.864Z | 28521 | 31714 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\emartinez | 349872 |
| 1758 | DC-01 | 2026-02-16T20:39:52.934Z | 52023 | 52903 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\emartinez | 9241 |
| 1759 | DC-01 | 2026-02-15T03:35:32.674Z | 2671 | 59242 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\emartinez | 18846 |
| 1760 | DC-02 | 2026-02-12T08:02:07.384Z | 34472 | 5 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\fthompson | 384278 |
| 1761 | DC-02 | 2026-02-15T06:44:23.947Z | 16365 | 51240 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\fthompson | 440305 |
| 1762 | DC-02 | 2026-02-16T05:28:58.793Z | 59140 | 14778 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\fthompson | 147324 |
| 1763 | DC-02 | 2026-02-13T06:37:54.525Z | 30746 | 50715 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\fthompson | 49958 |
| 1764 | DC-02 | 2026-02-17T19:43:27.026Z | 60825 | 43634 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\fthompson | 228566 |
| 1765 | DC-02 | 2026-02-15T13:01:38.426Z | 32786 | 36956 | teams.exe | C:\Windows\System32\teams.exe | ACME\fthompson | 428802 |
| 1766 | DC-02 | 2026-02-10T21:02:57.505Z | 22240 | 29512 | code.exe | C:\Windows\System32\code.exe | ACME\fthompson | 129938 |
| 1767 | DC-02 | 2026-02-16T00:09:21.801Z | 42355 | 53778 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\fthompson | 493568 |
| 1768 | DC-02 | 2026-02-19T02:01:43.686Z | 24222 | 17238 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\fthompson | 2607 |
| 1769 | DC-02 | 2026-02-18T04:49:04.193Z | 48850 | 48821 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\fthompson | 82503 |
| 1770 | DC-02 | 2026-02-20T16:44:51.923Z | 5431 | 30240 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\fthompson | 493253 |
| 1771 | DC-02 | 2026-02-11T00:40:38.742Z | 13869 | 8966 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\fthompson | 115242 |
| 1772 | DC-02 | 2026-02-13T19:04:02.933Z | 298 | 41924 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\fthompson | 419490 |
| 1773 | DC-02 | 2026-02-16T09:56:48.919Z | 28858 | 18 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\fthompson | 419886 |
| 1774 | DC-02 | 2026-02-15T19:19:18.569Z | 41296 | 17 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 8917 |
| 1775 | DC-02 | 2026-02-20T13:47:45.157Z | 64530 | 10873 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\fthompson | 407729 |
| 1776 | DC-02 | 2026-02-16T11:06:20.334Z | 44414 | 10351 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\fthompson | 429274 |
| 1777 | DC-02 | 2026-02-18T10:18:16.653Z | 22809 | 21967 | System | System | NT AUTHORITY\SYSTEM | 457489 |
| 1778 | DC-02 | 2026-02-14T11:35:15.815Z | 53640 | 32863 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 397699 |
| 1779 | DC-02 | 2026-02-15T16:01:00.696Z | 14386 | 3714 | services.exe | C:\Windows\System32\services.exe | ACME\fthompson | 282818 |
| 1780 | DC-02 | 2026-02-18T19:33:04.744Z | 14209 | 32747 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\fthompson | 17739 |
| 1781 | DC-02 | 2026-02-17T22:58:46.559Z | 28846 | 39320 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\fthompson | 381454 |
| 1782 | DC-02 | 2026-02-17T13:44:28.911Z | 4584 | 54661 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\fthompson | 316234 |
| 1783 | FILE-01 | 2026-02-12T07:06:21.020Z | 27456 | 5 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\jsmith | 348225 |
| 1784 | FILE-01 | 2026-02-13T22:26:55.556Z | 42647 | 5546 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\jsmith | 148892 |
| 1785 | FILE-01 | 2026-02-13T12:38:25.888Z | 14835 | 50754 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\jsmith | 328522 |
| 1786 | FILE-01 | 2026-02-18T22:39:32.317Z | 5260 | 36994 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\jsmith | 163701 |
| 1787 | FILE-01 | 2026-02-15T01:31:56.706Z | 58617 | 55809 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\jsmith | 335606 |
| 1788 | FILE-01 | 2026-02-13T07:19:01.506Z | 35879 | 58406 | teams.exe | C:\Windows\System32\teams.exe | ACME\jsmith | 390340 |
| 1789 | FILE-01 | 2026-02-11T15:00:41.097Z | 26117 | 32080 | code.exe | C:\Windows\System32\code.exe | ACME\jsmith | 369735 |
| 1790 | FILE-01 | 2026-02-18T08:49:19.241Z | 28925 | 49545 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\jsmith | 154716 |
| 1791 | FILE-01 | 2026-02-16T21:48:36.279Z | 40053 | 34731 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\jsmith | 435515 |
| 1792 | FILE-01 | 2026-02-12T19:54:07.386Z | 38487 | 24815 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\jsmith | 106951 |
| 1793 | FILE-01 | 2026-02-18T23:35:35.259Z | 27788 | 24588 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\jsmith | 380739 |
| 1794 | FILE-01 | 2026-02-20T10:28:50.051Z | 56352 | 3181 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\jsmith | 132416 |
| 1795 | FILE-01 | 2026-02-20T01:22:14.852Z | 6939 | 27464 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\jsmith | 331923 |
| 1796 | FILE-01 | 2026-02-20T08:59:15.064Z | 45708 | 13 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\jsmith | 94609 |
| 1797 | FILE-01 | 2026-02-15T14:21:42.800Z | 17532 | 1 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 199958 |
| 1798 | FILE-01 | 2026-02-17T06:10:56.082Z | 10844 | 36776 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\jsmith | 30806 |
| 1799 | FILE-01 | 2026-02-17T18:20:10.949Z | 5563 | 58453 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\jsmith | 75827 |
| 1800 | FILE-01 | 2026-02-14T05:02:46.860Z | 55620 | 6721 | System | System | NT AUTHORITY\SYSTEM | 448262 |
| 1801 | FILE-01 | 2026-02-15T00:12:19.129Z | 26192 | 27877 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 34066 |
| 1802 | FILE-01 | 2026-02-16T18:55:27.002Z | 44462 | 56839 | services.exe | C:\Windows\System32\services.exe | ACME\jsmith | 268836 |
| 1803 | FILE-01 | 2026-02-15T04:11:30.469Z | 30580 | 7883 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\jsmith | 4829 |
| 1804 | FILE-01 | 2026-02-13T19:24:10.679Z | 17648 | 51613 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\jsmith | 320902 |
| 1805 | FILE-01 | 2026-02-16T13:38:43.022Z | 37604 | 52666 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\jsmith | 376636 |
| 1806 | EXCH-01 | 2026-02-19T19:30:50.056Z | 53182 | 3 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\gwhite | 455272 |
| 1807 | EXCH-01 | 2026-02-20T01:26:01.750Z | 39961 | 36165 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\gwhite | 12742 |
| 1808 | EXCH-01 | 2026-02-11T03:41:32.857Z | 9920 | 11403 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\gwhite | 55882 |
| 1809 | EXCH-01 | 2026-02-17T01:57:42.769Z | 36489 | 38282 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\gwhite | 17987 |
| 1810 | EXCH-01 | 2026-02-12T07:42:01.565Z | 20624 | 2390 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\gwhite | 164834 |
| 1811 | EXCH-01 | 2026-02-19T09:00:39.602Z | 25317 | 7242 | teams.exe | C:\Windows\System32\teams.exe | ACME\gwhite | 333418 |
| 1812 | EXCH-01 | 2026-02-12T19:28:49.853Z | 5990 | 31143 | code.exe | C:\Windows\System32\code.exe | ACME\gwhite | 48156 |
| 1813 | EXCH-01 | 2026-02-19T16:46:54.934Z | 61590 | 31719 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\gwhite | 135641 |
| 1814 | EXCH-01 | 2026-02-13T05:42:23.065Z | 59822 | 5866 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\gwhite | 439022 |
| 1815 | EXCH-01 | 2026-02-14T03:03:12.832Z | 61961 | 22739 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\gwhite | 172813 |
| 1816 | EXCH-01 | 2026-02-20T14:31:11.362Z | 5728 | 52959 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\gwhite | 130693 |
| 1817 | EXCH-01 | 2026-02-20T01:24:04.453Z | 56420 | 13629 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\gwhite | 179420 |
| 1818 | EXCH-01 | 2026-02-11T02:44:54.848Z | 23966 | 38570 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\gwhite | 417210 |
| 1819 | EXCH-01 | 2026-02-18T02:29:57.790Z | 64827 | 10 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\gwhite | 46702 |
| 1820 | EXCH-01 | 2026-02-14T13:32:36.162Z | 22968 | 14 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 13348 |
| 1821 | EXCH-01 | 2026-02-14T07:27:42.115Z | 45336 | 12971 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\gwhite | 123023 |
| 1822 | EXCH-01 | 2026-02-17T18:44:45.380Z | 33689 | 27105 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\gwhite | 267871 |
| 1823 | EXCH-01 | 2026-02-10T12:46:08.552Z | 26289 | 21908 | System | System | NT AUTHORITY\SYSTEM | 235095 |
| 1824 | EXCH-01 | 2026-02-13T01:28:38.987Z | 61523 | 19404 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 171719 |
| 1825 | EXCH-01 | 2026-02-18T16:52:35.611Z | 11854 | 59036 | services.exe | C:\Windows\System32\services.exe | ACME\gwhite | 445205 |
| 1826 | EXCH-01 | 2026-02-11T00:04:31.113Z | 42794 | 194 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\gwhite | 298116 |
| 1827 | EXCH-01 | 2026-02-14T03:28:23.050Z | 5843 | 27180 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\gwhite | 209490 |
| 1828 | EXCH-01 | 2026-02-10T12:55:12.260Z | 17116 | 30314 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\gwhite | 206981 |
| 1829 | WEB-01 | 2026-02-15T09:21:40.443Z | 28084 | 16 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\idavis | 328737 |
| 1830 | WEB-01 | 2026-02-19T03:30:24.785Z | 6593 | 53987 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\idavis | 139825 |
| 1831 | WEB-01 | 2026-02-18T15:11:20.173Z | 4327 | 20346 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\idavis | 79511 |
| 1832 | WEB-01 | 2026-02-13T04:51:57.488Z | 18059 | 56218 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\idavis | 492021 |
| 1833 | WEB-01 | 2026-02-18T08:43:11.070Z | 28490 | 18103 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\idavis | 35012 |
| 1834 | WEB-01 | 2026-02-13T15:05:12.652Z | 44997 | 53873 | teams.exe | C:\Windows\System32\teams.exe | ACME\idavis | 182480 |
| 1835 | WEB-01 | 2026-02-16T06:41:06.489Z | 60221 | 1706 | code.exe | C:\Windows\System32\code.exe | ACME\idavis | 351590 |
| 1836 | WEB-01 | 2026-02-20T08:51:54.208Z | 17498 | 12967 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\idavis | 386308 |
| 1837 | WEB-01 | 2026-02-19T00:22:02.669Z | 49703 | 5073 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\idavis | 146402 |
| 1838 | WEB-01 | 2026-02-14T06:39:15.651Z | 2674 | 58245 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\idavis | 110423 |
| 1839 | WEB-01 | 2026-02-16T14:15:44.988Z | 39328 | 10154 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\idavis | 136026 |
| 1840 | WEB-01 | 2026-02-14T13:00:25.429Z | 41845 | 48059 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\idavis | 52575 |
| 1841 | WEB-01 | 2026-02-12T11:06:49.188Z | 51195 | 59359 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\idavis | 482091 |
| 1842 | WEB-01 | 2026-02-10T20:17:28.865Z | 29968 | 3 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\idavis | 157905 |
| 1843 | WEB-01 | 2026-02-11T09:55:37.305Z | 40616 | 19 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 91711 |
| 1844 | WEB-01 | 2026-02-20T06:23:43.186Z | 28232 | 50295 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\idavis | 475070 |
| 1845 | WEB-01 | 2026-02-20T12:48:44.360Z | 51057 | 18467 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\idavis | 124506 |
| 1846 | WEB-01 | 2026-02-13T02:19:13.038Z | 63405 | 33945 | System | System | NT AUTHORITY\SYSTEM | 248513 |
| 1847 | WEB-01 | 2026-02-17T23:13:15.990Z | 46717 | 1795 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 295105 |
| 1848 | WEB-01 | 2026-02-18T16:12:35.295Z | 6523 | 37839 | services.exe | C:\Windows\System32\services.exe | ACME\idavis | 340296 |
| 1849 | WEB-01 | 2026-02-10T20:10:29.527Z | 1226 | 23848 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\idavis | 318573 |
| 1850 | WEB-01 | 2026-02-19T06:42:21.514Z | 6330 | 25212 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\idavis | 126399 |
| 1851 | WEB-01 | 2026-02-17T23:37:54.305Z | 37229 | 44411 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\idavis | 80400 |
| 1852 | SQL-01 | 2026-02-11T15:46:08.267Z | 62379 | 13 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\svc_web | 306438 |
| 1853 | SQL-01 | 2026-02-19T09:47:47.191Z | 14519 | 8888 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\svc_web | 225679 |
| 1854 | SQL-01 | 2026-02-18T02:41:49.234Z | 23778 | 32186 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\svc_web | 63793 |
| 1855 | SQL-01 | 2026-02-19T07:42:16.362Z | 7382 | 45606 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\svc_web | 319545 |
| 1856 | SQL-01 | 2026-02-13T09:16:10.358Z | 11164 | 46518 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\svc_web | 301908 |
| 1857 | SQL-01 | 2026-02-11T18:59:58.206Z | 48810 | 7187 | teams.exe | C:\Windows\System32\teams.exe | ACME\svc_web | 404359 |
| 1858 | SQL-01 | 2026-02-18T09:13:50.393Z | 48857 | 59745 | code.exe | C:\Windows\System32\code.exe | ACME\svc_web | 2387 |
| 1859 | SQL-01 | 2026-02-14T18:54:07.829Z | 58020 | 1842 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\svc_web | 457661 |
| 1860 | SQL-01 | 2026-02-15T21:00:05.148Z | 15762 | 49786 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\svc_web | 269635 |
| 1861 | SQL-01 | 2026-02-19T22:54:35.273Z | 13983 | 59830 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\svc_web | 344770 |
| 1862 | SQL-01 | 2026-02-13T03:03:48.170Z | 40902 | 11238 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\svc_web | 61808 |
| 1863 | SQL-01 | 2026-02-16T06:37:48.099Z | 27260 | 32466 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\svc_web | 259790 |
| 1864 | SQL-01 | 2026-02-11T14:35:10.853Z | 29600 | 26313 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\svc_web | 376047 |
| 1865 | SQL-01 | 2026-02-10T09:58:03.006Z | 37657 | 14 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\svc_web | 326171 |
| 1866 | SQL-01 | 2026-02-11T07:43:18.165Z | 53166 | 3 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 74762 |
| 1867 | SQL-01 | 2026-02-11T21:20:03.785Z | 40269 | 56929 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\svc_web | 120770 |
| 1868 | SQL-01 | 2026-02-13T17:34:03.847Z | 62092 | 46182 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\svc_web | 65443 |
| 1869 | SQL-01 | 2026-02-12T12:23:28.306Z | 16412 | 48049 | System | System | NT AUTHORITY\SYSTEM | 109162 |
| 1870 | SQL-01 | 2026-02-14T05:20:07.137Z | 5494 | 59459 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 185691 |
| 1871 | SQL-01 | 2026-02-17T17:57:43.800Z | 28396 | 11081 | services.exe | C:\Windows\System32\services.exe | ACME\svc_web | 285927 |
| 1872 | SQL-01 | 2026-02-17T19:52:58.249Z | 56346 | 30273 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\svc_web | 377650 |
| 1873 | SQL-01 | 2026-02-17T14:30:50.711Z | 20488 | 23302 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\svc_web | 333254 |
| 1874 | SQL-01 | 2026-02-13T04:09:54.033Z | 1540 | 50655 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\svc_web | 488381 |
| 1875 | PROXY-01 | 2026-02-12T23:25:17.262Z | 1937 | 19 | svchost.exe | C:\Windows\System32\svchost.exe | ACME\svc_backup | 140725 |
| 1876 | PROXY-01 | 2026-02-17T06:16:54.740Z | 52094 | 29349 | explorer.exe | C:\Windows\System32\explorer.exe | ACME\svc_backup | 48240 |
| 1877 | PROXY-01 | 2026-02-14T19:16:37.868Z | 49648 | 54666 | chrome.exe | C:\Windows\System32\chrome.exe | ACME\svc_backup | 87946 |
| 1878 | PROXY-01 | 2026-02-16T16:28:22.699Z | 34955 | 43759 | msedge.exe | C:\Windows\System32\msedge.exe | ACME\svc_backup | 91828 |
| 1879 | PROXY-01 | 2026-02-17T02:37:54.254Z | 5180 | 35237 | outlook.exe | C:\Windows\System32\outlook.exe | ACME\svc_backup | 153185 |
| 1880 | PROXY-01 | 2026-02-16T00:51:00.113Z | 18806 | 25407 | teams.exe | C:\Windows\System32\teams.exe | ACME\svc_backup | 427145 |
| 1881 | PROXY-01 | 2026-02-14T12:02:39.504Z | 60223 | 6441 | code.exe | C:\Windows\System32\code.exe | ACME\svc_backup | 197838 |
| 1882 | PROXY-01 | 2026-02-15T10:03:06.968Z | 8630 | 39283 | powershell.exe | C:\Windows\System32\powershell.exe | ACME\svc_backup | 112138 |
| 1883 | PROXY-01 | 2026-02-19T05:19:07.102Z | 34387 | 28368 | cmd.exe | C:\Windows\System32\cmd.exe | ACME\svc_backup | 150363 |
| 1884 | PROXY-01 | 2026-02-17T14:06:17.147Z | 42295 | 56892 | notepad.exe | C:\Windows\System32\notepad.exe | ACME\svc_backup | 468441 |
| 1885 | PROXY-01 | 2026-02-17T00:24:39.825Z | 43336 | 41978 | taskhostw.exe | C:\Windows\System32\taskhostw.exe | ACME\svc_backup | 461427 |
| 1886 | PROXY-01 | 2026-02-20T10:44:15.675Z | 15218 | 9374 | RuntimeBroker.exe | C:\Windows\System32\RuntimeBroker.exe | ACME\svc_backup | 86157 |
| 1887 | PROXY-01 | 2026-02-11T18:45:48.305Z | 14367 | 59489 | SearchHost.exe | C:\Windows\System32\SearchHost.exe | ACME\svc_backup | 73464 |
| 1888 | PROXY-01 | 2026-02-19T06:01:10.040Z | 16628 | 6 | lsass.exe | C:\Windows\System32\lsass.exe | ACME\svc_backup | 105856 |
| 1889 | PROXY-01 | 2026-02-17T21:15:36.239Z | 29787 | 18 | csrss.exe | C:\Windows\System32\csrss.exe | NT AUTHORITY\SYSTEM | 206934 |
| 1890 | PROXY-01 | 2026-02-11T03:38:57.611Z | 33683 | 48997 | winlogon.exe | C:\Windows\System32\winlogon.exe | ACME\svc_backup | 179494 |
| 1891 | PROXY-01 | 2026-02-13T09:24:07.673Z | 16574 | 6917 | dwm.exe | C:\Windows\System32\dwm.exe | ACME\svc_backup | 72521 |
| 1892 | PROXY-01 | 2026-02-18T10:27:49.504Z | 61301 | 34275 | System | System | NT AUTHORITY\SYSTEM | 494587 |
| 1893 | PROXY-01 | 2026-02-13T06:01:42.525Z | 53404 | 35587 | smss.exe | C:\Windows\System32\smss.exe | NT AUTHORITY\SYSTEM | 183041 |
| 1894 | PROXY-01 | 2026-02-13T05:22:52.998Z | 40144 | 586 | services.exe | C:\Windows\System32\services.exe | ACME\svc_backup | 245130 |
| 1895 | PROXY-01 | 2026-02-11T06:34:10.531Z | 18648 | 45752 | spoolsv.exe | C:\Windows\System32\spoolsv.exe | ACME\svc_backup | 223457 |
| 1896 | PROXY-01 | 2026-02-13T04:16:19.899Z | 20559 | 14179 | MsMpEng.exe | C:\Windows\System32\MsMpEng.exe | ACME\svc_backup | 41897 |
| 1897 | PROXY-01 | 2026-02-15T02:33:38.037Z | 329 | 22656 | OneDrive.exe | C:\Windows\System32\OneDrive.exe | ACME\svc_backup | 158073 |