Date/Time: 12-5-2018 12:08:00
Process: [3964]C:\Windows\System32\netsh.exe
Process MD5 Hash: 4D51BCD0B94D09F5DFB80DF754D31E28
Parent: [488]C:\Windows\System32\cmd.exe
Rule: BlockNetshExecution
Rule Name: Block execution of netsh.exe
Command Line: netsh.exe  interface ipv6 add route 3800::/5 "28" fe80::8  store=active
Signer: 
Parent Signer: 
User/Domain: SYSTEM/NT AUTHORITY
System File: True
Parent System File: True
Integrity Level: System
Parent Integrity Level: System


Date/Time: 12-5-2018 12:07:59
Process: [4456]C:\Windows\System32\netsh.exe
Process MD5 Hash: 4D51BCD0B94D09F5DFB80DF754D31E28
Parent: [488]C:\Windows\System32\cmd.exe
Rule: BlockNetshExecution
Rule Name: Block execution of netsh.exe
Command Line: netsh.exe  interface ipv6 add route 3000::/5 "28" fe80::8  store=active
Signer: 
Parent Signer: 
User/Domain: SYSTEM/NT AUTHORITY
System File: True
Parent System File: True
Integrity Level: System
Parent Integrity Level: System


Date/Time: 12-5-2018 12:07:59
Process: [3136]C:\Windows\System32\netsh.exe
Process MD5 Hash: 4D51BCD0B94D09F5DFB80DF754D31E28
Parent: [488]C:\Windows\System32\cmd.exe
Rule: BlockNetshExecution
Rule Name: Block execution of netsh.exe
Command Line: netsh.exe  interface ipv6 add route 2800::/5 "28" fe80::8  store=active
Signer: 
Parent Signer: 
User/Domain: SYSTEM/NT AUTHORITY
System File: True
Parent System File: True
Integrity Level: System
Parent Integrity Level: System


Date/Time: 12-5-2018 12:07:59
Process: [464]C:\Windows\System32\netsh.exe
Process MD5 Hash: 4D51BCD0B94D09F5DFB80DF754D31E28
Parent: [488]C:\Windows\System32\cmd.exe
Rule: BlockNetshExecution
Rule Name: Block execution of netsh.exe
Command Line: netsh.exe  interface ipv6 add route 2000::/5 "28" fe80::8  store=active
Signer: 
Parent Signer: 
User/Domain: SYSTEM/NT AUTHORITY
System File: True
Parent System File: True
Integrity Level: System
Parent Integrity Level: System


Date/Time: 12-5-2018 12:07:59
Process: [4960]C:\Windows\System32\cmd.exe
Process MD5 Hash: F4F684066175B77E0C3A000549D2922C
Parent: [488]C:\Windows\System32\cmd.exe
Rule: BlockCmdExeExecution
Rule Name: Block execution of Windows Command Prompt (cmd.exe)
Command Line: C:\Windows\system32\cmd.exe /c echo 10.2.20.16 |findstr -r .*\..*\..*\..*
Signer: 
Parent Signer: 
User/Domain: SYSTEM/NT AUTHORITY
System File: True
Parent System File: True
Integrity Level: System
Parent Integrity Level: System


Date/Time: 12-5-2018 12:07:27
Process: [3132]C:\Windows\System32\netsh.exe
Process MD5 Hash: 4D51BCD0B94D09F5DFB80DF754D31E28
Parent: [7132]C:\Windows\System32\cmd.exe
Rule: BlockNetshExecution
Rule Name: Block execution of netsh.exe
Command Line: netsh.exe  interface ipv6 add route 3000::/4 "24" fe80::8  store=active
Signer: 
Parent Signer: 
User/Domain: SYSTEM/NT AUTHORITY
System File: True
Parent System File: True
Integrity Level: System
Parent Integrity Level: System


Date/Time: 12-5-2018 12:07:27
Process: [6196]C:\Windows\System32\netsh.exe
Process MD5 Hash: 4D51BCD0B94D09F5DFB80DF754D31E28
Parent: [7132]C:\Windows\System32\cmd.exe
Rule: BlockNetshExecution
Rule Name: Block execution of netsh.exe
Command Line: netsh.exe  interface ipv6 add route 2000::/4 "24" fe80::8  store=active
Signer: 
Parent Signer: 
User/Domain: SYSTEM/NT AUTHORITY
System File: True
Parent System File: True
Integrity Level: System
Parent Integrity Level: System


Date/Time: 12-5-2018 12:07:27
Process: [540]C:\Windows\System32\cmd.exe
Process MD5 Hash: F4F684066175B77E0C3A000549D2922C
Parent: [7132]C:\Windows\System32\cmd.exe
Rule: BlockCmdExeExecution
Rule Name: Block execution of Windows Command Prompt (cmd.exe)
Command Line: C:\Windows\system32\cmd.exe /c echo 192.168.1.102 |findstr -r .*\..*\..*\..*
Signer: 
Parent Signer: 
User/Domain: SYSTEM/NT AUTHORITY
System File: True
Parent System File: True
Integrity Level: System
Parent Integrity Level: System