04:12:07ALERTEDR flagged child powershell.exe -enc
04:12:09IOC45.147.11.8 matches known C2 beacon
04:12:12MITRET1059.001 PowerShell execution
04:12:15AUTHimpossible travel - jdoe TLV to NYC
04:12:18DNSbeacon to cdn-telemetry[.]live 60s
04:12:21HUNTlateral movement via SMB detected
04:12:07ALERTEDR flagged child powershell.exe -enc
04:12:09IOC45.147.11.8 matches known C2 beacon
04:12:12MITRET1059.001 PowerShell execution
04:12:15AUTHimpossible travel - jdoe TLV to NYC
04:12:18DNSbeacon to cdn-telemetry[.]live 60s
04:12:21HUNTlateral movement via SMB detected