"PROCESS_NAME","USERGROUP_NAME","OBFUSCATED_USER_NAME","GROUP_NAME","EVENT_TYPE","EVENT_NAME","BEGIN_TIME","COMPUTER_NAME","OBFUSCATED_MACHINE_NAME","WAS_ALERT","MAIL_SUBJECT","SENDER_EMAIL_ADDRESS","HAS_CLASSIFICATION","WAS_MOBILE","WAS_TERMINAL_SESSION","WAS_WIRELESS","WAS_BLOCKED","CD_BURNID","DR_PRODUCT_TYPE","DR_PRODUCT_NAME","DR_EVENT_TYPE","DR_EVENT_NAME","DR_USER_NAME","DR_SERVER_NAME","WAS_FILE_CAPTURED","WAS_SCREEN_CAPTURED","WAS_PKI_AUTH","GID","EMAIL_ADDRESS","WAS_SMIME_ENCRYPTED","WAS_SMIME_SIGNED","VALUE_STATUS","VALUE_STATUS_TEXT","HAS_CUSTOMDATA","EVENT_DISPLAY","REG_EVENT_NAME","REPEAT_COUNT","POSITIVE_SCANS_PERCENT","IS_NET_DEVICE","HAS_SAMPLE_MATCH","SRC_DRIVE_TYPE","DEST_DRIVE_TYPE","SRC_DRIVE_NAME","DEST_DRIVE_NAME","DEST_REMOVABLE","SRC_FILE_NAME","SRC_FILE_DIRECTORY","DEST_FILE_NAME","DEST_FILE_DIRECTORY","BYTES_READ","BYTES_WRITTEN","PRINTER_NAME","PROTOCOL_TYPE","PROTOCOL_NAME","NETWORK_ADDRESS","LOCAL_PORT","REMOTE_PORT","DNS_HOSTNAME","OUTBOUND_NAME","FILE_SIZE","FILE_SIZE_KB","RECIPIENT_EMAIL_ADDRESS","RECIPIENT_TYPE","RECIPIENT_TYPE_NAME","SRC_FILE_ENCRYPTION","SRC_ENCRYPTION_NAME","DEST_FILE_ENCRYPTION","DEST_ENCRYPTION_NAME","HAS_SRC_CLASSIFICATION","HAS_DEST_CLASSIFICATION","URL_PATH","SRC_NETWORK_ADDRESS","SRC_DNS_HOSTNAME","HAS_ALERT","ADE_OBJECT_TYPE","WAS_BLOCKED","BLOCK_CODE","BLOCK_CODE_NAME","WAS_SRC_FILE_CAPTURED","WAS_DEST_FILE_CAPTURED","WAS_SCREEN_CAPTURED","DEVICE_TYPE","REG_SRC_PATH","REG_DEST_PATH","REG_VALUE_TYPE","REG_VALUE_NAME","REG_VALUE","HOOKED_MODULE_NAME","HOOKED_FUNCTION_NAME","HOOKED_OWNER_MODULE","HOOKED_ADDRESS","WAS_DLL_LOADED_RT","WAS_DLL_LOADED_AI","WAS_DLL_LOADED_UI","WAS_DLL_LOADED_RF","DNS_QUESTION","OP_EVENT_TYPE","OP_EVENT_NAME","REMED_MATCH","REMED_MATCH_NAME","REMED_ACTION","REMED_ACTION_NAME","REMED_RULE","REMED_TERM_ERROR","SRC_CLASS_POLICIES","DEST_CLASS_POLICIES","SRC_CLASS_RULES","DEST_CLASS_RULES","SRC_CLASS_TAGS","DEST_CLASS_TAGS","HAS_SRC_SAMPLE_MATCH","HAS_DEST_SAMPLE_MATCH"
"notepad.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","7","File Save As","2025-05-21 오후 2:34:02","DESKTOP-A9K7FSF","Mach66493255","N","","","1","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","3","Fixed","Fixed","False","test.txt","c:\users\sglee\desktop\","test5.pdf","c:\users\sglee\desktop\","33","33","","","","","","","","Inbound","33","1 KB","","","","0","","0","","1","1","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"notepad.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","22","Print","2025-05-21 오후 2:33:57","DESKTOP-A9K7FSF","Mach66493255","Y","","","1","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","7","Fixed","None","False","test.txt","c:\users\sglee\desktop\","","","0","0","microsoft print to pdf","","","","","","","Inbound","33","1 KB","","","","0","","","","1","0","","","","1","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False",""
"taskhostw.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","3","Network Transfer Upload","2025-05-21 오후 2:29:26","DESKTOP-A9K7FSF","Mach66493255","Y","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","0","4","Unknown","Remote","False","registeruserdevicev2","","registeruserdevicev2","https://cs.dds.microsoft.com/command/user/","2048","2048","","1","TCP","13.107.253.49","50602","443","cs.dds.microsoft.com","Outbound","2048","3 KB","","","","0","","0","","0","0","","192.168.2.15","","1","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"chrome.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","2","Network Transfer Download","2025-05-21 오후 2:15:10","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","4","3","Remote","Fixed","False","log","https://play.google.com/","log.old","c:\users\sglee\appdata\local\google\chrome\user data\default\optimization_guide_hint_cache_store\","0","0","","7","HTTP","142.250.196.142","49771","443","play.google.com","Outbound","0","0 KB","","","","0","","0","","0","0","","127.0.0.1","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"chrome.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","2","Network Transfer Download","2025-05-21 오후 2:15:10","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","4","3","Remote","Fixed","False","log","https://play.google.com/","log.old","c:\users\sglee\appdata\local\google\chrome\user data\default\autofillstrikedatabase\","0","0","","7","HTTP","142.250.196.142","49771","443","play.google.com","Outbound","0","0 KB","","","","0","","0","","0","0","","127.0.0.1","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"chrome.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","2","Network Transfer Download","2025-05-21 오후 2:15:10","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","4","3","Remote","Fixed","False","log","https://play.google.com/","log.old","c:\users\sglee\appdata\local\google\chrome\user data\default\download service\entrydb\","0","0","","7","HTTP","142.250.196.142","49771","443","play.google.com","Outbound","0","0 KB","","","","0","","0","","0","0","","127.0.0.1","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"qqprotect.exe","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","11","File Copy","2025-05-21 오후 2:14:29","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","3","Fixed","Fixed","False","registry.db","c:\windows\system32\config\systemprofile\appdata\roaming\tencent\qq\qqprotect\","registry.db","c:\users\sglee\appdata\roaming\tencent\qq\qqprotect\","57956","57956","","","","","","","","Inbound","57956","57 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"updater.exe","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","3","Network Transfer Upload","2025-05-21 오후 2:14:27","DESKTOP-A9K7FSF","Mach66493255","Y","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","4","Fixed","Remote","False","updater.old.2025-05-21_05-14-20-046.log.gz","c:\program files\dropbox\dropboxupdater\","updater.old.2025-05-21_05-14-20-046.log.gz","https://dl-debug.dropbox.com/","2094","2094","","1","TCP","162.125.84.17","49679","443","dl-debug.dropbox.com","Outbound","2094","3 KB","","","","0","","0","","0","0","","192.168.2.15","","1","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"gbexperience.exe","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","11","File Copy","2025-05-21 오후 2:14:23","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","3","Fixed","Fixed","False","appchecker2.exe","c:\program files\windowsapps\samsungelectronicsco.ltd.samsungwelcome_3.5.1.0_x64__3c1yjt4zspk6g\windowsservice\","appchecker2.exe","c:\programdata\samsung\gbexperiencesvc\service\","740712","740712","","","","","","","","Inbound","740712","724 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"gbexperience.exe","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","11","File Copy","2025-05-21 오후 2:14:23","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","3","Fixed","Fixed","False","cryptinfo.dat","c:\program files\windowsapps\samsungelectronicsco.ltd.samsungwelcome_3.5.1.0_x64__3c1yjt4zspk6g\windowsservice\","cryptinfo.dat","c:\programdata\samsung\gbexperiencesvc\service\","1312","1312","","","","","","","","Inbound","1312","2 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"gbexperience.exe","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","11","File Copy","2025-05-21 오후 2:14:23","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","3","Fixed","Fixed","False","instctrl.exe","c:\program files\windowsapps\samsungelectronicsco.ltd.samsungwelcome_3.5.1.0_x64__3c1yjt4zspk6g\windowsservice\","instctrl.exe","c:\programdata\samsung\gbexperiencesvc\service\","759656","759656","","","","","","","","Inbound","759656","742 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"samsungsecuritysupporter.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","61","User Logon Failed","2025-05-21 오후 2:14:22","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","7","7","None","None","False","","","","","0","0","","","","127.0.0.1","","","","Inbound","0","0 KB","","","","","","","","0","0","","","DESKTOP-A9K7FSF","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","",""
"system","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","42","Device Detected","2025-05-21 오후 2:14:20","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","7","7","None","None","False","","","","","0","0","","","","","","","","Inbound","0","0 KB","","","","","","","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","",""
"system","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","42","Device Detected","2025-05-21 오후 2:14:20","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","7","Fixed","None","True","samsung mzvlq512hblu-00b","","","","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"system","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","42","Device Detected","2025-05-21 오후 2:14:20","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","7","7","None","None","False","","","","","0","0","","","","","","","","Inbound","0","0 KB","","","","","","","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","",""
"system","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","42","Device Detected","2025-05-21 오후 2:14:20","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","7","Fixed","None","True","samsung mzvlq512hblu-00b","","","","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"system","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","42","Device Detected","2025-05-21 오후 2:14:20","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","7","7","None","None","False","","","","","0","0","","","","","","","","Inbound","0","0 KB","","","","","","","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","",""
"system","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","42","Device Detected","2025-05-21 오후 2:14:20","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","0","7","Unknown","None","True","","","","","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"system","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","42","Device Detected","2025-05-21 오후 2:14:20","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","7","7","None","None","False","","","","","0","0","","","","","","","","Inbound","0","0 KB","","","","","","","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","",""
"system","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","42","Device Detected","2025-05-21 오후 2:14:20","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","0","7","Unknown","None","True","","","","","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"system","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","42","Device Detected","2025-05-21 오후 2:14:20","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","7","7","None","None","False","","","","","0","0","","","","","","","","Inbound","0","0 KB","","","","","","","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","",""
"system","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","42","Device Detected","2025-05-21 오후 2:14:20","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","0","7","Unknown","None","True","","","","","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"system","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","42","Device Detected","2025-05-21 오후 2:14:20","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","7","7","None","None","False","","","","","0","0","","","","","","","","Inbound","0","0 KB","","","","","","","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","",""
"system","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","42","Device Detected","2025-05-21 오후 2:14:20","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","2","7","Removable","None","True","sandisk cruzer blade usb device","","","","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"system","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","42","Device Detected","2025-05-21 오후 2:14:20","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","7","7","None","None","False","","","","","0","0","","","","","","","","Inbound","0","0 KB","","","","","","","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","",""
"system","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","42","Device Detected","2025-05-21 오후 2:14:20","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","0","7","Unknown","None","True","","","","","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"winlogon.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","23","User Logon","2025-05-21 오후 2:14:20","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","7","7","None","None","False","","","","","0","0","","","","","","","","Inbound","0","0 KB","","","","","","","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","",""
"sdbinst.exe","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","11","File Copy","2025-05-21 오후 2:14:18","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","3","Fixed","Fixed","False","msimerge.sdb","c:\windows\apppatch\mergesdbfilessource\","01d81186e0aaa800.msimain.sdb","c:\windows\apppatch\mergesdbfiles\","1148","1148","","","","","","","","Inbound","1148","2 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"sdbinst.exe","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","11","File Copy","2025-05-21 오후 2:14:18","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","3","Fixed","Fixed","False","sysmerge.sdb","c:\windows\apppatch\mergesdbfilessource\","01d81186e0aaa800.sysmain.sdb","c:\windows\apppatch\mergesdbfiles\","33260","33260","","","","","","","","Inbound","33260","33 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"winlogon.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","24","User Logoff","2025-05-21 오후 2:13:32","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","7","7","None","None","False","","","","","0","0","","","","","","","","Inbound","0","0 KB","","","","","","","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","",""
"notepad.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","7","File Save As","2025-05-21 오후 2:13:24","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","3","Fixed","Fixed","False","kmc-uw-n040056 디버그 활성화 시점 10시 42분.txt","c:\users\sglee\desktop\","kmc-uw-n040056 디버그 활성화 시점 10시 42분.txt","c:\users\sglee\desktop\","2048","2048","","","","","","","","Inbound","2048","3 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"samsungsecuritysupporter.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","61","User Logon Failed","2025-05-21 오후 2:13:22","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","7","7","None","None","False","","","","","0","0","","","","127.0.0.1","","","","Inbound","0","0 KB","","","","","","","","0","0","","","DESKTOP-A9K7FSF","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","",""
"mstsc.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","21","ADE Paste","2025-05-21 오후 2:06:20","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","7","7","None","None","False","*kmc-uw-n040056 디버그 활성화 시점 10시 42분 - 메모장","?:\","192.168.1.52: 원격 데스크톱 연결","?:\","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"updater.exe","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","3","Network Transfer Upload","2025-05-21 오후 1:57:50","DESKTOP-A9K7FSF","Mach66493255","Y","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","4","Fixed","Remote","False","updater.old.2025-05-21_04-57-48-966.log.gz","c:\program files\dropbox\dropboxupdater\","updater.old.2025-05-21_04-57-48-966.log.gz","https://dl-debug.dropbox.com/","2091","2091","","1","TCP","162.125.84.17","51524","443","dl-debug.dropbox.com","Outbound","2091","3 KB","","","","0","","0","","0","0","","192.168.2.15","","1","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"chrome.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","3","Network Transfer Upload","2025-05-21 오후 1:56:08","DESKTOP-A9K7FSF","Mach66493255","Y","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","4","Fixed","Remote","False","autoskmc-bo-n048539_dgdiag.zip","c:\users\sglee\desktop\","autoskmc-bo-n048539_dgdiag.zip","https://api.portal.fortra.com/","52721175","52721175","","7","HTTP","18.205.54.167","51468","443","api.portal.fortra.com","Outbound","52721175","51486 KB","","","","0","","0","","0","0","","127.0.0.1","","1","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"chrome.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","3","Network Transfer Upload","2025-05-21 오후 1:56:08","DESKTOP-A9K7FSF","Mach66493255","Y","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","4","Fixed","Remote","False","스크린샷 2025-05-21 135249.png","c:\users\sglee\desktop\","스크린샷 2025-05-21 135249.png","https://api.portal.fortra.com/","60009","60009","","7","HTTP","18.205.54.167","51468","443","api.portal.fortra.com","Outbound","60009","59 KB","","","","0","","0","","0","0","","127.0.0.1","","1","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"chrome.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","3","Network Transfer Upload","2025-05-21 오후 1:56:08","DESKTOP-A9K7FSF","Mach66493255","Y","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","4","Fixed","Remote","False","스크린샷 2025-05-21 135226.png","c:\users\sglee\desktop\","스크린샷 2025-05-21 135226.png","https://api.portal.fortra.com/","57158","57158","","7","HTTP","18.205.54.167","51468","443","api.portal.fortra.com","Outbound","57158","56 KB","","","","0","","0","","0","0","","127.0.0.1","","1","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"chrome.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","21","ADE Paste","2025-05-21 오후 1:56:08","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","0","7","Unknown","None","False","","","chrome legacy window","?:\","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"chrome.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","21","ADE Paste","2025-05-21 오후 1:56:01","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","4","4","Remote","Remote","False","682d5423-c94c-8003-a9e2-e3c21030456e","chatgpt.com\c\","support.fortra.com","","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"supporteru.exe","TESTPC\Administrator","User30281930","TESTPC","21","ADE Paste","2025-05-21 오후 1:52:38","TESTPC","Mach91458010","N","","","0","1","1","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","0","7","Unknown","None","False","","","supporteru_mainframe_childview","?:\","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"supporteru.exe","TESTPC\Administrator","User30281930","TESTPC","21","ADE Paste","2025-05-21 오후 1:52:17","TESTPC","Mach91458010","N","","","0","1","1","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","0","7","Unknown","None","False","","","supporteru_mainframe_childview","?:\","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"supporteru.exe","TESTPC\Administrator","User30281930","TESTPC","21","ADE Paste","2025-05-21 오후 1:52:15","TESTPC","Mach91458010","N","","","0","1","1","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","0","7","Unknown","None","False","","","supporteru_mainframe_childview","?:\","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"mstsc.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","21","ADE Paste","2025-05-21 오후 1:41:41","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","7","7","None","None","False","*kmc-uw-n040056 디버그 활성화 시점 10시 42분 - 메모장","?:\","192.168.1.52: 원격 데스크톱 연결","?:\","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"supporteru.exe","TESTPC\Administrator","User30281930","TESTPC","21","ADE Paste","2025-05-21 오후 1:41:34","TESTPC","Mach91458010","N","","","0","1","1","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","0","7","Unknown","None","False","","","supporteru_mainframe_childview","?:\","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"supporteru.exe","TESTPC\Administrator","User30281930","TESTPC","21","ADE Paste","2025-05-21 오후 1:41:29","TESTPC","Mach91458010","N","","","0","1","1","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","0","7","Unknown","None","False","","","supporteru_mainframe_childview","?:\","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"notepad.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","21","ADE Paste","2025-05-21 오후 1:26:47","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","7","7","None","None","False","192.168.1.52: 원격 데스크톱 연결","?:\","제목 없음 - 메모장","?:\","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"supporteru.exe","TESTPC\Administrator","User30281930","TESTPC","21","ADE Paste","2025-05-21 오후 1:26:32","TESTPC","Mach91458010","N","","","0","1","1","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","0","7","Unknown","None","False","","","supporteru_mainframe_childview","?:\","0","0","","","","","","","","Inbound","0","0 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"sdbinst.exe","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","11","File Copy","2025-05-21 오후 1:21:28","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","3","Fixed","Fixed","False","msimerge.sdb","c:\windows\apppatch\mergesdbfilessource\","01d81186e0aaa800.msimain.sdb","c:\windows\apppatch\mergesdbfiles\","1148","1148","","","","","","","","Inbound","1148","2 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"sdbinst.exe","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","11","File Copy","2025-05-21 오후 1:21:28","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","3","Fixed","Fixed","False","sysmerge.sdb","c:\windows\apppatch\mergesdbfilessource\","01d81186e0aaa800.sysmain.sdb","c:\windows\apppatch\mergesdbfiles\","33260","33260","","","","","","","","Inbound","33260","33 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"qqprotect.exe","NT AUTHORITY\SYSTEM","User47324809","NT AUTHORITY","11","File Copy","2025-05-21 오후 1:21:20","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","3","3","Fixed","Fixed","False","registry.db","c:\windows\system32\config\systemprofile\appdata\roaming\tencent\qq\qqprotect\","registry.db","c:\users\sglee\appdata\roaming\tencent\qq\qqprotect\","57956","57956","","","","","","","","Inbound","57956","57 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"
"chrome.exe","DESKTOP-A9K7FSF\GUN","User50904040","DESKTOP-A9K7FSF","21","ADE Paste","2025-05-21 오후 1:18:56","DESKTOP-A9K7FSF","Mach66493255","N","","","0","1","0","0","0","","","","","","","","0","0","0","","","","","3","","False","","","0","","","","4","4","Remote","Remote","False","digital_guardian_8_7_rule_implementation_guide.pdf","\\192.168.1.101\d\디지털가디언\기타 자료\documentation\server (dgmc)\version 8.7.0\","chatgpt.com","","0","0","","","","","","","","Inbound","2916870","2849 KB","","","","0","","0","","0","0","","","","0","","False","0","Not Blocked","False","False","0","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","False","False"