(EventID:5156 DestPort:88) (-((Application:\\device\\harddiskvolume* OR Application:C\:*) Application:\\Windows\\System32\\lsass.exe)) (-(((Application:\\device\\harddiskvolume* OR Application:C\:*) (Application:\\Program\ Files\ \(x86\)\\Google\\Chrome\\Application\\chrome.exe OR Application:\\Program\ Files\\Google\\Chrome\\Application\\chrome.exe)) OR ((Application:\\device\\harddiskvolume* OR Application:C\:*) (Application:\\Program\ Files\ \(x86\)\\Mozilla\ Firefox\\firefox.exe OR Application:\\Program\ Files\\Mozilla\ Firefox\\firefox.exe)) OR Application:\\tomcat\\bin\\tomcat8.exe))