Apr 14, 2016 13:42:00

Server1

Medium

Success

A new process has been created: New Process ID: 29984 Image File Name: C:\WINDOWS\system32\cmd.exe Creator Process ID: 824 User Name: server1$ Domain: mydomain Logon ID: (0x0,0x3E7)

It repeats between net.exe, net1.exe, find.exe and cmd.exe. As far as I can tell, nothing appears infected from the various scanners I ran just in case. These are all legitimate files from microsoft so curious did a process get wonky and repeatedly rerunning these. This is on a windows server 2003, yes yes were upgrading to 2012 soon :)

Are these just false positives?