Mac
OfflineMonitor
Activity
Activity (Keyboard/Mouse) Hourly
Top Tasks Performed
Webinar promotion
0s3h6h9h12h15h18h21h24h27h30h
| Timestamp ↓ | Employee ? | App / Domain | Time ? | Title | |
|---|---|---|---|---|---|
| 2026-07-17 09:40:03 AM | Tim Farrow | www.pinterest.com | 00:00:01 | Tasty Garlic Shrimp Gratin: Simple and Full of Flavor - Goo… | |
| 2026-07-17 09:36:00 AM | Toby Marsden | explorer.exe | 00:00:02 | Program Manager | |
| 2026-07-17 09:35:20 AM | Tim Farrow | outlook.live.com | 00:04:18 | Inbox - Outlook | |
| 2026-07-17 09:34:59 AM | Toby Marsden | docs.google.com | 00:09:14 | Renewal playbook - Google Docs | |
| 2026-07-17 09:28:57 AM | Tim Farrow | windowsterminal.exe | 00:23:02 | Administrator: Windows PowerShell | |
| 2026-07-17 09:28:57 AM | Toby Marsden | docs.google.com | 00:09:14 | Renewal playbook - Google Docs | |
| 2026-07-17 09:28:57 AM | Tim Farrow | explorer.exe | 00:00:03 | ||
| 2026-07-17 09:26:57 AM | Toby Marsden | chat.google.com | 00:00:01 | Chat | |
| 2026-07-17 09:26:19 AM | Tim Farrow | www.pinterest.com | 00:00:01 | Tasty Garlic Shrimp Gratin: Simple and Full of Flavor - Goo… | |
| 2026-07-17 09:26:08 AM | Toby Marsden | explorer.exe | 00:00:02 | Program Manager | |
| 2026-07-17 09:25:27 AM | Tim Farrow | explorer.exe | 00:00:03 | ||
| 2026-07-17 09:16:37 AM | Toby Marsden | soffice.bin | 00:18:09 | Q4-Forecast.ods - LibreOffice Calc | |
| 2026-07-17 09:16:18 AM | Tim Farrow | docs.google.com | 00:09:14 | Renewal playbook - Google Docs | |
| 2026-07-17 09:08:31 AM | Toby Marsden | chat.google.com | 00:00:01 | Chat | |
| 2026-07-17 09:08:26 AM | Tim Farrow | docs.google.com | 00:09:14 | Renewal playbook - Google Docs | |
| 2026-07-17 09:08:08 AM | Toby Marsden | chat.google.com | 00:00:01 | Chat | |
| 2026-07-17 09:07:28 AM | Tim Farrow | outlook.live.com | 00:04:18 | Inbox - Outlook | |
| 2026-07-17 08:59:15 AM | Toby Marsden | explorer.exe | 00:00:03 | ||
| 2026-07-17 08:59:05 AM | Tim Farrow | www.pinterest.com | 00:00:01 | Tasty Garlic Shrimp Gratin: Simple and Full of Flavor - Goo… | |
| 2026-07-17 08:56:38 AM | Toby Marsden | chat.google.com | 00:00:01 | Chat |
Alerts
| Timestamp | Employee | Policy | Rule | Action | Description | |
|---|---|---|---|---|---|---|
| 2026-07-17 11:21:21 AM | Tim Farrow | TA0005 Defense Evasion | T1070.004 Indicator Removal on Host: File Deletion | Warn | Deleted path c:\users\tfarrow\downloads\aligning of finanace.oxps on drive C:. | |
| 2026-07-17 11:17:33 AM | Tim Farrow | TA0007 Discovery | T1016 System Network Configuration Discovery | Warn | Used the application tracert.exe. | |
| 2026-07-17 11:16:58 AM | Toby Marsden | TA0007 Discovery | T1016.001 System Network Configuration Discovery: Internet Connection D… | Warn | Used the application ping.exe. | |
| 2026-07-17 11:16:58 AM | Toby Marsden | TA0005 Defense Evasion | T1070.004 Indicator Removal on Host: File Deletion | Warn | Deleted path c:\users\tmarsden\wps cloud files\.3866167729391\tmp.lqqwpb on drive C:. | |
| 2026-07-17 11:16:58 AM | Tim Farrow | TA0007 Discovery | T1049 System Network Connections Discovery | Warn | Used the application netstat.exe. | |
| 2026-07-17 11:13:43 AM | Tim Farrow | TA0002 Execution | T1053.002 Scheduled Task/Job: At (Windows) | None | Used the application netstat.exe. | |
| 2026-07-17 11:13:43 AM | Toby Marsden | TA0007 Discovery | T1082 System Information Discovery | Warn | Used the application systeminfo.exe. | |
| 2026-07-17 11:13:23 AM | Toby Marsden | TA0007 Discovery | T1124 System Time Discovery | Warn | Used the application systeminfo.exe. | |
| 2026-07-17 11:12:46 AM | Tim Farrow | TA0005 Defense Evasion | T1070.004 Indicator Removal on Host: File Deletion | Warn | Deleted path c:\users\tfarrow\documents\health plan enrollment list.ods on drive C:. |
Webinar promotion0%
Webinar promotion30%
Webinar promotion35%
Webinar promotion0%
Webinar promotion0%
Webinar promotion16%
Webinar promotion18%
Webinar promotion10%
Webinar promotion34%
Webinar promotion9%
Webinar promotion18%
Webinar promotion12%
Webinar promotion6%
Webinar promotion44%
Webinar promotion9%
Webinar promotion8%
Webinar promotion15%
Webinar promotion20%
Live Montage
IP History
Public IP addresses are masked in the demo environment.
Emails
| Timestamp | Employee | Source | Destination | Attachment | |
|---|---|---|---|---|---|
| 2026-07-17 12:29:41 PM | Toby Marsden | [email protected] | [email protected] | ||
| 2026-07-17 12:27:39 PM | Tim Farrow | [email protected] | [email protected] | ||
| 2026-07-17 12:27:39 PM | Toby Marsden | [email protected] | [email protected] | ||
| 2026-07-17 12:24:25 PM | Tim Farrow | [email protected] | [email protected] | ||
| 2026-07-17 12:24:20 PM | Toby Marsden | [email protected] | [email protected] | ||
| 2026-07-17 12:23:44 PM | Tim Farrow | [email protected] | [email protected] | DMO Crypto Capital - Announcement Graphics.png | |
| 2026-07-17 12:16:52 PM | Toby Marsden | [email protected] | [email protected] | ||
| 2026-07-17 12:16:46 PM | Tim Farrow | [email protected] | [email protected] |
File Transfers
| Timestamp | Employee | Operation | File | |
|---|---|---|---|---|
| 2026-07-17 08:30 AM | Tim Farrow | Copy | Q4-Forecast.ods | |
| 2026-07-17 07:31 AM | Toby Marsden | Write | setup.log | |
| 2026-07-17 06:32 AM | Tim Farrow | Upload | deck-v2.pdf |