tim's virtual machine
OfflineMonitor
Activity
Activity (Keyboard/Mouse) Hourly
Top Tasks Performed
Q4 pipeline review
0s3h6h9h12h15h18h21h24h27h30h
| Timestamp ↓ | Employee ? | App / Domain | Time ? | Title | |
|---|---|---|---|---|---|
| 2026-07-17 09:49:32 AM | James Gabbert | slack.exe | 00:03:31 | Slack | #general | |
| 2026-07-17 09:46:48 AM | James Gabbert | soffice.bin | 00:18:09 | Q4-Forecast.ods - LibreOffice Calc | |
| 2026-07-17 09:46:48 AM | James Gabbert | windowsterminal.exe | 00:23:02 | Administrator: Windows PowerShell | |
| 2026-07-17 09:41:45 AM | James Gabbert | soffice.bin | 00:18:09 | Q4-Forecast.ods - LibreOffice Calc | |
| 2026-07-17 09:41:39 AM | James Gabbert | chat.google.com | 00:00:01 | Chat | |
| 2026-07-17 09:41:06 AM | James Gabbert | www.pinterest.com | 00:00:01 | Tasty Garlic Shrimp Gratin: Simple and Full of Flavor - Goo… | |
| 2026-07-17 09:41:06 AM | James Gabbert | ms-teams.exe | 00:12:44 | Weekly pipeline review | Microsoft Teams | |
| 2026-07-17 09:35:33 AM | James Gabbert | docs.google.com | 00:09:14 | Renewal playbook - Google Docs | |
| 2026-07-17 09:35:18 AM | James Gabbert | ms-teams.exe | 00:12:44 | Weekly pipeline review | Microsoft Teams | |
| 2026-07-17 09:35:11 AM | James Gabbert | slack.exe | 00:03:31 | Slack | #general | |
| 2026-07-17 09:34:13 AM | James Gabbert | explorer.exe | 00:00:02 | Program Manager | |
| 2026-07-17 09:33:33 AM | James Gabbert | www.pinterest.com | 00:00:01 | Tasty Garlic Shrimp Gratin: Simple and Full of Flavor - Goo… | |
| 2026-07-17 09:33:03 AM | James Gabbert | windowsterminal.exe | 00:23:02 | Administrator: Windows PowerShell | |
| 2026-07-17 09:32:39 AM | James Gabbert | chat.google.com | 00:00:01 | Chat | |
| 2026-07-17 09:24:10 AM | James Gabbert | windowsterminal.exe | 00:23:02 | Administrator: Windows PowerShell | |
| 2026-07-17 09:23:36 AM | James Gabbert | docs.google.com | 00:09:14 | Renewal playbook - Google Docs | |
| 2026-07-17 09:22:55 AM | James Gabbert | ms-teams.exe | 00:12:44 | Weekly pipeline review | Microsoft Teams | |
| 2026-07-17 09:16:54 AM | James Gabbert | windowsterminal.exe | 00:23:02 | Administrator: Windows PowerShell | |
| 2026-07-17 09:16:28 AM | James Gabbert | ms-teams.exe | 00:12:44 | Weekly pipeline review | Microsoft Teams | |
| 2026-07-17 09:15:54 AM | James Gabbert | docs.google.com | 00:09:14 | Renewal playbook - Google Docs |
Alerts
| Timestamp | Employee | Policy | Rule | Action | Description | |
|---|---|---|---|---|---|---|
| 2026-07-17 11:10:50 AM | James Gabbert | TA0005 Defense Evasion | T1070.004 Indicator Removal on Host: File Deletion | Warn | Deleted path c:\users\jgabbert\downloads\joint venture feedback survey.oxps on drive C:. | |
| 2026-07-17 11:04:54 AM | James Gabbert | TA0007 Discovery | T1016 System Network Configuration Discovery | Warn | Used the application tracert.exe. | |
| 2026-07-17 11:04:25 AM | James Gabbert | TA0007 Discovery | T1016.001 System Network Configuration Discovery: Internet Connection D… | Warn | Used the application ping.exe. | |
| 2026-07-17 10:55:01 AM | James Gabbert | TA0005 Defense Evasion | T1070.004 Indicator Removal on Host: File Deletion | Warn | Deleted path c:\users\jgabbert\wps cloud files\.3866167729391\tmp.ohxdun on drive C:. | |
| 2026-07-17 10:54:51 AM | James Gabbert | TA0007 Discovery | T1049 System Network Connections Discovery | Warn | Used the application netstat.exe. | |
| 2026-07-17 10:47:17 AM | James Gabbert | TA0002 Execution | T1053.002 Scheduled Task/Job: At (Windows) | None | Used the application netstat.exe. | |
| 2026-07-17 10:47:00 AM | James Gabbert | TA0007 Discovery | T1082 System Information Discovery | Warn | Used the application systeminfo.exe. | |
| 2026-07-17 10:41:07 AM | James Gabbert | TA0007 Discovery | T1124 System Time Discovery | Warn | Used the application systeminfo.exe. | |
| 2026-07-17 10:40:34 AM | James Gabbert | TA0005 Defense Evasion | T1070.004 Indicator Removal on Host: File Deletion | Warn | Deleted path c:\users\jgabbert\documents\data privacy awareness survey.oxps on drive C:. |
Q4 pipeline review0%
Q4 pipeline review0%
Q4 pipeline review38%
Q4 pipeline review23%
Q4 pipeline review14%
Q4 pipeline review24%
Q4 pipeline review43%
Q4 pipeline review18%
Q4 pipeline review44%
Q4 pipeline review0%
Q4 pipeline review0%
Q4 pipeline review8%
Q4 pipeline review27%
Q4 pipeline review26%
Q4 pipeline review24%
Q4 pipeline review10%
Q4 pipeline review29%
Q4 pipeline review40%
Live Montage
IP History
Public IP addresses are masked in the demo environment.
Emails
| Timestamp | Employee | Source | Destination | Attachment | |
|---|---|---|---|---|---|
| 2026-07-17 12:19:11 PM | James Gabbert | [email protected] | [email protected] | ||
| 2026-07-17 12:15:01 PM | James Gabbert | [email protected] | [email protected] | ||
| 2026-07-17 12:14:46 PM | James Gabbert | [email protected] | [email protected] | ||
| 2026-07-17 12:14:09 PM | James Gabbert | [email protected] | [email protected] | ||
| 2026-07-17 12:06:49 PM | James Gabbert | [email protected] | [email protected] | ||
| 2026-07-17 12:06:31 PM | James Gabbert | [email protected] | [email protected] | DMO Crypto Capital - Announcement Graphics.png | |
| 2026-07-17 12:05:49 PM | James Gabbert | [email protected] | [email protected] | ||
| 2026-07-17 12:00:35 PM | James Gabbert | [email protected] | [email protected] |
File Transfers
| Timestamp | Employee | Operation | File | |
|---|---|---|---|---|
| 2026-07-17 08:30 AM | James Gabbert | Copy | Q4-Forecast.ods | |
| 2026-07-17 07:31 AM | James Gabbert | Write | setup.log | |
| 2026-07-17 06:32 AM | James Gabbert | Upload | deck-v2.pdf |