win-035khor8tef
OnlineOSMicrosoft Windows Server 2019 Datacenter 64-bit
IPUnavailable in demo
AgentStealth 25.50.3310
Last EmployeesAymon Cousteau Brayden Crawford +9
Activity
Activity (Keyboard/Mouse) Hourly
Top Tasks Performed
Project Tasks
0s15h30h45h60h75h90h105h120h
| Timestamp ↓ | Employee ? | App / Domain | Time ? | Title | |
|---|---|---|---|---|---|
| 2026-07-17 09:45:49 AM | Aymon Cousteau | chatgpt.com | 00:06:52 | ChatGPT | |
| 2026-07-17 09:43:14 AM | Brayden Crawford | docs.google.com | 00:09:14 | Renewal playbook - Google Docs | |
| 2026-07-17 09:42:44 AM | Aymon Cousteau | windowsterminal.exe | 00:23:02 | Administrator: Windows PowerShell | |
| 2026-07-17 09:42:27 AM | Brayden Crawford | chat.google.com | 00:00:01 | Chat | |
| 2026-07-17 09:36:38 AM | Aymon Cousteau | explorer.exe | 00:00:02 | Program Manager | |
| 2026-07-17 09:35:57 AM | Brayden Crawford | chat.google.com | 00:00:01 | Chat | |
| 2026-07-17 09:35:30 AM | Aymon Cousteau | docs.google.com | 00:09:14 | Renewal playbook - Google Docs | |
| 2026-07-17 09:27:39 AM | Brayden Crawford | ms-teams.exe | 00:12:44 | Weekly pipeline review | Microsoft Teams | |
| 2026-07-17 09:27:28 AM | Aymon Cousteau | chat.google.com | 00:00:01 | Chat | |
| 2026-07-17 09:21:33 AM | Brayden Crawford | slack.exe | 00:03:31 | Slack | #general | |
| 2026-07-17 09:21:02 AM | Aymon Cousteau | docs.google.com | 00:09:14 | Renewal playbook - Google Docs | |
| 2026-07-17 09:16:39 AM | Brayden Crawford | outlook.live.com | 00:04:18 | Inbox - Outlook | |
| 2026-07-17 09:16:13 AM | Aymon Cousteau | ms-teams.exe | 00:12:44 | Weekly pipeline review | Microsoft Teams | |
| 2026-07-17 09:16:11 AM | Brayden Crawford | chatgpt.com | 00:06:52 | ChatGPT | |
| 2026-07-17 09:13:31 AM | Aymon Cousteau | chrome.exe | 00:02:47 | Salesforce - Opportunities | |
| 2026-07-17 09:13:15 AM | Brayden Crawford | explorer.exe | 00:00:02 | Program Manager | |
| 2026-07-17 09:07:44 AM | Aymon Cousteau | outlook.live.com | 00:04:18 | Inbox - Outlook | |
| 2026-07-17 09:07:20 AM | Brayden Crawford | chatgpt.com | 00:06:52 | ChatGPT | |
| 2026-07-17 09:06:38 AM | Aymon Cousteau | chrome.exe | 00:02:47 | Salesforce - Opportunities | |
| 2026-07-17 09:06:14 AM | Brayden Crawford | windowsterminal.exe | 00:23:02 | Administrator: Windows PowerShell |
Alerts
| Timestamp | Employee | Policy | Rule | Action | Description | |
|---|---|---|---|---|---|---|
| 2026-07-17 11:07:07 AM | Aymon Cousteau | TA0005 Defense Evasion | T1070.004 Indicator Removal on Host: File Deletion | Warn | Deleted path c:\users\acousteau\downloads\treasury diversificatilon sheet.oxps on drive C:. | |
| 2026-07-17 11:01:20 AM | Aymon Cousteau | TA0007 Discovery | T1016 System Network Configuration Discovery | Warn | Used the application tracert.exe. | |
| 2026-07-17 11:00:53 AM | Brayden Crawford | TA0007 Discovery | T1016.001 System Network Configuration Discovery: Internet Connection D… | Warn | Used the application ping.exe. | |
| 2026-07-17 11:00:53 AM | Brayden Crawford | TA0005 Defense Evasion | T1070.004 Indicator Removal on Host: File Deletion | Warn | Deleted path c:\users\bcrawford\wps cloud files\.3866167729391\tmp.umojly on drive C:. | |
| 2026-07-17 10:53:48 AM | Gordon Lewis | TA0007 Discovery | T1049 System Network Connections Discovery | Warn | Used the application netstat.exe. | |
| 2026-07-17 10:53:48 AM | Gordon Lewis | TA0002 Execution | T1053.002 Scheduled Task/Job: At (Windows) | None | Used the application netstat.exe. | |
| 2026-07-17 10:53:48 AM | Ian Fransson | TA0007 Discovery | T1082 System Information Discovery | Warn | Used the application systeminfo.exe. | |
| 2026-07-17 10:47:21 AM | Ian Fransson | TA0007 Discovery | T1124 System Time Discovery | Warn | Used the application systeminfo.exe. | |
| 2026-07-17 10:47:01 AM | Shelby Hunter | TA0005 Defense Evasion | T1070.004 Indicator Removal on Host: File Deletion | Warn | Deleted path c:\users\shunter\documents\joint venture feedback survey.oxps on drive C:. |
Project Tasks26%
Project Tasks44%
Project Tasks58%
Project Tasks33%
Project Tasks0%
Project Tasks40%
Project Tasks72%
Project Tasks48%
Project Tasks35%
Project Tasks49%
Project Tasks63%
Project Tasks54%
Project Tasks40%
Project Tasks62%
Project Tasks80%
Project Tasks78%
Project Tasks67%
Project Tasks31%
Live Montage
IP History
Public IP addresses are masked in the demo environment.
Emails
| Timestamp | Employee | Source | Destination | Attachment | |
|---|---|---|---|---|---|
| 2026-07-17 12:15:28 PM | Tia Sanders | [email protected] | [email protected] | ||
| 2026-07-17 12:06:14 PM | Gordon Lewis | [email protected] | [email protected] | ||
| 2026-07-17 12:06:03 PM | Maria Bennett | [email protected] | [email protected] | ||
| 2026-07-17 12:05:26 PM | Raphael Dantes | [email protected] | [email protected] | ||
| 2026-07-17 12:04:51 PM | Aymon Cousteau | [email protected] | [email protected] | ||
| 2026-07-17 12:01:18 PM | Ian Fransson | [email protected] | [email protected] | DMO Crypto Capital - Announcement Graphics.png | |
| 2026-07-17 12:00:51 PM | Michael Redmond | [email protected] | [email protected] | ||
| 2026-07-17 12:00:25 PM | Simon Woodly | [email protected] | [email protected] |
File Transfers
| Timestamp | Employee | Operation | File | |
|---|---|---|---|---|
| 2026-07-17 08:30 AM | Aymon Cousteau | Copy | Q4-Forecast.ods | |
| 2026-07-17 07:31 AM | Brayden Crawford | Write | setup.log | |
| 2026-07-17 06:32 AM | Aymon Cousteau | Upload | deck-v2.pdf |