win-035khor8ter
OnlineMonitor
Activity
Activity (Keyboard/Mouse) Hourly
Top Tasks Performed
Campaign launch
0s15h30h45h60h75h90h105h120h
| Timestamp ↓ | Employee ? | App / Domain | Time ? | Title | |
|---|---|---|---|---|---|
| 2026-07-17 09:50:33 AM | Patsy Smith | slack.exe | 00:03:31 | Slack | #general | |
| 2026-07-17 09:48:37 AM | Elinor Silva | soffice.bin | 00:18:09 | Q4-Forecast.ods - LibreOffice Calc | |
| 2026-07-17 09:48:31 AM | Patsy Smith | www.pinterest.com | 00:00:01 | Tasty Garlic Shrimp Gratin: Simple and Full of Flavor - Goo… | |
| 2026-07-17 09:42:40 AM | Elinor Silva | explorer.exe | 00:00:03 | ||
| 2026-07-17 09:42:11 AM | Patsy Smith | outlook.live.com | 00:04:18 | Inbox - Outlook | |
| 2026-07-17 09:41:23 AM | Elinor Silva | chrome.exe | 00:02:47 | Salesforce - Opportunities | |
| 2026-07-17 09:41:08 AM | Patsy Smith | chat.google.com | 00:00:01 | Chat | |
| 2026-07-17 09:40:03 AM | Elinor Silva | chrome.exe | 00:02:47 | Salesforce - Opportunities | |
| 2026-07-17 09:39:54 AM | Patsy Smith | www.pinterest.com | 00:00:01 | Tasty Garlic Shrimp Gratin: Simple and Full of Flavor - Goo… | |
| 2026-07-17 09:39:27 AM | Elinor Silva | explorer.exe | 00:00:02 | Program Manager | |
| 2026-07-17 09:39:16 AM | Patsy Smith | explorer.exe | 00:00:03 | ||
| 2026-07-17 09:38:04 AM | Elinor Silva | slack.exe | 00:03:31 | Slack | #general | |
| 2026-07-17 09:38:04 AM | Patsy Smith | explorer.exe | 00:00:02 | Program Manager | |
| 2026-07-17 09:37:29 AM | Elinor Silva | explorer.exe | 00:00:03 | ||
| 2026-07-17 09:30:58 AM | Patsy Smith | explorer.exe | 00:00:02 | Program Manager | |
| 2026-07-17 09:30:18 AM | Elinor Silva | explorer.exe | 00:00:03 | ||
| 2026-07-17 09:30:12 AM | Patsy Smith | ms-teams.exe | 00:12:44 | Weekly pipeline review | Microsoft Teams | |
| 2026-07-17 09:21:58 AM | Elinor Silva | soffice.bin | 00:18:09 | Q4-Forecast.ods - LibreOffice Calc | |
| 2026-07-17 09:21:39 AM | Patsy Smith | docs.google.com | 00:09:14 | Renewal playbook - Google Docs | |
| 2026-07-17 09:21:07 AM | Elinor Silva | www.pinterest.com | 00:00:01 | Tasty Garlic Shrimp Gratin: Simple and Full of Flavor - Goo… |
Alerts
| Timestamp | Employee | Policy | Rule | Action | Description | |
|---|---|---|---|---|---|---|
| 2026-07-17 11:11:52 AM | Patsy Smith | TA0005 Defense Evasion | T1070.004 Indicator Removal on Host: File Deletion | Warn | Deleted path c:\users\psmith\downloads\healthcare business report.odp on drive C:. | |
| 2026-07-17 11:06:44 AM | Patsy Smith | TA0007 Discovery | T1016 System Network Configuration Discovery | Warn | Used the application tracert.exe. | |
| 2026-07-17 11:06:42 AM | Elinor Silva | TA0007 Discovery | T1016.001 System Network Configuration Discovery: Internet Connection D… | Warn | Used the application ping.exe. | |
| 2026-07-17 10:59:58 AM | Elinor Silva | TA0005 Defense Evasion | T1070.004 Indicator Removal on Host: File Deletion | Warn | Deleted path c:\users\esilva\wps cloud files\.3866167729391\tmp.ohxdun on drive C:. | |
| 2026-07-17 10:59:58 AM | Shiyam Morcos | TA0007 Discovery | T1049 System Network Connections Discovery | Warn | Used the application netstat.exe. | |
| 2026-07-17 10:59:58 AM | Shiyam Morcos | TA0002 Execution | T1053.002 Scheduled Task/Job: At (Windows) | None | Used the application netstat.exe. | |
| 2026-07-17 10:59:29 AM | Demie Slappendel | TA0007 Discovery | T1082 System Information Discovery | Warn | Used the application systeminfo.exe. | |
| 2026-07-17 10:57:24 AM | Demie Slappendel | TA0007 Discovery | T1124 System Time Discovery | Warn | Used the application systeminfo.exe. | |
| 2026-07-17 10:57:10 AM | Fang Shen | TA0005 Defense Evasion | T1070.004 Indicator Removal on Host: File Deletion | Warn | Deleted path c:\users\fshen\documents\treasury diversificatilon sheet.oxps on drive C:. |

Campaign launch58%

Campaign launch73%

Campaign launch0%

Campaign launch0%

Campaign launch53%

Campaign launch61%

Campaign launch89%

Campaign launch28%

Campaign launch32%

Campaign launch0%

Campaign launch30%

Campaign launch36%

Campaign launch41%

Campaign launch56%

Campaign launch54%

Campaign launch44%

Campaign launch37%

Campaign launch48%
Live Montage






IP History
Public IP addresses are masked in the demo environment.
Emails
| Timestamp | Employee | Source | Destination | Attachment | |
|---|---|---|---|---|---|
| 2026-07-17 12:20:12 PM | Vivian De Paul | [email protected] | [email protected] | ||
| 2026-07-17 12:16:50 PM | James Gabbert | [email protected] | [email protected] | ||
| 2026-07-17 12:16:21 PM | Patsy Smith | [email protected] | [email protected] | ||
| 2026-07-17 12:16:21 PM | Demie Slappendel | [email protected] | [email protected] | ||
| 2026-07-17 12:12:45 PM | Michelle Hurley | [email protected] | [email protected] | ||
| 2026-07-17 12:12:37 PM | Lisa Holt | [email protected] | [email protected] | DMO Crypto Capital - Announcement Graphics.png | |
| 2026-07-17 12:12:28 PM | Jackson Gollan | [email protected] | [email protected] | ||
| 2026-07-17 12:10:28 PM | Shiyam Morcos | [email protected] | [email protected] |
File Transfers
| Timestamp | Employee | Operation | File | |
|---|---|---|---|---|
| 2026-07-17 08:30 AM | Patsy Smith | Copy | Q4-Forecast.ods | |
| 2026-07-17 07:31 AM | Elinor Silva | Write | setup.log | |
| 2026-07-17 06:32 AM | Patsy Smith | Upload | deck-v2.pdf |