win-amilbq61h74
OnlineOSMicrosoft Windows Server 2019 Datacenter 64-bit
IPUnavailable in demo
AgentStealth 25.50.3310
Last EmployeesJames OC Demo
Activity
Activity (Keyboard/Mouse) Hourly
Top Tasks Performed
Project Tasks
0s15h30h45h60h75h90h105h120h
| Timestamp ↓ | Employee ? | App / Domain | Time ? | Title | |
|---|---|---|---|---|---|
| 2026-07-17 09:39:01 AM | James OC Demo | chat.google.com | 00:00:01 | Chat | |
| 2026-07-17 09:34:09 AM | James OC Demo | explorer.exe | 00:00:02 | Program Manager | |
| 2026-07-17 09:33:43 AM | James OC Demo | chatgpt.com | 00:06:52 | ChatGPT | |
| 2026-07-17 09:33:09 AM | James OC Demo | soffice.bin | 00:18:09 | Q4-Forecast.ods - LibreOffice Calc | |
| 2026-07-17 09:26:05 AM | James OC Demo | explorer.exe | 00:00:03 | ||
| 2026-07-17 09:25:58 AM | James OC Demo | www.pinterest.com | 00:00:01 | Tasty Garlic Shrimp Gratin: Simple and Full of Flavor - Goo… | |
| 2026-07-17 09:25:41 AM | James OC Demo | windowsterminal.exe | 00:23:02 | Administrator: Windows PowerShell | |
| 2026-07-17 09:23:27 AM | James OC Demo | ms-teams.exe | 00:12:44 | Weekly pipeline review | Microsoft Teams | |
| 2026-07-17 09:23:18 AM | James OC Demo | windowsterminal.exe | 00:23:02 | Administrator: Windows PowerShell | |
| 2026-07-17 09:19:25 AM | James OC Demo | soffice.bin | 00:18:09 | Q4-Forecast.ods - LibreOffice Calc | |
| 2026-07-17 09:18:57 AM | James OC Demo | chat.google.com | 00:00:01 | Chat | |
| 2026-07-17 09:17:43 AM | James OC Demo | www.pinterest.com | 00:00:01 | Tasty Garlic Shrimp Gratin: Simple and Full of Flavor - Goo… | |
| 2026-07-17 09:17:25 AM | James OC Demo | chat.google.com | 00:00:01 | Chat | |
| 2026-07-17 09:17:01 AM | James OC Demo | www.pinterest.com | 00:00:01 | Tasty Garlic Shrimp Gratin: Simple and Full of Flavor - Goo… | |
| 2026-07-17 09:13:57 AM | James OC Demo | chat.google.com | 00:00:01 | Chat | |
| 2026-07-17 09:13:54 AM | James OC Demo | www.pinterest.com | 00:00:01 | Tasty Garlic Shrimp Gratin: Simple and Full of Flavor - Goo… | |
| 2026-07-17 09:13:54 AM | James OC Demo | ms-teams.exe | 00:12:44 | Weekly pipeline review | Microsoft Teams | |
| 2026-07-17 09:13:54 AM | James OC Demo | slack.exe | 00:03:31 | Slack | #general | |
| 2026-07-17 09:08:06 AM | James OC Demo | soffice.bin | 00:18:09 | Q4-Forecast.ods - LibreOffice Calc | |
| 2026-07-17 09:07:36 AM | James OC Demo | chrome.exe | 00:02:47 | Salesforce - Opportunities |
Alerts
| Timestamp | Employee | Policy | Rule | Action | Description | |
|---|---|---|---|---|---|---|
| 2026-07-17 11:20:19 AM | James OC Demo | TA0010 Exfiltration | T1048.001 Exfiltration Over Alternative Protocol: Exfiltration Over Une… | Warn | Accessed path \\windowsdemocomp*\mailslot\net\netlogon. | |
| 2026-07-17 11:15:42 AM | James OC Demo | TA0005 Defense Evasion | T1070.004 Indicator Removal on Host: File Deletion | Warn | Deleted path c:\users\jdemo\downloads\healthcare business report.odp on drive C:. | |
| 2026-07-17 11:15:21 AM | James OC Demo | TA0007 Discovery | T1016 System Network Configuration Discovery | Warn | Used the application tracert.exe. | |
| 2026-07-17 11:15:03 AM | James OC Demo | TA0007 Discovery | T1016.001 System Network Configuration Discovery: Internet Connection D… | Warn | Used the application ping.exe. | |
| 2026-07-17 11:15:03 AM | James OC Demo | TA0005 Defense Evasion | T1070.004 Indicator Removal on Host: File Deletion | Warn | Deleted path c:\users\jdemo\wps cloud files\.3866167729391\tmp.lqqwpb on drive C:. | |
| 2026-07-17 11:08:03 AM | James OC Demo | TA0007 Discovery | T1049 System Network Connections Discovery | Warn | Used the application netstat.exe. | |
| 2026-07-17 11:07:23 AM | James OC Demo | TA0002 Execution | T1053.002 Scheduled Task/Job: At (Windows) | None | Used the application netstat.exe. | |
| 2026-07-17 11:06:42 AM | James OC Demo | TA0007 Discovery | T1082 System Information Discovery | Warn | Used the application systeminfo.exe. | |
| 2026-07-17 10:58:03 AM | James OC Demo | TA0007 Discovery | T1124 System Time Discovery | Warn | Used the application systeminfo.exe. |
Project Tasks38%
Project Tasks65%
Project Tasks61%
Project Tasks69%
Project Tasks0%
Project Tasks36%
Project Tasks81%
Project Tasks37%
Project Tasks67%
Project Tasks53%
Project Tasks57%
Project Tasks0%
Project Tasks0%
Project Tasks69%
Project Tasks30%
Project Tasks43%
Project Tasks31%
Project Tasks39%
Live Montage
IP History
Public IP addresses are masked in the demo environment.
Emails
| Timestamp | Employee | Source | Destination | Attachment | |
|---|---|---|---|---|---|
| 2026-07-17 12:28:40 PM | James OC Demo | [email protected] | [email protected] | ||
| 2026-07-17 12:25:49 PM | James OC Demo | [email protected] | [email protected] | ||
| 2026-07-17 12:25:42 PM | James OC Demo | [email protected] | [email protected] | ||
| 2026-07-17 12:22:31 PM | James OC Demo | [email protected] | [email protected] | ||
| 2026-07-17 12:21:50 PM | James OC Demo | [email protected] | [email protected] | ||
| 2026-07-17 12:21:28 PM | James OC Demo | [email protected] | [email protected] | DMO Crypto Capital - Announcement Graphics.png | |
| 2026-07-17 12:17:21 PM | James OC Demo | [email protected] | [email protected] | ||
| 2026-07-17 12:16:40 PM | James OC Demo | [email protected] | [email protected] |
File Transfers
| Timestamp | Employee | Operation | File | |
|---|---|---|---|---|
| 2026-07-17 08:30 AM | James OC Demo | Copy | Q4-Forecast.ods | |
| 2026-07-17 07:31 AM | James OC Demo | Write | setup.log | |
| 2026-07-17 06:32 AM | James OC Demo | Upload | deck-v2.pdf |