2653 monitored
← Actor desksRead-only · existing recordsClassic graph view ↗

Sentinels / Actor desk

Microsoft Defender For Office

organization · Registry status: unverified

78c05bf9-e7ee-5d25-9005-291f6bb133ff

Evidence, not intent.

Public-source event mentions and stored signals. Adjacency does not establish causation, coordination, or an actor's position.

No claim of complete coverage or live monitoring.

Observation window

UTC dates, inclusive · maximum 90 days. Applies to events and anomalies only.

Recent observations / timeline

The source record

6 distinct events shown, newest first. Headlines may be generated summaries; inspect the source before repeating a claim.

  1. 客服文员-51工作-加国无忧

    Recorded role: co mention · EPU_CATS_HEALTHCARE

    Open source ↗
  2. Microsoft Office Lifetime License Gets Nearly 90% Off, So You Can Say Goodbye to Monthly Subscription Fees

    Recorded role: co mention · Unclassified event

    Open source ↗
  3. I measured what Windows services actually use at idle, and 3 cost more RAM than my browser

    Recorded role: co mention · WB_2769_JOBS_STRATEGIES

    Open source ↗
  4. Microsoft Shuts Down Chinese Phishing Empire Behind Billion Messages to 75,000 Organizations

    Recorded role: co mention · DISABILITY

    Open source ↗
  5. Microsoft Disrupts Phishing Network Behind 1 Billion Messages: 75,000 Organizations Targeted

    Recorded role: co mention · TAX_WORLDLANGUAGES_COGUI

    Open source ↗
  6. This Deal Days sale is your last chance get a Microsoft Office lifetime license for just $30

    Recorded role: co mention · TAX_FNCACT_EDITOR

    Open source ↗

Signals to inspect

Anomalies

Latest 0 in the selected window (up to 10). Detector output, not verified conclusions.

No stored anomalies in this window.

Narrative context

Unresolved threads

Latest 20 at most, across all dates. Stored narratives require human review.

No unresolved threads recorded.

Stored connections

Relationships

Up to 50 records ordered by evidence count, across all dates. Co-mentions indicate association in source material, not affiliation or coordination.

Ask this desk

Desk analyst

Read-only questions about Microsoft Defender For Office's stored record. Answers cite only records retrieved for that turn; a citation chip opens the existing inspection view. Absence of matches is not evidence of inactivity.

Operator sign-in is required. Sign in

Identity is the existing actor registry record. Entity resolution and source coverage may be incomplete.