Daily Activity Report

Friday, Mar 13, 2026

13
Active Users
210
Domain Logons
8
RDP Sessions
5
Failed Logons
0
Print Jobs
0
USB Events

Today at a Glance (AI Summary)

Generated by Gemini Flash

Domain Logons (All Workstations)

UserLogonsFirst SeenLast SeenComputer / IP
David Mikhail6712:59 AM11:42 PM192.168.128.3, 192.168.2.153, 535b081ed3ad
Michael Guirguis491:04 AM11:26 PMMICHAELS-MACBOOK-AIR.LOCAL
MDM.12263:21 PM5:17 PM192.168.128.3, MDM-SERVER, 535b081ed3ad
1612:30 AM11:42 PM100.81.76.83, 192.168.2.11
Karan137:42 AM3:14 PM192.168.2.127, KARAN-WAREHOUSE
Ehab Kodsi1012:52 AM11:45 PMEhab-PC, MDM-HOME-PC
Atef Awad911:05 AM2:11 PM192.168.128.60
Helena Awad99:51 AM9:55 AMDESIGNER-PC
MDM.28412:11 PM12:11 PM192.168.2.11, DESIGNER-OFFICE
MDM.3227:48 AM7:54 AM192.168.2.166
MDM.1128:13 AM8:13 AM192.168.2.226
Dalia Sidhom29:55 AM9:55 AM192.168.128.61, DALIA
David Saad112:41 PM12:41 PM192.168.128.90

Remote Desktop Sessions (Guacamole / RDP)

UserSessionsFirstLastFrom
David Mikhail39:50 AM3:05 PM192.168.128.3, 192.168.2.153
MDM.1223:21 PM3:43 PM192.168.128.3
212:59 AM11:42 PM100.81.76.83
Karan111:41 AM11:41 AM192.168.2.127

Failed Logon Attempts

UserFailuresSource IPs
Karan3192.168.2.127
MDM.321192.168.2.166
Atef Awad1192.168.128.60

Top Applications (Server)

UserApplicationLaunches
getprocaddr64.exe1
ServerManager.exe1
uname.exe4
acregl.exe1
OneDrive.exe1
claude.exe5
dirname.exe1
bash.exe526
clink_x64.exe1
sh.exe96
git.exe72
cp.exe2
basename.exe8
Teams.exe1
WMIC.exe24

User Active Hours (Lock/Unlock)

UserFirst UnlockLast LockActive EstimateLocksUnlocks
David Mikhail11:32 AM3:28 PM4h 55m60
Karan11:41 AM11:41 AM<1m10
MDM.123:21 PM6:41 PM3h 20m60

Microsoft 365 Activity

Email & Teams data is from Mar 12 (2-day delay for Microsoft processing). Sign-ins are real-time.

Email Activity (Mar 12)

UserSentReceivedReadLast Active
David Mikhail1625392026-03-12
Mahmoud Assi1327382026-03-12
Ragy Awadallah1120202026-03-12
Nervine Wassef1081842026-03-12
Ehab Kodsi Guirguis1035382026-03-12
Helena Awad5672026-03-12
Atef Awad541432026-03-12
Hani Abdelmalek420242026-03-12
Ehab Guirguis397432026-03-12
Prabhkaran Singh2122026-03-12
Marian Alfons28302026-03-12
Mina Iscandar240262026-03-12
Michael Guirguis149442026-03-12
Dalia Sidhom1772026-03-12
Nagy Salib10242026-03-12
David Guirguis117742026-03-12
Mary Guirguis0102025-07-30
Mina Iscandar0302025-03-17
Fady Gorgy01062026-03-12

Sign-In Activity

UserAppLocationStatusTime
Hani AbdelmalekOne Outlook WebMississauga, CASuccessMar 13 11:31 PM
Ehab Guirguisclaude-mcpMississauga, CASuccessMar 13 11:30 PM
Ehab Guirguisclaude-mcpMississauga, CAFailed (50011)Mar 13 11:21 PM
Ehab Guirguisclaude-mcpMississauga, CAFailed (65001)Mar 13 11:21 PM
Ehab GuirguisOfficeHomeMississauga, CASuccessMar 13 10:47 PM
Ehab GuirguisNotionMississauga, CASuccessMar 13 10:12 PM
Ehab GuirguisNotionMississauga, CASuccessMar 13 9:47 PM
Michael GuirguisOffice365 Shell WCSS-ClientMississauga, CASuccessMar 13 8:41 PM
Michael GuirguisMicrosoft Account Controls V2Mississauga, CASuccessMar 13 8:41 PM
Michael GuirguisAzure PortalMississauga, CASuccessMar 13 8:23 PM
Michael GuirguisOffice365 Shell WCSS-ClientMississauga, CASuccessMar 13 8:23 PM
Michael GuirguisOffice365 Shell WCSS-ClientMississauga, CASuccessMar 13 8:23 PM
Michael GuirguisOffice365 Shell WCSS-ClientMississauga, CASuccessMar 13 8:23 PM
Michael GuirguisOffice365 Shell WCSS-ClientMississauga, CASuccessMar 13 8:23 PM
Michael GuirguisOffice365 Shell WCSS-ClientMississauga, CASuccessMar 13 8:23 PM
Hani AbdelmalekOne Outlook WebMississauga, CASuccessMar 13 7:27 PM
Ragy AwadallahMicrosoft 365 Support ServiceBurlington, CASuccessMar 13 4:29 PM
Michael GuirguisMicrosoft Teams Web ClientMississauga, CASuccessMar 13 4:24 PM
David MikhailOffice365 Shell WCSS-ClientToronto, CASuccessMar 13 3:29 PM
David MikhailOne Outlook WebToronto, CASuccessMar 13 3:29 PM
Hani AbdelmalekOne Outlook WebMississauga, CASuccessMar 13 3:22 PM
Mina IscandarCloudflare AccessToronto, CASuccessMar 13 3:17 PM
Dalia SidhomOffice365 Shell WCSS-ClientMississauga, CASuccessMar 13 3:15 PM
Dalia SidhomOffice365 Shell WCSS-ClientMississauga, CASuccessMar 13 3:15 PM
Dalia SidhomOffice365 Shell WCSS-ClientMississauga, CASuccessMar 13 3:15 PM

File Access (Shared Drives)

No file access events recorded. Data will appear once users access audited shares.