Friday, Mar 13, 2026
Generated by Gemini Flash
| User | Logons | First Seen | Last Seen | Computer / IP |
|---|---|---|---|---|
| David Mikhail | 67 | 12:59 AM | 11:42 PM | 192.168.128.3, 192.168.2.153, 535b081ed3ad |
| Michael Guirguis | 49 | 1:04 AM | 11:26 PM | MICHAELS-MACBOOK-AIR.LOCAL |
| MDM.12 | 26 | 3:21 PM | 5:17 PM | 192.168.128.3, MDM-SERVER, 535b081ed3ad |
| 16 | 12:30 AM | 11:42 PM | 100.81.76.83, 192.168.2.11 | |
| Karan | 13 | 7:42 AM | 3:14 PM | 192.168.2.127, KARAN-WAREHOUSE |
| Ehab Kodsi | 10 | 12:52 AM | 11:45 PM | Ehab-PC, MDM-HOME-PC |
| Atef Awad | 9 | 11:05 AM | 2:11 PM | 192.168.128.60 |
| Helena Awad | 9 | 9:51 AM | 9:55 AM | DESIGNER-PC |
| MDM.28 | 4 | 12:11 PM | 12:11 PM | 192.168.2.11, DESIGNER-OFFICE |
| MDM.32 | 2 | 7:48 AM | 7:54 AM | 192.168.2.166 |
| MDM.11 | 2 | 8:13 AM | 8:13 AM | 192.168.2.226 |
| Dalia Sidhom | 2 | 9:55 AM | 9:55 AM | 192.168.128.61, DALIA |
| David Saad | 1 | 12:41 PM | 12:41 PM | 192.168.128.90 |
| User | Sessions | First | Last | From |
|---|---|---|---|---|
| David Mikhail | 3 | 9:50 AM | 3:05 PM | 192.168.128.3, 192.168.2.153 |
| MDM.12 | 2 | 3:21 PM | 3:43 PM | 192.168.128.3 |
| 2 | 12:59 AM | 11:42 PM | 100.81.76.83 | |
| Karan | 1 | 11:41 AM | 11:41 AM | 192.168.2.127 |
| User | Failures | Source IPs |
|---|---|---|
| Karan | 3 | 192.168.2.127 |
| MDM.32 | 1 | 192.168.2.166 |
| Atef Awad | 1 | 192.168.128.60 |
| User | Application | Launches |
|---|---|---|
| getprocaddr64.exe | 1 | |
| ServerManager.exe | 1 | |
| uname.exe | 4 | |
| acregl.exe | 1 | |
| OneDrive.exe | 1 | |
| claude.exe | 5 | |
| dirname.exe | 1 | |
| bash.exe | 526 | |
| clink_x64.exe | 1 | |
| sh.exe | 96 | |
| git.exe | 72 | |
| cp.exe | 2 | |
| basename.exe | 8 | |
| Teams.exe | 1 | |
| WMIC.exe | 24 |
| User | First Unlock | Last Lock | Active Estimate | Locks | Unlocks |
|---|---|---|---|---|---|
| David Mikhail | 11:32 AM | 3:28 PM | 4h 55m | 6 | 0 |
| Karan | 11:41 AM | 11:41 AM | <1m | 1 | 0 |
| MDM.12 | 3:21 PM | 6:41 PM | 3h 20m | 6 | 0 |
Email & Teams data is from Mar 12 (2-day delay for Microsoft processing). Sign-ins are real-time.
| User | Sent | Received | Read | Last Active |
|---|---|---|---|---|
| David Mikhail | 16 | 25 | 39 | 2026-03-12 |
| Mahmoud Assi | 13 | 27 | 38 | 2026-03-12 |
| Ragy Awadallah | 11 | 20 | 20 | 2026-03-12 |
| Nervine Wassef | 10 | 81 | 84 | 2026-03-12 |
| Ehab Kodsi Guirguis | 10 | 35 | 38 | 2026-03-12 |
| Helena Awad | 5 | 6 | 7 | 2026-03-12 |
| Atef Awad | 5 | 41 | 43 | 2026-03-12 |
| Hani Abdelmalek | 4 | 20 | 24 | 2026-03-12 |
| Ehab Guirguis | 3 | 97 | 43 | 2026-03-12 |
| Prabhkaran Singh | 2 | 1 | 2 | 2026-03-12 |
| Marian Alfons | 2 | 8 | 30 | 2026-03-12 |
| Mina Iscandar | 2 | 40 | 26 | 2026-03-12 |
| Michael Guirguis | 1 | 49 | 44 | 2026-03-12 |
| Dalia Sidhom | 1 | 7 | 7 | 2026-03-12 |
| Nagy Salib | 1 | 0 | 24 | 2026-03-12 |
| David Guirguis | 1 | 17 | 74 | 2026-03-12 |
| Mary Guirguis | 0 | 1 | 0 | 2025-07-30 |
| Mina Iscandar | 0 | 3 | 0 | 2025-03-17 |
| Fady Gorgy | 0 | 10 | 6 | 2026-03-12 |
| User | App | Location | Status | Time |
|---|---|---|---|---|
| Hani Abdelmalek | One Outlook Web | Mississauga, CA | Success | Mar 13 11:31 PM |
| Ehab Guirguis | claude-mcp | Mississauga, CA | Success | Mar 13 11:30 PM |
| Ehab Guirguis | claude-mcp | Mississauga, CA | Failed (50011) | Mar 13 11:21 PM |
| Ehab Guirguis | claude-mcp | Mississauga, CA | Failed (65001) | Mar 13 11:21 PM |
| Ehab Guirguis | OfficeHome | Mississauga, CA | Success | Mar 13 10:47 PM |
| Ehab Guirguis | Notion | Mississauga, CA | Success | Mar 13 10:12 PM |
| Ehab Guirguis | Notion | Mississauga, CA | Success | Mar 13 9:47 PM |
| Michael Guirguis | Office365 Shell WCSS-Client | Mississauga, CA | Success | Mar 13 8:41 PM |
| Michael Guirguis | Microsoft Account Controls V2 | Mississauga, CA | Success | Mar 13 8:41 PM |
| Michael Guirguis | Azure Portal | Mississauga, CA | Success | Mar 13 8:23 PM |
| Michael Guirguis | Office365 Shell WCSS-Client | Mississauga, CA | Success | Mar 13 8:23 PM |
| Michael Guirguis | Office365 Shell WCSS-Client | Mississauga, CA | Success | Mar 13 8:23 PM |
| Michael Guirguis | Office365 Shell WCSS-Client | Mississauga, CA | Success | Mar 13 8:23 PM |
| Michael Guirguis | Office365 Shell WCSS-Client | Mississauga, CA | Success | Mar 13 8:23 PM |
| Michael Guirguis | Office365 Shell WCSS-Client | Mississauga, CA | Success | Mar 13 8:23 PM |
| Hani Abdelmalek | One Outlook Web | Mississauga, CA | Success | Mar 13 7:27 PM |
| Ragy Awadallah | Microsoft 365 Support Service | Burlington, CA | Success | Mar 13 4:29 PM |
| Michael Guirguis | Microsoft Teams Web Client | Mississauga, CA | Success | Mar 13 4:24 PM |
| David Mikhail | Office365 Shell WCSS-Client | Toronto, CA | Success | Mar 13 3:29 PM |
| David Mikhail | One Outlook Web | Toronto, CA | Success | Mar 13 3:29 PM |
| Hani Abdelmalek | One Outlook Web | Mississauga, CA | Success | Mar 13 3:22 PM |
| Mina Iscandar | Cloudflare Access | Toronto, CA | Success | Mar 13 3:17 PM |
| Dalia Sidhom | Office365 Shell WCSS-Client | Mississauga, CA | Success | Mar 13 3:15 PM |
| Dalia Sidhom | Office365 Shell WCSS-Client | Mississauga, CA | Success | Mar 13 3:15 PM |
| Dalia Sidhom | Office365 Shell WCSS-Client | Mississauga, CA | Success | Mar 13 3:15 PM |
No file access events recorded. Data will appear once users access audited shares.