Daily Activity Report

Monday, Mar 16, 2026

11
Active Users
122
Domain Logons
4
RDP Sessions
0
Failed Logons
0
Print Jobs
0
USB Events

Domain Logons (All Workstations)

UserLogonsFirst SeenLast SeenComputer / IP
David Mikhail4712:29 AM3:21 PM192.168.2.153, DALIA-SALIB-PC
318:10 AM3:30 PM100.81.76.83, 192.168.2.166
Atef Awad119:11 AM6:06 PMATEF-PC
Helena Awad99:34 AM9:34 AMDESIGNER-PC
MDM.1169:35 AM2:09 PM192.168.2.226, DESKTOP-SR790VT
MDM.3268:10 AM3:57 PM192.168.2.166, MARIAN-PC
Michael Guirguis57:02 PM7:03 PM192.168.128.3, MDM-SERVER, 535b081ed3ad
Karan33:20 PM3:20 PM192.168.2.127, KARAN-WAREHOUSE
Nervine Wassef21:19 PM1:20 PM192.168.2.72
Dalia Sidhom19:25 AM9:25 AMDalia
Ehab Kodsi16:25 PM6:25 PMReception-2-PC

Remote Desktop Sessions (Guacamole / RDP)

UserSessionsFirstLastFrom
211:29 AM12:57 PM100.81.76.83
Michael Guirguis17:03 PM7:03 PM192.168.128.3
David Mikhail19:32 AM9:32 AM192.168.2.153

Top Applications (Server)

UserApplicationLaunches
Michael Guirguisacregl.exe1
ls.exe10
Michael Guirguiswscript.exe1
Michael GuirguisTeams.exe1
reg.exe12
Michael GuirguisUpdate.exe1
grep.exe14
head.exe15
Michael Guirguisrunonce.exe1
Michael GuirguisServerManager.exe1
nssm.exe7
cat.exe16
curl.exe19
find.exe2
node.exe2

User Active Hours (Lock/Unlock)

UserFirst UnlockLast LockActive EstimateLocksUnlocks
David Mikhail9:52 AM3:49 PM6h 56m30
11:37 AM3:28 PM4h 50m70
Michael Guirguis7:03 PM7:03 PM<1m10

Microsoft 365 Activity

Email & Teams data is from Mar 15 (2-day delay for Microsoft processing). Sign-ins are real-time.

Sign-In Activity

UserAppLocationStatusTime
Michael Guirguisclaude-mcpToronto, CASuccessMar 16 11:52 PM
Michael GuirguisOffice365 Shell WCSS-ClientToronto, CASuccessMar 16 10:50 PM
Michael GuirguisOffice365 Shell WCSS-ClientToronto, CASuccessMar 16 10:50 PM
Michael GuirguisOffice365 Shell WCSS-ClientToronto, CASuccessMar 16 10:50 PM
Michael GuirguisOffice365 Shell WCSS-ClientToronto, CASuccessMar 16 10:50 PM
Michael GuirguisOffice365 Shell WCSS-ClientToronto, CASuccessMar 16 10:50 PM
Michael GuirguisCloudflare AccessToronto, CASuccessMar 16 6:57 PM
Ehab GuirguisOffice 365 SharePoint OnlineMississauga, CASuccessMar 16 6:33 PM
Ehab GuirguisOffice365 Shell WCSS-ClientMississauga, CASuccessMar 16 6:24 PM
Ehab GuirguisOne Outlook WebMississauga, CASuccessMar 16 6:24 PM
Ehab GuirguisSharePoint Online Web Client ExtensibilityMississauga, CASuccessMar 16 6:24 PM
Ehab GuirguisOffice365 Shell WCSS-ClientMississauga, CASuccessMar 16 6:24 PM
Ehab GuirguisOffice 365 SharePoint OnlineMississauga, CASuccessMar 16 6:24 PM
Ehab GuirguisMicrosoft Office 365 PortalMississauga, CASuccessMar 16 6:24 PM
Ehab GuirguisMicrosoft Authentication BrokerMississauga, CASuccessMar 16 6:24 PM
Ehab GuirguisMicrosoft EdgeMississauga, CASuccessMar 16 6:24 PM
Ehab GuirguisMicrosoft Office 365 PortalMississauga, CAFailed (50074)Mar 16 6:23 PM
Michael GuirguisSharePoint Online Web Client ExtensibilityMississauga, CASuccessMar 16 6:20 PM
Michael GuirguisOffice365 Shell WCSS-ClientMississauga, CASuccessMar 16 6:20 PM
Michael GuirguisMicrosoft Account Controls V2Mississauga, CASuccessMar 16 6:20 PM
Michael GuirguisCascade AuthenticationMississauga, CASuccessMar 16 6:20 PM
Michael GuirguisSharePoint Online Web Client ExtensibilityToronto, CASuccessMar 16 4:09 PM
Michael GuirguisOffice365 Shell WCSS-ClientToronto, CASuccessMar 16 4:01 PM
Michael GuirguisMicrosoft Account Controls V2Toronto, CASuccessMar 16 4:01 PM
Michael GuirguisCascade AuthenticationToronto, CASuccessMar 16 4:01 PM

File Access (Shared Drives)

UserFolderReadsWritesDeletes
Nervine WassefContracting100
MDM-SERVER Monitoring • Mar 17, 2026 6:03 PM • MDM Contracting