User Activity (Domain Authentication)
Times show first/last authentication activity. Sessions = activity bursts separated by 30+ minute gaps.
| User | Sessions | First Active | Last Active | Computer / IP |
|---|
| Marian Alfons | 3 | 7:49 AM | 6:07 PM | 192.168.2.166, MARIAN-PC |
| MDM.11 | 4 | 8:27 AM | 2:52 PM | 192.168.2.226, DESKTOP-SR790VT |
| Ragy Awadallah | 5 | 8:56 AM | 3:49 PM | 192.168.128.6, ACCOUNTING |
| Dalia Sidhom | 1 | 9:16 AM | 9:16 AM | 192.168.128.61 |
| Atef Awad | 2 | 9:28 AM | 10:09 AM | ATEF-PC |
| Helena Awad | 2 | 9:48 AM | 3:11 PM | DESIGNER-PC |
| David Mikhail | 2 | 9:53 AM | 12:20 PM | 192.168.2.153, DALIA-SALIB-PC |
| Hany Abdelmalek | 1 | 10:52 AM | 11:02 AM | HANY-PC |
| Mina Iscandar | 3 | 12:31 PM | 4:02 PM | 192.168.128.3, 535b081ed3ad, MDM-SERVER |
| Nervine Wassef | 1 | 2:13 PM | 2:18 PM | 192.168.2.72 |
Remote Desktop Sessions (Guacamole / RDP)
| User | Sessions | First | Last | From |
|---|
| Mina Iscandar | 3 | 12:31 PM | 2:31 PM | 192.168.128.3 |
| MDM.11 | 1 | 12:37 PM | 12:37 PM | 192.168.2.226 |
Failed Logon Attempts
| User | Failures | Source |
|---|
| hani@mdmcontracting.ca | 62 | HANY-PC |
| Fady Gorgy | 19 | FADY-ELECTRIC |
Machine/device auth failures (excluded from count): 2550 from XP600
Top Applications (Server)
No application data for this period.
Server Session Activity (Lock/Unlock)
RDP session lock/unlock events on the server only. Workstation activity is tracked separately via agent.
| User | First Activity | Last Activity | Duration | Locks | Unlocks |
|---|
| Mina Iscandar | 12:32 PM | 3:05 PM | 3h 32m | 11 | 0 |
| MDM.11 | 2:17 PM | 2:17 PM | <1m | 1 | 0 |
Microsoft 365 Activity
Email & Teams data is from Mar 16 (2-day delay for Microsoft processing). Sign-ins are real-time.
Email Activity (Mar 16)
| User | Sent | Received | Read | Last Active |
|---|
| Nervine Wassef | 16 | 64 | 87 | 2026-03-16 |
| David Mikhail | 14 | 22 | 32 | 2026-03-16 |
| Mahmoud Assi | 14 | 32 | 55 | 2026-03-16 |
| Mina Iscandar | 13 | 29 | 80 | 2026-03-16 |
| David Guirguis | 9 | 36 | 135 | 2026-03-16 |
| Dalia Sidhom | 8 | 22 | 26 | 2026-03-16 |
| Atef Awad | 8 | 48 | 60 | 2026-03-16 |
| Hani Abdelmalek | 7 | 26 | 103 | 2026-03-16 |
| Ehab Guirguis | 6 | 105 | 38 | 2026-03-16 |
| Marian Alfons | 4 | 1 | 28 | 2026-03-16 |
| Helena Awad | 2 | 8 | 2 | 2026-03-16 |
| Fady Gorgy | 2 | 31 | 47 | 2026-03-16 |
| Michael Guirguis | 1 | 17 | 2 | 2026-03-16 |
| Nagy Salib | 0 | 1 | 0 | 2026-03-15 |
| Ragy Awadallah | 0 | 2 | 1 | 2026-03-16 |
| Ehab Kodsi Guirguis | 0 | 16 | 1 | 2026-03-16 |
| Prabhkaran Singh | 0 | 1 | 0 | 2026-03-12 |
| Mary Guirguis | 0 | 1 | 0 | 2025-07-30 |
Teams Activity (Mar 16)
| User | Chats | Calls | Meetings | Last Active |
|---|
| Dalia Sidhom | 7 | 0 | 0 | 2026-03-16 |
| Atef Awad | 6 | 0 | 0 | 2026-03-16 |
| Joy Ghaly | 1 | 0 | 1 | 2026-03-16 |
Sign-In Activity
| User | App | Location | Status | Last Time |
|---|
| Michael Guirguis | claude-mcp | Mississauga, CA | Failed (50011) (4x) | Mar 17 9:19 PM |
| Marian Alfons | Outlook Mobile | Toronto, CA | Failed (50126) (2x) | Mar 17 10:10 PM |
| Mina Iscandar | Azure Active Directory PowerShell | Camden, US | Failed (50053) | Mar 17 11:36 PM |
| Michael Guirguis | claude-mcp | Mississauga, CA | Failed (65001) | Mar 17 11:46 PM |
| David Guirguis | Microsoft AppSource | Mississauga, CA | Success | Mar 17 8:53 PM |
| Michael Guirguis | SharePoint Online Web Client Extensibility | Mississauga, CA | Success | Mar 17 8:13 PM |
| Michael Guirguis | One Outlook Web | Mississauga, CA | Success (2x) | Mar 17 7:37 PM |
| Michael Guirguis | Microsoft 365 Security and Compliance Center | Mississauga, CA | Success | Mar 17 5:01 PM |
| Dalia Sidhom | One Outlook Web | Mississauga, CA | Success | Mar 17 5:29 PM |
| David Mikhail | Office365 Shell WCSS-Client | Toronto, CA | Success | Mar 17 5:36 PM |
| Helena Awad | One Outlook Web | Mississauga, CA | Success | Mar 17 6:26 PM |
| David Guirguis | Microsoft Office 365 Portal | Mississauga, CA | Success | Mar 17 8:53 PM |
| Michael Guirguis | claude-mcp | Mississauga, CA | Success (6x) | Mar 17 11:47 PM |
| Marian Alfons | One Outlook Web | Toronto, CA | Success (4x) | Mar 17 11:56 PM |
| Michael Guirguis | Microsoft Office 365 Portal | Mississauga, CA | Success | Mar 17 4:08 PM |
| Michael Guirguis | Azure Portal | Mississauga, CA | Success | Mar 17 9:04 PM |
| Michael Guirguis | Office 365 SharePoint Online | Mississauga, CA | Success | Mar 17 8:12 PM |
| Hani Abdelmalek | One Outlook Web | Mississauga, CA | Success | Mar 17 4:19 PM |
| Michael Guirguis | Office365 Shell WCSS-Client | Mississauga, CA | Success (11x) | Mar 17 8:13 PM |
File Access (Shared Drives)
| User | Folder | Reads | Writes | Deletes |
|---|
| Marian Alfons | Accounting | 21 | 0 | 0 |