User Activity (Domain Authentication)
Times show first/last authentication activity. Sessions = activity bursts separated by 30+ minute gaps.
| User | Sessions | First Active | Last Active | Computer / IP |
|---|
| Marian Alfons | 3 | 7:49 AM | 1:23 PM | 192.168.2.166 |
| Karan | 5 | 7:56 AM | 2:48 PM | 192.168.2.127, KARAN-WAREHOUSE |
| MDM.11 | 1 | 8:07 AM | 8:07 AM | 192.168.2.226 |
| David Mikhail | 6 | 9:15 AM | 3:20 PM | 192.168.128.3, 192.168.2.153, 535b081ed3ad |
| Dalia Sidhom | 1 | 9:17 AM | 9:17 AM | 192.168.128.61 |
| Nervine Wassef | 8 | 9:48 AM | 7:24 PM | 192.168.2.72, NERVINE-PC, 192.168.128.3 |
| Helena Awad | 2 | 11:01 AM | 2:10 PM | DESIGNER-PC |
| Atef Awad | 2 | 11:08 AM | 12:54 PM | ATEF-PC |
| Hany Abdelmalek | 1 | 2:01 PM | 2:01 PM | HANY-PC |
| Mina Iscandar | 1 | 4:00 PM | 4:01 PM | 192.168.128.3, MDM-SERVER, 535b081ed3ad |
Remote Desktop Sessions (Guacamole / RDP)
| User | Sessions | First | Last | From |
|---|
| Nervine Wassef | 6 | 11:45 AM | 2:34 PM | 192.168.2.72, 192.168.128.3 |
| David Mikhail | 3 | 12:49 PM | 2:07 PM | 192.168.128.3, 192.168.2.153 |
| Karan | 1 | 1:50 PM | 1:50 PM | 192.168.2.127 |
| Mina Iscandar | 1 | 4:01 PM | 4:01 PM | 192.168.128.3 |
Failed Logon Attempts
| User | Failures | Source |
|---|
| hani@mdmcontracting.ca | 57 | HANY-PC |
| Fady Gorgy | 20 | FADY-ELECTRIC |
| Dalia Sidhom | 3 | 192.168.128.61 |
Top Applications (Server)
No application data for this period.
Print Jobs
| User | Document | Printer | Pages | Time |
|---|
| David Mikhail | Print Document | Guacamole Printer (redirected 9) | 1 | 3:21 PM |
Microsoft 365 Activity
Email & Teams data is from Mar 17 (2-day delay for Microsoft processing). Sign-ins are real-time.
Email Activity (Mar 17)
| User | Sent | Received | Read | Last Active |
|---|
| Nervine Wassef | 19 | 68 | 81 | 2026-03-17 |
| Mahmoud Assi | 16 | 34 | 47 | 2026-03-17 |
| David Guirguis | 9 | 23 | 102 | 2026-03-17 |
| Mina Iscandar | 9 | 46 | 68 | 2026-03-17 |
| Hani Abdelmalek | 9 | 29 | 36 | 2026-03-17 |
| Michael Guirguis | 7 | 15 | 10 | 2026-03-17 |
| Ehab Guirguis | 6 | 124 | 52 | 2026-03-17 |
| Helena Awad | 3 | 7 | 8 | 2026-03-17 |
| Atef Awad | 3 | 51 | 53 | 2026-03-17 |
| David Mikhail | 3 | 14 | 37 | 2026-03-17 |
| Fady Gorgy | 2 | 7 | 8 | 2026-03-17 |
| Marian Alfons | 2 | 9 | 25 | 2026-03-17 |
| Tamer Basilious | 1 | 3 | 32 | 2026-03-17 |
| Ehab Kodsi Guirguis | 1 | 24 | 13 | 2026-03-17 |
| Ragy Awadallah | 1 | 15 | 16 | 2026-03-17 |
| Nagy Salib | 1 | 1 | 10 | 2026-03-17 |
| Dalia Sidhom | 1 | 12 | 6 | 2026-03-17 |
| Prabhkaran Singh | 0 | 1 | 0 | 2026-03-12 |
| Mina Iscandar | 0 | 3 | 0 | 2025-03-17 |
Teams Activity (Mar 17)
| User | Chats | Calls | Meetings | Last Active |
|---|
| Michael Guirguis | 2 | 0 | 0 | 2026-03-17 |
| Atef Awad | 1 | 0 | 0 | 2026-03-17 |
Sign-In Activity
| User | App | Location | Status | Last Time |
|---|
| Michael Guirguis | claude-mcp | Mississauga, CA | Failed (65001) (12x) | Mar 18 6:30 PM |
| Michael Guirguis | Microsoft Graph Command Line Tools | Mississauga, CA | Failed (50199) (4x) | Mar 18 6:03 PM |
| David Mikhail | claude-mcp | Toronto, CA | Failed (90094) (4x) | Mar 18 9:11 PM |
| Hani Abdelmalek | One Outlook Web | Mississauga, CA | Success (2x) | Mar 18 11:50 PM |
| Dalia Sidhom | One Outlook Web | Mississauga, CA | Success | Mar 18 5:18 PM |
| Michael Guirguis | Azure Portal | Toronto, CA | Success (2x) | Mar 18 8:26 PM |
| Michael Guirguis | MDM Hub | Toronto, CA | Success | Mar 18 8:51 PM |
| Michael Guirguis | Microsoft Teams Web Client | Mississauga, CA | Success (2x) | Mar 18 4:55 PM |
| Michael Guirguis | Office365 Shell WCSS-Client | Mississauga, CA | Success | Mar 18 4:29 PM |
| David Guirguis | Office365 Shell WCSS-Client | Mississauga, CA | Success | Mar 18 9:43 PM |
| David Mikhail | claude-mcp | Toronto, CA | Success (3x) | Mar 18 5:17 PM |
| Michael Guirguis | claude-mcp | Mississauga, CA | Success (13x) | Mar 18 6:30 PM |
| Michael Guirguis | Microsoft Graph Command Line Tools | Mississauga, CA | Success (4x) | Mar 18 6:03 PM |
File Access (Shared Drives)
No file access events recorded. Data will appear once users access audited shares.