Data Source Warnings

Today at a Glance (AI Summary)

Here is an executive summary of the MDM Contracting activity report:
Mina Iscandar had server session activity starting at 4:45 AM, significantly before normal business hours, and no other user activity was recorded after 3:18 PM.
Ehab Kodsi's single session from 3:18 PM to 3:18 PM indicates a very short period of activity.
There were no failed logon attempts, print jobs, or USB device events recorded, suggesting no immediate security concerns in these areas.
Mina Iscandar was the most active in M365 email communication over the past 7 days, with 20 sent and 52 received emails.
All recorded M365 sign-ins originated from Mississauga, CA, which is a consistent location.
Network traffic data is minimal, with most devices consuming less than 1 MB, and no specific bandwidth-heavy applications or security events were noted.
No remote access (Netbird or non-office IPs), file deletions, Sysmon alerts, or workstation agent data indicating unusual application usage or idle patterns were present in this report.

Generated by Gemini Flash

Times show first/last authentication activity. Sessions = activity bursts separated by 30+ minute gaps.

User	Sessions	First Active	Last Active	Computer / IP
Ehab Kodsi	1	3:18 PM	3:18 PM	EHAB-PC

No RDS sessions recorded for this period.

No application data for this period.

RDP session lock/unlock events on the server only. Workstation activity is tracked separately via agent.

User	First Activity	Last Activity	Duration	Locks	Unlocks
Mina Iscandar	4:45 AM	4:45 AM	<1m	1	0

Client	IP	Sent (MB)	Received (MB)	Total (MB)
Dalia-Salib-PC	192.168.2.153	0.1	0.1	0.2
14:2f:fd:0d:d3:0d	192.168.2.64	0	0	0
a141bf74-6857-491e-b980-895fb8afcc02	192.168.2.72	0.1	0.1	0.2
dad71c46-4b00-4579-8540-5c99a5cc65d9	192.168.2.226	0	0.1	0.2
18J180104009	192.168.2.187	0	0	0
Karan-Warehouse	192.168.2.127	0	0.1	0.1
c0:74:ad:1b:b1:db	192.168.2.94	0	0	0
BB8836154	192.168.2.124	0	0	0
BB8836102	192.168.2.73	0	0	0
HP80E82C054C2B	192.168.2.175	0	0	0
HS200	192.168.2.143	0	0	0
OC200 HW Controller (Timberlea)	192.168.2.2	0	0	0
HS200	192.168.2.147	0	0	0
e0:ba:ad:dc:6f:13	192.168.2.36	0	0	0
HS200	192.168.2.133	0	0	0

Email & Teams data is from Apr 02 (yesterday — Microsoft reports have a ~24h processing delay). Sign-ins are real-time.

User	Sent	Received	Read	Last Active
Mina Iscandar	20	52	103	2026-04-02
Hani Abdelmalek	12	20	69	2026-04-02
David Mikhail	9	29	34	2026-04-02
Dalia Sidhom	9	23	39	2026-04-02
Mahmoud Assi	6	33	36	2026-04-02
Nervine Wassef	6	48	31	2026-04-02
Atef Awad	4	49	31	2026-04-02
Marian Alfons	2	2	25	2026-04-02
Helena Awad	2	6	4	2026-04-02
Ehab Guirguis	1	93	48	2026-04-02
Ehab Kodsi Guirguis	1	20	6	2026-04-02
Michael Guirguis	0	20	1	2026-04-02
Fady Gorgy	0	6	0	2026-04-01
Mina Iscandar	0	3	0	2025-03-17
Ragy Awadallah	0	8	2	2026-04-02
Prabhkaran Singh	0	2	0	2026-03-26
David Guirguis	0	18	2	2026-04-02

User	App	Location	Status	Last Time
Michael Guirguis	Office365 Shell WCSS-Client	Mississauga, CA	Success (2x)	Apr 03 3:52 PM
Michael Guirguis	Office 365 SharePoint Online	Mississauga, CA	Success	Apr 03 3:52 PM

No file access events recorded. Data will appear once users access audited shares.