Daily Activity Report

Wednesday, Apr 15, 2026 (through 6:00 PM)

Generated Apr 15, 2026 6:14 PM

10
Active Users
22
User Sessions
3
RDP Sessions
13
Failed Logons
0
Print Jobs
0
USB Events
0
Screenshots
0
Sysmon Events
34
Network Clients

Data Source Warnings

Today at a Glance (AI Summary)

Generated by Gemini Flash

User Activity (Domain Authentication)

Times show first/last authentication activity. Sessions = activity bursts separated by 30+ minute gaps.

UserSessionsFirst ActiveLast ActiveComputer / IP
MDM.2813:10 AM3:10 AM192.168.2.11
Marian Alfons38:35 AM3:30 PM192.168.2.166
Dalia Sidhom18:59 AM8:59 AM192.168.128.61
Karan39:05 AM2:50 PM192.168.2.127, KARAN-WAREHOUSE
David Mikhail79:19 AM4:37 PM192.168.128.3, 192.168.2.153, 535b081ed3ad
MDM.1119:45 AM9:45 AM192.168.2.226
Helena Awad111:25 AM11:43 AMDESIGNER-PC
Nervine Wassef312:32 PM3:45 PM100.81.219.24
David Saad112:45 PM12:45 PM192.168.128.90
Mina Iscandar12:10 PM2:11 PM192.168.128.3, MDM-SERVER, 535b081ed3ad

Remote Desktop Sessions (Guacamole / RDP)

UserSessionsFirstLastFrom
Mina Iscandar12:11 PM2:11 PM192.168.128.3
Karan12:50 PM2:50 PM192.168.2.127
David Mikhail19:22 AM9:22 AM192.168.128.3

Failed Logon Attempts

UserFailuresSource
Fady Gorgy6FADY-ELECTRIC
hani@mdmcontracting.ca3HANY-PC
Marian Alfons1192.168.2.166
Karan1KARAN-WAREHOUSE
David Saad1192.168.128.90
Helena Awad1DESIGNER-PC

Machine/device auth failures (excluded from count): 3078 from XP600, MDM-SERVER

Top Applications (Server)

UserApplicationLaunches
David MikhailMSACCESS.EXE3
David Mikhailacregl.exe1
Karanacregl.exe1
Mina IscandarMSACCESS.EXE3
Karanlogoff.exe1
KaranMSACCESS.EXE4
Mina Iscandaracregl.exe1

Server Session Activity (Lock/Unlock)

RDP session lock/unlock events on the server only. Workstation activity is tracked separately via agent.

UserFirst ActivityLast ActivityDurationLocksUnlocks
David Mikhail10:17 AM4:27 PM6h 9m60
Mina Iscandar3:27 PM3:27 PM<1m10

Network Traffic (Meraki)

ClientIPSent (MB)Received (MB)Total (MB)
23eb4a9e-1bab-4566-a2aa-0250e507fbf0192.168.2.2260.10.50.6
52f6d8f3-8e84-4d57-bfb3-fee330fa31f2192.168.2.720.10.50.6
CNC-PC-XP-600192.168.2.126000
e2af154d-7471-4303-8cad-503d12b52df7192.168.2.1970.10.60.7
HS200192.168.2.133000
e0:ba:ad:dc:6f:13192.168.2.360.500.5
BB8836102192.168.2.73000
3a:80:97:e3:04:3b192.168.2.173000
Marian-pc192.168.2.1660.10.30.4
18J180104009192.168.2.187000
BB8836154192.168.2.124000
Designer-Office192.168.2.11000
Karan-Warehouse192.168.2.1270.10.70.8
Dalia-Salib-PC192.168.2.1530.312.112.5
eff042fd-9791-4be0-a2f0-fe323e4290ee192.168.2.1680.11.51.6

Microsoft 365 Activity

Email & Teams data is from Apr 14 (yesterday — Microsoft reports have a ~24h processing delay). Sign-ins are real-time.

Sign-In Activity

UserAppLocationStatusLast Time
Dalia SidhomMicrosoft Planner ClientMississauga, CAFailed (7000118) (4x)Apr 15 4:39 PM
Info Desk | MDM WoodOffice 365 Exchange OnlineGarland, USFailed (50053) (2x)Apr 15 4:01 PM
Michael GuirguisMicrosoft Teams Web ClientToronto, CASuccessApr 15 5:06 PM
Hani AbdelmalekOne Outlook WebMississauga, CASuccessApr 15 4:26 PM
Mahmoud AssiOne Outlook WebToronto, CASuccessApr 15 5:10 PM
Helena AwadOne Outlook WebMississauga, CASuccessApr 15 5:06 PM
Dalia SidhomOffice365 Shell WCSS-ClientMississauga, CASuccess (3x)Apr 15 4:40 PM
David MikhailOffice365 Shell WCSS-ClientToronto, CASuccess (2x)Apr 15 4:30 PM
Dalia SidhomSharePoint Online Web Client ExtensibilityMississauga, CASuccess (3x)Apr 15 4:39 PM
Marian AlfonsOne Outlook WebToronto, CASuccessApr 15 2:03 PM
David SaadDime ClientMississauga, CASuccessApr 15 2:06 PM
Hani AbdelmalekOffice 365 SharePoint OnlineMississauga, CASuccess (30x)Apr 15 1:52 PM

File Access (Shared Drives)

No file access events recorded. Data will appear once users access audited shares.

MDM-SERVER Monitoring • Apr 15, 2026 6:14 PM • MDM Contracting