Data Source Warnings

Today at a Glance (AI Summary)

Here is an executive summary of the activity report data:
**Early Arrivals and Late Departures:** Helena Awad was active from 10:05 AM to 4:25 PM, while Nervine Wassef logged activity from 4:27 PM to 4:29 PM, indicating a potentially shorter day.
**Short Workdays:** Dalia Sidhom, Ragy Awadallah, MDM.26, and Michael Guirguis had very brief activity windows, each with only one session and minimal time online.
**Significant Failed Logins:** Fady Gorgy experienced 61 failed logon attempts, which is a high number and a potential security concern requiring investigation.
**Remote Access:** Karan and David Mikhail utilized RDP sessions, and their server session times are noted.
**M365 Security Event:** A Microsoft 365 failed sign-in from Bagh, Pakistan, for "Info Desk | MDM Wood on Office 365 Exchange Online" is a security concern due to the unusual location.
**Workstation Activity:** Michaels-MacBook-Air consumed the most network traffic at 5.9 MB, while other workstations showed minimal to no traffic.
**No USB or File Deletion Events:** No USB device events or file deletion events were recorded during this reporting period.
**Limited Sysmon and Workstation Agent Data:** The provided data does not include specific details on Sysmon alerts or workstation agent application usage and idle patterns.

Generated by Gemini Flash

Times show first/last authentication activity. Sessions = activity bursts separated by 30+ minute gaps.

User	Sessions	First Active	Last Active	Computer / IP
MDM.11	2	8:27 AM	9:08 AM	192.168.2.226, DESKTOP-SR790VT
Dalia Sidhom	1	8:54 AM	8:54 AM	192.168.128.61
Ragy Awadallah	1	9:20 AM	9:20 AM	192.168.128.6, ACCOUNTING
Karan	5	9:20 AM	2:16 PM	192.168.2.127, KARAN-WAREHOUSE
Helena Awad	2	10:05 AM	4:25 PM	DESIGNER-PC
MDM.26	1	12:11 PM	12:11 PM	192.168.2.153
David Mikhail	4	12:12 PM	3:53 PM	192.168.128.3, 192.168.2.153, 535b081ed3ad
Michael Guirguis	1	2:52 PM	2:52 PM	192.168.2.32
Nervine Wassef	1	4:27 PM	4:29 PM	100.81.219.24

User	Sessions	First	Last	From
Karan	1	10:08 AM	10:08 AM	192.168.2.127
David Mikhail	1	1:52 PM	1:52 PM	192.168.128.3

Machine/device auth failures (excluded from count): 29 from MDM-SERVER

RDP session lock/unlock events on the server only. Workstation activity is tracked separately via agent.

User	First Activity	Last Activity	Duration	Locks	Unlocks
Karan	10:16 AM	12:57 PM	3h 41m	2	0
David Mikhail	3:42 PM	3:42 PM	<1m	1	0

Client	IP	Sent (MB)	Received (MB)	Total (MB)
Nervine-PC	192.168.2.72	0.1	0.3	0.4
BB8836102	192.168.2.73	0	0	0
Michaels-MacBook-Air	192.168.2.152	0.3	5.5	5.9
7d6dd67b-c4a5-4794-85dc-a30c9ac72868	192.168.2.226	0.1	0.6	0.7
Triview-PC	192.168.2.32	0	2.2	2.2
HS200	192.168.2.133	0	0	0
iPad	192.168.2.74	0	0.4	0.4
3a:80:97:e3:04:3b	192.168.2.173	0	0	0
Watch	192.168.2.223	0	0	0
e2af154d-7471-4303-8cad-503d12b52df7	192.168.2.197	0	0.3	0.3
DESKTOP-9C5IBBH	192.168.2.169	0.2	0.9	1.1
18J180104009	192.168.2.187	0	0	0
Designer-Office	192.168.2.11	0	0.1	0.1
Karan-Warehouse	192.168.2.127	0.1	0.5	0.6
BB8836154	192.168.2.124	0	0	0

Email & Teams data is from Apr 15 (yesterday — Microsoft reports have a ~24h processing delay). Sign-ins are real-time.

User	Sent	Received	Read	Last Active
Mina Iscandar	31	56	105	2026-04-15
David Mikhail	21	20	30	2026-04-15
Nervine Wassef	7	45	69	2026-04-15
Dalia Sidhom	7	17	19	2026-04-15
Mahmoud Assi	4	46	48	2026-04-15
Hani Abdelmalek	2	21	35	2026-04-15
Ehab Kodsi Guirguis	2	35	10	2026-04-15
Ehab Guirguis	1	99	25	2026-04-15
Atef Awad	1	36	22	2026-04-15
Fady Gorgy	1	10	12	2026-04-15
David Guirguis	1	25	22	2026-04-15
Marian Alfons	1	1	26	2026-04-15
Helena Awad	1	8	1	2026-04-15
Ragy Awadallah	0	9	6	2026-04-15
Michael Guirguis	0	16	1	2026-04-15
Prabhkaran Singh	0	4	2	2026-04-15
Mina Iscandar	0	3	0	2025-03-17

User	App	Location	Status	Last Time
Info Desk \| MDM Wood	Office 365 Exchange Online	Bagh, PK	Failed (50053)	Apr 16 5:34 PM
Dalia Sidhom	Microsoft Teams Web Client	Mississauga, CA	Failed (7000118)	Apr 16 2:18 PM
Dalia Sidhom	Microsoft Planner Client	Mississauga, CA	Failed (7000118) (4x)	Apr 16 2:18 PM
Hani Abdelmalek	One Outlook Web	Mississauga, CA	Success	Apr 16 5:16 PM
David Mikhail	Cloudflare Access	Toronto, CA	Success	Apr 16 1:48 PM
David Mikhail	One Outlook Web	Toronto, CA	Success	Apr 16 5:51 PM
Helena Awad	One Outlook Web	Mississauga, CA	Success	Apr 16 5:00 PM
Dalia Sidhom	Office365 Shell WCSS-Client	Mississauga, CA	Success (6x)	Apr 16 3:53 PM
David Mikhail	Office365 Shell WCSS-Client	Toronto, CA	Success	Apr 16 5:52 PM
Dalia Sidhom	SharePoint Online Web Client Extensibility	Mississauga, CA	Success	Apr 16 4:01 PM
Hani Abdelmalek	Office 365 SharePoint Online	Mississauga, CA	Success (30x)	Apr 16 1:13 PM
Dalia Sidhom	One Outlook Web	Mississauga, CA	Success	Apr 16 5:06 PM
Dalia Sidhom	App Home Pages Prod	Mississauga, CA	Success	Apr 16 3:52 PM

No file access events recorded. Data will appear once users access audited shares.