Data Source Warnings

Today at a Glance (AI Summary)

Here is an executive summary of the MDM Contracting activity report:
Michael Guirguis was the only active user, with a single session occurring very early at 1:23 AM, indicating no typical workday activity.
There were 4 failed login attempts for the "Administrator" account, which could indicate a brute-force attack attempt.
M365 reported 5 failed sign-ins, including multiple from India (Patel Nagar, Gurgaon) and one from Canada (Mississauga) for the "Info Desk" account, suggesting potential credential compromise or unusual access patterns.
No USB device events or file deletions were recorded, indicating no immediate physical security or data manipulation concerns.
Workstation agent data, Sysmon alerts, and network traffic details were not provided in this report.
No RDP sessions were active, and print jobs were zero.

Generated by Gemini Flash

Times show first/last authentication activity. Sessions = activity bursts separated by 30+ minute gaps.

User	Sessions	First Active	Last Active	Computer / IP
Michael Guirguis	1	1:23 AM	1:23 AM	192.168.2.153

No RDS sessions recorded for this period.

User	Failures	Source
Administrator	4	-

No application data for this period.

Client	IP	Sent (MB)	Received (MB)	Total (MB)
Dalia-Salib-PC	192.168.2.153	0	0	0.1
b0:7b:25:17:b6:e2	192.168.2.3	0	0	0
Nervine-PC	192.168.2.72	0.1	0.4	0.4
cb8421c8-81cc-4b95-9e14-b2b7173e17aa	192.168.2.226	0	0.6	0.7
14:2f:fd:0d:d3:0d	192.168.2.64	0	0	0
18J180104009	192.168.2.187	0	0	0
Designer-Office	192.168.2.11	0	0	0
c0:74:ad:1b:b1:db	192.168.2.94	0	0	0
BB8836154	192.168.2.124	0	0	0
HP80E82C054C2B	192.168.2.175	0	0	0
HS200	192.168.2.143	0	0	0
OC200 HW Controller (Timberlea)	192.168.2.2	0	0	0
HS200	192.168.2.147	0	0	0
EAP225-50-D4-F7-AF-91-9A	192.168.2.209	0	0	0
HS200	192.168.2.133	0	0	0

Email & Teams data is from Apr 17 (yesterday — Microsoft reports have a ~24h processing delay). Sign-ins are real-time.

User	App	Location	Status	Last Time
Michael Guirguis	Miro	Mississauga, CA	Failed (65001)	Apr 18 11:41 AM
Info Desk \| MDM Wood	Office 365 Exchange Online	Patel Nagar, IN	Failed (50053) (3x)	Apr 18 4:54 PM
Michael Guirguis	Miro (formerly RealtimeBoard)	Mississauga, CA	Failed (65001)	Apr 18 11:42 AM
Michael Guirguis	Miro (formerly RealtimeBoard)	Mississauga, CA	Success	Apr 18 11:42 AM
Hani Abdelmalek	Office 365 SharePoint Online	Mississauga, CA	Success (20x)	Apr 18 9:23 AM
Hani Abdelmalek	One Outlook Web	Mississauga, CA	Success (4x)	Apr 18 2:46 PM
Michael Guirguis	MDM Hub	Mississauga, CA	Success	Apr 18 5:10 PM
Michael Guirguis	Miro	Mississauga, CA	Success	Apr 18 11:42 AM

No file access events recorded. Data will appear once users access audited shares.