Daily Activity Report

Thursday, May 07, 2026 (through 6:00 PM)

Generated May 07, 2026 6:08 PM

13
Active Users
26
User Sessions
3
RDP Sessions
64
Failed Logons
0
Print Jobs
0
USB Events
0
Screenshots
0
Sysmon Events
42
Network Clients

Data Source Warnings

User Activity (Domain Authentication)

Times show first/last authentication activity. Sessions = activity bursts separated by 30+ minute gaps.

UserSessionsFirst ActiveLast ActiveComputer / IP
Marian Alfons27:33 AM12:33 PM192.168.2.166
MDM.1138:16 AM5:19 PM192.168.2.226
Ragy Awadallah38:18 AM3:41 PMACCOUNTING
Karan58:26 AM2:04 PM192.168.2.127, KARAN-WAREHOUSE
Atef Awad28:50 AM3:36 PMAtef-PC
Dalia Sidhom28:52 AM11:34 AM192.168.128.61, David-Guirguis-PC
Hany Abdelmalek18:59 AM8:59 AMHANY-PC
David Mikhail29:44 AM12:09 PM192.168.128.3, 535b081ed3ad, DESKTOP-ACDS751
Helena Awad19:55 AM10:22 AMDESIGNER-PC
Nervine Wassef211:28 AM5:24 PM192.168.2.3
David Saad112:42 PM12:42 PM192.168.128.90
Meetings12:40 PM2:40 PMDavid-Guirguis-PC
Michael Guirguis12:41 PM2:41 PMDavid-Guirguis-PC

Remote Desktop Sessions (Guacamole / RDP)

UserSessionsFirstLastFrom
Karan212:53 PM12:53 PM192.168.2.127
David Mikhail19:44 AM9:44 AM192.168.128.3

Failed Logon Attempts

UserFailuresSource
hani@mdmcontracting.ca57HANY-PC
Karan3192.168.2.127
Dalia Sidhom1David-Guirguis-PC
David Saad1192.168.128.90
Michael Guirguis1David-Guirguis-PC
Meetings1David-Guirguis-PC

Top Applications (Server)

No application data for this period.

Server Session Activity (Lock/Unlock)

RDP session lock/unlock events on the server only. Workstation activity is tracked separately via agent.

UserFirst ActivityLast ActivityDurationLocksUnlocks
David Mikhail12:07 PM12:07 PM<1m10
Karan12:53 PM2:04 PM1h 11m30

Workstation Activity (Agent)

KARAN-WAREHOUSE () — 1 snapshots, avg idle: 0s

HANY-PC () — 1 snapshots, avg idle: 0s

NERVINE-PC () — 1 snapshots, avg idle: 0s

ATEF-PC () — 1 snapshots, avg idle: 0s

DESKTOP-SR790VT () — 1 snapshots, avg idle: 0s

DALIA () — 1 snapshots, avg idle: 0s

EHAB-PC () — 1 snapshots, avg idle: 0s

DESIGNER-OFFICE () — 1 snapshots, avg idle: 0s

ACCOUNTING () — 1 snapshots, avg idle: 0s

Network Traffic (Meraki)

ClientIPSent (MB)Received (MB)Total (MB)
bc:24:11:4a:c0:1c192.168.2.37000
9ba2df05-5b7a-467e-9b82-090e6faed43d192.168.2.2260.311.3
bc:24:11:f8:9b:11192.168.2.38000
b0:7b:25:17:b6:e2192.168.2.30.20.10.3
Marian-pc192.168.2.1660.10.50.6
12:64:9f:43:c0:b1192.168.2.62000
bc:24:11:27:69:05192.168.2.29000.1
bc:24:11:e3:39:cf192.168.2.351.101.1
ad17f8a4-7c15-4614-859e-1f8bc003a0a5192.168.2.720.20.70.9
BB8836102192.168.2.73000
14:2f:fd:0d:d3:0d192.168.2.64000
Designer-Office192.168.2.11000
Karan-Warehouse192.168.2.1270.10.70.8
bc:24:11:4d:e6:c6192.168.2.27000
bc:24:11:43:eb:d9192.168.2.22000

Microsoft 365 Activity

Email & Teams data is from May 06 (yesterday — Microsoft reports have a ~24h processing delay). Sign-ins are real-time.

Sign-In Activity

UserAppLocationStatusLast Time
Michael GuirguisFireflies.aiMississauga, CAFailed (65001)May 07 5:37 PM
Dalia SidhomOffice 365 SharePoint OnlineMississauga, CASuccessMay 07 1:27 PM
Michael GuirguisOne Outlook WebMississauga, CASuccessMay 07 5:37 PM
Michael GuirguisFireflies.aiMississauga, CASuccessMay 07 5:37 PM
Dalia SidhomOne Outlook WebMississauga, CASuccessMay 07 2:53 PM
Meetings | MDM GroupOne Outlook WebMississauga, CASuccessMay 07 4:17 PM
Helena AwadOne Outlook WebMississauga, CASuccessMay 07 2:41 PM
Mahmoud AssiOne Outlook WebToronto, CASuccessMay 07 2:34 PM
Dalia SidhomOffice365 Shell WCSS-ClientMississauga, CASuccess (7x)May 07 1:49 PM
Atef AwadOffice 365 SharePoint OnlineMississauga, CASuccessMay 07 4:41 PM
Atef AwadOffice365 Shell WCSS-ClientMississauga, CASuccess (3x)May 07 4:41 PM
Michael GuirguisMicrosoft Teams Web ClientYork, CASuccess (24x)May 07 3:33 PM
Michael GuirguisOffice365 Shell WCSS-ClientYork, CASuccessMay 07 1:15 PM
Hani AbdelmalekOne Outlook WebMississauga, CASuccessMay 07 2:40 PM
Ehab GuirguisOfficeHomeMississauga, CASuccess (2x)May 07 4:43 PM
Dalia SidhomMicrosoft Teams Web ClientMississauga, CASuccessMay 07 3:32 PM

File Access (Shared Drives)

No file access events recorded. Data will appear once users access audited shares.

MDM-SERVER Monitoring • May 07, 2026 6:11 PM • MDM Contracting