Daily Activity Report

Monday, May 11, 2026 (through 6:00 PM)

Generated May 11, 2026 6:07 PM

11
Active Users
19
User Sessions
2
RDP Sessions
33
Failed Logons
0
Print Jobs
0
USB Events
0
Screenshots
0
Sysmon Events
46
Network Clients

Data Source Warnings

User Activity (Domain Authentication)

Times show first/last authentication activity. Sessions = activity bursts separated by 30+ minute gaps.

UserSessionsFirst ActiveLast ActiveComputer / IP
Marian Alfons27:38 AM1:18 PM192.168.2.166, MARIAN-PC
Atef Awad29:07 AM11:02 AM192.168.128.60
MDM.1129:46 AM10:57 AM192.168.2.226, DESKTOP-SR790VT
Helena Awad29:54 AM12:07 PMDESIGNER-PC
Nervine Wassef111:23 AM11:31 AM192.168.2.3
Ehab Kodsi111:28 AM11:28 AMEHAB-PC
Mina Iscandar111:34 AM11:34 AM192.168.128.3, MDM-SERVER, 535b081ed3ad
MDM.2812:03 PM2:03 PMDESIGNER-OFFICE
David Mikhail32:55 PM4:57 PM192.168.2.224, 192.168.2.153, PC-50
Michael Guirguis33:07 PM5:10 PM192.168.2.224, 192.168.2.61, 192.168.2.153
CodexSandboxOffline15:46 PM5:50 PMLocal

Remote Desktop Sessions (Guacamole / RDP)

UserSessionsFirstLastFrom
Mina Iscandar111:34 AM11:34 AM192.168.128.3
MDM.11110:57 AM10:57 AM192.168.2.226

Failed Logon Attempts

UserFailuresSource
hani@mdmcontracting.ca19HANY-PC
kioskUser05PC-19
mkgbuilds4MAC-67D77C
GUEST4MAC-67D77C
Marian Alfons1192.168.2.166

Top Applications (Server)

UserApplicationLaunches
MDM.11MSACCESS.EXE2
MDM.11rdpinit.exe1
MDM.11acregl.exe1
Mina IscandarMSACCESS.EXE3
MDM.11rdpshell.exe1
Mina Iscandaracregl.exe1

Server Session Activity (Lock/Unlock)

RDP session lock/unlock events on the server only. Workstation activity is tracked separately via agent.

UserFirst ActivityLast ActivityDurationLocksUnlocks
MDM.1111:40 AM11:40 AM<1m10
Mina Iscandar12:41 PM12:41 PM<1m10

Workstation Activity (Agent)

MARIAN-PC () — 1 snapshots, avg idle: 0s

HANY-PC () — 1 snapshots, avg idle: 0s

NERVINE-PC () — 1 snapshots, avg idle: 0s

ATEF-PC () — 1 snapshots, avg idle: 0s

PC-19 () — 1 snapshots, avg idle: 0s

EHAB-PC () — 1 snapshots, avg idle: 0s

DESKTOP-SR790VT () — 1 snapshots, avg idle: 0s

DESIGNER-OFFICE () — 1 snapshots, avg idle: 0s

Network Traffic (Meraki)

ClientIPSent (MB)Received (MB)Total (MB)
bc:24:11:4a:c0:1c192.168.2.37000
e2af154d-7471-4303-8cad-503d12b52df7192.168.2.19700.40.4
Marian-pc192.168.2.1660.32.12.4
b0:7b:25:17:b6:e2192.168.2.30.10.10.2
Dalia-Salib-PC192.168.2.1530.12.93
a69b5334-3b08-4c87-92e7-7955e97e146b192.168.2.22612.8113.7
bc:24:11:e3:39:cf192.168.2.351.101.1
12:64:9f:43:c0:b1192.168.2.62000
PC-19192.168.2.610.12.52.6
Nervine-PC192.168.2.720.10.50.6
BB8836102192.168.2.73000
14:2f:fd:0d:d3:0d192.168.2.64000
Designer-Office192.168.2.11000
Michaels-MacBook-Air192.168.2.590.51.21.7
bc:24:11:4d:e6:c6192.168.2.27000

Microsoft 365 Activity

Email & Teams data is from May 10 (yesterday — Microsoft reports have a ~24h processing delay). Sign-ins are real-time.

Email Activity (May 10)

UserSentReceivedReadLast Active
Ehab Guirguis238112026-05-10
Atef Awad13152026-05-10
David Guirguis0212026-05-10
Nervine Wassef01802026-05-09
Michael Guirguis01122026-05-10
Fady Gorgy0102026-05-08
Mahmoud Assi0502026-05-08
Ehab Kodsi Guirguis0932026-05-10
Hani Abdelmalek0502026-05-08
Dalia Sidhom0202026-05-08
Mina Iscandar0202025-03-17
Ragy Awadallah0102026-05-08
Mina Iscandar0812026-05-10

Sign-In Activity

UserAppLocationStatusLast Time
Mina IscandarOfficeHomeSanta Clara, USFailed (50126)May 11 11:07 AM
David MikhailOne Outlook WebToronto, CAFailed (50126)May 11 4:54 PM
David MikhailOne Outlook WebToronto, CAFailed (50140)May 11 4:54 PM
Mina IscandarMicrosoft Azure CLIAshburn, USFailed (50053)May 11 5:16 PM
Atef AwadSharePointAshburn, USFailed (50126)May 11 3:42 PM
David MikhailCloudflare AccessNorth York, CAFailed (50140)May 11 4:56 PM
David GuirguisCloudflare AccessMississauga, CAFailed (501314)May 11 4:20 PM
Dalia SidhomMicrosoft Office 365 PortalYazikonak, TRFailed (50126) (2x)May 11 11:53 AM
Michael GuirguisCloudflare AccessToronto, CASuccessMay 11 4:47 PM
Mina IscandarSharePoint Online Web Client ExtensibilityToronto, CASuccessMay 11 3:01 PM
David GuirguisCloudflare AccessMississauga, CASuccessMay 11 4:20 PM
Michael GuirguisMicrosoft Teams Web ClientToronto, CASuccessMay 11 4:03 PM
Hani AbdelmalekOffice365 Shell WCSS-ClientMississauga, CASuccessMay 11 10:13 AM
David MikhailMy ProfileToronto, CASuccessMay 11 4:09 PM
David MikhailOne Outlook WebToronto, CASuccess (3x)May 11 4:54 PM
David MikhailMicrosoft 365 Support ServiceToronto, CASuccessMay 11 9:44 AM
Mahmoud AssiOne Outlook WebToronto, CASuccess (2x)May 11 2:33 PM
Hani AbdelmalekOne Outlook WebMississauga, CASuccessMay 11 10:13 AM
Mina IscandarOffice 365 SharePoint OnlineToronto, CASuccessMay 11 3:00 PM
Mina IscandarOffice365 Shell WCSS-ClientMilton, CASuccess (4x)May 11 5:15 PM
David MikhailMicrosoft Account Controls V2Toronto, CASuccessMay 11 9:44 AM
David MikhailCloudflare AccessNorth York, CASuccessMay 11 4:56 PM
Marian AlfonsOne Outlook WebToronto, CASuccess (3x)May 11 11:45 AM

File Access (Shared Drives)

No file access events recorded. Data will appear once users access audited shares.

MDM-SERVER Monitoring • May 11, 2026 6:09 PM • MDM Contracting