Active Users

146

User Sessions

RDP Sessions

264

Failed Logons

Print Jobs

USB Events

Screenshots

Sysmon Events

Network Clients

Data Source Warnings

Sysmon: NO DATA (not yet deployed or no agent data)

User Activity (Domain Authentication)

Day	Users	Logons
Mon, May 04	13	132
Tue, May 05	13	251
Wed, May 06	10	75
Thu, May 07	13	368
Fri, May 08	11	40
Sat, May 09	1	1
Sun, May 10	0	0

Times show first/last authentication activity. Sessions = activity bursts separated by 30+ minute gaps.

User	Sessions	First Active	Last Active	Computer / IP
Marian Alfons	20	Mon 7:36 AM	Fri 12:23 PM	192.168.2.166, MARIAN-PC
MDM.11	17	Mon 8:00 AM	Fri 4:36 PM	192.168.2.226, DESKTOP-SR790VT
Karan	11	Mon 8:01 AM	Fri 1:49 PM	192.168.2.127, KARAN-WAREHOUSE
Dalia Sidhom	7	Mon 9:11 AM	Fri 9:40 AM	192.168.128.19, 192.168.128.61
Mina Iscandar	4	Mon 9:39 AM	Tue 2:05 PM	192.168.128.3, 535b081ed3ad, MDM-SERVER
Helena Awad	6	Mon 10:06 AM	Thu 10:22 AM	DESIGNER-PC
David Mikhail	18	Mon 10:10 AM	Fri 1:04 PM	192.168.2.226, 192.168.128.3, 535b081ed3ad
Ragy Awadallah	14	Mon 11:04 AM	Thu 3:41 PM	192.168.128.6, ACCOUNTING
Nervine Wassef	7	Mon 11:05 AM	Fri 1:57 PM	192.168.2.3, 192.168.128.6, Hany-PC
Atef Awad	16	Mon 11:53 AM	Fri 4:36 PM	192.168.128.60
svc-openclaw	1	Mon 12:42 PM	Mon 12:42 PM	mdm-openclaw
Hany Abdelmalek	4	Mon 1:45 PM	Thu 8:59 AM	HANY-PC
MDM.28	3	Mon 10:46 PM	Tue 12:54 PM	192.168.2.11, DESIGNER-OFFICE
Michael Guirguis	4	Tue 11:14 AM	Fri 4:45 PM	192.168.128.19, 192.168.128.90, 192.168.128.3
Meetings	6	Tue 11:52 AM	Sat 11:21 AM	192.168.128.19
David Saad	6	Tue 12:46 PM	Fri 12:34 PM	192.168.128.90
CodexSandboxOffline	1	Wed 9:56 PM	Wed 9:56 PM	Local
Ehab Kodsi	1	Fri 11:54 AM	Fri 11:54 AM	Ehab-PC

Remote Desktop Sessions (Guacamole / RDP)

User	Sessions	First	Last	From
David Mikhail	6	Mon 10:10 AM	Thu 9:44 AM	192.168.128.3
Karan	3	Mon 8:04 AM	Thu 12:53 PM	192.168.2.127
Mina Iscandar	2	Mon 9:40 AM	Tue 2:05 PM	192.168.128.3
MDM.11	1	Mon 8:28 AM	Mon 8:28 AM	192.168.2.226
Michael Guirguis	1	Tue 11:14 AM	Tue 11:14 AM	192.168.128.3

Failed Logon Attempts

User	Failures	Source
hani@mdmcontracting.ca	204	HANY-PC
administrator	19	535b081ed3ad, MICHAELS-MACBOOK-AIR.LOCAL
Fady Gorgy	9	FADY-ELECTRIC
administrator@MDM.local	9	MICHAELS-MACBOOK-AIR.LOCAL
Karan	7	192.168.2.127
Michael Guirguis	3	192.168.128.90, 192.168.128.19
Atef Awad	3	192.168.128.60
David Saad	2	192.168.128.90
Marian Alfons	2	192.168.2.166, MARIAN-PC
GUEST	2	MAC-67D77C
mkgbuilds	1	MAC-67D77C
Dalia Sidhom	1	192.168.128.19
Meetings	1	192.168.128.19
Nervine Wassef	1	192.168.2.3

Top Applications (Server)

No application data for this period.

DNS Top Sites

Client	Domain	Queries
MDM-Server	1108-ms-7.1448-32be2c.57176317-47d8-11f1-939d-2cea7f579a3a	1
192.168.2.166	www.google.com	39
192.168.128.2	NULL	42
192.168.2.226	array612.prod.do.dsp.mp.microsoft.com	1
192.168.128.6	array620.prod.do.dsp.mp.microsoft.com	2
MDM-Server	1108-ms-7.390-e6b77.57176317-47d8-11f1-939d-2cea7f579a3a	1
192.168.128.61	browser.events.data.microsoft.com	2
MDM-Server	1108-ms-7.1772-3c626f.57176317-47d8-11f1-939d-2cea7f579a3a	1
Hany-PC	img-s-msn-com.akamaized.net	2
MDM-Server	1108-ms-7.1722-3a7f96.57176317-47d8-11f1-939d-2cea7f579a3a	1
MDM-Server	1108-ms-7.1723-3a93d9.57176317-47d8-11f1-939d-2cea7f579a3a	1
100.81.237.43	1804-ms-7.474-3896e0.55b8a8cf-47d8-11f1-939d-2cea7f579a3a	1
MDM-Server	1108-ms-7.313-b5752.57176317-47d8-11f1-939d-2cea7f579a3a	1
MDM-Server	1108-ms-7.1598-36653b.57176317-47d8-11f1-939d-2cea7f579a3a	1
MDM-Server	1108-ms-7.73-331a0.57176317-47d8-11f1-939d-2cea7f579a3a	1
MDM-Server	1108-ms-7.1063-25abbc.57176317-47d8-11f1-939d-2cea7f579a3a	1
MDM-Server	1108-ms-7.333-bf036.57176317-47d8-11f1-939d-2cea7f579a3a	1
MDM-Server	1108-ms-7.863-1eb7e4.57176317-47d8-11f1-939d-2cea7f579a3a	1
192.168.2.166	e.acuityplatform.com	6
MDM-Server	1000-ms-7.43-332fc2.55ba8f88-47d8-11f1-939d-2cea7f579a3a	1

Print Jobs

User	Document	Printer	Pages	Time
David Mikhail	Print Document	Guacamole Printer (redirected 3)	1	Tue 2:33 PM
David Mikhail	Print Document	Guacamole Printer (redirected 3)	1	Tue 2:33 PM
David Mikhail	Print Document	Guacamole Printer (redirected 3)	1	Tue 2:27 PM
David Mikhail	Print Document	Guacamole Printer (redirected 3)	1	Tue 2:26 PM
David Mikhail	Print Document	Guacamole Printer (redirected 3)	1	Tue 2:21 PM
David Mikhail	Print Document	Guacamole Printer (redirected 3)	1	Tue 2:20 PM
David Mikhail	Print Document	Guacamole Printer (redirected 3)	1	Tue 2:18 PM
David Mikhail	Print Document	Guacamole Printer (redirected 3)	1	Tue 2:18 PM
David Mikhail	Print Document	Guacamole Printer (redirected 3)	1	Tue 2:13 PM
David Mikhail	Print Document	Guacamole Printer (redirected 10)	1	Mon 10:46 AM
David Mikhail	Print Document	Guacamole Printer (redirected 10)	1	Mon 10:45 AM
David Mikhail	Print Document	Guacamole Printer (redirected 10)	1	Mon 10:45 AM
David Mikhail	Print Document	Guacamole Printer (redirected 10)	1	Mon 10:44 AM
David Mikhail	Print Document	Guacamole Printer (redirected 10)	1	Mon 10:43 AM
David Mikhail	Print Document	Guacamole Printer (redirected 10)	1	Mon 10:43 AM
David Mikhail	Print Document	Guacamole Printer (redirected 10)	1	Mon 10:43 AM
David Mikhail	Print Document	Guacamole Printer (redirected 10)	1	Mon 10:42 AM
David Mikhail	Print Document	Guacamole Printer (redirected 10)	1	Mon 10:42 AM
David Mikhail	Print Document	Guacamole Printer (redirected 10)	1	Mon 10:42 AM
David Mikhail	Print Document	Guacamole Printer (redirected 10)	1	Mon 10:41 AM
David Mikhail	Print Document	Guacamole Printer (redirected 10)	1	Mon 10:40 AM
Karan	Print Document	HP054C2B (HP LaserJet Pro M428-M429) (redirected 5)	1	Mon 8:10 AM

Workstation Activity (Agent)

DAVID-GUIRGUIS- () — 1 snapshots, avg idle: 0s

KARAN-WAREHOUSE () — 1 snapshots, avg idle: 0s

ATEF-PC () — 1 snapshots, avg idle: 0s

DALIA () — 1 snapshots, avg idle: 0s

ACCOUNTING () — 1 snapshots, avg idle: 0s

MARIAN-PC () — 1 snapshots, avg idle: 0s

Network Traffic (Meraki)

Client	IP	Sent (MB)	Received (MB)	Total (MB)
Android_OWOFYR1U	192.168.2.222	0	0	0
a1f9a4ae-46d2-4fbe-8217-99766d012f7f	192.168.2.226	2.3	8.4	10.7
Watch	192.168.2.55	0	0	0
bc:24:11:f8:9b:11	192.168.2.38	0	0	0
bc:24:11:4a:c0:1c	192.168.2.37	0.1	0	0.1
e2af154d-7471-4303-8cad-503d12b52df7	192.168.2.197	0	0.6	0.7
Nervine-PC	192.168.2.72	1.1	4.7	5.7
bc:24:11:64:89:eb	192.168.2.24	0	0	0
bc:24:11:27:69:05	192.168.2.29	0.5	0.2	0.7
bc:24:11:75:84:57	192.168.2.20	20.3	0.9	21.3
BB8836102	192.168.2.73	0	0	0
bc:24:11:e3:39:cf	192.168.2.35	7.3	0.2	7.5
12:64:9f:43:c0:b1	192.168.2.62	0	0	0.1
Marian-pc	192.168.2.166	0.7	4.9	5.6
Designer-Office	192.168.2.11	0.3	0.3	0.6

Microsoft 365 Activity

Microsoft's 7-day aggregate ending ~2 days ago (does not align exactly with the Mon–Sun report window). Sign-ins are real-time for the full week.

Email Activity (Last 7 Days)

User	Sent	Received	Read	Last Active
Mahmoud Assi	72	139	245	2026-05-08
Mina Iscandar	59	251	281	2026-05-09
Atef Awad	28	225	260	2026-05-09
Dalia Sidhom	25	112	83	2026-05-08
Nervine Wassef	25	363	259	2026-05-09
Ehab Guirguis	21	637	229	2026-05-09
David Guirguis	19	145	736	2026-05-09
Hani Abdelmalek	19	135	300	2026-05-08
Marian Alfons	14	17	199	2026-05-08
Ehab Kodsi Guirguis	9	118	45	2026-05-08
Ragy Awadallah	8	29	26	2026-05-08
David Mikhail	8	24	25	2026-05-07
Helena Awad	8	44	48	2026-05-07
Fady Gorgy	4	40	38	2026-05-08
Prabhkaran Singh	2	6	8	2026-05-08
Michael Guirguis	2	162	49	2026-05-09
Nagy Salib	0	1	0	2026-04-24
Mina Iscandar	0	17	0	2025-03-17
Mary Guirguis	0	4	0	2025-07-30

Teams Activity (Last 7 Days)

User	Chats	Meetings	Last Active
Michael Guirguis	8	1	2026-05-09
Dalia Sidhom	7	0	2026-05-09
David Guirguis	4	1	2026-05-09
Karan Singh	3	0	2026-05-07
Meetings	2	0	2026-05-08
Ehabk	2	0	2026-05-09
Hani	1	0	2026-05-09
Atef Awad	1	3	2026-05-09
Minai	1	1	2026-05-09

Sign-In Activity

User	App	Location	Status	Last Time
Mina Iscandar	OfficeHome	Berca, RO	Failed (50126) (2x)	May 09 9:49 PM
Dalia Sidhom	Microsoft Outlook	Mississauga, CA	Failed (50126)	May 07 11:35 AM
Mahmoud Assi	Microsoft Outlook	Toronto, CA	Failed (50126) (3x)	May 08 12:29 PM
Info Desk \| MDM Wood	Office 365 Exchange Online	Delhi, IN	Failed (50126)	May 08 6:00 PM
Nervine Wassef	Cascade Authentication	Mississauga, CA	Failed (50140)	May 08 2:39 PM
Ehab Guirguis	Craft Docs	Mississauga, CA	Failed (65001) (3x)	May 10 3:22 PM
Michael Guirguis	Fireflies.ai	Mississauga, CA	Failed (65001)	May 07 5:37 PM
Info Desk \| MDM Wood	Office 365 Exchange Online	Mumbai, IN	Failed (50053) (6x)	May 10 12:32 AM
Mina Iscandar	One Outlook Web	US	Failed (50053) (3x)	May 10 9:51 AM
Mina Iscandar	Azure Active Directory PowerShell	Newark, US	Failed (50053)	May 07 6:48 PM
Helena Awad	Microsoft Outlook	Mississauga, CA	Failed (50126)	May 07 11:41 AM
Mina Iscandar	OfficeHome	US	Failed (50053)	May 08 7:24 PM
Nervine Wassef	Microsoft Office 365 Portal	Mississauga, CA	Failed (50125)	May 08 2:38 PM
Helena Awad	Microsoft Authentication Broker	Mississauga, CA	Success (2x)	May 07 11:42 AM
Michael Guirguis	Clerk Development and Staging instances	Mississauga, CA	Success	May 10 6:16 PM
Dalia Sidhom	Microsoft Account Controls V2	Mississauga, CA	Success (3x)	May 07 11:46 AM
Hani Abdelmalek	One Outlook Web	Mississauga, CA	Success (4x)	May 08 4:50 PM
Dalia Sidhom	App Home Pages Prod	Mississauga, CA	Success	May 08 10:54 AM
Nervine Wassef	Microsoft App Access Panel	Mississauga, CA	Success (2x)	May 08 2:39 PM
David Guirguis	Cloudflare Access	Mississauga, CA	Success	May 08 12:20 AM
Michael Guirguis	Cloudflare Access	Mississauga, CA	Success (5x)	May 09 3:36 AM
Hani Abdelmalek	Twenty CRM	Mississauga, CA	Success	May 08 4:13 PM
Mahmoud Assi	Office365 Shell WCSS-Client	Toronto, CA	Success (2x)	May 08 1:35 PM
David Guirguis	Twenty CRM	Toronto, CA	Success	May 07 12:57 PM
Michael Guirguis	Office365 Shell WCSS-Client	York, CA	Success	May 07 1:15 PM
Michael Guirguis	Warmbox.ai	Mississauga, CA	Success	May 08 1:16 PM
Dalia Sidhom	Microsoft Authentication Broker	Mississauga, CA	Success (2x)	May 07 11:37 AM
Michael Guirguis	One Outlook Web	Mississauga, CA	Success	May 07 5:37 PM

File Access (Shared Drives)

No file access events recorded. Data will appear once users access audited shares.

Security Audit

Password Health
Account	Password Age	Status
MDM.11	1753d - STALE	Never expires
Hany Abdelmalek	1748d - STALE	Never expires
MDM.26	1718d - STALE	Never expires
Nervine Wassef	1718d - STALE	Never expires
Ehab Kodsi	1714d - STALE	Never expires
Atef Awad	1693d - STALE	Never expires
Administrator	816d - STALE	Never expires
Michael Guirguis	505d - STALE	Never expires
David Guirguis	493d - STALE	Never expires
Mina Iscandar	467d - STALE	Never expires
Karan	439d - STALE	Never expires
Marian Alfons	391d - STALE	Never expires
Dalia Sidhom	325d	Never expires
Fady	310d	Never expires
Meetings	268d	Never expires
David Mikhail	195d	Never expires
MDM.16	150d	Never expires
Shady Mikhail	102d	Never expires
Helena Awad	93d	Never expires
svc-openclaw	53d	Never expires
CodexSandboxOnline	26d	Never expires
CodexSandboxOffline	26d	Never expires

Inactive Accounts (90+ days)
Account	Last Login
Fady	170d ago
MDM.16	149d ago
CodexSandboxOnline	Never
Wiki Test Worker	Never
Wiki Test Mgr Telecom	Never
Wiki Test Admin	Never

System Health
Last Windows Update	KB5075904 - 13d ago
Domain Firewall	DISABLED
SMBv1	Disabled (good)
C: Free Space	8.5 GB
D: Free Space	4636.1 GB

Weekly Activity Report

Data Source Warnings

User Activity (Domain Authentication)

Remote Desktop Sessions (Guacamole / RDP)

Failed Logon Attempts

Top Applications (Server)

DNS Top Sites

Print Jobs

Workstation Activity (Agent)

DAVID-GUIRGUIS- () — 1 snapshots, avg idle: 0s

KARAN-WAREHOUSE () — 1 snapshots, avg idle: 0s

ATEF-PC () — 1 snapshots, avg idle: 0s

DALIA () — 1 snapshots, avg idle: 0s

ACCOUNTING () — 1 snapshots, avg idle: 0s

MARIAN-PC () — 1 snapshots, avg idle: 0s

Network Traffic (Meraki)

Microsoft 365 Activity

Email Activity (Last 7 Days)

Teams Activity (Last 7 Days)

Sign-In Activity

File Access (Shared Drives)

Security Audit