Home»Time Entries Audit loading ... [hide int notes] generated 8/8/2026 at 10:25:07 pm took 0.52 seconds version: b85cbb8 helpers: v2
Territory: BMS Date: 4/20/26 [x] Company: all Ticket: all User: all Type: all Role: all Bill: all Timesheet: all 4/20 Board: all Entry Status: Billed [x] Ticket Status: all Issue: all [reset] Progress: 0% (0 of 1)
| row | id | Terr | Company | User | Date | Day | Start | End | Actual | Billed | Deduct | Inv Amt | Work Type | Work Role | Bill | Timesheet | Board | Entry Status | Ticket Status | Ticket # | Ticket Summary | Int Notes | Audit Done | Audit Notes | Notes | # issues | all issues | errors | warnings | notices |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | 39002 | BMS | OMNI | fdrewett | 4/20 | 7:00 am | 8:00 am | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74394 | Omni Weekly Meeting | 0 | Check in with Sal and Karri at AMR. Verified the computers that were off over the weekend came back online and connected to the new server | 0 | |||||||
| 2 | 38988 | BMS | CT | fdrewett | 4/20 | 7:00 am | 8:00 am | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74499 | Huntress ITDR Incident #2093168 — Critical — Courageous Transformations | 0 | Huntress ITDR Incident #2093168 — Critical — Courageous Transformations Incident: https://bms.huntress.io/org/295830/infection\_reports/2093168 Summary: Huntress detected a successful suspicious authentication to M365 account charlotteb@couragenm.com on 2026-04-20 12:51:16 UTC from 47.253.180.189 \(Alibaba Cloud - US, Virginia\) using user agent axios/1.15.0 against the OfficeHome application. Device was non-compliant/unmanaged. Axios UA is associated with Phishing-as-a-Service kits and automated credential validation / session hijacking. Huntress auto-revoked sessions and disabled the identity. IOCs: - User: charlotteb@couragenm.com - Src IP: 47.253.180.189 \(Alibaba Cloud - US\) - User Agent: axios/1.15.0 - Session ID: 00401e2a-2a11-ede3-62cf-26b1d4d97c1e - App: OfficeHome \(4765445b-32c6-49b0-83e6-1d93765276ca\) - Device: Non-compliant, Unmanaged Remediation actions completed: 1\. Contained account in M365 admin center — reset password to a new strong value, blocked sign-in, and initiated sign-out to revoke all refresh tokens\. 2\. Verified per-user MFA status: Enforced\. 3\. Audited registered MFA / authentication methods in Entra for charlotteb — no unfamiliar phone numbers, Authenticator registrations, or alternate emails\. No attacker-registered methods present\. 4\. Reviewed Entra sign-in logs for the user — no additional suspicious successful sign-ins identified beyond the Huntress-flagged event; no 'Previously satisfied' MFA from foreign IPs observed\. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | |||||
| 3 | 38999 | BMS | PPT | fdrewett | 4/20 | 8:00 am | 8:30 am | 0.50 | 0.50 | 0 | 62.50 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74497 | New voicemail from (505) 861-1200 | 0 | worked with Peter on his remote desktop issue and a call to Sarah in Belen | 0 | |||||||
| 4 | 39012 | BMS | PPT | fdrewett | 4/20 | 9:30 am | 10:00 am | 0.50 | 0.50 | 0 | 62.50 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74523 | Yuliana - Remote access not working on A-4580 | 0 | Remoted into A-4580. Configured remote access via vpn. Called and tested with Yuliana | 0 | |||||||
| 5 | 39041 | BMS | MC | fdrewett | 4/20 | 2:15 pm | 2:30 pm | 0.25 | 0.25 | 0 | 31.25 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74539 | Email Updates Needed | 0 | converted the mailbox \(__robyn@mechcon.org__\) to a sharedbox and added Jaime \(__jaime@mechcon.org__\). | 0 | |||||||
| 6 | 39083 | BMS | IC | fdrewett | 4/20 | 2:30 pm | 3:00 pm | 0.50 | 1.00 | 0 | 25.00 | Travel | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74543 | New Office - Electricians cut the feed to the outdoor ap | 0 | Travel to the client location | 0 | |||||||
| 7 | 39082 | BMS | IC | fdrewett | 4/20 | 3:00 pm | 4:30 pm | 1.50 | 1.50 | 0 | 187.50 | Onsite | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74543 | New Office - Electricians cut the feed to the outdoor ap | 0 | Onsite - repairing the data drop for the exterior AP | 0 | |||||||
| 8 | 39042 | BMS | HH | rclingan | 4/20 | 8:00 am | 9:20 am | 1.33 | 1.50 | 0 | 225.00 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Resolved / Verifying | 71559 | Migration to M365 Time Tracking | 0 | worked on transition document to add requested changes | 0 | |||||||
| 9 | 39043 | BMS | NMFFL | rclingan | 4/20 | 9:20 am | 9:35 am | 0.25 | 0.25 | 0 | 31.25 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74514 | Phone issues | 0 | worked with elizabeth and suzette to power cycle fiber modem, pbx and switches | 0 | |||||||
| 10 | 39048 | BMS | HH | rclingan | 4/20 | 11:05 am | 2:57 pm | 3.87 | 4.00 | 0 | 600.00 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Resolved / Verifying | 71559 | Migration to M365 Time Tracking | 0 | final work on transition document clean up and test vms for training session tomorrow ensure agenda for training is complete changed baseline policies for pin requirement, default search engines and sharepoint sync | 0 | |||||||
| 11 | 39131 | BMS | IC | rclingan | 4/20 | 3:03 pm | 3:24 pm | 0.35 | 1.00 | 0 | 25.00 | Travel | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74543 | New Office - Electricians cut the feed to the outdoor ap | 0 | travel for onsite visit | 0 | |||||||
| 12 | 39133 | BMS | IC | rclingan | 4/20 | 3:24 pm | 4:11 pm | 0.78 | 1.00 | 0 | 125.00 | Onsite | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74543 | New Office - Electricians cut the feed to the outdoor ap | 0 | restored outdoor access point connection walk jobsite and determine any additional materials that need to be purchased to finish job we need to order more keystones and some 2 port faceplates. | 0 |
Legend:
(hover over fields for details)
Tickets with over 5 hours in the current view (1)
| Hours | Ticket # | Company | Ticket Summary |
|---|---|---|---|
| 5.50 | 71559 | HH | Migration to M365 Time Tracking |
Notices
| Field | Message | Count |
|---|---|---|
| Notes | Notes longer than 500 characters | 1 |
| Total | 1 | |