Home»Time Entries Audit loading ... [hide int notes] generated 8/8/2026 at 9:33:26 pm took 0.33 seconds version: b85cbb8 helpers: v2

Territory: BMS Date: 4/20/26 [x] Company: all Ticket: all User: all Type: all Role: all Bill: all Timesheet: all  4/20 Board: all Entry Status: all Ticket Status: all Issue: all [reset] Progress: 0% (0 of 3)

row id Terr Company User Date Day Start End Actual Billed Deduct Inv Amt Work Type Work Role Bill Timesheet Board Entry Status Ticket Status Ticket # Ticket Summary Int Notes Audit Done Audit Notes Notes # issues all issues errors warnings notices
1 39002 BMS OMNI fdrewett 4/20 7:00 am 8:00 am 1.00 1.00 0 125.00 Remote Standard Technician Billable 4/20 Help Desk 2.1 Billed -Closed 74394 Omni Weekly Meeting 0 Check in with Sal and Karri at AMR. Verified the computers that were off over the weekend came back online and connected to the new server 0
2 38988 BMS CT fdrewett 4/20 7:00 am 8:00 am 1.00 1.00 0 125.00 Remote Standard Technician Billable 4/20 Help Desk 2.1 Billed -Closed 74499 Huntress ITDR Incident #2093168 — Critical — Courageous Transformations 0 Huntress ITDR Incident #2093168 — Critical — Courageous Transformations Incident: https://bms.huntress.io/org/295830/infection\_reports/2093168 Summary: Huntress detected a successful suspicious authentication to M365 account charlotteb@couragenm.com on 2026-04-20 12:51:16 UTC from 47.253.180.189 \(Alibaba Cloud - US, Virginia\) using user agent axios/1.15.0 against the OfficeHome application. Device was non-compliant/unmanaged. Axios UA is associated with Phishing-as-a-Service kits and automated credential validation / session hijacking. Huntress auto-revoked sessions and disabled the identity. IOCs: - User: charlotteb@couragenm.com - Src IP: 47.253.180.189 \(Alibaba Cloud - US\) - User Agent: axios/1.15.0 - Session ID: 00401e2a-2a11-ede3-62cf-26b1d4d97c1e - App: OfficeHome \(4765445b-32c6-49b0-83e6-1d93765276ca\) - Device: Non-compliant, Unmanaged Remediation actions completed: 1\. Contained account in M365 admin center — reset password to a new strong value, blocked sign-in, and initiated sign-out to revoke all refresh tokens\. 2\. Verified per-user MFA status: Enforced\. 3\. Audited registered MFA / authentication methods in Entra for charlotteb — no unfamiliar phone numbers, Authenticator registrations, or alternate emails\. No attacker-registered methods present\. 4\. Reviewed Entra sign-in logs for the user — no additional suspicious successful sign-ins identified beyond the Huntress-flagged event; no 'Previously satisfied' MFA from foreign IPs observed\. 1 Notices: Notes: Notes longer than 500 characters Notes: Notes longer than 500 characters
3 38999 BMS PPT fdrewett 4/20 8:00 am 8:30 am 0.50 0.50 0 62.50 Remote Standard Technician Billable 4/20 Help Desk 2.1 Billed -Closed 74497 New voicemail from (505) 861-1200 0 worked with Peter on his remote desktop issue and a call to Sarah in Belen 0
4 39001 BMS JGCPA fdrewett 4/20 8:30 am 8:36 am 0.10 0.25 0 31.25 Correspondence NC Standard Technician DoNotBill 4/20 Help Desk 2.1 WrittenOff -Closed 74503 Voicemail 0 Frank Drewett Mon 04/20/2026 8:32 AM UTC-06 called and left a message for Amy Called the main line and they said they figured out the issue with VM Contact info for Ambitions Consulting Group 505-386-0123 support email support@ambitionsgroup.com The old Black Moon email still works too help@blackmoon.systems if needed my cell is 505-273-9685 and frank@ambitionsgroup.com 0
5 39003 BMS HH fdrewett 4/20 8:30 am 8:45 am 0.25 0.25 0 31.25 Remote Standard Technician Billable 4/20 Help Desk 2.1 BilledAgreement -Closed 74504 Alyssa Sanchez 0 She has been deactivated. Thanks Patricia! ---- Alyssa Sanchez alyssas@headinghome.org Suspended by admin Last sign in: 4 days ago Created: Mar 16, 2026 0
6 39007 BMS AIAM fdrewett 4/20 9:01 am 9:06 am 0.08 0.10 0 - Correspondence NC Standard Technician NoCharge 4/20 Help Desk 2.1 WrittenOff -Cancelled 74509 Test Ticket 0 test reply 2 Errors: Billed: Billed time not rounded to 15 minutes; Notices: Bill: Status = 'NoCharge' Billed: Billed time not rounded to 15 minutes Bill: Status = 'NoCharge'
7 39012 BMS PPT fdrewett 4/20 9:30 am 10:00 am 0.50 0.50 0 62.50 Remote Standard Technician Billable 4/20 Help Desk 2.1 Billed -Closed 74523 Yuliana - Remote access not working on A-4580 0 Remoted into A-4580. Configured remote access via vpn. Called and tested with Yuliana 0
8 39041 BMS MC fdrewett 4/20 2:15 pm 2:30 pm 0.25 0.25 0 31.25 Remote Standard Technician Billable 4/20 Help Desk 2.1 Billed -Closed 74539 Email Updates Needed 0 converted the mailbox \(__robyn@mechcon.org__\) to a sharedbox and added Jaime \(__jaime@mechcon.org__\). 0
9 39083 BMS IC fdrewett 4/20 2:30 pm 3:00 pm 0.50 1.00 0 25.00 Travel Standard Technician Billable 4/20 Help Desk 2.1 Billed -Closed 74543 New Office - Electricians cut the feed to the outdoor ap 0 Travel to the client location 0
10 39082 BMS IC fdrewett 4/20 3:00 pm 4:30 pm 1.50 1.50 0 187.50 Onsite Standard Technician Billable 4/20 Help Desk 2.1 Billed -Closed 74543 New Office - Electricians cut the feed to the outdoor ap 0 Onsite - repairing the data drop for the exterior AP 0
11 39042 BMS HH rclingan 4/20 8:00 am 9:20 am 1.33 1.50 0 225.00 Remote Standard Technician Billable 4/20 Help Desk 2.1 Billed -Resolved / Verifying 71559 Migration to M365 Time Tracking 0 worked on transition document to add requested changes 0
12 39043 BMS NMFFL rclingan 4/20 9:20 am 9:35 am 0.25 0.25 0 31.25 Remote Standard Technician Billable 4/20 Help Desk 2.1 Billed -Closed 74514 Phone issues 0 worked with elizabeth and suzette to power cycle fiber modem, pbx and switches 0
13 39044 BMS NMLGL rclingan 4/20 9:35 am 10:45 am 1.17 1.25 0 156.25 Remote Standard Technician Billable 4/20 Projects ReadyToBill >Closed 73803 Assemble Hardware 0 finish assembly of hardware 1 Notices: Board: Board not 'Help Desk' or 'Help Desk 2.1' Board: Board not 'Help Desk' or 'Help Desk 2.1'
14 39048 BMS HH rclingan 4/20 11:05 am 2:57 pm 3.87 4.00 0 600.00 Remote Standard Technician Billable 4/20 Help Desk 2.1 Billed -Resolved / Verifying 71559 Migration to M365 Time Tracking 0 final work on transition document clean up and test vms for training session tomorrow ensure agenda for training is complete changed baseline policies for pin requirement, default search engines and sharepoint sync 0
15 39131 BMS IC rclingan 4/20 3:03 pm 3:24 pm 0.35 1.00 0 25.00 Travel Standard Technician Billable 4/20 Help Desk 2.1 Billed -Closed 74543 New Office - Electricians cut the feed to the outdoor ap 0 travel for onsite visit 0
16 39133 BMS IC rclingan 4/20 3:24 pm 4:11 pm 0.78 1.00 0 125.00 Onsite Standard Technician Billable 4/20 Help Desk 2.1 Billed -Closed 74543 New Office - Electricians cut the feed to the outdoor ap 0 restored outdoor access point connection walk jobsite and determine any additional materials that need to be purchased to finish job we need to order more keystones and some 2 port faceplates. 0

Legend:
(hover over fields for details)

Error (1)
Warning (0)
Notice (3)


Tickets with over 5 hours in the current view (1)

Hours Ticket # Company Ticket Summary
5.50 71559 HH Migration to M365 Time Tracking


Errors

Field Message Count
Billed  Billed time not rounded to 15 minutes  1
Total  1


Notices

Field Message Count
Bill  Status = 'NoCharge'  1
Board  Board not 'Help Desk' or 'Help Desk 2.1'  1
Notes  Notes longer than 500 characters  1
Total  3


38988 - fdrewett - 4/20 7:00 am - 74499 - Huntress ITDR Incident #2093168 — Critical — Courageous Transformations
Notes longer than 500 characters

39007 - fdrewett - 4/20 9:01 am - 74509 - Test Ticket
Billed time not rounded to 15 minutes
Status = 'NoCharge'

39044 - rclingan - 4/20 9:35 am - 73803 - Assemble Hardware
Board not 'Help Desk' or 'Help Desk 2.1'