Home»Time Entries Audit loading ... [hide int notes] generated 8/8/2026 at 10:25:07 pm took 0.54 seconds version: b85cbb8 helpers: v2
Territory: BMS Date: 4/20/26 [x] Company: all Ticket: all User: fdrewett [x] Type: all Role: all Bill: all Timesheet: all 4/20 Board: all Entry Status: all Ticket Status: all Issue: all [reset] Progress: 0% (0 of 2)
| row | id | Terr | Company | User | Date | Day | Start | End | Actual | Billed | Deduct | Inv Amt | Work Type | Work Role | Bill | Timesheet | Board | Entry Status | Ticket Status | Ticket # | Ticket Summary | Int Notes | Audit Done | Audit Notes | Notes | # issues | all issues | errors | warnings | notices |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | 39002 | BMS | OMNI | fdrewett | 4/20 | 7:00 am | 8:00 am | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74394 | Omni Weekly Meeting | 0 | Check in with Sal and Karri at AMR. Verified the computers that were off over the weekend came back online and connected to the new server | 0 | |||||||
| 2 | 38988 | BMS | CT | fdrewett | 4/20 | 7:00 am | 8:00 am | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74499 | Huntress ITDR Incident #2093168 — Critical — Courageous Transformations | 0 | Huntress ITDR Incident #2093168 — Critical — Courageous Transformations Incident: https://bms.huntress.io/org/295830/infection\_reports/2093168 Summary: Huntress detected a successful suspicious authentication to M365 account charlotteb@couragenm.com on 2026-04-20 12:51:16 UTC from 47.253.180.189 \(Alibaba Cloud - US, Virginia\) using user agent axios/1.15.0 against the OfficeHome application. Device was non-compliant/unmanaged. Axios UA is associated with Phishing-as-a-Service kits and automated credential validation / session hijacking. Huntress auto-revoked sessions and disabled the identity. IOCs: - User: charlotteb@couragenm.com - Src IP: 47.253.180.189 \(Alibaba Cloud - US\) - User Agent: axios/1.15.0 - Session ID: 00401e2a-2a11-ede3-62cf-26b1d4d97c1e - App: OfficeHome \(4765445b-32c6-49b0-83e6-1d93765276ca\) - Device: Non-compliant, Unmanaged Remediation actions completed: 1\. Contained account in M365 admin center — reset password to a new strong value, blocked sign-in, and initiated sign-out to revoke all refresh tokens\. 2\. Verified per-user MFA status: Enforced\. 3\. Audited registered MFA / authentication methods in Entra for charlotteb — no unfamiliar phone numbers, Authenticator registrations, or alternate emails\. No attacker-registered methods present\. 4\. Reviewed Entra sign-in logs for the user — no additional suspicious successful sign-ins identified beyond the Huntress-flagged event; no 'Previously satisfied' MFA from foreign IPs observed\. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | |||||
| 3 | 38999 | BMS | PPT | fdrewett | 4/20 | 8:00 am | 8:30 am | 0.50 | 0.50 | 0 | 62.50 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74497 | New voicemail from (505) 861-1200 | 0 | worked with Peter on his remote desktop issue and a call to Sarah in Belen | 0 | |||||||
| 4 | 39001 | BMS | JGCPA | fdrewett | 4/20 | 8:30 am | 8:36 am | 0.10 | 0.25 | 0 | 31.25 | Correspondence NC | Standard Technician | DoNotBill | 4/20 | Help Desk 2.1 | WrittenOff | -Closed | 74503 | Voicemail | 0 | Frank Drewett Mon 04/20/2026 8:32 AM UTC-06 called and left a message for Amy Called the main line and they said they figured out the issue with VM Contact info for Ambitions Consulting Group 505-386-0123 support email support@ambitionsgroup.com The old Black Moon email still works too help@blackmoon.systems if needed my cell is 505-273-9685 and frank@ambitionsgroup.com | 0 | |||||||
| 5 | 39003 | BMS | HH | fdrewett | 4/20 | 8:30 am | 8:45 am | 0.25 | 0.25 | 0 | 31.25 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | BilledAgreement | -Closed | 74504 | Alyssa Sanchez | 0 | She has been deactivated. Thanks Patricia! ---- Alyssa Sanchez alyssas@headinghome.org Suspended by admin Last sign in: 4 days ago Created: Mar 16, 2026 | 0 | |||||||
| 6 | 39007 | BMS | AIAM | fdrewett | 4/20 | 9:01 am | 9:06 am | 0.08 | 0.10 | 0 | - | Correspondence NC | Standard Technician | NoCharge | 4/20 | Help Desk 2.1 | WrittenOff | -Cancelled | 74509 | Test Ticket | 0 | test reply | 2 | Errors: Billed: Billed time not rounded to 15 minutes; Notices: Bill: Status = 'NoCharge' | Billed: Billed time not rounded to 15 minutes | Bill: Status = 'NoCharge' | ||||
| 7 | 39012 | BMS | PPT | fdrewett | 4/20 | 9:30 am | 10:00 am | 0.50 | 0.50 | 0 | 62.50 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74523 | Yuliana - Remote access not working on A-4580 | 0 | Remoted into A-4580. Configured remote access via vpn. Called and tested with Yuliana | 0 | |||||||
| 8 | 39041 | BMS | MC | fdrewett | 4/20 | 2:15 pm | 2:30 pm | 0.25 | 0.25 | 0 | 31.25 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74539 | Email Updates Needed | 0 | converted the mailbox \(__robyn@mechcon.org__\) to a sharedbox and added Jaime \(__jaime@mechcon.org__\). | 0 | |||||||
| 9 | 39083 | BMS | IC | fdrewett | 4/20 | 2:30 pm | 3:00 pm | 0.50 | 1.00 | 0 | 25.00 | Travel | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74543 | New Office - Electricians cut the feed to the outdoor ap | 0 | Travel to the client location | 0 | |||||||
| 10 | 39082 | BMS | IC | fdrewett | 4/20 | 3:00 pm | 4:30 pm | 1.50 | 1.50 | 0 | 187.50 | Onsite | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74543 | New Office - Electricians cut the feed to the outdoor ap | 0 | Onsite - repairing the data drop for the exterior AP | 0 |
Legend:
(hover over fields for details)
Errors
| Field | Message | Count |
|---|---|---|
| Billed | Billed time not rounded to 15 minutes | 1 |
| Total | 1 | |
Notices
| Field | Message | Count |
|---|---|---|
| Bill | Status = 'NoCharge' | 1 |
| Notes | Notes longer than 500 characters | 1 |
| Total | 2 | |