Home»Time Entries Audit loading ... [hide int notes] generated 8/8/2026 at 9:34:11 pm took 0.49 seconds version: b85cbb8 helpers: v2
Territory: BMS Month: « Apr 2026 » Company: all Ticket: all User: all Type: all Role: all Bill: all Timesheet: all 3/30 4/6 4/13 4/20 4/27 Board: all Entry Status: Billed [x] Ticket Status: all Issue: Notes longer than 500 characters [x] [reset] Progress: 0% (0 of 6)
| row | id | Terr | Company | User | Date | Day | Start | End | Actual | Billed | Deduct | Inv Amt | Work Type | Work Role | Bill | Timesheet | Board | Entry Status | Ticket Status | Ticket # | Ticket Summary | Int Notes | Audit Done | Audit Notes | Notes | # issues | all issues | errors | warnings | notices |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | 38988 | BMS | CT | fdrewett | 4/20 | 7:00 am | 8:00 am | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74499 | Huntress ITDR Incident #2093168 — Critical — Courageous Transformations | 0 | Huntress ITDR Incident #2093168 — Critical — Courageous Transformations Incident: https://bms.huntress.io/org/295830/infection\_reports/2093168 Summary: Huntress detected a successful suspicious authentication to M365 account charlotteb@couragenm.com on 2026-04-20 12:51:16 UTC from 47.253.180.189 \(Alibaba Cloud - US, Virginia\) using user agent axios/1.15.0 against the OfficeHome application. Device was non-compliant/unmanaged. Axios UA is associated with Phishing-as-a-Service kits and automated credential validation / session hijacking. Huntress auto-revoked sessions and disabled the identity. IOCs: - User: charlotteb@couragenm.com - Src IP: 47.253.180.189 \(Alibaba Cloud - US\) - User Agent: axios/1.15.0 - Session ID: 00401e2a-2a11-ede3-62cf-26b1d4d97c1e - App: OfficeHome \(4765445b-32c6-49b0-83e6-1d93765276ca\) - Device: Non-compliant, Unmanaged Remediation actions completed: 1\. Contained account in M365 admin center — reset password to a new strong value, blocked sign-in, and initiated sign-out to revoke all refresh tokens\. 2\. Verified per-user MFA status: Enforced\. 3\. Audited registered MFA / authentication methods in Entra for charlotteb — no unfamiliar phone numbers, Authenticator registrations, or alternate emails\. No attacker-registered methods present\. 4\. Reviewed Entra sign-in logs for the user — no additional suspicious successful sign-ins identified beyond the Huntress-flagged event; no 'Previously satisfied' MFA from foreign IPs observed\. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | |||||
| 2 | 39336 | BMS | HH | fdrewett | 4/24 | 8:15 am | 2:00 pm | 5.75 | 5.75 | 0 | 862.50 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Resolved / Verifying | 71559 | Migration to M365 Time Tracking | 0 | BitTitan MigrationWiz environment build-out for the Google Workspace to Microsoft 365 migration. Configured the Google Workspace source endpoint: created the GCP project, created the service account and JSON key, enabled the Gmail, Drive, Calendar, Contacts and Admin SDK APIs, and granted domain-wide delegation for the BitTitan OAuth scopes. Configured the Microsoft 365 destination endpoint: registered the MigrationWiz application in Entra ID, granted modern authentication consent, and provisioned the dedicated migration admin account. Extended troubleshooting of the Microsoft consent and authentication flow before Verify Credentials would pass against both endpoints. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | |||||
| 3 | 39650 | BMS | HH | fdrewett | 4/27 | 1:00 pm | 5:00 pm | 4.00 | 4.00 | 0 | 600.00 | Remote | Standard Technician | Billable | 4/27 | Help Desk 2.1 | Billed | -Resolved / Verifying | 71559 | Migration to M365 Time Tracking | 0 | Built out the migration source data set. Updated the user tracking sheet against the current Google Admin export, then reviewed the full account list line by line with Jesse Hugg to confirm who migrates, who is archived, and how aliases and shared mailboxes are handled. Cleaned up and imported the finalized user list into MSPComplete via CSV and applied User Migration Bundle licensing. Created the Document migration project for My Drive to OneDrive and pre-provisioned each user's OneDrive so the Drive data had a destination to land in. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | |||||
| 4 | 38713 | BMS | NMFFL | rclingan | 4/14 | 2:00 pm | 3:00 pm | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 4/13 | Help Desk 2.1 | Billed | -Closed | 74211 | Fw: Proposal Meeting: NM Financial and Family Law meeting with SEGRA | 0 | Ring network vs lateral Dual uplinks 645 xfinity internet 775 xfinity voice Extension from 2nd floor for internet no equipment in closet 100 Mb/s 575 200 Mb/s 650 36 Month Terms 1 static fiber Call pricing 305 monthly One time 245 10 handsets 2 trio handsets 1 911 fee 880 total monthly w/ 575 monthly network costs 955 total w/200 mb/s service UCAS integrated to teams potentially in the future Main advantage will be the ability to set and change hunt groups extensions forwards etc without getting support involved through Sky voice administration interface | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | |||||
| 5 | 38845 | BMS | SVC | rclingan | 4/16 | 8:20 am | 9:00 am | 0.67 | 0.75 | 0 | 93.75 | Remote | Standard Technician | Billable | 4/13 | Help Desk 2.1 | Billed | -Closed | 74300 | iPads for patient check in | 0 | Researched Ipad signature capture app, it still exists at 19.99 found crystalPM pdf on application setup for windows side [Help Center - Signature Pad's](https://help.crystalpm.com/hardware/signature-pads#h.xe7dk5opxxw) called support for verification on if this application is still supported and for any necessary requirements - awaiting callback discuss options with frank between topaz signature pad and the ipad both have their own difficulties and challenges, we need to await crystal callback for updated information before making a decision. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | |||||
| 6 | 39172 | BMS | CTCPA | rclingan | 4/22 | 2:58 pm | 3:11 pm | 0.22 | 0.25 | 0 | 31.25 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 75204 | New Computer Info for remote desktop setup | 0 | The main benefit of a desktop accessed via remote desktop versus a laptop connected through VPN is connection stability between the client machine and the applications/databases on the server. On the local network, the desktop has a wired gigabit connection directly to the server. A laptop connected over VPN, on the other hand, would realistically see speeds closer to 100 Mb/s at best — roughly 10% of local speed — since it's limited by our upload speed and the user's download speed. Beyond the raw speed difference, the VPN connection is also more susceptible to latency, instability, and potential data corruption due to the lower available bandwidth and any drops along the way. For line-of-business applications that are constantly reading and writing to the server, a remoted desktop provides a much more reliable experience. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters |
Legend:
(hover over fields for details)
Tickets with over 5 hours in the current view (1)
| Hours | Ticket # | Company | Ticket Summary |
|---|---|---|---|
| 96.00 | 71559 | HH | Migration to M365 Time Tracking |
Notices
| Field | Message | Count |
|---|---|---|
| Notes | Notes longer than 500 characters | 6 |
| Total | 6 | |