Home»Time Entries Audit loading ... [hide int notes] generated 8/9/2026 at 12:48:08 am took 0.49 seconds version: b85cbb8 helpers: v2
Territory: BMS Month: « Apr 2026 » Company: all Ticket: all User: fdrewett [x] Type: all Role: all Bill: all Timesheet: 3/30 4/6 4/13 4/20 4/27 [x] Board: all Entry Status: all Ticket Status: all Issue: all [reset] Progress: 0% (0 of 8)
| row | id | Terr | Company | User | Date | Day | Start | End | Actual | Billed | Deduct | Inv Amt | Work Type | Work Role | Bill | Timesheet | Board | Entry Status | Ticket Status | Ticket # | Ticket Summary | Int Notes | Audit Done | Audit Notes | Notes | # issues | all issues | errors | warnings | notices |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | 38988 | BMS | CT | fdrewett | 4/20 | 7:00 am | 8:00 am | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74499 | Huntress ITDR Incident #2093168 — Critical — Courageous Transformations | 0 | Huntress ITDR Incident #2093168 — Critical — Courageous Transformations Incident: https://bms.huntress.io/org/295830/infection\_reports/2093168 Summary: Huntress detected a successful suspicious authentication to M365 account charlotteb@couragenm.com on 2026-04-20 12:51:16 UTC from 47.253.180.189 \(Alibaba Cloud - US, Virginia\) using user agent axios/1.15.0 against the OfficeHome application. Device was non-compliant/unmanaged. Axios UA is associated with Phishing-as-a-Service kits and automated credential validation / session hijacking. Huntress auto-revoked sessions and disabled the identity. IOCs: - User: charlotteb@couragenm.com - Src IP: 47.253.180.189 \(Alibaba Cloud - US\) - User Agent: axios/1.15.0 - Session ID: 00401e2a-2a11-ede3-62cf-26b1d4d97c1e - App: OfficeHome \(4765445b-32c6-49b0-83e6-1d93765276ca\) - Device: Non-compliant, Unmanaged Remediation actions completed: 1\. Contained account in M365 admin center — reset password to a new strong value, blocked sign-in, and initiated sign-out to revoke all refresh tokens\. 2\. Verified per-user MFA status: Enforced\. 3\. Audited registered MFA / authentication methods in Entra for charlotteb — no unfamiliar phone numbers, Authenticator registrations, or alternate emails\. No attacker-registered methods present\. 4\. Reviewed Entra sign-in logs for the user — no additional suspicious successful sign-ins identified beyond the Huntress-flagged event; no 'Previously satisfied' MFA from foreign IPs observed\. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters | |||||
| 2 | 39002 | BMS | OMNI | fdrewett | 4/20 | 7:00 am | 8:00 am | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74394 | Omni Weekly Meeting | 0 | Check in with Sal and Karri at AMR. Verified the computers that were off over the weekend came back online and connected to the new server | 0 | |||||||
| 3 | 38999 | BMS | PPT | fdrewett | 4/20 | 8:00 am | 8:30 am | 0.50 | 0.50 | 0 | 62.50 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74497 | New voicemail from (505) 861-1200 | 0 | worked with Peter on his remote desktop issue and a call to Sarah in Belen | 0 | |||||||
| 4 | 39001 | BMS | JGCPA | fdrewett | 4/20 | 8:30 am | 8:36 am | 0.10 | 0.25 | 0 | 31.25 | Correspondence NC | Standard Technician | DoNotBill | 4/20 | Help Desk 2.1 | WrittenOff | -Closed | 74503 | Voicemail | 0 | Frank Drewett Mon 04/20/2026 8:32 AM UTC-06 called and left a message for Amy Called the main line and they said they figured out the issue with VM Contact info for Ambitions Consulting Group 505-386-0123 support email support@ambitionsgroup.com The old Black Moon email still works too help@blackmoon.systems if needed my cell is 505-273-9685 and frank@ambitionsgroup.com | 0 | |||||||
| 5 | 39003 | BMS | HH | fdrewett | 4/20 | 8:30 am | 8:45 am | 0.25 | 0.25 | 0 | 31.25 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | BilledAgreement | -Closed | 74504 | Alyssa Sanchez | 0 | She has been deactivated. Thanks Patricia! ---- Alyssa Sanchez alyssas@headinghome.org Suspended by admin Last sign in: 4 days ago Created: Mar 16, 2026 | 0 | |||||||
| 6 | 39007 | BMS | AIAM | fdrewett | 4/20 | 9:01 am | 9:06 am | 0.08 | 0.10 | 0 | - | Correspondence NC | Standard Technician | NoCharge | 4/20 | Help Desk 2.1 | WrittenOff | -Cancelled | 74509 | Test Ticket | 0 | test reply | 2 | Errors: Billed: Billed time not rounded to 15 minutes; Notices: Bill: Status = 'NoCharge' | Billed: Billed time not rounded to 15 minutes | Bill: Status = 'NoCharge' | ||||
| 7 | 39012 | BMS | PPT | fdrewett | 4/20 | 9:30 am | 10:00 am | 0.50 | 0.50 | 0 | 62.50 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74523 | Yuliana - Remote access not working on A-4580 | 0 | Remoted into A-4580. Configured remote access via vpn. Called and tested with Yuliana | 0 | |||||||
| 8 | 39041 | BMS | MC | fdrewett | 4/20 | 2:15 pm | 2:30 pm | 0.25 | 0.25 | 0 | 31.25 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74539 | Email Updates Needed | 0 | converted the mailbox \(__robyn@mechcon.org__\) to a sharedbox and added Jaime \(__jaime@mechcon.org__\). | 0 | |||||||
| 9 | 39083 | BMS | IC | fdrewett | 4/20 | 2:30 pm | 3:00 pm | 0.50 | 1.00 | 0 | 25.00 | Travel | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74543 | New Office - Electricians cut the feed to the outdoor ap | 0 | Travel to the client location | 0 | |||||||
| 10 | 39082 | BMS | IC | fdrewett | 4/20 | 3:00 pm | 4:30 pm | 1.50 | 1.50 | 0 | 187.50 | Onsite | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74543 | New Office - Electricians cut the feed to the outdoor ap | 0 | Onsite - repairing the data drop for the exterior AP | 0 | |||||||
| 11 | 39071 | BMS | PPT | fdrewett | 4/21 | 7:45 am | 8:00 am | 0.25 | 0.25 | 0 | 31.25 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74570 | SV - Scanner not working Front Desk Middle | 0 | reinstalled the driver. same issue. Found that it was using a funky location for the temp scan files that it did not have write access to | 0 | |||||||
| 12 | 39070 | BMS | AIAM | fdrewett | 4/21 | 8:00 am | 9:00 am | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74316 | New Laptop for Crystal | 0 | Worked with Crystal on getting the remote access to the new laptop finalized. got access to the google account for password &bookmark sync | 0 | |||||||
| 13 | 39073 | BMS | OMNI | fdrewett | 4/21 | 9:00 am | 10:00 am | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74566 | AMR - Time off on the new server | 0 | Worked with Jim on an issue with the transfers between amr and main. checked the time on the server and it looks good. there must be a setting in the app that controls the time. Jim is going to dig in with Kevin | 0 | |||||||
| 14 | 39081 | BMS | IC | fdrewett | 4/21 | 10:00 am | 10:30 am | 0.50 | 0.50 | 0 | 62.50 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74575 | Missing Files on the server | 0 | remoted in and copied over the data from the "archive folder" from before the move to the new file share | 0 | |||||||
| 15 | 39109 | BMS | TFF | fdrewett | 4/21 | 1:00 pm | 1:30 pm | 0.50 | 0.50 | 0 | 62.50 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74583 | Spam Email | 0 | adjusted the spam filter in M365 | 0 | |||||||
| 16 | 39111 | BMS | PPT | fdrewett | 4/21 | 3:04 pm | 3:09 pm | 0.08 | 0.25 | 0 | 31.25 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74582 | Email password reset | 0 | Reset Sarah Erhart google account password to a temp password | 0 | |||||||
| 17 | 39114 | BMS | IC | fdrewett | 4/21 | 3:15 pm | 4:15 pm | 1.00 | 1.00 | 0 | 125.00 | Remote | Standard Technician | Billable | 4/20 | Projects | ReadyToBill | In Progress | 73520 | Update Static DNS References | 0 | Cleaned up the dns entries on the workstations with static ip addresses | 1 | Notices: Board: Board not 'Help Desk' or 'Help Desk 2.1' | Board: Board not 'Help Desk' or 'Help Desk 2.1' | |||||
| 18 | 39147 | BMS | HH | fdrewett | 4/22 | 8:30 am | 9:00 am | 0.50 | 1.00 | 0 | 25.00 | Travel | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Resolved / Verifying | 71559 | Migration to M365 Time Tracking | 0 | Travel to | 2 | Errors: Notes: Incomplete notes for travel, Work Type: No onsite entry found for travel (based on tech, date, company) | Notes: Incomplete notes for travel, Work Type: No onsite entry found for travel (based on tech, date, company) | |||||
| 19 | 39146 | BMS | HH | fdrewett | 4/22 | 9:00 am | 10:00 am | 1.00 | 1.00 | 0 | 150.00 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Resolved / Verifying | 71559 | Migration to M365 Time Tracking | 0 | Onsite meeting with Jesse and Ryan. Melissa was remote. | 1 | Warnings: Work Type: Possible onsite/remote mismatch (work type vs notes) | Work Type: Possible onsite/remote mismatch (work type vs notes) | |||||
| 20 | 39154 | BMS | NMLGL | fdrewett | 4/22 | 11:20 am | 11:25 am | 0.08 | 0.25 | 0 | 31.25 | Correspondence NC | Standard Technician | DoNotBill | 4/20 | Help Desk 2.1 | WrittenOff | -Closed | 74213 | NMLGL - Charles email issues on iphone. | 0 | Called and left a message for Charles | 0 | |||||||
| 21 | 39153 | BMS | MC | fdrewett | 4/22 | 11:30 am | 11:45 am | 0.25 | 0.25 | 0 | 31.25 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74683 | Robyn Email | 0 | Added the auto-reply. let us know if you need anything else. Frank | 0 | |||||||
| 22 | 39254 | BMS | SBI | fdrewett | 4/22 | 12:15 pm | 12:45 pm | 0.50 | 1.00 | 0 | 25.00 | Travel | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74585 | Fw: Drive Swap In TriCaster | 0 | 1 | Notices: Notes: Missing notes for travel | Notes: Missing notes for travel | ||||||
| 23 | 39253 | BMS | SBI | fdrewett | 4/22 | 12:45 pm | 2:00 pm | 1.25 | 1.25 | 0 | 156.25 | Onsite | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74585 | Fw: Drive Swap In TriCaster | 0 | drive swap for the tricaster | 0 | |||||||
| 24 | 39256 | BMS | AIAM | fdrewett | 4/22 | 3:00 pm | 3:15 pm | 0.25 | 1.00 | 0 | 25.00 | Travel | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74698 | New voicemail from Acme Main (505) 345-2457 | 0 | 1 | Notices: Notes: Missing notes for travel | Notes: Missing notes for travel | ||||||
| 25 | 39255 | BMS | AIAM | fdrewett | 4/22 | 3:15 pm | 4:15 pm | 1.00 | 1.00 | 0 | 125.00 | Onsite | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Closed | 74698 | New voicemail from Acme Main (505) 345-2457 | 0 | On-Site for Paula's computer not starting up. Looks like the issue was trying to find the power button. it was hidding behind her plant. check in with Bill Karr | 0 | |||||||
| 26 | 39336 | BMS | HH | fdrewett | 4/24 | 8:15 am | 2:00 pm | 5.75 | 5.75 | 0 | 862.50 | Remote | Standard Technician | Billable | 4/20 | Help Desk 2.1 | Billed | -Resolved / Verifying | 71559 | Migration to M365 Time Tracking | 0 | BitTitan MigrationWiz environment build-out for the Google Workspace to Microsoft 365 migration. Configured the Google Workspace source endpoint: created the GCP project, created the service account and JSON key, enabled the Gmail, Drive, Calendar, Contacts and Admin SDK APIs, and granted domain-wide delegation for the BitTitan OAuth scopes. Configured the Microsoft 365 destination endpoint: registered the MigrationWiz application in Entra ID, granted modern authentication consent, and provisioned the dedicated migration admin account. Extended troubleshooting of the Microsoft consent and authentication flow before Verify Credentials would pass against both endpoints. | 1 | Notices: Notes: Notes longer than 500 characters | Notes: Notes longer than 500 characters |
Legend:
(hover over fields for details)
Tickets with over 5 hours in the current view (1)
| Hours | Ticket # | Company | Ticket Summary |
|---|---|---|---|
| 6.75 | 71559 | HH | Migration to M365 Time Tracking |
Errors
| Field | Message | Count |
|---|---|---|
| Billed | Billed time not rounded to 15 minutes | 1 |
| Notes | Incomplete notes for travel | 1 |
| Work Type | No onsite entry found for travel (based on tech, date, company) | 1 |
| Total | 3 | |
Warnings
| Field | Message | Count |
|---|---|---|
| Work Type | Possible onsite/remote mismatch (work type vs notes) | 1 |
| Total | 1 | |
Notices
| Field | Message | Count |
|---|---|---|
| Bill | Status = 'NoCharge' | 1 |
| Board | Board not 'Help Desk' or 'Help Desk 2.1' | 1 |
| Notes | Missing notes for travel | 2 |
| Notes | Notes longer than 500 characters | 2 |
| Total | 6 | |