{
  "investigation_metadata": {
    "date": "2026-03-10T15:53:37.848140+00:00",
    "domain": "lonestarelectrical.net",
    "admin": "sysadmin@lonestarelectrical.net",
    "target_user": null
  },
  "users": [
    {
      "email": "amandab@lonestarelectrical.net",
      "name": "Amanda Bischoff",
      "last_login": "2026-03-09T16:10:21.000Z",
      "is_admin": false,
      "is_suspended": false,
      "is_2fa_enrolled": false,
      "is_2fa_enforced": true,
      "creation_time": "2024-06-03T19:44:32.000Z",
      "org_unit": "/"
    },
    {
      "email": "jamese@lonestarelectrical.net",
      "name": "James Eneix",
      "last_login": "2026-03-10T14:03:13.000Z",
      "is_admin": true,
      "is_suspended": false,
      "is_2fa_enrolled": false,
      "is_2fa_enforced": true,
      "creation_time": "2018-05-14T01:13:09.000Z",
      "org_unit": "/"
    },
    {
      "email": "jayc@lonestarelectrical.net",
      "name": "Jay Curtis",
      "last_login": "2025-05-25T18:03:50.000Z",
      "is_admin": false,
      "is_suspended": false,
      "is_2fa_enrolled": false,
      "is_2fa_enforced": true,
      "creation_time": "2023-04-29T15:44:38.000Z",
      "org_unit": "/"
    },
    {
      "email": "joser@lonestarelectrical.net",
      "name": "Jose Rea",
      "last_login": "2026-03-10T13:51:27.000Z",
      "is_admin": false,
      "is_suspended": false,
      "is_2fa_enrolled": false,
      "is_2fa_enforced": true,
      "creation_time": "2020-07-14T18:01:34.000Z",
      "org_unit": "/"
    },
    {
      "email": "louiem@lonestarelectrical.net",
      "name": "Louie M",
      "last_login": "2022-07-13T17:55:39.000Z",
      "is_admin": false,
      "is_suspended": true,
      "is_2fa_enrolled": false,
      "is_2fa_enforced": true,
      "creation_time": "2022-07-11T03:26:32.000Z",
      "org_unit": "/"
    },
    {
      "email": "office@lonestarelectrical.net",
      "name": "Office Lone Star Electrical",
      "last_login": "2026-03-09T14:27:10.000Z",
      "is_admin": false,
      "is_suspended": false,
      "is_2fa_enrolled": false,
      "is_2fa_enforced": true,
      "creation_time": "2019-12-08T00:56:48.000Z",
      "org_unit": "/"
    },
    {
      "email": "robine@lonestarelectrical.net",
      "name": "Robin Eneix",
      "last_login": "2026-03-04T21:37:37.000Z",
      "is_admin": false,
      "is_suspended": false,
      "is_2fa_enrolled": false,
      "is_2fa_enforced": true,
      "creation_time": "2018-05-14T01:24:06.000Z",
      "org_unit": "/"
    },
    {
      "email": "russ@lonestarelectrical.net",
      "name": "Russ Howe",
      "last_login": "2026-03-10T10:04:28.000Z",
      "is_admin": false,
      "is_suspended": false,
      "is_2fa_enrolled": false,
      "is_2fa_enforced": true,
      "creation_time": "2019-12-08T01:02:05.000Z",
      "org_unit": "/"
    },
    {
      "email": "sysadmin@lonestarelectrical.net",
      "name": "Computer Guru",
      "last_login": "2026-03-10T14:28:28.000Z",
      "is_admin": true,
      "is_suspended": false,
      "is_2fa_enrolled": true,
      "is_2fa_enforced": true,
      "creation_time": "2025-11-04T19:26:32.000Z",
      "org_unit": "/"
    },
    {
      "email": "zachk@lonestarelectrical.net",
      "name": "Zachary Krueger",
      "last_login": "2026-03-10T14:28:59.000Z",
      "is_admin": false,
      "is_suspended": false,
      "is_2fa_enrolled": false,
      "is_2fa_enforced": true,
      "creation_time": "2020-07-14T17:57:24.000Z",
      "org_unit": "/"
    }
  ],
  "user_summary": {
    "total": 10,
    "admins": 2,
    "no_2fa": 9,
    "suspended": 1
  },
  "signin_logs": [
    {
      "time": "2026-03-10T15:44:22.377Z",
      "user": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "event": "login_success",
      "type": "login",
      "login_type": "reauth",
      "challenge_method": [
        "none"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "reauth",
        "login_challenge_method": [
          "none"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-10T15:35:22.449Z",
      "user": "jamese@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "event": "login_success",
      "type": "login",
      "login_type": "reauth",
      "challenge_method": [
        "none"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "reauth",
        "login_challenge_method": [
          "none"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-10T14:55:08.485Z",
      "user": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "event": "2sv_enroll",
      "type": "2sv_change",
      "login_type": "",
      "challenge_method": "",
      "is_suspicious": false,
      "parameters": {}
    },
    {
      "time": "2026-03-10T14:54:45.303Z",
      "user": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "event": "login_success",
      "type": "login",
      "login_type": "reauth",
      "challenge_method": [
        "none"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "reauth",
        "login_challenge_method": [
          "none"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-10T14:54:34.365Z",
      "user": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "event": "recovery_phone_edit",
      "type": "recovery_info_change",
      "login_type": "",
      "challenge_method": "",
      "is_suspicious": false,
      "parameters": {}
    },
    {
      "time": "2026-03-10T14:54:16.156Z",
      "user": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "event": "recovery_email_edit",
      "type": "recovery_info_change",
      "login_type": "",
      "challenge_method": "",
      "is_suspicious": false,
      "parameters": {}
    },
    {
      "time": "2026-03-10T14:52:48.669Z",
      "user": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "event": "login_success",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "password"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-10T14:52:39.251Z",
      "user": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "event": "logout",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": "",
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password"
      }
    },
    {
      "time": "2026-03-10T14:51:58.188Z",
      "user": "jamese@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "event": "login_success",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "password",
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "password",
          "password"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-10T14:51:57.767Z",
      "user": "jamese@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "event": "password_edit",
      "type": "password_change",
      "login_type": "",
      "challenge_method": "",
      "is_suspicious": false,
      "parameters": {}
    },
    {
      "time": "2026-03-10T14:50:30.052Z",
      "user": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "event": "login_success",
      "type": "login",
      "login_type": "reauth",
      "challenge_method": [
        "password",
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "reauth",
        "login_challenge_method": [
          "password",
          "password"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-10T14:48:15.941Z",
      "user": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "event": "login_success",
      "type": "login",
      "login_type": "reauth",
      "challenge_method": [
        "password",
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "reauth",
        "login_challenge_method": [
          "password",
          "password"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-10T14:28:28.587Z",
      "user": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "event": "login_success",
      "type": "login",
      "login_type": "reauth",
      "challenge_method": [
        "password",
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "reauth",
        "login_challenge_method": [
          "password",
          "password"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-10T14:13:49.976Z",
      "user": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "event": "login_failure",
      "type": "login",
      "login_type": "reauth",
      "challenge_method": [
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "reauth",
        "login_challenge_method": [
          "password"
        ]
      }
    },
    {
      "time": "2026-03-10T14:11:19.919Z",
      "user": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "event": "login_failure",
      "type": "login",
      "login_type": "reauth",
      "challenge_method": [
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "reauth",
        "login_challenge_method": [
          "password"
        ]
      }
    },
    {
      "time": "2026-03-10T14:06:00.430Z",
      "user": "jamese@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "event": "login_success",
      "type": "login",
      "login_type": "exchange",
      "challenge_method": [
        "none"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "exchange",
        "login_challenge_method": [
          "none"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-10T14:05:59.975Z",
      "user": "jamese@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "event": "password_edit",
      "type": "password_change",
      "login_type": "",
      "challenge_method": "",
      "is_suspicious": false,
      "parameters": {}
    },
    {
      "time": "2026-03-10T14:03:13.176Z",
      "user": "jamese@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "event": "login_success",
      "type": "login",
      "login_type": "reauth",
      "challenge_method": [
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "reauth",
        "login_challenge_method": [
          "password"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-09T18:11:10.805Z",
      "user": "office@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "event": "login_failure",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "password"
        ]
      }
    },
    {
      "time": "2026-03-09T16:39:05.267Z",
      "user": "joser@lonestarelectrical.net",
      "ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
      "event": "login_success",
      "type": "login",
      "login_type": "reauth",
      "challenge_method": [
        "none"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "reauth",
        "login_challenge_method": [
          "none"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-09T16:38:17.519Z",
      "user": "joser@lonestarelectrical.net",
      "ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
      "event": "login_success",
      "type": "login",
      "login_type": "reauth",
      "challenge_method": [
        "none"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "reauth",
        "login_challenge_method": [
          "none"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-09T16:38:14.297Z",
      "user": "joser@lonestarelectrical.net",
      "ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
      "event": "login_success",
      "type": "login",
      "login_type": "reauth",
      "challenge_method": [
        "none"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "reauth",
        "login_challenge_method": [
          "none"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-09T16:35:34.305Z",
      "user": "joser@lonestarelectrical.net",
      "ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
      "event": "login_success",
      "type": "login",
      "login_type": "reauth",
      "challenge_method": [
        "none"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "reauth",
        "login_challenge_method": [
          "none"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-09T16:30:52.317Z",
      "user": "joser@lonestarelectrical.net",
      "ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
      "event": "login_success",
      "type": "login",
      "login_type": "reauth",
      "challenge_method": [
        "device_prompt"
      ],
      "is_suspicious": true,
      "parameters": {
        "login_type": "reauth",
        "login_challenge_method": [
          "device_prompt"
        ],
        "is_suspicious": true
      }
    },
    {
      "time": "2026-03-09T16:30:52.317Z",
      "user": "joser@lonestarelectrical.net",
      "ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
      "event": "risky_sensitive_action_allowed",
      "type": "login",
      "login_type": "reauth",
      "challenge_method": [
        "device_prompt"
      ],
      "is_suspicious": true,
      "parameters": {
        "login_type": "reauth",
        "login_challenge_method": [
          "device_prompt"
        ],
        "is_suspicious": true,
        "sensitive_action_name": "Allowing an app access to Google data"
      }
    },
    {
      "time": "2026-03-09T16:30:52.317Z",
      "user": "joser@lonestarelectrical.net",
      "ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
      "event": "login_challenge",
      "type": "login",
      "login_type": "reauth",
      "challenge_method": [
        "device_prompt"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "reauth",
        "login_challenge_method": [
          "device_prompt"
        ],
        "login_challenge_status": "passed"
      }
    },
    {
      "time": "2026-03-09T16:27:24.745Z",
      "user": "joser@lonestarelectrical.net",
      "ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
      "event": "login_success",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "password"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-09T16:23:53.453Z",
      "user": "amandab@lonestarelectrical.net",
      "ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
      "event": "logout",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": "",
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password"
      }
    },
    {
      "time": "2026-03-09T16:23:53.453Z",
      "user": "joser@lonestarelectrical.net",
      "ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
      "event": "logout",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": "",
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password"
      }
    },
    {
      "time": "2026-03-09T16:19:32.599Z",
      "user": "amandab@lonestarelectrical.net",
      "ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
      "event": "login_success",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "password"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-09T16:17:35.493Z",
      "user": "joser@lonestarelectrical.net",
      "ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
      "event": "login_success",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "password"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-09T16:16:48.098Z",
      "user": "amandab@lonestarelectrical.net",
      "ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
      "event": "logout",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": "",
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password"
      }
    },
    {
      "time": "2026-03-09T16:14:28.629Z",
      "user": "amandab@lonestarelectrical.net",
      "ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
      "event": "login_success",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "password"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-09T16:13:40.810Z",
      "user": "joser@lonestarelectrical.net",
      "ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
      "event": "logout",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": "",
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password"
      }
    },
    {
      "time": "2026-03-09T16:10:21.441Z",
      "user": "amandab@lonestarelectrical.net",
      "ip": "2600:1011:b065:2a9b:9d7b:53ec:a474:1ca8",
      "event": "login_success",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "password"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-09T16:07:27.813Z",
      "user": "joser@lonestarelectrical.net",
      "ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
      "event": "login_success",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "password"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-09T14:53:26.289Z",
      "user": "amandab@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "event": "login_success",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "password"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-09T14:27:10.400Z",
      "user": "office@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "event": "login_success",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "password",
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "password",
          "password"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-06T22:25:29.755Z",
      "user": "office@lonestarelectrical.net",
      "ip": "184.182.9.91",
      "event": "login_success",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "password"
        ],
        "is_suspicious": false
      }
    },
    {
      "time": "2026-03-05T18:52:13.758Z",
      "user": "jamese@lonestarelectrical.net",
      "ip": "142.252.244.71",
      "event": "login_failure",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "none"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "none"
        ]
      }
    },
    {
      "time": "2026-03-05T18:49:43.920Z",
      "user": "jamese@lonestarelectrical.net",
      "ip": "45.149.81.240",
      "event": "login_success",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "password",
        "device_prompt"
      ],
      "is_suspicious": true,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "password",
          "device_prompt"
        ],
        "is_suspicious": true
      }
    },
    {
      "time": "2026-03-05T18:49:43.920Z",
      "user": "jamese@lonestarelectrical.net",
      "ip": "45.149.81.240",
      "event": "login_challenge",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "device_prompt"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "device_prompt"
        ],
        "login_challenge_status": "passed"
      }
    },
    {
      "time": "2026-03-05T18:47:00.215Z",
      "user": "jamese@lonestarelectrical.net",
      "ip": "172.120.157.245",
      "event": "login_success",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "password",
        "device_prompt"
      ],
      "is_suspicious": true,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "password",
          "device_prompt"
        ],
        "is_suspicious": true
      }
    },
    {
      "time": "2026-03-05T18:47:00.215Z",
      "user": "jamese@lonestarelectrical.net",
      "ip": "172.120.157.245",
      "event": "login_challenge",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "device_prompt"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "device_prompt"
        ],
        "login_challenge_status": "passed"
      }
    },
    {
      "time": "2026-03-04T21:37:37.032Z",
      "user": "robine@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "event": "login_success",
      "type": "login",
      "login_type": "google_password",
      "challenge_method": [
        "password"
      ],
      "is_suspicious": false,
      "parameters": {
        "login_type": "google_password",
        "login_challenge_method": [
          "password"
        ],
        "is_suspicious": false
      }
    }
  ],
  "signin_summary": {
    "total_events": 45,
    "unique_ips": 8,
    "unique_users": 6,
    "failed_logins": 4,
    "suspicious_events": 4,
    "ips": {
      "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6": 12,
      "70.167.204.34": 10,
      "2600:1011:b009:21fb:0:1b:dd42:8201": 16,
      "2600:1011:b065:2a9b:9d7b:53ec:a474:1ca8": 1,
      "184.182.9.91": 1,
      "142.252.244.71": 1,
      "45.149.81.240": 2,
      "172.120.157.245": 2
    },
    "users": {
      "sysadmin@lonestarelectrical.net": 12,
      "jamese@lonestarelectrical.net": 11,
      "office@lonestarelectrical.net": 3,
      "joser@lonestarelectrical.net": 12,
      "amandab@lonestarelectrical.net": 6,
      "robine@lonestarelectrical.net": 1
    }
  },
  "forwarding_rules": {
    "amandab@lonestarelectrical.net": {
      "enabled": false
    },
    "jamese@lonestarelectrical.net": {
      "enabled": false
    },
    "jayc@lonestarelectrical.net": {
      "enabled": false
    },
    "joser@lonestarelectrical.net": {
      "enabled": false
    },
    "office@lonestarelectrical.net": {
      "enabled": false
    },
    "robine@lonestarelectrical.net": {
      "enabled": false
    },
    "russ@lonestarelectrical.net": {
      "enabled": false
    },
    "sysadmin@lonestarelectrical.net": {
      "enabled": false
    },
    "zachk@lonestarelectrical.net": {
      "enabled": false
    }
  },
  "oauth_grants": {
    "amandab@lonestarelectrical.net": [
      {
        "app_name": "iOS",
        "client_id": "450232826690-0rm6bs9d2fps9tifvk2oodh3tasd7vl7.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/carddav",
          "https://www.googleapis.com/auth/userinfo.profile",
          "https://www.googleapis.com/auth/userinfo.email",
          "openid",
          "https://www.googleapis.com/auth/calendar",
          "https://mail.google.com/"
        ],
        "is_native": false
      },
      {
        "app_name": "Otter",
        "client_id": "517439599553-aflp6g0o205nu5keqvl84hv9aa9rfv90.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/userinfo.profile",
          "https://www.googleapis.com/auth/userinfo.email",
          "openid"
        ],
        "is_native": false
      },
      {
        "app_name": "Google Chrome",
        "client_id": "77185425430.apps.googleusercontent.com",
        "scopes": [
          "https://www.google.com/accounts/OAuthLogin"
        ],
        "is_native": false
      }
    ],
    "jamese@lonestarelectrical.net": [
      {
        "app_name": "eBay",
        "client_id": "510718330363-o9l5kjqoe03m24442jut61lfmb319f6o.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/userinfo.profile",
          "https://www.googleapis.com/auth/userinfo.email",
          "openid"
        ],
        "is_native": false
      },
      {
        "app_name": "Dropbox",
        "client_id": "801668726815.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/userinfo.profile",
          "https://www.googleapis.com/auth/userinfo.email",
          "openid"
        ],
        "is_native": false
      },
      {
        "app_name": "Google Chrome",
        "client_id": "77185425430.apps.googleusercontent.com",
        "scopes": [
          "https://www.google.com/accounts/OAuthLogin"
        ],
        "is_native": false
      }
    ],
    "jayc@lonestarelectrical.net": [
      {
        "app_name": "iOS",
        "client_id": "450232826690-0rm6bs9d2fps9tifvk2oodh3tasd7vl7.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/carddav",
          "https://www.googleapis.com/auth/userinfo.profile",
          "https://www.googleapis.com/auth/userinfo.email",
          "openid",
          "https://www.googleapis.com/auth/calendar",
          "https://mail.google.com/"
        ],
        "is_native": false
      },
      {
        "app_name": "Android device",
        "client_id": "1070009224336-sdh77n7uot3oc99ais00jmuft6sk2fg9.apps.googleusercontent.com",
        "scopes": [
          "https://www.google.com/accounts/OAuthLogin"
        ],
        "is_native": false
      }
    ],
    "joser@lonestarelectrical.net": [
      {
        "app_name": "Adobe Acrobat: PDF edit, convert, sign tools",
        "client_id": "80763634447-d1i012v2eh8lnblrkliq9egb9ru3qs1c.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/drive.appdata",
          "https://www.googleapis.com/auth/userinfo.profile",
          "https://www.googleapis.com/auth/userinfo.email",
          "openid",
          "https://www.googleapis.com/auth/drive.file",
          "https://www.googleapis.com/auth/admin.directory.user.readonly"
        ],
        "is_native": false
      },
      {
        "app_name": "Adobe",
        "client_id": "1014431251553-kq98rctnjtv76ag4ulrfkem43b74poni.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/userinfo.profile",
          "https://www.googleapis.com/auth/userinfo.email",
          "openid"
        ],
        "is_native": false
      },
      {
        "app_name": "Android device",
        "client_id": "1070009224336-sdh77n7uot3oc99ais00jmuft6sk2fg9.apps.googleusercontent.com",
        "scopes": [
          "https://www.google.com/accounts/OAuthLogin"
        ],
        "is_native": false
      },
      {
        "app_name": "Adobe Acrobat: PDF edit, convert, sign tools",
        "client_id": "80763634447-20t38p96fvgmpf06gu6ieelookdomucu.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/drive.appdata",
          "https://www.googleapis.com/auth/userinfo.profile",
          "https://www.googleapis.com/auth/userinfo.email",
          "openid",
          "https://www.googleapis.com/auth/drive.file",
          "https://www.googleapis.com/auth/admin.directory.user.readonly"
        ],
        "is_native": false
      },
      {
        "app_name": "WhatsApp Messenger",
        "client_id": "293955441834-jc0jr4nnng51vb1v0q8fea5af6i5sakt.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/drive.appdata",
          "https://www.googleapis.com/auth/drive.file"
        ],
        "is_native": false
      },
      {
        "app_name": "Lumin PDF",
        "client_id": "1031094922298-hcmpll8999ct57grncagnql87pnihmmi.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/userinfo.profile",
          "https://www.googleapis.com/auth/userinfo.email",
          "openid",
          "https://www.googleapis.com/auth/drive.file",
          "https://www.googleapis.com/auth/drive.install"
        ],
        "is_native": false
      }
    ],
    "office@lonestarelectrical.net": [
      {
        "app_name": "iOS Account Manager",
        "client_id": "936475272427.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/userinfo.email",
          "openid",
          "https://www.google.com/accounts/OAuthLogin"
        ],
        "is_native": false
      },
      {
        "app_name": "Adobe",
        "client_id": "1014431251553-kq98rctnjtv76ag4ulrfkem43b74poni.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/userinfo.profile",
          "https://www.googleapis.com/auth/userinfo.email",
          "openid"
        ],
        "is_native": false
      },
      {
        "app_name": "Google Chrome",
        "client_id": "77185425430.apps.googleusercontent.com",
        "scopes": [
          "https://www.google.com/accounts/OAuthLogin"
        ],
        "is_native": false
      }
    ],
    "robine@lonestarelectrical.net": [
      {
        "app_name": "iOS Account Manager",
        "client_id": "936475272427.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/userinfo.email",
          "openid",
          "https://www.google.com/accounts/OAuthLogin"
        ],
        "is_native": false
      },
      {
        "app_name": "Google Chrome",
        "client_id": "77185425430.apps.googleusercontent.com",
        "scopes": [
          "https://www.google.com/accounts/OAuthLogin"
        ],
        "is_native": false
      }
    ],
    "russ@lonestarelectrical.net": [
      {
        "app_name": "iOS Account Manager",
        "client_id": "936475272427.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/userinfo.email",
          "openid",
          "https://www.google.com/accounts/OAuthLogin"
        ],
        "is_native": false
      },
      {
        "app_name": "ZIP Extractor",
        "client_id": "824911851129-6d64j0e08s86ih74l0lu386tqqfv71t9.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/userinfo.profile",
          "https://www.googleapis.com/auth/userinfo.email",
          "openid",
          "https://www.googleapis.com/auth/drive.install"
        ],
        "is_native": false
      },
      {
        "app_name": "Adobe Acrobat Reader for PDF",
        "client_id": "274857604095-sqsf888po17vsuqfl85lr7vmai97q1rg.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/userinfo.profile",
          "https://www.googleapis.com/auth/userinfo.email",
          "openid",
          "https://www.googleapis.com/auth/drive",
          "https://www.googleapis.com/auth/drive.metadata"
        ],
        "is_native": false
      },
      {
        "app_name": "Adobe Acrobat Reader for PDF",
        "client_id": "274857604095-asa78mt6fu07nfv50ih3i83hdptire1h.apps.googleusercontent.com",
        "scopes": [
          "openid",
          "https://www.googleapis.com/auth/drive",
          "https://www.googleapis.com/auth/drive.metadata"
        ],
        "is_native": false
      },
      {
        "app_name": "Dropbox",
        "client_id": "801668726815.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/userinfo.profile",
          "https://www.googleapis.com/auth/userinfo.email",
          "openid"
        ],
        "is_native": false
      }
    ],
    "sysadmin@lonestarelectrical.net": [
      {
        "app_name": "ManageEngine MDM",
        "client_id": "227683630173-630qlm449rqurnc7srihq756k7vpftsq.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/userinfo.profile",
          "https://www.googleapis.com/auth/admin.directory.orgunit.readonly",
          "https://www.googleapis.com/auth/admin.directory.domain.readonly",
          "https://www.googleapis.com/auth/admin.directory.user.security",
          "https://www.googleapis.com/auth/admin.directory.user.readonly"
        ],
        "is_native": false
      }
    ],
    "zachk@lonestarelectrical.net": [
      {
        "app_name": "Dropbox",
        "client_id": "801668726815-5tdpfq2im4p7qpbm237h74s6123g6iga.apps.googleusercontent.com",
        "scopes": [
          "https://www.googleapis.com/auth/userinfo.profile",
          "https://www.googleapis.com/auth/userinfo.email",
          "openid"
        ],
        "is_native": false
      },
      {
        "app_name": "Android device",
        "client_id": "1070009224336-sdh77n7uot3oc99ais00jmuft6sk2fg9.apps.googleusercontent.com",
        "scopes": [
          "https://www.google.com/accounts/OAuthLogin"
        ],
        "is_native": false
      }
    ]
  },
  "suspicious_oauth_apps": [
    {
      "user": "amandab@lonestarelectrical.net",
      "app": "iOS",
      "client_id": "450232826690-0rm6bs9d2fps9tifvk2oodh3tasd7vl7.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/carddav",
        "https://www.googleapis.com/auth/userinfo.profile",
        "https://www.googleapis.com/auth/userinfo.email",
        "openid",
        "https://www.googleapis.com/auth/calendar",
        "https://mail.google.com/"
      ]
    },
    {
      "user": "amandab@lonestarelectrical.net",
      "app": "Otter",
      "client_id": "517439599553-aflp6g0o205nu5keqvl84hv9aa9rfv90.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/userinfo.profile",
        "https://www.googleapis.com/auth/userinfo.email",
        "openid"
      ]
    },
    {
      "user": "jamese@lonestarelectrical.net",
      "app": "eBay",
      "client_id": "510718330363-o9l5kjqoe03m24442jut61lfmb319f6o.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/userinfo.profile",
        "https://www.googleapis.com/auth/userinfo.email",
        "openid"
      ]
    },
    {
      "user": "jamese@lonestarelectrical.net",
      "app": "Dropbox",
      "client_id": "801668726815.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/userinfo.profile",
        "https://www.googleapis.com/auth/userinfo.email",
        "openid"
      ]
    },
    {
      "user": "jayc@lonestarelectrical.net",
      "app": "iOS",
      "client_id": "450232826690-0rm6bs9d2fps9tifvk2oodh3tasd7vl7.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/carddav",
        "https://www.googleapis.com/auth/userinfo.profile",
        "https://www.googleapis.com/auth/userinfo.email",
        "openid",
        "https://www.googleapis.com/auth/calendar",
        "https://mail.google.com/"
      ]
    },
    {
      "user": "joser@lonestarelectrical.net",
      "app": "Adobe Acrobat: PDF edit, convert, sign tools",
      "client_id": "80763634447-d1i012v2eh8lnblrkliq9egb9ru3qs1c.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/drive.appdata",
        "https://www.googleapis.com/auth/userinfo.profile",
        "https://www.googleapis.com/auth/userinfo.email",
        "openid",
        "https://www.googleapis.com/auth/drive.file",
        "https://www.googleapis.com/auth/admin.directory.user.readonly"
      ]
    },
    {
      "user": "joser@lonestarelectrical.net",
      "app": "Adobe",
      "client_id": "1014431251553-kq98rctnjtv76ag4ulrfkem43b74poni.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/userinfo.profile",
        "https://www.googleapis.com/auth/userinfo.email",
        "openid"
      ]
    },
    {
      "user": "joser@lonestarelectrical.net",
      "app": "Adobe Acrobat: PDF edit, convert, sign tools",
      "client_id": "80763634447-20t38p96fvgmpf06gu6ieelookdomucu.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/drive.appdata",
        "https://www.googleapis.com/auth/userinfo.profile",
        "https://www.googleapis.com/auth/userinfo.email",
        "openid",
        "https://www.googleapis.com/auth/drive.file",
        "https://www.googleapis.com/auth/admin.directory.user.readonly"
      ]
    },
    {
      "user": "joser@lonestarelectrical.net",
      "app": "WhatsApp Messenger",
      "client_id": "293955441834-jc0jr4nnng51vb1v0q8fea5af6i5sakt.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/drive.appdata",
        "https://www.googleapis.com/auth/drive.file"
      ]
    },
    {
      "user": "joser@lonestarelectrical.net",
      "app": "Lumin PDF",
      "client_id": "1031094922298-hcmpll8999ct57grncagnql87pnihmmi.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/userinfo.profile",
        "https://www.googleapis.com/auth/userinfo.email",
        "openid",
        "https://www.googleapis.com/auth/drive.file",
        "https://www.googleapis.com/auth/drive.install"
      ]
    },
    {
      "user": "office@lonestarelectrical.net",
      "app": "iOS Account Manager",
      "client_id": "936475272427.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/userinfo.email",
        "openid",
        "https://www.google.com/accounts/OAuthLogin"
      ]
    },
    {
      "user": "office@lonestarelectrical.net",
      "app": "Adobe",
      "client_id": "1014431251553-kq98rctnjtv76ag4ulrfkem43b74poni.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/userinfo.profile",
        "https://www.googleapis.com/auth/userinfo.email",
        "openid"
      ]
    },
    {
      "user": "robine@lonestarelectrical.net",
      "app": "iOS Account Manager",
      "client_id": "936475272427.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/userinfo.email",
        "openid",
        "https://www.google.com/accounts/OAuthLogin"
      ]
    },
    {
      "user": "russ@lonestarelectrical.net",
      "app": "iOS Account Manager",
      "client_id": "936475272427.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/userinfo.email",
        "openid",
        "https://www.google.com/accounts/OAuthLogin"
      ]
    },
    {
      "user": "russ@lonestarelectrical.net",
      "app": "ZIP Extractor",
      "client_id": "824911851129-6d64j0e08s86ih74l0lu386tqqfv71t9.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/userinfo.profile",
        "https://www.googleapis.com/auth/userinfo.email",
        "openid",
        "https://www.googleapis.com/auth/drive.install"
      ]
    },
    {
      "user": "russ@lonestarelectrical.net",
      "app": "Adobe Acrobat Reader for PDF",
      "client_id": "274857604095-sqsf888po17vsuqfl85lr7vmai97q1rg.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/userinfo.profile",
        "https://www.googleapis.com/auth/userinfo.email",
        "openid",
        "https://www.googleapis.com/auth/drive",
        "https://www.googleapis.com/auth/drive.metadata"
      ]
    },
    {
      "user": "russ@lonestarelectrical.net",
      "app": "Adobe Acrobat Reader for PDF",
      "client_id": "274857604095-asa78mt6fu07nfv50ih3i83hdptire1h.apps.googleusercontent.com",
      "scopes": [
        "openid",
        "https://www.googleapis.com/auth/drive",
        "https://www.googleapis.com/auth/drive.metadata"
      ]
    },
    {
      "user": "russ@lonestarelectrical.net",
      "app": "Dropbox",
      "client_id": "801668726815.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/userinfo.profile",
        "https://www.googleapis.com/auth/userinfo.email",
        "openid"
      ]
    },
    {
      "user": "sysadmin@lonestarelectrical.net",
      "app": "ManageEngine MDM",
      "client_id": "227683630173-630qlm449rqurnc7srihq756k7vpftsq.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/userinfo.profile",
        "https://www.googleapis.com/auth/admin.directory.orgunit.readonly",
        "https://www.googleapis.com/auth/admin.directory.domain.readonly",
        "https://www.googleapis.com/auth/admin.directory.user.security",
        "https://www.googleapis.com/auth/admin.directory.user.readonly"
      ]
    },
    {
      "user": "zachk@lonestarelectrical.net",
      "app": "Dropbox",
      "client_id": "801668726815-5tdpfq2im4p7qpbm237h74s6123g6iga.apps.googleusercontent.com",
      "scopes": [
        "https://www.googleapis.com/auth/userinfo.profile",
        "https://www.googleapis.com/auth/userinfo.email",
        "openid"
      ]
    }
  ],
  "password_changes": [
    {
      "time": "2026-03-10T14:39:28.502Z",
      "actor": "sysadmin@lonestarelectrical.net",
      "target": "jamese@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "type": "Admin Reset",
      "event_name": "CHANGE_PASSWORD"
    },
    {
      "time": "2026-03-10T14:51:57.767Z",
      "actor": "jamese@lonestarelectrical.net",
      "target": "jamese@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "type": "Self-Service",
      "event_name": "password_edit"
    },
    {
      "time": "2026-03-10T14:05:59.975Z",
      "actor": "jamese@lonestarelectrical.net",
      "target": "jamese@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "type": "Self-Service",
      "event_name": "password_edit"
    }
  ],
  "admin_activity": [
    {
      "time": "2026-03-10T15:45:38.235Z",
      "event": "AUTHORIZE_API_CLIENT_ACCESS",
      "type": "DOMAIN_SETTINGS",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "DOMAIN_NAME": "",
        "API_CLIENT_NAME": "102231607889615995452",
        "API_SCOPES": "https://www.googleapis.com/auth/admin.directory.user,https://www.googleapis.com/auth/admin.directory.user.security,https://www.googleapis.com/auth/admin.reports.audit.readonly,https://www.googleapis.com/auth/gmail.readonly,https://www.googleapis.com/auth/gmail.settings.basic,https://www.googleapis.com/auth/drive.readonly,https://www.googleapis.com/auth/admin.directory.domain.readonly"
      },
      "is_critical": true
    },
    {
      "time": "2026-03-10T15:35:24.178Z",
      "event": "ALERT_CENTER_VIEW",
      "type": "ALERT_CENTER",
      "actor": "jamese@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "target_user": "",
      "parameters": {
        "ALERT_ID": "50175eb0-76b5-4dff-8dc6-f9c780d4e169,8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,e75a0b04-cc31-434e-9e96-e65e934aad51"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T15:23:07.279Z",
      "event": "SECURITY_INVESTIGATION_QUERY",
      "type": "SECURITY_INVESTIGATION",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "INVESTIGATION_DATA_SOURCE": "USER LOG EVENTS",
        "INVESTIGATION_QUERY": "(EVENT EQUALS [ACCOUNT_DISABLED_PASSWORD_LEAK]) AND (USER = [\"jamese@lonestarelectrical.net\"])"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T15:21:26.797Z",
      "event": "SECURITY_INVESTIGATION_QUERY",
      "type": "SECURITY_INVESTIGATION",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "INVESTIGATION_DATA_SOURCE": "DRIVE LOG EVENTS",
        "INVESTIGATION_QUERY": "(ACTOR = [\"jamese@lonestarelectrical.net\"]) AND (EVENT EQUALS [DOWNLOAD])"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T15:20:12.091Z",
      "event": "SECURITY_INVESTIGATION_QUERY",
      "type": "SECURITY_INVESTIGATION",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "INVESTIGATION_DATA_SOURCE": "GMAIL LOG EVENTS",
        "INVESTIGATION_QUERY": "(TO (ENVELOPE) = [\"jamese@lonestarelectrical.net\"]) AND (TRAFFIC SOURCE EQUALS [EXTERNAL_DOMAIN])"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T15:02:07.634Z",
      "event": "DRIVE_DATA_RESTORE",
      "type": "DOCS_SETTINGS",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "jamese@lonestarelectrical.net",
      "parameters": {
        "USER_EMAIL": "jamese@lonestarelectrical.net",
        "BEGIN_DATE_TIME": "2026/03/01 07:00 UTC",
        "END_DATE_TIME": "2026/03/10 15:02 UTC"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T15:01:54.212Z",
      "event": "EMAIL_UNDELETE",
      "type": "EMAIL_SETTINGS",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "jamese@lonestarelectrical.net",
      "parameters": {
        "USER_EMAIL": "jamese@lonestarelectrical.net",
        "START_DATE": "2026/03/01 07:00 UTC",
        "END_DATE": "2026/03/10 15:01 UTC"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T15:00:35.671Z",
      "event": "TERMS_OF_SERVICE_ACCEPTED",
      "type": "POLICY",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "N/A",
      "target_user": "",
      "parameters": {
        "TERMS_OF_SERVICE_NAMES": "Chrome Service License Agreement"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:59:49.274Z",
      "event": "SECURITY_INVESTIGATION_QUERY",
      "type": "SECURITY_INVESTIGATION",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "INVESTIGATION_DATA_SOURCE": "ACCESS EVALUATION LOG EVENTS",
        "INVESTIGATION_QUERY": "(DATE > 2026-03-03T14:58:55Z) AND (ACTOR CONTAINS [\"jamese@lonestarelectrical.net\"])"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:58:57.238Z",
      "event": "SECURITY_INVESTIGATION_QUERY",
      "type": "SECURITY_INVESTIGATION",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "INVESTIGATION_DATA_SOURCE": "ACCESS EVALUATION LOG EVENTS",
        "INVESTIGATION_QUERY": "DATE > 2026-03-03T14:58:55Z"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:58:33.189Z",
      "event": "SECURITY_INVESTIGATION_QUERY",
      "type": "SECURITY_INVESTIGATION",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "INVESTIGATION_DATA_SOURCE": "ADMIN LOG EVENTS",
        "INVESTIGATION_QUERY": "USER EMAIL CONTAINS [\"jamese@lonestarelectrical.net\"]"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:58:08.868Z",
      "event": "SECURITY_INVESTIGATION_QUERY",
      "type": "SECURITY_INVESTIGATION",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "INVESTIGATION_DATA_SOURCE": "ADMIN LOG EVENTS",
        "INVESTIGATION_QUERY": "(empty)"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:57:43.270Z",
      "event": "SECURITY_INVESTIGATION_QUERY",
      "type": "SECURITY_INVESTIGATION",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "INVESTIGATION_DATA_SOURCE": "USER LOG EVENTS",
        "INVESTIGATION_QUERY": "(EVENT EQUALS [SUSPICIOUS_LOGIN]) AND (USER = [\"jamese@lonestarelectrical.net\"])"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:56:41.352Z",
      "event": "CREATE_APPLICATION_SETTING",
      "type": "APPLICATION_SETTINGS",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "APPLICATION_NAME": "Security",
        "ORG_UNIT_NAME": "lonestarelectrical.net",
        "SETTING_NAME": "Skip password enrollment state",
        "NEW_VALUE": "allow",
        "APPLICATION_EDITION": "standard"
      },
      "is_critical": true
    },
    {
      "time": "2026-03-10T14:55:41.403Z",
      "event": "ALLOW_STRONG_AUTHENTICATION",
      "type": "SECURITY_SETTINGS",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "OLD_VALUE": "INHERIT_FROM_PARENT",
        "NEW_VALUE": "true",
        "ORG_UNIT_NAME": "lonestarelectrical.net"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:55:41.403Z",
      "event": "ENFORCE_STRONG_AUTHENTICATION",
      "type": "SECURITY_SETTINGS",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "OLD_VALUE": "INHERIT_FROM_PARENT",
        "NEW_VALUE": "true",
        "ORG_UNIT_NAME": "lonestarelectrical.net"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:55:41.403Z",
      "event": "CHANGE_TWO_STEP_VERIFICATION_FREQUENCY",
      "type": "SECURITY_SETTINGS",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "OLD_VALUE": "INHERIT_FROM_PARENT",
        "NEW_VALUE": "ENABLE_USERS_TO_TRUST_DEVICE",
        "ORG_UNIT_NAME": "lonestarelectrical.net"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:55:41.403Z",
      "event": "CHANGE_TWO_STEP_VERIFICATION_ENROLLMENT_PERIOD_DURATION",
      "type": "SECURITY_SETTINGS",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "OLD_VALUE": "INHERIT_FROM_PARENT",
        "NEW_VALUE": "1 week",
        "ORG_UNIT_NAME": "lonestarelectrical.net"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:55:41.403Z",
      "event": "CHANGE_TWO_STEP_VERIFICATION_GRACE_PERIOD_DURATION",
      "type": "SECURITY_SETTINGS",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "OLD_VALUE": "INHERIT_FROM_PARENT",
        "NEW_VALUE": "1 day",
        "ORG_UNIT_NAME": "lonestarelectrical.net"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:55:41.403Z",
      "event": "CHANGE_ALLOWED_TWO_STEP_VERIFICATION_METHODS",
      "type": "SECURITY_SETTINGS",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "ALLOWED_TWO_STEP_VERIFICATION_METHOD": "ANY",
        "ORG_UNIT_NAME": "lonestarelectrical.net"
      },
      "is_critical": true
    },
    {
      "time": "2026-03-10T14:55:41.403Z",
      "event": "CHANGE_TWO_STEP_VERIFICATION_START_DATE",
      "type": "SECURITY_SETTINGS",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "OLD_VALUE": "INHERIT_FROM_PARENT",
        "NEW_VALUE": "2026-03-10",
        "ORG_UNIT_NAME": "lonestarelectrical.net"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:55:21.798Z",
      "event": "ALERT_CENTER_VIEW",
      "type": "ALERT_CENTER",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "ALERT_ID": "50175eb0-76b5-4dff-8dc6-f9c780d4e169,8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,e75a0b04-cc31-434e-9e96-e65e934aad51"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:53:04.844Z",
      "event": "ALERT_CENTER_VIEW",
      "type": "ALERT_CENTER",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "ALERT_ID": "50175eb0-76b5-4dff-8dc6-f9c780d4e169,8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,e75a0b04-cc31-434e-9e96-e65e934aad51"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:50:33.065Z",
      "event": "ALERT_CENTER_VIEW",
      "type": "ALERT_CENTER",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "ALERT_ID": "50175eb0-76b5-4dff-8dc6-f9c780d4e169,8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,e75a0b04-cc31-434e-9e96-e65e934aad51"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:39:28.502Z",
      "event": "CHANGE_PASSWORD",
      "type": "USER_SETTINGS",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "jamese@lonestarelectrical.net",
      "parameters": {
        "USER_EMAIL": "jamese@lonestarelectrical.net"
      },
      "is_critical": true
    },
    {
      "time": "2026-03-10T14:39:28.502Z",
      "event": "CHANGE_PASSWORD_ON_NEXT_LOGIN",
      "type": "USER_SETTINGS",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "jamese@lonestarelectrical.net",
      "parameters": {
        "USER_EMAIL": "jamese@lonestarelectrical.net",
        "OLD_VALUE": "false",
        "NEW_VALUE": "true"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:37:02.854Z",
      "event": "GENERATE_CERTIFICATE",
      "type": "CERTIFICATE_SETTINGS",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "CERTIFICATE_NAME": "Google_2031-3-9-7372_SAML2.0",
        "CERTIFICATE_TYPE": "SAML_IDP"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:34:21.240Z",
      "event": "ALERT_CENTER_VIEW",
      "type": "ALERT_CENTER",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:31:50.725Z",
      "event": "ALERT_CENTER_VIEW",
      "type": "ALERT_CENTER",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:29:39.072Z",
      "event": "ALERT_CENTER_VIEW",
      "type": "ALERT_CENTER",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
      },
      "is_critical": false
    },
    {
      "time": "2026-03-10T14:28:31.680Z",
      "event": "ALERT_CENTER_VIEW",
      "type": "ALERT_CENTER",
      "actor": "sysadmin@lonestarelectrical.net",
      "ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
      "target_user": "",
      "parameters": {
        "ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
      },
      "is_critical": false
    },
    {
      "time": "2026-02-20T21:59:18.512Z",
      "event": "ALERT_CENTER_VIEW",
      "type": "ALERT_CENTER",
      "actor": "jamese@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "target_user": "",
      "parameters": {
        "ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
      },
      "is_critical": false
    },
    {
      "time": "2026-02-20T21:58:52.553Z",
      "event": "ALERT_CENTER_VIEW",
      "type": "ALERT_CENTER",
      "actor": "jamese@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "target_user": "",
      "parameters": {
        "ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
      },
      "is_critical": false
    },
    {
      "time": "2026-02-20T21:53:26.066Z",
      "event": "ALERT_CENTER_VIEW",
      "type": "ALERT_CENTER",
      "actor": "jamese@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "target_user": "",
      "parameters": {
        "ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
      },
      "is_critical": false
    },
    {
      "time": "2026-02-18T14:21:26.273Z",
      "event": "USER_LICENSE_REVOKE",
      "type": "LICENSES_SETTINGS",
      "actor": "N/A",
      "ip": "N/A",
      "target_user": "louiem@lonestarelectrical.net",
      "parameters": {
        "USER_EMAIL": "louiem@lonestarelectrical.net",
        "PRODUCT_NAME": "Google Workspace",
        "OLD_VALUE": "Google Workspace Business Standard"
      },
      "is_critical": false
    },
    {
      "time": "2026-02-18T14:21:24.044Z",
      "event": "USER_LICENSE_ASSIGNMENT",
      "type": "LICENSES_SETTINGS",
      "actor": "N/A",
      "ip": "N/A",
      "target_user": "louiem@lonestarelectrical.net",
      "parameters": {
        "USER_EMAIL": "louiem@lonestarelectrical.net",
        "PRODUCT_NAME": "Google Workspace Archived User",
        "NEW_VALUE": "Google Workspace Business Standard - Archived User"
      },
      "is_critical": false
    },
    {
      "time": "2026-02-18T14:21:21.991Z",
      "event": "ARCHIVE_USER",
      "type": "USER_SETTINGS",
      "actor": "jamese@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "target_user": "louiem@lonestarelectrical.net",
      "parameters": {
        "USER_EMAIL": "louiem@lonestarelectrical.net"
      },
      "is_critical": false
    },
    {
      "time": "2026-02-18T14:04:35.786Z",
      "event": "ALERT_CENTER_VIEW",
      "type": "ALERT_CENTER",
      "actor": "jamese@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "target_user": "",
      "parameters": {
        "ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
      },
      "is_critical": false
    },
    {
      "time": "2026-02-18T14:03:40.102Z",
      "event": "ALERT_CENTER_VIEW",
      "type": "ALERT_CENTER",
      "actor": "jamese@lonestarelectrical.net",
      "ip": "70.167.204.34",
      "target_user": "",
      "parameters": {
        "ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
      },
      "is_critical": false
    }
  ],
  "gmail_delegation": {}
}