azcomputerguru/claudetools
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
6bf66fa99efae21e8bde2daabc4c24c40a7a4499
claudetools/temp/gws_investigation_results.json
Mike Swanson fa15b03180 sync: Auto-sync from ACG-M-L5090 at 2026-03-10 19:11:00 
Synced files:
- Quote wizard frontend (all components, hooks, types, config)
- API updates (config, models, routers, schemas, services)
- Client work (bg-builders, gurushow)
- Scripts (BGB Lesley termination, CIPP, Datto, migration)
- Temp files (Bardach contacts, VWP investigation, misc)
- Credentials and session logs
- Email service, PHP API, session logs

Machine: ACG-M-L5090
Timestamp: 2026-03-10 19:11:00

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-10 19:59:08 -07:00

2027 lines
62 KiB
JSON
Raw Blame History

{
"investigation_metadata": {
"date": "2026-03-10T15:53:37.848140+00:00",
"domain": "lonestarelectrical.net",
"admin": "sysadmin@lonestarelectrical.net",
"target_user": null
},
"users": [
{
"email": "amandab@lonestarelectrical.net",
"name": "Amanda Bischoff",
"last_login": "2026-03-09T16:10:21.000Z",
"is_admin": false,
"is_suspended": false,
"is_2fa_enrolled": false,
"is_2fa_enforced": true,
"creation_time": "2024-06-03T19:44:32.000Z",
"org_unit": "/"
},
{
"email": "jamese@lonestarelectrical.net",
"name": "James Eneix",
"last_login": "2026-03-10T14:03:13.000Z",
"is_admin": true,
"is_suspended": false,
"is_2fa_enrolled": false,
"is_2fa_enforced": true,
"creation_time": "2018-05-14T01:13:09.000Z",
"org_unit": "/"
},
{
"email": "jayc@lonestarelectrical.net",
"name": "Jay Curtis",
"last_login": "2025-05-25T18:03:50.000Z",
"is_admin": false,
"is_suspended": false,
"is_2fa_enrolled": false,
"is_2fa_enforced": true,
"creation_time": "2023-04-29T15:44:38.000Z",
"org_unit": "/"
},
{
"email": "joser@lonestarelectrical.net",
"name": "Jose Rea",
"last_login": "2026-03-10T13:51:27.000Z",
"is_admin": false,
"is_suspended": false,
"is_2fa_enrolled": false,
"is_2fa_enforced": true,
"creation_time": "2020-07-14T18:01:34.000Z",
"org_unit": "/"
},
{
"email": "louiem@lonestarelectrical.net",
"name": "Louie M",
"last_login": "2022-07-13T17:55:39.000Z",
"is_admin": false,
"is_suspended": true,
"is_2fa_enrolled": false,
"is_2fa_enforced": true,
"creation_time": "2022-07-11T03:26:32.000Z",
"org_unit": "/"
},
{
"email": "office@lonestarelectrical.net",
"name": "Office Lone Star Electrical",
"last_login": "2026-03-09T14:27:10.000Z",
"is_admin": false,
"is_suspended": false,
"is_2fa_enrolled": false,
"is_2fa_enforced": true,
"creation_time": "2019-12-08T00:56:48.000Z",
"org_unit": "/"
},
{
"email": "robine@lonestarelectrical.net",
"name": "Robin Eneix",
"last_login": "2026-03-04T21:37:37.000Z",
"is_admin": false,
"is_suspended": false,
"is_2fa_enrolled": false,
"is_2fa_enforced": true,
"creation_time": "2018-05-14T01:24:06.000Z",
"org_unit": "/"
},
{
"email": "russ@lonestarelectrical.net",
"name": "Russ Howe",
"last_login": "2026-03-10T10:04:28.000Z",
"is_admin": false,
"is_suspended": false,
"is_2fa_enrolled": false,
"is_2fa_enforced": true,
"creation_time": "2019-12-08T01:02:05.000Z",
"org_unit": "/"
},
{
"email": "sysadmin@lonestarelectrical.net",
"name": "Computer Guru",
"last_login": "2026-03-10T14:28:28.000Z",
"is_admin": true,
"is_suspended": false,
"is_2fa_enrolled": true,
"is_2fa_enforced": true,
"creation_time": "2025-11-04T19:26:32.000Z",
"org_unit": "/"
},
{
"email": "zachk@lonestarelectrical.net",
"name": "Zachary Krueger",
"last_login": "2026-03-10T14:28:59.000Z",
"is_admin": false,
"is_suspended": false,
"is_2fa_enrolled": false,
"is_2fa_enforced": true,
"creation_time": "2020-07-14T17:57:24.000Z",
"org_unit": "/"
}
],
"user_summary": {
"total": 10,
"admins": 2,
"no_2fa": 9,
"suspended": 1
},
"signin_logs": [
{
"time": "2026-03-10T15:44:22.377Z",
"user": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"event": "login_success",
"type": "login",
"login_type": "reauth",
"challenge_method": [
"none"
],
"is_suspicious": false,
"parameters": {
"login_type": "reauth",
"login_challenge_method": [
"none"
],
"is_suspicious": false
}
},
{
"time": "2026-03-10T15:35:22.449Z",
"user": "jamese@lonestarelectrical.net",
"ip": "70.167.204.34",
"event": "login_success",
"type": "login",
"login_type": "reauth",
"challenge_method": [
"none"
],
"is_suspicious": false,
"parameters": {
"login_type": "reauth",
"login_challenge_method": [
"none"
],
"is_suspicious": false
}
},
{
"time": "2026-03-10T14:55:08.485Z",
"user": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"event": "2sv_enroll",
"type": "2sv_change",
"login_type": "",
"challenge_method": "",
"is_suspicious": false,
"parameters": {}
},
{
"time": "2026-03-10T14:54:45.303Z",
"user": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"event": "login_success",
"type": "login",
"login_type": "reauth",
"challenge_method": [
"none"
],
"is_suspicious": false,
"parameters": {
"login_type": "reauth",
"login_challenge_method": [
"none"
],
"is_suspicious": false
}
},
{
"time": "2026-03-10T14:54:34.365Z",
"user": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"event": "recovery_phone_edit",
"type": "recovery_info_change",
"login_type": "",
"challenge_method": "",
"is_suspicious": false,
"parameters": {}
},
{
"time": "2026-03-10T14:54:16.156Z",
"user": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"event": "recovery_email_edit",
"type": "recovery_info_change",
"login_type": "",
"challenge_method": "",
"is_suspicious": false,
"parameters": {}
},
{
"time": "2026-03-10T14:52:48.669Z",
"user": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"event": "login_success",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"password"
],
"is_suspicious": false
}
},
{
"time": "2026-03-10T14:52:39.251Z",
"user": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"event": "logout",
"type": "login",
"login_type": "google_password",
"challenge_method": "",
"is_suspicious": false,
"parameters": {
"login_type": "google_password"
}
},
{
"time": "2026-03-10T14:51:58.188Z",
"user": "jamese@lonestarelectrical.net",
"ip": "70.167.204.34",
"event": "login_success",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"password",
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"password",
"password"
],
"is_suspicious": false
}
},
{
"time": "2026-03-10T14:51:57.767Z",
"user": "jamese@lonestarelectrical.net",
"ip": "70.167.204.34",
"event": "password_edit",
"type": "password_change",
"login_type": "",
"challenge_method": "",
"is_suspicious": false,
"parameters": {}
},
{
"time": "2026-03-10T14:50:30.052Z",
"user": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"event": "login_success",
"type": "login",
"login_type": "reauth",
"challenge_method": [
"password",
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "reauth",
"login_challenge_method": [
"password",
"password"
],
"is_suspicious": false
}
},
{
"time": "2026-03-10T14:48:15.941Z",
"user": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"event": "login_success",
"type": "login",
"login_type": "reauth",
"challenge_method": [
"password",
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "reauth",
"login_challenge_method": [
"password",
"password"
],
"is_suspicious": false
}
},
{
"time": "2026-03-10T14:28:28.587Z",
"user": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"event": "login_success",
"type": "login",
"login_type": "reauth",
"challenge_method": [
"password",
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "reauth",
"login_challenge_method": [
"password",
"password"
],
"is_suspicious": false
}
},
{
"time": "2026-03-10T14:13:49.976Z",
"user": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"event": "login_failure",
"type": "login",
"login_type": "reauth",
"challenge_method": [
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "reauth",
"login_challenge_method": [
"password"
]
}
},
{
"time": "2026-03-10T14:11:19.919Z",
"user": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"event": "login_failure",
"type": "login",
"login_type": "reauth",
"challenge_method": [
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "reauth",
"login_challenge_method": [
"password"
]
}
},
{
"time": "2026-03-10T14:06:00.430Z",
"user": "jamese@lonestarelectrical.net",
"ip": "70.167.204.34",
"event": "login_success",
"type": "login",
"login_type": "exchange",
"challenge_method": [
"none"
],
"is_suspicious": false,
"parameters": {
"login_type": "exchange",
"login_challenge_method": [
"none"
],
"is_suspicious": false
}
},
{
"time": "2026-03-10T14:05:59.975Z",
"user": "jamese@lonestarelectrical.net",
"ip": "70.167.204.34",
"event": "password_edit",
"type": "password_change",
"login_type": "",
"challenge_method": "",
"is_suspicious": false,
"parameters": {}
},
{
"time": "2026-03-10T14:03:13.176Z",
"user": "jamese@lonestarelectrical.net",
"ip": "70.167.204.34",
"event": "login_success",
"type": "login",
"login_type": "reauth",
"challenge_method": [
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "reauth",
"login_challenge_method": [
"password"
],
"is_suspicious": false
}
},
{
"time": "2026-03-09T18:11:10.805Z",
"user": "office@lonestarelectrical.net",
"ip": "70.167.204.34",
"event": "login_failure",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"password"
]
}
},
{
"time": "2026-03-09T16:39:05.267Z",
"user": "joser@lonestarelectrical.net",
"ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
"event": "login_success",
"type": "login",
"login_type": "reauth",
"challenge_method": [
"none"
],
"is_suspicious": false,
"parameters": {
"login_type": "reauth",
"login_challenge_method": [
"none"
],
"is_suspicious": false
}
},
{
"time": "2026-03-09T16:38:17.519Z",
"user": "joser@lonestarelectrical.net",
"ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
"event": "login_success",
"type": "login",
"login_type": "reauth",
"challenge_method": [
"none"
],
"is_suspicious": false,
"parameters": {
"login_type": "reauth",
"login_challenge_method": [
"none"
],
"is_suspicious": false
}
},
{
"time": "2026-03-09T16:38:14.297Z",
"user": "joser@lonestarelectrical.net",
"ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
"event": "login_success",
"type": "login",
"login_type": "reauth",
"challenge_method": [
"none"
],
"is_suspicious": false,
"parameters": {
"login_type": "reauth",
"login_challenge_method": [
"none"
],
"is_suspicious": false
}
},
{
"time": "2026-03-09T16:35:34.305Z",
"user": "joser@lonestarelectrical.net",
"ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
"event": "login_success",
"type": "login",
"login_type": "reauth",
"challenge_method": [
"none"
],
"is_suspicious": false,
"parameters": {
"login_type": "reauth",
"login_challenge_method": [
"none"
],
"is_suspicious": false
}
},
{
"time": "2026-03-09T16:30:52.317Z",
"user": "joser@lonestarelectrical.net",
"ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
"event": "login_success",
"type": "login",
"login_type": "reauth",
"challenge_method": [
"device_prompt"
],
"is_suspicious": true,
"parameters": {
"login_type": "reauth",
"login_challenge_method": [
"device_prompt"
],
"is_suspicious": true
}
},
{
"time": "2026-03-09T16:30:52.317Z",
"user": "joser@lonestarelectrical.net",
"ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
"event": "risky_sensitive_action_allowed",
"type": "login",
"login_type": "reauth",
"challenge_method": [
"device_prompt"
],
"is_suspicious": true,
"parameters": {
"login_type": "reauth",
"login_challenge_method": [
"device_prompt"
],
"is_suspicious": true,
"sensitive_action_name": "Allowing an app access to Google data"
}
},
{
"time": "2026-03-09T16:30:52.317Z",
"user": "joser@lonestarelectrical.net",
"ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
"event": "login_challenge",
"type": "login",
"login_type": "reauth",
"challenge_method": [
"device_prompt"
],
"is_suspicious": false,
"parameters": {
"login_type": "reauth",
"login_challenge_method": [
"device_prompt"
],
"login_challenge_status": "passed"
}
},
{
"time": "2026-03-09T16:27:24.745Z",
"user": "joser@lonestarelectrical.net",
"ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
"event": "login_success",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"password"
],
"is_suspicious": false
}
},
{
"time": "2026-03-09T16:23:53.453Z",
"user": "amandab@lonestarelectrical.net",
"ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
"event": "logout",
"type": "login",
"login_type": "google_password",
"challenge_method": "",
"is_suspicious": false,
"parameters": {
"login_type": "google_password"
}
},
{
"time": "2026-03-09T16:23:53.453Z",
"user": "joser@lonestarelectrical.net",
"ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
"event": "logout",
"type": "login",
"login_type": "google_password",
"challenge_method": "",
"is_suspicious": false,
"parameters": {
"login_type": "google_password"
}
},
{
"time": "2026-03-09T16:19:32.599Z",
"user": "amandab@lonestarelectrical.net",
"ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
"event": "login_success",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"password"
],
"is_suspicious": false
}
},
{
"time": "2026-03-09T16:17:35.493Z",
"user": "joser@lonestarelectrical.net",
"ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
"event": "login_success",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"password"
],
"is_suspicious": false
}
},
{
"time": "2026-03-09T16:16:48.098Z",
"user": "amandab@lonestarelectrical.net",
"ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
"event": "logout",
"type": "login",
"login_type": "google_password",
"challenge_method": "",
"is_suspicious": false,
"parameters": {
"login_type": "google_password"
}
},
{
"time": "2026-03-09T16:14:28.629Z",
"user": "amandab@lonestarelectrical.net",
"ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
"event": "login_success",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"password"
],
"is_suspicious": false
}
},
{
"time": "2026-03-09T16:13:40.810Z",
"user": "joser@lonestarelectrical.net",
"ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
"event": "logout",
"type": "login",
"login_type": "google_password",
"challenge_method": "",
"is_suspicious": false,
"parameters": {
"login_type": "google_password"
}
},
{
"time": "2026-03-09T16:10:21.441Z",
"user": "amandab@lonestarelectrical.net",
"ip": "2600:1011:b065:2a9b:9d7b:53ec:a474:1ca8",
"event": "login_success",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"password"
],
"is_suspicious": false
}
},
{
"time": "2026-03-09T16:07:27.813Z",
"user": "joser@lonestarelectrical.net",
"ip": "2600:1011:b009:21fb:0:1b:dd42:8201",
"event": "login_success",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"password"
],
"is_suspicious": false
}
},
{
"time": "2026-03-09T14:53:26.289Z",
"user": "amandab@lonestarelectrical.net",
"ip": "70.167.204.34",
"event": "login_success",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"password"
],
"is_suspicious": false
}
},
{
"time": "2026-03-09T14:27:10.400Z",
"user": "office@lonestarelectrical.net",
"ip": "70.167.204.34",
"event": "login_success",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"password",
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"password",
"password"
],
"is_suspicious": false
}
},
{
"time": "2026-03-06T22:25:29.755Z",
"user": "office@lonestarelectrical.net",
"ip": "184.182.9.91",
"event": "login_success",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"password"
],
"is_suspicious": false
}
},
{
"time": "2026-03-05T18:52:13.758Z",
"user": "jamese@lonestarelectrical.net",
"ip": "142.252.244.71",
"event": "login_failure",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"none"
],
"is_suspicious": false,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"none"
]
}
},
{
"time": "2026-03-05T18:49:43.920Z",
"user": "jamese@lonestarelectrical.net",
"ip": "45.149.81.240",
"event": "login_success",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"password",
"device_prompt"
],
"is_suspicious": true,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"password",
"device_prompt"
],
"is_suspicious": true
}
},
{
"time": "2026-03-05T18:49:43.920Z",
"user": "jamese@lonestarelectrical.net",
"ip": "45.149.81.240",
"event": "login_challenge",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"device_prompt"
],
"is_suspicious": false,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"device_prompt"
],
"login_challenge_status": "passed"
}
},
{
"time": "2026-03-05T18:47:00.215Z",
"user": "jamese@lonestarelectrical.net",
"ip": "172.120.157.245",
"event": "login_success",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"password",
"device_prompt"
],
"is_suspicious": true,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"password",
"device_prompt"
],
"is_suspicious": true
}
},
{
"time": "2026-03-05T18:47:00.215Z",
"user": "jamese@lonestarelectrical.net",
"ip": "172.120.157.245",
"event": "login_challenge",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"device_prompt"
],
"is_suspicious": false,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"device_prompt"
],
"login_challenge_status": "passed"
}
},
{
"time": "2026-03-04T21:37:37.032Z",
"user": "robine@lonestarelectrical.net",
"ip": "70.167.204.34",
"event": "login_success",
"type": "login",
"login_type": "google_password",
"challenge_method": [
"password"
],
"is_suspicious": false,
"parameters": {
"login_type": "google_password",
"login_challenge_method": [
"password"
],
"is_suspicious": false
}
}
],
"signin_summary": {
"total_events": 45,
"unique_ips": 8,
"unique_users": 6,
"failed_logins": 4,
"suspicious_events": 4,
"ips": {
"2605:59c8:391a:2a10:9d32:751d:1cd5:60e6": 12,
"70.167.204.34": 10,
"2600:1011:b009:21fb:0:1b:dd42:8201": 16,
"2600:1011:b065:2a9b:9d7b:53ec:a474:1ca8": 1,
"184.182.9.91": 1,
"142.252.244.71": 1,
"45.149.81.240": 2,
"172.120.157.245": 2
},
"users": {
"sysadmin@lonestarelectrical.net": 12,
"jamese@lonestarelectrical.net": 11,
"office@lonestarelectrical.net": 3,
"joser@lonestarelectrical.net": 12,
"amandab@lonestarelectrical.net": 6,
"robine@lonestarelectrical.net": 1
}
},
"forwarding_rules": {
"amandab@lonestarelectrical.net": {
"enabled": false
},
"jamese@lonestarelectrical.net": {
"enabled": false
},
"jayc@lonestarelectrical.net": {
"enabled": false
},
"joser@lonestarelectrical.net": {
"enabled": false
},
"office@lonestarelectrical.net": {
"enabled": false
},
"robine@lonestarelectrical.net": {
"enabled": false
},
"russ@lonestarelectrical.net": {
"enabled": false
},
"sysadmin@lonestarelectrical.net": {
"enabled": false
},
"zachk@lonestarelectrical.net": {
"enabled": false
}
},
"oauth_grants": {
"amandab@lonestarelectrical.net": [
{
"app_name": "iOS",
"client_id": "450232826690-0rm6bs9d2fps9tifvk2oodh3tasd7vl7.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/carddav",
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.googleapis.com/auth/calendar",
"https://mail.google.com/"
],
"is_native": false
},
{
"app_name": "Otter",
"client_id": "517439599553-aflp6g0o205nu5keqvl84hv9aa9rfv90.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid"
],
"is_native": false
},
{
"app_name": "Google Chrome",
"client_id": "77185425430.apps.googleusercontent.com",
"scopes": [
"https://www.google.com/accounts/OAuthLogin"
],
"is_native": false
}
],
"jamese@lonestarelectrical.net": [
{
"app_name": "eBay",
"client_id": "510718330363-o9l5kjqoe03m24442jut61lfmb319f6o.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid"
],
"is_native": false
},
{
"app_name": "Dropbox",
"client_id": "801668726815.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid"
],
"is_native": false
},
{
"app_name": "Google Chrome",
"client_id": "77185425430.apps.googleusercontent.com",
"scopes": [
"https://www.google.com/accounts/OAuthLogin"
],
"is_native": false
}
],
"jayc@lonestarelectrical.net": [
{
"app_name": "iOS",
"client_id": "450232826690-0rm6bs9d2fps9tifvk2oodh3tasd7vl7.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/carddav",
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.googleapis.com/auth/calendar",
"https://mail.google.com/"
],
"is_native": false
},
{
"app_name": "Android device",
"client_id": "1070009224336-sdh77n7uot3oc99ais00jmuft6sk2fg9.apps.googleusercontent.com",
"scopes": [
"https://www.google.com/accounts/OAuthLogin"
],
"is_native": false
}
],
"joser@lonestarelectrical.net": [
{
"app_name": "Adobe Acrobat: PDF edit, convert, sign tools",
"client_id": "80763634447-d1i012v2eh8lnblrkliq9egb9ru3qs1c.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/drive.appdata",
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.googleapis.com/auth/drive.file",
"https://www.googleapis.com/auth/admin.directory.user.readonly"
],
"is_native": false
},
{
"app_name": "Adobe",
"client_id": "1014431251553-kq98rctnjtv76ag4ulrfkem43b74poni.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid"
],
"is_native": false
},
{
"app_name": "Android device",
"client_id": "1070009224336-sdh77n7uot3oc99ais00jmuft6sk2fg9.apps.googleusercontent.com",
"scopes": [
"https://www.google.com/accounts/OAuthLogin"
],
"is_native": false
},
{
"app_name": "Adobe Acrobat: PDF edit, convert, sign tools",
"client_id": "80763634447-20t38p96fvgmpf06gu6ieelookdomucu.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/drive.appdata",
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.googleapis.com/auth/drive.file",
"https://www.googleapis.com/auth/admin.directory.user.readonly"
],
"is_native": false
},
{
"app_name": "WhatsApp Messenger",
"client_id": "293955441834-jc0jr4nnng51vb1v0q8fea5af6i5sakt.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/drive.appdata",
"https://www.googleapis.com/auth/drive.file"
],
"is_native": false
},
{
"app_name": "Lumin PDF",
"client_id": "1031094922298-hcmpll8999ct57grncagnql87pnihmmi.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.googleapis.com/auth/drive.file",
"https://www.googleapis.com/auth/drive.install"
],
"is_native": false
}
],
"office@lonestarelectrical.net": [
{
"app_name": "iOS Account Manager",
"client_id": "936475272427.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.google.com/accounts/OAuthLogin"
],
"is_native": false
},
{
"app_name": "Adobe",
"client_id": "1014431251553-kq98rctnjtv76ag4ulrfkem43b74poni.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid"
],
"is_native": false
},
{
"app_name": "Google Chrome",
"client_id": "77185425430.apps.googleusercontent.com",
"scopes": [
"https://www.google.com/accounts/OAuthLogin"
],
"is_native": false
}
],
"robine@lonestarelectrical.net": [
{
"app_name": "iOS Account Manager",
"client_id": "936475272427.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.google.com/accounts/OAuthLogin"
],
"is_native": false
},
{
"app_name": "Google Chrome",
"client_id": "77185425430.apps.googleusercontent.com",
"scopes": [
"https://www.google.com/accounts/OAuthLogin"
],
"is_native": false
}
],
"russ@lonestarelectrical.net": [
{
"app_name": "iOS Account Manager",
"client_id": "936475272427.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.google.com/accounts/OAuthLogin"
],
"is_native": false
},
{
"app_name": "ZIP Extractor",
"client_id": "824911851129-6d64j0e08s86ih74l0lu386tqqfv71t9.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.googleapis.com/auth/drive.install"
],
"is_native": false
},
{
"app_name": "Adobe Acrobat Reader for PDF",
"client_id": "274857604095-sqsf888po17vsuqfl85lr7vmai97q1rg.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.googleapis.com/auth/drive",
"https://www.googleapis.com/auth/drive.metadata"
],
"is_native": false
},
{
"app_name": "Adobe Acrobat Reader for PDF",
"client_id": "274857604095-asa78mt6fu07nfv50ih3i83hdptire1h.apps.googleusercontent.com",
"scopes": [
"openid",
"https://www.googleapis.com/auth/drive",
"https://www.googleapis.com/auth/drive.metadata"
],
"is_native": false
},
{
"app_name": "Dropbox",
"client_id": "801668726815.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid"
],
"is_native": false
}
],
"sysadmin@lonestarelectrical.net": [
{
"app_name": "ManageEngine MDM",
"client_id": "227683630173-630qlm449rqurnc7srihq756k7vpftsq.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/admin.directory.orgunit.readonly",
"https://www.googleapis.com/auth/admin.directory.domain.readonly",
"https://www.googleapis.com/auth/admin.directory.user.security",
"https://www.googleapis.com/auth/admin.directory.user.readonly"
],
"is_native": false
}
],
"zachk@lonestarelectrical.net": [
{
"app_name": "Dropbox",
"client_id": "801668726815-5tdpfq2im4p7qpbm237h74s6123g6iga.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid"
],
"is_native": false
},
{
"app_name": "Android device",
"client_id": "1070009224336-sdh77n7uot3oc99ais00jmuft6sk2fg9.apps.googleusercontent.com",
"scopes": [
"https://www.google.com/accounts/OAuthLogin"
],
"is_native": false
}
]
},
"suspicious_oauth_apps": [
{
"user": "amandab@lonestarelectrical.net",
"app": "iOS",
"client_id": "450232826690-0rm6bs9d2fps9tifvk2oodh3tasd7vl7.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/carddav",
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.googleapis.com/auth/calendar",
"https://mail.google.com/"
]
},
{
"user": "amandab@lonestarelectrical.net",
"app": "Otter",
"client_id": "517439599553-aflp6g0o205nu5keqvl84hv9aa9rfv90.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid"
]
},
{
"user": "jamese@lonestarelectrical.net",
"app": "eBay",
"client_id": "510718330363-o9l5kjqoe03m24442jut61lfmb319f6o.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid"
]
},
{
"user": "jamese@lonestarelectrical.net",
"app": "Dropbox",
"client_id": "801668726815.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid"
]
},
{
"user": "jayc@lonestarelectrical.net",
"app": "iOS",
"client_id": "450232826690-0rm6bs9d2fps9tifvk2oodh3tasd7vl7.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/carddav",
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.googleapis.com/auth/calendar",
"https://mail.google.com/"
]
},
{
"user": "joser@lonestarelectrical.net",
"app": "Adobe Acrobat: PDF edit, convert, sign tools",
"client_id": "80763634447-d1i012v2eh8lnblrkliq9egb9ru3qs1c.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/drive.appdata",
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.googleapis.com/auth/drive.file",
"https://www.googleapis.com/auth/admin.directory.user.readonly"
]
},
{
"user": "joser@lonestarelectrical.net",
"app": "Adobe",
"client_id": "1014431251553-kq98rctnjtv76ag4ulrfkem43b74poni.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid"
]
},
{
"user": "joser@lonestarelectrical.net",
"app": "Adobe Acrobat: PDF edit, convert, sign tools",
"client_id": "80763634447-20t38p96fvgmpf06gu6ieelookdomucu.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/drive.appdata",
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.googleapis.com/auth/drive.file",
"https://www.googleapis.com/auth/admin.directory.user.readonly"
]
},
{
"user": "joser@lonestarelectrical.net",
"app": "WhatsApp Messenger",
"client_id": "293955441834-jc0jr4nnng51vb1v0q8fea5af6i5sakt.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/drive.appdata",
"https://www.googleapis.com/auth/drive.file"
]
},
{
"user": "joser@lonestarelectrical.net",
"app": "Lumin PDF",
"client_id": "1031094922298-hcmpll8999ct57grncagnql87pnihmmi.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.googleapis.com/auth/drive.file",
"https://www.googleapis.com/auth/drive.install"
]
},
{
"user": "office@lonestarelectrical.net",
"app": "iOS Account Manager",
"client_id": "936475272427.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.google.com/accounts/OAuthLogin"
]
},
{
"user": "office@lonestarelectrical.net",
"app": "Adobe",
"client_id": "1014431251553-kq98rctnjtv76ag4ulrfkem43b74poni.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid"
]
},
{
"user": "robine@lonestarelectrical.net",
"app": "iOS Account Manager",
"client_id": "936475272427.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.google.com/accounts/OAuthLogin"
]
},
{
"user": "russ@lonestarelectrical.net",
"app": "iOS Account Manager",
"client_id": "936475272427.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.google.com/accounts/OAuthLogin"
]
},
{
"user": "russ@lonestarelectrical.net",
"app": "ZIP Extractor",
"client_id": "824911851129-6d64j0e08s86ih74l0lu386tqqfv71t9.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.googleapis.com/auth/drive.install"
]
},
{
"user": "russ@lonestarelectrical.net",
"app": "Adobe Acrobat Reader for PDF",
"client_id": "274857604095-sqsf888po17vsuqfl85lr7vmai97q1rg.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid",
"https://www.googleapis.com/auth/drive",
"https://www.googleapis.com/auth/drive.metadata"
]
},
{
"user": "russ@lonestarelectrical.net",
"app": "Adobe Acrobat Reader for PDF",
"client_id": "274857604095-asa78mt6fu07nfv50ih3i83hdptire1h.apps.googleusercontent.com",
"scopes": [
"openid",
"https://www.googleapis.com/auth/drive",
"https://www.googleapis.com/auth/drive.metadata"
]
},
{
"user": "russ@lonestarelectrical.net",
"app": "Dropbox",
"client_id": "801668726815.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid"
]
},
{
"user": "sysadmin@lonestarelectrical.net",
"app": "ManageEngine MDM",
"client_id": "227683630173-630qlm449rqurnc7srihq756k7vpftsq.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/admin.directory.orgunit.readonly",
"https://www.googleapis.com/auth/admin.directory.domain.readonly",
"https://www.googleapis.com/auth/admin.directory.user.security",
"https://www.googleapis.com/auth/admin.directory.user.readonly"
]
},
{
"user": "zachk@lonestarelectrical.net",
"app": "Dropbox",
"client_id": "801668726815-5tdpfq2im4p7qpbm237h74s6123g6iga.apps.googleusercontent.com",
"scopes": [
"https://www.googleapis.com/auth/userinfo.profile",
"https://www.googleapis.com/auth/userinfo.email",
"openid"
]
}
],
"password_changes": [
{
"time": "2026-03-10T14:39:28.502Z",
"actor": "sysadmin@lonestarelectrical.net",
"target": "jamese@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"type": "Admin Reset",
"event_name": "CHANGE_PASSWORD"
},
{
"time": "2026-03-10T14:51:57.767Z",
"actor": "jamese@lonestarelectrical.net",
"target": "jamese@lonestarelectrical.net",
"ip": "70.167.204.34",
"type": "Self-Service",
"event_name": "password_edit"
},
{
"time": "2026-03-10T14:05:59.975Z",
"actor": "jamese@lonestarelectrical.net",
"target": "jamese@lonestarelectrical.net",
"ip": "70.167.204.34",
"type": "Self-Service",
"event_name": "password_edit"
}
],
"admin_activity": [
{
"time": "2026-03-10T15:45:38.235Z",
"event": "AUTHORIZE_API_CLIENT_ACCESS",
"type": "DOMAIN_SETTINGS",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"DOMAIN_NAME": "",
"API_CLIENT_NAME": "102231607889615995452",
"API_SCOPES": "https://www.googleapis.com/auth/admin.directory.user,https://www.googleapis.com/auth/admin.directory.user.security,https://www.googleapis.com/auth/admin.reports.audit.readonly,https://www.googleapis.com/auth/gmail.readonly,https://www.googleapis.com/auth/gmail.settings.basic,https://www.googleapis.com/auth/drive.readonly,https://www.googleapis.com/auth/admin.directory.domain.readonly"
},
"is_critical": true
},
{
"time": "2026-03-10T15:35:24.178Z",
"event": "ALERT_CENTER_VIEW",
"type": "ALERT_CENTER",
"actor": "jamese@lonestarelectrical.net",
"ip": "70.167.204.34",
"target_user": "",
"parameters": {
"ALERT_ID": "50175eb0-76b5-4dff-8dc6-f9c780d4e169,8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,e75a0b04-cc31-434e-9e96-e65e934aad51"
},
"is_critical": false
},
{
"time": "2026-03-10T15:23:07.279Z",
"event": "SECURITY_INVESTIGATION_QUERY",
"type": "SECURITY_INVESTIGATION",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"INVESTIGATION_DATA_SOURCE": "USER LOG EVENTS",
"INVESTIGATION_QUERY": "(EVENT EQUALS [ACCOUNT_DISABLED_PASSWORD_LEAK]) AND (USER = [\"jamese@lonestarelectrical.net\"])"
},
"is_critical": false
},
{
"time": "2026-03-10T15:21:26.797Z",
"event": "SECURITY_INVESTIGATION_QUERY",
"type": "SECURITY_INVESTIGATION",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"INVESTIGATION_DATA_SOURCE": "DRIVE LOG EVENTS",
"INVESTIGATION_QUERY": "(ACTOR = [\"jamese@lonestarelectrical.net\"]) AND (EVENT EQUALS [DOWNLOAD])"
},
"is_critical": false
},
{
"time": "2026-03-10T15:20:12.091Z",
"event": "SECURITY_INVESTIGATION_QUERY",
"type": "SECURITY_INVESTIGATION",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"INVESTIGATION_DATA_SOURCE": "GMAIL LOG EVENTS",
"INVESTIGATION_QUERY": "(TO (ENVELOPE) = [\"jamese@lonestarelectrical.net\"]) AND (TRAFFIC SOURCE EQUALS [EXTERNAL_DOMAIN])"
},
"is_critical": false
},
{
"time": "2026-03-10T15:02:07.634Z",
"event": "DRIVE_DATA_RESTORE",
"type": "DOCS_SETTINGS",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "jamese@lonestarelectrical.net",
"parameters": {
"USER_EMAIL": "jamese@lonestarelectrical.net",
"BEGIN_DATE_TIME": "2026/03/01 07:00 UTC",
"END_DATE_TIME": "2026/03/10 15:02 UTC"
},
"is_critical": false
},
{
"time": "2026-03-10T15:01:54.212Z",
"event": "EMAIL_UNDELETE",
"type": "EMAIL_SETTINGS",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "jamese@lonestarelectrical.net",
"parameters": {
"USER_EMAIL": "jamese@lonestarelectrical.net",
"START_DATE": "2026/03/01 07:00 UTC",
"END_DATE": "2026/03/10 15:01 UTC"
},
"is_critical": false
},
{
"time": "2026-03-10T15:00:35.671Z",
"event": "TERMS_OF_SERVICE_ACCEPTED",
"type": "POLICY",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "N/A",
"target_user": "",
"parameters": {
"TERMS_OF_SERVICE_NAMES": "Chrome Service License Agreement"
},
"is_critical": false
},
{
"time": "2026-03-10T14:59:49.274Z",
"event": "SECURITY_INVESTIGATION_QUERY",
"type": "SECURITY_INVESTIGATION",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"INVESTIGATION_DATA_SOURCE": "ACCESS EVALUATION LOG EVENTS",
"INVESTIGATION_QUERY": "(DATE > 2026-03-03T14:58:55Z) AND (ACTOR CONTAINS [\"jamese@lonestarelectrical.net\"])"
},
"is_critical": false
},
{
"time": "2026-03-10T14:58:57.238Z",
"event": "SECURITY_INVESTIGATION_QUERY",
"type": "SECURITY_INVESTIGATION",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"INVESTIGATION_DATA_SOURCE": "ACCESS EVALUATION LOG EVENTS",
"INVESTIGATION_QUERY": "DATE > 2026-03-03T14:58:55Z"
},
"is_critical": false
},
{
"time": "2026-03-10T14:58:33.189Z",
"event": "SECURITY_INVESTIGATION_QUERY",
"type": "SECURITY_INVESTIGATION",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"INVESTIGATION_DATA_SOURCE": "ADMIN LOG EVENTS",
"INVESTIGATION_QUERY": "USER EMAIL CONTAINS [\"jamese@lonestarelectrical.net\"]"
},
"is_critical": false
},
{
"time": "2026-03-10T14:58:08.868Z",
"event": "SECURITY_INVESTIGATION_QUERY",
"type": "SECURITY_INVESTIGATION",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"INVESTIGATION_DATA_SOURCE": "ADMIN LOG EVENTS",
"INVESTIGATION_QUERY": "(empty)"
},
"is_critical": false
},
{
"time": "2026-03-10T14:57:43.270Z",
"event": "SECURITY_INVESTIGATION_QUERY",
"type": "SECURITY_INVESTIGATION",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"INVESTIGATION_DATA_SOURCE": "USER LOG EVENTS",
"INVESTIGATION_QUERY": "(EVENT EQUALS [SUSPICIOUS_LOGIN]) AND (USER = [\"jamese@lonestarelectrical.net\"])"
},
"is_critical": false
},
{
"time": "2026-03-10T14:56:41.352Z",
"event": "CREATE_APPLICATION_SETTING",
"type": "APPLICATION_SETTINGS",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"APPLICATION_NAME": "Security",
"ORG_UNIT_NAME": "lonestarelectrical.net",
"SETTING_NAME": "Skip password enrollment state",
"NEW_VALUE": "allow",
"APPLICATION_EDITION": "standard"
},
"is_critical": true
},
{
"time": "2026-03-10T14:55:41.403Z",
"event": "ALLOW_STRONG_AUTHENTICATION",
"type": "SECURITY_SETTINGS",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"OLD_VALUE": "INHERIT_FROM_PARENT",
"NEW_VALUE": "true",
"ORG_UNIT_NAME": "lonestarelectrical.net"
},
"is_critical": false
},
{
"time": "2026-03-10T14:55:41.403Z",
"event": "ENFORCE_STRONG_AUTHENTICATION",
"type": "SECURITY_SETTINGS",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"OLD_VALUE": "INHERIT_FROM_PARENT",
"NEW_VALUE": "true",
"ORG_UNIT_NAME": "lonestarelectrical.net"
},
"is_critical": false
},
{
"time": "2026-03-10T14:55:41.403Z",
"event": "CHANGE_TWO_STEP_VERIFICATION_FREQUENCY",
"type": "SECURITY_SETTINGS",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"OLD_VALUE": "INHERIT_FROM_PARENT",
"NEW_VALUE": "ENABLE_USERS_TO_TRUST_DEVICE",
"ORG_UNIT_NAME": "lonestarelectrical.net"
},
"is_critical": false
},
{
"time": "2026-03-10T14:55:41.403Z",
"event": "CHANGE_TWO_STEP_VERIFICATION_ENROLLMENT_PERIOD_DURATION",
"type": "SECURITY_SETTINGS",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"OLD_VALUE": "INHERIT_FROM_PARENT",
"NEW_VALUE": "1 week",
"ORG_UNIT_NAME": "lonestarelectrical.net"
},
"is_critical": false
},
{
"time": "2026-03-10T14:55:41.403Z",
"event": "CHANGE_TWO_STEP_VERIFICATION_GRACE_PERIOD_DURATION",
"type": "SECURITY_SETTINGS",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"OLD_VALUE": "INHERIT_FROM_PARENT",
"NEW_VALUE": "1 day",
"ORG_UNIT_NAME": "lonestarelectrical.net"
},
"is_critical": false
},
{
"time": "2026-03-10T14:55:41.403Z",
"event": "CHANGE_ALLOWED_TWO_STEP_VERIFICATION_METHODS",
"type": "SECURITY_SETTINGS",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"ALLOWED_TWO_STEP_VERIFICATION_METHOD": "ANY",
"ORG_UNIT_NAME": "lonestarelectrical.net"
},
"is_critical": true
},
{
"time": "2026-03-10T14:55:41.403Z",
"event": "CHANGE_TWO_STEP_VERIFICATION_START_DATE",
"type": "SECURITY_SETTINGS",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"OLD_VALUE": "INHERIT_FROM_PARENT",
"NEW_VALUE": "2026-03-10",
"ORG_UNIT_NAME": "lonestarelectrical.net"
},
"is_critical": false
},
{
"time": "2026-03-10T14:55:21.798Z",
"event": "ALERT_CENTER_VIEW",
"type": "ALERT_CENTER",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"ALERT_ID": "50175eb0-76b5-4dff-8dc6-f9c780d4e169,8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,e75a0b04-cc31-434e-9e96-e65e934aad51"
},
"is_critical": false
},
{
"time": "2026-03-10T14:53:04.844Z",
"event": "ALERT_CENTER_VIEW",
"type": "ALERT_CENTER",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"ALERT_ID": "50175eb0-76b5-4dff-8dc6-f9c780d4e169,8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,e75a0b04-cc31-434e-9e96-e65e934aad51"
},
"is_critical": false
},
{
"time": "2026-03-10T14:50:33.065Z",
"event": "ALERT_CENTER_VIEW",
"type": "ALERT_CENTER",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"ALERT_ID": "50175eb0-76b5-4dff-8dc6-f9c780d4e169,8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,e75a0b04-cc31-434e-9e96-e65e934aad51"
},
"is_critical": false
},
{
"time": "2026-03-10T14:39:28.502Z",
"event": "CHANGE_PASSWORD",
"type": "USER_SETTINGS",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "jamese@lonestarelectrical.net",
"parameters": {
"USER_EMAIL": "jamese@lonestarelectrical.net"
},
"is_critical": true
},
{
"time": "2026-03-10T14:39:28.502Z",
"event": "CHANGE_PASSWORD_ON_NEXT_LOGIN",
"type": "USER_SETTINGS",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "jamese@lonestarelectrical.net",
"parameters": {
"USER_EMAIL": "jamese@lonestarelectrical.net",
"OLD_VALUE": "false",
"NEW_VALUE": "true"
},
"is_critical": false
},
{
"time": "2026-03-10T14:37:02.854Z",
"event": "GENERATE_CERTIFICATE",
"type": "CERTIFICATE_SETTINGS",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"CERTIFICATE_NAME": "Google_2031-3-9-7372_SAML2.0",
"CERTIFICATE_TYPE": "SAML_IDP"
},
"is_critical": false
},
{
"time": "2026-03-10T14:34:21.240Z",
"event": "ALERT_CENTER_VIEW",
"type": "ALERT_CENTER",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
},
"is_critical": false
},
{
"time": "2026-03-10T14:31:50.725Z",
"event": "ALERT_CENTER_VIEW",
"type": "ALERT_CENTER",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
},
"is_critical": false
},
{
"time": "2026-03-10T14:29:39.072Z",
"event": "ALERT_CENTER_VIEW",
"type": "ALERT_CENTER",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
},
"is_critical": false
},
{
"time": "2026-03-10T14:28:31.680Z",
"event": "ALERT_CENTER_VIEW",
"type": "ALERT_CENTER",
"actor": "sysadmin@lonestarelectrical.net",
"ip": "2605:59c8:391a:2a10:9d32:751d:1cd5:60e6",
"target_user": "",
"parameters": {
"ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
},
"is_critical": false
},
{
"time": "2026-02-20T21:59:18.512Z",
"event": "ALERT_CENTER_VIEW",
"type": "ALERT_CENTER",
"actor": "jamese@lonestarelectrical.net",
"ip": "70.167.204.34",
"target_user": "",
"parameters": {
"ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
},
"is_critical": false
},
{
"time": "2026-02-20T21:58:52.553Z",
"event": "ALERT_CENTER_VIEW",
"type": "ALERT_CENTER",
"actor": "jamese@lonestarelectrical.net",
"ip": "70.167.204.34",
"target_user": "",
"parameters": {
"ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
},
"is_critical": false
},
{
"time": "2026-02-20T21:53:26.066Z",
"event": "ALERT_CENTER_VIEW",
"type": "ALERT_CENTER",
"actor": "jamese@lonestarelectrical.net",
"ip": "70.167.204.34",
"target_user": "",
"parameters": {
"ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
},
"is_critical": false
},
{
"time": "2026-02-18T14:21:26.273Z",
"event": "USER_LICENSE_REVOKE",
"type": "LICENSES_SETTINGS",
"actor": "N/A",
"ip": "N/A",
"target_user": "louiem@lonestarelectrical.net",
"parameters": {
"USER_EMAIL": "louiem@lonestarelectrical.net",
"PRODUCT_NAME": "Google Workspace",
"OLD_VALUE": "Google Workspace Business Standard"
},
"is_critical": false
},
{
"time": "2026-02-18T14:21:24.044Z",
"event": "USER_LICENSE_ASSIGNMENT",
"type": "LICENSES_SETTINGS",
"actor": "N/A",
"ip": "N/A",
"target_user": "louiem@lonestarelectrical.net",
"parameters": {
"USER_EMAIL": "louiem@lonestarelectrical.net",
"PRODUCT_NAME": "Google Workspace Archived User",
"NEW_VALUE": "Google Workspace Business Standard - Archived User"
},
"is_critical": false
},
{
"time": "2026-02-18T14:21:21.991Z",
"event": "ARCHIVE_USER",
"type": "USER_SETTINGS",
"actor": "jamese@lonestarelectrical.net",
"ip": "70.167.204.34",
"target_user": "louiem@lonestarelectrical.net",
"parameters": {
"USER_EMAIL": "louiem@lonestarelectrical.net"
},
"is_critical": false
},
{
"time": "2026-02-18T14:04:35.786Z",
"event": "ALERT_CENTER_VIEW",
"type": "ALERT_CENTER",
"actor": "jamese@lonestarelectrical.net",
"ip": "70.167.204.34",
"target_user": "",
"parameters": {
"ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
},
"is_critical": false
},
{
"time": "2026-02-18T14:03:40.102Z",
"event": "ALERT_CENTER_VIEW",
"type": "ALERT_CENTER",
"actor": "jamese@lonestarelectrical.net",
"ip": "70.167.204.34",
"target_user": "",
"parameters": {
"ALERT_ID": "8053c8a1-1c08-483b-a154-b5f2f486a729,81d4655d-76f0-48c6-a26a-e2a75d43c078,d6ea1af5-e21d-4af0-980d-f491a1b7a0c5,e75a0b04-cc31-434e-9e96-e65e934aad51"
},
"is_critical": false
}
],
"gmail_delegation": {}
}
Reference in New Issue View Git Blame Copy Permalink