Pegasus Technology Solutions

Member: Scout Kalra Time Review

Time Sheet: 9418
Period - 06/01/2025
Charge To Mon Tue Wed Thu Fri Sat Sun Total
06/01 07/01 08/01 09/01 10/01 11/01 12/01
Quest Events/ Wireshark 0.00 0.20 0.00 0.00 0.00 0.00 0.00 0.20
Protocol Analyzer Detected on
DESKTEAM for Quest Events
(Managed SOC) - 3596495
(Service)
Integris Solutions/ Issues with 0.00 0.28 0.00 0.00 0.00 0.00 0.00 0.28
logging into VPN. (Service)
Quest Events/ Issues with 0.00 0.00 0.00 1.28 0.22 0.00 0.00 1.50
sending attachments on new
Outlook. (Service)
Communities Foundation of 0.00 0.00 0.00 0.00 0.48 0.00 0.00 0.48
Texas/ Datto AV Detected
TR/BetaBot.xgnlo on conf-
liveoak for Communities
Foundation of Texas
(Managed ... (Service)
Pegasus Technology 0.13 0.10 0.13 0.00 0.00 0.00 0.00 0.36
Solutions/ Daily Service Desk
Huddle (Service)
GMi Texas/ Endpoint Backup 0.00 0.00 0.00 0.00 0.14 0.00 0.00 0.14
Agent (GMILT149) Backup
Failed for Client (GMI Texas) -
*Processing* (Service)
Signature Systems Group/ 0.25 0.00 0.00 0.00 0.00 0.00 0.00 0.25
Wireshark Protocol Analyzer
Detected on ORF-FA01 for
Signature Systems Group
(Managed SOC) - 359...
(Service)
Quest Events/ Issues with 0.00 0.00 1.88 0.19 0.00 0.00 0.00 2.07
emails not deleting or sending
of emails as well. (Service)
Payroll Wrap (Charge Code) 1.76 2.20 1.28 2.00 1.63 0.00 0.00 8.87

Pegasus Technology 0.00 0.00 0.00 0.98 0.00 0.00 0.00 0.98
Solutions/ CFT - Entra/Intune
Setup & Device Migration
(Service)
Quest Events/ Inquiry - FTP 0.00 0.00 0.72 0.00 0.15 0.00 0.00 0.87
Account (Service)
Core Group Business 0.00 0.00 0.00 0.00 0.30 0.00 0.00 0.30
Management/ "Security Threat
detected, '9600294' - 'Infocyte
alert' (Threat Hunting) for
ws01" (Service)
Duraplas/ Help (Service) 0.00 0.00 0.00 0.00 0.58 0.00 0.00 0.58

Construction Education 0.00 0.56 0.00 0.00 0.00 0.00 0.00 0.56
Foundation/ FW: Help With A
Solution (Service)

Confidential Page 1 of 18 Fri 31/01/2025 13:30 UTC-06

Charge To Mon Tue Wed Thu Fri Sat Sun Total
06/01 07/01 08/01 09/01 10/01 11/01 12/01
Communities Foundation of 0.00 0.52 0.00 0.00 0.00 0.00 0.00 0.52
Texas/ "CPU Usage reached
100% (95.0 % Used for 10
mins) for CFT-DAL-WAD01"
(Service)
Pegasus Technology 0.00 0.00 0.65 0.00 0.00 0.00 0.00 0.65
Solutions/ Quarterly Backup
Review & Test Restore
(Service)
Texadia Systems/ "C: Drive 0.00 0.00 0.64 0.00 0.00 0.00 0.00 0.64
has 448.7 GB used out of
449.4 GB (100% Used) (has
passed 98.0 % Used for 5
mins) for TXSY (Service)
Quest Events/ SERVER 0.00 0.00 0.00 0.00 1.65 0.00 0.00 1.65
ACCESS (Service)
Quest Events/ "Security 0.00 0.00 0.00 0.00 0.57 0.00 0.00 0.57
Threat detected, '9602068' -
'Infocyte alert' (Threat
Hunting) for EWRDS01"
(Service)
Signature Systems Group/ 0.70 0.00 0.00 0.00 0.00 0.00 0.00 0.70
Wireshark Protocol Analyzer
Detected on ORF-FA01 for
Signature Systems Group
(Managed SOC) - 352...
(Service)
Northgate Construction/ FW: 0.00 0.21 0.00 0.00 0.00 0.00 0.00 0.21
Invoice #14447 from Pegasus
Technology Solutions
(Service)
Texadia Systems/ Warning- 0.00 0.28 0.32 0.00 0.00 0.00 0.00 0.60
Network Element Offline (AP):
[email protected]
(Service)
GMi Texas/ Re: Ready for 0.00 0.84 0.00 0.46 0.00 0.00 0.00 1.30
Service Notice for Dedicated
Internet Access (DIA) on
Order 10167014 (Service)
Communities Foundation of 0.00 0.43 0.00 0.00 0.00 0.00 0.00 0.43
Texas/ "Security Threat
detected, '8969179' - 'Infocyte
alert' (Threat Hunting) for
CONF-COWBOYS" (Service)
Gordon & Sykes LLP/ Needs to 0.00 0.00 0.00 0.77 0.00 0.00 0.00 0.77
be setup with remote
connection to their station.
(Service)
MMC Group LP/ "Security 0.27 0.00 0.00 0.00 0.00 0.00 0.00 0.27
Threat detected, '9567624' -
'Detected threat through
malware analysis' (Threat
Hunting) f (Service)
Signature Systems Group/ 0.00 0.00 0.52 0.00 0.00 0.00 0.00 0.52
FW: Azure license quote
(Service)

Confidential Page 2 of 18 Fri 31/01/2025 13:30 UTC-06

Charge To Mon Tue Wed Thu Fri Sat Sun Total
06/01 07/01 08/01 09/01 10/01 11/01 12/01
Duraplas/ Email Tracking 0.35 0.00 0.00 0.00 0.00 0.00 0.00 0.35
(Service)
Quest Events/ Micaela Hill IT 0.00 0.83 0.00 0.00 0.00 0.00 0.00 0.83
Offboarding (Service)
HBA Design Build, LLC/ Ray 0.00 0.00 1.86 0.00 0.00 0.00 0.00 1.86
Maese - One Drive and
Outlook Email Not Responding
(Service)
Texadia Systems/ H202 error 0.00 0.00 0.00 0.82 0.00 0.00 0.00 0.82
on Quickbooks. (Service)
Communities Foundation of 0.00 0.00 0.00 0.58 0.98 0.00 0.00 1.56
Texas/ New Call from NOC
Emergency - DBROT,ARTURO
(469) 348-4534 (Service)
Gordon & Sykes LLP/ 0.37 0.00 0.00 0.00 0.00 0.00 0.00 0.37
Wireshark Protocol Analyzer
Detected on SRV-FS02 for
Gordon & Sykes LLP
(Managed SOC) - 3603954
(Service)
Duraplas/ "Device went Offline 0.60 0.00 0.00 0.00 0.00 0.00 0.00 0.60
(Offline for 45 mins) for
MAXILIFT-ERA" (Service)
Quest Events/ IT Offboarding 0.00 0.46 0.00 0.00 0.00 0.00 0.00 0.46
for Nicole Mayer, EW MB
Client Relations Manager
(Service)
Shields Legal Group/ Datto AV 0.00 0.00 0.00 0.59 0.00 0.00 0.00 0.59
Detected
W2000M/Agent.44730438 on
slg-cxd-fs01 for Shields Legal
Group (Managed SOC) - ...
(Service)
Quest Events/ Possible Log4j 0.00 0.27 0.00 0.00 0.00 0.00 0.00 0.27
Vulnerability Detected on ATL-
M-DELL-01 for Quest Events
(Managed SOC) - 3496645
(Service)
Beck Technology/ "C: Drive 0.00 0.00 0.00 0.00 0.37 0.00 0.00 0.37
has 459.9 GB used out of
476.2 GB (97% Used)
(SYSTEM_VOLUME drive has
passed 95.0 % Used f
(Service)
GMi Texas/ Decomission 0.00 0.82 0.00 0.00 0.00 0.00 0.00 0.82
Laptop GMILT186 (Service)
Quest Events/ Meraki Cloud 0.00 0.00 0.00 0.33 0.00 0.00 0.00 0.33
License renewal for
organization: EventWorks
(Service)
Quest Events/ Google Chrome 0.99 0.00 0.00 0.00 0.00 0.00 0.00 0.99
Issue and Pegasus (Service)

Confidential Page 3 of 18 Fri 31/01/2025 13:30 UTC-06

Charge To Mon Tue Wed Thu Fri Sat Sun Total
06/01 07/01 08/01 09/01 10/01 11/01 12/01
Duraplas/ Issues with the 1.41 0.00 0.00 0.00 0.00 0.00 0.00 1.41
internet, 500 internal server
error, Duraplas_TR username,
Maxi-1412. (Service)
Shields Legal Group/ "Security 0.00 0.00 0.00 0.00 0.45 0.00 0.00 0.45
Threat detected, '9598984' -
'Infocyte alert' (Threat
Hunting) for SLG-CXD-FS01"
(Service)
Albin Oldner Law/ Quarterly 0.55 0.00 0.00 0.00 0.00 0.00 0.00 0.55
Backup Review & Test Restore
(Service)
The Sweeney Company/ Minor 0.49 0.00 0.00 0.00 0.00 0.00 0.00 0.49
- Datto EDR Detected
clear.exe on tswc-ws-003 for
The Sweeney Company
(Managed SOC) - 3602884
(Service)
National Roofing Partners/ PC 0.13 0.00 0.00 0.00 0.00 0.00 0.00 0.13
problems (Service)
Texadia Systems/ reset 0.00 0.00 0.00 0.00 0.48 0.00 0.00 0.48
password Michael Flores
(Service)
Total: 8.00 8.00 8.00 8.00 8.00 0.00 0.00 40.00
Hours Billable: 30.77
Hours NonBillable:
9.23
Percent Billable:
76.93%

Scout Kalra
Mon, 06/01/2025

Start/End Charge To Work Role Work Type Billable Hours

Company: Pegasus Technology Solutions MSP - Technician Payroll Wrap No 1.76
Charge Code: Payroll Wrap
Notes: Payroll Wrap
07:00 - 07:45 Company: Albin Oldner Law / Quarterly Backup Review & Test Restore MSP - Technician Remote Support Yes 0.55
Notes: Checked in Axcient and found nothing there
No server is being backed up there
Checked in Azure and same thing
Checked in glue and it says it is 2 servers are being backed up in Axcient but nothing is there in Axcient

Zach mentioned about backups being moved to Datto

Checking with Zach if this client has been moved.
Zach confirmed backup has been moved to Datto for this client and was successful

I currently do not have access to manage backups in datto

Checking with Travis for that

Confidential Page 4 of 18 Fri 31/01/2025 13:30 UTC-06

Scout Kalra
Mon, 06/01/2025

Start/End Charge To Work Role Work Type Billable Hours

08:14 - 10:03 Company: Signature Systems Group / Wireshark Protocol Analyzer Detected on ORF- MSP - Technician Remote Support Yes 0.70
FA01 for Signature Systems Group (Managed SOC) - 352...
Notes: Logged into the server
Checked Wireshark was installed in 2023
Alert is probably generated now
Checked the device was spyware and malware and found nothing
Checked event logs and no suspicious activity found and no Wireshark events have been found
Uninstalled wireshark
08:24 - 09:22 Company: Duraplas / Issues with the internet, 500 internal server error, Duraplas_TR MSP - Technician Remote Support Yes 0.86
username, Maxi-1412.
Notes: Called John first and spoke with him
he gave me the background that there is only one machine in the TR Building which is maxi-1412 and Preston and Ricky are not able to open any
webpages on it
He spoke to AT&T and they confirmed there is no outage but can send someone to check the router
But John wanted us to check the machine first if anything is wrong with the PC itself
Called Preston
Saw that device shows offline in datto
Computer is connected via ethernet cable and shows connected at the bottom
Asked Preston to open google.com and it gave error not connected
Not able to open any webpage on any browser
asked to unplug and re plug cable and same thing
Asked to restart computer but same thing
checked drivers and all drivers are up to date
Checked network and DNS settings and settings are also fine
did ping tests and can't even ping 8.8.8.8
Did nslookup and that also failed
Machine is not connected to internet at all
Asked if they have any other ethernet cable that we can try but they don't know where the other cable is or where the router is
Called John again to let him know but he is not picking now
Sending email to John
Drafted and sent email
09:33 - 09:41 Company: Pegasus Technology Solutions / Daily Service Desk Huddle MSP - Technician Staff Meeting No 0.13
Notes: Huddle
09:59 - 10:28 Company: National Roofing Partners / PC problems MSP - Technician Remote Support Yes 0.13
Notes: Called user. Got no response. Sending email.
Drafted and sent email
10:30 - 12:45 Company: Duraplas / "Device went Offline (Offline for 45 mins) for MAXILIFT-ERA" MSP - Technician Remote Support Yes 0.60
Notes: Called John and he is not aware why this server is offline and said to ask Ramirez
Asked Michael and he said he was working on the internet and not on the servers
Checked server is offline and not reachable via other servers
Hosted on Vmware
Logged into the ESXI and saw server is powered off
switched on the server
Logged into the server and things look good

Confidential Page 5 of 18 Fri 31/01/2025 13:30 UTC-06

Scout Kalra
Mon, 06/01/2025

Start/End Charge To Work Role Work Type Billable Hours

10:51 - 11:24 Company: Duraplas / Issues with the internet, 500 internal server error, Duraplas_TR MSP - Technician Remote Support Yes 0.55
username, Maxi-1412.
Notes: John called back stating that PC has Wi-Fi Capabilities as it's a OptiPlex Micro 7010 with Wifi Antena attached
Called Preston to try and connect the PC to wifi but got no response
Tried calling Ricky but got no response
Sending email to Preston as he has access to emails on his phone
Drafted and sent email
12:31 - 12:53 Company: Quest Events / Google Chrome Issue and Pegasus MSP - Technician Remote Support Yes 0.12
Notes: Called Cory. He said he is not available at the moment and would like to reschedule for 3 EST.
Scheduling accordingly
12:45 - 13:40 Company: The Sweeney Company / Minor - Datto EDR Detected clear.exe on tswc- MSP - Technician Remote Support Yes 0.49
ws-003 for The Sweeney Company (Managed SOC) - 3602884
Notes: checked the path and deleted the file mentioned
looked for malware and threats and found nothing else
PC looks good now
13:33 - 13:43 Company: Duraplas / Email Tracking MSP - Technician Communication Yes 0.13
s
Notes: Mariana,

I trust this message finds you well. I attempted to contact you, but regrettably, we were unable to connect.

If it aligns with your schedule, I kindly request you to consider returning our call at your earliest convenience. Our contact number is 972-332-4141. I ama
available to provide assistance within the next 5 - 10 minutes, should that be convenient for you.

Alternatively, to accommodate your schedule more effectively, I can facilitate the scheduling of a meeting through TimeZest. This would enable us to
dedicate the necessary time to thoroughly address and resolve the outstanding matter.

Thank you for your understanding, and I look forward to the opportunity to assist you.

Warm Regards,
Scout Kalra

13:43 - 13:59 Company: Duraplas / Email Tracking MSP - Technician Remote Support Yes 0.22
Notes: called on the number mentioned but could not connect
Sent email
Waited for the callback
Got no response.
Sending TZ.

Confidential Page 6 of 18 Fri 31/01/2025 13:30 UTC-06

Scout Kalra
Mon, 06/01/2025

Start/End Charge To Work Role Work Type Billable Hours

14:00 - 14:52 Company: Quest Events / Google Chrome Issue and Pegasus MSP - Technician Remote Support Yes 0.87
Notes: Called Cory. Connected to this laptop.
his payrol webpage was not opening and was giving the error attached occasionally
He mentioned it works in edge
Cleared cache
Cleared temp files
Ran sfc /scannow
uninstalled chrome
Restarted
Installed chrome
Made a fresh bookmark and the webpage is opening fine now
Regarding the PTS ticket option in datto: discussed with Marie and she confirmed it is because of datto migration
Told the user that it is currently not there because of migration and will be there once migration is completed and it has been fixed
Drafted and sent email
14:52 - 15:14 Company: Gordon & Sykes LLP / Wireshark Protocol Analyzer Detected on SRV-FS02 MSP - Technician Remote Support Yes 0.37
for Gordon & Sykes LLP (Managed SOC) - 3603954
Notes: Logged into the server
Checked Wireshark was installed in 2023.
No threats reported since then for Wireshark
checked event logs and everything looked good
Uninstalled Wireshark
15:14 - 15:39 Company: Signature Systems Group / Wireshark Protocol Analyzer Detected on ORF- MSP - Technician Remote Support Yes 0.25
FA01 for Signature Systems Group (Managed SOC) - 359...
Notes: Logged into the server and confirmed no traces of Wireshark to be found on the server
15:28 - 15:44 Company: MMC Group LP / "Security Threat detected, '9567624' - 'Detected threat MSP - Technician Remote Support Yes 0.27
through malware analysis' (Threat Hunting) f
Notes: Logged into EDR and checked file path

Checked and confirmed the file no longer exists on the laptop

No other threats found
Totals for Mon, 06/01/2025 8.00

Tues, 07/01/2025

Start/End Charge To Work Role Work Type Billable Hours

Company: Pegasus Technology Solutions MSP - Technician Payroll Wrap No 2.20
Charge Code: Payroll Wrap
06:59 - 07:49 Company: Quest Events / Micaela Hill IT Offboarding MSP - Technician Communication Yes 0.83
s
Notes: Completed all mentioned steps as requested

Drafted and sent email

Confidential Page 7 of 18 Fri 31/01/2025 13:30 UTC-06

Scout Kalra
Tues, 07/01/2025

Start/End Charge To Work Role Work Type Billable Hours

08:00 - 09:14 Company: GMi Texas / Re: Ready for Service Notice for Dedicated Internet Access MSP - Technician Remote Support Yes 0.84
(DIA) on Order 10167014
Notes: location: southlake
https://pegasus-technology-solutions.itglue.com/6989535/locations/10540689
Firewall: https://pegasus-technology-solutions.itglue.com/6989535/passwords/21845812#partial=&sortBy=name:asc&filters=%5B%5D
reviewed their environment
Added the mentioned IP/netmask in WAN2 interface
Added the DNS settings mentioned in WAN2 interface in SD-WAN
WAN1 is using Fortinet's DNS
Next step is to work with someone onsite to insert cable in wan2 and test connection
would like someone to review the firewall settings first before I send the email to the client.
09:14 - 13:27 Company: GMi Texas / Decomission Laptop GMILT186 MSP - Technician Remote Support Yes 0.82
Notes: Followed the document in glue
https://pegasus-technology-solutions.itglue.com/6989535/docs/17009698#version=published&documentMode=view
And removed all agents accordingly
Axcient, cylance, datto backup, datto edr, datto rmm, immybot
S1 was not installed on the device
09:29 - 09:35 Company: Pegasus Technology Solutions / Daily Service Desk Huddle MSP - Technician Staff Meeting No 0.10
Notes: Huddle
09:59 - 10:25 Company: Communities Foundation of Texas / "Security Threat detected, '8969179' - MSP - Technician Remote Support Yes 0.43
'Infocyte alert' (Threat Hunting) for CONF-COWBOYS"
Notes: Called user.
He said he is not aware of this IP scanner
It's a conference room pc so multiple people use it
desktop was currently offline
Asked him to login
Connected to the PC
found no trace of IP scanner under any profile
Checked edr and there was another alert for labtech agent exe
Deleted that
Drafted and sent email
11:03 - 11:20 Company: Integris Solutions / Issues with logging into VPN. MSP - Technician Remote Support Yes 0.28
Notes: Called Cole
Connected to his laptop
Saw he could not get into VPN
Error was invalid creds
Asked him to give new creds
Reset his password
He was able to get in using the new password

Confidential Page 8 of 18 Fri 31/01/2025 13:30 UTC-06

Scout Kalra
Tues, 07/01/2025

Start/End Charge To Work Role Work Type Billable Hours

12:29 - 13:12 Company: Construction Education Foundation / FW: Help With A Solution MSP - Technician Communication Yes 0.56
s
Notes: Beth,

I hope you're doing well!

We’ve been exploring some secure file-sharing options to facilitate smoother and safer exchanges of sensitive information, and I wanted to share a few
suggestions for your consideration:

OneDrive / Dropbox / Google Drive

These are cloud-based solutions that allow you to upload and share files securely. They offer built-in encryption and user access controls, making it easier
to manage who can view or download the files.

SFTP (Secure File Transfer Protocol)

This method involves setting up an SFTP server on our side. They would use an SFTP client to securely transfer files to and from our server. It requires
some initial software setup, but it provides strong encryption and control over file access.

VPN (Virtual Private Network)

With a VPN, the team could securely access our internal network, allowing them to retrieve files directly from our server. This method is highly secure but
requires additional configuration and software installation on both ends.

Citrix ShareFile or Similar Services

These services are specifically designed for secure file sharing and storage. They come with features like end-to-end encryption, compliance with privacy
regulations, and robust access controls, making them a good option for handling sensitive information.

Each of these options comes with its own set of benefits and setup requirements, so let me know which ones seem most feasible, or if you have any other
preferences or questions.

Looking forward to your thoughts!

Warm Regards,
Scout Kalra

13:13 - 14:06 Company: Quest Events / IT Offboarding for Nicole Mayer, EW MB Client Relations MSP - Technician Communication Yes 0.46
Manager s
Notes: Removed all licenses and deleted user as requested
Drafted and sent email
14:00 - 14:31 Company: Communities Foundation of Texas / "CPU Usage reached 100% (95.0 % MSP - Technician Remote Support Yes 0.52
Used for 10 mins) for CFT-DAL-WAD01"
Notes: Logged into the server and saw utilisation is normal

Checked it only spiked for a few minutes because updates were installed on the server
Checked and confirmed everything looks good now

Confidential Page 9 of 18 Fri 31/01/2025 13:30 UTC-06

Scout Kalra
Tues, 07/01/2025

Start/End Charge To Work Role Work Type Billable Hours

14:31 - 14:47 Company: Northgate Construction / FW: Invoice #14447 from Pegasus Technology MSP - Technician Communication Yes 0.21
Solutions s
Notes: Malena,

Hope you are doing well.

Could you please let us know which accounts are these that are being charged and no longer there?

Thanks.

Warm Regards,
Scout Kalra

14:50 - 15:11 Company: Quest Events / Possible Log4j Vulnerability Detected on ATL-M-DELL-01 for MSP - Technician Communication Yes 0.27
Quest Events (Managed SOC) - 3496645 s
Notes: Sean,

I hope you're doing well.

We recently received an alert indicating a possible Log4j vulnerability on your device, ATL-M-DELL-01, related to the file log4j-core-2.15.0.jar. The file was
detected in the following path:

C:\Users\SeanStover\curseforge\minecraft\Install\libraries\org\apache\logging\log4j\log4j-core\2.15.0\log4j-core-2.15.0.jar

Given the critical nature of this vulnerability, we need to confirm if this file is legitimate or part of a known, safe application that you are using, such as
Minecraft.

Could you please confirm whether this file is expected or if there may have been any recent updates or patches related to it? Additionally, if you have any
information on whether the vulnerability has already been addressed, that would be helpful.

Let me know if you need any further details or assistance!

Warm Regards,
Scout Kalra

15:00 - 15:23 Company: Texadia Systems / Warning-Network Element Offline (AP): MSP - Technician Remote Support Yes 0.28
[email protected]
Notes: Device is up and running fine

Checked connection and it's fine

Device only went offline for a few minutes and came online and is online since then and is being monitored as well

Confidential Page 10 of 18 Fri 31/01/2025 13:30 UTC-06

Scout Kalra
Tues, 07/01/2025

Start/End Charge To Work Role Work Type Billable Hours

15:23 - 15:35 Company: Quest Events / Wireshark Protocol Analyzer Detected on DESKTEAM for MSP - Technician Communication Yes 0.20
Quest Events (Managed SOC) - 3596495 s
Notes: Jon,

I hope you're doing well.

We’ve received an alert indicating that Wireshark is installed on your Deskteam desktop.

Could you please confirm if this is a legitimate installation and if you actively use the application?

If you don't use it, kindly let us know a convenient time and contact number to reach you, so we can proceed with uninstalling the application.

Feel free to reach out if you have any questions or need further clarification.

Thanks in advance,

Warm Regards,
Scout Kalra

Totals for Tues, 07/01/2025 8.00

Wed, 08/01/2025

Start/End Charge To Work Role Work Type Billable Hours

Company: Pegasus Technology Solutions MSP - Technician Payroll Wrap No 1.28
Charge Code: Payroll Wrap
06:59 - 08:06 Company: Quest Events / Inquiry - FTP Account MSP - Technician Remote Support Yes 0.72
Notes: Reviewed their environment
FTP can be setup on one of the servers
checked their servers and qdweb01 already has IIS server so FTP can be setup on that
letting them know
Drafted and sent email
07:45 - 08:45 Company: Pegasus Technology Solutions / Quarterly Backup Review & Test Restore MSP - Technician Remote Support Yes 0.65
Notes: Checked backups are happening successfully

Tested file restore and that is also working fine

08:45 - 09:46 Company: Quest Events / Issues with emails not deleting or sending of emails as well. MSP - Technician Remote Support Yes 0.90
Notes: Called user and connected to his laptop
Whenever he is deleting emails from deleted items or junk or any folder they are coming back
Checked in OWA and same thing is happening there
Checked in his phone and same things is happening there
tried different ways to delete those emails but all of them ended up coming back
moved the old ost and created a new one to check if the OST is corrupt
ost is taking a while to load all the emails
Told user it will take at least half an hour
discussed to call back at 10:15 central
Scheduling accordingly

Confidential Page 11 of 18 Fri 31/01/2025 13:30 UTC-06

Scout Kalra
Wed, 08/01/2025

Start/End Charge To Work Role Work Type Billable Hours

09:36 - 09:44 Company: Pegasus Technology Solutions / Daily Service Desk Huddle MSP - Technician Staff Meeting No 0.13
Notes: Huddle
09:47 - 12:47 Company: Texadia Systems / "C: Drive has 448.7 GB used out of 449.4 GB (100% MSP - Technician Remote Support Yes 0.64
Used) (has passed 98.0 % Used for 5 mins) for TXSY
Notes: Did a cleanup. made a few GBs of space but it is not enough
Most of the space is occupied by client files and user data

Checked the host has some space available which can be added
sending email
Drafted and sent email
10:15 - 11:14 Company: Quest Events / Issues with emails not deleting or sending of emails as well. MSP - Technician Remote Support Yes 0.98
Notes: Called back user. OST still not updated completely
Advised user to use in-place archive to avoid this issue altogether as then he would not have to manually delete emails
Explained it to him how it works and he asked to enable it
Checked existing retention tags
there wasn't a one for 1 year old to archive which user wanted
Existing tags and policies were of 2 year old to archive
Created new retention tag and policy to to move 1 year old to archive and assigned it to this user
Force started the managed folder assistant
user was able to see the archive folder and on his end and we tested he could move emails as well now to the in place archive
Discussed to check tomorrow at 10 as by then all the 1 year old emails should have been moved to in place archive
Drafted and sent email
12:47 - 12:58 Company: HBA Design Build, LLC / Ray Maese - One Drive and Outlook Email Not MSP - Technician Remote Support Yes 0.13
Responding
Notes: Called Ray on the number mentioned but got no response
Sending email
Drafted and sent email
12:58 - 14:42 Company: HBA Design Build, LLC / Ray Maese - One Drive and Outlook Email Not MSP - Technician Remote Support Yes 1.73
Responding
Notes: Called user
checked his machine in datto. it had no space at all which is what was causing all the issues
Could not remote in using datto
Quick assist was not opening
Teams meeting was not working
computer was moving like snail and on top of that user was connected using mobile hotspot
Had to walk him through to delete some temp files
Once he did that I used immybot to delete some exe files from the download section after that I was able to connect using quick assist
After making some space I was able to connect using datto
Once connected through datto did a cleanup and was able to make 6gb of free space
Rest of the space is occupied by company files which he can not delete
But for now he has 6gb
Told him he should either be very careful with the space now or consider deleting some files or consider increasing space
tested outlook and onedrive and all other applications are working fine now
Drafted and sent email
14:42 - 15:04 Company: Texadia Systems / Warning-Network Element Offline (AP): MSP - Technician Remote Support Yes 0.32
[email protected]
Notes: Checked AP is up and running fine

Checked it went offline in the morning for a few minutes as it lost power but has been online since then and is working fine

Confidential Page 12 of 18 Fri 31/01/2025 13:30 UTC-06

Scout Kalra
Wed, 08/01/2025

Start/End Charge To Work Role Work Type Billable Hours

15:04 - 15:56 Company: Signature Systems Group / FW: Azure license quote MSP - Technician Remote Support Yes 0.52
Notes: checked in azure and can barely see anything
The account we use has no access at all
Can not even see the virtual machines so can not tell the price as different VM configurations have different prices
Can't see the subscription details as well
They can use the azure pricing calculator to figure out the price
https://azure.microsoft.com/en-us/pricing/calculator/
Drafted and sent email
Totals for Wed, 08/01/2025 8.00

Thur, 09/01/2025

Start/End Charge To Work Role Work Type Billable Hours

Company: Pegasus Technology Solutions MSP - Technician Payroll Wrap No 2.00
Charge Code: Payroll Wrap
06:59 - 07:19 Company: Quest Events / Meraki Cloud License renewal for organization: EventWorks MSP - Technician Remote Support Yes 0.33
Notes: Checked license will expire in 45 days

Sending email to get confirmation of the renewal

Drafted and sent email
08:00 - 08:19 Company: Gordon & Sykes LLP / Needs to be setup with remote connection to their MSP - Technician Remote Support Yes 0.32
station.
Notes: checked device is offline

called her and told her device is offline

She said she left it online but it might have lost power
Asked if any colleague can bring it online but she said that is not possible at the moment and will let us know if it is later throughout the day
08:31 - 10:08 Company: Shields Legal Group / Datto AV Detected W2000M/Agent.44730438 on slg- MSP - Technician Remote Support Yes 0.59
cxd-fs01 for Shields Legal Group (Managed SOC) - ...
Notes: Checked the file is not there at the mentioned path
checked it is not in quarantine as well
The files looks like a word template
Checked the folder and there are other templates as well in that folder
Looked for any triggered events in the event logs but found nothing suspicious
09:15 - 10:04 Company: Texadia Systems / H202 error on Quickbooks. MSP - Technician Remote Support Yes 0.82
Notes: Spoke to Dawna
Checked app server ran out of space completely which caused issue
discussed with her the options available
Logged into the host and added 50GB to the app server
Logged into the app server and added 50GBs to the disk
Restarted server
She and others are able to access QB now and work normally
Drafted and sent email

Confidential Page 13 of 18 Fri 31/01/2025 13:30 UTC-06

Scout Kalra
Thur, 09/01/2025

Start/End Charge To Work Role Work Type Billable Hours

10:19 - 10:54 Company: Communities Foundation of Texas / New Call from NOC Emergency - MSP - Technician Remote Support Yes 0.58
DBROT,ARTURO (469) 348-4534
Notes: Checked I could not even log in to opensrs/tucows

Checked tucows website and they are doing planned maintenance which is affecting domain updates

Called Arturo and he said he was able to revert the changes he made to the nameserver and the emails are coming through now both internal and
external
Told him to to not make any further changes till the time maintenance is going on and told him I will check the records and nameservers once the
maintenance is over from Tucows' end
Scheduling accordingly
10:55 - 11:37 Company: GMi Texas / Re: Ready for Service Notice for Dedicated Internet Access MSP - Technician Communication Yes 0.46
(DIA) on Order 10167014 s
Notes: Cameron,

I hope you're doing well.

We’ve successfully implemented the required changes to the firewall as outlined in the previous email.

Could someone please physically plug the DIA connection cable into the WAN2 slot of the firewall so we can test the connection before designating it as
primary and routing all traffic through it?

I've attached an image for reference showing the port.

Please let me know if you have any questions or need further clarification.

Thanks in advance!

Warm Regards,
Scout Kalra

11:26 - 12:51 Company: Gordon & Sykes LLP / Needs to be setup with remote connection to their MSP - Technician Remote Support Yes 0.45
station.
Notes: User called back
Spoke to her and told her machine is still offline in datto and was last seen online yesterday
Got her added in Datto by speaking with Travis and send her the invitation email
She was able to login to datto now and see her workstation
Told her she just needs to get the machine online now
Also told her that I would keep an eye and will let her know if the machine comes online
Scheduling accordingly

Confidential Page 14 of 18 Fri 31/01/2025 13:30 UTC-06

Scout Kalra
Thur, 09/01/2025

Start/End Charge To Work Role Work Type Billable Hours

12:51 - 13:09 Company: Quest Events / Issues with emails not deleting or sending of emails as well. MSP - Technician Communication Yes 0.19
s
Notes: Robert,

I hope you're doing well.

Apologies for not being able to connect at 10 today. I wanted to follow up and check on the status of the mailbox and OST. Are you still encountering the
same issue, or has there been any progress?

Please let me know how things are going when you have a chance.

Warm Regards,
Scout Kalra

13:11 - 14:29 Company: Quest Events / Issues with sending attachments on new Outlook. MSP - Technician Remote Support Yes 1.28
Notes: Called Louis
He wanted the old outlook to work as he wanted to use the drag and drop feature and as it was working fine before and has only started acting up since
the last 2 weeks.
connected to his laptop
Closed the new outlook
did a search in outlook web app and it was working seamlessly
Checked old outlook settings
there was on ost file but outlook was no longer caching the emails
Moved the ost to a different location
Opened the outlook in safe mode
Outlook is moving a lot faster now
He was able to open and search a lot fast well
Opened outlook in normal mode and that is also working a lot faster now
OST update is still in progress so advised user to let that complete and see check the performance after
Drafted and sent email
14:29 - 15:57 Company: Pegasus Technology Solutions / CFT - Entra/Intune Setup & Device MSP - Technician Remote Support Yes 0.98
Migration
Notes: Setup these 3 in their environment
Created these 3 users in AD and made them domain admins
Created these 3 users in 365 and made them global admin as requested
temp pass for both AD and 365 for all of them is Welcome@123$$
Elie Karkafy
CFTEXAS\EKarkafy
[email protected]

Matthew Taylor
CFTEXAS\MTaylor
[email protected]
Charbel Saliba
CFTEXAS\CSaliba
[email protected]

For VPN we will have to reach them individually to set it up

Drafted and sent email
Totals for Thur, 09/01/2025 8.00

Confidential Page 15 of 18 Fri 31/01/2025 13:30 UTC-06

Scout Kalra

Fri, 10/01/2025

Start/End Charge To Work Role Work Type Billable Hours

Company: Pegasus Technology Solutions MSP - Technician Payroll Wrap No 1.63
Charge Code: Payroll Wrap
07:00 - 07:39 Company: Quest Events / "Security Threat detected, '9602068' - 'Infocyte alert' MSP - Technician Remote Support Yes 0.57
(Threat Hunting) for EWRDS01"
Notes: Logged into EDR and checked the path
Logged into the server and confirmed file no longer exists
Looked for any suspicious activity and found none
07:34 - 08:09 Company: Core Group Business Management / "Security Threat detected, '9600294' - MSP - Technician Remote Support Yes 0.30
'Infocyte alert' (Threat Hunting) for ws01"
Notes: Checked the alert
checked the file in question
It's an exe for a browser
Deleted exe
07:59 - 08:07 Company: Quest Events / SERVER ACCESS MSP - Technician Remote Support Yes 0.13
Notes: Called user
She said she is at home right now and will be there in office in an hour and that time we can connect to install the VPN or whatever is needed to get her
access to the files remotely
Scheduling accordingly
08:10 - 08:19 Company: Quest Events / Inquiry - FTP Account MSP - Technician Communication Yes 0.15
s
Notes: Seth,

QDWEB01 is a virtual machine hosted on Azure.

Thanks.

Warm Regards,
Scout Kalra

08:20 - 09:14 Company: Duraplas / Help MSP - Technician Remote Support Yes 0.58
Notes: Logged into the firewall and reviewed VPN and did not find any issues
Called Jamichel twice but got no response
Called John to see who else is facing this issue and he said Jessica was facing it but he fixed it for her as the configuration was wrong
He also pinged Jamichel but got no response
Sending email to him
Drafted and sent email
08:29 - 13:03 Company: Communities Foundation of Texas / Datto AV Detected TR/BetaBot.xgnlo MSP - Technician Remote Support Yes 0.48
on conf-liveoak for Communities Foundation of Texas (Managed ...
Notes: Checked the alert is for old labtech agent file
deleted the exe mentioned
Things look good now
09:15 - 09:34 Company: Quest Events / Issues with sending attachments on new Outlook. MSP - Technician Remote Support Yes 0.22
Notes: followed up with the user and he said it looks like it got complete but he is not in front of the laptop and wants me to call back later today
Scheduling accordingly

Confidential Page 16 of 18 Fri 31/01/2025 13:30 UTC-06

Scout Kalra
Fri, 10/01/2025

Start/End Charge To Work Role Work Type Billable Hours

09:35 - 11:21 Company: Quest Events / SERVER ACCESS MSP - Technician Remote Support Yes 1.52
Notes: Called user
Connected to her Mac
She did not need VPN access
She only needed to see files from a folder in shared drive which she wanted to move to her mac so that she can always access it
She did not know the path of the folder
She only gave me the name Event Drapery
Looked in the file server and could not find this folder anywhere
She did not have any other information about the folder
checked in Sharepoint and there is a site by the name event drapery
Showed her the site but that is not what she was looking for
Eventually we figured out the folder and it's location
\\QDFS01.QD.local\Shared\ED Server
ED server was the folder she was looking for
And inside this folder she was looking for corporate folder
And she kept saying Event Drapery ----
once we figured the folder name she wanted to get all of that copied to her MAC from the server
She had access to the drive but the drive would not map on her mac no matter what
Connection was being blocked by something
Tried with both servername and IP and it was not getting mapped
Did diagnostics and the server access was being blocked as was getting "connection prohibited" when I did network tests
Told her that she can upload the folder in onedrive from the server and then open the onedrive on her mac and download from there
we began the upload of the folder onto the onedrive
It is going to take a while
discussed to follow up on Monday for the same
Drafted and sent email
12:31 - 13:00 Company: Texadia Systems / reset password Michael Flores MSP - Technician Remote Support Yes 0.48
Notes: Called Michael twice but got no response
checked his sign in activity and looks like he was able to log in to office.com

For the computer Dawna mentioned about getting it connected to the network on Monday
Sending email
Drafted and sent email
13:06 - 14:41 Company: Communities Foundation of Texas / New Call from NOC Emergency - MSP - Technician Remote Support Yes 0.98
DBROT,ARTURO (469) 348-4534
Notes: logged into tucows and checked how they have setup
Nameservers are set to fusionlabs.net
Checked dkim and dmarc are also set but defined in fusionlabs.net
Called Arturo and discussed with him
He is saying their old MSP might have used fusionlabs and they might have the creds
He is going to get the creds next week and we will look into migrating the records and nameservers to tucows after that
scheduling accordingly
Drafted and sent email
14:42 - 15:09 Company: Shields Legal Group / "Security Threat detected, '9598984' - 'Infocyte alert' MSP - Technician Remote Support Yes 0.45
(Threat Hunting) for SLG-CXD-FS01"
Notes: Checked the alert
Logged into the server and checked the path mentioned and the exe is no longer there

Confidential Page 17 of 18 Fri 31/01/2025 13:30 UTC-06

Scout Kalra
Fri, 10/01/2025

Start/End Charge To Work Role Work Type Billable Hours

15:11 - 15:33 Company: Beck Technology / "C: Drive has 459.9 GB used out of 476.2 GB (97% MSP - Technician Remote Support Yes 0.37
Used) (SYSTEM_VOLUME drive has passed 95.0 % Used f
Notes: Called Jon but got no response
Sending email
Drafted and sent email
15:39 - 15:49 Company: GMi Texas / Endpoint Backup Agent (GMILT149) Backup Failed for Client MSP - Technician Remote Support Yes 0.14
(GMI Texas) - *Processing*
Notes: Checked device. started backup in datto. backup initiated. will check the result after the weekend.
Totals for Fri, 10/01/2025 8.00

Report Totals: 40.00

Confidential Page 18 of 18 Fri 31/01/2025 13:30 UTC-06