Loading
OS/App monitor
Command
Monitoring
| Kind | Name | Health | Metrics | Device |
|---|
Alerts
| When | Severity | State | Detail |
|---|
Tickets (Hub stand-in)
| When | State | Subject |
|---|
Security
Same tenant and devices. Actions queue signed jobs.
| Device | User | EDR | Risk | |
|---|---|---|---|---|
| FIN-WKS-14 | m.chen | Stale 36h | High | |
| LEGAL-MBP-09 | a.okonkwo | Healthy | Low | — |
| DC-01 | system | Healthy | Med |
Privileged roles, MFA gaps, stale accounts.
Conditional access and JIT elevation. Standing admin is the exception.
Public S3 ACL · NSG 3389 any · storage soft-delete off
Detect → triage → contain → recover. Containment is a signed job, not a raw shell.
Backup jobs and restore drills. File server drill overdue 18d.
Automation
Business apps, integrations, repeatable processes.
| App | Owner | Health |
|---|---|---|
| Microsoft 365 | IT ops | Healthy |
| Clio | Practice | SSO drift |
| NetSuite | Finance | Healthy |
Entra ID · Defender · AWS · Azure · Teams · Service desk · Backup vault
Devices
| Device | Customer | OS | Identity | Health | Patches |
|---|
Sessions
| Started | Device | Type | Tech | Consent | Rec | Status |
|---|
Live session
Jobs
| Job | Type | State | Requester | Approver | Blockers |
|---|
Approvals
Second person approves. Requester can only withdraw.
| Job | Type | Note | State | Requester | |
|---|---|---|---|---|---|
| loading | |||||
Audit
| When | Action | Actor | Target |
|---|