Session objective

Create a spreadsheet with all of Hannah Foster's sign-ins to Salesforce and into the Exchange device network over the last three weeks.

Accomplished

• Identified Hannah as Hannah Foster, hfoster@demandsam.com, active in Salesforce and Microsoft.
• Queried live Salesforce LITIFY_ORG LoginHistory for UserId 005UV000006CpphYAC.
• Queried live Microsoft Graph auditLogs/signIns for hfoster@demandsam.com.
• Filtered Microsoft sign-ins for Exchange or Outlook-related records.
• Built workbook at /Users/samaguiar/Documents/Projects/admin/scratch/hannah-signins-2026-06-03/outputs/hannah-foster-signins-2026-05-13-to-2026-06-03.xlsx.

Key counts

• Salesforce LoginHistory rows: 11.
• Microsoft all-sign-in audit rows: 38.
• Exchange or Outlook-related rows: 12.
• Unique IPs across Salesforce plus Exchange-focused tabs: 5.

QA

• Workbook exported successfully.
• Artifact-tool inspect confirmed Summary tab counts.
• Formula error scan returned zero matches.
• Independent openpyxl readback confirmed tabs: Summary, Salesforce Logins, Exchange Sign-ins, All MS Sign-ins, Source Notes.

Pending

No live writes or account changes were made. If more detail is needed later, next session can extend the same scratch extractor to include Entra non-interactive sign-in logs or Unified Audit Log events if those are available.