Pages
Dashboard Computers Windows Computers Apple MacOS Computers Linux Computers Workstation Computers Server Computers Agent Download Add Computer Company Summary Org Summary Organization Summary Application Summary Patch Summary Config Summary Battery Summary Replacement Priorities Domain Summary Domain Scan Domain/Web Scan Web Scan Notifications Ransomware IOCs Indicators of Compromise List Clients Add Clients License Counts Subscription Embed Scanner Logout All Profile Password Passkeys MFA Current Sessions Logins Sophos Setup Sophos Summary Sophos Endpoints Sophos Incidents Sophos Cases Sophos Alerts Sophos Firewalls Sophos Licenses Caller ID Zoiper Caller ID Teams Caller ID My User Details HuntressHuntress Company Summary
Devices
Notifications
View All
  • Most Recent
  • By Category


Loading...

Server Offline

TS-HV1-D1 is offline

2025-10-01 16:55:44

!M365 Security: SuspiciousMailRule - catchall@threeshield.ca

M365 Security: SuspiciousMailRule - catchall@threeshield.ca

2026-01-17 23:42:32

M365 Security: ExternalForwarding - catchall@threeshield.ca

2026-01-17 23:42:32

M365 Security: FailedThenSuccess - mike@affirmcpa.com

2026-01-17 21:26:23

M365 Security: FailedThenSuccess - mike@affirmcpa.com

2026-01-17 21:26:23

M365 Security: FailedThenSuccess - mike@affirmcpa.com

2026-01-17 21:26:23

M365 Security: FailedThenSuccess - megan@affirmcpa.com

2026-01-17 21:26:23

M365 Security: SuspiciousMailRule - catchall@threeshield.ca

2026-01-17 18:51:38

M365 Security: ExternalForwarding - catchall@threeshield.ca

2026-01-17 18:51:38

M365 Security: FailedThenSuccess - megan@affirmcpa.com

2026-01-17 18:51:34

M365 Security: FailedThenSuccess - mike@affirmcpa.com

2026-01-17 18:51:34

M365 Security: FailedThenSuccess - mike@affirmcpa.com

2026-01-17 18:51:34

M365 Security: FailedThenSuccess - mike@affirmcpa.com

2026-01-17 18:51:34

M365 Security: SuspiciousMailRule - catchall@threeshield.ca

2026-01-16 16:17:29

M365 Security: ExternalForwarding - catchall@threeshield.ca

2026-01-16 16:17:29

M365 Security: FailedThenSuccess - megan@affirmcpa.com

2026-01-16 16:17:01

M365 Security: FailedThenSuccess - mike@affirmcpa.com

2026-01-16 16:17:01

M365 Security: FailedThenSuccess - mike@affirmcpa.com

2026-01-16 16:17:01

M365 Security: FailedThenSuccess - mike@affirmcpa.com

2026-01-16 16:17:01

M365 Security: SuspiciousMailRule - catchall@threeshield.ca

2026-01-16 16:06:52

M365 Security: ExternalForwarding - catchall@threeshield.ca

2026-01-16 16:06:52

M365 Security: FailedThenSuccess - mike@affirmcpa.com

2026-01-16 16:06:23

M365 Security: FailedThenSuccess - mike@affirmcpa.com

2026-01-16 16:06:23

M365 Security: FailedThenSuccess - mike@affirmcpa.com

2026-01-16 16:06:23

M365 Security: FailedThenSuccess - megan@affirmcpa.com

2026-01-16 16:06:23

M365 Security: ExternalForwarding - catchall@threeshield.ca

2026-01-16 15:58:41

M365 Security: SuspiciousMailRule - catchall@threeshield.ca

2026-01-16 15:58:41

M365 Security: FailedThenSuccess - mike@affirmcpa.com

2026-01-16 10:41:59

M365 Security: FailedThenSuccess - mike@affirmcpa.com

2026-01-16 10:41:59

M365 Security: FailedThenSuccess - mike@affirmcpa.com

2026-01-16 10:41:59

M365 Security: FailedThenSuccess - megan@affirmcpa.com

2026-01-16 10:41:59

BSOD / Unexpected Restart

TS-TJ-L2

2025-11-24 16:29:21

TS-TJ-L2

2025-09-29 15:58:17

TS-TJ-L2

2025-09-17 16:23:18

TS-TJ-L2

2025-09-04 15:21:40

BSOD: Driver failed during sleep/hibernate/resume

TS-TJ-L2

2025-10-16 15:31:08

Driver failed during sleep/hibernate/resume

TS-TJ-L2

2025-09-29 15:58:17

M365 Suspicious Audit Events

M365 suspicious audit event: Add delegated permission grant

2026-01-17 23:42:17

M365 suspicious audit event: Consent to application

2026-01-17 23:42:17

M365 suspicious audit event: Consent to application

2026-01-17 23:42:17

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Consent to application

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add service principal

2026-01-16 15:58:28

M365 suspicious audit event: Consent to application

2026-01-16 15:58:28

M365 suspicious audit event: Add delegated permission grant

2026-01-16 15:58:28

M365 suspicious audit event: Consent to application

2026-01-16 15:58:28

M365 suspicious audit event: Add delegated permission grant

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add delegated permission grant

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add service principal

2026-01-16 15:58:28

M365 suspicious audit event: Consent to application

2026-01-16 15:58:28

M365 suspicious audit event: Add delegated permission grant

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Consent to application

2026-01-16 15:58:28

M365 suspicious audit event: Add delegated permission grant

2026-01-16 15:58:28

M365 suspicious audit event: Consent to application

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Consent to application

2026-01-16 15:58:28

M365 suspicious audit event: Add delegated permission grant

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

M365 suspicious audit event: Add app role assignment to service principal

2026-01-16 15:58:28

Select
0
Result
Welcome !
Profile/Security Subscription Logout All Logout

Are you sure ?

Are you sure you want to clear this Notification ?

Lavawall ®
  • Reports
  • Dashboard
  • Summary Reports
    • Org Summary
    • Patch Summary Application Summary
    • Config Summary
    • Battery Summary
    • Domain Summary
    • Notifications Replacement Priorities
  • Devices
  • Computers
    • All
    • Windows
    • Linux
    • Apple
    • Workstation
    • Servers
    • Downloads/Add
  • Internet
  • Domain Scan
  • Threat Hunt
  • RansomwareNew!
  • Cloud/SAAS
  • HuntressHuntress
  • SophosSophosNew!
    • Summary / Setup
    • Computers
    • Incidents/Cases
    • Alerts
    • Firewalls
    • Licenses
  • Client Orgs
  • License Counts
  • List
  • Add
  • You
  • Profile/Security
  • Subscription
    • Embed Scanner Logout All Logout

Welcome to Lavawall®

TS-TJ-L2

ThreeShield Information Security Corporation

 Vancouver, British Columbia Shaw Communications
  
  • Hardware
  • Patch Details
  • Config Issues
  • Storage
  • Computer Logs
  • Processes
  • Services
  • Applications
  • Performance
  • Users
  • Options
Loading...
Configuration Issues
Configuration Status Severity Setting First Observed Last Observed
Computer Logs Highlights
Issue 24 hours 7 days 30 days
 Windows update failed 2 6 23
 Unstable application 0 0 5
 Shadow copy on C: full 0 0 2
 Possible time error 0 6 21
 DNS issue 0 2 11
 USB Issue 0 2 5
 USB Draining Power 0 2 2



Computer Log Details
Loading...
 0/1879 (0%)
Level Time Source Repeats Details
Processes 
Loading...
Services
Service State
Applications
Loading...
System Details
Model: Lenovo 21MN0070US
Intel(R) Core(TM) Ultra 7 155U
vCPUs:14 
RAM:31.51GB 
Serial: PF5GWN6N
BIOS: 2025-06-24 
Hardware

CPU: Intel(R) Core(TM) Ultra 7 155U
CPU Utilization: 24.00% ↘ 

RAM: 31.51GB (91.00% utilization) ↘ 

Temperature: 78°C ↔ 

Firmware release: 2025-06-24
Approx Year: 2024
Battery Status: OK
Battery Cycles: 23
Battery Charge Health: 99%
Battery Current Full Capacity: 86.79Wh
Battery Initial Design Capacity: 87.38Wh
Operating System
Win 11 Business
build 26100
Workstation
Huntress Installed
AV:Sophos Intercept X
Location
Country: CA
Region: British Columbia
City: Vancouver
Postal Code: V6K
Latitude: 49.2624
Longitude: -123.1604
Networking
WAN: 174.7.224.21
ISP: Shaw Communications
Type: residential
Has been Residential: Yes
 12KB   14KB
Click the IP addresses for more information
169.254.246.251
Built-in Ethernet:
Intel(R) Ethernet Connection (18) I219-V
fe80::41ed:4786:a95d:25e5%9
169.254.246.251

10.0.0.249
Built-in Wifi:
Intel(R) Wi-Fi 6E AX211 160MHz
2604:3d08:977b:a100:d0fb:a3d8:ef46:b268
MAC:9C67D6708D2F
2604:3d08:977b:a100:fdf2:340c:7726:f05c
fe80::fd51:7aef:62a7:4ce6%19
10.0.0.249

169.254.87.84
Virtual Wifi:
Microsoft Wi-Fi Direct Virtual Adapter
fe80::85ba:d422:da58:4d15%17
MAC:9C67D6708D30
Microsoft Wi-Fi Direct Virtual Adapter #2
169.254.87.84
MAC: 9E67D6708D2F
fe80::b46f:fcf2:677b:f257%7
169.254.27.58

172.21.64.1
Virtual Ethernet:
Hyper-V Virtual Ethernet Adapter
fe80::2b03:8258:c0d7:ec9d%43
MAC:00155D486C28
172.21.64.1
Lavawall® Diagnostic Info

Last Checkin: 2026-01-18 17:19:42 UTC

GUID: b97c14ee-693c-4517-b448-f20484011bf6
MiTM connection: No
Patching Blocked: No
Agent Build: 357
Update Group: 50/100
Nickname: 
Websocket connected: Yes

Restart Required: Yes
(details)

Restart Info:
  • The following files need to be changed on reboot:
    • \C:\Windows\System32\LvfInstallService.3.2.36.2.exe
    • \C:\Program Files\Google\Chrome\Temp\scoped_dir24436_1443813570\old_chrome.exe
    • \C:\Program Files\Google\Chrome\Temp\scoped_dir24436_1443813570
    • \C:\Program Files\Google\Chrome\Temp
    • \C:\Windows\System32\LvfInstallService.3.2.36.2.exe
    • \C:\Program Files (x86)\Microsoft\Edge\Temp\scoped_dir39128_19087857\old_msedge.exe
    • \C:\Program Files (x86)\Microsoft\Edge\Temp\scoped_dir39128_19087857
    • \C:\Program Files (x86)\Microsoft\Edge\Temp
    • \C:\Program Files\Microsoft OneDrive\Update\OneDriveSetup.exe
    • \C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe
    • \C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileCoAuthLib64.dll
    • \C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll
    • \C:\Program Files\Microsoft OneDrive\25.222.1112.0002
    • \C:\Windows\System32\LvfInstallService.3.2.36.2.exe
    • \C:\Program Files\Microsoft OneDrive\Update\OneDriveSetup.exe
    • \C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe
    • \C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileCoAuthLib64.dll
    • \C:\Program Files\Microsoft OneDrive\25.222.1112.0002\FileSyncShell64.dll
    • \C:\Program Files\Microsoft OneDrive\25.222.1112.0002
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\adal.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\FileCoAuth.exe
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\FileSyncEvents.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\FileSyncFALWB.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\FileSyncFS.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\FileSyncFSCache.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\FileSyncFSDbfsWB.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\FileSyncFSNtfs.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\FileSyncFSNtfsWB.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\FileSyncHost.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\FileSyncSessions.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\FileSyncShell64.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\FileSyncSqlite3.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\FileSyncTelemetryExtensions.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\LoggingPlatform.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\msvcp140.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\msvcp140_atomic_wait.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\OneDriveTelemetryStable.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\Telemetry.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\UpdateRingSettings.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\vcruntime140.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003\vcruntime140_1.dll
    • \C:\Program Files\Microsoft OneDrive\25.224.1116.0003

    •
    Drives
    The lighter drives were not present in the last scan
    Drive Volume Name Size Free Model Serial Media Type Encrypted State Last Seen
    Performance Graph 
    Loading...
    Loading...
    Loading performance statistics
    Users

    Current User: AzureAD\TysonJamison
    Last Login: AzureAD\TysonJamison
    Online: Yes
    Logged Off: No
    M365/Azure User: tyson.jamison@threeshield.ca
    Local User Accounts
    Username From IP Last Login
    TysonJamison local

    no M365 login logs

    Active Huntress Incidents

    No Open Huntress Incidents
    Lavawall® Options
    © 2016-2026 ThreeShield Information Security Corporation.
    host: 245 v303
    Lavawall® is a registered trademark.
    Lavawall®

    Please enter your email address
    We use cookies to remember devices and users.
    By logging in, you agree to the Lavawall® Terms of Service.
    Please use a valid email address
    Remember my email

    Security precheck...
    Please check your email and enter the code that we sent you below.

    This code is only valid once, only on this device, and expires 1 hour.
     


    Multi-step vs. Multi-factor login Privacy Policy

    Lavawall®

    Welcome back,
    Select your primary authentication method.
    •  Passkey
    •  Password
    •  Email

    Use your browser, mobile device, fingerprint reader, facial recognition, hardware token (like Yubikey®), or password manager's passkey integration to log in without a password.

    Yubikey® is a registered trademark of Yubico


    Please check your email
    and enter the code that we sent you below:

    This code is only valid once, only on this device, and expires 1 hour.


    We recommend using Passkeys/biometrics instead of passwords. Passwords are more vulnerable to phishing and password reuse attacks than passkeys.
    Please use a unique password and store it in a password manager.

    Lavawall®
    Welcome back,

    Please enter the 6-digit code from your authenticator

    Skip second authentication on this computer

    Lavawall®

    Let's get to know eachother.
    We use cookies to remember devices and users.
    Please enter a first name
    Please enter a last name
    Loading...
    Please enter your organization name. For personal, use your full name
    What best describes your organization?
     I consent to the use of cookies; and collection of my email address, name, and organization name to customize Lavawall®; scanning of my domain(s); and to receive emails from Lavawall®. I will only scan domains that I am authorized to scan.


    Current user:
    Select your primary authentication method.
    •  Passkey/Biometric
    •  Password

    Use your browser, mobile device, fingerprint reader, facial recognition, hardware token (like Yubikey®), or password manager's passkey integration to log in without a password.

    Yubikey® is a registered trademark of Yubico

    We recommend using Passkeys/biometrics, or single sign-on instead of passwords.
    Please use a unique password and store it in a password manager.
    After you enter two matching passwords that meet the requirements, we will encrypt your password on your computer.
    The Save Password button will return in a few seconds.
    Please make sure that the passwords:
  • match
  • are at least 12 characters long
  • include each of: alphabetic, numeric, non-alphanumeric
  • is not among top million breached passwords

    • All Set!

    Thank you for securing your Lavawall® console.
    You can now experience how easy IT management can be!


    Lavawall® gets you the information you need fast, but if you have any questions or concerns, our support team is available at 403-538-5053.

    Let's set up your secondary authentication method:

    Scan this QR Code with your favourite Authenticator app: Why?

    use QR code or enter secret manually: YZNKNHSZ7ZEBHQPB
    Manual code: YZNKNHSZ7ZEBHQPB


    If you used a password for your first authentication, please do not use your password manager's authenticator for this step

    Passkey not completed