Joe Santana (jsantana@shield-legal.com)
2024-12-23 11:41:33

Alright we have a similar issue @ LR - Anyone know of anything

Joe Santana (jsantana@shield-legal.com)
2024-12-23 11:41:38

we are being asked to STOP again

Joe Santana (jsantana@shield-legal.com)
2024-12-23 11:41:53

and that's STOP and return to NORMAL when we know whatever it is that is doing this is under control

Cameron Rentch (cameron@internetthings.com)
2024-12-23 11:42:24

Who is not following protocols?

Cameron Rentch (cameron@internetthings.com)
2024-12-23 11:42:38

@here ^^

Joe Santana (jsantana@shield-legal.com)
2024-12-23 11:43:39

Martin Ramos, looks like he was running a report, apparently exported 77K records

Joe Santana (jsantana@shield-legal.com)
2024-12-23 11:44:32

this might have been an accident vs an intended effort... but again, now we are talking about "working with full attention and caution... something that should be 2nd or 1st nature in these hands/areas

Nick Ward (nicholas@tortintakeprofessionals.com)
2024-12-23 11:48:08

I met with that team and they told me at 8:45 that nothing was pulled/pushed in mass either, so this is concerning for a few reasons. @Joe Santana I’m sitting with @Dustin Surwill now if you want a call.

Joe Santana (jsantana@shield-legal.com)
2024-12-23 11:48:51

im available meet or please

Joe Santana (jsantana@shield-legal.com)
2024-12-23 11:49:19

it wasn't martin, apparently Greg Owen ?

deleted-U06C7A8PVLJ
2024-12-23 11:49:55

Based on my conversation with Dennis he showed me it would not Martin but Greg. He said that is what the inbox shows. I believe Dennis has a screenshot that shows names and total counts

Joe Santana (jsantana@shield-legal.com)
2024-12-23 11:50:11

thank you edward

✅ deleted-U06C7A8PVLJ
Nicholas McFadden (nickmcfadden@shield-legal.com)
2024-12-23 11:50:30

I know a lot of reports are ran in Mondays and would most likely be our heaviest usage day

deleted-U06C7A8PVLJ
2024-12-23 11:50:32

You're welcome Joe

Joe Santana (jsantana@shield-legal.com)
2024-12-23 11:51:38

NickM - Sure - this is a part of what I was asking before, and of course it's involving more persons, API - Reporting - I don't know who else, as to what these efforts involve, load/traffic/requests being known & listed

Joe Santana (jsantana@shield-legal.com)
2024-12-23 11:52:33

NickW - meet - call - or ?

Nicholas McFadden (nickmcfadden@shield-legal.com)
2024-12-23 11:55:00

@deleted-U06C7A8PVLJ Greg shouldn’t have access to the API and would only be using LR report download features. @Joe Santana I am wondering if they are including that as part of traffic and in that case the net is way larger

Joe Santana (jsantana@shield-legal.com)
2024-12-23 11:55:24

unknown and entirely possible

Joe Santana (jsantana@shield-legal.com)
2024-12-23 11:56:09

Just got this from Branden/LR

Joe Santana (jsantana@shield-legal.com)
2024-12-23 11:56:12

Here are the endpoints Get: Case summary Case notes Contract statuses Lead Case notes Question list

Joe Santana (jsantana@shield-legal.com)
2024-12-23 11:56:27

How do we identify what/who made these calls?

Dustin Surwill (dsurwill@shield-legal.com)
2024-12-23 11:57:20

Those endpoints look like the LR to DB dump that runs every 15 minutes

Nick Ward (nicholas@tortintakeprofessionals.com)
2024-12-23 11:58:12

@Joe Santana getting your vm

deleted-U06C7A8PVLJ
2024-12-23 11:58:23

@Nicholas McFadden Yeah I know Greg shouldn't have access to it but I think his is based on a report pulled through inbox itself so I wonder what Dennis showed me is for both API and for pulling reports in general

deleted-U04HFGHL4RW
2024-12-23 11:58:56

@deleted-U04HFGHL4RW has joined the conversation

deleted-U04GZ79CPNG
2024-12-23 11:58:57

@deleted-U04GZ79CPNG has joined the conversation

Nicholas McFadden (nickmcfadden@shield-legal.com)
2024-12-23 11:59:07

Which is “normal” traffic and probably the majority and so it’s compounded with other adhoc things

Joe Santana (jsantana@shield-legal.com)
2024-12-23 11:59:41

@deleted-U06VDQGHZLL ya calls were coming in

Joe Santana (jsantana@shield-legal.com)
2024-12-23 11:59:44

calling you now

Dustin Surwill (dsurwill@shield-legal.com)
2024-12-23 12:15:00
image.png
Cameron Rentch (cameron@internetthings.com)
2024-12-23 12:26:03

@Dustin Surwill @Joe Santana who is Martin Ramos?

Cameron Rentch (cameron@internetthings.com)
2024-12-23 12:26:16

@Nick Ward ^

Nick Ward (nicholas@tortintakeprofessionals.com)
2024-12-23 12:26:37

Reporting agent on Brittany's team

Cameron Rentch (cameron@internetthings.com)
2024-12-23 12:27:09

is this some type of script they are running?

Nick Ward (nicholas@tortintakeprofessionals.com)
2024-12-23 12:27:27

No, it was a manual action in LR

Nick Ward (nicholas@tortintakeprofessionals.com)
2024-12-23 12:29:01

accidental. I can check with LR about building something to at least require a 'are you sure?' type step.

👀 deleted-U06C7A8PVLJ
Cameron Rentch (cameron@internetthings.com)
2024-12-23 12:31:00

@Nick Ward @Joe Santana we should limit access to anyone that is running any type of reporting. Also, we need a comprehensive list of daily reporting/actions being used by each department to understand who and what is being done daily.

Nick Ward (nicholas@tortintakeprofessionals.com)
2024-12-23 12:33:27

I have a tracker built this morning for Brittany's team for all tasks and projects and we can amplify it for Integrations too if it is helpful.

Nicholas McFadden (nickmcfadden@shield-legal.com)
2024-12-23 12:39:15

Dustin was putting together an inventory as Joe requested. However it was API focused so we will need to go around and see who touches the report features across both orgs since the manual downloads seem to be included in their definition of usage “abuse”

Nick Ward (nicholas@tortintakeprofessionals.com)
2024-12-23 12:39:22

Per Dustin, looks like a 29K pull from Malissa preceded Martin's as well. I will speak with Malissa.

Nick Ward (nicholas@tortintakeprofessionals.com)
2024-12-23 13:11:09

@here It looks like there are a lot of automated reports set up in LR dating back a long time that should be audited and removed wherever possible. Dustin helped to get Mal's automations removed, I will get with call center folks and Brittany's team to do the same.