{"system_properties":{"status_changed":"2025-09-06T05:25:30.000Z","last_updated":"2026-08-16T04:57:49.000Z","status":"PROVISIONED","activated":"2025-09-06T05:25:30.000Z","credentials":{"password":false,"recovery_question":{},"provider":{"name":"OKTA","type":"OKTA"}},"password_changed":null,"id":"00uhozttb0jnYwbq84h7","last_login":null,"created":"2025-09-06T05:25:30.000Z"},"profile_properties":{"managerId":"00uhp0f2vjmoVb78D4h7","primaryPhone":"202-880-0571","displayName":"PHILLIP KUHLMAN","login":"phillip.kuhlman@cisa.dhs.gov","ntaccount":"CISANET\\0350204374","lastName":"KUHLMAN","tieUPN":"void@void","duplicate_piv":"CISANET","pivUPN":"0350204374@HQ.DHS.GOV","email":"phillip.kuhlman@cisa.dhs.gov","actualUserPrincipalName":"phillip.kuhlman@cisa.gov","upnsuffix":"HQ.DHS.GOV","upnsuffix":"HQ.DHS.GOV","pivExceptionCount":"1","mobilePhone":null,"component":"CISA","almid":"CISA-0011577646","lastPIVException":"08/15/2026","emailKey":"0350204374CISANET","dhs_aal":"1","pivException":true,"dhs_ial":"1","secondEmail":"phillip.kuhlman@cisa.dhs.gov","ntdomain":"CISANET","pivExceptDate":"08/15/2026","edipi":"0350204374","manager":"michael.blackman@cisa.dhs.gov","title":"Deputy Section Chief, Threat Branch, Fusion Operations","implicitupn":"0350204374@CISA.DHS.GOV","memberOf":["ECC-P-OCIO-SG-08923-CBA","CSG_LIC_M365_BASE","CSD_TH_BLUE","ECC-P-SS-SG-11916-NonPriv_Users","MAC-TNCALM-SG-ASG-BIRTHRIGHT-PROD","ECC-P-RG-08859-SG-VM-AVDUsers","U-Mobile_iOS_Pilot_Users","U-EUD_Pilot_Users","SharePoint_All_Users","SharePoint_Feds","CISA.CSD.TH_FEDS_ALL","CISA.CSD.TH_Threat_Leadership","SNOW-STG-SSO-All-Active-CISA","CSD_TH_BLUE-CTI-Analysis","CISA_Users","Adobe_Directory_Sync_DHSHQ_CISA","CISA_Employees","CISA_Employees_Non_Privileged","AVDUsers_Pri05","cisasupervisors","ECC-P-SB-SG-T_CISAGPT-Azure_CISAGPT-General_User","CSD Feds","CISA.CSD_Supervisors","Threat Branch / Integration - Vendor Reports, Training","Threat Branch - Threat Leadership","Threat Branch - Analytic Tradecraft Working Group (ATWG)","Palo Alto Xpanse Resource Channel","C-DOSS ACQUISITION","Threat Fusion","Threat Branch","Fusion Operations Section","Daily CTI Summary","Russia Section","CSD_TH_CDC_Supervisors","CSD_TB_General_ALL","OTH-D-PRE-08151-MAJ-08151-SG-PRE-08151-MAJ-08151-SNOW_ME_DEV","OTH-D-PRE-08151-MAJ-08151-SG-PRE-08151-MAJ-08151-SNOW_ME_QA","LIC-Windows_OLS_G3","OTH-D-PRE-08151-MAJ-08151-SG-PRE-08151-MAJ-08151-SNOW_ME_STAGING","China CTI Section","OCIO_CoPilot_License","CISA Continuity Working Group","Venafi_User_Interface-Authentication_User","TH Operational Collaboration","Sysmon_Lite_CSD_users","Adobe_Acrobat_License","CISA.CSD.TH_SUPERVISORS_ALL","CISA.CSD.TH_Threat_Feds","CISA.CSD.TH_CCM","CISA.CSD.TH_Threat_Ops","CISA.CSD.TH_Threat_FOS_Feds","CISA FED INSIDE NCR","CISA FED SUPERVISORS","THREAT BRANCH (T)","Threat Branch Fusion Operations All","CSD Intel Coordination Group","CTI OPs CCMs","Fusion Operations Section (FOS)","Fusion Weekly Report","CISA.CSD.TH_THREAT_SUPERVISORS","CTI OPS Planner"],"actualDN":"uid=0350204374,ou=Users,ou=CISA_Apps,dc=cisa,dc=dhs,dc=gov","middleName":"B","firstName":"PHILLIP","actualMemberOf":["ECC-P-OCIO-SG-08923-CBA","CSG_LIC_M365_BASE","CSD_TH_BLUE","ECC-P-SS-SG-11916-NonPriv_Users","MAC-TNCALM-SG-ASG-BIRTHRIGHT-PROD","ECC-P-RG-08859-SG-VM-AVDUsers","U-Mobile_iOS_Pilot_Users","U-EUD_Pilot_Users","SharePoint_All_Users","SharePoint_Feds","CISA.CSD.TH_FEDS_ALL","CISA.CSD.TH_Threat_Leadership","SNOW-STG-SSO-All-Active-CISA","CSD_TH_BLUE-CTI-Analysis","CISA_Users","Adobe_Directory_Sync_DHSHQ_CISA","CISA_Employees","CISA_Employees_Non_Privileged","AVDUsers_Pri05","cisasupervisors","ECC-P-SB-SG-T_CISAGPT-Azure_CISAGPT-General_User","CSD Feds","CISA.CSD_Supervisors","Threat Branch / Integration - Vendor Reports, Training","Threat Branch - Threat Leadership","Threat Branch - Analytic Tradecraft Working Group (ATWG)","Palo Alto Xpanse Resource Channel","C-DOSS ACQUISITION","Threat Fusion","Threat Branch","Fusion Operations Section","Daily CTI Summary","Russia Section","CSD_TH_CDC_Supervisors","CSD_TB_General_ALL","OTH-D-PRE-08151-MAJ-08151-SG-PRE-08151-MAJ-08151-SNOW_ME_DEV","OTH-D-PRE-08151-MAJ-08151-SG-PRE-08151-MAJ-08151-SNOW_ME_QA","LIC-Windows_OLS_G3","OTH-D-PRE-08151-MAJ-08151-SG-PRE-08151-MAJ-08151-SNOW_ME_STAGING","China CTI Section","OCIO_CoPilot_License","CISA Continuity Working Group","Venafi_User_Interface-Authentication_User","TH Operational Collaboration","Sysmon_Lite_CSD_users","Adobe_Acrobat_License","CISA.CSD.TH_SUPERVISORS_ALL","CISA.CSD.TH_Threat_Feds","CISA.CSD.TH_CCM","CISA.CSD.TH_Threat_Ops","CISA.CSD.TH_Threat_FOS_Feds","CISA FED INSIDE NCR","CISA FED SUPERVISORS","THREAT BRANCH (T)","Threat Branch Fusion Operations All","CSD Intel Coordination Group","CTI OPs CCMs","Fusion Operations Section (FOS)","Fusion Weekly Report","CISA.CSD.TH_THREAT_SUPERVISORS","CTI OPS Planner"],"modifyTimestamp":"2026-02-21T05:34:09.638Z","implicitUPN":"0350204374@CISA.DHS.GOV","samAccountName":"0350204374","department":"CISA/CSD/TH","citizenship":"TRUE","fullName":"PHILLIP KUHLMAN"},"statusCode":200}