Malware Signature Match
Low
Escalated
ALR-00024 · 2026-05-22T01:31:55Z
Description
Known malware signature (Emotet variant) detected in file on WS-LAP-012. Email Gateway quarantined the file. User context: a.wilson.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
01:31:55
Event ingested by SOC365 Engine
01:31:59
EmilyAI triage started — correlation enrichment
01:32:06
EmilyAI confidence: 84% — escalated to human analyst
01:32:31
Alert assigned to analyst: EmilyAI (auto)
01:34:46
Investigation started — querying SIEM and threat intelligence
01:37:04
Containment action taken — endpoint isolated
01:47:33
Alert resolved — remediation complete
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00335 | 8h ago | Unusual Outbound Traffic | Informational | Open | WS-LAP-012 |
| ALR-00100 | 9h ago | Malware Signature Match | Medium | Investigating | SRV-FILE-01 |
| ALR-00493 | 10h ago | Anomalous DNS Query | Low | Escalated | WS-LAP-012 |
| ALR-00273 | 14h ago | Pass-the-Hash Detected | High | Investigating | WS-LAP-012 |
| ALR-00449 | 1d ago | Tor Exit Node Connection | Medium | Resolved | WS-LAP-012 |