Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 03:43:50 UTC

Phishing Email Blocked

Medium Open
ALR-00033 · 2026-10-10T11:09:55Z

Description

Phishing email targeting 'a.wilson@company.co.uk' blocked by Endpoint Agent. Payload: credential harvesting link mimicking Microsoft 365 login.

Alert Metadata

Alert ID
ALR-00033
Timestamp
2026-10-10T11:09:55Z
Severity
Medium
Status
Open
Detection Source
Endpoint Agent
Assigned Analyst
Anika Patel

Endpoint Information

Hostname
FW-EDGE-01
User Account
a.wilson
Source IP
45.80.148.148
Destination IP
10.2.190.220
Origin Country
VN Vietnam

MITRE ATT&CK Mapping

Tactic
Initial Access
Technique
T1566.001
Reference
attack.mitre.org/techniques/T1566.001

Investigation Timeline

11:09:55 Event ingested by SOC365 Engine
11:09:58 EmilyAI triage started — correlation enrichment
11:10:00 EmilyAI confidence: 87% — escalated to human analyst
11:10:12 Alert assigned to analyst: Anika Patel
11:12:14 Investigation started — querying SIEM and threat intelligence

Related Alerts

ID Time Alert Severity Status Host
ALR-00182 5h ago Certificate Anomaly High Investigating FW-EDGE-01
ALR-00473 6h ago Phishing Email Blocked Low Escalated WS-PC-003
ALR-00138 7h ago Failed MFA Challenge High Open FW-EDGE-01
ALR-00040 10h ago Brute Force SSH Low Open FW-EDGE-01
ALR-00214 10h ago Shadow IT Discovery Medium False Positive FW-EDGE-01