DLP Policy Violation
Low
Open
ALR-00037 · 2026-07-06T22:53:46Z
Description
DLP policy violation: user 'e.evans' attempted to email 3 files classified as 'Confidential' to external address from SRV-APP-01.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
22:53:46
Event ingested by SOC365 Engine
22:53:50
EmilyAI triage started — correlation enrichment
22:53:55
EmilyAI confidence: 93% — escalated to human analyst
22:54:03
Alert assigned to analyst: EmilyAI (auto)
22:55:04
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00241 | 18m ago | Kerberoasting Attempt | Low | Escalated | SRV-APP-01 |
| ALR-00095 | 22m ago | Data Exfiltration Attempt | Medium | Investigating | SRV-APP-01 |
| ALR-00055 | 3h ago | Port Scan Detected | High | Open | SRV-APP-01 |
| ALR-00231 | 10h ago | Pass-the-Hash Detected | Informational | Resolved | SRV-APP-01 |
| ALR-00339 | 11h ago | Lateral Movement Detected | Medium | Open | SRV-APP-01 |