Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 03:43:50 UTC

Port Scan Detected

Medium False Positive
ALR-00041 · 2026-10-09T14:52:51Z

Description

Sequential port scan (1-1024) detected targeting WS-MAC-005 from external IP. SOC365 Engine identified SYN scan pattern.

Alert Metadata

Alert ID
ALR-00041
Timestamp
2026-10-09T14:52:51Z
Severity
Medium
Status
False Positive
Detection Source
SOC365 Engine
Assigned Analyst
Sarah Chen

Endpoint Information

Hostname
WS-MAC-005
User Account
j.smith
Source IP
91.149.195.236
Destination IP
10.2.181.221
Origin Country
FR France

MITRE ATT&CK Mapping

Tactic
Reconnaissance
Technique
T1046
Reference
attack.mitre.org/techniques/T1046

Investigation Timeline

14:52:51 Event ingested by SOC365 Engine
14:52:55 EmilyAI triage started — correlation enrichment
14:53:01 EmilyAI confidence: 84% — escalated to human analyst
14:53:20 Alert assigned to analyst: Sarah Chen
14:53:39 Investigation started — querying SIEM and threat intelligence
15:00:22 Containment action taken — endpoint isolated
15:03:40 Alert resolved — remediation complete

Related Alerts

ID Time Alert Severity Status Host
ALR-00020 1h ago Port Scan Detected Low Resolved SRV-BACKUP-01
ALR-00002 8h ago Suspicious Scheduled Task Low Escalated WS-MAC-005
ALR-00403 12h ago Port Scan Detected Critical Escalated SRV-APP-01
ALR-00049 12h ago Port Scan Detected High Escalated AP-WIFI-03
ALR-00396 16h ago Malware Signature Match Low Escalated WS-MAC-005