Malware Signature Match
Medium
Investigating
ALR-00046 · 2026-07-05T07:57:00Z
Description
Known malware signature (Emotet variant) detected in file on SRV-MAIL-01. Network IDS quarantined the file. User context: n.clark.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
07:57:00
Event ingested by SOC365 Engine
07:57:05
EmilyAI triage started — correlation enrichment
07:57:05
EmilyAI confidence: 84% — escalated to human analyst
07:57:34
Alert assigned to analyst: James Okonkwo
07:59:20
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00397 | 13h ago | DLP Policy Violation | Low | Investigating | SRV-MAIL-01 |
| ALR-00032 | 14h ago | Suspicious Scheduled Task | Informational | False Positive | SRV-MAIL-01 |
| ALR-00471 | 14h ago | Failed MFA Challenge | Informational | Resolved | SRV-MAIL-01 |
| ALR-00161 | 17h ago | C2 Beacon Activity | Low | False Positive | SRV-MAIL-01 |
| ALR-00163 | 19h ago | Pass-the-Hash Detected | Informational | Escalated | SRV-MAIL-01 |