Tor Exit Node Connection
High
Investigating
ALR-00050 · 2026-07-09T23:10:07Z
Description
Connection from FW-EDGE-01 to known Tor exit node detected by DecoyPulse. User 'a.wilson' was active at the time.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
23:10:07
Event ingested by SOC365 Engine
23:10:12
EmilyAI triage started — correlation enrichment
23:10:21
EmilyAI confidence: 97% — escalated to human analyst
23:10:39
Alert assigned to analyst: Anika Patel
23:11:42
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00205 | 1h ago | Brute Force SSH | Medium | Escalated | FW-EDGE-01 |
| ALR-00434 | 3h ago | DecoyPulse Honeypot Triggered | Low | False Positive | FW-EDGE-01 |
| ALR-00442 | 7h ago | Tor Exit Node Connection | Low | Investigating | SRV-DC-01 |
| ALR-00281 | 14h ago | Malware Signature Match | Low | Investigating | FW-EDGE-01 |
| ALR-00086 | 15h ago | Tor Exit Node Connection | Low | Open | SRV-FILE-01 |