Failed MFA Challenge
Low
Open
ALR-00060 · 2026-07-07T19:47:40Z
Description
Multiple failed MFA challenges for user 'm.taylor' — 12 push notifications in 3 minutes suggesting MFA fatigue attack. Network IDS locked account.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
19:47:40
Event ingested by SOC365 Engine
19:47:44
EmilyAI triage started — correlation enrichment
19:47:54
EmilyAI confidence: 93% — escalated to human analyst
19:48:12
Alert assigned to analyst: EmilyAI (auto)
19:49:30
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00016 | 2h ago | Failed MFA Challenge | Medium | False Positive | SRV-BACKUP-01 |
| ALR-00472 | 4h ago | DecoyPulse Honeypot Triggered | High | Open | WS-PC-002 |
| ALR-00310 | 5h ago | Failed MFA Challenge | Low | Open | FW-EDGE-01 |
| ALR-00097 | 6h ago | Failed MFA Challenge | Informational | Open | WS-LAP-011 |
| ALR-00433 | 10h ago | Failed MFA Challenge | Low | Resolved | WS-LAP-012 |