Unusual Outbound Traffic
Critical
Investigating
ALR-00061 · 2026-07-05T14:15:23Z
Description
Unusual outbound traffic pattern from WS-LAP-010 to IP in Eastern Europe. 450MB transferred over non-standard port. Flagged by EmilyAI Triage.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
14:15:23
Event ingested by SOC365 Engine
14:15:24
EmilyAI triage started — correlation enrichment
14:15:36
EmilyAI confidence: 85% — escalated to human analyst
14:15:44
Alert assigned to analyst: Sarah Chen
14:16:11
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00318 | 2h ago | Brute Force SSH | Informational | Investigating | WS-LAP-010 |
| ALR-00416 | 4h ago | Unusual Outbound Traffic | Informational | Escalated | WS-MAC-005 |
| ALR-00328 | 12h ago | Unusual Outbound Traffic | Informational | Open | SRV-DC-01 |
| ALR-00394 | 1d ago | Unusual Outbound Traffic | Medium | False Positive | FW-EDGE-01 |
| ALR-00094 | 1d ago | Unauthorised USB Device | Low | Open | WS-LAP-010 |