Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 03:43:50 UTC

Malware Signature Match

Low Escalated
ALR-00067 · 2026-10-09T04:00:30Z

Description

Known malware signature (Emotet variant) detected in file on SRV-APP-01. SOC365 Engine quarantined the file. User context: s.jones.

Alert Metadata

Alert ID
ALR-00067
Timestamp
2026-10-09T04:00:30Z
Severity
Low
Status
Escalated
Detection Source
SOC365 Engine
Assigned Analyst
EmilyAI (auto)

Endpoint Information

Hostname
SRV-APP-01
User Account
s.jones
Source IP
103.207.216.43
Destination IP
10.3.49.221
Origin Country
KP North Korea

MITRE ATT&CK Mapping

Tactic
Execution
Technique
T1204.002
Reference
attack.mitre.org/techniques/T1204.002

Investigation Timeline

04:00:30 Event ingested by SOC365 Engine
04:00:31 EmilyAI triage started — correlation enrichment
04:00:42 EmilyAI confidence: 98% — escalated to human analyst
04:01:02 Alert assigned to analyst: EmilyAI (auto)
04:01:19 Investigation started — querying SIEM and threat intelligence
04:09:21 Containment action taken — endpoint isolated
04:13:04 Alert resolved — remediation complete

Related Alerts

ID Time Alert Severity Status Host
ALR-00207 10m ago Malware Signature Match Medium Resolved SRV-APP-01
ALR-00024 8h ago Malware Signature Match Low Escalated SW-CORE-01
ALR-00403 12h ago Port Scan Detected Critical Escalated SRV-APP-01
ALR-00242 12h ago Data Exfiltration Attempt Medium Resolved SRV-APP-01
ALR-00396 16h ago Malware Signature Match Low Escalated WS-MAC-005