Lateral Movement Detected
High
Open
ALR-00070 · 2026-05-22T14:00:00Z
Description
Network IDS detected lateral movement from WS-PC-001 to SRV-DC-01 using user 's.jones' credentials. SMB admin shares accessed.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
14:00:00
Event ingested by SOC365 Engine
14:00:05
EmilyAI triage started — correlation enrichment
14:00:08
EmilyAI confidence: 80% — escalated to human analyst
14:00:36
Alert assigned to analyst: Sarah Chen
14:01:40
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00232 | 8m ago | DLP Policy Violation | High | Investigating | WS-PC-001 |
| ALR-00117 | 7h ago | Lateral Movement Detected | Medium | Investigating | SW-CORE-01 |
| ALR-00078 | 7h ago | Unusual Outbound Traffic | Low | Investigating | WS-PC-001 |
| ALR-00219 | 8h ago | Lateral Movement Detected | Informational | False Positive | SRV-DC-01 |
| ALR-00203 | 10h ago | Tor Exit Node Connection | Informational | False Positive | WS-PC-001 |