Phishing Email Blocked
Low
Escalated
ALR-00079 · 2026-07-06T02:41:07Z
Description
Phishing email targeting 'd.walker@company.co.uk' blocked by DecoyPulse. Payload: credential harvesting link mimicking Microsoft 365 login.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
02:41:07
Event ingested by SOC365 Engine
02:41:11
EmilyAI triage started — correlation enrichment
02:41:14
EmilyAI confidence: 82% — escalated to human analyst
02:41:31
Alert assigned to analyst: EmilyAI (auto)
02:41:54
Investigation started — querying SIEM and threat intelligence
02:45:17
Containment action taken — endpoint isolated
02:58:25
Alert resolved — remediation complete
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00205 | 1h ago | Phishing Email Blocked | Low | Investigating | WS-LAP-012 |
| ALR-00408 | 1h ago | Data Exfiltration Attempt | Informational | Investigating | SW-CORE-01 |
| ALR-00466 | 10h ago | Phishing Email Blocked | Critical | Investigating | SRV-BACKUP-01 |
| ALR-00309 | 13h ago | Phishing Email Blocked | High | Escalated | SW-CORE-01 |
| ALR-00061 | 16h ago | Phishing Email Blocked | High | Investigating | WS-PC-006 |