Malware Signature Match
Informational
Escalated
ALR-00090 · 2026-05-24T04:08:12Z
Description
Known malware signature (Emotet variant) detected in file on SRV-BACKUP-01. Firewall quarantined the file. User context: c.williams.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
04:08:12
Event ingested by SOC365 Engine
04:08:14
EmilyAI triage started — correlation enrichment
04:08:25
EmilyAI confidence: 90% — escalated to human analyst
04:08:33
Alert assigned to analyst: EmilyAI (auto)
04:10:04
Investigation started — querying SIEM and threat intelligence
04:12:55
Containment action taken — endpoint isolated
04:26:22
Alert resolved — remediation complete
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00115 | 1h ago | C2 Beacon Activity | Medium | False Positive | SRV-BACKUP-01 |
| ALR-00335 | 7h ago | Malware Signature Match | Low | False Positive | SRV-DC-01 |
| ALR-00212 | 10h ago | Malware Signature Match | Low | Resolved | VM-DEV-01 |
| ALR-00151 | 11h ago | Malware Signature Match | Critical | Escalated | WS-LAP-010 |
| ALR-00263 | 12h ago | Malware Signature Match | Medium | False Positive | SRV-APP-01 |