Shadow IT Discovery
Critical
Open
ALR-00092 · 2026-07-07T14:11:32Z
Description
DecoyPulse discovered unauthorised SaaS application (file sharing) used by 'e.evans'. 14GB of company data synced to unapproved cloud storage.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
14:11:32
Event ingested by SOC365 Engine
14:11:37
EmilyAI triage started — correlation enrichment
14:11:40
EmilyAI confidence: 83% — escalated to human analyst
14:12:09
Alert assigned to analyst: Emma Richardson
14:12:30
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00466 | 15h ago | Phishing Email Blocked | Medium | Open | SRV-SQL-01 |
| ALR-00390 | 16h ago | Shadow IT Discovery | Low | False Positive | WS-PC-003 |
| ALR-00023 | 17h ago | Phishing Email Blocked | Medium | Open | SRV-SQL-01 |
| ALR-00399 | 19h ago | Shadow IT Discovery | Low | Resolved | WS-PC-002 |
| ALR-00133 | 1d ago | Lateral Movement Detected | Low | Escalated | SRV-SQL-01 |