Phishing Email Blocked
Medium
Investigating
ALR-00096 · 2026-07-09T03:16:31Z
Description
Phishing email targeting 'm.taylor@company.co.uk' blocked by EmilyAI Triage. Payload: credential harvesting link mimicking Microsoft 365 login.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
03:16:31
Event ingested by SOC365 Engine
03:16:36
EmilyAI triage started — correlation enrichment
03:16:39
EmilyAI confidence: 98% — escalated to human analyst
03:16:50
Alert assigned to analyst: Emma Richardson
03:17:16
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00227 | 47m ago | Privilege Escalation Attempt | Medium | Investigating | VM-DEV-01 |
| ALR-00101 | 1h ago | Lateral Movement Detected | Informational | False Positive | VM-DEV-01 |
| ALR-00037 | 1h ago | Lateral Movement Detected | High | Investigating | VM-DEV-01 |
| ALR-00205 | 1h ago | Phishing Email Blocked | Low | Investigating | WS-LAP-012 |
| ALR-00119 | 2h ago | Lateral Movement Detected | Low | Escalated | VM-DEV-01 |