Credential Stuffing Attempt
Low
Open
ALR-00097 · 2026-07-07T20:27:42Z
Description
Credential stuffing attack detected against VPN gateway. 234 unique username/password combinations attempted. Flagged by DecoyPulse.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
20:27:42
Event ingested by SOC365 Engine
20:27:44
EmilyAI triage started — correlation enrichment
20:27:53
EmilyAI confidence: 98% — escalated to human analyst
20:28:16
Alert assigned to analyst: EmilyAI (auto)
20:30:22
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00283 | 13m ago | Credential Stuffing Attempt | Low | Resolved | WS-PC-003 |
| ALR-00087 | 1h ago | Brute Force SSH | Informational | False Positive | WS-PC-006 |
| ALR-00235 | 2h ago | Shadow IT Discovery | Low | Open | WS-PC-006 |
| ALR-00203 | 3h ago | Suspicious Scheduled Task | Low | Escalated | WS-PC-006 |
| ALR-00276 | 13h ago | Credential Stuffing Attempt | High | Investigating | WS-PC-004 |