Credential Stuffing Attempt
Low
Resolved
ALR-00100 · 2026-07-09T13:18:25Z
Description
Credential stuffing attack detected against VPN gateway. 234 unique username/password combinations attempted. Flagged by Endpoint Agent.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
13:18:25
Event ingested by SOC365 Engine
13:18:27
EmilyAI triage started — correlation enrichment
13:18:35
EmilyAI confidence: 88% — escalated to human analyst
13:18:41
Alert assigned to analyst: EmilyAI (auto)
13:19:27
Investigation started — querying SIEM and threat intelligence
13:26:49
Containment action taken — endpoint isolated
13:36:49
Alert resolved — remediation complete
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00264 | 2h ago | Port Scan Detected | Low | Investigating | FW-EDGE-01 |
| ALR-00009 | 2h ago | Credential Stuffing Attempt | Medium | Escalated | VM-DEV-01 |
| ALR-00283 | 3h ago | Shadow IT Discovery | Low | Open | FW-EDGE-01 |
| ALR-00277 | 6h ago | Unusual Outbound Traffic | Informational | Open | FW-EDGE-01 |
| ALR-00471 | 6h ago | Phishing Email Blocked | Low | Escalated | FW-EDGE-01 |