Data Exfiltration Attempt
Low
Open
ALR-00101 · 2026-07-09T16:13:56Z
Description
Large data transfer (2.3GB) to cloud storage from WS-PC-001 by user 'n.clark'. Firewall DLP policy triggered — sensitive documents detected.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
16:13:56
Event ingested by SOC365 Engine
16:13:58
EmilyAI triage started — correlation enrichment
16:14:06
EmilyAI confidence: 97% — escalated to human analyst
16:14:40
Alert assigned to analyst: EmilyAI (auto)
16:15:28
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00020 | 11h ago | Phishing Email Blocked | Low | Resolved | WS-PC-001 |
| ALR-00116 | 15h ago | Brute Force SSH | Medium | Open | WS-PC-001 |
| ALR-00186 | 18h ago | Data Exfiltration Attempt | Low | Escalated | SRV-WEB-01 |
| ALR-00108 | 23h ago | Data Exfiltration Attempt | Medium | Open | WS-PC-006 |
| ALR-00087 | 1d ago | Data Exfiltration Attempt | High | Investigating | AP-WIFI-03 |