Shadow IT Discovery
Low
Escalated
ALR-00105 · 2026-07-10T21:43:32Z
Description
Dark Web Monitor discovered unauthorised SaaS application (file sharing) used by 'm.taylor'. 14GB of company data synced to unapproved cloud storage.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
21:43:32
Event ingested by SOC365 Engine
21:43:37
EmilyAI triage started — correlation enrichment
21:43:44
EmilyAI confidence: 88% — escalated to human analyst
21:44:05
Alert assigned to analyst: EmilyAI (auto)
21:46:18
Investigation started — querying SIEM and threat intelligence
21:50:38
Containment action taken — endpoint isolated
21:59:46
Alert resolved — remediation complete
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00193 | 3h ago | Kerberoasting Attempt | Low | Escalated | WS-PC-001 |
| ALR-00480 | 5h ago | Lateral Movement Detected | Medium | False Positive | WS-PC-001 |
| ALR-00001 | 16h ago | Shadow IT Discovery | Medium | Open | WS-LAP-011 |
| ALR-00327 | 17h ago | Shadow IT Discovery | Informational | Investigating | SRV-BACKUP-01 |
| ALR-00228 | 18h ago | Certificate Anomaly | Informational | Escalated | WS-PC-001 |