Failed MFA Challenge
Informational
Resolved
ALR-00124 · 2026-07-10T10:55:27Z
Description
Multiple failed MFA challenges for user 'm.taylor' — 12 push notifications in 3 minutes suggesting MFA fatigue attack. EmilyAI Triage locked account.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
10:55:27
Event ingested by SOC365 Engine
10:55:32
EmilyAI triage started — correlation enrichment
10:55:39
EmilyAI confidence: 90% — escalated to human analyst
10:56:09
Alert assigned to analyst: EmilyAI (auto)
10:57:30
Investigation started — querying SIEM and threat intelligence
11:01:15
Containment action taken — endpoint isolated
11:14:41
Alert resolved — remediation complete
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00178 | 3h ago | Failed MFA Challenge | Medium | False Positive | WS-PC-002 |
| ALR-00223 | 4h ago | Failed MFA Challenge | Medium | Investigating | SRV-BACKUP-01 |
| ALR-00357 | 6h ago | Rogue DHCP Server | Low | Resolved | SRV-SQL-01 |
| ALR-00469 | 13h ago | Certificate Anomaly | Medium | False Positive | SRV-SQL-01 |
| ALR-00109 | 17h ago | Malware Signature Match | Low | Escalated | SRV-SQL-01 |