Shadow IT Discovery
Low
Open
ALR-00132 · 2026-05-27T11:03:44Z
Description
Cloud Connector discovered unauthorised SaaS application (file sharing) used by 'r.davies'. 14GB of company data synced to unapproved cloud storage.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
11:03:44
Event ingested by SOC365 Engine
11:03:45
EmilyAI triage started — correlation enrichment
11:03:49
EmilyAI confidence: 79% — escalated to human analyst
11:04:26
Alert assigned to analyst: EmilyAI (auto)
11:05:13
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00314 | 2h ago | Shadow IT Discovery | Low | Open | WS-PC-006 |
| ALR-00167 | 3h ago | Suspicious PowerShell Execution | Medium | Open | AP-WIFI-03 |
| ALR-00015 | 3h ago | Unauthorised USB Device | Informational | False Positive | AP-WIFI-03 |
| ALR-00466 | 6h ago | Shadow IT Discovery | Informational | Open | WS-PC-006 |
| ALR-00193 | 12h ago | Credential Stuffing Attempt | Low | Investigating | AP-WIFI-03 |