Shadow IT Discovery
Medium
Resolved
ALR-00137 · 2026-07-10T17:33:49Z
Description
DecoyPulse discovered unauthorised SaaS application (file sharing) used by 'h.roberts'. 14GB of company data synced to unapproved cloud storage.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
17:33:49
Event ingested by SOC365 Engine
17:33:54
EmilyAI triage started — correlation enrichment
17:34:04
EmilyAI confidence: 97% — escalated to human analyst
17:34:17
Alert assigned to analyst: Sarah Chen
17:34:53
Investigation started — querying SIEM and threat intelligence
17:37:42
Containment action taken — endpoint isolated
17:49:45
Alert resolved — remediation complete
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00424 | 38m ago | Ransomware Behaviour Detected | Medium | Resolved | SRV-MAIL-01 |
| ALR-00126 | 2h ago | Shadow IT Discovery | Low | Open | SRV-BACKUP-01 |
| ALR-00150 | 8h ago | Shadow IT Discovery | Low | Open | WS-MAC-005 |
| ALR-00135 | 14h ago | Failed MFA Challenge | Medium | Investigating | SRV-MAIL-01 |
| ALR-00405 | 14h ago | Shadow IT Discovery | Critical | Escalated | WS-PC-004 |