Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 04:42:31 UTC

Phishing Email Blocked

Low Resolved
ALR-00139 · 2026-10-08T00:16:36Z

Description

Phishing email targeting 'm.taylor@company.co.uk' blocked by Email Gateway. Payload: credential harvesting link mimicking Microsoft 365 login.

Alert Metadata

Alert ID
ALR-00139
Timestamp
2026-10-08T00:16:36Z
Severity
Low
Status
Resolved
Detection Source
Email Gateway
Assigned Analyst
EmilyAI (auto)

Endpoint Information

Hostname
AP-WIFI-03
User Account
m.taylor
Source IP
91.4.195.108
Destination IP
10.0.41.93
Origin Country
NG Nigeria

MITRE ATT&CK Mapping

Tactic
Initial Access
Technique
T1566.001
Reference
attack.mitre.org/techniques/T1566.001

Investigation Timeline

00:16:36 Event ingested by SOC365 Engine
00:16:37 EmilyAI triage started — correlation enrichment
00:16:41 EmilyAI confidence: 84% — escalated to human analyst
00:17:01 Alert assigned to analyst: EmilyAI (auto)
00:18:20 Investigation started — querying SIEM and threat intelligence
00:22:12 Containment action taken — endpoint isolated
00:36:15 Alert resolved — remediation complete

Related Alerts

ID Time Alert Severity Status Host
ALR-00049 5h ago Phishing Email Blocked Medium Open SW-CORE-01
ALR-00156 6h ago Phishing Email Blocked Critical Escalated WS-PC-001
ALR-00035 7h ago Phishing Email Blocked Informational Investigating SRV-DC-01
ALR-00456 14h ago Unauthorised USB Device High Investigating AP-WIFI-03
ALR-00484 17h ago Anomalous DNS Query Informational Investigating AP-WIFI-03