Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 05:50:27 UTC

DecoyPulse Honeypot Triggered

Low Open
ALR-00146 · 2026-10-07T12:21:12Z

Description

DecoyPulse honeypot on WS-MAC-005 triggered by internal IP. Credentials for decoy admin account used. Zero false positive — investigating.

Alert Metadata

Alert ID
ALR-00146
Timestamp
2026-10-07T12:21:12Z
Severity
Low
Status
Open
Detection Source
DecoyPulse
Assigned Analyst
EmilyAI (auto)

Endpoint Information

Hostname
WS-MAC-005
User Account
m.taylor
Source IP
91.35.195.202
Destination IP
10.1.45.97
Origin Country
VN Vietnam

MITRE ATT&CK Mapping

Tactic
Discovery
Technique
T1018
Reference
attack.mitre.org/techniques/T1018

Investigation Timeline

12:21:12 Event ingested by SOC365 Engine
12:21:15 EmilyAI triage started — correlation enrichment
12:21:23 EmilyAI confidence: 95% — escalated to human analyst
12:21:31 Alert assigned to analyst: EmilyAI (auto)
12:24:02 Investigation started — querying SIEM and threat intelligence

Related Alerts

ID Time Alert Severity Status Host
ALR-00267 4h ago DecoyPulse Honeypot Triggered Low False Positive SRV-BACKUP-01
ALR-00169 11h ago Malware Signature Match Low Escalated WS-MAC-005
ALR-00400 14h ago DecoyPulse Honeypot Triggered Low Investigating SRV-BACKUP-01
ALR-00316 15h ago DecoyPulse Honeypot Triggered Informational Open SRV-WEB-01
ALR-00298 17h ago Ransomware Behaviour Detected Low Escalated WS-MAC-005