Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 05:44:35 UTC

C2 Beacon Activity

High Escalated
ALR-00152 · 2026-10-07T22:05:09Z

Description

Suspected C2 beacon detected from WS-PC-006. Regular 60-second interval HTTPS POST to suspicious domain. Attack Surface Scanner blocked outbound.

Alert Metadata

Alert ID
ALR-00152
Timestamp
2026-10-07T22:05:09Z
Severity
High
Status
Escalated
Detection Source
Attack Surface Scanner
Assigned Analyst
Anika Patel

Endpoint Information

Hostname
WS-PC-006
User Account
c.williams
Source IP
103.32.216.59
Destination IP
10.1.181.146
Origin Country
IN India

MITRE ATT&CK Mapping

Tactic
Command and Control
Technique
T1071.001
Reference
attack.mitre.org/techniques/T1071.001

Investigation Timeline

22:05:09 Event ingested by SOC365 Engine
22:05:12 EmilyAI triage started — correlation enrichment
22:05:20 EmilyAI confidence: 92% — escalated to human analyst
22:05:28 Alert assigned to analyst: Anika Patel
22:06:05 Investigation started — querying SIEM and threat intelligence
22:13:01 Containment action taken — endpoint isolated
22:15:47 Alert resolved — remediation complete

Related Alerts

ID Time Alert Severity Status Host
ALR-00456 5h ago C2 Beacon Activity Informational Open WS-LAP-012
ALR-00248 8h ago Anomalous DNS Query Low Resolved WS-PC-006
ALR-00111 14h ago Brute Force SSH Low False Positive WS-PC-006
ALR-00228 18h ago Data Exfiltration Attempt Medium Investigating WS-PC-006
ALR-00299 21h ago Phishing Email Blocked Informational Open WS-PC-006