Suspicious Scheduled Task
Informational
False Positive
ALR-00183 · 2026-04-07T11:27:44Z
Description
New scheduled task created on WS-LAP-012 by 'm.taylor' running encoded batch script at 02:00 daily. No change request on file.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
11:27:44
Event ingested by SOC365 Engine
11:27:47
EmilyAI triage started — correlation enrichment
11:27:56
EmilyAI confidence: 90% — escalated to human analyst
11:27:59
Alert assigned to analyst: EmilyAI (auto)
11:30:42
Investigation started — querying SIEM and threat intelligence
11:34:17
Containment action taken — endpoint isolated
11:39:15
Alert resolved — remediation complete
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00368 | 3h ago | Shadow IT Discovery | Low | Resolved | WS-LAP-012 |
| ALR-00023 | 4h ago | Pass-the-Hash Detected | Low | Escalated | WS-LAP-012 |
| ALR-00344 | 10h ago | Malware Signature Match | Low | Resolved | WS-LAP-012 |
| ALR-00383 | 11h ago | Privilege Escalation Attempt | High | Escalated | WS-LAP-012 |
| ALR-00221 | 15h ago | Suspicious Scheduled Task | High | Open | WS-PC-001 |