Credential Stuffing Attempt
Low
Resolved
ALR-00184 · 2026-07-06T08:18:49Z
Description
Credential stuffing attack detected against VPN gateway. 234 unique username/password combinations attempted. Flagged by Endpoint Agent.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
08:18:49
Event ingested by SOC365 Engine
08:18:50
EmilyAI triage started — correlation enrichment
08:18:59
EmilyAI confidence: 95% — escalated to human analyst
08:19:16
Alert assigned to analyst: EmilyAI (auto)
08:19:44
Investigation started — querying SIEM and threat intelligence
08:26:50
Containment action taken — endpoint isolated
08:34:22
Alert resolved — remediation complete
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00198 | 3h ago | Credential Stuffing Attempt | Low | False Positive | SRV-WEB-01 |
| ALR-00227 | 3h ago | Credential Stuffing Attempt | Informational | Open | SRV-SQL-01 |
| ALR-00020 | 11h ago | Phishing Email Blocked | Low | Resolved | WS-PC-001 |
| ALR-00117 | 15h ago | Credential Stuffing Attempt | Medium | Escalated | VM-DEV-01 |
| ALR-00116 | 15h ago | Brute Force SSH | Medium | Open | WS-PC-001 |