Suspicious Scheduled Task
Medium
Open
ALR-00190 · 2026-07-06T01:42:35Z
Description
New scheduled task created on SRV-WEB-01 by 's.jones' running encoded batch script at 02:00 daily. No change request on file.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
01:42:35
Event ingested by SOC365 Engine
01:42:38
EmilyAI triage started — correlation enrichment
01:42:49
EmilyAI confidence: 93% — escalated to human analyst
01:42:57
Alert assigned to analyst: Anika Patel
01:44:00
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00465 | 1h ago | Suspicious Scheduled Task | Critical | Open | SRV-APP-01 |
| ALR-00107 | 12h ago | Suspicious Scheduled Task | Low | Resolved | WS-LAP-011 |
| ALR-00038 | 13h ago | Suspicious Scheduled Task | Informational | Open | FW-EDGE-01 |
| ALR-00500 | 13h ago | Suspicious Scheduled Task | Medium | Investigating | AP-WIFI-03 |
| ALR-00256 | 18h ago | Suspicious Scheduled Task | Low | Resolved | SRV-SQL-01 |