Port Scan Detected
Low
Open
ALR-00193 · 2026-05-26T03:51:43Z
Description
Sequential port scan (1-1024) detected targeting AP-WIFI-03 from external IP. Firewall identified SYN scan pattern.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
03:51:43
Event ingested by SOC365 Engine
03:51:46
EmilyAI triage started — correlation enrichment
03:51:55
EmilyAI confidence: 93% — escalated to human analyst
03:52:15
Alert assigned to analyst: EmilyAI (auto)
03:52:40
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00453 | 5h ago | Pass-the-Hash Detected | Low | False Positive | AP-WIFI-03 |
| ALR-00343 | 9h ago | Port Scan Detected | Medium | Resolved | SRV-DC-01 |
| ALR-00327 | 12h ago | Port Scan Detected | Low | Investigating | SRV-DC-01 |
| ALR-00172 | 16h ago | Privilege Escalation Attempt | Medium | Open | AP-WIFI-03 |
| ALR-00171 | 17h ago | Port Scan Detected | High | Escalated | SRV-DC-01 |