Port Scan Detected
Medium
Resolved
ALR-00196 · 2026-07-11T19:22:43Z
Description
Sequential port scan (1-1024) detected targeting AP-WIFI-03 from external IP. DLP Module identified SYN scan pattern.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
19:22:43
Event ingested by SOC365 Engine
19:22:45
EmilyAI triage started — correlation enrichment
19:22:53
EmilyAI confidence: 87% — escalated to human analyst
19:23:09
Alert assigned to analyst: Marcus Webb
19:25:21
Investigation started — querying SIEM and threat intelligence
19:28:08
Containment action taken — endpoint isolated
19:39:33
Alert resolved — remediation complete
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00132 | 5h ago | Port Scan Detected | Low | Open | WS-PC-006 |
| ALR-00013 | 5h ago | Port Scan Detected | Low | Open | WS-PC-003 |
| ALR-00145 | 10h ago | Port Scan Detected | High | Investigating | WS-MAC-005 |
| ALR-00153 | 12h ago | Port Scan Detected | Medium | Resolved | WS-MAC-005 |
| ALR-00067 | 16h ago | Port Scan Detected | Low | Escalated | SRV-WEB-01 |