Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 04:48:41 UTC

Phishing Email Blocked

Medium Resolved
ALR-00207 · 2026-10-08T23:13:36Z

Description

Phishing email targeting 'm.taylor@company.co.uk' blocked by Network IDS. Payload: credential harvesting link mimicking Microsoft 365 login.

Alert Metadata

Alert ID
ALR-00207
Timestamp
2026-10-08T23:13:36Z
Severity
Medium
Status
Resolved
Detection Source
Network IDS
Assigned Analyst
Anika Patel

Endpoint Information

Hostname
WS-MAC-005
User Account
m.taylor
Source IP
194.134.62.234
Destination IP
10.3.227.219
Origin Country
GB United Kingdom

MITRE ATT&CK Mapping

Tactic
Initial Access
Technique
T1566.001
Reference
attack.mitre.org/techniques/T1566.001

Investigation Timeline

23:13:36 Event ingested by SOC365 Engine
23:13:40 EmilyAI triage started — correlation enrichment
23:13:45 EmilyAI confidence: 78% — escalated to human analyst
23:13:54 Alert assigned to analyst: Anika Patel
23:15:20 Investigation started — querying SIEM and threat intelligence
23:17:37 Containment action taken — endpoint isolated
23:24:02 Alert resolved — remediation complete

Related Alerts

ID Time Alert Severity Status Host
ALR-00387 5h ago Privilege Escalation Attempt High Investigating WS-MAC-005
ALR-00262 8h ago Data Exfiltration Attempt High Escalated WS-MAC-005
ALR-00393 10h ago Phishing Email Blocked Informational Open SRV-DC-01
ALR-00277 10h ago Phishing Email Blocked Informational Escalated SRV-MAIL-01
ALR-00281 18h ago Phishing Email Blocked High Open SRV-MAIL-01