C2 Beacon Activity
Low
Investigating
ALR-00210 · 2026-07-07T12:55:43Z
Description
Suspected C2 beacon detected from AP-WIFI-03. Regular 60-second interval HTTPS POST to suspicious domain. EmilyAI Triage blocked outbound.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
12:55:43
Event ingested by SOC365 Engine
12:55:44
EmilyAI triage started — correlation enrichment
12:55:49
EmilyAI confidence: 80% — escalated to human analyst
12:56:17
Alert assigned to analyst: EmilyAI (auto)
12:57:20
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00054 | 2h ago | Privilege Escalation Attempt | Informational | Escalated | AP-WIFI-03 |
| ALR-00438 | 2h ago | Insider Threat Indicator | Medium | False Positive | AP-WIFI-03 |
| ALR-00021 | 19h ago | Suspicious Scheduled Task | Medium | Resolved | AP-WIFI-03 |
| ALR-00081 | 1d ago | C2 Beacon Activity | Low | Investigating | SRV-WEB-01 |
| ALR-00452 | 1d ago | C2 Beacon Activity | High | Escalated | WS-LAP-010 |