Malware Signature Match
Medium
Escalated
ALR-00213 · 2026-10-06T05:29:06Z
Description
Known malware signature (Emotet variant) detected in file on SRV-DC-01. Endpoint Agent quarantined the file. User context: s.jones.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
05:29:06
Event ingested by SOC365 Engine
05:29:07
EmilyAI triage started — correlation enrichment
05:29:14
EmilyAI confidence: 86% — escalated to human analyst
05:29:30
Alert assigned to analyst: Emma Richardson
05:31:30
Investigation started — querying SIEM and threat intelligence
05:37:43
Containment action taken — endpoint isolated
05:47:17
Alert resolved — remediation complete
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00035 | 7h ago | Phishing Email Blocked | Informational | Investigating | SRV-DC-01 |
| ALR-00184 | 7h ago | Malware Signature Match | Low | Investigating | SRV-DC-01 |
| ALR-00287 | 7h ago | Malware Signature Match | Informational | Resolved | FW-EDGE-01 |
| ALR-00420 | 9h ago | DLP Policy Violation | High | Investigating | SRV-DC-01 |
| ALR-00272 | 15h ago | Malware Signature Match | Medium | False Positive | SRV-FILE-01 |