Tor Exit Node Connection
Informational
Escalated
ALR-00216 · 2026-05-23T06:23:09Z
Description
Connection from WS-PC-006 to known Tor exit node detected by Endpoint Agent. User 'm.taylor' was active at the time.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
06:23:09
Event ingested by SOC365 Engine
06:23:14
EmilyAI triage started — correlation enrichment
06:23:14
EmilyAI confidence: 88% — escalated to human analyst
06:23:32
Alert assigned to analyst: EmilyAI (auto)
06:25:12
Investigation started — querying SIEM and threat intelligence
06:26:45
Containment action taken — endpoint isolated
06:41:27
Alert resolved — remediation complete
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00280 | 37m ago | Tor Exit Node Connection | Low | Escalated | WS-PC-003 |
| ALR-00315 | 3h ago | Tor Exit Node Connection | Informational | False Positive | WS-PC-004 |
| ALR-00056 | 4h ago | Tor Exit Node Connection | Informational | Open | SRV-APP-01 |
| ALR-00318 | 5h ago | Tor Exit Node Connection | Informational | Escalated | WS-PC-003 |
| ALR-00037 | 8h ago | Tor Exit Node Connection | Medium | Investigating | SRV-APP-01 |