Credential Stuffing Attempt
Informational
Open
ALR-00239 · 2026-07-06T19:55:30Z
Description
Credential stuffing attack detected against VPN gateway. 234 unique username/password combinations attempted. Flagged by Firewall.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
19:55:30
Event ingested by SOC365 Engine
19:55:32
EmilyAI triage started — correlation enrichment
19:55:43
EmilyAI confidence: 84% — escalated to human analyst
19:56:13
Alert assigned to analyst: EmilyAI (auto)
19:57:13
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00490 | 1h ago | DLP Policy Violation | Informational | False Positive | SRV-DC-01 |
| ALR-00382 | 4h ago | Credential Stuffing Attempt | Informational | Escalated | WS-PC-002 |
| ALR-00437 | 11h ago | DecoyPulse Honeypot Triggered | Low | Escalated | SRV-DC-01 |
| ALR-00478 | 14h ago | Phishing Email Blocked | Low | Escalated | SRV-DC-01 |
| ALR-00500 | 14h ago | Tor Exit Node Connection | Informational | Open | SRV-DC-01 |