Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 04:42:06 UTC

Credential Stuffing Attempt

Low Escalated
ALR-00257 · 2026-10-10T06:05:33Z

Description

Credential stuffing attack detected against VPN gateway. 234 unique username/password combinations attempted. Flagged by Cloud Connector.

Alert Metadata

Alert ID
ALR-00257
Timestamp
2026-10-10T06:05:33Z
Severity
Low
Status
Escalated
Detection Source
Cloud Connector
Assigned Analyst
EmilyAI (auto)

Endpoint Information

Hostname
SRV-WEB-01
User Account
e.evans
Source IP
103.246.216.156
Destination IP
10.0.78.58
Origin Country
US United States

MITRE ATT&CK Mapping

Tactic
Credential Access
Technique
T1110.004
Reference
attack.mitre.org/techniques/T1110.004

Investigation Timeline

06:05:33 Event ingested by SOC365 Engine
06:05:36 EmilyAI triage started — correlation enrichment
06:05:45 EmilyAI confidence: 89% — escalated to human analyst
06:06:17 Alert assigned to analyst: EmilyAI (auto)
06:08:18 Investigation started — querying SIEM and threat intelligence
06:12:05 Containment action taken — endpoint isolated
06:21:23 Alert resolved — remediation complete

Related Alerts

ID Time Alert Severity Status Host
ALR-00391 7h ago Credential Stuffing Attempt Low Investigating WS-LAP-012
ALR-00378 17h ago C2 Beacon Activity Medium Resolved SRV-WEB-01
ALR-00239 21h ago Credential Stuffing Attempt Medium Escalated WS-LAP-012
ALR-00251 22h ago Credential Stuffing Attempt Low Investigating SW-CORE-01
ALR-00090 1d ago Data Exfiltration Attempt Informational Escalated SRV-WEB-01