Unusual Outbound Traffic
Medium
Open
ALR-00294 · 2026-07-09T14:46:31Z
Description
Unusual outbound traffic pattern from SRV-FILE-01 to IP in Eastern Europe. 450MB transferred over non-standard port. Flagged by DLP Module.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
14:46:31
Event ingested by SOC365 Engine
14:46:35
EmilyAI triage started — correlation enrichment
14:46:42
EmilyAI confidence: 87% — escalated to human analyst
14:47:03
Alert assigned to analyst: Sarah Chen
14:48:20
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00451 | 3h ago | Shadow IT Discovery | Low | Escalated | SRV-FILE-01 |
| ALR-00452 | 8h ago | Pass-the-Hash Detected | Medium | False Positive | SRV-FILE-01 |
| ALR-00272 | 15h ago | Data Exfiltration Attempt | Low | Investigating | SRV-FILE-01 |
| ALR-00110 | 15h ago | DLP Policy Violation | Medium | Open | SRV-FILE-01 |
| ALR-00131 | 17h ago | Unusual Outbound Traffic | Informational | Open | SRV-APP-01 |