Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 04:49:41 UTC

Certificate Anomaly

Informational Resolved
ALR-00309 · 2026-10-11T23:30:10Z

Description

TLS certificate anomaly detected on WS-PC-002. Self-signed certificate on port 443 does not match expected corporate CA chain.

Alert Metadata

Alert ID
ALR-00309
Timestamp
2026-10-11T23:30:10Z
Severity
Informational
Status
Resolved
Detection Source
Email Gateway
Assigned Analyst
EmilyAI (auto)

Endpoint Information

Hostname
WS-PC-002
User Account
a.wilson
Source IP
45.170.148.175
Destination IP
10.0.4.213
Origin Country
CN China

MITRE ATT&CK Mapping

Tactic
Defence Evasion
Technique
T1553.004
Reference
attack.mitre.org/techniques/T1553.004

Investigation Timeline

23:30:10 Event ingested by SOC365 Engine
23:30:12 EmilyAI triage started — correlation enrichment
23:30:21 EmilyAI confidence: 93% — escalated to human analyst
23:30:40 Alert assigned to analyst: EmilyAI (auto)
23:31:15 Investigation started — querying SIEM and threat intelligence
23:36:30 Containment action taken — endpoint isolated
23:48:13 Alert resolved — remediation complete

Related Alerts

ID Time Alert Severity Status Host
ALR-00059 5h ago Rogue DHCP Server Informational Escalated WS-PC-002
ALR-00018 13h ago DLP Policy Violation High Investigating WS-PC-002
ALR-00440 15h ago Certificate Anomaly Medium Resolved WS-MAC-005
ALR-00448 1d ago DecoyPulse Honeypot Triggered Medium Resolved WS-PC-002
ALR-00375 1d ago Certificate Anomaly Medium Investigating WS-PC-003