Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 03:42:32 UTC

Malware Signature Match

Medium Open
ALR-00316 · 2026-10-07T14:29:52Z

Description

Known malware signature (Emotet variant) detected in file on SRV-FILE-01. Firewall quarantined the file. User context: j.smith.

Alert Metadata

Alert ID
ALR-00316
Timestamp
2026-10-07T14:29:52Z
Severity
Medium
Status
Open
Detection Source
Firewall
Assigned Analyst
Anika Patel

Endpoint Information

Hostname
SRV-FILE-01
User Account
j.smith
Source IP
91.160.195.217
Destination IP
10.1.83.163
Origin Country
RU Russia

MITRE ATT&CK Mapping

Tactic
Execution
Technique
T1204.002
Reference
attack.mitre.org/techniques/T1204.002

Investigation Timeline

14:29:52 Event ingested by SOC365 Engine
14:29:56 EmilyAI triage started — correlation enrichment
14:29:57 EmilyAI confidence: 89% — escalated to human analyst
14:30:31 Alert assigned to analyst: Anika Patel
14:32:29 Investigation started — querying SIEM and threat intelligence

Related Alerts

ID Time Alert Severity Status Host
ALR-00046 41m ago Malware Signature Match Medium Investigating WS-PC-003
ALR-00212 16h ago Malware Signature Match Informational Escalated SRV-MAIL-01
ALR-00450 16h ago Malware Signature Match Informational Escalated AP-WIFI-03
ALR-00254 1d ago Malware Signature Match Medium Investigating WS-LAP-010
ALR-00042 1d ago Suspicious PowerShell Execution Low Escalated SRV-FILE-01