Port Scan Detected
Medium
False Positive
ALR-00341 · 2026-10-08T23:31:24Z
Description
Sequential port scan (1-1024) detected targeting WS-PC-006 from external IP. Email Gateway identified SYN scan pattern.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
23:31:24
Event ingested by SOC365 Engine
23:31:28
EmilyAI triage started — correlation enrichment
23:31:39
EmilyAI confidence: 81% — escalated to human analyst
23:31:39
Alert assigned to analyst: Emma Richardson
23:33:36
Investigation started — querying SIEM and threat intelligence
23:39:51
Containment action taken — endpoint isolated
23:47:20
Alert resolved — remediation complete
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00492 | 1h ago | Port Scan Detected | Informational | False Positive | SRV-MAIL-01 |
| ALR-00184 | 3h ago | Ransomware Behaviour Detected | Informational | Investigating | WS-PC-006 |
| ALR-00071 | 3h ago | Port Scan Detected | Informational | Investigating | WS-PC-006 |
| ALR-00188 | 4h ago | Port Scan Detected | Informational | Escalated | WS-PC-002 |
| ALR-00461 | 10h ago | Port Scan Detected | Informational | Open | SRV-DC-01 |