C2 Beacon Activity
Informational
Investigating
ALR-00344 · 2026-07-05T08:09:52Z
Description
Suspected C2 beacon detected from SRV-DC-01. Regular 60-second interval HTTPS POST to suspicious domain. DLP Module blocked outbound.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
08:09:52
Event ingested by SOC365 Engine
08:09:55
EmilyAI triage started — correlation enrichment
08:10:05
EmilyAI confidence: 79% — escalated to human analyst
08:10:30
Alert assigned to analyst: EmilyAI (auto)
08:10:53
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00490 | 1h ago | DLP Policy Violation | Informational | False Positive | SRV-DC-01 |
| ALR-00014 | 2h ago | C2 Beacon Activity | Informational | Resolved | SW-CORE-01 |
| ALR-00022 | 3h ago | C2 Beacon Activity | Medium | Investigating | SRV-APP-01 |
| ALR-00437 | 11h ago | DecoyPulse Honeypot Triggered | Low | Escalated | SRV-DC-01 |
| ALR-00478 | 14h ago | Phishing Email Blocked | Low | Escalated | SRV-DC-01 |