Data Exfiltration Attempt
Informational
Open
ALR-00344 · 2026-07-08T07:49:23Z
Description
Large data transfer (2.3GB) to cloud storage from SRV-DC-01 by user 'm.taylor'. Firewall DLP policy triggered — sensitive documents detected.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
07:49:23
Event ingested by SOC365 Engine
07:49:24
EmilyAI triage started — correlation enrichment
07:49:37
EmilyAI confidence: 95% — escalated to human analyst
07:49:53
Alert assigned to analyst: EmilyAI (auto)
07:50:41
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00369 | 43m ago | DecoyPulse Honeypot Triggered | Informational | Escalated | SRV-DC-01 |
| ALR-00135 | 3h ago | Phishing Email Blocked | Low | Investigating | SRV-DC-01 |
| ALR-00005 | 8h ago | Insider Threat Indicator | Low | Open | SRV-DC-01 |
| ALR-00441 | 11h ago | Data Exfiltration Attempt | High | Open | WS-LAP-012 |
| ALR-00058 | 13h ago | Privilege Escalation Attempt | Low | Escalated | SRV-DC-01 |