Unusual Outbound Traffic
High
Escalated
ALR-00353 · 2026-04-07T05:30:47Z
Description
Unusual outbound traffic pattern from SRV-BACKUP-01 to IP in Eastern Europe. 450MB transferred over non-standard port. Flagged by Dark Web Monitor.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
05:30:47
Event ingested by SOC365 Engine
05:30:49
EmilyAI triage started — correlation enrichment
05:30:55
EmilyAI confidence: 96% — escalated to human analyst
05:31:09
Alert assigned to analyst: James Okonkwo
05:33:46
Investigation started — querying SIEM and threat intelligence
05:35:14
Containment action taken — endpoint isolated
05:42:03
Alert resolved — remediation complete
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00214 | 4h ago | Privilege Escalation Attempt | Low | Resolved | SRV-BACKUP-01 |
| ALR-00151 | 6h ago | Phishing Email Blocked | Informational | False Positive | SRV-BACKUP-01 |
| ALR-00032 | 6h ago | Unusual Outbound Traffic | High | Investigating | WS-PC-003 |
| ALR-00229 | 6h ago | Unauthorised USB Device | Medium | Open | SRV-BACKUP-01 |
| ALR-00172 | 8h ago | Suspicious PowerShell Execution | Critical | Investigating | SRV-BACKUP-01 |