Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 05:42:31 UTC

Phishing Email Blocked

Low False Positive
ALR-00358 · 2026-10-09T02:55:53Z

Description

Phishing email targeting 'd.walker@company.co.uk' blocked by DecoyPulse. Payload: credential harvesting link mimicking Microsoft 365 login.

Alert Metadata

Alert ID
ALR-00358
Timestamp
2026-10-09T02:55:53Z
Severity
Low
Status
False Positive
Detection Source
DecoyPulse
Assigned Analyst
EmilyAI (auto)

Endpoint Information

Hostname
WS-PC-004
User Account
d.walker
Source IP
45.81.148.126
Destination IP
10.2.175.235
Origin Country
RU Russia

MITRE ATT&CK Mapping

Tactic
Initial Access
Technique
T1566.001
Reference
attack.mitre.org/techniques/T1566.001

Investigation Timeline

02:55:53 Event ingested by SOC365 Engine
02:55:56 EmilyAI triage started — correlation enrichment
02:56:02 EmilyAI confidence: 89% — escalated to human analyst
02:56:23 Alert assigned to analyst: EmilyAI (auto)
02:57:54 Investigation started — querying SIEM and threat intelligence
03:03:15 Containment action taken — endpoint isolated
03:12:38 Alert resolved — remediation complete

Related Alerts

ID Time Alert Severity Status Host
ALR-00032 5h ago Phishing Email Blocked High Escalated SRV-SQL-01
ALR-00075 6h ago Failed MFA Challenge Medium Open WS-PC-004
ALR-00024 19h ago Phishing Email Blocked Low Investigating SRV-DC-01
ALR-00239 1d ago Malware Signature Match Low Open WS-PC-004
ALR-00031 1d ago Insider Threat Indicator Informational Open WS-PC-004