Credential Stuffing Attempt
Low
Resolved
ALR-00363 · 2026-05-23T13:11:14Z
Description
Credential stuffing attack detected against VPN gateway. 234 unique username/password combinations attempted. Flagged by Email Gateway.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
13:11:14
Event ingested by SOC365 Engine
13:11:16
EmilyAI triage started — correlation enrichment
13:11:26
EmilyAI confidence: 82% — escalated to human analyst
13:11:38
Alert assigned to analyst: EmilyAI (auto)
13:12:14
Investigation started — querying SIEM and threat intelligence
13:17:18
Containment action taken — endpoint isolated
13:24:48
Alert resolved — remediation complete
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00191 | 6h ago | Unusual Outbound Traffic | Low | False Positive | SRV-WEB-01 |
| ALR-00381 | 9h ago | Credential Stuffing Attempt | Low | Investigating | WS-PC-006 |
| ALR-00193 | 12h ago | Credential Stuffing Attempt | Low | Investigating | AP-WIFI-03 |
| ALR-00201 | 19h ago | Credential Stuffing Attempt | Medium | False Positive | VM-DEV-01 |
| ALR-00175 | 19h ago | Credential Stuffing Attempt | Medium | Escalated | SRV-DC-01 |