Suspicious Scheduled Task
High
Open
ALR-00384 · 2026-07-09T08:52:48Z
Description
New scheduled task created on WS-PC-001 by 'f.hall' running encoded batch script at 02:00 daily. No change request on file.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
08:52:48
Event ingested by SOC365 Engine
08:52:53
EmilyAI triage started — correlation enrichment
08:53:03
EmilyAI confidence: 98% — escalated to human analyst
08:53:17
Alert assigned to analyst: Anika Patel
08:55:23
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00101 | 50m ago | Suspicious Scheduled Task | Medium | False Positive | WS-LAP-011 |
| ALR-00122 | 4h ago | Data Exfiltration Attempt | Low | False Positive | WS-PC-001 |
| ALR-00096 | 11h ago | Anomalous DNS Query | Low | Resolved | WS-PC-001 |
| ALR-00454 | 16h ago | Suspicious Scheduled Task | Informational | False Positive | WS-PC-002 |
| ALR-00364 | 23h ago | Suspicious Scheduled Task | Informational | Open | SRV-MAIL-01 |