Credential Stuffing Attempt
Low
Investigating
ALR-00395 · 2026-07-07T03:37:47Z
Description
Credential stuffing attack detected against VPN gateway. 234 unique username/password combinations attempted. Flagged by Attack Surface Scanner.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
03:37:47
Event ingested by SOC365 Engine
03:37:52
EmilyAI triage started — correlation enrichment
03:37:53
EmilyAI confidence: 78% — escalated to human analyst
03:38:04
Alert assigned to analyst: EmilyAI (auto)
03:38:36
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00224 | 3h ago | Lateral Movement Detected | High | Open | AP-WIFI-03 |
| ALR-00174 | 5h ago | Insider Threat Indicator | Informational | Escalated | AP-WIFI-03 |
| ALR-00475 | 5h ago | Credential Stuffing Attempt | Informational | False Positive | SRV-MAIL-01 |
| ALR-00352 | 5h ago | Credential Stuffing Attempt | Medium | False Positive | SRV-FILE-01 |
| ALR-00276 | 8h ago | Kerberoasting Attempt | High | Escalated | AP-WIFI-03 |