Credential Stuffing Attempt
High
Investigating
ALR-00416 · 2026-07-05T13:11:47Z
Description
Credential stuffing attack detected against VPN gateway. 234 unique username/password combinations attempted. Flagged by Network IDS.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
13:11:47
Event ingested by SOC365 Engine
13:11:50
EmilyAI triage started — correlation enrichment
13:12:02
EmilyAI confidence: 86% — escalated to human analyst
13:12:02
Alert assigned to analyst: Sarah Chen
13:13:19
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00215 | 1h ago | Credential Stuffing Attempt | Low | Resolved | AP-WIFI-03 |
| ALR-00127 | 3h ago | Credential Stuffing Attempt | Low | Escalated | VM-DEV-01 |
| ALR-00336 | 4h ago | Credential Stuffing Attempt | Informational | Resolved | SRV-SQL-01 |
| ALR-00456 | 6h ago | Certificate Anomaly | Informational | Open | WS-PC-006 |
| ALR-00112 | 21h ago | Credential Stuffing Attempt | Low | Escalated | WS-LAP-010 |