C2 Beacon Activity
Low
Open
ALR-00418 · 2026-07-06T15:24:12Z
Description
Suspected C2 beacon detected from WS-LAP-012. Regular 60-second interval HTTPS POST to suspicious domain. Firewall blocked outbound.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
15:24:12
Event ingested by SOC365 Engine
15:24:17
EmilyAI triage started — correlation enrichment
15:24:25
EmilyAI confidence: 95% — escalated to human analyst
15:24:56
Alert assigned to analyst: EmilyAI (auto)
15:25:05
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00198 | 6h ago | C2 Beacon Activity | Informational | Resolved | WS-PC-004 |
| ALR-00087 | 14h ago | Privilege Escalation Attempt | Low | Resolved | WS-LAP-012 |
| ALR-00190 | 19h ago | C2 Beacon Activity | Medium | Escalated | WS-PC-001 |
| ALR-00369 | 21h ago | Shadow IT Discovery | Low | Escalated | WS-LAP-012 |
| ALR-00239 | 23h ago | Tor Exit Node Connection | Medium | Open | WS-LAP-012 |