Malware Signature Match
Medium
Open
ALR-00435 · 2026-04-07T14:57:44Z
Description
Known malware signature (Emotet variant) detected in file on WS-PC-002. Email Gateway quarantined the file. User context: d.walker.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
14:57:44
Event ingested by SOC365 Engine
14:57:48
EmilyAI triage started — correlation enrichment
14:57:57
EmilyAI confidence: 78% — escalated to human analyst
14:58:14
Alert assigned to analyst: Anika Patel
14:59:36
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00231 | 4h ago | Malware Signature Match | Low | Investigating | SW-CORE-01 |
| ALR-00084 | 12h ago | Brute Force SSH | Medium | Open | WS-PC-002 |
| ALR-00181 | 13h ago | DLP Policy Violation | Medium | False Positive | WS-PC-002 |
| ALR-00311 | 15h ago | Kerberoasting Attempt | High | Escalated | WS-PC-002 |
| ALR-00276 | 16h ago | Unauthorised USB Device | Informational | False Positive | WS-PC-002 |