Malware Signature Match
Medium
False Positive
ALR-00437 · 2026-10-09T16:34:00Z
Description
Known malware signature (Emotet variant) detected in file on SW-CORE-01. DLP Module quarantined the file. User context: s.jones.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
16:34:00
Event ingested by SOC365 Engine
16:34:04
EmilyAI triage started — correlation enrichment
16:34:07
EmilyAI confidence: 90% — escalated to human analyst
16:34:18
Alert assigned to analyst: Anika Patel
16:36:07
Investigation started — querying SIEM and threat intelligence
16:43:37
Containment action taken — endpoint isolated
16:52:29
Alert resolved — remediation complete
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00419 | 14m ago | Malware Signature Match | Informational | Resolved | SRV-BACKUP-01 |
| ALR-00430 | 10h ago | Malware Signature Match | Medium | Open | AP-WIFI-03 |
| ALR-00389 | 15h ago | Malware Signature Match | Medium | Investigating | WS-PC-003 |
| ALR-00343 | 22h ago | Insider Threat Indicator | Low | Escalated | SW-CORE-01 |
| ALR-00146 | 1d ago | Malware Signature Match | Informational | Open | WS-PC-001 |