Suspicious Scheduled Task
Low
Open
ALR-00438 · 2026-05-24T22:51:52Z
Description
New scheduled task created on SRV-FILE-01 by 'e.evans' running encoded batch script at 02:00 daily. No change request on file.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
22:51:52
Event ingested by SOC365 Engine
22:51:55
EmilyAI triage started — correlation enrichment
22:52:02
EmilyAI confidence: 90% — escalated to human analyst
22:52:07
Alert assigned to analyst: EmilyAI (auto)
22:53:43
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00300 | 40m ago | Suspicious Scheduled Task | High | Investigating | WS-PC-002 |
| ALR-00295 | 10h ago | Unauthorised USB Device | Medium | False Positive | SRV-FILE-01 |
| ALR-00019 | 10h ago | Suspicious Scheduled Task | Medium | False Positive | WS-MAC-005 |
| ALR-00463 | 11h ago | Suspicious Scheduled Task | Low | Open | WS-LAP-012 |
| ALR-00238 | 12h ago | Suspicious Scheduled Task | Low | Resolved | AP-WIFI-03 |