Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 04:46:45 UTC

Port Scan Detected

High Open
ALR-00463 · 2026-10-05T18:40:27Z

Description

Sequential port scan (1-1024) detected targeting WS-MAC-005 from external IP. SOC365 Engine identified SYN scan pattern.

Alert Metadata

Alert ID
ALR-00463
Timestamp
2026-10-05T18:40:27Z
Severity
High
Status
Open
Detection Source
SOC365 Engine
Assigned Analyst
Anika Patel

Endpoint Information

Hostname
WS-MAC-005
User Account
h.roberts
Source IP
91.89.195.8
Destination IP
10.2.38.68
Origin Country
UA Ukraine

MITRE ATT&CK Mapping

Tactic
Reconnaissance
Technique
T1046
Reference
attack.mitre.org/techniques/T1046

Investigation Timeline

18:40:27 Event ingested by SOC365 Engine
18:40:32 EmilyAI triage started — correlation enrichment
18:40:33 EmilyAI confidence: 86% — escalated to human analyst
18:41:07 Alert assigned to analyst: Anika Patel
18:42:56 Investigation started — querying SIEM and threat intelligence

Related Alerts

ID Time Alert Severity Status Host
ALR-00492 1h ago Port Scan Detected Informational False Positive SRV-MAIL-01
ALR-00247 2h ago Ransomware Behaviour Detected Low Investigating WS-MAC-005
ALR-00071 3h ago Port Scan Detected Informational Investigating WS-PC-006
ALR-00188 4h ago Port Scan Detected Informational Escalated WS-PC-002
ALR-00461 10h ago Port Scan Detected Informational Open SRV-DC-01