Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 04:47:22 UTC

Credential Stuffing Attempt

Informational Escalated
ALR-00469 · 2026-10-05T13:44:00Z

Description

Credential stuffing attack detected against VPN gateway. 234 unique username/password combinations attempted. Flagged by Email Gateway.

Alert Metadata

Alert ID
ALR-00469
Timestamp
2026-10-05T13:44:00Z
Severity
Informational
Status
Escalated
Detection Source
Email Gateway
Assigned Analyst
EmilyAI (auto)

Endpoint Information

Hostname
SRV-APP-01
User Account
e.evans
Source IP
103.107.216.222
Destination IP
10.0.188.43
Origin Country
UA Ukraine

MITRE ATT&CK Mapping

Tactic
Credential Access
Technique
T1110.004
Reference
attack.mitre.org/techniques/T1110.004

Investigation Timeline

13:44:00 Event ingested by SOC365 Engine
13:44:02 EmilyAI triage started — correlation enrichment
13:44:12 EmilyAI confidence: 94% — escalated to human analyst
13:44:19 Alert assigned to analyst: EmilyAI (auto)
13:44:57 Investigation started — querying SIEM and threat intelligence
13:50:34 Containment action taken — endpoint isolated
14:02:56 Alert resolved — remediation complete

Related Alerts

ID Time Alert Severity Status Host
ALR-00344 9h ago Insider Threat Indicator High Open SRV-APP-01
ALR-00374 20h ago Credential Stuffing Attempt Low Resolved WS-PC-003
ALR-00386 22h ago Suspicious Scheduled Task Informational Resolved SRV-APP-01
ALR-00461 1d ago Credential Stuffing Attempt Informational Escalated SRV-APP-01
ALR-00153 1d ago Failed MFA Challenge Critical Escalated SRV-APP-01