Malware Signature Match
Medium
Open
ALR-00489 · 2026-10-07T13:42:57Z
Description
Known malware signature (Emotet variant) detected in file on WS-LAP-012. SOC365 Engine quarantined the file. User context: e.evans.
Alert Metadata
Endpoint Information
MITRE ATT&CK Mapping
Investigation Timeline
13:42:57
Event ingested by SOC365 Engine
13:43:00
EmilyAI triage started — correlation enrichment
13:43:09
EmilyAI confidence: 94% — escalated to human analyst
13:43:33
Alert assigned to analyst: Emma Richardson
13:43:53
Investigation started — querying SIEM and threat intelligence
Related Alerts
| ID | Time | Alert | Severity | Status | Host |
|---|---|---|---|---|---|
| ALR-00138 | 44m ago | Malware Signature Match | Low | Open | SRV-SQL-01 |
| ALR-00302 | 57m ago | Unusual Outbound Traffic | Medium | False Positive | WS-LAP-012 |
| ALR-00159 | 2h ago | Shadow IT Discovery | Low | Open | WS-LAP-012 |
| ALR-00125 | 2h ago | Brute Force SSH | Medium | Investigating | WS-LAP-012 |
| ALR-00498 | 3h ago | Malware Signature Match | Low | Resolved | WS-PC-004 |