Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 04:50:04 UTC

Phishing Email Blocked

Low Escalated
ALR-00498 · 2026-10-08T23:29:58Z

Description

Phishing email targeting 'k.brown@company.co.uk' blocked by DLP Module. Payload: credential harvesting link mimicking Microsoft 365 login.

Alert Metadata

Alert ID
ALR-00498
Timestamp
2026-10-08T23:29:58Z
Severity
Low
Status
Escalated
Detection Source
DLP Module
Assigned Analyst
EmilyAI (auto)

Endpoint Information

Hostname
FW-EDGE-01
User Account
k.brown
Source IP
103.85.216.26
Destination IP
10.0.216.95
Origin Country
NG Nigeria

MITRE ATT&CK Mapping

Tactic
Initial Access
Technique
T1566.001
Reference
attack.mitre.org/techniques/T1566.001

Investigation Timeline

23:29:58 Event ingested by SOC365 Engine
23:30:01 EmilyAI triage started — correlation enrichment
23:30:10 EmilyAI confidence: 87% — escalated to human analyst
23:30:40 Alert assigned to analyst: EmilyAI (auto)
23:30:52 Investigation started — querying SIEM and threat intelligence
23:39:22 Containment action taken — endpoint isolated
23:42:46 Alert resolved — remediation complete

Related Alerts

ID Time Alert Severity Status Host
ALR-00195 30m ago Port Scan Detected Low Escalated FW-EDGE-01
ALR-00072 50m ago Malware Signature Match Medium Escalated FW-EDGE-01
ALR-00441 3h ago Phishing Email Blocked Low Resolved SW-CORE-01
ALR-00218 3h ago Phishing Email Blocked Low Resolved FW-EDGE-01
ALR-00196 8h ago Phishing Email Blocked Informational Resolved SRV-BACKUP-01