Critical Alerts — SOC in a Box Demo

17 alerts

ID	Timestamp	Alert Type	Severity	Status	Source	Hostname	User	Origin	Analyst	MITRE
ALR-00066	1d ago	Shadow IT Discovery	Critical	Open	Endpoint Agent	WS-LAP-011	h.roberts	RO Romania	Emma Richardson	`T1567`
ALR-00076	1d ago	Insider Threat Indicator	Critical	Investigating	Dark Web Monitor	SRV-WEB-01	p.thomas	US United States	Anika Patel	`T1119`
ALR-00439	1d ago	Suspicious PowerShell Execution	Critical	Escalated	Network IDS	AP-WIFI-03	j.smith	US United States	Emma Richardson	`T1059.001`
ALR-00228	1d ago	Privilege Escalation Attempt	Critical	Escalated	SOC365 Engine	SRV-APP-01	a.wilson	DE Germany	Sarah Chen	`T1134`
ALR-00208	2d ago	Malware Signature Match	Critical	Open	DLP Module	FW-EDGE-01	j.smith	BR Brazil	Marcus Webb	`T1204.002`
ALR-00299	2d ago	Insider Threat Indicator	Critical	Investigating	Dark Web Monitor	WS-LAP-012	p.thomas	NL Netherlands	Marcus Webb	`T1119`
ALR-00011	2d ago	DLP Policy Violation	Critical	Investigating	Email Gateway	SRV-MAIL-01	l.johnson	US United States	Anika Patel	`T1048`
ALR-00304	3d ago	Ransomware Behaviour Detected	Critical	Open	Dark Web Monitor	WS-PC-006	j.smith	IR Iran	Marcus Webb	`T1486`
ALR-00024	3d ago	Insider Threat Indicator	Critical	Investigating	Email Gateway	SRV-DC-01	k.brown	NL Netherlands	James Okonkwo	`T1119`
ALR-00317	3d ago	Shadow IT Discovery	Critical	Investigating	Dark Web Monitor	WS-PC-002	a.wilson	FR France	Sarah Chen	`T1567`
ALR-00071	3d ago	Pass-the-Hash Detected	Critical	Open	DLP Module	WS-PC-002	r.davies	KP North Korea	James Okonkwo	`T1550.002`
ALR-00063	4d ago	Tor Exit Node Connection	Critical	Investigating	Dark Web Monitor	VM-DEV-01	s.jones	CN China	Anika Patel	`T1090.003`
ALR-00238	4d ago	Brute Force SSH	Critical	Open	Endpoint Agent	SW-CORE-01	j.smith	NL Netherlands	Sarah Chen	`T1110.001`
ALR-00032	4d ago	Certificate Anomaly	Critical	Escalated	DLP Module	AP-WIFI-03	e.evans	RU Russia	James Okonkwo	`T1553.004`
ALR-00360	4d ago	Data Exfiltration Attempt	Critical	Open	Dark Web Monitor	SRV-MAIL-01	system	UA Ukraine	Sarah Chen	`T1567.002`
ALR-00096	5d ago	Anomalous DNS Query	Critical	Open	DLP Module	WS-PC-001	j.smith	KP North Korea	Sarah Chen	`T1568.002`
ALR-00468	6d ago	Kerberoasting Attempt	Critical	Escalated	DLP Module	WS-PC-003	k.brown	FR France	Anika Patel	`T1558.003`