Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 03:41:43 UTC

High Alerts

Clear
ID Timestamp Alert Type Severity Status Source Hostname User Origin Analyst MITRE
ALR-00219 1h ago Phishing Email Blocked High Investigating DecoyPulse WS-LAP-010 c.williams US United States James Okonkwo T1566.001
ALR-00292 1h ago Tor Exit Node Connection High Open Email Gateway SRV-SQL-01 j.smith VN Vietnam Anika Patel T1090.003
ALR-00265 7h ago Tor Exit Node Connection High Escalated EmilyAI Triage SRV-APP-01 e.evans GB United Kingdom Marcus Webb T1090.003
ALR-00487 9h ago Suspicious PowerShell Execution High Escalated Dark Web Monitor WS-PC-003 r.davies VN Vietnam Emma Richardson T1059.001
ALR-00354 19h ago Phishing Email Blocked High Open SOC365 Engine SRV-DC-01 system RO Romania Marcus Webb T1566.001
ALR-00073 20h ago Insider Threat Indicator High Open DecoyPulse WS-LAP-012 d.walker DE Germany Anika Patel T1119
ALR-00094 1d ago C2 Beacon Activity High Escalated Attack Surface Scanner WS-PC-006 r.davies NG Nigeria Sarah Chen T1071.001
ALR-00429 1d ago Unauthorised USB Device High Escalated DecoyPulse SRV-APP-01 h.roberts BR Brazil James Okonkwo T1091
ALR-00178 1d ago Lateral Movement Detected High Escalated Email Gateway SRV-DC-01 system US United States Anika Patel T1021.002
ALR-00092 2d ago Suspicious PowerShell Execution High Escalated EmilyAI Triage SRV-WEB-01 d.walker IR Iran Anika Patel T1059.001
ALR-00142 2d ago Certificate Anomaly High Escalated SOC365 Engine SRV-FILE-01 j.smith FR France James Okonkwo T1553.004
ALR-00381 2d ago Insider Threat Indicator High Open Endpoint Agent AP-WIFI-03 p.thomas UA Ukraine James Okonkwo T1119
ALR-00447 2d ago Kerberoasting Attempt High Escalated Network IDS WS-LAP-010 f.hall IR Iran Anika Patel T1558.003
ALR-00417 2d ago Tor Exit Node Connection High Investigating DecoyPulse SRV-WEB-01 r.davies US United States Marcus Webb T1090.003
ALR-00153 2d ago Unusual Outbound Traffic High Investigating Dark Web Monitor WS-PC-004 k.brown CN China Sarah Chen T1041
ALR-00100 2d ago DLP Policy Violation High Escalated Endpoint Agent WS-PC-002 n.clark RO Romania Emma Richardson T1048
ALR-00238 2d ago DLP Policy Violation High Escalated DLP Module WS-PC-003 a.wilson IR Iran Emma Richardson T1048
ALR-00155 2d ago Shadow IT Discovery High Open SOC365 Engine AP-WIFI-03 m.taylor FR France Anika Patel T1567
ALR-00269 3d ago C2 Beacon Activity High Escalated DLP Module SRV-MAIL-01 m.taylor DE Germany James Okonkwo T1071.001
ALR-00476 3d ago Kerberoasting Attempt High Open SOC365 Engine SRV-MAIL-01 system IN India Anika Patel T1558.003
ALR-00379 3d ago Port Scan Detected High Escalated Network IDS AP-WIFI-03 k.brown GB United Kingdom Emma Richardson T1046
ALR-00157 3d ago Brute Force SSH High Investigating Network IDS SRV-FILE-01 system GB United Kingdom Emma Richardson T1110.001
ALR-00383 3d ago Unusual Outbound Traffic High Open Cloud Connector WS-MAC-005 l.johnson DE Germany Emma Richardson T1041
ALR-00103 4d ago Unauthorised USB Device High Escalated Endpoint Agent WS-LAP-012 system UA Ukraine Sarah Chen T1091
ALR-00334 4d ago Ransomware Behaviour Detected High Escalated Attack Surface Scanner AP-WIFI-03 d.walker US United States Marcus Webb T1486
ALR-00028 4d ago DecoyPulse Honeypot Triggered High Escalated EmilyAI Triage SRV-SQL-01 a.wilson FR France Marcus Webb T1018
ALR-00209 4d ago Lateral Movement Detected High Open DecoyPulse WS-PC-002 f.hall RU Russia Anika Patel T1021.002
ALR-00046 4d ago C2 Beacon Activity High Investigating DecoyPulse WS-PC-003 j.smith UA Ukraine Sarah Chen T1071.001
ALR-00303 4d ago Lateral Movement Detected High Open Cloud Connector WS-PC-006 e.evans CN China Emma Richardson T1021.002
ALR-00164 5d ago Tor Exit Node Connection High Escalated Attack Surface Scanner WS-PC-002 k.brown VN Vietnam James Okonkwo T1090.003
ALR-00390 5d ago Malware Signature Match High Investigating Firewall SRV-FILE-01 f.hall IN India Emma Richardson T1204.002
ALR-00436 5d ago Shadow IT Discovery High Investigating EmilyAI Triage WS-PC-002 a.wilson IR Iran James Okonkwo T1567
ALR-00416 5d ago Rogue DHCP Server High Open Email Gateway SRV-BACKUP-01 s.jones UA Ukraine James Okonkwo T1557.003
ALR-00302 5d ago Suspicious PowerShell Execution High Investigating Endpoint Agent SRV-MAIL-01 f.hall RO Romania Sarah Chen T1059.001
ALR-00114 5d ago Suspicious PowerShell Execution High Investigating DLP Module WS-PC-004 e.evans US United States James Okonkwo T1059.001
ALR-00005 5d ago Certificate Anomaly High Investigating Attack Surface Scanner WS-LAP-011 r.davies FR France James Okonkwo T1553.004
ALR-00291 5d ago Insider Threat Indicator High Escalated DecoyPulse WS-PC-003 d.walker GB United Kingdom James Okonkwo T1119
ALR-00356 6d ago Certificate Anomaly High Open Dark Web Monitor SRV-DC-01 e.evans RU Russia James Okonkwo T1553.004
ALR-00116 6d ago Privilege Escalation Attempt High Investigating Email Gateway WS-PC-004 m.taylor KP North Korea James Okonkwo T1134
ALR-00335 6d ago Credential Stuffing Attempt High Escalated Email Gateway FW-EDGE-01 a.wilson GB United Kingdom James Okonkwo T1110.004
ALR-00068 6d ago C2 Beacon Activity High Escalated DecoyPulse AP-WIFI-03 e.evans UA Ukraine Marcus Webb T1071.001
ALR-00031 6d ago Kerberoasting Attempt High Investigating Endpoint Agent WS-PC-003 d.walker BR Brazil James Okonkwo T1558.003