Low Alerts — SOC in a Box Demo

100 alerts

Critical: 5 High: 12 Medium: 53 Low: 310

ID	Timestamp	Alert Type	Severity	Status	Source	Hostname	User	Origin	Analyst	MITRE
ALR-00280	52m ago	Malware Signature Match	Low	Escalated	Dark Web Monitor	VM-DEV-01	e.evans	UA Ukraine	EmilyAI (auto)	`T1204.002`
ALR-00180	1h ago	Port Scan Detected	Low	Escalated	Firewall	WS-PC-001	n.clark	RO Romania	EmilyAI (auto)	`T1046`
ALR-00162	3h ago	Certificate Anomaly	Low	Escalated	Firewall	AP-WIFI-03	r.davies	UA Ukraine	EmilyAI (auto)	`T1553.004`
ALR-00210	3h ago	Certificate Anomaly	Low	False Positive	DecoyPulse	VM-DEV-01	n.clark	NG Nigeria	EmilyAI (auto)	`T1553.004`
ALR-00196	3h ago	Insider Threat Indicator	Low	False Positive	SOC365 Engine	WS-PC-002	p.thomas	FR France	EmilyAI (auto)	`T1119`
ALR-00198	6h ago	Ransomware Behaviour Detected	Low	Escalated	Network IDS	WS-LAP-010	d.walker	RU Russia	EmilyAI (auto)	`T1486`
ALR-00195	6h ago	Port Scan Detected	Low	Open	Cloud Connector	SRV-DC-01	l.johnson	IN India	EmilyAI (auto)	`T1046`
ALR-00156	7h ago	DecoyPulse Honeypot Triggered	Low	Investigating	Attack Surface Scanner	WS-LAP-010	r.davies	NL Netherlands	EmilyAI (auto)	`T1018`
ALR-00111	9h ago	Kerberoasting Attempt	Low	Escalated	Endpoint Agent	SW-CORE-01	d.walker	GB United Kingdom	EmilyAI (auto)	`T1558.003`
ALR-00212	9h ago	Shadow IT Discovery	Low	Investigating	Attack Surface Scanner	AP-WIFI-03	m.taylor	NG Nigeria	EmilyAI (auto)	`T1567`
ALR-00221	11h ago	Insider Threat Indicator	Low	False Positive	Firewall	WS-PC-003	s.jones	VN Vietnam	EmilyAI (auto)	`T1119`
ALR-00092	12h ago	Credential Stuffing Attempt	Low	False Positive	EmilyAI Triage	SW-CORE-01	c.williams	DE Germany	EmilyAI (auto)	`T1110.004`
ALR-00100	14h ago	Data Exfiltration Attempt	Low	Investigating	Network IDS	SRV-APP-01	h.roberts	UA Ukraine	EmilyAI (auto)	`T1567.002`
ALR-00240	15h ago	DecoyPulse Honeypot Triggered	Low	Investigating	DLP Module	SRV-MAIL-01	c.williams	BR Brazil	EmilyAI (auto)	`T1018`
ALR-00062	17h ago	Lateral Movement Detected	Low	Investigating	Attack Surface Scanner	WS-PC-003	l.johnson	US United States	EmilyAI (auto)	`T1021.002`
ALR-00211	18h ago	Lateral Movement Detected	Low	Investigating	SOC365 Engine	FW-EDGE-01	a.wilson	VN Vietnam	EmilyAI (auto)	`T1021.002`
ALR-00146	18h ago	Suspicious Scheduled Task	Low	False Positive	SOC365 Engine	SRV-MAIL-01	system	RU Russia	EmilyAI (auto)	`T1053.005`
ALR-00118	19h ago	Shadow IT Discovery	Low	Investigating	EmilyAI Triage	SW-CORE-01	a.wilson	US United States	EmilyAI (auto)	`T1567`
ALR-00293	20h ago	Unusual Outbound Traffic	Low	Open	Attack Surface Scanner	SRV-WEB-01	system	CN China	EmilyAI (auto)	`T1041`
ALR-00287	21h ago	Unusual Outbound Traffic	Low	Escalated	Email Gateway	SW-CORE-01	j.smith	IN India	EmilyAI (auto)	`T1041`
ALR-00089	1d ago	Brute Force SSH	Low	Escalated	SOC365 Engine	FW-EDGE-01	m.taylor	KP North Korea	EmilyAI (auto)	`T1110.001`
ALR-00281	1d ago	Phishing Email Blocked	Low	Investigating	Attack Surface Scanner	WS-PC-004	s.jones	RO Romania	EmilyAI (auto)	`T1566.001`
ALR-00117	1d ago	Rogue DHCP Server	Low	Investigating	Cloud Connector	SRV-MAIL-01	r.davies	DE Germany	EmilyAI (auto)	`T1557.003`
ALR-00012	1d ago	Lateral Movement Detected	Low	Open	DecoyPulse	SRV-DC-01	j.smith	RO Romania	EmilyAI (auto)	`T1021.002`
ALR-00108	1d ago	Failed MFA Challenge	Low	False Positive	Firewall	SRV-WEB-01	p.thomas	NL Netherlands	EmilyAI (auto)	`T1621`
ALR-00171	1d ago	DecoyPulse Honeypot Triggered	Low	Open	SOC365 Engine	SRV-MAIL-01	f.hall	US United States	EmilyAI (auto)	`T1018`
ALR-00040	1d ago	Shadow IT Discovery	Low	Open	DLP Module	WS-PC-003	d.walker	FR France	EmilyAI (auto)	`T1567`
ALR-00179	1d ago	Insider Threat Indicator	Low	Escalated	Cloud Connector	WS-PC-006	d.walker	GB United Kingdom	EmilyAI (auto)	`T1119`
ALR-00154	1d ago	Kerberoasting Attempt	Low	Resolved	EmilyAI Triage	VM-DEV-01	k.brown	IR Iran	EmilyAI (auto)	`T1558.003`
ALR-00136	1d ago	Port Scan Detected	Low	False Positive	Endpoint Agent	WS-PC-001	system	IR Iran	EmilyAI (auto)	`T1046`
ALR-00182	1d ago	Kerberoasting Attempt	Low	False Positive	SOC365 Engine	AP-WIFI-03	n.clark	US United States	EmilyAI (auto)	`T1558.003`
ALR-00020	1d ago	Phishing Email Blocked	Low	False Positive	Email Gateway	SRV-BACKUP-01	k.brown	DE Germany	EmilyAI (auto)	`T1566.001`
ALR-00318	1d ago	Data Exfiltration Attempt	Low	Escalated	EmilyAI Triage	WS-PC-004	f.hall	FR France	EmilyAI (auto)	`T1567.002`
ALR-00291	1d ago	Failed MFA Challenge	Low	Open	Attack Surface Scanner	WS-MAC-005	e.evans	RU Russia	EmilyAI (auto)	`T1621`
ALR-00050	1d ago	Tor Exit Node Connection	Low	Open	DecoyPulse	WS-PC-002	system	BR Brazil	EmilyAI (auto)	`T1090.003`
ALR-00302	2d ago	Port Scan Detected	Low	False Positive	Dark Web Monitor	SRV-SQL-01	l.johnson	IN India	EmilyAI (auto)	`T1046`
ALR-00080	2d ago	Anomalous DNS Query	Low	False Positive	Endpoint Agent	WS-PC-006	j.smith	IR Iran	EmilyAI (auto)	`T1568.002`
ALR-00303	2d ago	DecoyPulse Honeypot Triggered	Low	False Positive	Cloud Connector	WS-LAP-012	e.evans	UA Ukraine	EmilyAI (auto)	`T1018`
ALR-00241	2d ago	Anomalous DNS Query	Low	Escalated	DLP Module	AP-WIFI-03	d.walker	GB United Kingdom	EmilyAI (auto)	`T1568.002`
ALR-00081	2d ago	Kerberoasting Attempt	Low	Resolved	Dark Web Monitor	WS-PC-004	m.taylor	US United States	EmilyAI (auto)	`T1558.003`
ALR-00028	2d ago	Pass-the-Hash Detected	Low	Investigating	Endpoint Agent	WS-PC-006	e.evans	RU Russia	EmilyAI (auto)	`T1550.002`
ALR-00017	2d ago	Failed MFA Challenge	Low	Resolved	Attack Surface Scanner	SRV-MAIL-01	l.johnson	CN China	EmilyAI (auto)	`T1621`
ALR-00296	2d ago	Credential Stuffing Attempt	Low	False Positive	DecoyPulse	SRV-MAIL-01	j.smith	RU Russia	EmilyAI (auto)	`T1110.004`
ALR-00239	2d ago	Lateral Movement Detected	Low	Open	Endpoint Agent	WS-PC-002	l.johnson	GB United Kingdom	EmilyAI (auto)	`T1021.002`
ALR-00285	2d ago	DLP Policy Violation	Low	Investigating	Network IDS	WS-MAC-005	f.hall	US United States	EmilyAI (auto)	`T1048`
ALR-00170	2d ago	Failed MFA Challenge	Low	Resolved	DecoyPulse	WS-PC-001	system	US United States	EmilyAI (auto)	`T1621`
ALR-00183	2d ago	Kerberoasting Attempt	Low	Escalated	SOC365 Engine	SRV-SQL-01	d.walker	IR Iran	EmilyAI (auto)	`T1558.003`
ALR-00194	2d ago	Port Scan Detected	Low	Investigating	Dark Web Monitor	WS-PC-002	p.thomas	IR Iran	EmilyAI (auto)	`T1046`
ALR-00218	2d ago	Unauthorised USB Device	Low	Resolved	DecoyPulse	SRV-BACKUP-01	system	US United States	EmilyAI (auto)	`T1091`
ALR-00001	2d ago	Unauthorised USB Device	Low	Resolved	Cloud Connector	WS-MAC-005	p.thomas	NL Netherlands	EmilyAI (auto)	`T1091`
ALR-00233	2d ago	Data Exfiltration Attempt	Low	Open	Attack Surface Scanner	SRV-MAIL-01	h.roberts	US United States	EmilyAI (auto)	`T1567.002`
ALR-00055	2d ago	Malware Signature Match	Low	Open	Email Gateway	SRV-BACKUP-01	m.taylor	UA Ukraine	EmilyAI (auto)	`T1204.002`
ALR-00255	2d ago	DLP Policy Violation	Low	Open	EmilyAI Triage	VM-DEV-01	f.hall	NL Netherlands	EmilyAI (auto)	`T1048`
ALR-00264	2d ago	Suspicious PowerShell Execution	Low	Resolved	Email Gateway	WS-MAC-005	p.thomas	KP North Korea	EmilyAI (auto)	`T1059.001`
ALR-00121	3d ago	Insider Threat Indicator	Low	False Positive	SOC365 Engine	SRV-WEB-01	l.johnson	NL Netherlands	EmilyAI (auto)	`T1119`
ALR-00132	3d ago	Lateral Movement Detected	Low	Resolved	DLP Module	SRV-MAIL-01	s.jones	VN Vietnam	EmilyAI (auto)	`T1021.002`
ALR-00272	3d ago	Shadow IT Discovery	Low	False Positive	Attack Surface Scanner	WS-PC-002	k.brown	UA Ukraine	EmilyAI (auto)	`T1567`
ALR-00079	3d ago	Failed MFA Challenge	Low	Investigating	DecoyPulse	SW-CORE-01	a.wilson	UA Ukraine	EmilyAI (auto)	`T1621`
ALR-00018	3d ago	Privilege Escalation Attempt	Low	False Positive	EmilyAI Triage	SRV-FILE-01	h.roberts	VN Vietnam	EmilyAI (auto)	`T1134`
ALR-00220	3d ago	Certificate Anomaly	Low	Open	Dark Web Monitor	SRV-DC-01	d.walker	CN China	EmilyAI (auto)	`T1553.004`
ALR-00323	3d ago	Brute Force SSH	Low	Escalated	EmilyAI Triage	SRV-WEB-01	j.smith	IN India	EmilyAI (auto)	`T1110.001`
ALR-00134	3d ago	Brute Force SSH	Low	Open	Endpoint Agent	SRV-BACKUP-01	m.taylor	NG Nigeria	EmilyAI (auto)	`T1110.001`
ALR-00216	3d ago	Insider Threat Indicator	Low	Resolved	EmilyAI Triage	WS-PC-003	k.brown	KP North Korea	EmilyAI (auto)	`T1119`
ALR-00312	3d ago	Certificate Anomaly	Low	Investigating	Cloud Connector	WS-PC-004	l.johnson	UA Ukraine	EmilyAI (auto)	`T1553.004`
ALR-00271	3d ago	DecoyPulse Honeypot Triggered	Low	Open	Cloud Connector	AP-WIFI-03	h.roberts	KP North Korea	EmilyAI (auto)	`T1018`
ALR-00101	3d ago	Anomalous DNS Query	Low	Resolved	EmilyAI Triage	WS-PC-001	r.davies	DE Germany	EmilyAI (auto)	`T1568.002`
ALR-00006	3d ago	Pass-the-Hash Detected	Low	Resolved	Firewall	WS-PC-004	h.roberts	US United States	EmilyAI (auto)	`T1550.002`
ALR-00178	3d ago	Rogue DHCP Server	Low	Resolved	Network IDS	WS-LAP-011	j.smith	RU Russia	EmilyAI (auto)	`T1557.003`
ALR-00083	3d ago	Suspicious PowerShell Execution	Low	Resolved	Email Gateway	SRV-DC-01	system	RU Russia	EmilyAI (auto)	`T1059.001`
ALR-00021	4d ago	Port Scan Detected	Low	Resolved	DLP Module	SRV-MAIL-01	k.brown	UA Ukraine	EmilyAI (auto)	`T1046`
ALR-00056	4d ago	Failed MFA Challenge	Low	False Positive	SOC365 Engine	SRV-DC-01	s.jones	IN India	EmilyAI (auto)	`T1621`
ALR-00307	4d ago	Privilege Escalation Attempt	Low	Resolved	Email Gateway	FW-EDGE-01	p.thomas	CN China	EmilyAI (auto)	`T1134`
ALR-00103	4d ago	Port Scan Detected	Low	False Positive	EmilyAI Triage	FW-EDGE-01	d.walker	RO Romania	EmilyAI (auto)	`T1046`
ALR-00046	4d ago	Tor Exit Node Connection	Low	Resolved	Network IDS	WS-PC-002	n.clark	GB United Kingdom	EmilyAI (auto)	`T1090.003`
ALR-00049	4d ago	Suspicious Scheduled Task	Low	False Positive	Firewall	WS-LAP-012	p.thomas	NG Nigeria	EmilyAI (auto)	`T1053.005`
ALR-00309	4d ago	Failed MFA Challenge	Low	False Positive	Cloud Connector	WS-MAC-005	e.evans	KP North Korea	EmilyAI (auto)	`T1621`
ALR-00075	4d ago	Credential Stuffing Attempt	Low	False Positive	Attack Surface Scanner	SRV-DC-01	l.johnson	RO Romania	EmilyAI (auto)	`T1110.004`
ALR-00222	4d ago	Insider Threat Indicator	Low	Escalated	DecoyPulse	SRV-APP-01	e.evans	BR Brazil	EmilyAI (auto)	`T1119`
ALR-00308	4d ago	Shadow IT Discovery	Low	Open	Attack Surface Scanner	SW-CORE-01	d.walker	RU Russia	EmilyAI (auto)	`T1567`
ALR-00165	4d ago	Unauthorised USB Device	Low	Open	Firewall	WS-LAP-010	h.roberts	UA Ukraine	EmilyAI (auto)	`T1091`
ALR-00224	5d ago	Failed MFA Challenge	Low	Open	Cloud Connector	WS-MAC-005	l.johnson	US United States	EmilyAI (auto)	`T1621`
ALR-00069	5d ago	Port Scan Detected	Low	Resolved	Email Gateway	SRV-FILE-01	j.smith	RU Russia	EmilyAI (auto)	`T1046`
ALR-00261	5d ago	Phishing Email Blocked	Low	Investigating	Firewall	WS-PC-002	s.jones	GB United Kingdom	EmilyAI (auto)	`T1566.001`
ALR-00035	5d ago	Shadow IT Discovery	Low	Investigating	SOC365 Engine	SRV-WEB-01	s.jones	GB United Kingdom	EmilyAI (auto)	`T1567`
ALR-00061	5d ago	Malware Signature Match	Low	False Positive	Firewall	SRV-DC-01	l.johnson	KP North Korea	EmilyAI (auto)	`T1204.002`
ALR-00324	5d ago	Port Scan Detected	Low	Resolved	Attack Surface Scanner	WS-PC-006	h.roberts	RU Russia	EmilyAI (auto)	`T1046`
ALR-00126	5d ago	Pass-the-Hash Detected	Low	Open	Dark Web Monitor	WS-LAP-010	s.jones	GB United Kingdom	EmilyAI (auto)	`T1550.002`
ALR-00027	5d ago	DLP Policy Violation	Low	Resolved	DLP Module	FW-EDGE-01	n.clark	FR France	EmilyAI (auto)	`T1048`
ALR-00066	5d ago	Lateral Movement Detected	Low	Open	DLP Module	SW-CORE-01	n.clark	US United States	EmilyAI (auto)	`T1021.002`
ALR-00304	5d ago	Pass-the-Hash Detected	Low	Investigating	DLP Module	WS-PC-001	r.davies	GB United Kingdom	EmilyAI (auto)	`T1550.002`
ALR-00325	5d ago	Ransomware Behaviour Detected	Low	False Positive	DLP Module	SRV-SQL-01	f.hall	NG Nigeria	EmilyAI (auto)	`T1486`
ALR-00202	5d ago	Malware Signature Match	Low	Open	Email Gateway	WS-LAP-011	l.johnson	IN India	EmilyAI (auto)	`T1204.002`
ALR-00310	6d ago	Kerberoasting Attempt	Low	False Positive	Network IDS	WS-LAP-010	c.williams	FR France	EmilyAI (auto)	`T1558.003`
ALR-00033	6d ago	Brute Force SSH	Low	Escalated	Endpoint Agent	FW-EDGE-01	m.taylor	UA Ukraine	EmilyAI (auto)	`T1110.001`
ALR-00268	6d ago	Port Scan Detected	Low	False Positive	Dark Web Monitor	WS-LAP-012	c.williams	RO Romania	EmilyAI (auto)	`T1046`
ALR-00277	6d ago	Unusual Outbound Traffic	Low	Investigating	DLP Module	SRV-APP-01	system	DE Germany	EmilyAI (auto)	`T1041`
ALR-00316	6d ago	Certificate Anomaly	Low	False Positive	Network IDS	WS-LAP-011	f.hall	UA Ukraine	EmilyAI (auto)	`T1553.004`
ALR-00269	6d ago	Anomalous DNS Query	Low	Investigating	Email Gateway	SRV-DC-01	c.williams	IN India	EmilyAI (auto)	`T1568.002`
ALR-00284	6d ago	Shadow IT Discovery	Low	False Positive	Cloud Connector	WS-PC-004	r.davies	NL Netherlands	EmilyAI (auto)	`T1567`
ALR-00215	6d ago	Rogue DHCP Server	Low	False Positive	Email Gateway	WS-PC-006	c.williams	RO Romania	EmilyAI (auto)	`T1557.003`