Low Alerts
100 alerts
| ID | Timestamp | Alert Type | Severity | Status | Source | Hostname | User | Origin | Analyst | MITRE |
|---|---|---|---|---|---|---|---|---|---|---|
| ALR-00194 | 2h ago | Port Scan Detected | Low | False Positive | DecoyPulse | SRV-APP-01 | k.brown | IR Iran | EmilyAI (auto) | T1046 |
| ALR-00169 | 3h ago | Suspicious Scheduled Task | Low | Resolved | DLP Module | SRV-WEB-01 | m.taylor | RU Russia | EmilyAI (auto) | T1053.005 |
| ALR-00088 | 6h ago | DecoyPulse Honeypot Triggered | Low | Open | DLP Module | SRV-DC-01 | s.jones | NL Netherlands | EmilyAI (auto) | T1018 |
| ALR-00229 | 8h ago | DLP Policy Violation | Low | Escalated | Network IDS | WS-PC-006 | system | RO Romania | EmilyAI (auto) | T1048 |
| ALR-00215 | 9h ago | Phishing Email Blocked | Low | Investigating | Attack Surface Scanner | WS-PC-002 | s.jones | KP North Korea | EmilyAI (auto) | T1566.001 |
| ALR-00257 | 9h ago | Kerberoasting Attempt | Low | Open | Dark Web Monitor | WS-LAP-011 | k.brown | US United States | EmilyAI (auto) | T1558.003 |
| ALR-00148 | 9h ago | Anomalous DNS Query | Low | Resolved | Cloud Connector | SRV-APP-01 | s.jones | IN India | EmilyAI (auto) | T1568.002 |
| ALR-00290 | 14h ago | Phishing Email Blocked | Low | Investigating | Email Gateway | VM-DEV-01 | f.hall | VN Vietnam | EmilyAI (auto) | T1566.001 |
| ALR-00071 | 15h ago | Shadow IT Discovery | Low | Investigating | DLP Module | VM-DEV-01 | p.thomas | RO Romania | EmilyAI (auto) | T1567 |
| ALR-00174 | 15h ago | DecoyPulse Honeypot Triggered | Low | Escalated | Network IDS | WS-PC-002 | c.williams | NL Netherlands | EmilyAI (auto) | T1018 |
| ALR-00179 | 19h ago | Tor Exit Node Connection | Low | Resolved | SOC365 Engine | SRV-APP-01 | s.jones | IR Iran | EmilyAI (auto) | T1090.003 |
| ALR-00115 | 19h ago | Tor Exit Node Connection | Low | False Positive | Endpoint Agent | WS-PC-006 | a.wilson | RO Romania | EmilyAI (auto) | T1090.003 |
| ALR-00298 | 22h ago | Shadow IT Discovery | Low | Escalated | EmilyAI Triage | WS-PC-006 | k.brown | NG Nigeria | EmilyAI (auto) | T1567 |
| ALR-00129 | 1d ago | Anomalous DNS Query | Low | False Positive | Dark Web Monitor | WS-LAP-012 | a.wilson | DE Germany | EmilyAI (auto) | T1568.002 |
| ALR-00097 | 1d ago | Data Exfiltration Attempt | Low | Resolved | Attack Surface Scanner | SW-CORE-01 | f.hall | DE Germany | EmilyAI (auto) | T1567.002 |
| ALR-00034 | 1d ago | Anomalous DNS Query | Low | Open | Cloud Connector | WS-PC-002 | l.johnson | BR Brazil | EmilyAI (auto) | T1568.002 |
| ALR-00159 | 1d ago | Data Exfiltration Attempt | Low | Open | Network IDS | SRV-APP-01 | j.smith | IN India | EmilyAI (auto) | T1567.002 |
| ALR-00158 | 1d ago | Shadow IT Discovery | Low | Resolved | Endpoint Agent | WS-LAP-012 | r.davies | RU Russia | EmilyAI (auto) | T1567 |
| ALR-00118 | 1d ago | Unusual Outbound Traffic | Low | False Positive | Dark Web Monitor | SW-CORE-01 | s.jones | IN India | EmilyAI (auto) | T1041 |
| ALR-00081 | 1d ago | Port Scan Detected | Low | Escalated | Dark Web Monitor | WS-PC-003 | k.brown | VN Vietnam | EmilyAI (auto) | T1046 |
| ALR-00223 | 1d ago | Brute Force SSH | Low | Escalated | SOC365 Engine | WS-PC-002 | c.williams | DE Germany | EmilyAI (auto) | T1110.001 |
| ALR-00241 | 1d ago | Shadow IT Discovery | Low | Investigating | Network IDS | WS-LAP-010 | s.jones | VN Vietnam | EmilyAI (auto) | T1567 |
| ALR-00119 | 1d ago | Failed MFA Challenge | Low | Open | DLP Module | SRV-DC-01 | d.walker | FR France | EmilyAI (auto) | T1621 |
| ALR-00192 | 1d ago | Malware Signature Match | Low | False Positive | DLP Module | SRV-SQL-01 | system | FR France | EmilyAI (auto) | T1204.002 |
| ALR-00284 | 1d ago | Anomalous DNS Query | Low | Resolved | Network IDS | WS-PC-001 | r.davies | US United States | EmilyAI (auto) | T1568.002 |
| ALR-00144 | 2d ago | Unauthorised USB Device | Low | Investigating | Email Gateway | SRV-BACKUP-01 | e.evans | VN Vietnam | EmilyAI (auto) | T1091 |
| ALR-00296 | 2d ago | Failed MFA Challenge | Low | Resolved | Firewall | SRV-WEB-01 | a.wilson | KP North Korea | EmilyAI (auto) | T1621 |
| ALR-00151 | 2d ago | Brute Force SSH | Low | Open | Attack Surface Scanner | WS-PC-003 | j.smith | UA Ukraine | EmilyAI (auto) | T1110.001 |
| ALR-00013 | 2d ago | Data Exfiltration Attempt | Low | Open | Endpoint Agent | WS-PC-004 | k.brown | NG Nigeria | EmilyAI (auto) | T1567.002 |
| ALR-00059 | 2d ago | Lateral Movement Detected | Low | Investigating | DLP Module | WS-PC-006 | k.brown | CN China | EmilyAI (auto) | T1021.002 |
| ALR-00288 | 2d ago | Lateral Movement Detected | Low | Escalated | Attack Surface Scanner | SRV-APP-01 | d.walker | CN China | EmilyAI (auto) | T1021.002 |
| ALR-00287 | 2d ago | Anomalous DNS Query | Low | Open | Firewall | SRV-SQL-01 | a.wilson | RO Romania | EmilyAI (auto) | T1568.002 |
| ALR-00204 | 2d ago | DLP Policy Violation | Low | False Positive | DLP Module | SRV-DC-01 | m.taylor | NG Nigeria | EmilyAI (auto) | T1048 |
| ALR-00161 | 2d ago | Data Exfiltration Attempt | Low | Resolved | Cloud Connector | WS-LAP-012 | n.clark | GB United Kingdom | EmilyAI (auto) | T1567.002 |
| ALR-00069 | 2d ago | Credential Stuffing Attempt | Low | Resolved | DLP Module | WS-PC-001 | l.johnson | BR Brazil | EmilyAI (auto) | T1110.004 |
| ALR-00078 | 2d ago | Lateral Movement Detected | Low | Resolved | SOC365 Engine | WS-PC-001 | h.roberts | FR France | EmilyAI (auto) | T1021.002 |
| ALR-00001 | 2d ago | Unusual Outbound Traffic | Low | Investigating | Endpoint Agent | SRV-BACKUP-01 | j.smith | GB United Kingdom | EmilyAI (auto) | T1041 |
| ALR-00271 | 2d ago | Port Scan Detected | Low | False Positive | Network IDS | WS-PC-004 | n.clark | IN India | EmilyAI (auto) | T1046 |
| ALR-00039 | 2d ago | Suspicious Scheduled Task | Low | Investigating | SOC365 Engine | WS-MAC-005 | r.davies | IN India | EmilyAI (auto) | T1053.005 |
| ALR-00260 | 2d ago | C2 Beacon Activity | Low | False Positive | Network IDS | WS-MAC-005 | c.williams | BR Brazil | EmilyAI (auto) | T1071.001 |
| ALR-00134 | 3d ago | Insider Threat Indicator | Low | False Positive | Dark Web Monitor | SRV-MAIL-01 | l.johnson | KP North Korea | EmilyAI (auto) | T1119 |
| ALR-00213 | 3d ago | Pass-the-Hash Detected | Low | Escalated | Dark Web Monitor | WS-PC-002 | h.roberts | RO Romania | EmilyAI (auto) | T1550.002 |
| ALR-00018 | 3d ago | Unauthorised USB Device | Low | False Positive | Attack Surface Scanner | WS-PC-002 | f.hall | NL Netherlands | EmilyAI (auto) | T1091 |
| ALR-00185 | 3d ago | Lateral Movement Detected | Low | Investigating | DecoyPulse | WS-MAC-005 | c.williams | US United States | EmilyAI (auto) | T1021.002 |
| ALR-00033 | 3d ago | Credential Stuffing Attempt | Low | Escalated | Email Gateway | SRV-BACKUP-01 | d.walker | UA Ukraine | EmilyAI (auto) | T1110.004 |
| ALR-00019 | 3d ago | C2 Beacon Activity | Low | False Positive | DLP Module | WS-PC-002 | r.davies | RU Russia | EmilyAI (auto) | T1071.001 |
| ALR-00104 | 3d ago | Tor Exit Node Connection | Low | Open | Network IDS | VM-DEV-01 | r.davies | VN Vietnam | EmilyAI (auto) | T1090.003 |
| ALR-00060 | 3d ago | Unauthorised USB Device | Low | Open | Cloud Connector | WS-PC-001 | f.hall | VN Vietnam | EmilyAI (auto) | T1091 |
| ALR-00188 | 3d ago | Privilege Escalation Attempt | Low | False Positive | SOC365 Engine | WS-PC-006 | system | UA Ukraine | EmilyAI (auto) | T1134 |
| ALR-00240 | 3d ago | Malware Signature Match | Low | Investigating | Cloud Connector | FW-EDGE-01 | c.williams | RO Romania | EmilyAI (auto) | T1204.002 |
| ALR-00143 | 3d ago | Brute Force SSH | Low | False Positive | DLP Module | SRV-SQL-01 | h.roberts | RO Romania | EmilyAI (auto) | T1110.001 |
| ALR-00032 | 3d ago | Insider Threat Indicator | Low | Escalated | SOC365 Engine | WS-PC-001 | d.walker | CN China | EmilyAI (auto) | T1119 |
| ALR-00278 | 3d ago | Suspicious PowerShell Execution | Low | False Positive | Email Gateway | WS-PC-006 | s.jones | IN India | EmilyAI (auto) | T1059.001 |
| ALR-00191 | 3d ago | Ransomware Behaviour Detected | Low | False Positive | Firewall | WS-PC-001 | c.williams | RO Romania | EmilyAI (auto) | T1486 |
| ALR-00093 | 3d ago | Brute Force SSH | Low | Escalated | Firewall | AP-WIFI-03 | f.hall | RU Russia | EmilyAI (auto) | T1110.001 |
| ALR-00195 | 3d ago | Unusual Outbound Traffic | Low | Resolved | DecoyPulse | WS-LAP-011 | f.hall | DE Germany | EmilyAI (auto) | T1041 |
| ALR-00051 | 3d ago | Failed MFA Challenge | Low | Investigating | Cloud Connector | WS-PC-004 | k.brown | VN Vietnam | EmilyAI (auto) | T1621 |
| ALR-00177 | 4d ago | Failed MFA Challenge | Low | Investigating | Dark Web Monitor | SRV-DC-01 | m.taylor | NL Netherlands | EmilyAI (auto) | T1621 |
| ALR-00016 | 4d ago | Privilege Escalation Attempt | Low | False Positive | Attack Surface Scanner | WS-PC-001 | d.walker | RU Russia | EmilyAI (auto) | T1134 |
| ALR-00201 | 4d ago | Credential Stuffing Attempt | Low | False Positive | Endpoint Agent | WS-PC-004 | p.thomas | FR France | EmilyAI (auto) | T1110.004 |
| ALR-00063 | 4d ago | Failed MFA Challenge | Low | Investigating | Dark Web Monitor | WS-PC-001 | f.hall | DE Germany | EmilyAI (auto) | T1621 |
| ALR-00101 | 4d ago | Phishing Email Blocked | Low | Escalated | Email Gateway | WS-MAC-005 | k.brown | UA Ukraine | EmilyAI (auto) | T1566.001 |
| ALR-00258 | 4d ago | Brute Force SSH | Low | Open | Firewall | SRV-SQL-01 | a.wilson | DE Germany | EmilyAI (auto) | T1110.001 |
| ALR-00193 | 4d ago | DecoyPulse Honeypot Triggered | Low | Escalated | Endpoint Agent | WS-PC-001 | s.jones | IR Iran | EmilyAI (auto) | T1018 |
| ALR-00184 | 4d ago | Ransomware Behaviour Detected | Low | Resolved | Firewall | WS-LAP-010 | d.walker | VN Vietnam | EmilyAI (auto) | T1486 |
| ALR-00077 | 4d ago | C2 Beacon Activity | Low | Investigating | Attack Surface Scanner | AP-WIFI-03 | k.brown | IN India | EmilyAI (auto) | T1071.001 |
| ALR-00183 | 4d ago | DLP Policy Violation | Low | Resolved | Email Gateway | WS-MAC-005 | n.clark | US United States | EmilyAI (auto) | T1048 |
| ALR-00247 | 4d ago | Privilege Escalation Attempt | Low | Open | Endpoint Agent | AP-WIFI-03 | h.roberts | NL Netherlands | EmilyAI (auto) | T1134 |
| ALR-00154 | 4d ago | Credential Stuffing Attempt | Low | Investigating | Endpoint Agent | SRV-MAIL-01 | r.davies | CN China | EmilyAI (auto) | T1110.004 |
| ALR-00236 | 4d ago | Data Exfiltration Attempt | Low | Escalated | Network IDS | VM-DEV-01 | s.jones | US United States | EmilyAI (auto) | T1567.002 |
| ALR-00180 | 5d ago | Phishing Email Blocked | Low | Resolved | Email Gateway | FW-EDGE-01 | r.davies | IN India | EmilyAI (auto) | T1566.001 |
| ALR-00235 | 5d ago | Shadow IT Discovery | Low | Escalated | SOC365 Engine | SW-CORE-01 | d.walker | CN China | EmilyAI (auto) | T1567 |
| ALR-00212 | 5d ago | Unusual Outbound Traffic | Low | False Positive | Endpoint Agent | SRV-WEB-01 | a.wilson | VN Vietnam | EmilyAI (auto) | T1041 |
| ALR-00020 | 5d ago | DLP Policy Violation | Low | Open | Network IDS | SRV-SQL-01 | system | US United States | EmilyAI (auto) | T1048 |
| ALR-00025 | 5d ago | DecoyPulse Honeypot Triggered | Low | Escalated | Firewall | VM-DEV-01 | p.thomas | IR Iran | EmilyAI (auto) | T1018 |
| ALR-00045 | 5d ago | Lateral Movement Detected | Low | Resolved | Email Gateway | SRV-FILE-01 | d.walker | FR France | EmilyAI (auto) | T1021.002 |
| ALR-00150 | 5d ago | Suspicious Scheduled Task | Low | Resolved | Cloud Connector | SRV-DC-01 | p.thomas | RU Russia | EmilyAI (auto) | T1053.005 |
| ALR-00072 | 5d ago | Credential Stuffing Attempt | Low | Resolved | Endpoint Agent | VM-DEV-01 | system | RO Romania | EmilyAI (auto) | T1110.004 |
| ALR-00090 | 5d ago | Kerberoasting Attempt | Low | Open | EmilyAI Triage | WS-LAP-010 | system | FR France | EmilyAI (auto) | T1558.003 |
| ALR-00186 | 5d ago | Unusual Outbound Traffic | Low | Open | Network IDS | SRV-APP-01 | d.walker | DE Germany | EmilyAI (auto) | T1041 |
| ALR-00279 | 5d ago | Insider Threat Indicator | Low | Investigating | Cloud Connector | SRV-WEB-01 | r.davies | BR Brazil | EmilyAI (auto) | T1119 |
| ALR-00006 | 5d ago | Port Scan Detected | Low | Resolved | Cloud Connector | SRV-MAIL-01 | c.williams | KP North Korea | EmilyAI (auto) | T1046 |
| ALR-00074 | 5d ago | DLP Policy Violation | Low | False Positive | SOC365 Engine | AP-WIFI-03 | f.hall | GB United Kingdom | EmilyAI (auto) | T1048 |
| ALR-00259 | 5d ago | Suspicious PowerShell Execution | Low | False Positive | Email Gateway | SRV-SQL-01 | a.wilson | UA Ukraine | EmilyAI (auto) | T1059.001 |
| ALR-00297 | 5d ago | Phishing Email Blocked | Low | False Positive | EmilyAI Triage | WS-PC-002 | p.thomas | KP North Korea | EmilyAI (auto) | T1566.001 |
| ALR-00056 | 5d ago | Pass-the-Hash Detected | Low | False Positive | DecoyPulse | VM-DEV-01 | n.clark | DE Germany | EmilyAI (auto) | T1550.002 |
| ALR-00141 | 5d ago | Credential Stuffing Attempt | Low | Investigating | Attack Surface Scanner | FW-EDGE-01 | p.thomas | NG Nigeria | EmilyAI (auto) | T1110.004 |
| ALR-00304 | 6d ago | Unauthorised USB Device | Low | Escalated | Firewall | SRV-SQL-01 | a.wilson | IR Iran | EmilyAI (auto) | T1091 |
| ALR-00112 | 6d ago | Failed MFA Challenge | Low | Resolved | Endpoint Agent | SW-CORE-01 | system | IN India | EmilyAI (auto) | T1621 |
| ALR-00076 | 6d ago | Shadow IT Discovery | Low | Resolved | Cloud Connector | WS-MAC-005 | k.brown | RO Romania | EmilyAI (auto) | T1567 |
| ALR-00234 | 6d ago | Lateral Movement Detected | Low | False Positive | SOC365 Engine | WS-LAP-012 | r.davies | VN Vietnam | EmilyAI (auto) | T1021.002 |
| ALR-00038 | 6d ago | Unauthorised USB Device | Low | Investigating | DecoyPulse | WS-LAP-011 | j.smith | NG Nigeria | EmilyAI (auto) | T1091 |
| ALR-00156 | 6d ago | Suspicious PowerShell Execution | Low | Escalated | Email Gateway | WS-MAC-005 | j.smith | RO Romania | EmilyAI (auto) | T1059.001 |
| ALR-00140 | 6d ago | Credential Stuffing Attempt | Low | Investigating | DecoyPulse | WS-PC-006 | s.jones | VN Vietnam | EmilyAI (auto) | T1110.004 |
| ALR-00030 | 6d ago | Privilege Escalation Attempt | Low | False Positive | Cloud Connector | WS-PC-001 | f.hall | IN India | EmilyAI (auto) | T1134 |
| ALR-00135 | 6d ago | Shadow IT Discovery | Low | Escalated | Endpoint Agent | AP-WIFI-03 | p.thomas | IR Iran | EmilyAI (auto) | T1567 |
| ALR-00130 | 6d ago | Lateral Movement Detected | Low | Escalated | Attack Surface Scanner | WS-LAP-012 | e.evans | IN India | EmilyAI (auto) | T1021.002 |
| ALR-00139 | 6d ago | Port Scan Detected | Low | Resolved | Dark Web Monitor | WS-PC-003 | f.hall | VN Vietnam | EmilyAI (auto) | T1046 |
| ALR-00203 | 6d ago | Shadow IT Discovery | Low | Open | Email Gateway | WS-PC-002 | a.wilson | UA Ukraine | EmilyAI (auto) | T1567 |
| ALR-00057 | 6d ago | Privilege Escalation Attempt | Low | Open | DecoyPulse | FW-EDGE-01 | p.thomas | DE Germany | EmilyAI (auto) | T1134 |