Interactive Demo — Simulated data only. Back to SOC in a Box
SOC365 Dashboard
Acme Legal Services Ltd Live 19:35:41 UTC

Low Alerts

Clear
ID Timestamp Alert Type Severity Status Source Hostname User Origin Analyst MITRE
ALR-00280 52m ago Malware Signature Match Low Escalated Dark Web Monitor VM-DEV-01 e.evans UA Ukraine EmilyAI (auto) T1204.002
ALR-00180 1h ago Port Scan Detected Low Escalated Firewall WS-PC-001 n.clark RO Romania EmilyAI (auto) T1046
ALR-00162 3h ago Certificate Anomaly Low Escalated Firewall AP-WIFI-03 r.davies UA Ukraine EmilyAI (auto) T1553.004
ALR-00210 3h ago Certificate Anomaly Low False Positive DecoyPulse VM-DEV-01 n.clark NG Nigeria EmilyAI (auto) T1553.004
ALR-00196 3h ago Insider Threat Indicator Low False Positive SOC365 Engine WS-PC-002 p.thomas FR France EmilyAI (auto) T1119
ALR-00198 6h ago Ransomware Behaviour Detected Low Escalated Network IDS WS-LAP-010 d.walker RU Russia EmilyAI (auto) T1486
ALR-00195 6h ago Port Scan Detected Low Open Cloud Connector SRV-DC-01 l.johnson IN India EmilyAI (auto) T1046
ALR-00156 7h ago DecoyPulse Honeypot Triggered Low Investigating Attack Surface Scanner WS-LAP-010 r.davies NL Netherlands EmilyAI (auto) T1018
ALR-00111 9h ago Kerberoasting Attempt Low Escalated Endpoint Agent SW-CORE-01 d.walker GB United Kingdom EmilyAI (auto) T1558.003
ALR-00212 9h ago Shadow IT Discovery Low Investigating Attack Surface Scanner AP-WIFI-03 m.taylor NG Nigeria EmilyAI (auto) T1567
ALR-00221 11h ago Insider Threat Indicator Low False Positive Firewall WS-PC-003 s.jones VN Vietnam EmilyAI (auto) T1119
ALR-00092 12h ago Credential Stuffing Attempt Low False Positive EmilyAI Triage SW-CORE-01 c.williams DE Germany EmilyAI (auto) T1110.004
ALR-00100 14h ago Data Exfiltration Attempt Low Investigating Network IDS SRV-APP-01 h.roberts UA Ukraine EmilyAI (auto) T1567.002
ALR-00240 15h ago DecoyPulse Honeypot Triggered Low Investigating DLP Module SRV-MAIL-01 c.williams BR Brazil EmilyAI (auto) T1018
ALR-00062 17h ago Lateral Movement Detected Low Investigating Attack Surface Scanner WS-PC-003 l.johnson US United States EmilyAI (auto) T1021.002
ALR-00211 18h ago Lateral Movement Detected Low Investigating SOC365 Engine FW-EDGE-01 a.wilson VN Vietnam EmilyAI (auto) T1021.002
ALR-00146 18h ago Suspicious Scheduled Task Low False Positive SOC365 Engine SRV-MAIL-01 system RU Russia EmilyAI (auto) T1053.005
ALR-00118 19h ago Shadow IT Discovery Low Investigating EmilyAI Triage SW-CORE-01 a.wilson US United States EmilyAI (auto) T1567
ALR-00293 20h ago Unusual Outbound Traffic Low Open Attack Surface Scanner SRV-WEB-01 system CN China EmilyAI (auto) T1041
ALR-00287 21h ago Unusual Outbound Traffic Low Escalated Email Gateway SW-CORE-01 j.smith IN India EmilyAI (auto) T1041
ALR-00089 1d ago Brute Force SSH Low Escalated SOC365 Engine FW-EDGE-01 m.taylor KP North Korea EmilyAI (auto) T1110.001
ALR-00281 1d ago Phishing Email Blocked Low Investigating Attack Surface Scanner WS-PC-004 s.jones RO Romania EmilyAI (auto) T1566.001
ALR-00117 1d ago Rogue DHCP Server Low Investigating Cloud Connector SRV-MAIL-01 r.davies DE Germany EmilyAI (auto) T1557.003
ALR-00012 1d ago Lateral Movement Detected Low Open DecoyPulse SRV-DC-01 j.smith RO Romania EmilyAI (auto) T1021.002
ALR-00108 1d ago Failed MFA Challenge Low False Positive Firewall SRV-WEB-01 p.thomas NL Netherlands EmilyAI (auto) T1621
ALR-00171 1d ago DecoyPulse Honeypot Triggered Low Open SOC365 Engine SRV-MAIL-01 f.hall US United States EmilyAI (auto) T1018
ALR-00040 1d ago Shadow IT Discovery Low Open DLP Module WS-PC-003 d.walker FR France EmilyAI (auto) T1567
ALR-00179 1d ago Insider Threat Indicator Low Escalated Cloud Connector WS-PC-006 d.walker GB United Kingdom EmilyAI (auto) T1119
ALR-00154 1d ago Kerberoasting Attempt Low Resolved EmilyAI Triage VM-DEV-01 k.brown IR Iran EmilyAI (auto) T1558.003
ALR-00136 1d ago Port Scan Detected Low False Positive Endpoint Agent WS-PC-001 system IR Iran EmilyAI (auto) T1046
ALR-00182 1d ago Kerberoasting Attempt Low False Positive SOC365 Engine AP-WIFI-03 n.clark US United States EmilyAI (auto) T1558.003
ALR-00020 1d ago Phishing Email Blocked Low False Positive Email Gateway SRV-BACKUP-01 k.brown DE Germany EmilyAI (auto) T1566.001
ALR-00318 1d ago Data Exfiltration Attempt Low Escalated EmilyAI Triage WS-PC-004 f.hall FR France EmilyAI (auto) T1567.002
ALR-00291 1d ago Failed MFA Challenge Low Open Attack Surface Scanner WS-MAC-005 e.evans RU Russia EmilyAI (auto) T1621
ALR-00050 1d ago Tor Exit Node Connection Low Open DecoyPulse WS-PC-002 system BR Brazil EmilyAI (auto) T1090.003
ALR-00302 2d ago Port Scan Detected Low False Positive Dark Web Monitor SRV-SQL-01 l.johnson IN India EmilyAI (auto) T1046
ALR-00080 2d ago Anomalous DNS Query Low False Positive Endpoint Agent WS-PC-006 j.smith IR Iran EmilyAI (auto) T1568.002
ALR-00303 2d ago DecoyPulse Honeypot Triggered Low False Positive Cloud Connector WS-LAP-012 e.evans UA Ukraine EmilyAI (auto) T1018
ALR-00241 2d ago Anomalous DNS Query Low Escalated DLP Module AP-WIFI-03 d.walker GB United Kingdom EmilyAI (auto) T1568.002
ALR-00081 2d ago Kerberoasting Attempt Low Resolved Dark Web Monitor WS-PC-004 m.taylor US United States EmilyAI (auto) T1558.003
ALR-00028 2d ago Pass-the-Hash Detected Low Investigating Endpoint Agent WS-PC-006 e.evans RU Russia EmilyAI (auto) T1550.002
ALR-00017 2d ago Failed MFA Challenge Low Resolved Attack Surface Scanner SRV-MAIL-01 l.johnson CN China EmilyAI (auto) T1621
ALR-00296 2d ago Credential Stuffing Attempt Low False Positive DecoyPulse SRV-MAIL-01 j.smith RU Russia EmilyAI (auto) T1110.004
ALR-00239 2d ago Lateral Movement Detected Low Open Endpoint Agent WS-PC-002 l.johnson GB United Kingdom EmilyAI (auto) T1021.002
ALR-00285 2d ago DLP Policy Violation Low Investigating Network IDS WS-MAC-005 f.hall US United States EmilyAI (auto) T1048
ALR-00170 2d ago Failed MFA Challenge Low Resolved DecoyPulse WS-PC-001 system US United States EmilyAI (auto) T1621
ALR-00183 2d ago Kerberoasting Attempt Low Escalated SOC365 Engine SRV-SQL-01 d.walker IR Iran EmilyAI (auto) T1558.003
ALR-00194 2d ago Port Scan Detected Low Investigating Dark Web Monitor WS-PC-002 p.thomas IR Iran EmilyAI (auto) T1046
ALR-00218 2d ago Unauthorised USB Device Low Resolved DecoyPulse SRV-BACKUP-01 system US United States EmilyAI (auto) T1091
ALR-00001 2d ago Unauthorised USB Device Low Resolved Cloud Connector WS-MAC-005 p.thomas NL Netherlands EmilyAI (auto) T1091
ALR-00233 2d ago Data Exfiltration Attempt Low Open Attack Surface Scanner SRV-MAIL-01 h.roberts US United States EmilyAI (auto) T1567.002
ALR-00055 2d ago Malware Signature Match Low Open Email Gateway SRV-BACKUP-01 m.taylor UA Ukraine EmilyAI (auto) T1204.002
ALR-00255 2d ago DLP Policy Violation Low Open EmilyAI Triage VM-DEV-01 f.hall NL Netherlands EmilyAI (auto) T1048
ALR-00264 2d ago Suspicious PowerShell Execution Low Resolved Email Gateway WS-MAC-005 p.thomas KP North Korea EmilyAI (auto) T1059.001
ALR-00121 3d ago Insider Threat Indicator Low False Positive SOC365 Engine SRV-WEB-01 l.johnson NL Netherlands EmilyAI (auto) T1119
ALR-00132 3d ago Lateral Movement Detected Low Resolved DLP Module SRV-MAIL-01 s.jones VN Vietnam EmilyAI (auto) T1021.002
ALR-00272 3d ago Shadow IT Discovery Low False Positive Attack Surface Scanner WS-PC-002 k.brown UA Ukraine EmilyAI (auto) T1567
ALR-00079 3d ago Failed MFA Challenge Low Investigating DecoyPulse SW-CORE-01 a.wilson UA Ukraine EmilyAI (auto) T1621
ALR-00018 3d ago Privilege Escalation Attempt Low False Positive EmilyAI Triage SRV-FILE-01 h.roberts VN Vietnam EmilyAI (auto) T1134
ALR-00220 3d ago Certificate Anomaly Low Open Dark Web Monitor SRV-DC-01 d.walker CN China EmilyAI (auto) T1553.004
ALR-00323 3d ago Brute Force SSH Low Escalated EmilyAI Triage SRV-WEB-01 j.smith IN India EmilyAI (auto) T1110.001
ALR-00134 3d ago Brute Force SSH Low Open Endpoint Agent SRV-BACKUP-01 m.taylor NG Nigeria EmilyAI (auto) T1110.001
ALR-00216 3d ago Insider Threat Indicator Low Resolved EmilyAI Triage WS-PC-003 k.brown KP North Korea EmilyAI (auto) T1119
ALR-00312 3d ago Certificate Anomaly Low Investigating Cloud Connector WS-PC-004 l.johnson UA Ukraine EmilyAI (auto) T1553.004
ALR-00271 3d ago DecoyPulse Honeypot Triggered Low Open Cloud Connector AP-WIFI-03 h.roberts KP North Korea EmilyAI (auto) T1018
ALR-00101 3d ago Anomalous DNS Query Low Resolved EmilyAI Triage WS-PC-001 r.davies DE Germany EmilyAI (auto) T1568.002
ALR-00006 3d ago Pass-the-Hash Detected Low Resolved Firewall WS-PC-004 h.roberts US United States EmilyAI (auto) T1550.002
ALR-00178 3d ago Rogue DHCP Server Low Resolved Network IDS WS-LAP-011 j.smith RU Russia EmilyAI (auto) T1557.003
ALR-00083 3d ago Suspicious PowerShell Execution Low Resolved Email Gateway SRV-DC-01 system RU Russia EmilyAI (auto) T1059.001
ALR-00021 4d ago Port Scan Detected Low Resolved DLP Module SRV-MAIL-01 k.brown UA Ukraine EmilyAI (auto) T1046
ALR-00056 4d ago Failed MFA Challenge Low False Positive SOC365 Engine SRV-DC-01 s.jones IN India EmilyAI (auto) T1621
ALR-00307 4d ago Privilege Escalation Attempt Low Resolved Email Gateway FW-EDGE-01 p.thomas CN China EmilyAI (auto) T1134
ALR-00103 4d ago Port Scan Detected Low False Positive EmilyAI Triage FW-EDGE-01 d.walker RO Romania EmilyAI (auto) T1046
ALR-00046 4d ago Tor Exit Node Connection Low Resolved Network IDS WS-PC-002 n.clark GB United Kingdom EmilyAI (auto) T1090.003
ALR-00049 4d ago Suspicious Scheduled Task Low False Positive Firewall WS-LAP-012 p.thomas NG Nigeria EmilyAI (auto) T1053.005
ALR-00309 4d ago Failed MFA Challenge Low False Positive Cloud Connector WS-MAC-005 e.evans KP North Korea EmilyAI (auto) T1621
ALR-00075 4d ago Credential Stuffing Attempt Low False Positive Attack Surface Scanner SRV-DC-01 l.johnson RO Romania EmilyAI (auto) T1110.004
ALR-00222 4d ago Insider Threat Indicator Low Escalated DecoyPulse SRV-APP-01 e.evans BR Brazil EmilyAI (auto) T1119
ALR-00308 4d ago Shadow IT Discovery Low Open Attack Surface Scanner SW-CORE-01 d.walker RU Russia EmilyAI (auto) T1567
ALR-00165 4d ago Unauthorised USB Device Low Open Firewall WS-LAP-010 h.roberts UA Ukraine EmilyAI (auto) T1091
ALR-00224 5d ago Failed MFA Challenge Low Open Cloud Connector WS-MAC-005 l.johnson US United States EmilyAI (auto) T1621
ALR-00069 5d ago Port Scan Detected Low Resolved Email Gateway SRV-FILE-01 j.smith RU Russia EmilyAI (auto) T1046
ALR-00261 5d ago Phishing Email Blocked Low Investigating Firewall WS-PC-002 s.jones GB United Kingdom EmilyAI (auto) T1566.001
ALR-00035 5d ago Shadow IT Discovery Low Investigating SOC365 Engine SRV-WEB-01 s.jones GB United Kingdom EmilyAI (auto) T1567
ALR-00061 5d ago Malware Signature Match Low False Positive Firewall SRV-DC-01 l.johnson KP North Korea EmilyAI (auto) T1204.002
ALR-00324 5d ago Port Scan Detected Low Resolved Attack Surface Scanner WS-PC-006 h.roberts RU Russia EmilyAI (auto) T1046
ALR-00126 5d ago Pass-the-Hash Detected Low Open Dark Web Monitor WS-LAP-010 s.jones GB United Kingdom EmilyAI (auto) T1550.002
ALR-00027 5d ago DLP Policy Violation Low Resolved DLP Module FW-EDGE-01 n.clark FR France EmilyAI (auto) T1048
ALR-00066 5d ago Lateral Movement Detected Low Open DLP Module SW-CORE-01 n.clark US United States EmilyAI (auto) T1021.002
ALR-00304 5d ago Pass-the-Hash Detected Low Investigating DLP Module WS-PC-001 r.davies GB United Kingdom EmilyAI (auto) T1550.002
ALR-00325 5d ago Ransomware Behaviour Detected Low False Positive DLP Module SRV-SQL-01 f.hall NG Nigeria EmilyAI (auto) T1486
ALR-00202 5d ago Malware Signature Match Low Open Email Gateway WS-LAP-011 l.johnson IN India EmilyAI (auto) T1204.002
ALR-00310 6d ago Kerberoasting Attempt Low False Positive Network IDS WS-LAP-010 c.williams FR France EmilyAI (auto) T1558.003
ALR-00033 6d ago Brute Force SSH Low Escalated Endpoint Agent FW-EDGE-01 m.taylor UA Ukraine EmilyAI (auto) T1110.001
ALR-00268 6d ago Port Scan Detected Low False Positive Dark Web Monitor WS-LAP-012 c.williams RO Romania EmilyAI (auto) T1046
ALR-00277 6d ago Unusual Outbound Traffic Low Investigating DLP Module SRV-APP-01 system DE Germany EmilyAI (auto) T1041
ALR-00316 6d ago Certificate Anomaly Low False Positive Network IDS WS-LAP-011 f.hall UA Ukraine EmilyAI (auto) T1553.004
ALR-00269 6d ago Anomalous DNS Query Low Investigating Email Gateway SRV-DC-01 c.williams IN India EmilyAI (auto) T1568.002
ALR-00284 6d ago Shadow IT Discovery Low False Positive Cloud Connector WS-PC-004 r.davies NL Netherlands EmilyAI (auto) T1567
ALR-00215 6d ago Rogue DHCP Server Low False Positive Email Gateway WS-PC-006 c.williams RO Romania EmilyAI (auto) T1557.003