Alert ALR-00089 keeps recurring — is the remediation working?
TKT-0015
Normal
In Progress
Alert Query
- Created By
- d.walker
- Created
- 2026-07-05 20:16
- Last Updated
- 2026-07-07 10:43
- Assigned Analyst
- James Okonkwo
- Category
- Alert Query
- Messages
- 9
Conversation
d.walker
Customer
2026-07-05 20:16
We received an alert notification and would like some clarification on its severity and whether any action is required from our side.
Regarding: Alert ALR-00089 keeps recurring — is the remediation working?
Could you review and let us know if this is something we should be worried about?
Regarding: Alert ALR-00089 keeps recurring — is the remediation working?
Could you review and let us know if this is something we should be worried about?
James Okonkwo
SOC Analyst
2026-07-05 21:08
We've applied the policy change you requested. It will take effect within 15 minutes across all monitored endpoints. Please let us know if you see any issues.
d.walker
Customer
2026-07-06 00:13
We've applied the patch on our end. Can you run a verification scan?
James Okonkwo
SOC Analyst
2026-07-06 02:13
Thank you for raising this. I've reviewed the alert and can confirm we're investigating. I'll update you within the hour.
d.walker
Customer
2026-07-06 03:34
Understood. Is there anything we need to do on our end in the meantime?
James Okonkwo
SOC Analyst
2026-07-06 06:57
I've checked the logs for the time period you mentioned. The activity was flagged by our EmilyAI triage system and has been escalated for manual review.
d.walker
Customer
2026-07-06 09:15
Thanks. Could you also check if any other accounts were affected?
James Okonkwo
SOC Analyst
2026-07-06 10:37
I've checked the logs for the time period you mentioned. The activity was flagged by our EmilyAI triage system and has been escalated for manual review.
d.walker
Customer
2026-07-06 13:06
The affected user has confirmed they changed their password. Can you verify MFA is active?