Case Queue

137 cases from 18,412 raw detections · updated just now

Refresh

Reduction

18,412

raw detections

212 need action · 41 ticketed

↓

1,246

entity risk objects

↓

137

actionable cases

99.3%

Volume reduction

how this is measured

137

Open cases

· above the bar, not yet worked

24 escalate · 31 defer

Oldest open case

· since first detection

Median case age

· open cases

Auto-close pool

· below the case bar

14,908 detections

Disposition tier

Escalate2

Review3

Defer2

Low1

14,908 detections collapsed below the case bar

Search entity, technique, detection or tool…

Filters

Escalate2Review3Defer2Low1

Risk	Entity	Why	Kill chain	Tier	Confidence	Age
96	HostFIN-WS-22 6 detections · SOC-4471	+34Credential dumping via LSASS access +28Large outbound transfer to Tor exit node	Exfiltration	Escalate	high	6h
88	Usersvc_payments 6 detections	+30SMB lateral movement to domain controller +14Service account active outside change window	Lateral Movement	Escalate	high	7h
70	Userj.okafor 5 detections	+22Impossible travel sign-in detected +16Multiple failed sign-ins from single source	Initial Access	Review	medium	3h
64	IP203.0.113.77 5 detections	+20Sustained authentication failures +11Origin geolocated Lagos, NG	Credential Access	Review	medium	3h
50	HostHR-LAP-05 2 detections	+18Outbound to newly registered domain +12Office spawned an unusual child process	Command and Control	Defer	low	2h
46	Userm.chen 2 detections	+15Macro-enabled attachment opened -9No follow-on activity observed	Execution	Defer	low	2h
38	HostENG-WS-14 3 detections	+17Registry run key added -8Signed by a known vendor	Persistence	Review	medium	11h
33	IP198.51.100.61 1 detection	+13Domain registered 6 days ago	Command and Control	Low	low	1d