SentinelBrief

Alert queue

Connecting…

Clear
Alert queue, sorted by severity then recency
SeverityCategorySource IPSensorReasoningReceived
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root/070790. Per rubric, any successful login is a foothold and maps to severity 4 with category
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root/081289. Per rubric, any successful login is at least a foothold (severity 4) and falls under
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using root/0909, which constitutes a foothold on the honeypot. No post-login commands, downloads, or uploads were observed, so t
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root/090980. Per rubric, any successful login constitutes a foothold and maps to severity 4 and c
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed SSH login success to the honeypot using root/091188. Per rubric, any successful login constitutes a foothold and maps to severity
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login to the honeypot using root/100390. Per rubric, any successful login constitutes a foothold and maps to severi
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root/100991. Per rubric, any successful login constitutes a foothold and maps to successful_intru
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root with password 10102010, which constitutes a foothold. Per rubric, any successful login is at
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the Cowrie honeypot using root/101287. Per rubric, any successful login constitutes a foothold and maps to severity
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using username root with password 110585. Per rubric, any successful login constitutes a foothold and m
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root:110592. Per rubric, any successful login constitutes a foothold and maps to severity 4 and c
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the Cowrie honeypot using root/110688. Per rubric, any successful login constitutes a foothold and maps to severity
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root/111284. Per rubric, any successful login constitutes a foothold and maps to severity 4 and c
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root/120186. Per rubric, any successful login constitutes a foothold and maps to successful_intru
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root with password 120291. Per rubric, any successful login constitutes a foothold and maps to se
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using root credentials (root/120581), which constitutes a foothold on the honeypot. Per tool output, no post-login commands, dow
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root:120885, which establishes a foothold and meets the severity-4 threshold. Per tool output, no
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login using root/120984. Per rubric, any successful login constitutes a foothold and maps to successful_intrusion u
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using root/121080, which establishes a foothold on the honeypot. Per rubric, any successful login is at least severity 4 and fal
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred to the honeypot using root/13021987, which constitutes a foothold and meets severity 4 by rubric. Retrieved session commands sho
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed SSH login success using root credentials, which establishes a foothold on the honeypot. Per rubric, any successful login is at lea
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login using root/131189. Per rubric, any successful login constitutes a foothold even if no post-login commands wer
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using root with password 140587, which establishes a foothold and meets severity 4 by rubric. Retrieved session commands show no
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login to the honeypot using root/150389. Per rubric, any successful login constitutes a foothold and maps to succes
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred with credential pair root/150987, which constitutes a foothold on the honeypot. Per the rubric, any successful login is severity