SentinelBrief

Alert queue

Connecting…

Clear
Alert queue, sorted by severity then recency
SeverityCategorySource IPSensorReasoningReceived
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login using root credentials, which constitutes a foothold on the honeypot. Per the rubric, any successful login is
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login using root/Myriam. Per rubric, any successful login constitutes a foothold and maps to successful_intrusion u
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login using root/NICOLE1. Per rubric, any successful login constitutes a foothold and maps to severity 4 and catego
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the Cowrie honeypot using root/Remi, which constitutes a foothold and maps directly to successful_intrusion. Per too
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login to the honeypot using root credentials. Per rubric, any successful login constitutes a foothold and maps to s
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred with credential pair root/abeilles, which constitutes a foothold on the honeypot. Per rubric, any successful login is at least s
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root/account, which establishes a foothold and meets the severity-4 threshold. Per tool output, n
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the Cowrie honeypot using root/ado. Per rubric, any successful login constitutes a foothold and maps to severity 4 w
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed SSH login success using root/aerosmith, which constitutes a foothold on the honeypot. Per rubric, any successful login is at least
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred with credential root/aga, which constitutes a foothold on the honeypot. Per the rubric, any successful login is at least severit
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using root/alchimie, which constitutes a foothold on the honeypot. Tooled command retrieval shows no post-login commands, downlo
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login using credential pair root/algerino, which constitutes a foothold on the honeypot. Per rubric, any successful login is
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login using credential root/aly. Per rubric, any successful login constitutes a foothold and maps to severity 4 with category
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using credential pair root/ambres. Per rubric, any successful login constitutes a foothold and maps to
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root/amine1. Per rubric, any successful login constitutes a foothold and maps to severity 4 with
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using root credentials, which constitutes a foothold on the honeypot. Per the rubric, any successful login is at least severity
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using root/annabel, which constitutes a foothold on the honeypot. Retrieved session commands show no post-login commands or payl
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login using username root with password 'anything', which indicates a foothold was achieved. Per rubric, any successful login
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root/arturo. Per rubric, any successful login constitutes a foothold and maps to severity 4 with
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the Cowrie honeypot using root/assasin. Per rubric, any successful login constitutes a foothold and maps to severity
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login to the honeypot using root/asseasse. Per rubric, any successful login constitutes a foothold and maps to succ
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred with credential pair root/aurele, which constitutes a foothold on the honeypot. Per rubric, any successful login is at least sev
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login using credentials root/azazel. Per rubric, any successful login constitutes a foothold and maps to successful_intrusion
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login using root with password 'bajingan', which establishes a foothold and meets the threshold for successful_intrusion. Per
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login using credential root/banban, which constitutes a foothold on the honeypot. Per rubric, any successful login is severit