SentinelBrief

Alert queue

Connecting…

Clear
Alert queue, sorted by severity then recency
SeverityCategorySource IPSensorReasoningReceived
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root:locomotive. Per rubric, any successful login constitutes a foothold and maps to successful_i
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using credential root/lollypop, which constitutes a foothold on the honeypot. Per rubric, any successful login is at least sever
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login using root:lorenza. Per rubric, any successful login constitutes a foothold and maps to severity 4 and catego
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login using credential pair root/lounas. Per rubric, any successful login constitutes a foothold and maps to succes
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root/mallorca. Per rubric, any successful login constitutes a foothold and maps to successful_int
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login using credential root/manoune. Per rubric, any successful login constitutes a foothold and maps to severity 4
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using username root with password marijuana1. Per rubric, any successful login constitutes a foothold a
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using credential pair root/mariouma. Per rubric, any successful login constitutes a foothold even if no
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login using root/marseilles, which constitutes a foothold on the honeypot. Per rubric, any successful login is at least sever
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using credential root/maxell, which constitutes a foothold on the honeypot. Per the rubric, any successful login is at least sev
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using root/mercury1, which constitutes a foothold on the honeypot. Per rubric, any successful login is at least severity 4 and f
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login using root/monette. Per rubric, any successful login constitutes a foothold and maps to successful_intrusion
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred with credential root/mononoke, which constitutes a foothold on the honeypot. Retrieved session commands show no post-login comma
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login using root/moreno1, which constitutes a foothold on the honeypot. Per rubric, any successful login is at leas
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login to the honeypot using root:mostwanted. Per rubric, any successful login is at least a foothold and maps to su
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root/multimedia. Per rubric, any successful login is at least a foothold and maps to successful_i
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using credential root/nostromo, which constitutes a foothold on the honeypot. Tool output confirms there were no post-login comm
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root:nour. Per rubric, any successful login constitutes a foothold and maps to severity 4 and cat
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using root/ocampo1, which constitutes a foothold on the honeypot. Per rubric, any successful login is at least severity 4 and fa
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using credential pair root/olympus, which constitutes a foothold on the honeypot. Post-login tooling shows no commands entered a
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred using root/patouche, which establishes a foothold on the honeypot. Per rubric, any successful login is at least severity 4 and f
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login to the honeypot using root/patounet, which constitutes a foothold. Per rubric, any successful login is at least severit
S4successful_intrusion125.82.67.84hp-use-01The session shows a confirmed successful SSH login to the honeypot using root:playmobil. Per rubric, any successful login constitutes a foothold and maps to suc
S4successful_intrusion125.82.67.84hp-use-01A successful SSH login occurred with credential pair root/promesse, which establishes a foothold on the honeypot. Per rubric, any successful login is at least s
S4successful_intrusion125.82.67.84hp-use-01The session shows a successful SSH login using credential root/promise. Per rubric, any successful login constitutes a foothold and maps to successful_intrusion