Alerts
25
13 closed
Alerts Escalated
6
5 insufficient · 0 Unknown
Cases Created
0 closed
Cases Escalated
0 held · 0 Unknown
Shift 6: Separation of Duties
The separation of duties between detection engineering, agent reasoning, and the SOC fabric is becoming clearer with every run.
TORA — Shift 6 in Review
A five-day shift dominated by phishing domain noise and high-severity C2 and tunneling activity against production infrastructure, with a recurring CMDB coverage gap blocking triage on five alerts sourced from a single unenriched IP.
VERA — Shift 6 in Review
Six confirmed-critical cases across four days — all ESCALATE_TO_ARIA, all immediate urgency — revealing an active multi-host compromise environment with two confirmed RAT campaigns, a DNS tunneling exfiltration operation, and systemic telemetry gaps that are capping investigation depth on the highest-risk assets.
Post not yet published