34 entries this shift and the one before, across 6 of 40 tenants
Sev
Tenant
What it was
What was decided
Reason
State
When, UTC
High
Larkfield Logistics
Token replay from a new ASN
Escalated to S. Varga by R. Idrissi
–
escalated
2026-08-22T04:41:12Z
Low
Halcyon Care
Beaconing to a new domain
Contained by Clerk, inside this tenant’s latitude
–
acted alone
2026-08-22T04:02:55Z
Low
Bramber Retail
Mass mailbox rule creation
Accepted by R. Idrissi: benign, new admin onboarding
–
accepted
2026-08-22T02:17:30Z
Medium
Bramber Retail
Impossible travel, two offices
Rejected by R. Idrissi
Tenant context missing
rejected
2026-08-22T01:44:09Z
High
Meridian Health
Credential stuffing on the VPN
Amended by D. Okonkwo Supersedes the entry below. Both stay.
–
amended
2026-08-21T23:12:41Z
High
Meridian Health
Credential stuffing on the VPN
Rejected by D. Okonkwo Corrected 34m later by the entry above. Nothing was edited and nothing was removed.
Detection is too broad
superseded
2026-08-21T22:38:16Z
6 of 34 shown, newest first ↑ ↓ read, the pane follows Enter opens the entry at its own address order: newest first, always. Nothing here is sorted by urgency