Vault SOC
Incidents
MDO-1177HighContainedTrue Positive97%

WildFire malicious verdict on email attachment – quarantined

Affected: 3 mailboxesDefender for Office 365NGFWUpdated 02:14 PT · Owner AI SOC

AI summary

Invoice_0921.iso flagged malicious by Advanced WildFire. Messages soft-deleted from 3 mailboxes under rule CP-11.

Verdict

True Positive97%

Customer-approved model · AWS GovCloud (us-gov-west-1) · inside Halcyon's account. Time to verdict 47s.