Phishing email with macro-enabled document delivered
🛡️ ProPera Intelligence background analysis - no action needed to view
⏳
Correlating behaviour, intelligence and relationships…Details
Incident IDINC-01004 (1004)
Created2026-08-15 20:07 UTC
Last updated2026-08-15 22:07 UTC
Assigned to-
Tagsphishing
SourceDemo
Alerts1
Devices & Users
Devicescorp-wks-0421
Usersm.taylor@propera.local
DeterminationUnknown
Alerts in this incident 1
| Alert | Severity | Status | Category | Device | User | MITRE |
|---|---|---|---|---|---|---|
| Macro execution from email attachment | Medium | InProgress | Phishing | corp-wks-0421 | m.taylor@propera.local | T1566.001T1204.002 |
Evidence timeline
20:07:49 UTC · File
Macro-enabled document
C:\Users\m.taylor\Downloads\invoice_q3.docm
20:07:49 UTC · Process
WScript execution
wscript.exe C:\Users\m.taylor\AppData\Local\Temp\update.vbs
C:\Windows\System32\wscript.exe
Comments & updates
💬
No comments yet.Update incident
