Illustrative sample / not a customer event
See how raw signals can become a decision-ready incident brief.
This anonymized sample is a fictional walkthrough for evaluation. It does not describe a real customer, production event, or outcome.
Sample incident / CS-AI-ILL-017
Illustrative, anonymized evaluation artifact
Plain-English incident summary
Review an unusual account access sequence before taking action.
The available signals suggest a sequence of failed sign-ins, a subsequent successful sign-in, and a privileged access change tied to the same account. The sequence needs an authorized reviewer to validate context and choose the next step.
Raw signals, correlated
- 0109:14 — Multiple unsuccessful sign-in attempts
- 0209:19 — Successful sign-in observed
- 0309:23 — Privileged group change recorded