Home
Alerts
CASE-6008
Ask Matters AI
Back to Alerts
Drew Kim shared a file containing PII in a Slack channel with external guests
Low
In review
An analyst is actively investigating this alert.
User:
drew.kim@acme-corp.com
Detected:
28 Jun 26, 20:35
Remediate with AI
Take action
Overview
Timeline
Evidence
Similar Cases
AI Summary
Automated threat verdict, key finding analysis, and flagged risk indicators.
93% confidence
Why 93% confidence?
✓
Download/transfer volume is 40× user baseline
✓
Pattern matches prior confirmed exfiltration incidents
✓
Elevated risk context detected for user account
✓
Unrecognized device or ASN/location involved
True positive — High confidence data exposure pattern
Drew Kim
triggered a data exposure signal on
Slack
.
WHY FLAGGED
✓
Activity on
Slack
deviates from this user's 90-day behavioral baseline
✓
Confidence score 93% — matches known data exposure pattern
Prevent Recurrence
AI suggested policy updates and proactive safeguards to prevent similar incidents.
AI Recommendations
High-confidence containment path generated based on verified incident patterns.
Restrict Slack access + notify Operations lead
Accept
Override
Alert Info
Assigned to
Priya Nair
Change…
Alert ID
CASE-6008
AI Investigation
High confidence data exposure pattern
Alerts
1 linked
Detection
Datastore types
Slack
Policy
Data-Exposure-18 ↗
Risk type
Data Exposure
User
User
Drew Kim
drew.kim@acme-corp.com
Department
Operations
Ask Matters AI
Hi, I'm Matters AI. Ask me about your alerts, cases, or policies.
What are today's critical alerts?
Summarize this week's escalations
Who has the most unassigned cases?