ATP notification

[dszabolcs]

HI, 

How can I set real time notification for security team. I intend to real time monitor and alert if security event occurs on endpoint.

[David Janulik]

Hi,

From events > filter choose e.g. threat detected > You see the button not subscribed.

This button opens a menu with immediate, hourly, daily, weekly, or monthly notifications. There are options to receive immediate alerts as one email per event.

Hope this helps

David

[dszabolcs]

HI, 

Thx for the reply.

Is there any way to assign the notification to specific user only?

[David Janulik]

Hi

this is possible as per screenshot. It's up to logged in admin user, what subscription chooses.

Each admin can have different or none email subscriptions.

as per documentation:

When you select a user account you can also view the subscriptions for that user. The Subscriptions list displays any events and reports they have subscribed to.

Regards

David