Understanding the cause and impact of an alert

Alert management provides the information and tools you need to identify and respond to attacks on your environment. It tells you how alerts were triggered, which assets were affected, and which response actions you should take to contain, mitigate, and remediate the alert. It displays a chronological time line of events, and brings together multiple sources of intelligence information, including MITRE ATT&CK information. This helps you better understand the tactics and techniques used. You can also view and the associated rule to determine what triggered the alert.