View the assets affected by the alert

You can view a list of assets affected by the alert on the Assets tab, or by clicking View Assets on the Summary tab. The table shows the status of each asset: if it is contained, not contained, failed, or pending. Click the arrow next to each asset to perform remediation actions, for example to block an IP address or isolate an asset. Click the name of the alert or event to pivot to the timeline to better understand the attack flow.