Alerts notify you about important events, such as a change in your security posture score, anomalous condition, and unusual file activity. The tenant administrator can enable alerts from the Security IQ dashboard. The alerts are triggered every 24 hours and an email is sent only when there is a change in data or activity.
Procedure
From the navigation pane, go to Monitoring > Security IQ.
The Security IQ dashboard page appears.
In the upper-right area of the page, click alert icon
, and then enable any of the following alerts:Anomalous conditions: Notifies you of anomalous events that are indicated by a change in data or activity.
Security posture score: Notifies you of changes in the security posture score.
Unusual file activity: Notifies you of anomalous file system activity in the endpoint servers or file servers.