Autofocus Alert Query

bmurali — Thu, 16 Jul 2015 03:15:10 GMT

1)Under Alerts section when I want to get an alert on Unit42 tags on My Samples,

does this look for unit 42 tags specific to my industry or all Unit 42 tags?

2)Also, is there a way i can have different levels of private tags to prioritise my alerts

for e.g for adware i send an alert only to my L1 team but for cryptolocker i send it to the

management also.

Re: Autofocus Alert Query

ssimkin — Wed, 22 Jul 2015 19:15:33 GMT

Hello, thanks for the questions.

1) It will alert for all Unit 42 tags. if you would like to distinguish between the Unit 42 tags, you can add exception rules to send email alerts for only specific tags.

2) You can accomplish this by adding exceptions as well:

Create 2 alert actions, one for your L2 team, and another for an email alias that goes to all.
Add the alert action for L1 team on specific tags you would like them to handle.
Leave the default category for all others, as an email to everyone, or create specific tag exceptions.

Let us know if we can help further.

topic Re: Autofocus Alert Query in General Topics

Autofocus Alert Query

Re: Autofocus Alert Query