Autofocus Alert Query

[bmurali]

1)Under Alerts section when I want to get an alert on Unit42 tags on My Samples,

does this look for unit 42 tags specific to my industry or all Unit 42 tags?

2)Also, is there a way i can have different levels of private tags to prioritise my alerts

for e.g for adware i send an alert only to my L1 team but for cryptolocker i send it to the

management also.

[ssimkin]

Hello, thanks for the questions.

1) It will alert for all Unit 42 tags. if you would like to distinguish between the Unit 42 tags, you can add exception rules to send email alerts for only specific tags.

2) You can accomplish this by adding exceptions as well:

• Create 2 alert actions, one for your L2 team, and another for an email alias that goes to all.
• Add the alert action for L1 team on specific tags you would like them to handle.
• Leave the default category for all others, as an email to everyone, or create specific tag exceptions.

Let us know if we can help further.