You can create an alert that is triggered whenever an ATI determines that a potential threat occurs. Alerts for this purpose are Event Alerts, and can be fine-tuned to include or eliminate certain types of threat events.
All Event Alerts must include at least one Subtype in the Select Event Properties panel. In the following example, an alert is being created that used the same properties as the Threat Indicator view on the Events page. Therefore, this event is triggered any time an event occurs that displays in that view.
Alerts make it easier to monitor specific events, and can be configured to send email to one or more recipients when triggered. See Using App Control Alerts for instructions on creating and configuration alerts.
