With Custom Alerts you are able to configure email alerts using predefined templates so you're notified about specific activity in your environment. Which of the following outlines the steps…

Question

Options

• AChoose the template you would like to configure, setup how often you would like the alert to run,
• BChoose the template you would like to configure, preview the search results, and then schedule
• CCreate the query for the alert, setup the email template for the alert, and then set the schedule for
• DCreate a new custom template, configure the email template, and then create the custom query

• A
  4% (2)
• B
  91% (49)
• C
  2% (1)
• D
  4% (2)

Explanation

These are the steps required to properly create a custom alert rule. Custom Alerts are a feature that allows you to configure email alerts using predefined templates so you're notified about specific activity in your environment. You can choose from various templates that cover different use cases, such as suspicious PowerShell activity, network connections to risky countries, etc. You can also preview the search results of the template before scheduling the alert. You do not need to create the query for the alert, setup the email template for the alert, or create a new custom template, as these are already provided by the predefined templates.

No community discussion yet for this question.