Automatic Closing of Low-Risk Alerts (Automatic shutdown of low-risk alarms)

Playbook Overview

The Automatic shutdown of low-risk alarms playbook automatically closes alerts whose Severity is Informational or Low.

This playbook is applied to alerts only. Attacks cannot trigger it. For details about the differences between alerts and attacks, see Overview.

This playbook is enabled by default. There is no need to manually configure or enable it.

Prerequisites

Your SecMaster professional edition is available.

Implementation Effect

On the Alerts page, check the number of automatically handled alerts next to Auto-Closed Alert. If the number is not 0, the Automatic shutdown of low-risk alarms playbook has been triggered and taken effect.

1. For details about how to view alerts, see Viewing Alert Details. In the navigation pane on the left in a specific workspace, choose Threats > Alerts to go to the Alerts page.
2. On the Alerts page, if the number in Auto-Closed Alerts is greater than 0, the Automatic shutdown of low-risk alarms playbook has been triggered and taken effect.