With Custom Alerts you are able to configure email alerts using predefined templates so you're notified about specific activity in your environment. Which of the following outlines the steps required to properly create a custom alert rule?
With Custom Alerts you are able to configure email alerts using predefined templates so you're notified about specific activity in your environment. Which of the following outlines the steps required to properly create a custom alert rule?
To create a custom alert rule, you should choose the template that aligns with the specific activity you want to monitor, then preview the search results to ensure that the template captures the desired activity accurately, and finally schedule the alert to receive notifications.
Custom Alerts are a feature that allows you to configure email alerts using predefined templates so you’re notified about specific activity in your environment. You can choose from various templates that cover different use cases, such as suspicious PowerShell activity, network connections to risky countries, etc. You can also preview the search results of the template before scheduling the alert.
Not A. You can't decide when or how often the alert runs.
I think B