deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-15 14:57:23 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

add column in alerts queue to include hex

Browse Source
This commit is contained in:
Joey Caparas 2018-02-14 20:21:46 -08:00
parent 86468919e8
commit 3fe0250a84
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
windows/security/threat-protection/windows-defender-atp/alerts-queue-windows-defender-advanced-threat-protection.md
View File

@ -44,6 +44,9 @@ To see a list of alerts, click any of the queues under the **Alerts queue** opti
![Image of alerts queue](images/atp-alertsq2.png) ![Image of alerts queue](images/atp-alertsq2.png)
[JOEY: NEED TO UPDATE ALL IMAGES TO REFLECT ACTUAL NEW COLUMNS AND NAVIGATION PANE ETC!!!]
## Sort, filter, and group the alerts list ## Sort, filter, and group the alerts list
You can sort and filter the alerts using the available filters or clicking on a column's header that will sort the view in ascending or descending order. You can sort and filter the alerts using the available filters or clicking on a column's header that will sort the view in ascending or descending order.
@ -100,6 +103,21 @@ So, for example:
The grouped view allows for efficient alert triage and management. The grouped view allows for efficient alert triage and management.
## Alert queue columns
You can click on the first column to open up the **Alert management pane**. You can also select view the machine and user panes by selecting the icons beside the links.
Alerts are listed with the following columns:
- **Title** - Displays a brief description of the alert and its category.
- **Machine and user** - Displays the machine name and user associated with the alert. You view the machine or user details pane or pivot the actual details page.
- **Severity** - Displays the severity of the alert. Possible values are informational, low, medium, or high.
- **Last activity** - Date and time for when the last action was taken on the alert.
- **Time in queue** - Length of time the alert has been in the alerts queue.
- **Status** - Current status of the alert. Possible values include new, in progress, or resolved.
- **Investigation state** - Reflects the number of related investigations and it's current state.
- **Assigned to** - Displays who is addressing the alert.
- **Manage icon** - You can click on the icon to bring up the alert management pane where you can manage and see details about the alert.
### Use the Alert management pane ### Use the Alert management pane
Selecting an alert brings up the **Alert management** pane where you can manage and see details about the alert. Selecting an alert brings up the **Alert management** pane where you can manage and see details about the alert.