View Alerts
Use the following sections to learn more about the alerts displayed on the alerts details page:
View Alerts in Channels
Alerts are displayed and grouped according to the channels they belong to. Channels group alerts based on info sources, recipients, and tags. Click All to view all alerts created in the Analyst Portal. To know more about channels, see Create a Channel in the Analyst Portal.
View Alert List
The alert list displays the following information:
Alert ID: View the unique alert ID. Click to open the alert details page.
Title: View the alert title that is added during alert creation. Both analysts and members can use keywords in the alert title to search for the alert.
Category: View the categories that are assigned to alerts published from the Analyst Portal. Examples of categories are Cyber Incident, Malware Advisories, Informational, and other categories.
TLP: View the TLP associated with the alert. An alert can only be associated with one TLP.
Publisher: View the name of the alert publisher.
Modified Date: View the date and time the alert is published, edited, or updated.
Status: View the status of the alert. Alerts can have the following status:
PUBLISHED: Indicates published alerts. Alerts that are edited within an hour of publishing also have the status PUBLISHED.
DRAFTED: Indicates alerts saved as drafts. In the alert creation form, when you click Save as Draft, the alert is saved as a draft.
EXPIRED: Indicates alerts that are expired. The alert is deactivated and can no longer be edited or published.
SUBMITTED: Indicates alerts that are submitted by creators for review.
SCHEDULED: Indicates alerts that are scheduled to be published at a specified time.
REVERTED: Indicates alerts that are reverted to creators by publishers while reviewing.
Mobile: Displays if mobile notifications are enabled for the alert.
Email: Displays if email notifications are enabled for the alert.
View Alert Details
To view alert details, click the alert of your preference or hover over an alert, click the vertical ellipsis, and click View. Use the following information to view the details:
Alert Details
View the alert title, description, alert ID, and other key details in this section. You can also find a summary of references, linked alerts, threat defender content, and more based on the available alert data.
You can attach additional files to the published alert by clicking Add. If the alert already includes attachments, you can view them here.
You can match the alert with Intelligence Requirements (IRs) by clicking Edit. If any IRs are already matched, you can view them in this section.
Sharing Options
View the list of recipients of the alert and the associated publishing preferences. You can also find the total number of recipients when the alert was published and the current count of recipients in this section.
In the Other Information section, you can view additional sharing details, including communities the alert was shared with, external applications it was posted to, special handling tags, and more.
Responses
The Responses tab provides insights into recipient interactions with the alert, including threat assessments, event attendance, RFI responses, and alert feedback.
In the Threat Assessment section, you can view participation insights at both the member and organization levels, along with recipient responses. To send a follow-up notification to recipients who have not responded, click Trigger Reminder.
In the Event Attendance section, you can view the list of recipients and their response statuses for an event.
In the RFI Response section, you can view RFI responses and update the status of the RFI as required.
In the Alert Feedback section, you can view the engagement count, number of readers, content and relevancy rating, and feedback comments. Additionally, you can filter the results based on details such as content rating, engagement, organizations, and more.
To export the feedback details in .csv format, click Export. You will receive the link to the exported file in your email, from which you can download it. The link can only be used once and expires in 72 hours from the time you receive it.