Create a threat briefing notification rule

You can create a notification rule that emails a recipient list whenever a new threat briefing is published or automatically restored. Briefings are automatically restored if they are updated with content changes or new detections.

1. Log in to the ExtraHop system through https://<extrahop-hostname-or-IP-address>.
2. Click the System Settings icon and then click Notification Rules.
3. Click Create.
4. Type a unique name for the notification rule in the Name field.
5. In the Description field, add information about the notification rule.
6. In the Event Type section, select Threat Briefing.
7. Specify individual email addresses, separated by a comma.
8. In the Options section, click the Enable notification rule checkbox to enable the notification.
9. Click Save.