Start Demo

Create a threat briefing notification rule

You can create a notification rule that emails a recipient list whenever a new threat briefing is published or automatically restored. Briefings are automatically restored if they are updated with content changes or new detections.

Before you begin

  • Users must be granted NDR module access and have full-write privileges or higher to complete the tasks in this guide.
  • The ExtraHop system must be connected to ExtraHop Cloud Services to send notifications through email.
  • Email notifications are sent from no-reply@notify.extrahop.com. Make sure to add this address to your list of allowed senders.
  1. Log in to the ExtraHop system through https://<extrahop-hostname-or-IP-address>.
  2. Click the System Settings icon and then click Notification Rules.
  3. Click Create.
  4. Type a unique name for the notification rule in the Name field.
  5. In the Description field, add information about the notification rule.
  6. In the Event Type section, select Threat Briefing.
  7. Specify individual email addresses, separated by a comma.
  8. In the Options section, click the Enable notification rule checkbox to enable the notification.
  9. Click Save.
Last modified 2024-05-15