Start Demo

Create a threat briefing notification rule

You can create a notification rule that emails a recipient list whenever a new threat briefing is published or automatically restored. Briefings are automatically restored if they are updated with content changes or new detections.

Before you begin

  • Users must be granted NDR module access and have full-write privileges or higher to complete the tasks in this guide.
  • The ExtraHop system must be connected to ExtraHop Cloud Services to send notifications through email.
  • Email notifications are sent from no-reply@notify.extrahop.com. Make sure to add this address to your list of allowed senders.
  1. Log in to the ExtraHop system through https://<extrahop-hostname-or-IP-address>.
  2. Click the System Settings icon and then click Notification Rules.
  3. Click Create.
  4. Click Threat Briefing.
  5. Type a unique name for the notification rule in the Name field.
  6. In the Description field, add information about the notification rule.
  7. Specify individual email addresses, separated by a comma.
  8. In the Options section, the Enable notification rule checkbox is enabled by default. Deselect the checkbox to disable the notification rule.
  9. Click Save.
Last modified 2024-10-14