Managed Detection: Why was an email notification not sent for an Alert?

[#1]

Environment

• Managed Detection (Formerly CB ThreatSight) 
• Carbon Black Cloud Console: All Supported Versions 
  • Endpoint Standard (Formerly CB Defense) 

Question

Why was an email notification not sent for an Alert observed in the Carbon Black Cloud Console? 

Answer

• Alerts with a Severity Score of 8 or Greater: 

  • The alert was triaged by the Managed Detection team and determined to be a False Positive 

• Alerts with a Severity Score of 7 or 5: 

  • The alert was triaged by the Managed Detection team and determined to be a False Positive or there was not enough supporting information to make a threat determination. 

• Alerts with a Severity Score of less or equal to 4: 

  • These alerts are not triaged by the Managed Detection team

Additional Notes

No indication that the alert is a False Positive is available in the Console at this time.

Related Content

• CB ThreatSight: Are ThreatSight Notifications Provided in the Console in Addition to Email?
• Managed Detection: What Alert Severities are Analyzed and Reported on?
• Managed Detection Service Description
• Idea Central - Generate a Notification in the Console for an Alert When Reviewed