For the complete documentation index, see llms.txt. This page is also available as Markdown.

Alerts

Review Microsoft 365 security alerts across your tenants.

Security alerts raised across the selected tenant's Microsoft 365 security products, listed newest first. Use it to see what has fired recently without moving between the individual security portals, and to move an alert on once you have dealt with it.

Table Details

Column
Description

Event Date Time

When the alert fired. The table is sorted on this, newest first.

Status

Where the alert sits in triage.

Title

The alert's title, describing what was detected.

Severity

The severity assigned to the alert by the product that raised it.

Category

The category the alert was raised under.

The Extended Info flyout adds the users involved in the alert, so you can see who it concerns without opening the security portal.

Selecting All Tenants queues a background job that collects alerts from every tenant, and the page tells you it is still loading. Come back in a few minutes for a complete list.

Table Actions

Action
Description
Bulk Action Available

Set status to in progress

Marks the alert as being worked on.

Set status to resolved

Closes the alert.

More Info

Opens the Extended Info flyout with the full details for the selected row.


Feature Requests / Ideas

We value your feedback and ideas. Please raise any feature requests on GitHub.

Last updated

Was this helpful?