VERISCO Alertio Detect and prioritise

Alerts

The complete, searchable record of every detection. Use it when you know what you are looking for, or need to examine one alert in depth.

Open Alerts in the Detect group. Where the Triage Queue holds what needs a person, Alerts holds everything.

Finding an alert#

Narrow the list before reading it.

Control	What it does
Severity chips	Restrict to Critical, High, Medium or Low. Select again to clear.
Search	Matches the alert title, rule, host and IP address.
Time range	Limits the period.
Advanced	Endpoint, AI verdict, MITRE technique, source IP, rule ID, and a risk score range set with two sliders.
Saved views	Recall a combination of filters you use often.
Clear all	Removes every filter.

Every filter appears as a chip; remove one chip to lift just that filter. The volume chart above the table follows the same filters.

Grouped alerts#

Identical alerts within five minutes are shown as one row with a count, such as ×86. Expand the row to see each occurrence.

The detail panel#

Select a row to open the alert. Five tabs are available.

Tab	Contains
Overview	What the alert is, the rule that produced it, the endpoint and the time.
Context	The risk score with its four factors, and the criticality of the endpoint. See Risk scoring.
Analysis	Runs the AI model on this alert and returns a verdict, a confidence and its reasoning. See AI-assisted triage.
Enrichment	Checks the addresses, domains and file hashes in the alert against threat intelligence, without leaving the panel. See Threat intelligence.
Raw	The original event, unmodified. Use it to verify any value shown on the other tabs.

The panel's menu filters the list behind it by host, by rule or by source IP, and copies a direct link to the alert for a colleague or a ticket.

Asking the AI from the list#

Each row has an Ask AI control that runs an analysis without opening the panel. Running an analysis requires the Analyst or Administrator role.

Something missing or wrong on this page? Tell us and we will fix it.