Console pages

Every screen of the Alertio console and the question it answers. Use it to find the right screen, or to send a colleague to it.

Overview#

Page	Answers
Command Center	What is the state of my environment over this period? Alert volume and severity, active incidents, kill-chain coverage, endpoint health and response activity on one screen.

Page	Answers
Alerts	What exactly was detected? The complete, searchable record. See Alerts.
Alert Pipeline	How was the raw feed reduced, and why did this alert get this score? See Alert Pipeline.
Triage Queue	What needs a person now, and why is each item here? See Triage Queue.
Incidents	Which alerts add up to an attack, and how far did it get? See Incidents.

Page	Answers
Endpoints	Which machines report to Alertio, are they healthy, and what is known about each? See Endpoints.
Deploy Agent	How do I bring a new machine, or a whole domain, under monitoring? See Deploy agents.
File Integrity	What changed on monitored files, and was it real? See File integrity.
Threat Intelligence	Is this hash, address, domain or URL known to be malicious? See Threat intelligence.
ATT&CK Coverage	Which attack techniques do we detect, and where are we blind? See MITRE ATT&CK coverage.
AI Analysis	What did the model conclude, and how often do analysts agree with it? See AI-assisted triage.

Page	Answers
Response Center	What has been done to our endpoints, and how do I act now? See Response actions.
Playbooks	Which response procedures exist, and how do I run one safely? See Playbooks.
Response Scripts	How do I write and check my own response code? See Response scripts.
Script Deployment	Which endpoints have my scripts, and did the rollout succeed? See Response scripts.

Page	Answers
Accounts	Who can use Alertio, with which role, and what changed? See Users and roles.
Settings	How are alerts scored here, and which services are connected? See Settings.

Press / on any page of this documentation to search it.

Something missing or wrong on this page? Tell us and we will fix it.