Skip to content

Glossary: Hardening, Firewalls and Intrusion Detection

Alerting

Also written: alert, alerts, alert rules

The second half of monitoring. When a rule finds an event that needs a person, the system tells the right person quickly, with a severity level. A good alert is actionable: the person knows what to check and what to do.

Where the book teaches it

Related terms

MonitoringThresholdSeverityAlert fatigueSIEM (security information and event management)