Glossary: Hardening, Firewalls and Intrusion Detection
Alerting
Also written: alert, alerts, alert rules
The second half of monitoring. When a rule finds an event that needs a person, the system tells the right person quickly, with a severity level. A good alert is actionable: the person knows what to check and what to do.
Where the book teaches it
Related terms
MonitoringThresholdSeverityAlert fatigueSIEM (security information and event management)