ConceptsEmail Alerts

Email Alerts

SOC alerts generated from email security signals, such as detected phishing, malicious attachments or links, or suspicious sender behavior, which analysts triage to catch one of the most common attack delivery channels.

Glossary definition

10 direct links1 lesson

Concept Neighborhood

Prerequisite · arrow shows the orderRelated · bigger circles cover more lessons

Start here

Context Gathering

The foundation Email Alerts builds on, worth understanding first.

Open concept →

Prerequisitelearn this first

Context GatheringStart here

Collecting the surrounding information an analyst needs to make sense of an alert, the user, host, asset criticality, recent activity, and related events, so triage decisions rest on a full picture rather than the alert alone.

lessons

Relatedsorted by lesson coverage

Disposition

lessons

Phishing Detection

lessons

Authentication Alerts

lesson

Credential Phishing

lesson

Endpoint Alerts

lesson

IMAP

lesson

Show 3 more connections

Inbox Rules

lesson

MX Record

lesson

SMTP

lesson

Related Lessons

1 lesson covers this concept

Common Alert Categories and Response Playbooks

SOC Analyst