Links

Alert Runbooks

Recommended steps to reconciliation

Overview

An alert runbook is a set of instructions for remediating the issue triggering an alert. Runbooks also describe the severity of the issue's risk and remediation effort, as well as a description of the conditions that triggered the alert.
Panther provides alert runbooks for a number of Panther-managed detections.

Alert triage for Panther-managed policies and rules