Alert Runbooks

Recommended steps to reconciliation

Overview

An alert runbook is a set of instructions for remediating the issue triggering an alert. Runbooks also describe the severity of the issue's risk and remediation effort, as well as a description of the conditions that triggered the alert. It's recommended to provide a descriptive runbook, as Panther AI alert triage will take it into consideration.

Panther provides alert runbooks for a number of Panther-managed detections.

Alert triage for Panther-managed policies and rules

Panther-managed Policies RunbooksPanther-managed Rules Runbooks