Alert Runbooks

Recommended steps to reconciliation

Overview

An alert runbook is a set of instructions for remediating the issue triggering an alert. Runbooks also describe the severity of the issue's risk and remediation effort, as well as a description of the conditions that triggered the alert.

Panther provides alert runbooks for a number of Panther-managed detections.

Alert triage for Panther-managed policies and rules

Panther-managed Policies RunbooksPanther-managed Rules Runbooks

Last updated

#1924: [don't merge until ~Oct] Notion Logs (Beta)

Change request updated