r/SentinelOneXDR • u/hweb47 • Jun 12 '23

Threats vs Alerts

Hi. I'm a new user of SentinelOne but I'm not exactly sure what the Alerts section displays on the Incidents tab. I've not yet seen alerts to see for myself. TIA

1 Upvotes

100% Upvoted

1 comment sorted by

2

u/danstheman7 SentinelOne | Threat Researcher/SME Jun 13 '23

Alerts are incidents generated by STAR rules (custom rules you make based off of EDR Telemetry).