Classifying an alert or incident means you tag it as representing true malicious activity or a false alarm as part of the initial triage process. This process lets your team know that a potential thr...
Updated Feb 23, 2022
Version 6.0
Blog Post
Hi,
We are going to add a customization capability for our closing reasons in the following months (and statuses).
As part of this capability, you will be able to define any set of classification reasons for your workspaces.
The ASC-Sentinel sync is and will still be in the classification reason (FP/TP/BP/Other) so this change does not affect the integration.
Thanks.