Forum Discussion
Continuous ATP Alert
Microsoftmelmore Are you sure you closed the alert, and it went back to Open state WITHOUT ANY network activity related to it added ??? If so, please open a support ticket about it as it requires deeper research.
Try to export the alert to excel where you can see more detailed data about information accumulated about this alert and verify that indeed there wasn't something new added before it got reopened.
EliOfekHi Eli,
I cannot find anything in the new alert(s), there has been more than one, that indicate any "new" activity. In fact, when you go through the timeline, in only shows suspicious activity in the timeline associated with the original alert. I have also tirelessly reviewed the portal to ensure all alerts and investigations associated with theses events were closed. My original thought, until this afternoon was one remained open and alerting.
I'll try the support ticket route. I appreciate the response.
--
Mike
