Take Actions On Incidents

Hi Team,

So I am new to "Defender" & I did receive an alert but I am confused that on that alert, do I need to take any action I mean how do I know the alert I am getting is being blocked? Alert is something about "unauthorized attempt was made by admin" but I don't see which states that the attack has been blocked