ATA suspicious activity alerts timeout?

Hi,   Quick question that I can't find the answer to. When ATA pops up an alerts for some activity that it found, once the underlying system that created the activity is remediated, how long before...