Email notifications

Send email notifications to admins when investigations change.

By default, we send emails to admins as follows:

• When there's a new investigation, we email all Super Admins.
• When the admins assigned to an investigation change, we email the admins who are newly assigned or removed.

You can see examples of these emails or change the settings in the Threat Analysis Center preferences.

"New investigation" emails

To change the settings for "New investigation" emails, do as follows:

1. Go to Threat Analysis Center > Preferences.

2. On the Email notifications tab, select the Investigation creation template.

   The emails include details of the detections in the investigation, their risk level, and the number of devices affected.

   

3. Edit the settings.

   1. In When to send, the default is When an investigation is created. Only select Never if you want to stop the emails.
   2. In Who to send this to, add or remove recipients.

   

"Investigation personnel changed" emails

To change the settings for "Investigation personnel changed" emails, do as follows:

1. Go to Threat Analysis Center > Preferences.

2. On the Email notifications tab, select the Assigning analysts to investigation template.

   The emails include a summary of the investigation and a list of all the people assigned to it.

   

3. In When to send, the default is When people change, send only to people who changed. You can choose one of the following instead:

   • Send to all people assigned to the investigation.
   • Never. Select this if you want to stop the emails.