License required: Depending on the type of alert you want to send, you may require licenses for Indicators of Attack or Indicators of Exposure.

Tenable Identity Exposure's alerting system helps you identify security regressions and/or attacks on your monitored Active Directory. It pushes analytics data about vulnerabilities and attacks in real-time through email or Syslog notification.