At the top right of the Tenable Identity Exposure home page, a bell icon and its badge counts notify you of attack alerts and/or exposure alerts waiting for your acknowledgment. When it receives new alerts, Tenable Identity Exposure increments the notification badge counts.

Blue Exposure alerts
Red Attack alerts

To display alerts:

  1. In Tenable Identity Exposure, click the bell icon.

    The Alerts pane opens.

  2. Do one of the following:

    • Click on the Exposure alerts tab to display exposure alerts.

    • Click on the Attack alerts tab to display attack alerts.

      A list of associated alerts appears.

To view the event associated with the alert:

  1. Select an alert from the list and click Actions> See the deviance.

    The Event details pane opens with the following information:

    • Source (Event collector)

    • Object type

    • File

    • Path

    • Impacted domains

    • Date

    • A list of attributes with values at the time of event and the current value

  1. Click the Deviances tab.

    The Deviances pane opens with a list of deviances associated with the event.

  1. Click on n/n Indicators to display the pane for the Indicator of Exposure that triggered the alert.

  2. Click on n/n Reasons to display the reasons for the alert.

  3. Click on the arrow to expand or collapse the information for the alert.

  4. Click on the Indicator name to display the Indicator details page.

To archive the alert:

After you view the alert, you can archive it.

  1. In the list of alerts in the Alerts pane, select the checkbox for the alert that you want to archive.

    • Optionally, you can click the checkbox for n/n objects selected at the bottom of the pane to select all alerts in bulk.

  1. At the bottom of the pane, click Select an action > Archive.

  2. Click OK.