Which alert notifies when attack indicators are detected?

Which alert notifies when attack indicators are detected?

• A. License Alerts
• B. Indicators of Attack Alerts
• C. Protection Errors Alerts
• D. Unmanaged Computer Discovery Alerts

Answer: (B)

Indicators of Attack Alerts are the notifications you want when signals that an attacker is present are detected. In endpoint security, these alerts fire in response to behavioral patterns that suggest malicious activity—things like unusual or unexpected process creation, suspicious script usage, attempts at credential access, or unusual network connections and lateral movement. By highlighting these indicators, the system flags potential threats quickly so responders can investigate and contain the attack. The other alert types serve different purposes: license alerts warn about licensing status, protection errors alerts indicate failures or misconfigurations in protection components, and unmanaged computer discovery alerts alert you to devices on the network that aren’t being managed.

Indicators of Attack Alerts are the notifications you want when signals that an attacker is present are detected. In endpoint security, these alerts fire in response to behavioral patterns that suggest malicious activity—things like unusual or unexpected process creation, suspicious script usage, attempts at credential access, or unusual network connections and lateral movement. By highlighting these indicators, the system flags potential threats quickly so responders can investigate and contain the attack. The other alert types serve different purposes: license alerts warn about licensing status, protection errors alerts indicate failures or misconfigurations in protection components, and unmanaged computer discovery alerts alert you to devices on the network that aren’t being managed.