Watchlisted Recipients at Risk

Configure the following event notification to notify administrators when Deep Discovery Email Inspector detects malicious or suspicious email messages or attachments sent to watchlisted recipients.

Go to Detections > Notifications > Event Notifications.
The Event Notifications screen appears.
Click Advanced Threat Activity.
A list of events appears.
In the Event column, click Watchlisted recipients at risk.
The Watchlisted Recipients at Risk screen appears.

Specify the following notification settings.

Criteria	Description
Email address watchlist	Type the email addresses to be monitored. Use a semicolon (;) to separate multiple entries.
Type	Select the risk level of the detections that trigger the event notification.
Detections	Type the number of threats detected by the managed product.
Period	Specify the time period for the detections.

Select recipients for the notification.
1. From the Available Users and Groups list, select contact groups or user accounts.
2. Click >.
  The selected contact groups or user accounts appear in the Selected Users and Groups list.

Enable one or more of the following notification methods.

Method	Description
Email message	To customize the email notification template, use supported token variables or modify the text in the Subject and Message fields. For more information, see Standard Token Variables and Advanced Threat Activity Token Variables.

Method

Description

Email message

To customize the email notification template, use supported token variables or modify the text in the Subject and Message fields.

For more information, see Standard Token Variables and Advanced Threat Activity Token Variables.

To test if recipients can receive the event notification, click Test.
Click Save.