If you want to be notified about suspicious activity, you can configure alerts that will be triggered by specific events. Alerts are sent after the specified action has been detected. Alerts are helpful if you want to be notified about actions critical to your organization security and have to mitigate risks once the suspicious action occurs.

The example alert is triggered when a new user is created in the monitored domain.

Looking for real-life use cases and walk through examples? Check out Netwrix training materials. Go the Alerts on Threat Patterns page on Netwrix website.