{{#if INCIDENT_SUMMARY}}

{{INCIDENT_SUMMARY}}

{{else if REASON}}

{{REASON}}

{{/if}}
{{#if DEVICE_NAME}} {{/if}} {{#if DEVICE_EMAIL}} {{/if}} {{#if DEVICE_GROUP_NAME}} {{/if}} {{#if POLICY_ID}} {{/if}} {{#if TARGET_VALUE}} {{/if}} {{#if THREAT_SCORE}} {{/if}} {{#if INCIDENT_ID}} {{/if}} {{#if LAST_UPDATE_TIME}} {{/if}} {{#if WATCHLISTS}} {{/if}} {{#if ANALYST_TRIAGE_INFO_PRESENTATION}} {{/if}} {{#if ANALYST_STATE_PRESENTATION}} {{/if}}
Device {{DEVICE_NAME}}
Device username {{DEVICE_EMAIL}}
Policy {{DEVICE_GROUP_NAME}}
Policy ID {{POLICY_ID}}
Target value {{TARGET_VALUE}}
Severity {{THREAT_SCORE}}
Alert ID {{INCIDENT_ID}}
Alert created {{LAST_UPDATE_TIME}}
Watchlist {{#each WATCHLISTS}} {{this.name}} {{#unless @last}},{{/unless}} {{/each}}
MDR workflow {{ANALYST_TRIAGE_INFO_PRESENTATION}}
MDR determination {{ANALYST_STATE_PRESENTATION}}
{{#if APPLICATION_NAME}} {{/if}} {{#if PROCESS_PATH}} {{/if}} {{#if REPUTATION}} {{/if}} {{#if PROCESS_USER_NAME}} {{/if}} {{#if SHA256_HASH}} {{/if}} {{#if PARENT_PROCESS_NAME}} {{/if}} {{#if PARENT_PROCESS_USER_NAME}} {{/if}} {{#if PARENT_PROCESS_SHA256_HASH}} {{/if}}
Process {{APPLICATION_NAME}}
Process path {{PROCESS_PATH}}
Reputation {{REPUTATION}}
Process username {{PROCESS_USER_NAME}}
Process SHA-256 {{SHA256_HASH}}
Parent process {{PARENT_PROCESS_NAME}}
Parent process username {{PARENT_PROCESS_USER_NAME}}
Parent process SHA-256 {{PARENT_PROCESS_SHA256_HASH}}
{{#if links}} {{#if linksLabel}} {{/if}} {{#each links}} {{/each}}
{{linksLabel}}
{{ this.label }}
{{/if}}

This alert is based on notification settings specified in '{{RULE_NAME}}'. Update settings