When are ATP Real-Time Alerts sent?

Real-Time Alert is a notification feature of ATP.

As soon as Hornetsecurity ATP detects an attack, Real-Time Alert immediately sends a notification to your organization, informing them of a possible threat. In doing so, the responsible person receives information about the type and target of the attack, the sender and the reason why the email was intercepted.

Real-Time Alerts are not sent for all emails quarantined as AdvThreat. Alerts are sent only if:

• Malicious code was found in the sandbox.
• URL Rewriting has blocked a website or download.
• URL Scanning has found a malicious URL.
• Emails have been filtered out by the Targeted Fraud Forensics filter.