For the complete documentation index, see llms.txt. This page is also available as Markdown.

Respond to an Issue Manually

Not all Detections support default responses, and even when a default response is available, you may need to adjust it for a single issue. In these situations, you can add additional responses at the issue level.

Manual responses are only available for issues that don't support default responses. If the option to manually respond is not present on the issue, update the default response.

From an issue, choose responses on the right.

Choose a response in an issue

After the response is applied, the issue will resolve:

Resolved issue

When available in the issue, you can choose from the same options in the issue detail view as you would in a default response described here:

Add responses to an issue

Other times, you'll need to update any responses at the default detection level:

Edit the default response

You can also proactively prevent auto-forwarding for an account(s) in your Google or Microsoft 365 admin console. Click the Prevent link to learn how in their documentation.

Example prevent option

Response Options

Depending on the issue, different options are available. These options will expand over time. Example options include:

  • Revoke external access for a file stored in Google Drive

  • Ad-hoc actions from Material

    • Disable MFA bypasses

      • Option to run an ad-hoc remediation when an issue is created

    • Remove individual ASPs

      • Option to run an ad-hoc remediation when an issue is created

    • Disable auto-forwarding

      • Option to run an ad-hoc remediation when an issue is created

  • Link to third-party documentation for a recommended remediation

    • Kill process or sync

    • Restrict file permissions

    • Disable IMAP/POP

    • Remove email forwarding or filtering rule

    • Enable or enforce strict MFA

    • Set stricter moderation or sender settings

    • Revoke application permissions

    • Remove ASPs

Last updated

Was this helpful?