Automatically reject alerts generated by revoked indicators
We try our best not to introduce bad indicators into our CTI feed but despite our best effort, incidents already happened where a bad indicator created many alerts for our customers.
Customers are flooded by bad alerts with no easy way to know that it is in fact known to be bad. Our customer care team cleans the customer environments with details and explanations. This process is manual and very time consuming.
To adress this, when an indicator of the Intelligence Center is revoked all the open alerts that were created by this indicator will be automatically rejected, with a comment explaining why.
![Capture d’écran 2022-08-29 à 14.04.55.png](BASE/products/901462981/changelog/12497/inline-ff7c6961f0a6e1261bb57cb3b68e551e.jpg)