In the Alert Settings section, you can select Enable Automatic Triage Collection for AMSI Alerts. This option uses the standard auto-triage collection method and provides useful insights into the environment.
To collect AMSI Artifacts, you can select Acquire AMSI Artifacts for the Alerts. This option ensures that the AMSI module obtains scan requests from various sources and displays the results of the scan requests in the Acquisitions page providing metadata of the scan request and the payload.
