Log in to the Endpoint Security (HX) Web UI.
From the Configure section in the main menu, select Triage Settings.
Select the Alert Type Specific Settings region on the Automatic Triage Settings page.
To enable or disable automatic triage acquisitions for specific alert types:
To enable automatic triage acquisitions, toggle the switch to ON for the specific alert type.
To disable automatic triage acquisitions, toggle the switch to OFF for the specific alert type.
You can enable and disable automatic triage for the following alert types:
Real-Time Detection (IOC)
Exploit Guard Detection (EXD)
Process Tracker (PRO)--This alert type is only available if you are using the Process Tracker module in conjunction with the Enricher module, and you have configured these modules to generate PRO alerts.
Click Save.
Enable and disable automatic triage acquisitions for specific alert types
- Published on Aug 26, 2026
- 1 minute(s) read
To enable automatic triage acquisitions for specific alert types from the Automatic Triage Settings page:
Was this article helpful?