Taking Action on an Incident
Taking action on an incident is also known as remediating an incident.
Locate the incident you wish to take action on, and select it to display the Incident Summary page. See Viewing an Incident for more information.
The message header displays details about the incident, including its current status and flag reason:
From the Actions menu, select an action to take on this incident.
Note
When you select one of the following actions for an email or domain, it is applied to all affected users. Select the Affected Users tab to see a list of all users that received the email.
Allow Sender: This action adds the sender to the Allow List. The email is delivered to the user's inbox without analysis. See Adding a Sender to the Allow List for additional information.
Allow Domain: This action adds the domain to the Allow List, so that any email using that domain is delivered to the user's inbox without analysis. See Adding a Domain to the Allow List for additional information.
Mark as Safe: This action adds a green banner to this email marking it as safe. The email is delivered to the user's inbox.
Remediate: This action moves this email from a user's inbox to their Junk folder.
Status | Description | Available Actions |
|---|---|---|
 | An email has been flagged by a user as phishing or clean using the TitanHQ for Outlook add-in. This incident needs Admin attention and review. | Remediate Mark as Safe Allow Sender Allow Domain |
 | Administrator has reviewed this email and determined it was malicious and selected to move it to a user's Junk folder. This email has been moved to the Junk folder for all recipients. | Mark as Safe Allow Sender Allow Domain |
 | Email Security has flagged this email as suspicious and applied a warning banner before delivering it to a user's Inbox. | Remediate Mark as Safe Allow Sender Allow Domain |
 | Administrator has reviewed this email and determined it is safe. Once marked as safe, the email is then delivered to all recipients with a banner marking it as safe. | Remediate Allow Sender Allow Domain |
 | Auto remediation has been enabled meaning that this email has automatically been moved to the Junk folder for all recipients. | Allow Sender Mark as Safe |