Taking Action on an Incident
Taking action on an incident is also known as remediating an incident.
Locate the incident you wish to take action on. See Viewing an Incident and go to the Incident Summary page.
The header shows you the current status of this incident and a dropdown menu of available actions:
From the Actions menu, select an action to take on this incident.
Note
When you select one of the following actions for an email or domain, it is applied to all affected users. Select the Affected Users tab to see a list of all users that received the email.
Allow Sender: This action adds the sender to the Allow List. The email is delivered to the user's inbox without analysis. See Adding a Sender to the Allow List for additional information.
Allow Domain: This action adds the domain to the Allow List, so that any email using that domain is delivered to the user's inbox without analysis. See Adding a Domain to the Allow List for additional information.
Mark as Safe: This action adds a green banner to this email marking it as safe. The email is delivered to the user's inbox.
Send to Junk: This action moves this email from a user's inbox to their Junk folder.
Status | Description | Available Actions |
|---|---|---|
 | An email has been flagged by a user as phishing or clean using the TitanHQ for Outlook add-in. This incident needs Admin attention and review. | Allow Sender Mark as Safe Send to Junk |
 | Administrator has reviewed this email and determined it was malicious and selected to move it to a user's Junk folder. This email has been moved to the Junk folder for all recipients. | Allow Sender Mark as Safe |
 | PhishTitan has flagged this email as suspicious and applied a warning banner before delivering to a user's Inbox. | Allow Sender Mark as Safe Send to Junk |
 | Administrator has reviewed this email and determined it is safe. Once marked as safe, the email is then delivered to all recipients with a banner marking it as safe. | Allow Sender Send to Junk |
 | Auto remediation has been enabled meaning that this email has automatically been moved to the Junk folder for all recipients. | Allow Sender Mark as Safe |