Detection → triage
Notifies the on-call analyst when a detection fires, escalates until someone ACKs, and warns the account holder about a suspicious sign-in.
- Detection firedSeverity-cued threshold or anomaly notification — infrastructure or any watched metric, price, device, or pipeline.
- Critical detectionUrgent on-call notification; the shortest message in the category.
- Needs an ownerClaim-required alert; escalates server-side if nobody claims it.
- Suspicious sign-inSent when an account is accessed from a new device.