

This is because the alert might indicate a potential breach to your organization that needs to be further investigated.

Alerts are displayed in the portal for 90 days, even if the resource related to the alert was deleted during that time.Defender for Cloud classifies alerts and prioritizes them by severity.Each alert provides details of affected resources, issues, and remediation steps.Security alerts are triggered by advanced detections available when you enable Defender plans for specific resource types.Security alerts are the notifications generated by Defender for Cloud's workload protection plans when threats are identified in your Azure, hybrid, or multicloud environments. This article describes security alerts and notifications in Microsoft Defender for Cloud.
