You are here:
Use Cases for Alerts
This page contains examples of custom alerts that you can create to monitor your tenant’s security.
| Available in: Lightning Experience |
| Available in: Enterprise and Unlimited Editions with the Security Center add-on license. |
| Available for free in: Developer Edition |
Note This content relates to Security Center. Read
about Security Insights, Data Classification, and Who Sees What Explorer in Own from Salesforce.
Threat Detection Score Alert
Set up a custom alert for Threat Detection events to ensure that you’re notified of potential breaches in your tenant’s security posture.
Example More than one Threat Detection event can be a security risk. Create an alert for any
increases to the Threat Detection event count so that you receive a notification whenever a
Threat Detection event occurs. Trigger a flow on the TenantSecurityNotification object for this
alert to create a Case record for the appropriate team to investigate. For more information, see
Threat Detection.
Managed Packages Alert
Gain visibility into who installs packages to maintain your tenant’s security posture.
Example Create an alert for managed package count increases to monitor who installs packages and
when new packages are installed to determine a compliance or security threat. Trigger a flow on
the TenantSecurityNotification object for this alert to create a record that’s submitted to the
appropriate approval process that all packages undergo.
Health Check Score Alert
Ensure that your Health Check score remains satisfactory with a custom alert.
Example You want your Health Check score to consistently remain at 90% or above. Create a custom
alert for Health Check Score decreases to ensure that you receive a notification whenever your
score decreases. Then you can assess security threats and act to secure your tenant.
Inactive Users Alert
Monitor user activity to ensure security compliance and help keep your tenant secure.
Example Create an alert for increases to the inactive users count to ensure that former employees
don’t have access to the tenant.
Permissions Alert
Instead of periodically checking the assigned permissions for each tenant, create an alert. With this information you can reevaluate your tenant’s security posture.
Example Monitoring how many users have the Modify All Data permission is more difficult as your
tenant grows. Create an alert for this permission to receive a notification so that you know when
the total users with the Modify All Data permission exceeds your specified threshold or
increases. Trigger a flow on the TenantSecurityNotification object for this alert to integrate
with an external security incident management system.
Did this article solve your issue?
Let us know so we can improve!
