How we describe it
Number of security alerts linked to this user that have not yet been investigated.
Where this comes from
This signal is derived from Microsoft Graph: GET /security/alerts_v2, alert.status === 'new'.
Alerts New
Updated View as Markdown