Intelligence Alert Candidates
Alert rules produce candidates for critical CVEs, KEV additions, threat-actor changes, campaign updates and industry impact. Candidates are never sent directly — they require human review.
Alert lifecycle
- pending
- reviewed
- escalated
Alert candidates
-
critical_cve critical pending
CVE-2026-0001 CVSS 9.8 newly disclosed · channel webhook
-
kev_added high pending
CVE-2026-0002 added to KEV · channel slack
-
campaign_update medium reviewed
Campaign TTP change detected · channel dashboard
Every candidate requires human review before dispatch.
Related: Operations Center · Tasks · Reviews