The service may be configured to suppress or snooze alert notifications for a period of time or for matching conditions, so that alerts are not delivered during maintenance or known incidents.
Alert Suppression
CCC.Monitor.CP13
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.Monitor.TH08 | Alerts are Suppressed Without Expiry or Authorization | Alert suppression, snooze, or action-disable settings may be applied by a user with write access to alerting configuration while telemetry continues to be published. Alert conditions are still evaluated but no notification or action is delivered, so the activity that would have raised the alert proceeds undetected. This impacts the availability of security and operational information and delays incident response. |