Alert Queue
High-confidence typology matches flagged by the automated cluster scanner. Triage, confirm or dismiss alerts and drill into match reasoning.
What the Alert Queue delivers
The Alert Queue is your triage workbench. It gathers every high-confidence flag generated by the platform's automated scanners in one place, so you can quickly review, confirm or dismiss each one — with all the reasoning behind every match at your fingertips.
Alerts are generated automatically by the scanners — high-confidence typology matches, composite risk thresholds and outflows to sanctioned counterparties.
Slice the queue by triage status (new, reviewing, confirmed, dismissed) and by severity (critical → low) to focus on what matters.
Confirm, mark reviewing or dismiss each alert directly from the row or the detail panel — status updates instantly.
Open any alert to see the match score, likely threat actor, observed indicators and the engine's reasoning behind the flag.
- 1
Each row is an alert: it shows the cluster/typology, the likely threat actor, the match score (% for typology matches, /100 for risk-score alerts), the severity and the current status.
- 2
Use the Status and Severity dropdowns up top to filter the queue. The count next to them shows how many alerts match.
- 3
Triage quickly from the row: 'Confirm' escalates it, 'Dismiss' clears it. The buttons disable once that status is set.
- 4
Click anywhere on a row to open the full detail panel and dig deeper before deciding.
- 5
In the detail panel, read the match bar, observed indicators and reasoning, then Confirm, Mark Reviewing or Dismiss.
- 6
When an alert is tied to an actor, use 'Open Actor' in the panel to jump straight to that actor's full profile and investigate.
| Cluster / Typology | Match | Severity | Status | Triage |
|---|---|---|---|---|
Rapid Dispersion Smurfing detected on cluster Darknet Settlement | 59% | medium | new | |
Mixer Layering detected on cluster Ransomware Cash-Out | 92% | critical | new | |
Sanctions Evasion Route detected on cluster Ransomware Cash-Out | 60% | critical | dismissed | |
Rapid Dispersion Smurfing detected on cluster Ransomware Cash-Out | 68% | high | new | |
Pig-Butchering Funnel detected on cluster Sanctions Evasion Route | 63% | high | reviewing | |
Darknet Settlement detected on cluster Ransomware Cash-Out | 75% | medium | dismissed | |
Pig-Butchering Funnel detected on cluster Mixer Layering | 81% | medium | new | |
Mixer Layering detected on cluster Darknet Settlement | 86% | critical | confirmed | |
Pig-Butchering Funnel detected on cluster Sanctions Evasion Route | 67% | critical | dismissed | |
Sanctions Evasion Route detected on cluster Darknet Settlement | 63% | critical | confirmed | |
Mixer Layering detected on cluster Peel Chain Laundering | 66% | critical | reviewing | |
Sanctions Evasion Route detected on cluster Mixer Layering | 67% | critical | dismissed | |
Pig-Butchering Funnel detected on cluster Sanctions Evasion Route | 98% | medium | reviewing | |
Mixer Layering detected on cluster Pig-Butchering Funnel | 60% | critical | new | |
Rapid Dispersion Smurfing detected on cluster Sanctions Evasion Route | 66% | high | dismissed | |
Peel Chain Laundering detected on cluster Mixer Layering | 77% | critical | dismissed | |
Ransomware Cash-Out detected on cluster Ransomware Cash-Out | 77% | high | dismissed | |
Ransomware Cash-Out detected on cluster Mixer Layering | 68% | critical | new | |
Ransomware Cash-Out detected on cluster Pig-Butchering Funnel | 92% | critical | reviewing | |
Pig-Butchering Funnel detected on cluster Peel Chain Laundering | 82% | critical | dismissed |