By default, new users will receive email notifications when the following events occur in Workbench:

  • Incident is created

  • Investigation is created

  • Investigation is assigned to my org

  • Investigation is closed

  • Investigative action is assigned to me

  • Investigative action is assigned to my org

  • Notify action is assigned to my org

  • Verify action is assigned to me

  • Verify action is assigned to my org

  • Remediation action is assigned to me

  • Remediation action is assigned to my org

  • Remediation action is automated

  • An assembler has a health status change

Note: In our Wiz integration, users additionally receive a notification by default when an incident is closed.

To make changes to your email notifications, refer to Email Notifications Setup for Workbench.

For the list of default organization notifications, see the Organization Notifications Default List. To learn more about what the notifications mean, refer to the Notifications Definitions Guide.