By default, toggle button under 'SIEM/Ticketing Integration' section is turned off.
Turning on the toggle button under 'SIEM/Ticketing Integration' section will provide us with three options as shown here: Quarantine, EmployeeShield® and Phish911TM. When the toggle button under 'SIEM/Ticketing Integration' section is turned on, Admins MUST turn on at least one of the three (Quarantine, EmployeeShield® and Phish911TM) toggle buttons.
Quarantine:
Graphus will publish an event only when a 'Quarantine' alert is generated.
EmployeeShield®:
Graphus will publish an event only when an EmployeeShield® alert is generated.
Phish911TM:
Graphus will publish an event only when a Phish911TM alert is generated.
Admins have the flexibility to turn on more than one toggle button, in which case an event will be published for all the chosen alert types.