By default, toggle button under 'SIEM/Ticketing Integration' section is turned off.

Turning on the toggle button under 'SIEM/Ticketing Integration' section will provide us with three options as shown here: Quarantine, EmployeeShield^® and Phish911^TM.  When the toggle button under 'SIEM/Ticketing Integration' section is turned on, Admins MUST turn on at least one of the three (Quarantine, EmployeeShield® and Phish911TM) toggle buttons.

Quarantine:

Graphus will publish an event only when a 'Quarantine' alert is generated.

EmployeeShield^®:

Graphus will publish an event only when an EmployeeShield® alert is generated.

Phish911^TM:

Graphus will publish an event only when a Phish911^TM alert is generated.

Admins have the flexibility to turn on more than one toggle button, in which case an event will be published for all the chosen alert types.