alerts
Help articles tagged “alerts”.
Choose your alerts, and get them on your phone
Open Security ▸ Alerts & detection… to pick which events raise an alert. Two are on by default. Add an ntfy topic or HTTPS webhook to push alerts to your phone (Pro plan and trial).
The Detections tab: what a risk score means
The Detections tab scores each program that is online right now from 0 to 100 by adding up warning signs it shows. At 40 or more it is worth a look, but a score is a lead, not a verdict.
Learning mode: approve each new app before it connects
Turn on Protection ▸ Filtering mode ▸ Learning. A program new to NetSecWall is held back the moment it connects, and a pop-up asks you to Allow, Allow once or Block it.
The threat-intelligence feeds NetSecWall uses, and keeping them updated
NetSecWall checks every public address your apps reach against six free threat-intelligence IP lists, on your PC. They refresh daily, or on demand from Tools ▸ Feeds.
Check app hashes with VirusTotal and your own IOC list
NetSecWall fingerprints each program that goes online (SHA-256) and checks it against your own list of known-bad hashes and, with your VirusTotal API key, VirusTotal. Only the hash is sent.
Stop alerts for trusted apps and publishers
Add a program by path, or a whole publisher, under Security ▸ App whitelist…. Whitelisted apps are no longer risk-scored, so they stop raising suspicious-process alerts and incidents.
Threat intelligence and behavioral detection
NetSecWall checks every remote address against six public threat lists, and separately scores each program's behavior from 0 to 100. Lists catch known-bad addresses; behavior catches new ones.