With security alerts, admins will receive email notifications whenever suspicious behavior, risky activity, and potential data leaks are detected.
View alert details
You can view details about a specific alert, including who is responsible, what happened, when it happened, and what files, folders, or people were impacted.
To view alert details from an email you received about the alert, click Open alert directly from the email.
To view alert details on dropbox.com:
- Log in to dropbox.com with your admin credentials.
- Click Admin console.
- Click the dropdown beside Dropbox, under Products.
- Click Security.
- Click Security alerts.
- Click ☑ (more options) next to the alert you’d like to view.
- Click Open alert details.
Take action on an alert
From the alert details page, you’ll be provided different options based on the alert types. These include:
- Restore in activity page. If you were sent a Mass deletion alert, this will take you to the activity page where you can restore the deleted files.
- Email team member. Email the team member who triggered the alert.
- Suspend team member. Suspend the team member responsible for the alert.
- Acknowledge. Mark the alert as acknowledged and remove it from the main alerts list.
- In Progress. Mark the alert as in progress and remove it from the main alerts list.
- Resolved. Mark the alert as resolved and remove it from the main alerts list.
- Dismissed. Mark the alert as dismissed and remove it from the main alerts list.
What kinds of events trigger an alert?
- Ransomware detection. Detect suspicious activity early and help prevent suspected malicious ransomware attacks from spreading.
- Mass deletion. A team member deleted an unusually large amount of data over a short period of time.
- Mass data move. A team member moved an unusually large amount of data over a short period of time.
- Sensitive content in team folders shared externally. A file that belongs to a team folder and contains personal information was shared outside your team. Or, personal information was detected in an already externally shared file.