SEPM 14.x is configured to trigger an alert if a detection has occurred on network.(Single Risk Event)
No Error - Admin expects an email notification for every risk event however SEPM does not trigger notification.
SEPM 14.x
SEP 14.x
SEPM only triggers email notification for most cortical events to avoid email flood as there could be many non-critical events on network .
SEPM triggers email notification (Single Risk Event) for these categories only . If the event is out of below categories there will be no email triggered.
This behavior is by design.