This guide provides a simple and objective walkthrough to help you set up automated scenarios that streamline the handling of your threat tickets.
After defining your monitoring terms and establishing your validation criteria, the next step is to automate this workflow.
It’s important to be familiar with your Validation Criteria and, if you use the SmartHunt service, the criteria applied by that team. For example: if you have a standard URL pattern for official profiles, you can configure an automation that identifies URLs that do not follow this pattern, automatically moves the corresponding tickets from Threats to Incidents, and forwards the case for Takedown.
How to Create, Edit, Pause, or Delete an Automation
From the Axur platform’s homepage:
Click the gear icon.
Go to Automations.
In this section, you can:
Create new automated scenarios
Edit existing rules
Pause or reactivate automations
Delete automations as needed
All registered automations — active or inactive — appear in the Automations list. To manage each one, use the buttons located to the right of the automation’s name.
Creating a New Automation
Click + New Automation.
Select the work areas where the automation should apply.
Recommendation: use only one area per automation to ensure more accurate attribute matching.
Choose the assets and ticket types the automation should act upon.
Define the conditions of the automation.
For more reliable results, we recommend using at least two conditions.
Note: available attributes may vary depending on the selected areas and ticket types.
Choose the action that will be executed automatically. The available actions are:
Mark as Incident (moves the ticket to the Incidents worklist)
Send to Quarantine (moves the ticket to the Quarantine worklist)
Request Takedown (sends the case directly for Takedown processing)
Discard threat
For more details, refer to the Work lists and Export article.
Track your configuration progress using the panel on the right side of the page.
Finish by adding a name or label for the automation.
Suggestion: combine the action and attributes used, such as “Takedown — Brand mention and logo use.”
You can also save it as a draft before activating it.
Make the Most of It
To ensure consistent results, keep your Safelist up to date at all times.