Skip to content
DoveRunner Docs
This documentation is also available as markdown. For a complete index of all pages, see llms.txt at /llms.txt

Manage Threat Alerts

Threat alerts watch the attack data collected from a protected app and notify you when it moves in a way worth looking at — a spike against a recent baseline, or a shift concentrated in one threat type or OS version.

Open Settings → Manage Threat Alert.

The Alert List

Section titled “The Alert List”
ColumnDescription
Notification NameThe name you gave the alert.
App NameThe package the alert watches.
ConditionThe comparison that triggers the alert.
Updated OnWhen the alert was last modified.
RecipientThe email address or webhook the alert is delivered to.
ActionPause, edit, or delete the alert.

Search by name, narrow the list with FILTER, or download it with EXPORT.

Creating an Alert

Section titled “Creating an Alert”

  1. Click CREATE.

  2. Under Basic Information, enter a Name. Use something that identifies the app and the condition, since the list shows many alerts side by side.

  3. Under Condition, choose Android or iOS, pick the app from Select App, and choose a Select Condition entry.

  4. Under Action, choose a Select Communication Channel and its recipient.

  5. Click SAVE.

Conditions

Section titled “Conditions”
ConditionFires when
Compare with Yesterday Total Attack Volume with Avg of Past 2 dayYesterday’s total attack volume diverges from the average of the previous 2 days.
Compare with Yesterday Total Attack Volume with Avg of Past 2 weeksYesterday’s total attack volume diverges from the 2-week average.
Compare with Yesterday Total Attack Volume with Avg of Past 1 MonthYesterday’s total attack volume diverges from the 1-month average.
Compare the Spike of the Total Volume in OS Version between with Yesterday and Day BeforeThe volume for a given OS version spikes between yesterday and the day before.
Compare the Spike of the Total Volume in Threat Type between with Yesterday and Day BeforeThe volume for a given threat type spikes between yesterday and the day before.

The three volume conditions differ only in their baseline window. A short baseline reacts quickly but is noisier; a longer one is steadier but slower to flag a gradual rise.

Communication Channels

Section titled “Communication Channels”
ChannelRecipient
EmailAn email address you enter on the form.
WebhookOne of the webhooks registered in Manage Webhook. Register it first — it must exist before you can select it here.