Missing information about what the different statuses do - In Progress, Dismissed and Resolved.

[PolarbearChimney]

I would like to know what the difference between the statuses are: Dismissed, Resolved, In Progress. What do this statuses actially do, what effect to they have and what is the best practice using this status fields.

The only one barely covered on the Learn page is "Dismissed".

Like, if I select a status - do the alert come back if the reason for alert is still there? If so - when?

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: 6544e596-2ca4-e860-169c-b48a2508ee4c
• Version Independent ID: 6fdc0c49-0c76-e19e-a9e2-d029f80ec46a
• Content: Manage and respond to security alerts - Microsoft Defender for Cloud
• Content Source: articles/defender-for-cloud/managing-and-responding-alerts.md
• Service: defender-for-cloud
• GitHub Login: @dcurwin
• Microsoft Alias: dacurwin

[ManoharLakkoju-MSFT]

@PolarbearChimney Thanks for your feedback! We will investigate and update as appropriate.

[ElazarK]

reassign:alizabernstein

[AlizaBernstein]

Work item created https://dev.azure.com/msft-skilling/Content/_workitems/edit/229163

label:"backlog-item-created"

[dcurwin]

reassign:ElazarK

[vegazbabz]

Any updates?

[ElazarK]

@vegazbabz I am looking in to this and hope to have an answer for you soon