Set up Drive Encryption notifications in Nebula

Configure notifications to monitor Drive Encryption events in real time, ensuring admins stay informed on critical events affecting the security of encrypted drives. Drive Encryption notifications alert for the following events.

• Encryption failures
• Recovery key uses 
• BitLocker suspension

Create a Drive Encryption notification

1. On the left navigation menu, go to Configure > Notifications.
2. Click New notification to set up a new Nebula notification. 
3. In the General settings section, fill out the following fields and click Next.
   • Notification name: Title for the notification.
   • Description: A brief description of the notification.
   • Owner: This field is automatically set to the logged-in user creating the notification. Notifications can only be modified by the owner or Super Admins.
4. In the Category section, select Endpoint agent activity > Drive Encryption and click Next.
5. In the Conditions section, select your Conditions to filter out unwanted notifications. 
6. Click the add or delete button on the right side to add or remove a condition, then click Next. 
   • The following conditions are available for this category:
     • Drive encryption event
       • Encryption failed
       • Recovery key used
       • BitLocker suspended
     • Endpoint
     • Group
7. In the Delivery section, select a delivery method(s) and click Next.
8. In the Content section, toggle Enable aggregation, to group multiple alerts into a single notification. If enabled, select an Interval and view type.
   • Summary view: Provides an overview of the events found with an attached CSV file containing the full details and a link to view the events directly in the console. 
     • Note: If another admin has already acted on the notification, its links may no longer be valid.
   • Detailed view: Contains the full details of the events in the notification email itself.
9. Select tiles based on the desired content you want the email or webhook notification to contain. 
   
10. Click Complete to finish setting up the notification.

Return to Drive Encryption guide.