In the details section you will find high level information and metadata about the ARO, including the type, severity, status, and created time. The ARO's action buttons are also found at the top, and we will touch on them later on.In the description, you'll find easy to digest information that gives the ARO context. The contents will vary, but usually includes an account of what has occurred, and its impact on your organization.Mitigation steps outline a clear and actionable path for resolving the ARO. Think of them as the issue's "stop, drop, and roll" instructions. Your team can check off steps as they are completed, keeping your organization, and our analysts, up to date on the progress.If enabled, AROs will include a Compliance and Best Practices section that maps the ARO to any compliance controls that it may impact, helping you understand how an issue impacts compliancy in terms of your selected frameworks.Some AROs may include supplemental insights and data to help deepen investigations. Most of the information included here will be metadata, such as impacted account or device names.Links to other helpful content may also be made available in the References section. This is meant to help widen your knowledge about the given issue or topic related to the ARO.Finally, we have the Activity section that keeps a log of events relating to the ARO; from the moment it's created, to mitigation steps being checked, and its resolution. You can also leave comments that we can see, internal notes for your team members only, or request help. Now that we've explored the anatomy of an ARO, let's take a look at addressing and resolving one.

AROs - Intro & Workflow