You would like to know what an alert is and how they are caused
Alerts are caused when we receive enough evidence from our collected telemetry data that gives us a reasonable suspicion that something may be wrong.
For instance, a simple successful login to a system on its own may ordinarily be innocuous, however, if it's preceded by several failed logins, it may mean that someone has been trying to guess your password and then subsequently succeeded in gaining access to your system without your authorisation.
CyberEasy looks at the whole context and correlates events which may indicate a problem. Once it's satisfied that this event "looks bad" an alert is then generated and shown on your dashboards and delivered to your mobile app.