Was wondering what the expected delay time should be between the time a threat is detected and an email is sent out. From my testing it seems to be kind of random and so far I am seeing it take about 20 minutes on average. We are coming from Symantec Endpoint Cloud and we receive the emails seconds after the threat is detected. What is great about that is we can react and call the end user immediately to see what they opened or what website they were on if we feel is necessary. 

 

So how long should an email notification take before we receive after threat detected?

 

From what I read here some threats do not generate a threat on console or alert emails. Why is this and can we change that?