Action: Turbot > Denial Event Notification

Send notifications for denial events detected from SIEM sources (e.g., Splunk).

This action is triggered when access denial events are detected and processed. It sends notifications via email, Slack, MS Teams, or webhook based on the configured notification rules.