Skip to main content
When a session contains flagged activity, related events are grouped together into contributing incidents. These incidents give reviewers a structured, at-a-glance summary of what occurred during a session, reducing the time spent manually reviewing lengthy recordings. In this article, you will learn what each element of an incident means and how to use it to assess flagged activity efficiently.

​
Elements of an incident card

ElementDescription
Duration windowThe window during which flagged events were grouped together. Any events that occur within the same window are captured in the same incident.
Event countThe total number of events flagged within that duration window.
SeverityThe risk level of the incident: High (red) or Medium (orange)
AI-generated summaryA short description of what was detected, giving reviewers a quick read of what happened without opening the full session recording.
Video evidenceShort video clips of the flagged events within that window. Clips can be played inline or expanded to full screen for a closer look.
Additional Tips
  • Incidents are only shown for medium or high severity activity. If no incidents appear, no significant suspicious activity were detected during the session.
  • Use the AI-generated summary alongside the video evidence to get a full picture of what occurred before deciding on any next steps.