Incidents and undo

Incidents

Astri groups what it sees into incidents: nuke, raid, honeypot, spam, self-defence and lockdown.

Each one posts a single alert in your alert channel that updates as it goes, and every action goes in the log channel.

Undo

Every action has an ID. /undo or the Undo button reverses it: a timeout is cleared, a ban is lifted, stripped roles are put back and a bot's permissions are restored. A kick can't be undone.

Closing an incident

Close an incident when you're done, or mark it a false positive so you can tune your settings.