REMEDIATION RESPONSIVE TO A PATTERN OF ALERTS

In some examples, a system detects a first alert associated with activities of a first group of entities, the first alert generated by a first type of security agent. The system predicts an alert collection including one or more alerts expected to occur based on occurrence of the first alert, wherein a second alert of the alert collection is from a second type of security agent different from the first type of security agent. The system generates one or more remediation actions to apply in response to a pattern of alerts including the first alert and the one or more alerts of the alert collection. The system provides, in an electronic device to be protected against attacks, information of the one or more remediation actions to be applied by the electronic device responsive to occurrence of the pattern of alerts.