Disk space predictive alerting thresholds
Overview
Percent free lies on huge volumes—pair GB free and growth rate for prediction.
Example
Alert when <30 GB AND projected full in <14 days based on 30-day trend.
Exceptions
Known seasonal ETL spikes—annotate in monitoring tool.
Automation
Self-healing: clear temp logs only with allowlisted paths.
Reporting
Disk cleanup tickets trend—might indicate undersized standards.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...