---
title: Dig into an alerted incident
slug: dig-into-an-alerted-incident
icon: {"faIcon":"fa-solid fa-book-open"}
docTags: 2UDefGBTcT56A0gv1gWHO
createdAt: 2026-10-30T17:24:26.192Z
---
💡*Take a narrative surfaced by a Vantage alert or report and trace where and how it is being framed.*
When a Vantage alert or report surfaces a narrative, incident analysis pulls it apart in detail. Take the specific claim from the alert and ask Ask Ember to trace where it appears, how it is framed, and where else it has spread.
***
## When to use this
When an alert or report has flagged a narrative, and you want its details: the events it attaches to, the framing it uses, and the platforms beyond the one where it was first seen. Worked example: an alert about coordinated copy-paste messages across TikTok and Telegram claiming that postal ballots are being discarded.
***
## Before you start
**Asset.** Any account, channel, or outlet Vantage tracks.
**Known Asset.** An Asset with a documented behavioral track record warranting elevated scrutiny, a designation applied to an existing Asset record, expressed as an Evidence Score of Possible, Probable, or Confirmed.
**Reference Asset.** An Asset whose identity and operator the client already knows, either because they own it or because they treat it as a known reference point, held outside the classification pipeline so it can serve as a fixed measurement anchor in the Information Landscape.
**💡 ****Tip\:** *Check the narratives and messages section of the alert for the context of your future Ask Ember query.*
***
## The walkthrough
:::Heading{depth="3" indent="1"}
Take the claim from the alert
:::
Lift the specific claim the alert flagged and turn it into a neutral, specific question of about ten words.
**Example question: ***In what events is future election discussed as a pretext for color revolution?*
***
:::Heading{depth="3" indent="1"}
Widen the window
:::
Set a longer time range than a live event would need, for example, the past month, so you capture the full build-up around the claim rather than only its latest spike.
***
:::Heading{depth="3" indent="1"}
Read how and where it is framed
:::
The report shows the events the claim attaches to, the framing and manipulation tactics in play, and the assets carrying it, each traced to its source.
***
:::Heading{depth="3" indent="1"}
Exclude the alert's platform
:::
To see where else the narrative has travelled, exclude the platform named in the alert and run the question again. What remains is the narrative's reach beyond its point of origin.
***
:::Heading{depth="3" indent="1"}
Isolate deliberate manipulation
:::
Apply the Known Assets filter to confirm which part of the spread is driven by assets with a track record of amplifying FIMI, as against organic discussion.
***
:::Heading{depth="3" indent="1"}
Share feedback at any point
:::
Tell us whenever something is not working or does not look right, or share what would make Ask Ember better for you. At the bottom of every report, rate the result with a thumbs up or down, or use the Share Feedback button to send a note. You can also reach us through the Support button in the bottom-left corner of Vantage at any time.
***
**Have a question? Our team is ready to help via the** **.**
***
***ast Updated\:* ***30 October, 2026*
**
::Image[]{src="https://api.archbee.com/api/optimize/NtfAl2ISrDrYHh7fsOa4D/RYH47zGWSUIvDQ0KbOVCX_vantage-by-letsdata-logo-stacked-for-light-background.png" size="20" isUploading="false" width="1012" height="233" darkWidth="1012" darkHeight="233" position="center" showCaption="false"}