SQL Server sends alerts for threat detection via email, if there are no email addresses set then mitigation will be delayed.
Nobody will be prompty alerted in the case of a threat being detected
Provide at least one email address for threat alerts
The following example will fail the azure-mssql-threat-alert-email-set check.
The following example will pass the azure-mssql-threat-alert-email-set check.