I need a solution
Hello everybody!
Is it possible to find an incident in Symantec DLP(Endpoint/Network) according to it's content?
For example, I have worked with an incident last month and then closed it. Now I need to investigate this already closed incident again, but I couldn't find it, because I don't remember the date, incident's ID, Username, etc. The only thing that I know - part of text from this incident.
I was trying to apply all filters one by one, but I couldn't find any incident according to it's content.
Please, HELP me!
Thanks a lot in advance!