McAfee Data Loss Prevention 9.2.2 Product Guide

Using the Incidents dashboardGetting incident details 7Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Select an incident and click Details.3 Select from the tabs and links on the page.Clicking an attachment (Info | Content) will launch the file if the corresponding software is installed.Get case statusFind the case status of incidents by clicking Details. The Incident Details page displays the case status forincidents.If you cannot see incident details, you will need View Incident Object permission. See your administrator.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Select an incident and click Details.3 Click Cases.View related incidentsWhen an incident is viewed on the Incident Details page, Related Incidents might also be displayed.Before you beginRelated incidents are based on values in six fields: Signature, File name, Source IP,Destination IP, Sender, and User ID.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Incidents.• On your McAfee DLP appliance, select Incidents.2 Select an incident and click Details.3 View the statistics in the Related Incidents tab in the right pane.Find the concept that matchedFind the concept that triggered the incident by clicking Details to launch the Incident Details page. Thepage displays the concept used as well as the match strings defined in the concept.If you cannot see incident details, you need View Incident Object permission. See your administrator.McAfee Data Loss Prevention 9.2.2 Product Guide 179