McAfee Data Loss Prevention 9.2.2 Product Guide

8Working with casesModify casesYou can export a single case, or include several cases in the same archive.• Select a single case and click Export.• Select one or more cases, then select Export Selected Cases from the Actions menu. In the Proceed toexport? pop‐up, click OK or Cancel.The archive containing the case(s) appears in the these file lists:• ePolicy Orchestrator — Menu | Data Loss Prevention | DLP Reporting | Exported Cases• Your McAfee DLP appliance — Case | Exported CasesModify casesAs you gather more information about a case, you can develop it gradually by adding incidents,defining different aspects of it, and recording updates until you are able to resolve it.Tasks• Change ownership of a case on page 194Change ownership of a case to give primary responsibility for resolution to a specific usergroup.• Change status of a case on page 195Change the status of a case to indicate its stage of resolution.• Change the priority of a case on page 195Change the priority of a case as it moves through stages of resolution.• Change the resolution stage of a case on page 195Change the resolution state of a case if its condition has changed.• Add notes to a case on page 195Add notes to a case to add comments that might help to resolve it.Change ownership of a caseChange ownership of a case to give primary responsibility for resolution to a specific user group.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Case Management.• On your McAfee DLP appliance, select Case | Case Management.2 Click Details for a case.3 From the Owner menu, select a user group.Select the Notify Owner checkbox to send email notification of case updates.4 Click Apply.194 McAfee Data Loss Prevention 9.2.2 Product Guide