• Support
  • Forums
  • Blogs

How to view Forensic data that has been run

mtopper78mtopper78

New Life Form

I’m sure this is simple and I am just missing some basic
setup, but, …….I created an action on an alarm to collect established
connections
on an asset through the Select Action, Forensics and Responses,
selected the asset, hit run. How/when will it be able to review?

 

Followed https://www.alienvault.com/documentation/usm-anywhere/alienapps-guide/forensics-response/event-alarm-action-alienapp-forensics-resp.htm
, but it doesn’t mention how to view the data on the asset. ?????

 

Share post:

Comments

  • You have to view it through the events view. I had the same issue, you would think it would tell you how to view or where to look for the results.  Documentation definitely needs some work.
Sign In or Register to comment.