The Endpoint Incident detail only shows the match in the file. How can I get the original file?
RELEVANT VERSIONS: ALL
Endpoint file retention is accomplished by creating an automated response rule as follows:
NOTE: Enabling retention of the original files on the Endpoint will increase the network bandwidth consumption. This is the main reason this feature is turned off by default.