Identify threats using Symantec EDR

Products

• Endpoint Detection and Response

Issue/Introduction

 

Resolution

Identify which incidents are of the highest severity and, therefore, should be given immediate attention. You can do this by applying filters on the Tasks page in the EDR cloud console or on the Incident Manager page of the EDR appliance console.

Example search queries:

• Severity: High AND Severity: Medium
• Status: Open

See the following topics for instructions:

• Viewing your Tasks in the EDR cloud console
• Task quick filters
• Viewing incidents in the EDR appliance Incident Manager

Here's a short video about  Symantec Endpoint Detection and Response (EDR) Tasks

This topic is part of the Finding and remediating security threats workflow