Incident action misattribution in ICA

Products

• Information Centric Analytics
• Data Loss Prevention Core Package

Issue/Introduction

Changes made in a source system (e.g., Symantec DLP) to the status and severity of an incident that was previously ingested into and acted upon in ICA are attributed to the user who acted on the event in ICA.

Environment

Release : 6.5.2.x, 6.5.3.x

Component :

Resolution

This behavior was determined to be a defect and was fixed in ICA version 6.5.4.