Changes made in a source system (e.g., Symantec DLP) to the status and severity of an incident that was previously ingested into and acted upon in ICA are attributed to the user who acted on the event in ICA.
Release : 6.5.2.x, 6.5.3.x
Component :
This behavior was determined to be a defect and was fixed in ICA version 6.5.4.