Incident Report exports from SEDR Appliance do not include all event types
book
Article ID: 267204
calendar_today
Updated On:
Products
Endpoint Detection and ResponseEndpoint Detection and Response Cloud
Issue/Introduction
When you generate an incident report for an AAT incident under Reports -> Incident Details Report -> Run -> Fill out details for your incident, the report does not include event type_id 8018.
Resolution
Event type_id 8018 are not included in Incident Report exports.