An Auto Remediation incident is a database record that is generated for each delivered email message that is later found to contain malware and moved out of your users' inboxes. One database record is generated for each email message, regardless of the number of recipients.
The Incidents page displays the critical, high, and medium severity incidents that were detected within the past 30 days. If a message includes more than one malicious attachment, the information for each attachment appears in a separate row in the Incidents table. You can sort the data in the table by clicking any of the headers, and you can copy the viewable data to the clipboard if desired. To open individual incidents to retrieve more detailed information, hover over an individual table row to highlight it, and then click the row to display the Details table.
Email Security.cloud
To view Auto Remediation Incidents :