Incident Details Page Settings

Each Management Console user can set which view opens in the Incident details and the time zone of threat information when accessed.

Changes are per user and not related to the EDR Policy or to a specific threat

Default View

To change the default view:

  1. In the Incident Details Page, click Settings
  2. Select the name of the tab to be the default Forensics view.
  3. Click Apply

Timezone

To change the Time Zone:

  1. In the Incident Details Page, click Settings
  2. You can change the Time Zone used for the Forensics report, select Local Browser or UTC
  3. Click Apply