Closing multiple incidents in the ATP/SEDR interface
Last Updated July 12, 2019
There is a need to close multiple Incidents on the Advanced Threat Protection or Symantec Endpoint Detection and Response appliance with minimum manual effort.
When viewing the Incidents, the Organism icon to the left of each Incident will turn into a + sign. Once an Incident is selected, you can select up to 500 more. After all desired Incidents are selected, click Close Incidents on the bottom right.
Now select the Resolution and provide any comments to be added when the Incidents are closed.
Subscribing will provide email updates when this Article is updated. Login is required to Subscribe