Focus

SaaS Security Administrator's Guide

Manually Remediate Incidents

Table of Contents

Manually Remediate Incidents

Learn how to manually remediate incidents on Data Security.

By now you’ve chosen the remediation approach that works best for your organization. For a manual approach, use the following workflow to remediate the identified incidents:

Assess the new incidents, and use the WildFire Report if necessary.
Close incidents that aren’t a threat to your organization.
Assign the incidents to other administrators on your team, if necessary.
Quarantine assets that are threats.
Modify the incident status for the remaining incidents that are threats.

Refer to the following topics for help with this manual remediation workflow:

Assess New Incidents on Data Security
Use the WildFire Report to Track Down Threats
Close Incidents
Assign Incidents to Another Administrator
Manually Quarantine Assets
Modify Incident Status

View Remediation Activity Logs

Modify Incident Status