Hi I have created an email notification for DLP Incident Managet -Device Control as follows...
Dear {PrimaryUserAccountID}
You have plug a Unauthorized Device ({IncidentType}) to {ComputerName} on {ViolationLocalTime} This action is {ActualAction} Please remove the Device.
From McAfee Admin
and i am receiving the responds as
Dear username You have plug a Unauthorized Device (Device plug) to PC Name on August 13, 2019 7:28:21 PM Sri Lanka Standard Time This action is Block Please remove the Device. From McAfee Admin
Is it possible to include this information as well. if can can please share the variable names..
Device Friendly Name : Device Description: Device Class Name: