With a server task I deleted all the events of October , November and December from the Database.
Now my customer say that he wants the threat reports from those days.
I already restore the database do another instance to be able to query the database and grab the events.
Do you know how to query the database to grab this information ?
Event Category Threat Name Threat Type Threat Target User Name Threat Target Host Name Detecting Product IPv4 Address Detecting Product Name Detecting Product Version Dat Version Engine Version Last Communication