1 Reply Latest reply on Jan 7, 2016 9:32 AM by catdaddy

    Need McAfee ePO Report that returns only threats that have NOT been handled.

    ccline

      The current report in McAfee does in fact return invalid results. The query returns all handled threats = 0. However, There are cases were there are two entries. One showing it found a threat and not handled, and the same threat showing now handled but the report will return the same unhanded threat that was already handled. Another words, there are two entries in the EventsMT table for the same host/threat, one showing not handled and another showing handled. The Critical report isn't checking to see if a threat was in fact handled.