Data Loss Prevention

hi,

We ran DAR scans and I'm going through trying to scrub out false positives, duplicates and other junk data such as temp files, etc.

I wanted to know what is the best way to remove duplicate files. For example I go in and summarize by location of file.. then I click the event which has 25 total events listed for this specific file location and then go through remove 24 of the events because its duplicate and move on to the next. this is tedious and time consuming and probably not the best way to do it. Do you guys have suggestions on how to find duplicates better?

We have the same issue.  Our current process is to export the file incidents and then track file locations (plus ownership, remediation status, etc.) in an MS Access database.  We then periodically purge scan data from the Symantec database.

We found a solution thanks to our consultant.

1. You can filter out duplicate events very easily by using the following filter.
2. The Seen Before > YES   will only show you the duplicate events which may exist.  At this point, select them all and delete or whatever it is you want to do with it.