How to make sure that SEPM log is saved for at least 12 months ?
Can anyone please assist me to configure the SEPM to retain the incident in the past 12 months for security compliance purpose ?
What I'd like to ensure is that all anti-virus mechanisms are current, actively running, and generating audit logs
Which is keeping the audit logs to provide the ability to monitor virus activity and anti-virus reactions. It is imperative that anti-virus software be configured to generate audit logs and that these logs be managed in accordance which specifies AV logs must be retained for 12 months with the latest 3 months immediately available.