Mac time in AV log

Created: 10 Oct 2012 | Updated: 11 Oct 2012 | 1 comment

Victor Lee Symantec Employee Accredited

0 Agree

0 Disagree

Status: In Review

HI,

Have a customer who have 60,000 Symantec Endpoint Protection Client.

They are requesting for MAC (Modify, Access, Cretated) field to be part of the recoreded field to be presented in all the relavant logs.

As this could assist them during initial investigation.

Thanks

Victor Lee

Idea Filed Under:

Comments 1 Comment • Jump to latest comment

Elisha Symantec Employee Accredited Certified

Thanks for your suggestion. Can you give me a little bit more detail on what the use case is for this? Is this for audit logs?