Video Screencast Help

Mac time in AV log

Created: 10 Oct 2012 • Updated: 11 Oct 2012 | 1 comment
Victor Lee's picture
1 Agree
0 Disagree
+1 1 Vote
Login to vote
Status: In Review


Have a customer who have 60,000 Symantec Endpoint Protection Client.

They are requesting for MAC (Modify, Access, Cretated) field to be part of the recoreded field to be presented in all the relavant logs.

As this could assist them during initial investigation.


Victor Lee

Comments 1 CommentJump to latest comment

Elisha's picture

Thanks for your suggestion.  Can you give me a little bit more detail on what the use case is for this?  Is this for audit logs?

Login to vote