You can download incident evidence files when you want to save the details of what was captured when an incident was generated.
Evidence is stored using Amazon Simple Cloud Storage. You must register your S3 bucket in ePO - SaaS Data Protection → DLP Settings before you begin.
Note
You need to have appropriate permissions assigned to you to download evidence. Set up these permissions in ePO - SaaS Configuration → Users & Roles → Add Role → Assigned Permissions → Data Protection → Incident Management. If you do not have permission to download the file, or there is no evidence file to download, the download icon is not displayed.
In ePO - SaaS Protection Workspace, click on the incidents in Data Protection Overview to open the incident management workspace.
In the Incidents pane, select the checkbox of the incident that you want to download evidence for.
Expand Evidence in the Incident Details pane.
To download the evidence file, either:
Click the download icon next to the evidence file name.
Click the evidence file name and then click the download icon in the Evidence Details pane.
This downloads an evidence file containing details of what was captured when the incident was generated.