Hi,
1), As you have seen in my previous post I had attached forensic report. That report, we have obtained from agent machine. So is it possible to view that detailed report from my EPM server, Because it's not possible to view the forensic report, going to the each and every agent machines.
[Guy] forensics report can be accessed via a link available on the event' log
2) Can we have any option in EPM server to check whether agent machine online or offline ?
[Guy] overview page provides information about online machines. the machine will be removed after offline for a duration longer than 30 days.
3)How can we send auto email notification to user or admin that your system got infected and sandblast prevented them ?
[Guy] configuration is available via smartevent, by creating a new event, correlating logs to it. I agree configuration should be simpler and we are working on that, hopefully available early 2021.