Locking and unlocking incidents

During discovery, a file may be scanned several times as a part of consecutive scans. Each scan may detect different policy breaches, if either the file or the policy has changed. If this happens, the incident for that file is overwritten with the most recent information.

If you want to keep the current stored information for a particular incident, you can choose to lock it. Information logged from subsequent scans on this file is then discarded.

To lock a discovery incident:

Select the incident.
From the toolbar, select Workflow > Lock.

To unlock an incident, allowing its information to be overwritten by future scans:

Select the incident.
From the toolbar, select Workflow > Unlock.