MS Security Endpoint Activity Reporting

[Dan Mahler]

PCI requires the capability to report 90 days virus/malware activity reporting.

 

By default SCCM/MS Security Endpoint appear to provide no more than 30 days when viewed in console. If I view a report and specify a 90 day window, still only 30 days incidents are reported.

 

Is anyone aware of methods to change logging to greater than 30 days?

 

Thank you in advance.

 

Dan Mahler

Grand Rapids, Michigan

 

[Dan Mahler]

I figured this out on my own.

 

I needed to alter "Site Mainteance" to delete aged data as required.

 

See attached.