Barracuda Forensics & Incident Response can remediate an incident by deleting emails involved in the incident from users' inboxes. The Continuous Remediation feature extends the period of remediation. When you activate Continuous Remediation, Barracuda Forensics & Incident Response will continue to delete any copies of the email that appear in inboxes for 72 hours after the initial remediation has completed.
Activating Continuous Remediation
To continuously remediate emails:
- Create a new Incident.
- On the User Options page:
- Select the option to delete emails from users' inboxes.
- Select the option to turn on Continuous Remediation for this incident.
- Complete the process of creating the incident, as described in Using the Barracuda Forensics & Incident Response Wizard.
Viewing Continuous Remediation Information
On the Incidents page, you can see whether Continuous Remediation is active and the date when it is set to expire.
The number of emails deleted through Continuous Remediation is displayed under the Actions Taken section.
In the Emails Involved section of the Incidents page, emails that were deleted as part of Continuous Remediation are marked with a special icon. Refer to Reviewing Incidents for a list of icons.