Hi all,
New to using ERA, im currently looking to create a dynamic group called 'Infected Computers', where any customer computer that detects a threat is moved to. Once in the Infected Computers group, i'd like to set a rule of some sort that automatically runs a scan on the infected device which cleans it, then a rule which runs another scan, and if the computer is then clean, removes it from the Infected Computers group. Can anyone help me with how I can set this up if its possible?
Many thanks,
Rob