The investigator reads the files and closes the case.
The case is open. The investigator looks at the actual files in Content explorer, writes down the findings, sends Ronny a notice and resolves the case. We also look at when to escalate to eDiscovery, and what Ronny sees of it all.
Step through More in Insider Risk Management