cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
700
Views
10
Helpful
1
Replies

CSCvi73414 - Unable to delete User Indication of Compromise if user info is inconsistent between mysql and sybase

Leon Jaimes
Level 1
Level 1

I was able to resolve this by running the following commands:

 

pmtool disablebyid SFDataCorrelator
repair_table.pl -farms user_identities
DBCheck.pl
pmtool enablebyid SFDataCorrelator

And then going into Analysis>Users>Indications of Compromise and marking the malware event as resolved.

1 Reply 1

The above commands/solution worked for me as well.