Which Cisco AMP feature allows an engineer to look back to trace past activities, such as file and process activity on an endpoint?
Retrospective security
Endpoint isolation
Advanced investigation
Advanced search
Submit