With live connect, its nice that events are highlighted in an investigation if they are deemed suspicious, however; I would like the ability to search/report on these if they are tagged through context hub. Does RSA tag / identify these events at some point where we can search JUST of context hub tagged events?
