I finally migrated the application off of the V5000 appliance. One reason we did so was that we could receive forensic data on the risk incident alerts. However, I have not found any alerts to contain any forensic data.
Is there something that needs to be setup in order to have forensic data show up? It always says "None were captured with this incident".