When forensics data collection is enabled on the Web > Settings > Reporting > Dashboard page in the Forcepoint Security Manager, the administrator provides a location (local directory or UNC path) for storing the file, and credentials for an account with read, write, and delete permissions to the specified directory.