Viewing information about a quarantined object

To view information about an object quarantined on a computer with the Endpoint Agent component:

1. In the application web interface window, select the Storage section, Quarantine subsection.

   This opens the object table.

2. In the table, select the object whose information you want to view.

   This opens the object details window.

The window contains the following information:

• Recommendations group. The Task recommendation can be displayed, which is a link that opens the Tasks section; this is the task that has quarantined the object.
• Type is the type of the quarantined object.

  The following types of objects are available:

  •  — file.
  •  — process memory dump.
• Object is the file name or path.
• State is the state of the file (whether the file can be restored from quarantine).
• Source is the name of the computer with the Endpoint Agent component on which the object is quarantined.
• Record time is the date and time when the object was quarantined.
• Actions is the state of the file (whether the file can be restored from quarantine).

  The following actions are available:

  •  — delete the file from quarantine.
  •  — obtain a copy of the file on the Kaspersky Anti Targeted Attack Platform server.

Clicking the link with the file name or file path opens a list in which you can select one of the following actions:

• Find events.
• Find alerts.
• Copy value to clipboard.

See also Viewing the table of objects that were placed in Storage Viewing information about an object manually placed in Storage using the web interface Viewing information about an object placed in Storage by a get file task Viewing information about an object placed in Storage by a get data task Downloading objects from Storage Uploading objects to Storage Sending objects in Storage for scanning Deleting objects from Storage Filtering objects in Storage by object type Filtering objects in Storage by object description Filtering objects in Storage based on scan results Filtering objects in Storage based on the name of Central Node, PCN, or SCN server Filtering objects in Storage by object source Filtering objects based on the time they were placed in Storage Clearing a Storage objects filter Viewing the table of objects quarantined on computers with the Kaspersky Endpoint Agent component Restoring an object from quarantine Obtaining a copy of a quarantined object on a Kaspersky Anti Targeted Attack Platform server Removing information about the quarantined object from the table Filtering information about quarantined objects by object type Filtering information about quarantined objects by object description Filtering information about quarantined objects by host name Filtering information about quarantined objects by time Resetting the filter for information about quarantined objects

Page top