Obtaining a copy of a quarantined object on a Kaspersky Anti Targeted Attack Platform server

The object that you want to download a copy of must not exceed 100 MB. If the object exceeds 100 MB, the task finishes with an error.

To copy an object quarantined on a computer with the Kaspersky Endpoint Agent component to a Kaspersky Anti Targeted Attack Platform server:

1. In the application web interface window, select the Storage section, Quarantine subsection.

   This opens the object table.

2. In the table, select the object that you want to restore from quarantine on the computer with the Endpoint Agent component.

   This opens the object details window.

3. Click Get file in the lower part of the window.

This creates a task for getting a copy of an object that was quarantined on a computer with the Endpoint Agent component. If the task completes successfully, the copy of the object is uploaded to the Kaspersky Anti Targeted Attack Platform server. The object is displayed in the Storage section, Files subsection of the application web interface in the table of objects placed in Storage.

Information about the created task is displayed in the Tasks section of the web interface.

You can also copy an object from quarantine on a computer with the Endpoint Agent component to the Kaspersky Anti Targeted Attack Platform server by clicking in the right part of the object information row in the table of objects quarantined on computers with the Endpoint Agent component.

Users with the Security auditor role cannot get copies of objects from quarantine.

See also Viewing the table of objects that were placed in Storage Viewing information about an object manually placed in Storage using the web interface Viewing information about an object placed in Storage by a get file task Viewing information about an object placed in Storage by a get data task Downloading objects from Storage Uploading objects to Storage Sending objects in Storage for scanning Deleting objects from Storage Filtering objects in Storage by object type Filtering objects in Storage by object description Filtering objects in Storage based on scan results Filtering objects in Storage based on the name of Central Node, PCN, or SCN server Filtering objects in Storage by object source Filtering objects based on the time they were placed in Storage Clearing a Storage objects filter Viewing the table of objects quarantined on computers with the Kaspersky Endpoint Agent component Viewing information about a quarantined object Restoring an object from quarantine Removing information about the quarantined object from the table Filtering information about quarantined objects by object type Filtering information about quarantined objects by object description Filtering information about quarantined objects by host name Filtering information about quarantined objects by time Resetting the filter for information about quarantined objects

Page top