Viewing information about an object placed in Storage by a task
To view information about an object placed in Storage by a task:
- In the program web interface window, select the Storage section, Files subsection.
- This opens the object table. In the table, select the object with the icon for which you want to view information.
This opens the object details window.
The window contains the following information:
- Recommendations group. The following recommendations can be displayed:
- The Task link opens the Tasks section; this is the task that has placed the object in Storage.
- The Alert link opens the Alerts section; this is the alert containing the object that was placed in Storage.
- The Quarantined object link opens the Storage section, Quarantine subsection; this is the metadata of the quarantined object.
- Object—File name or path.
- Size—Size of the file.
- MD5—MD5 hash of a file.
- SHA256—SHA256 hash of a file.
- Time stored—Time when the object was placed in Storage.
- Company —Name of the organization to which the Central Node, PCN, or SCN server belongs.
- Server—Name of the Central Node, PCN, or SCN server. The host from which the object was received is connected to this server.
- Host—Name of the host from which the object was received.
- Scan results—Result of object scan by the program.
You can click Sandbox detect to open a window with detailed information about the results of file behavior analysis.
The Find on KL TIP button allows to find a file on the Kaspersky Threat Intelligence Portal.
Click Create a prevention rule to prevent the file from running.
You can click Download to download the file to your computer's hard drive.
Clicking the link with the file name or file path opens a list in which you can select one of the following actions:
Clicking the link with MD5 opens a list in which you can select one of the following actions:
Clicking the link with SHA256 opens a list in which you can select one of the following actions:
Page top