When performing a task for placing a file in quarantine, the archive containing this file is temporarily saved in one of the following folders:
When performing a program run task on a host, Kaspersky Endpoint Agent locally stores the contents of standard output streams and errors of the running process in plain unencrypted form until the task completion report is sent to the Central Node component. Files are stored in one of the following folders:
By default, only users with System and Administrator permissions have read-access to files when Self-Defense is enabled. When Self-Defense is disabled, users with System and Administrator permissions can also delete the files, modify their contents, and modify the access rights to them. Kaspersky Endpoint Agent component does not manage access permissions to this folder and any files in it. It is the system administrator who determines access permissions.