Kaspersky Anti Targeted Attack Platform

Viewing information about a quarantined object

To view information about an object quarantined on a computer with the Kaspersky Endpoint Agent program:

1. In the application web interface window, select the Storage section, Quarantine subsection.
2. This opens the object table. In the table, select the object whose information you want to view.

   This opens the object details window.

The window contains the following information:

• Recommendations group. The Task recommendation can be displayed, which is a link that opens the Tasks section; this is the task that has quarantined the object.
• Object—File name or path.
• Size—Size of the file.
• Time quarantined—Date and time when the object was quarantined.
• Company —Name of the organization to which the Central Node, PCN, or SCN server belongs.
• Host—Name of the host with the Kaspersky Endpoint Agent program on which the object is quarantined.
• File—State of the file (whether a copy was obtained on the Kaspersky Anti Targeted Attack Platform server). If a copy of the file has been obtained on the Kaspersky Anti Targeted Attack Platform server, you can click Find file in Storage to open the information about the file in Storage.
• State—State of the file (whether the file can be restored from Quarantine).

You can click Restore to restore the file from Quarantine.

You can click Get file to copy the file to the Kaspersky Anti Targeted Attack Platform server.

Clicking the link with the file name or file path opens a list in which you can select one of the following actions:

• Find events.
• Find alerts.
• Copy value to clipboard.