When working in the program web interface, users with the Senior security officer role can manage files and programs on hosts by creating and deleting tasks: Kill process, Get forensics, Start YARA scan, Run program, Get file, Delete file, Restore file from quarantine, Service management.
Kill process, Start YARA scan, Service management, Run program, Delete file, Restore file from quarantine, Delete file tasks can have one of the following types:
The Get file task is run only on the specified host, regardless of the program management mode.
The maximum task execution time is 24 hours. If the task did not complete in this time, execution is paused.
Users with the Senior security officer role can work with all tasks for the organizations whose data they can access.
Users with the Security officer role do not have access to tasks.
Users with the Security auditor role can view the task table and information about the selected task.