Obtaining a copy of a quarantined object on a Kaspersky Anti Targeted Attack Platform server

The object that you want to download a copy of must not exceed 100 MB. If the object exceeds 100 MB, the task finishes with an error.

To copy an object quarantined on a computer with the Kaspersky Endpoint Agent program to a Kaspersky Anti Targeted Attack Platform server:

1. In the program web interface window, select the Storage section, Quarantine subsection.

   This opens the object table.

2. In the table, select the object that you want to restore from Quarantine on the computer with the Kaspersky Endpoint Agent program.

   This opens the object details window.

3. Click Get file in the lower part of the window.

This creates a task for getting a copy of an object that was quarantined on a Kaspersky Endpoint Agent computer. If the task completes successfully, the copy of the object is uploaded to the Kaspersky Anti Targeted Attack Platform server. The object is displayed in the Storage section, Files subsection of the program web interface in the table of objects placed in Storage.

Information about the created task is displayed in the Tasks section of the web interface.

You can also copy an object from Quarantine on a computer with the Kaspersky Endpoint Agent program to the Kaspersky Anti Targeted Attack Platform server by clicking in the right part of the object information row in the table of objects quarantined on computers with Endpoint Agent.

Users with the Security auditor role cannot get copies of objects from Quarantine.

See also Viewing the table of objects that were placed in Storage Viewing information about an object manually placed in Storage Viewing information about an object placed in Storage by a task Viewing information about an object with a list of files, processes Downloading objects from Storage Uploading objects to Storage Sending objects in Storage for scanning Deleting objects from Storage Filtering objects in Storage by object type Filtering objects in Storage by object description Filtering objects in Storage based on scan results Filtering objects in Storage based on the name of Central Node, PCN, or SCN server Filtering objects in Storage by object source Filtering objects based on the time they were placed in Storage Clearing a Storage objects filter Viewing the table of objects quarantined on computers with Kaspersky Endpoint Agent Viewing information about a quarantined object Restoring an object from Quarantine Removing information about the quarantined object from the table Filtering information about quarantined objects by object type Filtering information about quarantined objects by object description Filtering information about quarantined objects by host name Filtering information about quarantined objects by time Resetting the filter for information about quarantined objects

Page top