Viewing information about an object with a list of files, processes

To view information about an object placed in Storage by a Get forensics task:

1. In the program web interface window, select the Storage section, Files subsection.
2. This opens the object table. In the table, select the object with the icon for which you want to view information.

   This opens the object details window.

The window contains the following information:

• Object—File name or path.
• Size—Size of the file.
• MD5—MD5 hash of a file.
• SHA256—SHA256 hash of a file.
• Record time—Time when the object was placed in Storage.
• Host—Name of the host from which the object was received.

You can click Download to download the file to your computer's hard drive.

Clicking the link with the file name or file path opens a list in which you can select one of the following actions:

• Find events.
• Find alerts.
• Copy value to clipboard.

Clicking the link with MD5 opens a list in which you can select one of the following actions:

• Find on KL TIP.

  Kaspersky information system Contains and displays reputation information for files and URL addresses.

• Find events.
• Find alerts.
• Create a prevention rule.
• Copy value to clipboard.

Clicking the link with SHA256 opens a list in which you can select one of the following actions:

• Find on KL TIP.
• Find on virustotal.com.
• Find events.
• Find alerts.
• Create a prevention rule.
• Copy value to clipboard.

See also Viewing the table of objects that were placed in Storage Viewing information about an object manually placed in Storage Viewing information about an object placed in Storage by a task Downloading objects from Storage Uploading objects to Storage Sending objects in Storage for scanning Deleting objects from Storage Filtering objects in Storage by object type Filtering objects in Storage by object description Filtering objects in Storage based on scan results Filtering objects in Storage based on the name of Central Node, PCN, or SCN server Filtering objects in Storage by object source Filtering objects based on the time they were placed in Storage Clearing a Storage objects filter Viewing the table of objects quarantined on computers with Kaspersky Endpoint Agent Viewing information about a quarantined object Restoring an object from Quarantine Obtaining a copy of a quarantined object on a Kaspersky Anti Targeted Attack Platform server Removing information about the quarantined object from the table Filtering information about quarantined objects by object type Filtering information about quarantined objects by object description Filtering information about quarantined objects by host name Filtering information about quarantined objects by time Resetting the filter for information about quarantined objects

Page top