You can get NTFS metafiles from selected Kaspersky Endpoint Agent for Windows hosts. To do so, you must create an NTFS metafile retrieval task.
To create an NTFS metafile retrieval task:
This opens the task table.
This opens the task creation window.
You can select multiple metafiles.
By default, the system disk is specified. You can enter the path to a different disk in the <drive letter>:
format.
You can specify only one host.
The NTFS metafile retrieval task can only be assigned to hosts with the Kaspersky Endpoint Agent for Windows program version 3.13 or later.
The NTFS metafile creation task is created. The task runs automatically after it is created.
When the task finishes, the program places a ZIP archive containing the selected metafiles in Storage. You can download the archive to your local computer.
If the task results in an error, the archive file contains the description of the error.
If you are using the distributed solution and multitenancy mode, the archive is placed in Storage of the Central Node server to which the host specified in the Host field is connected.
Downloading selected metafiles can cause the filling of Storage and object rotating. If metafile size exceeds the size of the Storage, it is not loaded
Users with the Security auditor role cannot create this task. Users with the Security officer role do not have access to tasks.