Creating an NTFS metafile retrieval task

You can get NTFS metafiles from selected Kaspersky Endpoint Agent for Windows hosts. To do so, you must create an NTFS metafile retrieval task.

To create an NTFS metafile retrieval task:

  1. Select the Tasks section in the program web interface window.

    This opens the task table.

  2. Click Add and select Get NTFS metafiles.

    This opens the task creation window.

  3. Configure the following settings:
    1. Metafiles is the list of metafiles that you can get using the task. Select the relevant metafile by selecting the corresponding check box.

      You can select multiple metafiles.

    2. Volume is the name of the disk from which you want to get metafiles.

      By default, the system disk is specified. You can enter the path to a different disk in the <drive letter>:format.

    3. Description is the task description. This field is optional.
    4. Hostis the name or IP address of the host to which you want to assign the task.

      You can specify only one host.

      The NTFS metafile retrieval task can only be assigned to hosts with the Kaspersky Endpoint Agent for Windows program version 3.13 or later.

  4. Click Add.

The NTFS metafile creation task is created. The task runs automatically after it is created.

When the task finishes, the program places a ZIP archive containing the selected metafiles in Storage. You can download the archive to your local computer.

If the task results in an error, the archive file contains the description of the error.

If you are using the distributed solution and multitenancy mode, the archive is placed in Storage of the Central Node server to which the host specified in the Host field is connected.

Downloading selected metafiles can cause the filling of Storage and object rotating. If metafile size exceeds the size of the Storage, it is not loaded

Users with the Security auditor role cannot create this task. Users with the Security officer role do not have access to tasks.

See also

Managing tasks

Viewing the task table

Viewing information about a task

Creating a process termination task

Creating a data collection task

Creating a task to scan hosts using YARA rules

Creating a service management task

Creating a registry key retrieval task

Creating a process memory dump retrieval task

Creating a program execution task

Creating a get file task

Creating a file deletion task

Creating a file quarantine task

Creating a quarantined file recovery task

Creating a copy of a task

Deleting tasks

Filtering tasks by creation time

Filtering tasks by type

Filtering tasks by name

Filtering tasks by file name and path

Filtering tasks by description

Filtering tasks by server name

Filtering tasks based on the name of the user that created the task

Filtering tasks by processing status

Clearing a task filter

Page top