Moving a file to Quarantine

One of the possible response actions when a threat is detected is to quarantine the file.

Quarantine is a special local repository on a device with an EPP application that supports Kaspersky Endpoint Detection and Response Optimum functionality and is intended for storing files that are probably infected by viruses or cannot be disinfected when detected. Quarantined files are stored on the protected device in an encrypted form and therefore do not compromise its security.

You can quarantine a file manually or configure automatic quarantining of a file as a result of alert response actions.

For details on Quarantine, refer to the Kaspersky Endpoint Security for Windows Help and Kaspersky Endpoint Agent Help. You can also quarantine a file from the alert details window.

If Kaspersky Endpoint Security for Windows 11.10.0 or later is installed on the organization's computers, this response action is not available for System Critical Objects (SCOs). SCOs include files required for the operation of the operating system and Kaspersky Endpoint Security for Windows.

See also

Moving a file to Quarantine from alert details

Page top