Get file

You can get files from user computers. For example, you can configure getting an event log file created by a third-party application. To get the file, you must create a dedicated task. As a result of the execution of the task, the file is saved in Quarantine. You can download this file from Quarantine to your computer using Web Console. On the user's computer, the file remains in its original folder.

The file size must not exceed 100 MB.

You can configure the task for EDR Optimum in Web Console and Cloud Console. Task settings for EDR Expert are available only in Cloud Console.

To create a Get file task:

  1. In the main window of the Web Console, select Devices → Tasks.

    The list of tasks opens.

  2. Click the Add button.

    The Task Wizard starts.

  3. Configure the task settings:
    1. In the Application drop-down list, select Kaspersky Endpoint Security for Windows (11.8.0).
    2. In the Task type drop-down list, select Get file.
    3. In the Task name field, enter a brief description.
    4. In the Select devices to which the task will be assigned block, select the task scope.
  4. Select devices according to the selected task scope option. Click the Next button.
  5. Enter the account credentials of the user whose rights you want to use to run the task. Click the Next button.

    By default, Kaspersky Endpoint Security starts the task as the system user account (SYSTEM).

  6. Finish the wizard by clicking the Finish button.

    A new task will be displayed in the list of tasks.

  7. Click the new task.

    The task properties window opens.

  8. Select the Application settings tab.
  9. In the list of files, click Add.

    The file adding wizard starts.

  10. To add the file, you must enter the full path to the file, or both file hash and the path.

    If the file is located on a network drive, enter the file path starting with \\, and not the drive letter. For example, \\server\shared_folder\file.exe. If the file path contains a network drive letter, you can get a File not found error.

  11. Click the Save button.
  12. Select the check box next to the task.
  13. Click the Run button.

As a result, Kaspersky Endpoint Security creates a copy of the file and moves that copy to Quarantine. You can download the file from Quarantine in Web Console.

Page top