Delete file from device

When Kaspersky Industrial CyberSecurity for Linux Nodes is integrated with Detection and Response solutions, you can remove files from a protected device using the Delete file task.

You can create and run tasks to delete a file in Web Console only when integrated with Kaspersky Endpoint Detection and Response Optimum.

System Critical Objects (SCOs) cannot be deleted. SCOs include files that are necessary for the operation of the operating system and the Kaspersky Industrial CyberSecurity for Linux Nodes application.

You can create and run the Delete file from device task, as well as edit its settings in the Web Console: The Delete file from device task cannot be managed on the command line.

Deleting a file from a device task settings

Setting	Description
Specify the file to be deleted	In the drop-down list, you can select how to specify the path to the file to be deleted: By path and checksum By full path
Full path to file	Field for entering the full path to the file to be deleted. This field is displayed if in the Specify the file to be deleted drop-down list, you selected By full path.
Checksum type	In the drop-down list, you can select the type of the checksum of the file to be deleted: MD5. SHA256. This drop-down list is displayed if in the Specify the file to be deleted drop-down list, you selected By path to directory and checksum.
File checksum	Field for entering the checksum of the file to be deleted. This field is displayed if in the Specify the file to be deleted drop-down list, you selected By path and checksum.
Directory path	Field for entering the path to the directory of the file to be deleted. This field is displayed if in the Specify the file to be deleted drop-down list, you selected By path and checksum.
Include subdirectories	This check box enables or disables subdirectories.

If the file is blocked by another process, the task is displayed with the Completed status, but the file itself is deleted only after the device is restarted. After restarting the device, make sure that the file was deleted.

If you are trying to delete a running executable file, the Delete file from device task may finish with an Access denied error. In this case, you need to create and run the Terminate process task for the file, and then try again.

You can view the result of the Start process task in the task properties in the Web Console under Results.

Page top