Filtering the list of quarantined items

You can filter the list of quarantined items by using one or several criteria: date of detection by the application, assigned status, access level, traffic type, scan type, storage location, service, and/or other details specified in the search field. Filtering conditions are combined using the AND logical operator. Quarantined items that do not meet the filtering criteria are not displayed in the list.

To filter the list of quarantined items:

1. Open the Kaspersky Security for Microsoft Office 365 Management Console.
2. In the left part of the page, select the Quarantine section.
3. Specify one or several filtering criteria.
   • To filter the quarantined items by message or file detection date:
     • Click the heading of the Detection date column.
     • Specify the list order by clicking the Ascending or Descending buttons. The current order is displayed by up or down arrow next to the heading of the column.
     • Click the Specify the time range button and specify the necessary range of dates.
     • Click the Apply button.
   • To filter the quarantined items by status, access level, traffic type, scan type, storage, or service, click the heading of the corresponding column and leave only the check boxes next to the statuses that you want to include in the filter.
   • To change the list order of the quarantined items according to their cardinality (ascending or descending), click the heading of the Cardinality column. The current order is displayed by up or down arrow next to the heading of the column.
   • To filter the quarantined items by Data Discovery categories:
     • Click the heading of the Categories column.

       The Data Discovery categories pane will open on the right side of the window.

     • Select the check boxes next to the confidential data detections you want to display.
     • Click the Apply button.
   • If you want to filter the quarantined items by other details, enter a keyword in the search field and click the Search button in the upper-right corner of the Management Console.

To remove the filter:

• To remove the filter by date, click the Detection date column, click the Specify the time range button, and then click Reset.
• To remove the filter by status, access level, cardinality, traffic type, scan type, storage, or service, click the heading of the corresponding column, and select check boxes next to all the available values.
• To remove the filter by other details, clear the text from the search field and click the Search button.
• To remove all the selected filters, click the Reset filters button.

If you refresh the Quarantine data in the list by reloading the corresponding web page in your browser, the selected filters will remain applied.