Viewing information about a quarantined object

To view information about an object quarantined on a computer with the Endpoint Agent component:

1. In the application web interface window, select the Storage section, Quarantine subsection.

   This opens the object table.

2. In the table, select the object whose information you want to view.

   This opens the object details window.

The window contains the following information:

• Recommendations group. The Task recommendation can be displayed, which is a link that opens the Tasks section; this is the task that has quarantined the object.
• Type is the type of the quarantined object.

  The following types of objects are available:

  •  — file.
  •  — process memory dump.
• Object is the file name or path.
• State is the state of the file (whether the file can be restored from quarantine).
• Source is the name of the computer with the Endpoint Agent component on which the object is quarantined.
• Record time is the date and time when the object was quarantined.
• Actions is the state of the file (whether the file can be restored from quarantine).

  The following actions are available:

  •  — delete the file from quarantine.
  •  — obtain a copy of the file on the Kaspersky Anti Targeted Attack Platform server.

Clicking the link with the file name or file path opens a list in which you can select one of the following actions:

• Find events.
• Find alerts.
• Copy value to clipboard.