Kaspersky Anti Targeted Attack (KATA) Platform

Restoring an object from quarantine

8 November 2023

ID 247436

To restore the object from quarantine on a computer the Endpoint Agent component:

  1. In the application web interface window, select the Storage section, Quarantine subsection.

    This opens the object table.

  2. In the table, select the object that you want to restore from quarantine on the computer with the Endpoint Agent component.

    This opens the object details window.

  3. Click Restore in the lower part of the window.

    This opens the Tasks section and the Restore file from quarantine task.

  4. In the Description field, enter the task description.
  5. Click Add.

The file is restored from quarantine.

You can also run the task to restore the file from quarantine by clicking Apt_icon_quarantine_restore in the right part of the row with object information of the table of objects quarantined on computers with the Endpoint Agent component.

In distributed solution and multitenancy mode, a file that is quarantined on an SCN server cannot be restored on the PCN server. You can restore the file on the SCN server on which the quarantine file task was created.

Users with the Security auditor role cannot restore objects from quarantine.

See also

Viewing the table of objects that were placed in Storage

Viewing information about an object manually placed in Storage using the web interface

Viewing information about an object placed in Storage by a get file task

Viewing information about an object placed in Storage by a get data task

Downloading objects from Storage

Uploading objects to Storage

Sending objects in Storage for scanning

Deleting objects from Storage

Filtering objects in Storage by object type

Filtering objects in Storage by object description

Filtering objects in Storage based on scan results

Filtering objects in Storage based on the name of Central Node, PCN, or SCN server

Filtering objects in Storage by object source

Filtering objects based on the time they were placed in Storage

Clearing a Storage objects filter

Viewing the table of objects quarantined on computers with the Kaspersky Endpoint Agent component

Viewing information about a quarantined object

Obtaining a copy of a quarantined object on a Kaspersky Anti Targeted Attack Platform server

Removing information about the quarantined object from the table

Filtering information about quarantined objects by object type

Filtering information about quarantined objects by object description

Filtering information about quarantined objects by host name

Filtering information about quarantined objects by time

Resetting the filter for information about quarantined objects

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.