Upload Quarantined File

The Upload Quarantined File task is used to manage files quarantined on clients. You can upload quarantined file from quarantine to a specific location for advanced investigation.

To create the task, click Tasks > New > add_new_defaultClient Task or click the desired client device in Computers and select New Task.

Basic

In the Basic section, enter basic information about the task, such as a Name and Description (optional). Click Select tags to assign tags.
In the Task drop-down menu, select the task type you want to create and configure. If you have selected a specific task type before creating a new task, Task is pre-selected based on your previous choice. Task (see the list of all Tasks) defines the settings and the behavior for the task.

Settings

Quarantined object - Select a specific object from the quarantine.

Object password - Enter a password to encrypt the object for security reasons. Please note that password will be displayed in the corresponding report.

Upload Path - Enter a path to a location where you want to upload the object. Use the following syntax: smb://server/share

Upload Username/Password - In case the location requires authentication (network share, etc.), enter the credentials to access this path. If the user is in a domain, use the format DOMAIN\username.

Summary

Review the summary of configured settings and click Finish. The Client Task is now created and a pop-up window will open. We recommend that you click Create Trigger to specify when this Client Task should be executed and on what Targets. If you click Close, you can create a Trigger later: click the Client Task instance and select Run on from the drop-down menu.

client_task_finish

In Tasks you can see the progress indicator bar, status icon, and details for each created task.

note

Note

In the Trigger, make sure to select the target where the file is quarantined.

After the quarantined file is uploaded to the selected Upload Path location:

The file is stored in a password-protected .zip archive. The password is the .zip file name (hash of the quarantined file).

The quarantined file is without a file extension. To restore the file, add the original file extension to it.