AnsweredAssumed Answered

Netwitness Endpoint "Block & Quarantine File" option

Question asked by Toma Nikolov on Aug 22, 2018
Latest reply on Sep 26, 2018 by Toma Nikolov

I am having this issue with the Quarantine option in NW Endpoint. 

Can somebody explain me what is the logic behind the Block and Quarantine option for a specific file?
Is the file deleted on the Endpoint machine, and if so, how this is done. 
We have quarantined a file, but we are still seeing it being executed on the endpoint machine. 

 

Thank you in advance!

Kind regards, 

Outcomes