You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-endpoint/restore-quarantined-files-microsoft-defender-antivirus.md
+15-14Lines changed: 15 additions & 14 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -45,30 +45,31 @@ Depending on how Microsoft Defender Antivirus is configured, it quarantines susp
45
45
46
46
### Using the MpCmdRun command line
47
47
48
-
> [!TIP]
49
-
> You can also restore a file from quarantine by using Command Prompt. See [Restore file from quarantine](respond-file-alerts.md#restore-file-from-quarantine).
48
+
1. Open Command Prompt as an administrator.
50
49
50
+
2. Type the following command, and then press **Enter**:
51
51
52
-
### Using the Download or collect file in Microsoft Defender for Endpoint Plan 2
[Download or collect file](/defender-endpoint/respond-file-alerts) response action
56
+
### Download or collect the file
57
+
58
+
Selecting **Download file** from the response actions allows you to download a local, password-protected .zip archive containing your file. A flyout appears where you can record a reason for downloading the file, and set a password. By default, you should be able to download files that are in quarantine.
59
+
60
+
The **Download file** button can have the following states:
61
+
62
+
-**Active** - You are able to collect the file.
63
+
-**Disabled** - If the button is grayed out or disabled during an active collection attempt, you might not have appropriate RBAC permissions to collect files.
64
+
65
+
For more details, see [Download or collect file](/respond-file-alerts#download-or-collect-file).
55
66
56
67
## See also
57
68
58
69
-[Configure remediation for scans](configure-remediation-microsoft-defender-antivirus.md)
0 commit comments