Skip to content

Commit 4cbdd21

Browse files
committed
Update restore-quarantined-files-microsoft-defender-antivirus.md
1 parent 0420582 commit 4cbdd21

File tree

1 file changed

+15
-14
lines changed

1 file changed

+15
-14
lines changed

defender-endpoint/restore-quarantined-files-microsoft-defender-antivirus.md

Lines changed: 15 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -45,30 +45,31 @@ Depending on how Microsoft Defender Antivirus is configured, it quarantines susp
4545

4646
### Using the MpCmdRun command line
4747

48-
> [!TIP]
49-
> You can also restore a file from quarantine by using Command Prompt. See [Restore file from quarantine](respond-file-alerts.md#restore-file-from-quarantine).
48+
1. Open Command Prompt as an administrator.
5049

50+
2. Type the following command, and then press **Enter**:
5151

52-
### Using the Download or collect file in Microsoft Defender for Endpoint Plan 2
52+
```dos
53+
"%ProgramFiles%\Windows Defender\MpCmdRun.exe" -Restore -Name <filename>
54+
```
5355

54-
[Download or collect file](/defender-endpoint/respond-file-alerts) response action
56+
### Download or collect the file
57+
58+
Selecting **Download file** from the response actions allows you to download a local, password-protected .zip archive containing your file. A flyout appears where you can record a reason for downloading the file, and set a password. By default, you should be able to download files that are in quarantine.
59+
60+
The **Download file** button can have the following states:
61+
62+
- **Active** - You are able to collect the file.
63+
- **Disabled** - If the button is grayed out or disabled during an active collection attempt, you might not have appropriate RBAC permissions to collect files.
64+
65+
For more details, see [Download or collect file](/respond-file-alerts#download-or-collect-file).
5566

5667
## See also
5768

5869
- [Configure remediation for scans](configure-remediation-microsoft-defender-antivirus.md)
5970
- [Review scan results](review-scan-results-microsoft-defender-antivirus.md)
60-
6171
- [Address false positives/negatives in Microsoft Defender for Endpoint](/defender-endpoint/defender-endpoint-false-positives-negatives)
6272

63-
> [!TIP]
64-
> If you're looking for Antivirus related information for other platforms, see:
65-
> - [Set preferences for Microsoft Defender for Endpoint on macOS](mac-preferences.md)
66-
> - [Microsoft Defender for Endpoint on Mac](microsoft-defender-endpoint-mac.md)
67-
> - [macOS Antivirus policy settings for Microsoft Defender Antivirus for Intune](/mem/intune/protect/antivirus-microsoft-defender-settings-macos)
68-
> - [Set preferences for Microsoft Defender for Endpoint on Linux](linux-preferences.md)
69-
> - [Microsoft Defender for Endpoint on Linux](microsoft-defender-endpoint-linux.md)
70-
> - [Configure Defender for Endpoint on Android features](android-configure.md)
71-
> - [Configure Microsoft Defender for Endpoint on iOS features](ios-configure-features.md)
7273

7374
[!INCLUDE [Microsoft Defender for Endpoint Tech Community](../includes/defender-mde-techcommunity.md)]
7475

0 commit comments

Comments
 (0)