How Threat Prevention provides maximum protection when rescanning quarantined items

When rescanning items in the quarantine, Threat Prevention uses scan settings designed to provide maximum protection.

Tip

Best practice: Always rescan items in the quarantine before restoring them. For example, you might rescan an item after updating your protection. If the item is no longer a threat, you can restore the item to its original location and remove it from the quarantine.

Between when a threat was originally detected and the rescan performed, scanning conditions can change, which can affect the detection of quarantined items.

When rescanning quarantined items, Threat Prevention always:

Note

A quarantine rescan might still fail to detect a threat. For example, changes to a path or registry location can produce a false negative.