Restoring objects from the quarantine replaces all objects that the convicted processes created, changed, or deleted, and the files associated with those processes, on the system where they were before the Clean action occurred.
Select Menu → Client Tasks → Client Task Catalog.
From Client Task Types, select Endpoint Security Threat Prevention → Restore from Quarantine.
Click the name of an existing client task or click New Task.
Configure the settings and click Save.
Under Actions, click the Assign link, specify the computers to assign the task to, then click OK.
Click Schedule to schedule the task, then click Save.
See Trellix ePO - On-prem Help for schedule information and the Client Task Assignment Builder.
After restoring a Windows service, reboot the client system to complete the restore.