You can use the Endpoint Security (HX) Web UI or the API to view quarantined files. You cannot use the CLI to view them.
To view quarantined files using the Alerts page in the Web UI:
Select Alerts at the top of the Endpoint Security (HX) Web UI page.
Select a malware alert for which you want to see quarantined files. The alert details page opens.
Tip
You can filter results on the Alerts page to see only the alerts that have quarantined files.
Select the Quarantines tab. The quarantined files are listed.
To view quarantined files using the Hosts page in the Web UI:
Select Hosts at the top of the Endpoint Security (HX) Web UI page.
Verify that the Hosts with Alerts tab is selected.
In the grid, click the expand icon () next to the host for which you want alert detail information.
The host alert details page appears. Detailed information about the alerts is shown on the Alerts tab on this page. Information about quarantined files is shown on the Quarantines tab on this page.
Select the Quarantines tabQuarantines tab. The quarantined files are listed.
Note
The list of quarantined files does not show malware found in boot sectors. (ENDPT-9014/ENDPT-8088)
.png "Alerts_FilterQuar.png")
.png "ExpandIcon.png")
) next to the host for which you want alert detail information..png "Hosts_DetailQuar.png")