deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-29 05:37:22 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

added content

Browse Source
This commit is contained in:
Beth Levin 2020-10-22 15:25:13 -07:00
parent 7da193bab3
commit dd5a5ffaf2
1 changed files with 11 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
windows/security/threat-protection/microsoft-defender-atp/respond-file-alerts.md
View File

@ -142,20 +142,22 @@ By default, you will not be able to download files that are in quarantine.
### Download quarantined files ### Download quarantined files
>[!IMPORTANT] Turn on a setting to backup quarantined files in a secure and compliant location so they can be downloaded directly from quarantine. Once this setting is enabled, the **Download file** button will always be available.
>
>- This feature is available if your organization uses Microsoft Defender Antivirus and Cloud–based protection is enabled. For more information, see [Manage cloud–based protection](../microsoft-defender-antivirus/deploy-manage-report-microsoft-defender-antivirus.md).
>
>- The Engine version must be 1.1.17300.4 or later.
>- Supported on devices with Windows 10, version 1703 or later, Windows server 2016 and 2019.
>- Microsoft Defender for Endpoint is in active mode
You can turn on a setting to backup quarantined files in a secure and compliant location so they can be downloaded directly from quarantine. Once this setting is enabled, the **Download file** button will always be available. Users may be prompted to provide explicit consent before backing up the quarantined file, depending on your [automatic sample submission configuration](https://docs.microsoft.com/windows/security/threat-protection/microsoft-defender-antivirus/enable-cloud-protection-microsoft-defender-antivirus#use-intune-to-enable-cloud-delivered-protection).
Go to **Settings** > **Advanced features** > **Download quarantined files** and switch the toggle to **On**. Go to **Settings** > **Advanced features** > **Download quarantined files** and switch the toggle to **On**.
[Learn more about advanced features](advanced-features.md) [Learn more about advanced features](advanced-features.md)
>[!IMPORTANT]
>Requirements:
>- Your organization uses Microsoft Defender Antivirus
>- Cloud–based protection is enabled. See [Manage cloud–based protection](../microsoft-defender-antivirus/deploy-manage-report-microsoft-defender-antivirus.md)
>- Microsoft Defender for Endpoint is in active mode
>- Engine version is 1.1.17300.4 or later
>- Devices have Windows 10 version 1703 or later, or Windows server 2016 and 2019
### Collect files ### Collect files
If a file is not already stored by Microsoft Defender ATP, you can't download it. Instead, you'll see a **Collect file** button in the same location. If a file hasn't been seen in the organization in the past 30 days, **Collect file** will be disabled. If a file is not already stored by Microsoft Defender ATP, you can't download it. Instead, you'll see a **Collect file** button in the same location. If a file hasn't been seen in the organization in the past 30 days, **Collect file** will be disabled.