Reviewing quarantined files

task brazil Updated Sep 10, 2026 1 min read resolve-infected-file.md
Raw file servicenow.com

Review quarantined file attachments and take further action as needed.

Before you begin

Role required: antivirus_admin or admin

About this task

Monitor your quarantined file entries in the Antivirus Quarantine page at regular intervals to perform any of the following actions.

Procedure

  1. Navigate to All > Antivirus > Quarantine.

  2. Select the check box next to each quarantined entry on which you want to perform an available action.

  3. Select the Actions on selected rows drop-down in the banner to choose the action to be performed on the selected row quarantined entry.

    Action Description
    Delete Select this action to delete the quarantined file if it is not required any more by users.
    Restore Select this action to restore the file based on your assessment of its status or on the user request. However, scan the file with your third-party antivirus product before you restore it to mitigate any virus threats. Once restored, the file is available for download to the user.
    Download Select this action to download the file to your local system for further scanning and analysis.

Result

The system asks for confirmation and performs the selected action per your input.

Related topics

[instance-security-center]

Search documentation
Search document titles and file paths on the brazil branch