Using Endpoint Detection and Response UI

To view the detections done by Malware Protection from the Hunting tab, click Events. Use the filter to view only Malware Protection events in your list.

Anti-malware source in Events tab under Hunting tab.

Here you can view details of the detections and the remediation actions taken on the infected files.

Note: The events are listed only if any malware or threat is detected by Qualys endpoint protection.

To restore the file, navigate to the Responses > User Activity tab and click UnQuarantine from the status column of the file.

UnQuarantine

Provide a reason for the action and click Execute Action. The file is then restored to the initial location, where it was quarantined.

Release File