Purpose of Knowledge Article:

• A guide on how to recover false-positive files quarantined by CrowdStrike Falcon

Resolution:

• Users have 30 days from the day of quarantine to request a restore of quarantined files before it is automatically deleted

Request to restore quarantined files:

• Submit a request to [email protected] and include the following information:
  • DOE number of the computer
  • Computer name
  • Name of the file
  • Date of when the file was quarantined
  • Berkeley Lab username and employee ID number