Purpose of Knowledge Article:

• A guide on how to recover files quarantined by CrowdStrike Falcon
• This is for false-positive quarantine files

Resolution:

• Users have 30 days before the quarantined files are automatically deleted to request a restore of any quarantined files

Request to restore quarantined files:

• Submit a request to [email protected] and include the following information:
  • DOE number of the computer
  • Computer name
  • Name of the file
  • Date of when the file was quarantined
  • Berkeley Lab username and employee ID number