Check isolated suspicious files (Quarantine)

Available in VPC

Quarantine is a menu where you can manage suspicious web shell files that have been isolated.
You can see the details for files isolated from various web shell behaviors, restore them, or add memos.

View details of suspicious files

You can view the details of suspicious files that have been determined as web shells and isolated.

To view details of isolated suspicious files:

1. From the NAVER Cloud Platform console's VPC environment, navigate to > Services > Security > Webshell Behavior Detector.
2. Navigate to Detection List > Quarantine.
3. Click the suspicious file item you'd like to check.
   • Details of the suspicious file are displayed.

The interface of the list of suspicious files includes the following components:

Restore suspicious file

You can restore suspicious files that have been judged as web shells and isolated.

To restore isolated suspicious files:

1. From the NAVER Cloud Platform console's VPC environment, navigate to > Services > Security > Webshell Behavior Detector.
2. Navigate to Detection List > Quarantine.
3. From the Restore area of the suspicious file to restore, click [Restore].
   • You can also click the item and the [Restore] button next to Restore file in the details area.
4. In the confirmation popup, click [Yes].
   • The file is restored with the name it had before isolation.

Add memo

You can add memos to isolated suspicious file items, such as a brief description or additional information.

To add a memo:

1. From the NAVER Cloud Platform console's VPC environment, navigate to > Services > Security > Webshell Behavior Detector.
2. Navigate to Detection List > Quarantine.
3. Click the item to add a memo to, then click the [Edit] button next to Memo in the details area.
4. Enter the memo and click [Save].