---
title: "Check isolated suspicious files (Quarantine)"
slug: "wbd-wbdquarantine"
tags: ["Webshell Behavior Detector", "VPC"]
updated: 2026-09-17T09:19:52Z
published: 2026-09-17T09:19:52Z
canonical: "guide.ncloud-docs.com/wbd-wbdquarantine"
stale: true
---

> ## Documentation Index
> Fetch the complete documentation index at: https://guide.ncloud-docs.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Check isolated suspicious files (Quarantine)

Available in VPC

Quarantine is a menu where you can manage suspicious web shell files that have been isolated. You can see the details for files isolated from various web shell behaviors, restore them, or add memos.

## View details of suspicious files

You can view the details of suspicious files that have been determined as web shells and isolated.

To view details of isolated suspicious files:

1. From the NAVER Cloud Platform console's VPC environment, navigate to **Menu** > **All Services** > **Security** > **Webshell Behavior Detector**.
2. Navigate to **Detection List > Quarantine**.
3. Click the suspicious file item you'd like to check.
  - Details of the suspicious file are displayed.

The interface of the list of suspicious files includes the following components: ![wbd-wbdquarantine-detail-vpc-ko](https://cdn.document360.io/6998976f-9d95-4df8-b847-d375892b92c2/Images/Documentation/wbd-wbdquarantine-detail-vpc-ko%283%29.png?sv=2026-02-06&spr=https&st=2026-11-14T05%3A36%3A37Z&se=2026-11-14T06%3A36%3A37Z&sr=c&sp=r&sig=he%2BOUek8p9hODXk%2FytL%2Frn0qT0FZ9630a%2FlUllCOopI%3D)

| Component | Description |
| --- | --- |
| ① **Isolation time** | Filter items based on time of isolation. |
| ② Search bar | Set search conditions and click **[Search]** to search for items. |
| ③ Suspicious file item | View isolated file information, and use buttons of related features. |
| ④ **Details** | View details of suspicious files. |

## Restore suspicious file

You can restore suspicious files that have been judged as web shells and isolated.

To restore isolated suspicious files:

1. From the NAVER Cloud Platform console's VPC environment, navigate to **Menu** > **All Services** > **Security** > **Webshell Behavior Detector**.
2. Navigate to **Detection List > Quarantine**.
3. From the **Restore** area of the suspicious file to restore, click **[Restore]**.
  - You can also click the item and the **[Restore]** button next to **Restore file** in the details area.
4. In the confirmation popup, click **[Yes]**.
  - The file is restored with the name it had before isolation.

## Add memo

You can add memos to isolated suspicious file items, such as a brief description or additional information.

To add a memo:

1. From the NAVER Cloud Platform console's VPC environment, navigate to **Menu** > **All Services** > **Security** > **Webshell Behavior Detector**.
2. Navigate to **Detection List > Quarantine**.
3. Click the item to add a memo to, then click the **[Edit]** button next to **Memo** in the details area.
4. Enter the memo and click **[Save]**.