QuestionQ238Verified/Policy ApplicationCopy linkReport a problemAsk AstroTutorSave questionTo quarantine files on the host, which prevention-policy settings must be enabled?AMalware Protection and Custom Execution Blocking must be enabledBNext-Gen Antivirus Prevention sliders and "Quarantine & Security Center Registration" must be enabledCMalware Protection and Windows Anti-Malware Execution Blocking must be enabledDBehavior-Based Threat Prevention sliders and Advanced Remediation Actions must be enabledShow AnswerAnswerExplanationFalcon host quarantine is tied to Next-Gen Antivirus prevention: a file must be prevented by NGAV, and the Quarantine & Security Center Registration setting enables quarantining of those prevented executable files. The anti-malware prevention sliders control the NGAV prevention levels.Learn moreCrowdStrike Windows Prevention Policy resourceShow comments5Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion