Phase 6: Recover

At this point you have completed all of the steps needed to be in control of your environment from an AntiVirus perspective. However, you will occasionally encounter incidents that require further investigation.

In this phase you will:

• Submit Suspect Files for Analysis
  Submit suspect files for analysis or for validation and removal as false positives.
• Create Temporary Exclusions for False Positives
• Manually Restore or Delete Files from Quarantine
  Manually restore or delete files from quarantine that have not been automatically restored.