SYNOTI / Quarantine Console
Quarantine Console
Isolated endpoints and files pending review or restore.
Quarantined
12
items held
Files
7
hashes isolated
Endpoints
5
network isolated
Auto-restored
3
last 24h
Quarantine Actions
Quarantined Items
| Type | Identifier | Reason | Held Since | Action |
|---|---|---|---|---|
| File | 9f3a…c21d | Mimikatz signature | 2h | Held |
| Endpoint | ep-042 (10.0.4.18) | Beaconing to C2 | 5h | Held |
| File | e71b…90aa | Quasar RAT dropper | 8h | Held |
| Endpoint | ep-017 (10.0.3.7) | Lateral movement | 1d | Held |
| File | 2c40…b6f1 | PowerShell obfuscation | 1d | Restored |
Recent Activity
View allRansomware behavior blocked on mail-01 CRITICAL
Playbook PB-041 auto-contained host · Ryuk TTPs matched
SSH brute force from 203.0.113.42 HIGH
42 failed logins in 60s · source IP blocked
Threat hunt matched T1059.001 on www-02
PowerShell obfuscation · confidence 0.91
SCA scan completed on 128 hosts
98.2% compliance · 11 benchmarks passed
Firewall rule 'BLK-3321' propagated to 14 nodes
0.4s propagation · geo-blocked 12 CIDRs
Sandbox verdict — 'invoice_9921.exe' malicious
Heuristic score 96 · family 'Emotet'
