Hello J. Hefner,I'm Luis from Cisco TAC Advance Threat Solutions team, answering your question about a way to restore quarantined files from the local machine instead from the cloud.I can understand that in cases of false positives, the time that it ...

Hi Tom,   This error happen when the quarantine file on the endpoint (In the folder "C:\Program Files\Cisco\AMP\Quarantine") is no longer there. This could happen if the quarantine files were deleted manually by stopping the service and deleting the ...

Hi Chandu, My name is Luis from the Advance Threat Security team. When the CPU of the endpoint is high due to AMP, I would recommend following these steps:   1) Verify if another AV is running on the machine.      a. If there is other, the recommenda...