During an investigation, you may come across interesting or suspicious files. You can request to obtain these files from an endpoint for further investigation.
This option is available in certain locations across the console by clicking the Take Action button on an application and selecting Request Upload. The request will populate on the Inbox page.
Note: Uploaded files expire after two weeks. Attempting to download an expired file will result in a timeout error.