During an investigation, you may come across interesting or suspicious files. You can request to obtain these files from an endpoint for further investigation.

This option is available in certain locations across the console by clicking the Take Action button on an application and selecting Request Upload. The request will populate on the Inbox page.

Note: Uploaded files expire after two weeks. Attempting to download an expired file will result in a timeout error.


  1. On the left navigation pane, click Inbox.
  2. When the file is available for download, click the Download icon Download arrow next to the filename.
    Note: Not all files are compatible with upload requests. See the list of upload file restrictions.