how do I get infected file through to sandbox without download it to local machine?

[NSH531]

I glad for any help :)
I cannot be authorized to RTR

thanks a lot
Nate

[jshcodes]

Hi @NSH531 -

Without RTR, you are pretty limited if you're not on the machine. A possible workaround could be to set the Quarantine & Security Center Registration prevention policy setting to automatically upload to Falcon Sandbox (for either static or dynamic inspection).

[NSH531]

hi josh, I'll learn this topic THANKS. nate