In your Qualys EDR module, navigate to the Hunting tab > Historic View tab to view the detections done by the Malware Protection. Use the filter to view only Malware Protection events in your list.
Here you can view details of the detections and the remediation actions taken on the infected files.
Note: The events are listed only if any malware or threat is detected by Qualys endpoint protection.
To restore the file, navigate to the Responses > User Activity tab and click UnQuarantine from the status column of the file.
Provide a reason for the action and click Execute Action. The file is then restored to the initial file location, from where it was quarantined.
