https://community.checkpoint.com/t5/Endpoint/Threat-Hunting-Seeing-Files-that-are-no-longer-there/m-p/132428#M4768 <P>Has anyone else seen this?</P><P>I have a user who had malicious files saved on his share drive. CheckPoint Threat Hunting saw the files via the mapped path, so it couldn't actually quarantine the file. I had a system admin so into the file share and remove the files. Had the user reboot. It stopped reporting for a while.</P><P>It started reporting again, but the sys admin said the files were still gone.</P><P>Any insight?</P> Fri, 22 Oct 2021 12:46:50 GMT sjchris87 2021-10-22T12:46:50Z https://community.checkpoint.com/t5/Endpoint/Threat-Hunting-Seeing-Files-that-are-no-longer-there/m-p/132428#M4768 <P>Has anyone else seen this?</P><P>I have a user who had malicious files saved on his share drive. CheckPoint Threat Hunting saw the files via the mapped path, so it couldn't actually quarantine the file. I had a system admin so into the file share and remove the files. Had the user reboot. It stopped reporting for a while.</P><P>It started reporting again, but the sys admin said the files were still gone.</P><P>Any insight?</P> Fri, 22 Oct 2021 12:46:50 GMT https://community.checkpoint.com/t5/Endpoint/Threat-Hunting-Seeing-Files-that-are-no-longer-there/m-p/132428#M4768 sjchris87 2021-10-22T12:46:50Z https://community.checkpoint.com/t5/Endpoint/Threat-Hunting-Seeing-Files-that-are-no-longer-there/m-p/132516#M4773 <P>I recommend engaging with the TAC here to see what's going on.</P> Mon, 25 Oct 2021 01:45:00 GMT https://community.checkpoint.com/t5/Endpoint/Threat-Hunting-Seeing-Files-that-are-no-longer-there/m-p/132516#M4773 PhoneBoy 2021-10-25T01:45:00Z