This is an automated archive.
The original was posted on /r/sysadmin by /u/cisco_bee on 2024-01-23 15:40:38+00:00.
First off, I'm one of those "inbox zero" type of people.
How do you all utilize the quarantine? If something is an actual threat, do you delete it? When you delete it, do you "temporarily" delete it (the default) or check the "Permanently delete" checkbox? What happens when you "temporarily" delete it? This seems weird to me.
I think my reluctance/confusion comes down to the fact that as a rule I don't "delete" anything. I like data. Additionally, the column "Release status" throws me off. It always says "Needs review". I would expect to be able to say either "Yes, release" (In which case it's gone) or "I have reviewed this and it should not be released". But you can't. It's either "Needs review" or it's not there. Is this status just useless or am I completely missing how to use this tool?