Focus

SaaS Security Administrator's Guide

Download Assets for Incidents

Table of Contents

Download Assets for Incidents

Learn how to download assets.

Data Security enables you to download an asset to inspect it if an incident exists for that asset or if an asset was quarantined. For security reasons, Data Security does not enable you to download assets if the asset did not violate a policy and no remediation assessment is needed. Additionally, downloading an asset is a remediation action, and not all SaaS apps support this action.

You can also download an asset even when the asset is quarantined.

Verify that your SaaS app supports downloads.
To download your asset, go to Data SecurityData Assets.
Click the Data Asset Name to display the asset’s details.
Click ActionsDownload File.
After the file compresses (.zip), the file downloads to your local drive. A decrypt password displays. Use the password to open and inspect the file.
The Download File option is available only for the following three scenarios:
When both current and past incidents are available, you can download the asset file for either of them. It gives you the same asset and content.
When either current or past incidents are available, you can download the asset file.
When past incidents are not listed but are available in a closed state, you can download the asset file.
When there are no current or past incidents, you don't have the Download File option.

Close Incidents

View Asset Snippets for Incidents