Mitigation
Mitigation is all about minimizing or removing the impact of a security threat. bucketAV can take specific actions to prevent the spread of the security threat. The available options include tagging the file, deleting it, quarantining it, or moving it to a different bucket.
By default, files are tagged with the scan result. To mitigate threats as quickly as possible, we recommend deploying the Delete infected files Add-On or the Quarantine infected files Add-On as well. The following table shows the options that our customers use:
| Scan result | Actions |
|---|---|
| clean | do nothing, tag, move |
| infected | do nothing, tag, delete, quarantine |
| unscannable | do nothing, tag, quarantine, move |
The actions run in the following order:
- if infected and the deprecated DeleteInfectedFiles configuration parameter is set to
true, delete file and stop all other actions - tag
- delete/move/quarantine (implemented by Add-Ons reacting to the scan result)