Deep Learning Cleanup

Hi blueskies,

Thanks for reaching out. 

When a file is cleaned up, it will be moved to the "SafeStore".
- C:\ProgramData\Sophos\Safestore

The best way to exclude a detected file is to find the detection event in Sophos Central by checking the "Events" tab under the device in question. Selecting the "Details" button on the right-hand side of the "PUA detected" event will allow you to exclude the file. This will trigger the restore operation.

Well i dont see so, The safe store has only .dat files and not the ones that were cleaned

the target file is encrypted and stored in our safestore database. You can't get it back unless you generate an exclusion for it that will allow the system to recognize it as legitimate and restore it. 

There are limits to the safestore too - not every file can be restored. 

Anything above 50 MB cannot be restored?After adding an exclusion? 

There is a per file size limit and a total size limit for the safestore. If a new file would take the safestore over its limit - the oldest stored file is deleted.