This has been suggested in the past....
If there is a detection, the item will be moved to quarantine , visible on "Security report / See more details"
The removed item is marked as "Removed" but you have the option to "Restore" it, see below:
However, even though you "Restore" it, the item will still be in Quarantine with the status "Removed"
This creates confusion.... after several months , when you inspect the "Security Report" you may not remember which one was restored and which one not.
Why is so difficult to mark the restored items with "Restored"
I asked this more than 2 years ago!
Trend Security Expert
2 months ago
Hi @claudiubotezatu ,
Based on our software design, the scan result of a particular action cannot be changed once it has been recorded in the security logs. However, we currently do not have a feature that can save the record of a file being restored.
This feature is more related to audit logs rather than security reports. We appreciate your concern and will take it into consideration for future feature enhancements.