Quarantined Files not appearing in Action Center

M.Crow — Thu, 07 May 2026 18:35:44 GMT

Hi there,

We are having issues with files being quarantined on BIOCs but they are not appearing in the Action Center-->File Quarantine.

We have verified both Broker VM and local machines experiencing this issue are not anywhere near storage quota.

We can see the quarantine appearing in the trapsd.log file and we can see the packets making it from the local machines to the data broker.

We tried reverting to an earlier version of the XDR to no avail so have re-upgraded to the latest.

Additionally, I don't know how to correlate the noted Rule to the BIOC Rules. The Additional information 1 in the quarantine pop up shows "Rule bitsjob_amsi_suspicious_strings

Please let me know if you have any ideas or what greater information might be helpful to solve this.

topic Quarantined Files not appearing in Action Center in Cortex XDR Discussions

Quarantined Files not appearing in Action Center