Untrusted Files

GeSWall tracks all files created or modified by isolated applications and labels them as untrusted. The files are marked by special overlay icon as described in "GeSWall Labels" section. "Isolated files" folder in the GeSWall Console allows managing those untrusted files.

By default, the list of untrusted files is empty.

A scanning is required to fill or refresh the list. The scanning process is started by "Action\Start scan:" menu item.

On scanning completion, a list of untrusted files appears in the right pane.

The list has four columns:

• File - file name.
• Folder - file directory name.
• Application - name of isolated application that created or modified the file last time. Note application name is available only for known applications that are defined in the Application Database.
• Date - date and time of file modification. The format:
  Year/Month/Day Hour:Minute:Second

The list view could be sorted by file name, folder name, application or date via clicking on corresponding column name. For example previous figure has the list sorted by application name.

Two context menu operations are available for selected items in untrusted files list:

• Delete file - permanent erasing of untrusted file.
• Label as trusted - labeling file as trusted, so it does not appear in the list anymore. The operation is similar to "Label as Trusted" command in Windows Explorer context menu (see "GeSWall's Labels" section).

The operations could be performed on a single file or on selected subset of files.

The result of scanning is cached and displayed on subsequent launches of GeSWall Console. Start a new scanning for getting updated list.