Sharing/Unsharing

To initiate a file sharing session in an incident:

1. From the Files area, click Share. The default window will open to the desktop to either select the file to share or navigate to the location of the file.
2. Select a file and click Open.

A warning message is now in place when sharing an executable file into an incident. A prompt is displayed to ensure anti-malware software is up-to-date and will scan the file for malicious content.

This file will now be added into the Files window of the incident and shared with all the other IWSs in the same incident.

To unshare a file:

Removing a shared file does not remove from the remote systems, it simply removes it from new users in the incident or participants who have not yet downloaded. Any user who has already seen or received the file will still have the file.

1. Highlight the file previously shared and right-click.
2. Choose Unshare file.

The file is removed from the IWSs in the incident

Once a file is shared, you have no control of what the other participants in the incident do with the file (i.e. download the file to their local environment, desktop/thumb drive). “Un-sharing” a file only removes it from the incident. If a sender of the file decides to “Unshare” the file while the receiver is downloading, the file will be removed and the download will be interrupted.