Under security I have multiple options, but in this case I click "Antivirus". Others are Email, WAF, Web Filter, Application Control, IPS.
Then, I see the entry with action "content-disarmed". I click and I see the details of that log entry. But nowhere to click to get the quarantined file.