A ransomware attack that encrypts your files and leaves you without access to them can pose an enormous threat to your business. And the sooner a ransomware attack is detected, the more effective damage mitigation will be.
Our Ransomware Detection & Management feature automatically quarantines the source device, alerts administrators as soon as a suspected ransomware event is identified, and makes it quick and simple to revert affected files in the backup set to the last known-good version. After you have removed all malware and affected files from the device, and reinstalled File Protection, you can easily restore the files, safe in the knowledge that you have an uncompromised backup.
File Protection's Ransomware Detection and Management feature:
- Uses a series of complex algorithms to detect ransomware attacks
- Automatically quarantines affected devices.
- Provides you with a confidence rating for the security incident
- Allows you to either confirm or ignore the incident
- Gives you the tools to revert all affected files to their state before the attack
-
Automatically notifies all File Protection Manager users with Full Access or Team Access privileges, as well as any alert notification recipients designated on the Notifications page, of security incidents
- Provides you with a mechanism to ignore an incident report from certain devices, or to place one or more devices on a Security Excluded Devices list to avoid repeated false positive incident reports,
You'll use the Security page to track all security incidents:
The new Ransomware Incident detail page lets you monitor and manage the entire process from initial incident detection through quarantine, file reversion, closure, and removal of the affected device(s) from quarantine:
NOTE If you have a confirmed ransomware incident, we recommend that you revert the affected files, recycle the device via File Protection, completely uninstall File Protection from the device (refer to Install or uninstall File Protection Desktop), scrub the device of all malware, reinstall File Protection, and restore the files from the service.
Ransomware Detection & Management
