https://community.netapp.com/t5/ONTAP-Discussions/Ransomware-activities-detected/m-p/462310#M45093 <P><SPAN>Trigger Condition&nbsp;</SPAN><SPAN class="">Ransom</SPAN><SPAN>ware activity detected on volume volume1 in Storage VM SVM1. How to resolve this issue.</SPAN></P> Tue, 29 Jul 2025 09:51:54 GMT Atish2 2025-07-29T09:51:54Z https://community.netapp.com/t5/ONTAP-Discussions/Ransomware-activities-detected/m-p/462310#M45093 <P><SPAN>Trigger Condition&nbsp;</SPAN><SPAN class="">Ransom</SPAN><SPAN>ware activity detected on volume volume1 in Storage VM SVM1. How to resolve this issue.</SPAN></P> Tue, 29 Jul 2025 09:51:54 GMT https://community.netapp.com/t5/ONTAP-Discussions/Ransomware-activities-detected/m-p/462310#M45093 Atish2 2025-07-29T09:51:54Z https://community.netapp.com/t5/ONTAP-Discussions/Ransomware-activities-detected/m-p/462311#M45094 <P>Hello.&nbsp; Based on the information provided, it appears the next step would be to&nbsp;<SPAN>evaluate the notification to determine whether the activity is acceptable (false positive) or whether an attack seems malicious.&nbsp; I would start by reading this:&nbsp;<A href="https://docs.netapp.com/us-en/ontap/anti-ransomware/respond-abnormal-task.html" target="_blank">https://docs.netapp.com/us-en/ontap/anti-ransomware/respond-abnormal-task.html</A></SPAN></P><P>&nbsp;</P><P><SPAN>-Thx</SPAN></P> Tue, 29 Jul 2025 11:22:37 GMT https://community.netapp.com/t5/ONTAP-Discussions/Ransomware-activities-detected/m-p/462311#M45094 JPick 2025-07-29T11:22:37Z