Ransomware activities detected

[Atish2]

Trigger Condition Ransomware activity detected on volume volume1 in Storage VM SVM1. How to resolve this issue.

[JPick · Accepted solution]

Hello.  Based on the information provided, it appears the next step would be to evaluate the notification to determine whether the activity is acceptable (false positive) or whether an attack seems malicious.  I would start by reading this: https://docs.netapp.com/us-en/ontap/anti-ransomware/respond-abnormal-task.html

-Thx