ONTAP Discussions

Ransomware activities detected

Atish2
518 Views

Trigger Condition Ransomware activity detected on volume volume1 in Storage VM SVM1. How to resolve this issue.

1 ACCEPTED SOLUTION

JPick
501 Views

Hello.  Based on the information provided, it appears the next step would be to evaluate the notification to determine whether the activity is acceptable (false positive) or whether an attack seems malicious.  I would start by reading this: https://docs.netapp.com/us-en/ontap/anti-ransomware/respond-abnormal-task.html

 

-Thx

View solution in original post

1 REPLY 1

JPick
502 Views

Hello.  Based on the information provided, it appears the next step would be to evaluate the notification to determine whether the activity is acceptable (false positive) or whether an attack seems malicious.  I would start by reading this: https://docs.netapp.com/us-en/ontap/anti-ransomware/respond-abnormal-task.html

 

-Thx

Public