ONTAP Discussions

Ransomware activities detected

Atish2
561 Views

Trigger Condition Ransomware activity detected on volume volume1 in Storage VM SVM1. How to resolve this issue.

1 ACCEPTED SOLUTION

JPick
544 Views

Hello.  Based on the information provided, it appears the next step would be to evaluate the notification to determine whether the activity is acceptable (false positive) or whether an attack seems malicious.  I would start by reading this: https://docs.netapp.com/us-en/ontap/anti-ransomware/respond-abnormal-task.html

 

-Thx

View solution in original post

1 REPLY 1

JPick
545 Views

Hello.  Based on the information provided, it appears the next step would be to evaluate the notification to determine whether the activity is acceptable (false positive) or whether an attack seems malicious.  I would start by reading this: https://docs.netapp.com/us-en/ontap/anti-ransomware/respond-abnormal-task.html

 

-Thx

Public