NetApp Community Update
This site will enter Read Only mode on July 23 as we prepare to move to a new platform.
You will still be able to view content, but posting and replying will be temporarily disabled.
To learn more, please review the information in this blog post.

ONTAP Discussions

Ransomware activities detected

Atish2
1,257 Views

Trigger Condition Ransomware activity detected on volume volume1 in Storage VM SVM1. How to resolve this issue.

1 ACCEPTED SOLUTION

JPick
1,240 Views

Hello.  Based on the information provided, it appears the next step would be to evaluate the notification to determine whether the activity is acceptable (false positive) or whether an attack seems malicious.  I would start by reading this: https://docs.netapp.com/us-en/ontap/anti-ransomware/respond-abnormal-task.html

 

-Thx

View solution in original post

1 REPLY 1

JPick
1,241 Views

Hello.  Based on the information provided, it appears the next step would be to evaluate the notification to determine whether the activity is acceptable (false positive) or whether an attack seems malicious.  I would start by reading this: https://docs.netapp.com/us-en/ontap/anti-ransomware/respond-abnormal-task.html

 

-Thx

Public