ONTAP Discussions

Ransomware activities detected

Atish2
558 Views

Trigger Condition Ransomware activity detected on volume volume1 in Storage VM SVM1. How to resolve this issue.

1 ACCEPTED SOLUTION

JPick
541 Views

Hello.  Based on the information provided, it appears the next step would be to evaluate the notification to determine whether the activity is acceptable (false positive) or whether an attack seems malicious.  I would start by reading this: https://docs.netapp.com/us-en/ontap/anti-ransomware/respond-abnormal-task.html

 

-Thx

View solution in original post

1 REPLY 1

JPick
542 Views

Hello.  Based on the information provided, it appears the next step would be to evaluate the notification to determine whether the activity is acceptable (false positive) or whether an attack seems malicious.  I would start by reading this: https://docs.netapp.com/us-en/ontap/anti-ransomware/respond-abnormal-task.html

 

-Thx

Public