What is the Advanced Ransomware Recovery feature?

Typically, when ransomware affects a cloud storage, it encrypts all the files and deletes the safe version of the file.

We scan your backups to detect files that have been potentially encrypted by ransomware (referred to as "encrypted" in the rest of the article) and provide options to recover from the attack unharmed.
We flag all encrypted files, which you can view in the "Ransomware" section in the dashboard of the application.

Actions available for identified encrypted files:

1. Transfer ownership: Transfer ownership of the files to an admin for further review.
2. Restore ownership: Restore ownership to the original owner if ownership was previously transferred.
3. Restore from safe snapshot: Restore the safe version of the files identified by SysCloud's algorithm or recover files that may have been removed by ransomware or the user.
4. Mark as true positive: Identify all ransomware violations associated with the selected items as confirmed threats. 
5. Delete: Delete the affected files from the SysCloud Archives or directly from the cloud environment.
6. Dismiss: If you determine that the detected files do not pose a threat, dismiss the alert.