What should you do when SysCloud identifies a potential ransomware threat in your backup archives?

Follow the steps below to address ransomware threats detected by SysCloud:

1. Login to the application.

2. Access the ransomware section on the dashboard

   • Navigate to the Dashboard and locate the ransomware section, where the number of ransomware-encrypted and ransomware files is displayed.

3. View the ransomware results

   • Click on the displayed numbers in the ransomware section. You will be redirected to the results page. On the Results Page, you can click 'Users' or 'View More' to navigate to the Archives Page, where detailed file information is displayed.

4. Take appropriate action

   • On the archives page, select the affected files or items for which you want to perform the action. Choose from the following actions:
     • Transfer ownership: Transfer ownership of the files to an admin for further review.
     • Restore ownership: Restore ownership to the original owner if ownership was previously transferred.
     • Restore from safe snapshot: Restore the safe version of the files identified by SysCloud's algorithm or recover files that may have been removed by ransomware or the user.
     • Delete: Delete the affected files from the SysCloud Archives or directly from the cloud environment.
     • Dismiss: If you determine that the detected files do not pose a threat, dismiss the alert.