Harmony Endpoint OS Rollback

[franctorres]

Hi good day everyone can you confirm if the Bhavioral Guard and Anti Ransomware can make a OS Rollback? something like the Sentinel One VSS Rollback?

regards

[Chris_Atkinson]

Ransomware variants have been know to go after and delete shadow copies...

Anti-Ransomware constantly monitors files and processes for unusual activity. Before a Ransomware attack can encrypt files, Anti-Ransomware backs up your files to a safe location. After the attack is stopped, it deletes files involved in the attack and restores the original files from the backup location.

[jcortez]

@franctorres 

To add to what @Chris_Atkinson has said we do not do OS Rollback but revert to a backup up of files prior to the Ransomeware attack.

[arvindteemul1]

Hi Chris,

Can you kindly indicate the following:

1) Is the backup automatic or requires a manual intervention?

2) Identify the safe location?

3) The restores are carried out automatically or manually?

[G_W_Albrecht]

1 + 3 automatic

2 You will see it