# Threat Scan - Automated Response Using Arlie Recover

After monitoring and reviewing detected signals — such as threats, anomalies, and partner alerts — you can use Arlie Recover, an AI‑assisted orchestration tool that automates threat‑response plans for critical and high‑risk resources.

When threats or anomalies are detected on your workloads (such as virtual machines), Arlie Recover provides a guided workflow to isolate, analyze, and recover the affected assets.

Note

To view Arlie Recover recommendations and initiate a response plan, you must enable the Arlie Recover additional setting in your environment. For more information, contact earlyadopter@commvault.com.

By executing a Arlie Recover-recommended response plan, the system automatically performs the following actions:

- Provisions a new or existing clean room.

- Generates a recovery runbook.

- Executes the recovery job using an optimal, automatically selected clean recovery point (or a manually selected recovery point).

During the response execution, Arlie Recover prompts you to review and configure the following protective and validation actions:

- Data aging: Disable data aging for a specific duration (for example, 90 days) to preserve backups for forensic analysis, or leave existing settings untouched.

- Forensic validation: Run secondary validation tools (such as Threat Scan and Windows Defender) automatically after the recovery job completes to ensure the recovered environment is clean.

×

Loading...