Alerts and Events for Ransomware Protection

Commvault software notifies the CommCell Console administrator immediately by sending an Alert and displaying an Event Message as follows:

  • The following event message is displayed if the Commvault software detects file anomalies on your computer:

    Detected file activity anomaly of type [Anomaly_Type ] in last 5 minutes. Number of files Modified [X] Deleted [X] Renamed [X] and Created [X]. Please verify the data on the machine.

    where:

    • Anomaly_Type is the type of anomaly which can either be one of the following operations or a combination of them.

      • Created

      • Modified

      • Renamed

      • Deleted

    • X is the count of File IOs for a specific operation type.

  • A Threat Indicator Alert notification is sent to all the users included in the Master CommCell User Group.

    See Alerts and Notifications - Predefined Alerts for more information.

    Note

    You can use the Threat Indicators dashboard that help you track large file anomalies for all clients in the CommCell Console.

×

Loading...