Home > APEX > Cyber & Data Protection > White Papers > Ransomware Protection and Recovery with APEX Backup Services > Accelerated ransomware recovery
The APEX Backup Services cloud platform backs up workloads directly to the cloud, ready for immediate recovery if a ransomware attack occurs. The accelerated ransomware recovery module enables you to recover with confidence by ensuring the hygiene of recovery data. You can scan snapshots for malware and IOCs using built-in antivirus detection or using threat intelligence from your own forensic investigations or threat intel feeds. Scanning snapshots before recovery eliminates reinfection. Accelerated ransomware recovery also solves the problem of data loss due to point-in-time recovery. Now you can automatically identify the most recent clean version of every file within a specified timeframe and consolidate those versions into a single “Golden Snapshot”. Eliminating the manual search and recovery process drastically reduces time to recover and prevents data loss.
APEX Backup Services offers a unique solution to the problem of finding and restoring the most recent unencrypted version of files or data sets after an attack. Until now, IT departments have been forced to restore from a point in time before the initial infection, then manually search for more recent versions of individual files. The Curated Recovery feature automates this process, saving time and ensuring that you have the most recent unencrypted version of all data. The Curated Recovery feature automatically finds the most recent clean version of each file and compiles it into a single curated snapshot.
Now you can simply define the time-period of the attack (from initial infection to the present) and let Curated Recovery automatically find the best version of each file.
The solution assembles clean versions into a single “golden snapshot” which you can use for recovery.
Reinfection is every IT administrator’s worst nightmare. Restoring contaminated data can cost your organization time and money. That is why it is vital to ensure that data is free of malware and IOCs (indicators of compromise) before recovery.
With Malicious File Scan, you can scan the data for viruses and malware during a data restore activity. Moreover, you can enable this feature for end users too so that they too can scan the data before restoring. APEX Backup Services scans the entire data for potential viruses and blocks the malicious and only restores the clean files.
APEX Backup Services uses an industry-leading antivirus engine to search the data for potential viruses and malware. You can also add pre-identified hash values of malicious files to the scan engine. APEX Backup Services will also scan the data for these file hashes so that malicious files can be blocked from restore.
Federated search also allows you to look for compromised data across your entire backup environment. Once infected data has been identified, admins can delete infected snapshots or files, and wipe-clean infected devices, preventing accidental recovery of contaminated data.