Ransomware

Parent Previous Next

The ransomware is a template for monitoring ransomware, killing processes and blocked IP's. When a new Agent is added, monitoring starts immediately using this template.




Specify the following ransomware settings here:

Monitoring Ransomware On:  If monitoring is set off,  no ransomware will be detected,

File Mutations: When checked fill in the number of files mutated in how many seconds.

Killing Processes On:  If monitoring is set off,  the processes that trigger the ransomware detection will not be killed.

Blocked IP On:  If monitoring is set off,  the IP address that triggers the  ransomware detection will not added to the firewall.



Notification Template: Specify which notification template will be used. Click here for further information about Notification Template

Notification Groups: Check if the escalation groups will be inherit. Click here for further information about notification Groups.