Ransomware

Parent Previous Next

The ransomware is a template for monitoring ransomware, killing processes and blocked IP's.




Monitoring Ransomware On: licenses allowed to use

Killing Processes On: number of licenses used

Blocked IP on:  number of licenses active

File Mutations: The number of files that are mutated/deleted or renamed

Number of Seconds: within this time period


Example: When a virus/user/ransomware will change/delete or rename 10 files within one second, the Agent will kill that process and will block this IP address via the Firewall.


Notification Template: Specify which notification template will be used. Click here for further information about Notification Template

Notification Groups: Which groups should receive the Notifications. Click here for further information about Notification Groups.