Recovery of infected files
Endpoint Central provides a streamlined and uncomplicated process for restoring files compromised in a malware intrusion. To restore files that have been affected by ransomware, please follow the steps outlined below:
- Navigate to the Incidents tab and identify the incident .
- Select Action and choose the Mark as True Positive option from the drop-down menu.
- Once the incident has been marked as a True Positive, click the Rollback option to initiate the recovery of impacted files.
Alternatively, you can follow these steps to restore encrypted files:
- Select the incident from the Incidents tab.
- Click the Resolve button located in the top-right and choose the Mark as True Positive option.
- Recover the impacted files by clicking the Resolve option.
- You can view the status of the restoration process under the Incidents tab.
Note : The restoration process may take a few minutes depending on the size of the affected files.