NetBackup IT Analytics Report Reference Guide

Ransomware Risk Assessment Dashboard

The integrated dashboard emphasizes the potential risks associated with inadequately protected assets. In the event of a ransomware threat, these assets may become inaccessible, leading to potential financial losses for your enterprise. Additionally, it identifies any files within your environment that bear well-known ransomware extensions. The dashboard offers a range of reports, effectively showcasing and visualizing the risks present in your environment. This allows you to assess your level of preparedness in terms of data protection in case of a ransomware infection. To enhance clarity, the dashboard is divided into sections, with each section representing a specific report.

You can click on the donut section of your choice in the chart to get a detailed view of the servers and sources under consideration for that selection. This drill down capability provides deeper insight and helps identify the sources of risk quickly and easily. To choose your categories to display, please hover your mouse over the top right part of the report to display icons that let you "edit scope". These rules and categories are also described in Admin > Solutions > Risk Mitigation, where you can double-click on any rule to customize it for your requirements. You can choose to view multiple categories at the same time or select the categories by clicking on the category legend without changing the scope of the report for quick view and analyze situations.

This report describes the same risk categories spread across time. This report gives you a sense of how your protection risk has been changing over time. This helps you create a baseline and work towards keeping your risk levels per category below this baseline.

This report describes specific instances when things have not worked as expected with respect to data protection. A NetBackup Primary server connection failure, out of storage condition on the NetBackup Primary Server or an incomplete backup job may indicate risk in the environment that needs addressing. The alert summary chart can be used to drill down on any of the alert types to get deeper insight into the source of alert. This helps in mitigating any potential risk in the environment and consequently reducing a potential negative impact of a Ransomware infection.

It describes the alert occurrences over time. This provides a good way of determining a baseline and staying below the baseline as a goal to mitigate any risk.

This report describes the risk associated with the presence of files across the enterprise which have well known ransomware extension names. This helps to zoom in on servers which have files with potential ransomware infection. This visibility is crucial in identifying the spread of ransomware infection across the environment. This report provides the summary view of number of the such file extensions found. You can click on the export icon to download a CSV file which would contain a list of all file paths along with their server locations to help drill down into the source of the infection.

You can edit the report scope by hovering over the top right hand corner of the report and choosing the Edit Scope option and choosing which Alert category to see in the report. The alerts can be configured in detail using the top level Alerts tab.

This chart displays the count of anomalies detected in the host group by it data protection tool. The chart drills down to the Anomalies Summary report that contains additional details about the hosts and the anomaly score.

See Anomalies Summary.