Recovery of infected files

Endpoint Central provides a streamlined and uncomplicated process for restoring files compromised in a malware intrusion. To restore files that have been affected by ransomware, please follow the steps outlined below:

• Navigate to the Incidents tab and identify the incident .
• Select Action and choose the Mark as True Positive option from the drop-down menu.
• Once the incident has been marked as a True Positive, click the Rollback option to initiate the recovery of impacted files.

Alternatively, you can follow these steps to restore encrypted files:

• Select the incident from the Incidents tab.
• Click the Resolve button located in the top-right and choose the Mark as True Positive option.
• Recover the impacted files by clicking the Resolve option.
• You can view the status of the restoration process under the Incidents tab.

Note : The restoration process may take a few minutes depending on the size of the affected files.