Kevin Beaumont on Nostr: Question, has anybody ever seen the SentinelOne rollback feature (it rolls machines ...
Question, has anybody ever seen the SentinelOne rollback feature (it rolls machines back using Volume Shadow Copy) recover systems successfully in a domain wide ransomware incident? I haven't.
Published at
2025-01-10 13:47:54Event JSON
{
"id": "7c4632a80e5ca52cfa966e3b6e91f1f140724810e8dc8fadaf80c90891b2be1d",
"pubkey": "f6870afcde4480ec8508f50304859e14a51309ff24ab3f0f862c52bdc4af8747",
"created_at": 1736516874,
"kind": 1,
"tags": [
[
"proxy",
"https://cyberplace.social/users/GossiTheDog/statuses/113804369919787395",
"activitypub"
]
],
"content": "Question, has anybody ever seen the SentinelOne rollback feature (it rolls machines back using Volume Shadow Copy) recover systems successfully in a domain wide ransomware incident? I haven't.",
"sig": "411be8813258281ccb7fc6e3111e2335cb3d9d3c08ef5b1dbfa859ef5d785d858175d2bd3080afe3027ef84ca2e901dc42340adc58f023f04df67d3e49db22f3"
}