Druva expands identity resilience with ransomware detection
Druva launched Ransomware Detection and expanded Identity Resilience, using AI analysis of backup data to confirm ransomware impact and guide recovery.
Druva announced new Identity Resilience capabilities and launched Ransomware Detection, powered by a proprietary AI threat pipeline and Dru MetaGraph. The ransomware feature analyzes backup snapshots for patterns like ransom notes and mass file renaming, then validates findings with entropy, MIME type, and file integrity forensics. Dru MetaGraph maps identity activity across Microsoft Entra ID, Active Directory, and Okta, reconstructs attack paths with MITRE ATT&CK mapping, and generates pre-validated recovery plans tied to clean snapshots.
- Ransomware Detection confirms ransomware impact from backup snapshots to reduce false positives
- Dru MetaGraph visualizes blast radius across Entra ID, Active Directory, and Okta identities
- Produces tailored pre-validated recovery plans identifying impacted objects and clean restore points
- Vendors frame AI-accelerated attacker behavior as motivation for evidence-based recovery
- Organizations
- IDC
From the original article
3 min read at helpnetsecurity.comDruva has announced new capabilities for Druva Identity Resilience alongside the launch of Ransomware Detection, a new feature fueled by a proprietary AI threat pipeline. Powered by Dru MetaGraph, the new offerings use behavioral intelligence and built-in validation to turn suspicious behavior into actionable evidence, definitively confirm impact, and accelerate precise containment and clean recovery.
By Industry News · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.