Recovering server, NAS and RAID data after ransomware
When a central share is affected, the work of several teams is affected with it. We order the data assessment by the importance of the services, the storage structure, and the sources available for examination.
Who is this service for?
For businesses that rely on a file server, network storage or a disk array to keep operational data and shared work.
What do we examine?
We define the extent of the affected storage and the relationship between the server, the shares and the available backups. If the storage medium is also faulty, that is taken into account when planning how the data is handled.
What do we need to know?
The type of storage, the approximate number of affected units, the nature of the stopped service, and whether an IT lead is available to explain the structure. You do not need to publish internal server names or network addresses in the form.
How do we assess the result?
We agree on priority folders or data sets, and how they are verified with the client's lead. Handover can be split by priority when the scope of work allows.
Specific questions
Get in touch first to define what is needed and how the media are documented and handed over. Do not change the disk order or start rebuilding the array as an experiment.
Network readiness is a separate decision that needs the security and IT leads. The data is handed over within the agreed scope, and its return to operation is coordinated with the responsible team.
Related services
Next step
Assess my servers