Skip to main content
NetApp Knowledge Base

Search

  • Filter results by:
    • View attachments
    Searching in
    About 1 results
    • How does Active IQ Unified Manager detect ransomware on ONTAP and trigger event "Ransomware activities detected"?
      https://kb.netapp.com/data-mgmt/AIQUM/AIQUM_Kbs/How_does_Active_IQ_Unified_Manager_detect_ransomware_on_ONTAP_and_trigger_event_Ransomware_activities_detected
      Ransomware activities detected is based on EMS event callhome.arw.activity.seen on the ONTAP side When EMS event callhome.arw.activity.seen is generated, the event is notified to AIQUM due to the defa...Ransomware activities detected is based on EMS event callhome.arw.activity.seen on the ONTAP side When EMS event callhome.arw.activity.seen is generated, the event is notified to AIQUM due to the default event notification configuration on ONTAP After receiving the notification, AIQUM collects the details of the event from ONTAP via API, and generates AIQUM event Ransomware activities detected