If run a script that simulates the behavior of ransomware, will it affect the result of learning mode?
Applies to
- ONTAP version 9.10.1 or later
- Anti-ransomware or Autonomous Ransomware Protection (ARP) or Anti_Ransomware or ARW
Answer
- Yes, it will.
- All operations performed during the learning period will be treated as behaviors that can occur in normal business operations and will become baseline information after switching to operation mode.
- Therefore, if the purpose is only for a temporary test, it is recommended that it is performed after switching to operation mode.