This data sheet describes Rubrik Threat Hunting, which analyzes historical backup data to identify when malware first entered an environment. During ransomware incidents, selecting the correct recovery point is critical to avoid reinfection. Threat Hunting scans immutable backup snapshots using file hashes and YARA rules to detect indicators of compromise. The solution pinpoints the earliest occurrence of malware and surfaces clean recovery points without impacting production systems. Security teams can scan backups proactively or during incident response to accelerate investigations and reduce recovery risk. By leveraging time-series backup data, Rubrik enables safer, faster recovery while supporting digital forensics and threat intelligence workflows.

Join for free to read