Recovering from Ransomware attack

[cfortenbery]

Does Veeam have any documentation concerning how to recover from a ransomware attack? Restoring an item or a mailbox is fairly straightforward, but what if you have to recover the entire org due to a ransomware attack? Does the org have to be completely wiped and then you can restore from VBO365 or are there specific steps you have to take to ensure everything that was backed up prior to the attack was restored properly? Thanks in advance!

[Polina]

Hi Clive,

There's no specific documentation for such use cases, but should you need to restore, for example, all tenant mailboxes you can follow these steps.

Thanks!