Skip to main content

How can we help you?

Druva Documentation

Add file hash values of malicious files for scanning

Overview

When you have identified a set of malicious files doing rounds in your organization, you can add the SHA1 value of those files so that Druva scans the data for those hash values. Whenever Druva finds a match, it will block the file from being restored. 

Add a SHA1 value that you want Druva to scan

  1. Login to Druva Cloud Platform Console and click Ransomware Recovery.

  2. On the left pane, click Scan Settings.

  3. In the Indicators - File Hashes section, click Add File Hashes

  4. Add the files hashes and click Save

If you want to add multiple SHA1 hash values, then use the Import CSV option. 

Delete a SHA1 value from the list

  1. Login to Druva Cloud Platform Console and click Ransomware Recovery.

  2. On the left pane, click Scan Settings.

  3. In the Indicators - File Hashes section, select the file hashes that you want to delete.

  4. Click More Options > Delete.

  5. Click Continue.

 

  • Was this article helpful?