Kevin Beaumont on Nostr: nprofile1q…7j27j they do something to stop snapshot deletion - but, honestly, in ...
nprofile1qy2hwumn8ghj7un9d3shjtnddaehgu3wwp6kyqpqetwvuhgjn8tzguhx6cgluzmu2cszap659hqkmunwykncmq4jzpwq97j27j (nprofile…j27j) they do something to stop snapshot deletion - but, honestly, in almost every big game ransomware incident, they just terminate the endpoint security product and delete snapshots. Hence why Microsoft and Crowdstrike don't recover from VSS snapshots in ransomware incidents.