NetBackup - Microsoft Sentinel Integration

NetBackup™ offers first-class in-product integration with Microsoft Sentinel. NetBackup security alerts are pushed via APIs directly into the Microsoft Sentinel workspace, eliminating dependency on playbooks or the need to develop connectors. The imported alerts allow Sentinel administrators to rapidly identify potential or real ransomware attacks. They can then prioritize prevention and recovery efforts, even when handling thousands of simultaneous security alerts. The solution helps organizations investigate and respond to changes in backup data that may indicate an emerging ransomware attack: • Out-of-norm increases in compressed data • Changes in deduplication ratios • The number of files modified between/during backups These alerts allow security operations to prioritize and expedite investigations of potential incidents.