elastioSearchRequest a demo

Search platform and solution pages, partners, blog posts, events, webinars, FAQs, and ransomware families.

AWS

Elastio for AWS.

Investigate Amazon EC2 instances and AMIs for evidence of compromise. Find ransomware, malware, and corruption in AWS storage and recovery copies.

Pursuit investigates machine images and system snapshots without a host agent. Hunt inspects your AWS data and records results against the copies analyzed.

Request a demo
Assets we investigate

Coverage for your AWS services.

  • Pursuit / Hunt

    Amazon EC2 and AMIs

    Investigate supported EC2 system snapshots and AMIs with Pursuit. Hunt inspects EC2, ECS, and EKS workload data; this is data inspection, separate from container runtime monitoring.

  • Pursuit / Hunt

    Amazon EBS

    Inspect EBS volumes and snapshots for ransomware, malware, and corruption. Investigate supported system snapshots with Pursuit.

  • Hunt

    Amazon S3

    Find ransomware and malware in the objects stored in your Amazon S3 buckets.

  • Hunt

    Amazon EFS and FSx

    Inspect files in Amazon EFS, FSx for NetApp ONTAP, and FSx for Windows File Server for ransomware, malware, and corruption.

  • Hunt

    AWS Elastic Disaster Recovery

    Assess accessible AWS Elastic Disaster Recovery replicas for ransomware damage before selecting a recovery copy. NetApp SnapMirror is a separate storage replication path.

  • Hunt

    AWS Backup

    Inspect AWS Backup recovery points, including logically air-gapped vaults, and use the results in restore-test workflows.

View asset details

How it connects

From your sources to findings.

  1. 01

    Connect your AWS accounts

    Deploy the Cloud Connector in a dedicated AWS account and authorize access through cross-account roles.

  2. 02

    Select your AWS resources

    Choose the EC2 snapshots, AMIs, EBS volumes, S3 buckets, file systems, and backup recovery points to analyze.

  3. 03

    Act on the findings

    Review source evidence and recovery history in Elastio. Route findings into your security workflow.

Product scope

Choose the right analysis for the source.

Pursuit investigates supported system images and snapshots. Hunt analyzes the data and copies exposed by each connection. Review current operating-system scope and source requirements when selecting the systems to investigate.

Put it to work

Investigate an AMI before you launch it.

A machine image does not need to be running to carry evidence of compromise. Pursuit investigates the image and connects findings to files and system records. The documented research found malicious persistence in 42 of 500 analyzed public marketplace images.