elastioSearchRequest a demo

Search platform and solution pages, partners, blog posts, events, webinars, FAQs, and ransomware families.

Azure

Elastio for Microsoft Azure.

Investigate Azure VMs for evidence of compromise. Find ransomware, malware, and corruption in Azure storage and recovery copies.

Pursuit investigates VM snapshots and links findings to source evidence. Hunt inspects your Azure data so security and recovery teams can identify affected files and assess recovery points.

Request a demo
Assets we investigate

Coverage for your Azure services.

  • Pursuit / Hunt

    Azure Virtual Machines (VMs)

    Pursuit investigates supported Azure VM snapshots for evidence of compromise. Hunt inspects the snapshot contents for ransomware, malware, and corruption.

  • Pursuit / Hunt

    Azure Managed Disks

    Inspect Azure Managed Disks and snapshots with Hunt. Use supported system snapshots for Pursuit investigations.

  • Hunt

    Azure Blob Storage

    Find ransomware and malware in Azure Blob Storage. Hot, Cool, and Archive tiers follow their retrieval requirements.

  • Hunt

    Azure Files

    Inspect Azure file shares and share snapshots for ransomware, malware, and corruption.

  • Hunt

    Azure Site Recovery

    Assess accessible Azure Site Recovery replicas for ransomware damage before recovery. Geo-redundant storage is a separate storage capability, not a Site Recovery replica.

  • Hunt

    Azure Backup

    Inspect Azure Backup recovery points in Recovery Services vaults and review the findings before restoring.

View asset details

How it connects

From your sources to findings.

  1. 01

    Connect your Azure subscriptions

    Deploy the Azure Connector in a dedicated subscription and authorize access to your source subscriptions.

  2. 02

    Select your Azure resources

    Choose the Azure VMs, Managed Disks, Blob Storage, Azure Files, and backup recovery points to analyze.

  3. 03

    Act on the findings

    Review source evidence and recovery history in Elastio. Share results with the teams responsible for response and recovery.

Product scope

Choose the right analysis for the source.

Pursuit investigates supported system images and snapshots. Hunt analyzes the data and copies exposed by each connection. Review current operating-system scope and source requirements when selecting the systems to investigate.

Put it to work

Investigate a VM before the next move.

Investigate a supported Azure VM snapshot before migration or after remediation. Pursuit links findings to source evidence; Hunt assesses data and recovery copies. Use the results to decide what requires action before you proceed.