Azure

Elastio for Microsoft Azure.

Investigate Azure VMs for evidence of compromise. Find ransomware, malware, and corruption in Azure storage and recovery copies.

Pursuit investigates VM snapshots and links findings to source evidence. Hunt inspects your Azure data so security and recovery teams can identify affected files and assess recovery points.

Assets we investigate

Coverage for your Azure services.

  • Pursuit / Hunt

    Azure Virtual Machines (VMs)

    Investigate Azure VM snapshots for evidence of compromise, with findings linked to the files and system records behind them.

  • Pursuit / Hunt

    Azure Managed Disks

    Inspect Azure Managed Disks and snapshots with Hunt. Use supported system snapshots for Pursuit investigations.

  • Hunt

    Azure Blob Storage

    Find ransomware and malware in Azure Blob Storage. Hot, Cool, and Archive tiers follow their retrieval requirements.

  • Hunt

    Azure Files

    Inspect Azure file shares and share snapshots for ransomware, malware, and corruption.

  • Hunt

    Azure Site Recovery

    Assess accessible Azure Site Recovery replicas and geo-redundant storage for ransomware damage before recovery.

  • Hunt

    Azure Backup

    Inspect Azure Backup recovery points in Recovery Services vaults and review the findings before restoring.

View asset details

How it connects

From your sources to findings.

  1. 01

    Connect your Azure subscriptions

    Deploy the Azure Connector in a dedicated subscription and authorize access to your source subscriptions.

  2. 02

    Select your Azure resources

    Choose the Azure VMs, Managed Disks, Blob Storage, Azure Files, and backup recovery points to analyze.

  3. 03

    Act on the findings

    Review source evidence and recovery history in Elastio. Share results with the teams responsible for response and recovery.

Put it to work

Check recovery copies before you restore.

A retained recovery point gives you a copy to restore. Hunt adds analysis of the data inside it. Review affected files and compare analyzed recovery points when choosing a restore candidate.