On-Premises

Elastio for on-premises.

Investigate compromises in VMware system copies. Find ransomware and malware in VMware snapshots and VM recovery points from your existing backup platforms.

Pursuit investigates supported VMware system copies. Hunt inspects VMware snapshots and backup contents, recording results against each analyzed copy so your team can compare recovery candidates.

Assets we investigate

VMware and your backup platforms.

  • Pursuit / Hunt

    VMware Snapshots

    Investigate VMware snapshots for evidence of compromise with Pursuit. Run Hunt on snapshot contents to find ransomware, malware, and corruption.

  • Hunt

    Veeam Backup & Replication

    Inspect VM recovery points through your Veeam connection and compare Hunt results before restoring.

  • Hunt

    Commvault

    Inspect VM recovery points provided by Commvault and keep findings linked to the copy analyzed.

  • Hunt

    Cohesity DataProtect

    Inspect DataProtect-managed recovery points for VMware and record ransomware and malware findings.

  • Hunt

    Rubrik

    Inspect Rubrik-managed VM recovery points and review analysis history before choosing a restore candidate.

  • Hunt

    NetBackup

    Inspect VM recovery points exposed by NetBackup for ransomware, malware, and corruption.

View asset details

How Hunt connects

From your sources to findings.

  1. 01

    Run the connector

    Deploy the Backup Connector inside your network on a supported hosting environment.

  2. 02

    Connect your backups

    Connect the VMware snapshots selected for Pursuit and Hunt analysis. For backup recovery points, authorize the supported backup-platform path. No Pursuit agent is installed on the inspected guest.

  3. 03

    Review the results

    Use file findings and recovery-point history in the Elastio console. Send relevant findings to your SOC.

Product scope

Choose the right analysis for the source.

Pursuit investigates supported system images and snapshots. Hunt analyzes the data and copies exposed by each connection. Review current operating-system scope and source requirements when selecting the systems to investigate.

Put it to work

Distinguish the source from the connector host.

Connector environments include VMware vSphere and vSAN, Nutanix AHV, Red Hat OpenShift, and Proxmox VE. Analysis uses recovery points exposed by the connected backup platform.