Back to Setup Guide for Ransomware Protection

Run an External Program During a Ransomware Attack

Some customers have come up with their own mitigation techniques during a ransomware attack. These might involve removing user rights from directories, forcing a logout of a user account, etc.

To run an external program as an action in response to the monitor detecting active ransomware activity, use the Start Application action.

Run an application during a ransomware attack

IMPORTANT: When setting up the Start Application action it is important to pay attention to where the application/program is going to be run. This is shown near the top of the action configuration dialog.

“As I mentioned in the meeting, and I'll say it here, I've worked with several different monitoring systems in my career and nothing holds a candle to PA [Server Monitor].”

Adam A., Symantec, USA