Back to Setup Guide for Ransomware Protection

Run an External Program During a Ransomware Attack

Some customers have come up with their own mitigation techniques during a ransomware attack. These might involve removing user rights from directories, forcing a logout of a user account, etc.

To run an external program as an action in response to the monitor detecting active ransomware activity, use the Start Application action.

Run an application during a ransomware attack

IMPORTANT: When setting up the Start Application action it is important to pay attention to where the application/program is going to be run. This is shown near the top of the action configuration dialog.

“Wow, you guys are GOOD! Go get yourselves some lattes or something. :-) I won't be able to try the update for a little while, but the effort alone makes me smile.”

Jeremiah B., FLEXcon, USA