Nasuni for Microsoft Sentinel

The Nasuni Ransomware Protection Add-on service is designed to proactively defend your file shares, stop attacks, and give you a detailed report of files affected by an attack so that you can rapidly return to productivity when an attack occurs. These cyber event logs are immediately shared with Microsoft Sentinel for further analysis and response. Combined with the Nasuni File Data platform’s core protection and rapid recovery capabilities, it delivers enhanced ransomware resilience for your file shares, regardless of how much data you have or where it is located.

With Microsoft Sentinel and Nasuni’s cloud-native ransomware protection platform, SecOps teams can provide better protection for the vast amount of data in their company file shares, and enable enterprise-grade coordination of data security across all aspects of their organization.

Included with Nasuni for Microsoft Sentinel are analytic queries designed to leverage Nasuni’s detection capabilities at the edge, and raise incidents based on ransomware attacks in the Microsoft Sentinel ecosystem, enabling a wide variety of secondary actions, monitoring, and reporting. A hunting query is also included to identify directory or file deletes.

Users will have the ability to create additional queries/responses based on individual needs. Nasuni is continuing to expand upon this offering, with additional queries and playbooks planned for future updates.