SIREN

Practice session

During a post-compromise investigation, an IR engineer discovers that ransomware encrypted hundreds of files. Which SentinelOne remediation action can restore those files to their pre-attack state without relying on a traditional backup solution?

Loading your practice session…