Technology company Rubrik will use generative AI to thwart a cyberattack.

Rubrik introduces the Cyber ​​Recovery Tool, a new feature powered by Generative AI. This collection of LLM models aims to help complete a cyber attack with the least possible negative consequences.

For whom

Cyber ​​​​Recovery is primarily aimed at customers who run the applications necessary for their business via virtual machines. In such an incident, time is often of the essence: the quicker the response, the lower the risk of data loss or theft.

Dealing with such an incident can be a time-consuming task even for talented people who know what they are doing. Often not even all data can be recovered. According to Rubrik’s own report, only 16 percent of organizations are able to retrieve all data after paying a ransom due to an incident. That’s about every sixth.

With a little help from AI

According to the rubric, generative AI can help here. Cyber ​​Recovery uses controlled workflows and offers an extensive list of suggestions for security teams. The system also supports the teams here.

The AI ​​would help companies with three things in particular:

• Create a step-by-step plan to recover unaffected files from their last snapshot and revert infected files to their last snapshot before the attack
• Reduce the risk of reinfection with a more secure VM recovery process by identifying vSphere templates to create a more secure virtual machine with no undetected operating system vulnerabilities
• Based on a threat analysis of the data, create a to-do list for the AI ​​to minimize application downtime, with clear suggestions on which files and snapshots are safe to use for clean recovery

Rubrik recently acquired Israeli company Laminar. The startup specializes in data security in the cloud. To protect against ransomware, the company has been using the Rubrik Cloud Vault service for several years.