Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW

Secure VM Recovery with Malware Scanning & YARA Rules

Veeam
05/08/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


When enterprises are hit with a cyber attack, they need to get back up and running fast. One of the biggest challenges with a fast recovery is ensuring that you do not reintroduce the threat that took your environment down. With the Veeam Data Platform, backup administrators and security teams alike have tremendous capabilities when it comes to ensuring that your data is restored fast and in a secure manner. Let's take a look at what a security-driven recovery process looks like. When it comes to restoring data, we have many options to choose from. For NAS and file share, we can instantly restore these, allowing users to get back up and running immediately. Similarly, Veeam Data Platform can protect physical or cloud workloads with our various Let's take a look at restoring a virtual workload in a secured manner. We can restore either from a replica or a backup, providing you the ability to get very low RPO. Additionally, sometimes you may not need to restore the entire system. With the ability to restore specific disks, files, or application-level items, backup administrators can have the granularity that they desire. Note here that I can restore directly to the cloud. This is a key benefit, particularly after a ransomware attack. In those cases, although your servers might still be powered on, forensic investigations or cyber insurance requirements may prevent you from actually using them. Having the ability to restore directly to the cloud provides you with the flexibility that you need during a disaster. Let's instantly recover Veeam back to our vSphere environment. Should a task such as a forensic investigation be required, you can restore to a new location, allowing you to choose the best-suited option. The Secure Restore function provides you with multiple capabilities. Here we can opt to perform an antivirus scan as part of the process. For situations where antivirus may not be enough, security teams can leverage YARA rules to uncover threats that may exist within the system. Should a threat be detected, you can choose to proceed with the restore, but disable network access, or abort the restore completely. To automate the process of finding the last clean backup, we can also select this check box, which will iterate through all of the restore points until a clean one is found. At this point, the instant recovery process mounts a read-only version of the backup and writes all changes to a Delta disk. Once a clean recovery point is found, backup administrators can then migrate the workload to production. Veeam Data Platform provides backup administrators and security teams alike with the tools that they need to get their job done. When disaster does strike, you need to know that you can get your mission-critical data and systems back up and running in a fast and secured process. To learn more about this and many other industry-leading features, visit Veeam.com today. Veeam Data Platform Veeam.com

TL;DR

  • Veeam's Secure Restore integrates antivirus and YARA rule scanning directly into the VM recovery process to prevent reintroduction of threats after cyber attacks.
  • Administrators can restore virtual machines, NAS, file shares, and cloud workloads with granular options including disk-level, file-level, or application-level recovery.
  • The platform supports direct-to-cloud restore, providing flexibility when on-premises infrastructure is unavailable due to forensic investigations or insurance requirements.

Summary

This demonstration showcases Veeam Data Platform's Secure Restore capabilities for recovering virtual machines after a cyber attack without reintroducing threats. The video walks through the restore workflow, highlighting options for instant recovery of NAS, file shares, and virtual workloads with granular restore capabilities at the disk, file, or application level. A key focus is the Secure Restore function, which integrates antivirus scanning and YARA rule-based threat detection directly into the recovery process. Administrators can configure automated scanning to iterate through restore points until a clean backup is found, with options to disable network access or abort the restore if threats are detected. The demo also emphasizes the flexibility to restore directly to cloud environments, which is particularly valuable when on-premises infrastructure remains unavailable due to forensic investigations or cyber insurance requirements. The instant recovery process mounts read-only backups with delta disks for changes, allowing safe validation before migrating workloads to production.

Chapters

0:00 - Introduction to Secure Recovery
0:35 - Restore Options Overview
1:01 - Virtual Workload Restore Process
1:58 - Secure Restore Function Demo

Key Quotes

0:13 "One of the biggest challenges with a fast recovery is ensuring that you do not reintroduce the threat that took your environment down."
2:07 "For situations where antivirus may not be enough, security teams can leverage YARA rules to uncover threats that may exist within the system."
2:24 "To automate the process of finding the last clean backup, we can also select this check Box, which will iterate through all of the restore points until a clean one is found."

Categories:
  • » Data Protection » Backup & Recovery
  • » Cybersecurity » Cloud Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Data Protection
  • Backup & Recovery
  • Cloud Security
  • Demo
  • Technical Deep Dive
  • Secure Restore
  • Ransomware Recovery
  • Malware Scanning
  • YARA Rules
  • VM Recovery
  • Cloud Restore
  • Instant Recovery
  • Backup Validation
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: Secure VM Recovery with Malware Scanning & YARA Rules

              Industry Events (Sponsor Hosted)

              • Aug
                13

                Harnessing AI for Secure Innovation in the Enterprise with Netskope & Omada

                08/13/202612:00 PM ET
                • Aug
                  19

                  Becoming Agent Ready with Cyera: Essential Strategies and Insights

                  08/19/202612:00 PM ET
                  More events

                  Upcoming Webinar Calendar

                  • 08/13/2026
                    12:00 PM
                    08/13/2026
                    Harnessing AI for Secure Innovation in the Enterprise with Netskope & Omada
                    https://www.truthinit.com/index.php/channel/2065/harnessing-ai-for-secure-innovation-in-the-enterprise-with-netskope-omada/
                  • 08/19/2026
                    12:00 PM
                    08/19/2026
                    Becoming Agent Ready with Cyera: Essential Strategies and Insights
                    https://www.truthinit.com/index.php/channel/2036/becoming-agent-ready-with-cyera-essential-strategies-and-insights/
                  • 09/02/2026
                    12:00 PM
                    09/02/2026
                    Unified Data Security in Action: Uncover, Analyze, and Resolve Threats
                    https://www.truthinit.com/index.php/channel/2045/unified-data-security-in-action-uncover-analyze-and-resolve-threats/
                  • 09/30/2026
                    04:00 AM
                    09/30/2026
                    AI Command Center: Optimizing Visibility and Control in Your Operations
                    https://www.truthinit.com/index.php/channel/2024/ai-command-center-optimizing-visibility-and-control-in-your-operations/
                  • 11/19/2026
                    01:00 PM
                    11/19/2026
                    360View: Govern, Secure & Recover Your Microsoft 365 Environment
                    https://www.truthinit.com/index.php/channel/2076/360view-govern-secure-recover-your-microsoft-365-environment/
                  Truth in IT
                  • Sponsor
                  • About Us
                  • Terms of Service
                  • Privacy Policy
                  • Contact Us
                  • Preference Management
                  Desktop version
                  Standard version