The integration detects malicious files in backups, data anomalies, unauthorized access events, and ransomware payloads. When threats are identified, Druva's telemetry triggers alerts in Sentinel, enabling security teams to act before damage spreads across the environment.
