NetApp Ransomware Resilience for Microsoft Sentinel

Solution: NetApp Ransomware Resilience

NetApp Ransomware Resilience Logo

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Solutions Index


Attribute Value
Publisher NetApp
Support Tier Partner
Support Link https://support.netapp.com
Categories Security - Threat Protection,Storage
Version 3.1.0
Author NetApp - support@netapp.com
First Published 2026-02-16
Last Updated 2026-07-28
Solution Folder NetApp Ransomware Resilience
Marketplace Azure Marketplace · Popularity: 🔵 Medium (76%)

NetApp Ransomware Resilience - Comprehensive security solution for detecting and responding to ransomware threats across NetApp storage environments.

Data Connectors

This solution does not include data connectors.

This solution may contain other components such as analytics rules, workbooks, hunting queries, or playbooks.

Content Items

This solution includes 10 content item(s):

Content Type Count
Playbooks 10

Playbooks

Name Description Tables Used
NetApp RRS Manual IP to Volume Offline Manually trigger playbook to take a volume offline based on IP address enrichment -
NetApp Ransomware Resilience Async Poll Playbook This playbook polls NetApp Ransomware Resilience job status asynchronously until completion or timeo... -
NetApp Ransomware Resilience Authentication Playbook This playbook creates a shared Key Vault for NetApp Ransomware Resilience credentials and provides a... -
NetApp Ransomware Resilience Block User Playbook This playbook blocks a user by calling the NetApp Ransomware Resilience block-user API endpoint afte... -
NetApp Ransomware Resilience Enrich IP Playbook This playbook enriches IP data by calling the updated NetApp Ransomware Resilience enrich IP address... -
NetApp Ransomware Resilience Enrich StorageVM Playbook This playbook enriches storage data by calling the updated NetApp Ransomware Resilience enrich stora... -
NetApp Ransomware Resilience Unblock User Playbook This playbook unblocks a user by calling the NetApp Ransomware Resilience unblock-user API endpoint ... -
NetApp Ransomware Resilience Volume Offline Playbook This playbook takes a NetApp volume offline using the updated NetApp Ransomware Resilience take-volu... -
NetApp Ransomware Resilience Volume Online Playbook This playbook takes a NetApp volume online by calling the NetApp Ransomware Resilience take-volume-o... -
NetApp Ransomware Resilience Volume Snapshot Playbook This playbook creates a NetApp volume snapshot using the updated NetApp Ransomware Resilience take-s... -

Release Notes

Version Date Modified (DD-MM-YYYY) Change History
3.1.0 30-06-2026 Added three new playbooks: Block User, Unblock User, and Volume Online for user access containment/recovery and volume restoration.
3.0.0 16-12-2025 Added initial changes for Playbooks, Data Connectors and Analytics Rules.

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Solutions Index