Antivirus engine from Veeam. Malware scans in Orchestrator use it by default, along with YARA rules and the infected flag carried by restore points.
Read more: Veeam Help Center
In the Ultra Transcenders books
Each book explains Veeam Threat Hunter in context, with comparison tables and the common traps.
Terms in this definition
- Orchestrator
Software, Kubernetes being an example, that looks after large numbers of containers throughout their life by scheduling, scaling, repairing and updating them.
- YARA
A rule language for recognising malware by pattern. Veeam can apply such rules to restore points during Scan Backup, Secure Restore and SureBackup, flagging affected workloads as Infected.
- RESTORE
Puts a Delta table back to how it was at an older point, picked by
TO VERSION AS OForTO TIMESTAMP AS OF. You needMODIFY, and onceVACUUMhas cleared the old files it can't succeed.
Related terms
- Scan Backup
Searches restore points that already exist for signs of malware, with Veeam Threat Hunter, an antivirus product or YARA rules doing the work. It helps identify the most recent clean point or look through what a backup contains, and no data is written back, which is where it differs from Secure Restore.
- Secure Restore
Before any data reaches the target, the chosen restore point is mounted on the mount server and checked with Veeam Threat Hunter, antivirus software or YARA rules. Infected files therefore stay out of production.