Anomaly Detection

Anomaly Detection

As Rubrik collects each backup snapshot’s metadata, it leverages machine learning to build a perspective of what is going on with the workload. The model is trained to identify trends that exist across all samples and classify new data by their similarities without requiring human input. The result is that Anomaly Detection detects anomalies, analyzes the threat, and helps accelerate recovery with a few clicks.

Anomaly Detection is available in the Rubrik Security Cloud as an application.

Anomaly Detection has a dedicated page that lists potential anomalous incidents with their location, cluster, file details, and snapshot time. If you have Cyber Recovery (discussed in a later section) enabled, objects that are part of a recovery plan will be grouped under that recovery plan.

Anomaly Detection

By looking at this page, you now have an understanding of which systems and applications have been affected by the cyber attack.

Now, let's dive deeper into which folders and files are impacted.