{"id":632,"date":"2026-10-12T13:05:31","date_gmt":"2026-10-12T11:05:31","guid":{"rendered":"https:\/\/mu.klytic.com\/dms-ransomware-recovery\/"},"modified":"2026-10-12T13:38:34","modified_gmt":"2026-10-12T11:38:34","slug":"dms-ransomware-recovery","status":"publish","type":"page","link":"https:\/\/mu.klytic.com\/en\/dms-ransomware-recovery\/","title":{"rendered":"Protecting a DMS against ransomware, and restoring it"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"632\" class=\"elementor elementor-632 elementor-506\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-8f285a6 e-con-full kly-g e-flex e-con e-parent\" data-id=\"8f285a6\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-4ac5e9a e-con-full kly-g-hero e-flex e-con e-parent\" data-id=\"4ac5e9a\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-e85e6e2 e-con-full kly-g-hero-in e-flex e-con e-parent\" data-id=\"e85e6e2\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2fb99b9 elementor-widget elementor-widget-text-editor\" data-id=\"2fb99b9\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-crumb\">Home<span>\u203a<\/span>Guides<span>\u203a<\/span>Documents &amp; document management<\/p><p class=\"kly-g-pill\" style=\"--pill:#2dd4bf\">Documents &amp; document management \u00b7 Understand<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-aa83d8b elementor-widget elementor-widget-heading\" data-id=\"aa83d8b\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Protecting a DMS against ransomware, and restoring it<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-46df61e elementor-widget elementor-widget-text-editor\" data-id=\"46df61e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-lead\">A DMS is protected by a combination of measures: accounts and permissions that limit what an attacker can encrypt, controlled links and synced workstations, and a backup out of reach of the compromised account. Restoring is a sequence of operations: contain, choose a point before the encryption, restore, check, reopen. Whatever was produced between that point and the incident is lost or must be rebuilt.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3a7a62a elementor-widget elementor-widget-text-editor\" data-id=\"3a7a62a\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-meta\"><span>Updated <b>October 2026<\/b><\/span><span><b>7 min<\/b><\/span><span>Official sources cited<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-69728a3 e-con-full kly-g-body e-flex e-con e-parent\" data-id=\"69728a3\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-5329c33 e-con-full kly-g-article e-flex e-con e-parent\" data-id=\"5329c33\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-f988a37 elementor-widget elementor-widget-text-editor\" data-id=\"f988a37\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>What ransomware does to a DMS<\/h2><p>Ransomware encrypts the files it can access, then demands a ransom in exchange for the key. In a DMS, it acts with the permissions of the account or workstation it has infected. Three mechanisms make the damage worse:<\/p><ul><li><strong>sync<\/strong>: the infected workstation encrypts its local copy, then the sync client sends the encrypted files to the server, like an ordinary change, and from there to the other devices;<\/li><li><strong>history<\/strong>: each encrypted file becomes a new version. The old version can save the day, unless the attacker has sufficient rights to purge the history and the trash;<\/li><li><strong>backup<\/strong>: ANSSI observes that an attacker often seeks to encrypt, erase or disable the backup infrastructure, to prevent rebuilding.<\/li><\/ul><p>Some attacks also copy data before encrypting it. Restoring puts the files back in order. It does not deal with that part, which is a matter for crisis management and, where personal data is involved, the GDPR.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7183125 elementor-widget elementor-widget-text-editor\" data-id=\"7183125\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Reducing the blast radius<\/h2><p>No one can promise that no workstation will be infected. You can limit what an infected workstation or account can reach.<\/p><h3>Write permissions<\/h3><p>An account that can only read a folder cannot encrypt it. Reference folders (templates, procedures, signed contracts) can be read-only for most people. Permissions are set by group and by folder, not \u201ceveryone edits everything.\u201d<\/p><h3>Administration accounts<\/h3><p>ANSSI recommends keeping these accounts to the strict minimum. They must be named, protected by two-factor authentication, and not used for everyday work.<\/p><h3>External links<\/h3><p>A link that gives edit rights to a stranger is a door. Outgoing links have a password, an expiry date and, in general, read-only permission.<\/p><h3>Synced workstations<\/h3><p>Sync only the folders needed on each workstation. Leave sensitive folders in the browser. Install updates quickly: ANSSI stresses that it is crucial to do so within a short time frame and through a controlled process. The most common entry point remains email: see <a href='\/en\/email-attachments-links-ransomware\/'>attachments, links and ransomware<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e54afa7 elementor-widget elementor-widget-text-editor\" data-id=\"e54afa7\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Why the backup must be out of reach<\/h2><p>A backup accessible with the same account as production will be encrypted along with it. Three kinds of separation keep it safe:<\/p><ul><li><strong>a different identity<\/strong>: ANSSI requires dedicated, named backup administration accounts, and an infrastructure independent of production directories;<\/li><li><strong>immutability<\/strong>: once written, a backup can no longer be modified or deleted during its retention period;<\/li><li><strong>another site<\/strong>, and if possible an offline copy: ANSSI considers it essential and more robust than an immutable backup that remains online.<\/li><\/ul><p>Then there is depth. An intrusion can remain unnoticed for several weeks before the encryption. If retention is shorter than that delay, all available backups may contain the attacker or already corrupted files.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-232089f elementor-widget elementor-widget-text-editor\" data-id=\"232089f\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>The recovery sequence<\/h2><p>Restoring is not a button. It is a series of steps, and the order matters.<\/p><ol><li><strong>Contain.<\/strong> Isolate infected workstations from the network, suspend compromised accounts, disable sync and external links for the affected scope. ANSSI also advises keeping a time-stamped incident log, disconnecting backup media after checking they are clean, and not powering off machines, which can erase useful traces.<\/li><li><strong>Date the start.<\/strong> Identify the first encrypted file, and the account and workstation involved. This is what sets the restore point.<\/li><li><strong>Choose the restore point<\/strong> before the encryption, with a margin if the date is uncertain.<\/li><li><strong>Restore<\/strong> onto a clean environment. ANSSI recommends reinstalling from known media, then restoring data from a backup taken before the compromise. Where the tool allows it, restoring only the affected scope avoids overwriting work done elsewhere since.<\/li><li><strong>Check.<\/strong> Open files at random, make sure no encrypted file remains, fix the entry point, change passwords.<\/li><li><strong>Reopen access<\/strong> gradually. Workstations resync from the restored server, never the other way around. A workstation that has not been cleaned and reconnects sends its encrypted files back.<\/li><\/ol><p>In parallel, ANSSI recommends never paying the ransom, keeping the encrypted data (a key may be published later), filing a complaint, and having the crisis unit notify the CNIL in the event of a personal data breach.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c844b2b elementor-widget elementor-widget-text-editor\" data-id=\"c844b2b\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>What is lost: RPO in practice<\/h2><p>Hypothetical case. A twenty-person firm backs up its documents every hour. On Monday, at 9:15 a.m., a synced workstation starts encrypting the \u201cClients\u201d folder. The alert is raised at 10:05 a.m.<\/p><p>The last clean point is the 9:00 a.m. backup. The \u201cClients\u201d folder returns to its 9:00 a.m. state. Changes made between 9:00 and 9:15 a.m. in that folder are lost. Those made in other folders are not, if the restore is limited to the affected folder. The assistant who saved three letters at 9:10 a.m. finds them in her mailbox and uploads them again.<\/p><p>This is what RPO, the maximum tolerable data loss, measures: the gap between the restore point and the incident. RTO, the maximum tolerable downtime, measures something else: the time before teams can work again. Both are decided before the incident, not during it.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6ae2f3e elementor-widget elementor-widget-text-editor\" data-id=\"6ae2f3e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Common mistakes<\/h2><ul><li><strong>Restoring before containing.<\/strong> The workstation still connected re-encrypts the restored files.<\/li><li><strong>Resyncing from the infected workstation.<\/strong> The local copy is the encrypted copy.<\/li><li><strong>Counting on the trash.<\/strong> It does not contain modified files, only deleted ones.<\/li><li><strong>Discovering the retention period on D-Day.<\/strong> If the intrusion dates back six weeks and retention is thirty days, choosing the restore point gets complicated.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a1a0863 elementor-widget elementor-widget-text-editor\" data-id=\"a1a0863\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Frequently asked questions<\/h2><h3>Is versioning enough against ransomware?<\/h3><p>It helps if the history is intact. It is not enough if the attacker was able to purge it. The difference is explained in <a href='\/en\/versioning-replication-document-backup\/'>versioning, replication and backup<\/a>.<\/p><h3>Should you pay the ransom?<\/h3><p>ANSSI recommends never paying it. Paying guarantees neither the key nor the absence of a new attack.<\/p><h3>How do you limit who can modify a folder?<\/h3><p>Through permissions by group and by folder. See <a href='\/en\/document-access-rights\/'>setting who sees which documents<\/a>.<\/p><h3>How do you prevent a link from becoming an entry point?<\/h3><p>With a password, an expiry date and read-only permission. See <a href='\/en\/document-sharing-links\/'>sharing links, partners and downloads<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3cc01b0 kly-g-klytic elementor-widget elementor-widget-text-editor\" data-id=\"3cc01b0\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Where Klytic fits<\/h2><p>For Klytic Docs, backups run every hour. They are encrypted, immutable, replicated across several sites, monitored and kept for 30 days, and restores are tested every month. The targets are an RPO of under 2 hours for documents and an RTO of under 4 hours. A restore is requested from Klytic support, with the scope and the approximate date. It is included when the loss is caused by a malfunction of the Klytic service. After ransomware or a hacked account on your side, recovery is also included if your workstations were properly protected: updates applied, antivirus active. If they were insufficiently protected, it is subject to a paid support ticket, like a restore after a handling error. Details are on the <a href='\/en\/security-backup\/'>security and backup<\/a> page.<\/p><p>On the prevention side, Klytic Docs provides permissions per person, per group and per folder, two-factor authentication, an access log, and password-protected links with an expiry date. On Klytic\u2019s side, technical access is limited to operations and support, named and logged.<\/p><p>The limits: thirty days of retention do not cover a compromise discovered later. Klytic restores its services; cleaning up your workstations, network and directory is the responsibility of your IT team or provider. Klytic is not a SecNumCloud-qualified offering.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bc67cad kly-g-disclaimer elementor-widget elementor-widget-text-editor\" data-id=\"bc67cad\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p>This page describes a general framework. In the event of an incident, follow your recovery plan and the instructions of the competent authorities.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4b7a6ac kly-g-sources elementor-widget elementor-widget-text-editor\" data-id=\"4b7a6ac\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Sources<\/h2><p>Consulted in October 2026.<\/p><ul><li>ANSSI and French Ministry of Justice (DACG), \u201cAttaques par ran\u00e7ongiciels, tous concern\u00e9s\u201d (Ransomware attacks: everyone is concerned), 2020: disconnected backups, limiting administration accounts, rapid updates; in the event of an incident, incident log, isolation, no powering off, keeping encrypted data, not paying, filing a complaint, restoring from a backup taken before the compromise. <a href='https:\/\/messervices.cyber.gouv.fr\/documents-guides\/anssi-guide-attaques_par_rancongiciels_tous_concernes-v1.0.pdf' rel='noopener' target='_blank'>messervices.cyber.gouv.fr<\/a><\/li><li>ANSSI, \u201cSauvegarde des syst\u00e8mes d\u2019information\u201d (Information system backup), guide ANSSI-BP-100, v1.1: attackers often target the backup infrastructure; dedicated accounts; offline more robust than online WORM; RPO and RTO (PDMA and DMIA). <a href='https:\/\/messervices.cyber.gouv.fr\/documents-guides\/anssi_fondamentaux_sauvegarde_systemes_dinformation_v1.1.pdf' rel='noopener' target='_blank'>messervices.cyber.gouv.fr<\/a><\/li><li>Klytic, Security and backup: immutable, encrypted, replicated backups, 30 days, restores tested every month, RTO under 4 h, RPO under 2 h. <a href='https:\/\/www.klytic.com\/securite-sauvegarde\/' rel='noopener' target='_blank'>klytic.com<\/a><\/li><li>Klytic, Hosting and sovereignty: technical access limited to operations and support, named and logged. <a href='https:\/\/www.klytic.com\/hebergement-souverainete\/' rel='noopener' target='_blank'>klytic.com<\/a><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9b3f2d4 e-con-full kly-g-aside e-flex e-con e-parent\" data-id=\"9b3f2d4\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-9ad23b9 elementor-widget elementor-widget-html\" data-id=\"9ad23b9\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"html.default\">\n\t\t\t\t\t<nav class=\"kly-g-toc\" aria-label=\"On this page\"><p>On this page<\/p><ol><\/ol><\/nav>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-aab8310 elementor-widget elementor-widget-text-editor\" data-id=\"aab8310\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<div class=\"kly-g-cta\"><h3>Prepare recovery before the incident<\/h3><p>Let\u2019s review your permissions, your links and your retention.<\/p><p><a class=\"kly-g-btn\" href=\"\/en\/contact\/\">Talk to an advisor \u2192<\/a><\/p><p style=\"margin:0\"><a class=\"kly-g-btn ghost\" href=\"\/en\/security-backup\/\">Security and backup<\/a><\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-05d6a6d e-con-full kly-g-related e-flex e-con e-parent\" data-id=\"05d6a6d\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-38807fe elementor-widget elementor-widget-text-editor\" data-id=\"38807fe\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<h2>Further reading<\/h2><div class=\"kly-g-grid\"><a class=\"kly-g-card\" href=\"\/en\/versioning-replication-document-backup\/\" style=\"--cat:#0d9488\"><span class=\"c\">Understand \u00b7 Documents &amp; document management<\/span><span class=\"t\">Versioning, replication and document backup<\/span><span class=\"q\">Three mechanisms, three failures. Why a DMS that already keeps versions must still be backed up, shown failure by failure.<\/span><span class=\"m\"><span>6 min read<\/span><b>Read \u2192<\/b><\/span><\/a><a class=\"kly-g-card\" href=\"\/en\/document-access-rights\/\" style=\"--cat:#0d9488\"><span class=\"c\">Use \u00b7 Documents &amp; document management<\/span><span class=\"t\">Controlling who sees which documents<\/span><span class=\"q\">In Klytic Docs, access is set by account, by group and by team folder. Who administers, which rights to grant, how to review access.<\/span><span class=\"m\"><span>6 min read<\/span><b>Read \u2192<\/b><\/span><\/a><a class=\"kly-g-card\" href=\"\/en\/document-sharing-links\/\" style=\"--cat:#0d9488\"><span class=\"c\">Use \u00b7 Documents &amp; document management<\/span><span class=\"t\">Sharing links, partners and uploads<\/span><span class=\"q\">Share internally, send a protected link outside, work with a partner and avoid accidental sharing in Klytic Docs.<\/span><span class=\"m\"><span>7 min read<\/span><b>Read \u2192<\/b><\/span><\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-539316dd e-con e-atomic-element e-div-block-base e-default-div e-c9fd865-4a50 \" data-id=\"539316dd\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"539316dd\" data-e-type=\"e-div-block\" data-id=\"539316dd\">\n    <div class=\"elementor-element elementor-element-4f79afcb e-con e-atomic-element e-div-block-base e-default-div e-4fa9fe-ce86 \" data-id=\"4f79afcb\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"4f79afcb\" data-e-type=\"e-div-block\" data-id=\"4f79afcb\">\n    \t\t\t<p class=\"e-4dcf5c70-2ec7 e-paragraph-base e-default-p\" data-interaction-id=\"330a7a35\" data-e-type=\"widget\" data-id=\"330a7a35\">Welcome offer<\/p>\n\t\t\t\t\t<h2 data-interaction-id=\"56f1f7d5\" class=\"e-347faa43-4e20 e-heading-base e-default-h2\" data-e-type=\"widget\" data-id=\"56f1f7d5\">30-day free trial, assisted migration<\/h2>\n\t\t\t\t\t<p class=\"e-7f6310da-1caa e-paragraph-base e-default-p\" data-interaction-id=\"2ce27288\" data-e-type=\"widget\" data-id=\"2ce27288\">No-commitment trial offer. An advisor will call you back to understand your needs and prepare your Klytic space.<\/p>\n\t\t<div class=\"elementor-element elementor-element-35ea29a1 e-con e-atomic-element e-div-block-base e-default-div e-1cd48b22-e6da \" data-id=\"35ea29a1\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"35ea29a1\" data-e-type=\"e-div-block\" data-id=\"35ea29a1\">\n    \t\t\t<a href=\"\/en\/30-day-free-trial\/\" target=\"_self\" class=\"e-4a7886e3-652d e-button-base e-default-a\" data-interaction-id=\"19bfa8f1\" data-e-type=\"widget\" data-id=\"19bfa8f1\">\n\t\ud83d\ude80 Start free trial\n<\/a>\n\t\t\t\t\t<a href=\"\/en\/pricing\/\" target=\"_self\" class=\"e-137e863d-dd0d e-button-base e-default-a\" data-interaction-id=\"326d82ab\" data-e-type=\"widget\" data-id=\"326d82ab\">\n\tSee pricing\n<\/a>\n\t\t\n<\/div>\n\n<\/div>\n\n<\/div>\n\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_seopress_titles_title":"DMS and ransomware: protect and restore | Klytic","_seopress_titles_desc":"Protect a DMS against ransomware and restore it: limit what an account can encrypt, isolate the backup, follow a recovery sequence.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"DMS and ransomware: protect and restore | Klytic","_seopress_social_fb_desc":"Protect a DMS against ransomware and restore it: limit what an account can encrypt, isolate the backup, follow a recovery sequence.","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"DMS and ransomware: protect and restore | Klytic","_seopress_social_twitter_desc":"Protect a DMS against ransomware and restore it: limit what an account can encrypt, isolate the backup, follow a recovery sequence.","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":""},"class_list":["post-632","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/mu.klytic.com\/en\/wp-json\/wp\/v2\/pages\/632","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mu.klytic.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/mu.klytic.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/mu.klytic.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/mu.klytic.com\/en\/wp-json\/wp\/v2\/comments?post=632"}],"version-history":[{"count":1,"href":"https:\/\/mu.klytic.com\/en\/wp-json\/wp\/v2\/pages\/632\/revisions"}],"predecessor-version":[{"id":758,"href":"https:\/\/mu.klytic.com\/en\/wp-json\/wp\/v2\/pages\/632\/revisions\/758"}],"wp:attachment":[{"href":"https:\/\/mu.klytic.com\/en\/wp-json\/wp\/v2\/media?parent=632"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}