{"id":4511,"date":"2026-10-12T12:58:39","date_gmt":"2026-10-12T10:58:39","guid":{"rendered":"https:\/\/www.klytic.com\/dms-ransomware-recovery\/"},"modified":"2026-10-12T13:31:43","modified_gmt":"2026-10-12T11:31:43","slug":"dms-ransomware-recovery","status":"publish","type":"page","link":"https:\/\/www.klytic.com\/en\/dms-ransomware-recovery\/","title":{"rendered":"Protecting a DMS against ransomware, and restoring it"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"4511\" class=\"elementor elementor-4511 elementor-4304\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-179b28e e-con-full kly-g e-flex e-con e-parent\" data-id=\"179b28e\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-43f94b1 e-con-full kly-g-hero e-flex e-con e-parent\" data-id=\"43f94b1\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-f73874d e-con-full kly-g-hero-in e-flex e-con e-parent\" data-id=\"f73874d\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5245b62 elementor-widget elementor-widget-text-editor\" data-id=\"5245b62\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-crumb\"><a href=\"\/en\/\">Home<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/\">Guides<\/a><span>\u203a<\/span><a href=\"\/en\/guides\/documents-document-management\/\">Documents &amp; document management<\/a><\/p><p class=\"kly-g-pill\" style=\"--pill:#2dd4bf\">Documents &amp; document management \u00b7 Understand<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5e9d499 elementor-widget elementor-widget-heading\" data-id=\"5e9d499\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Protecting a DMS against ransomware, and restoring it<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-baa3ac0 elementor-widget elementor-widget-text-editor\" data-id=\"baa3ac0\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-lead\">A DMS is protected by a combination of measures: accounts and permissions that limit what an attacker can encrypt, controlled links and synced workstations, and a backup out of reach of the compromised account. Restoring is a sequence of operations: contain, choose a point before the encryption, restore, check, reopen. Whatever was produced between that point and the incident is lost or must be rebuilt.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-39a6567 elementor-widget elementor-widget-text-editor\" data-id=\"39a6567\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p class=\"kly-g-meta\"><span>Updated <b>October 2026<\/b><\/span><span><b>7 min<\/b><\/span><span>Official sources cited<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-9234776 e-con-full kly-g-body e-flex e-con e-parent\" data-id=\"9234776\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t<div class=\"elementor-element elementor-element-54110bb e-con-full kly-g-article e-flex e-con e-parent\" data-id=\"54110bb\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-47aa374 elementor-widget elementor-widget-text-editor\" data-id=\"47aa374\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>What ransomware does to a DMS<\/h2><p>Ransomware encrypts the files it can access, then demands a ransom in exchange for the key. In a DMS, it acts with the permissions of the account or workstation it has infected. Three mechanisms make the damage worse:<\/p><ul><li><strong>sync<\/strong>: the infected workstation encrypts its local copy, then the sync client sends the encrypted files to the server, like an ordinary change, and from there to the other devices;<\/li><li><strong>history<\/strong>: each encrypted file becomes a new version. The old version can save the day, unless the attacker has sufficient rights to purge the history and the trash;<\/li><li><strong>backup<\/strong>: ANSSI observes that an attacker often seeks to encrypt, erase or disable the backup infrastructure, to prevent rebuilding.<\/li><\/ul><p>Some attacks also copy data before encrypting it. Restoring puts the files back in order. It does not deal with that part, which is a matter for crisis management and, where personal data is involved, the GDPR.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-be27ec9 elementor-widget elementor-widget-text-editor\" data-id=\"be27ec9\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Reducing the blast radius<\/h2><p>No one can promise that no workstation will be infected. You can limit what an infected workstation or account can reach.<\/p><h3>Write permissions<\/h3><p>An account that can only read a folder cannot encrypt it. Reference folders (templates, procedures, signed contracts) can be read-only for most people. Permissions are set by group and by folder, not \u201ceveryone edits everything.\u201d<\/p><h3>Administration accounts<\/h3><p>ANSSI recommends keeping these accounts to the strict minimum. They must be named, protected by two-factor authentication, and not used for everyday work.<\/p><h3>External links<\/h3><p>A link that gives edit rights to a stranger is a door. Outgoing links have a password, an expiry date and, in general, read-only permission.<\/p><h3>Synced workstations<\/h3><p>Sync only the folders needed on each workstation. Leave sensitive folders in the browser. Install updates quickly: ANSSI stresses that it is crucial to do so within a short time frame and through a controlled process. The most common entry point remains email: see <a href='\/en\/email-attachments-links-ransomware\/'>attachments, links and ransomware<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d964c0e elementor-widget elementor-widget-text-editor\" data-id=\"d964c0e\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Why the backup must be out of reach<\/h2><p>A backup accessible with the same account as production will be encrypted along with it. Three kinds of separation keep it safe:<\/p><ul><li><strong>a different identity<\/strong>: ANSSI requires dedicated, named backup administration accounts, and an infrastructure independent of production directories;<\/li><li><strong>immutability<\/strong>: once written, a backup can no longer be modified or deleted during its retention period;<\/li><li><strong>another site<\/strong>, and if possible an offline copy: ANSSI considers it essential and more robust than an immutable backup that remains online.<\/li><\/ul><p>Then there is depth. An intrusion can remain unnoticed for several weeks before the encryption. If retention is shorter than that delay, all available backups may contain the attacker or already corrupted files.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-92095cd elementor-widget elementor-widget-text-editor\" data-id=\"92095cd\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>The recovery sequence<\/h2><p>Restoring is not a button. It is a series of steps, and the order matters.<\/p><ol><li><strong>Contain.<\/strong> Isolate infected workstations from the network, suspend compromised accounts, disable sync and external links for the affected scope. ANSSI also advises keeping a time-stamped incident log, disconnecting backup media after checking they are clean, and not powering off machines, which can erase useful traces.<\/li><li><strong>Date the start.<\/strong> Identify the first encrypted file, and the account and workstation involved. This is what sets the restore point.<\/li><li><strong>Choose the restore point<\/strong> before the encryption, with a margin if the date is uncertain.<\/li><li><strong>Restore<\/strong> onto a clean environment. ANSSI recommends reinstalling from known media, then restoring data from a backup taken before the compromise. Where the tool allows it, restoring only the affected scope avoids overwriting work done elsewhere since.<\/li><li><strong>Check.<\/strong> Open files at random, make sure no encrypted file remains, fix the entry point, change passwords.<\/li><li><strong>Reopen access<\/strong> gradually. Workstations resync from the restored server, never the other way around. A workstation that has not been cleaned and reconnects sends its encrypted files back.<\/li><\/ol><p>In parallel, ANSSI recommends never paying the ransom, keeping the encrypted data (a key may be published later), filing a complaint, and having the crisis unit notify the CNIL in the event of a personal data breach.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f664075 elementor-widget elementor-widget-text-editor\" data-id=\"f664075\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>What is lost: RPO in practice<\/h2><p>Hypothetical case. A twenty-person firm backs up its documents every hour. On Monday, at 9:15 a.m., a synced workstation starts encrypting the \u201cClients\u201d folder. The alert is raised at 10:05 a.m.<\/p><p>The last clean point is the 9:00 a.m. backup. The \u201cClients\u201d folder returns to its 9:00 a.m. state. Changes made between 9:00 and 9:15 a.m. in that folder are lost. Those made in other folders are not, if the restore is limited to the affected folder. The assistant who saved three letters at 9:10 a.m. finds them in her mailbox and uploads them again.<\/p><p>This is what RPO, the maximum tolerable data loss, measures: the gap between the restore point and the incident. RTO, the maximum tolerable downtime, measures something else: the time before teams can work again. Both are decided before the incident, not during it.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-120788c elementor-widget elementor-widget-text-editor\" data-id=\"120788c\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Common mistakes<\/h2><ul><li><strong>Restoring before containing.<\/strong> The workstation still connected re-encrypts the restored files.<\/li><li><strong>Resyncing from the infected workstation.<\/strong> The local copy is the encrypted copy.<\/li><li><strong>Counting on the trash.<\/strong> It does not contain modified files, only deleted ones.<\/li><li><strong>Discovering the retention period on D-Day.<\/strong> If the intrusion dates back six weeks and retention is thirty days, choosing the restore point gets complicated.<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8cec89a elementor-widget elementor-widget-text-editor\" data-id=\"8cec89a\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Frequently asked questions<\/h2><h3>Is versioning enough against ransomware?<\/h3><p>It helps if the history is intact. It is not enough if the attacker was able to purge it. The difference is explained in <a href='\/en\/versioning-replication-document-backup\/'>versioning, replication and backup<\/a>.<\/p><h3>Should you pay the ransom?<\/h3><p>ANSSI recommends never paying it. Paying guarantees neither the key nor the absence of a new attack.<\/p><h3>How do you limit who can modify a folder?<\/h3><p>Through permissions by group and by folder. See <a href='\/en\/document-access-rights\/'>setting who sees which documents<\/a>.<\/p><h3>How do you prevent a link from becoming an entry point?<\/h3><p>With a password, an expiry date and read-only permission. See <a href='\/en\/document-sharing-links\/'>sharing links, partners and downloads<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-520bf09 kly-g-klytic elementor-widget elementor-widget-text-editor\" data-id=\"520bf09\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Where Klytic fits<\/h2><p>For Klytic Docs, backups run every hour. They are encrypted, immutable, replicated across several sites, monitored and kept for 30 days, and restores are tested every month. The targets are an RPO of under 2 hours for documents and an RTO of under 4 hours. A restore is requested from Klytic support, with the scope and the approximate date. It is included when the loss is caused by a malfunction of the Klytic service. After ransomware or a hacked account on your side, recovery is also included if your workstations were properly protected: updates applied, antivirus active. If they were insufficiently protected, it is subject to a paid support ticket, like a restore after a handling error. Details are on the <a href='\/en\/security-backup\/'>security and backup<\/a> page.<\/p><p>On the prevention side, Klytic Docs provides permissions per person, per group and per folder, two-factor authentication, an access log, and password-protected links with an expiry date. On Klytic\u2019s side, technical access is limited to operations and support, named and logged.<\/p><p>The limits: thirty days of retention do not cover a compromise discovered later. Klytic restores its services; cleaning up your workstations, network and directory is the responsibility of your IT team or provider. Klytic is not a SecNumCloud-qualified offering.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-dcc5e6d kly-g-disclaimer elementor-widget elementor-widget-text-editor\" data-id=\"dcc5e6d\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>This page describes a general framework. In the event of an incident, follow your recovery plan and the instructions of the competent authorities.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4310f52 kly-g-sources elementor-widget elementor-widget-text-editor\" data-id=\"4310f52\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Sources<\/h2><p>Consulted in October 2026.<\/p><ul><li>ANSSI and French Ministry of Justice (DACG), \u201cAttaques par ran\u00e7ongiciels, tous concern\u00e9s\u201d (Ransomware attacks: everyone is concerned), 2020: disconnected backups, limiting administration accounts, rapid updates; in the event of an incident, incident log, isolation, no powering off, keeping encrypted data, not paying, filing a complaint, restoring from a backup taken before the compromise. <a href='https:\/\/messervices.cyber.gouv.fr\/documents-guides\/anssi-guide-attaques_par_rancongiciels_tous_concernes-v1.0.pdf' rel='noopener' target='_blank'>messervices.cyber.gouv.fr<\/a><\/li><li>ANSSI, \u201cSauvegarde des syst\u00e8mes d\u2019information\u201d (Information system backup), guide ANSSI-BP-100, v1.1: attackers often target the backup infrastructure; dedicated accounts; offline more robust than online WORM; RPO and RTO (PDMA and DMIA). <a href='https:\/\/messervices.cyber.gouv.fr\/documents-guides\/anssi_fondamentaux_sauvegarde_systemes_dinformation_v1.1.pdf' rel='noopener' target='_blank'>messervices.cyber.gouv.fr<\/a><\/li><li>Klytic, Security and backup: immutable, encrypted, replicated backups, 30 days, restores tested every month, RTO under 4 h, RPO under 2 h. <a href='https:\/\/www.klytic.com\/securite-sauvegarde\/' rel='noopener' target='_blank'>klytic.com<\/a><\/li><li>Klytic, Hosting and sovereignty: technical access limited to operations and support, named and logged. <a href='https:\/\/www.klytic.com\/hebergement-souverainete\/' rel='noopener' target='_blank'>klytic.com<\/a><\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-f514d6a e-con-full kly-g-aside e-flex e-con e-parent\" data-id=\"f514d6a\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-ce55e60 elementor-widget elementor-widget-html\" data-id=\"ce55e60\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<nav class=\"kly-g-toc\" aria-label=\"On this page\"><p>On this page<\/p><ol><\/ol><\/nav>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-142c249 elementor-widget elementor-widget-text-editor\" data-id=\"142c249\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"kly-g-cta\"><h3>Prepare recovery before the incident<\/h3><p>Let\u2019s review your permissions, your links and your retention.<\/p><p><a class=\"kly-g-btn\" href=\"\/en\/contact\/\">Talk to an advisor \u2192<\/a><\/p><p style=\"margin:0\"><a class=\"kly-g-btn ghost\" href=\"\/en\/security-backup\/\">Security and backup<\/a><\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-3034f7c e-con-full kly-g-related e-flex e-con e-parent\" data-id=\"3034f7c\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;ekit_has_onepagescroll_dot&quot;:&quot;yes&quot;}\">\n\t\t\t\t<div class=\"elementor-element elementor-element-0617564 elementor-widget elementor-widget-text-editor\" data-id=\"0617564\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;ekit_we_effect_on&quot;:&quot;none&quot;}\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2>Further reading<\/h2><div class=\"kly-g-grid\"><a class=\"kly-g-card\" href=\"\/en\/versioning-replication-document-backup\/\" style=\"--cat:#0d9488\"><span class=\"c\">Understand \u00b7 Documents &amp; document management<\/span><span class=\"t\">Versioning, replication and document backup<\/span><span class=\"q\">Three mechanisms, three failures. Why a DMS that already keeps versions must still be backed up, shown failure by failure.<\/span><span class=\"m\"><span>6 min read<\/span><b>Read \u2192<\/b><\/span><\/a><a class=\"kly-g-card\" href=\"\/en\/document-access-rights\/\" style=\"--cat:#0d9488\"><span class=\"c\">Use \u00b7 Documents &amp; document management<\/span><span class=\"t\">Controlling who sees which documents<\/span><span class=\"q\">In Klytic Docs, access is set by account, by group and by team folder. Who administers, which rights to grant, how to review access.<\/span><span class=\"m\"><span>6 min read<\/span><b>Read \u2192<\/b><\/span><\/a><a class=\"kly-g-card\" href=\"\/en\/document-sharing-links\/\" style=\"--cat:#0d9488\"><span class=\"c\">Use \u00b7 Documents &amp; document management<\/span><span class=\"t\">Sharing links, partners and uploads<\/span><span class=\"q\">Share internally, send a protected link outside, work with a partner and avoid accidental sharing in Klytic Docs.<\/span><span class=\"m\"><span>7 min read<\/span><b>Read \u2192<\/b><\/span><\/a><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t<div class=\"elementor-element elementor-element-47ba7642 e-con e-atomic-element e-div-block-base e-default-div e-47ba7642-0a8d8cb \" data-id=\"47ba7642\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"47ba7642\" data-e-type=\"e-div-block\" data-id=\"47ba7642\">\n    <div class=\"elementor-element elementor-element-1957dcf0 e-con e-atomic-element e-div-block-base e-default-div e-1957dcf0-65bb45b \" data-id=\"1957dcf0\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"1957dcf0\" data-e-type=\"e-div-block\" data-id=\"1957dcf0\">\n    \t\t\t<p class=\"e-34902a51-b78d132 e-paragraph-base e-default-p\" data-interaction-id=\"34902a51\" data-e-type=\"widget\" data-id=\"34902a51\">Welcome offer<\/p>\n\t\t\t\t\t<h2 data-interaction-id=\"54c96233\" class=\"e-54c96233-632171d e-heading-base e-default-h2\" data-e-type=\"widget\" data-id=\"54c96233\">30 days free trial, migration support included<\/h2>\n\t\t\t\t\t<p class=\"e-6661c7ce-fdde46c e-paragraph-base e-default-p\" data-interaction-id=\"6661c7ce\" data-e-type=\"widget\" data-id=\"6661c7ce\">No-commitment trial. An advisor calls you back to understand your needs and prepare your Klytic workspace.<\/p>\n\t\t<div class=\"elementor-element elementor-element-761c01f e-con e-atomic-element e-div-block-base e-default-div e-761c01f-cf11a99 \" data-id=\"761c01f\" data-element_type=\"e-div-block\" data-e-type=\"e-div-block\" data-interaction-id=\"761c01f\" data-e-type=\"e-div-block\" data-id=\"761c01f\">\n    \t\t\t<a href=\"https:\/\/www.klytic.com\/en\/30-day-free-trial\/\" target=\"_self\" class=\"e-2f43419f-52885cf e-button-base e-default-a\" data-interaction-id=\"2f43419f\" data-e-type=\"widget\" data-id=\"2f43419f\">\n\t\ud83d\ude80 Start the free trial\n<\/a>\n\t\t\t\t\t<a href=\"https:\/\/www.klytic.com\/en\/pricing\/\" target=\"_self\" class=\"e-31327e4d-45bbc1a e-button-base e-default-a\" data-interaction-id=\"31327e4d\" data-e-type=\"widget\" data-id=\"31327e4d\">\n\tSee pricing\n<\/a>\n\t\t\n<\/div>\n\n<\/div>\n\n<\/div>\n\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"_seopress_titles_title":"DMS and ransomware: protect and restore | Klytic","_seopress_titles_desc":"Protect a DMS against ransomware and restore it: limit what an account can encrypt, isolate the backup, follow a recovery sequence.","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"DMS and ransomware: protect and restore | Klytic","_seopress_social_fb_desc":"Protect a DMS against ransomware and restore it: limit what an account can encrypt, isolate the backup, follow a recovery sequence.","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"DMS and ransomware: protect and restore | Klytic","_seopress_social_twitter_desc":"Protect a DMS against ransomware and restore it: limit what an account can encrypt, isolate the backup, follow a recovery sequence.","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_seopress_news_disabled":"","_seopress_video_disabled":"","_seopress_video":[],"_seopress_pro_schemas_manual":[],"_seopress_pro_rich_snippets_disable_all":"","_seopress_pro_rich_snippets_disable":[],"_seopress_pro_schemas":[],"footnotes":""},"class_list":["post-4511","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.klytic.com\/en\/wp-json\/wp\/v2\/pages\/4511","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.klytic.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.klytic.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.klytic.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.klytic.com\/en\/wp-json\/wp\/v2\/comments?post=4511"}],"version-history":[{"count":0,"href":"https:\/\/www.klytic.com\/en\/wp-json\/wp\/v2\/pages\/4511\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.klytic.com\/en\/wp-json\/wp\/v2\/media?parent=4511"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}