File rollback from ransomware alerts

Datto EDR now allows administrators to perform file rollbacks directly from the Alert Details page. This brings recovery actions into the ransomware detection workflow, so your team can move from alert review to response faster. 

When a ransomware alert needs action, administrators can initiate rollback from the same page they use to investigate the threat. The system also adds an automatic comment to the alert with the timestamp and initiating user, helping maintain a clear audit trail. 

This enhancement helps reduce mean time to recovery and improves response efficiency for MSPs managing ransomware events across client environments. 

Learn more about file rollback from ransomware for Datto EDR here.