How to protect SharePoint online & OneDrive from ransomware

Zwe Thu Ko 126 Reputation points
2022-03-07T02:02:51.397+00:00

Dear,

How to protect SharePoint online & OneDrive from ransomware ?
Pls let me know Microsoft Defender Endpoint can protect or not ?

Thanks

SharePoint
SharePoint
A group of Microsoft Products and technologies used for sharing and managing content, knowledge, and applications.
9,793 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Echo Du_MSFT 17,116 Reputation points
    2022-03-07T09:00:15.857+00:00

    Hello @Zwe Thu Ko

    How to protect SharePoint online & OneDrive from ransomware?

    If you are affected by ransomware, try the following:

    Immediately stop OneDrive for Business Sync or disconnect the mapped drive to SharePoint library.

    Ask your Company Administrator (or affected user) to attempt to restore files:

    a. SharePoint: See Restore a Document library

    b. OneDrive: See Restore a OneDrive library

    Pls let me know Microsoft Defender Endpoint can protect or not?

    Microsoft 365 organizations that have Microsoft Defender for Office 365 included in their subscription or purchased as an add-on can enable Safe Attachments for SharePoint, OneDrive, and Microsoft Teams for enhanced reporting and protection. For more information, see Safe Attachments for SharePoint, OneDrive, and Microsoft Teams.

    Note:

    The improved Microsoft 365 Defender portal is now available. This new experience brings Defender for Endpoint, Defender for Office 365, Microsoft 365 Defender, and more into the Microsoft 365 Defender portal.

    More information, please see "Microsoft Defender for Endpoint in Microsoft 365 Defender" article.

    Thanks,
    Echo Du

    ===============================

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.