Veeam Recon Scanner Proactive Threat Detection

This solution brief details the Veeam Recon Scanner, a lightweight software agent integrated into the Veeam Data Platform Premium Edition, designed for proactive threat detection in data resilience. Developed in collaboration with Coveware, the Recon Scanner is unique in the data protection market for its behavior-based detection capabilities, which are informed by real-world ransomware incidents. The scanner continuously monitors Veeam environments for unusual user behavior, unexpected network connections, suspicious file activities, and data exfiltration attempts. It provides key benefits such as proactive threat detection, rapid deployment across multiple servers, secure data handling, and integration with third-party applications via API. The findings from the scanner are mapped to known adversary tactics and techniques, enabling IT and security teams to take swift preventive actions against potential cyberattacks. Additionally, a case study illustrates its effectiveness in detecting and mitigating brute force attacks, thereby safeguarding sensitive data.