Tuning Ransomware Defender Detections for Your Environment

• Case 2 - Release 2.5.7 or later - If values from the default Threshold settings are too small, too many unwanted events are raising, one can increase the thresholds as follows:

Case 2 - Release 2.5.7 or later - If values from the default Threshold settings are too small, too many unwanted events are raising, one can increase the thresholds as follows:

Make the changes below.

1. Open Ransomware Defender Icon, click on threshold

1. 
   
2. 
   
3. Change the signal strength threshold for "Warning" to equal 80
4. Change the signal strength threshold for dual vector "Warning" to equal 60 signals, 1 hour interval and 30 minute  2nd vector window.
5. Change the signal strength threshold for "Major" to equal 83
6. Change the signal strength threshold for "Critical" to equal 100
7. Click "Submit" to save the changes