Patent ID: 11971989
Assignee: PREDATAR LTD
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A computer-implemented method for restoring a computer system following an infection event, the computer system having a plurality of machines, in which a plurality of back-up copies are associated with each of the plurality of machines, and in which each of the plurality of back-up copies associated with a particular machine is a different version back-up, the method comprising:
searching the plurality of back-up copies to identify one or more back-up copies that comprise a signature of the infection event;
selecting, subsequent to the searching the plurality of back-up copies, a back-up copy for a particular machine from the one or more back-up copies that comprise a signature of the infection event;
moving the selected back-up copy to a quarantine environment;
automatically cleaning the selected back-up copy in the quarantine environment to provide a clean-back-up copy; and
restoring one or more of the plurality of machines to a live environment using the clean-back-up copy.