Patent ID: 11971989
Assignee: PREDATAR LTD
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 11:
12. A computer-implemented method for restoring a computer system following an infection event, the computer system having a plurality of machines, in which a plurality of back-up copies are associated with each of the plurality of machines, and in which each of the plurality of back-up copies associated with a particular machine is a different version back-up, the method comprising:
searching the plurality of back-up copies to identify one or more clean-back-up copies that do not comprise a signature of the infection event; and
restoring one or more of the plurality of machines using a respective clean-back-up copy, wherein the plurality of machines are partitioned into at least:
a first-recovery-group of machines comprising a first plurality of the machines; and
a second-recovery-group of machines comprising a second plurality of machines, further comprising restoring the first-recovery-group of machines using a respective first-clean-back-up copy for each respective one of the first plurality of machines, each first-clean-back-up copy created before a first-infection-datum-time, further comprising restoring the second-recovery-group of machines using a respective second-clean-back-up copy for each respective one of the second plurality of machines, each second-clean-back-up copy created before a second-infection-datum-time, wherein the second-infection-datum-time is earlier than the first-infection-datum-time.