Category: How Does SentinelOne Respond to Ransomware? / How does SentinelOne rollback work?
The SentinelOne rollback feature can be initiated from the SentinelOne Management console to return a Windows endpoint to its former state prior to the execution of a malicious process, such as ransomware, with a single click.
This feature also defeats ransomware that targets the Windows Volume Shadow Copy Service (VSS) in an effort to prevent restoration from backup.