Threat Detection

This section contains events related to the advanced threat detection service of Veeam Data Cloud for Microsoft 365. When a backup policy session completes, Veeam Data Cloud analyzes the backed-up data and flags infected files as malware threats and suspicious encryption patterns as ransomware threats. An event is sent once for each detected threat, when the threat becomes active.

The advanced threat detection service is available for customers of the Advanced and Premium plans and depends on the AI consent settings of the Veeam Data Cloud organization. No events are sent for workload tenants where the service is not available.

For more information, see the Threats section of the Veeam Data Cloud User Guide.