# ransomware-remediation

> Claude/Codex skill by [@eon-io](https://omgskills.com/library/eon-io/index.md) · 0 stars · Updated 2026-09-27

Investigate ransomware, malware, and data-anomaly findings on Eon-protected resources, and build a remediation playbook to restore affected resources to their last verified-clean recovery point. Covers counting and listing infected resources, reading security-scan evidence and anomaly graphs, resolving a clean snapshot and restore template per resource, and executing a human-confirmed bulk restore including the multi-party-approval handoff. Use whenever the user asks about ransomware/malware/data-anomaly detections, infected resources, or wants to clean up, remediate, or recover from a security incident.

## Install

```sh
git clone https://github.com/eon-io/claude-code-eon-plugin /tmp/claude-code-eon-plugin && ln -s /tmp/claude-code-eon-plugin/skills/ransomware-remediation ~/.claude/skills/ransomware-remediation
```

## From README

Ransomware Investigation & Remediation Eon's security scanner examines every backup snapshot with three detectors (ransomware behavior, malware, data anomaly) and assigns each resource a scan conclusion. There is no named-strain concept; you work from conclusions and their evidence. Part A — Investigate produces a per-resource incident report. Part B — Remediate restores affected resources to their latest clean snapshot. The user may enter at either part, but always show which resources will be touched before restoring anything. Wire shapes, filter JSON, enum values, status codes, and the enum-to-plain-language translation table live in references/api-details.md. Load it before constructing any call or presenting results. Part A — Investigate A1 — Scope the incident Resolve the project via listprojects (never ask the user for IDs you can look up). countinfectedresources for the headline count (excludes muted).

## Links

- HTML page: https://omgskills.com/library/eon-io/claude-code-eon-plugin/skills/ransomware-remediation/
- GitHub: https://github.com/eon-io/claude-code-eon-plugin
- Author: [@eon-io](https://omgskills.com/library/eon-io/index.md)

## More from this repo

- [aws-onboarding](https://omgskills.com/library/eon-io/claude-code-eon-plugin/skills/aws-onboarding/index.md) — Guide users through connecting their AWS source accounts to the Eon platform.
   - [@eon-io](https://omgskills.com/library/eon-io/index.md) · 0 stars
- [backup-policy-creation](https://omgskills.com/library/eon-io/claude-code-eon-plugin/skills/backup-policy-creation/index.md) — Guide users through creating a backup policy in Eon: choosing the policy type, defining the resource selector,...
   - [@eon-io](https://omgskills.com/library/eon-io/index.md) · 0 stars
- [cost-explorer-query](https://omgskills.com/library/eon-io/claude-code-eon-plugin/skills/cost-explorer-query/index.md) — Answer Eon customer questions about cloud-resource consumption — how many GB/month or USD/credits an account, project,...
   - [@eon-io](https://omgskills.com/library/eon-io/index.md) · 0 stars