Veeam Data Platform v13 available: more security and hypervisor options

"Veeam integrates Coveware technology into Recon Scanner 3.0. This tool runs directly within the platform and flags suspicious behavior on all monitored endpoints. Examples include brute force attacks, unusual file activity, and unexpected network connections. The Consolidated Triage Inbox collects all findings in one place. Users can immediately see which threats are urgent via severity ratings. Suppression Rules help teams focus on real incidents rather than false positives."

"The new Malware Analysis AI Agent automatically analyzes suspicious activity. The system classifies malware, generates reports, and provides remediation advice. Veeam links findings to the MITRE ATT&CK framework for more context on threats. Backups are immutable by default to prevent recovery points from being modified. SAML-based SSO and least-privilege access controls limit exposure to attacks. Integrations with CrowdStrike, Palo Alto Networks, Splunk, and ServiceNow connect security and IT platforms for faster response times."

Recon Scanner 3.0 integrates Coveware and runs in-platform to flag suspicious endpoint behavior such as brute-force attacks, unusual file activity, and network connections. The Consolidated Triage Inbox aggregates findings with severity ratings and Suppression Rules to reduce false positives. Integration with Microsoft Sentinel correlates Recon Scanner data with broader threat intelligence for unified detection and response. The Malware Analysis AI Agent classifies malware, generates reports, offers remediation, and maps findings to the MITRE ATT&CK framework. Immutable backups, SAML SSO, and least-privilege access reduce exposure. Integrations with CrowdStrike, Palo Alto Networks, Splunk, and ServiceNow speed response. Instant Azure recovery enables fast cleanroom restores and cloud disaster recovery while expanded hypervisor support and a universal API improve flexibility.

Read at Techzine Global