Rubrik unveils Turbo Threat Hunting for rapid resolution

Rubrik has introduced a new feature known as Rubrik Turbo Threat Hunting, aimed at expediting cyber recovery by enabling rapid identification of clean recovery points.

Turbo Threat Hunting allows organisations to instantly identify clean recovery points across their entire data estates, significantly reducing downtime following cyber incidents.

The feature is reportedly capable of scanning up to 75,000 backups in under a minute, according to internal testing conducted by Rubrik.

A report from Rubrik Zero Labs indicated that 60% of IT and security leaders express significant concern regarding their organisation's capability to maintain business continuity amidst cyberattacks. Traditional processes of pinpointing clean backups can extend over several days or weeks, potentially exposing organisations to prolonged operational disruptions and financial losses. Rubrik positions Turbo Threat Hunting as a solution to these challenges, accelerating the scanning process to barely under a minute.

Anneka Gupta, Chief Product Officer at Rubrik, stated, "This is the fastest way to recover from a cyberattack. With Turbo Threat Hunting, we're not just reducing recovery times — we're redefining what's possible in cyber resilience."

"No other platform on the market can match our speed and scale, giving enterprises the confidence to quickly resume operations and protect their bottom line."

Traditional scanning methods typically involve examining each object individually or navigating through numerous interfaces. In contrast, Turbo Threat Hunting utilises pre-computed hashes stored within Rubrik's metadata, thus avoiding the need for file-by-file scanning. This allows for the immediate identification of recovery points that are clear of malware or other threats.

The primary features of Turbo Threat Hunting include pre-computed hashing, which facilitates the immediate detection of malicious files within Rubrik's metadata without requiring individual file assessments. Updated backup metadata assists in quarantining malicious files, thereby mitigating the risk of human error when selecting the latest uncompromised backups. Multi-cluster scanning enables the identification of clean backups across single or multiple clusters with a single action, enhancing the efficiency of pinpointing recovery points throughout all data scopes.

Additionally, the feature is designed to perform full estate analysis with minimal production impact during sweeps across all workloads.

Turbo Threat Hunting is currently in beta release for Rubrik's Enterprise Edition and cloud customers, with general availability anticipated by the end of January 2025.