File shares are among the most likely areas to be attacked via ransomware. CryptoSpike uses a multi-pronged technology approach to combat ransomware in NetApp file environments. Infected users are blocked from further access to NetApp file shares, helping to halt the spread of ransomware. Infected files are identified and can be recovered using NetApp snapshots, without having to over-write entire folders or volumes. Licensing is simple and affordable, based on the NetApp storage controller (no file or data size limits).