Overview
- Google moved the tools to general availability Tuesday, turning on ransomware detection by default for paid Workspace organizations.
- When Drive for desktop spots ransomware-like encryption, it pauses cloud syncing and alerts both the user and IT admins to contain the damage.
- The restoration tool lets people roll back many files at once to clean versions kept for 25 days, and it is available to all Workspace tiers and personal Google accounts.
- Admins can manage settings at the organizational-unit level, and endpoint pop-up alerts require Drive for desktop version 114 or newer.
- Files on an infected computer may still be encrypted, but copies stored in Drive stay protected and can be restored once the device is cleaned.