When you run a recovery plan for ransomware and start a VM in validation, all events related to this workflow display in the Events tab.
View the Events tab during ransomware recovery of a VM to see all events related to the ransomware recovery process. For example, you can see events when you start a recovery plan for ransomware, start a VM in validation, stage a VM, recover it, and more. Event severity levels highlight important and critical events. For example, if a sensor does not install, or a VM did not successfully start, or if a snapshot fails to stage, you see events about them.
The same events are also displayed on the global events list found at .
