Data Recovery · Incident Response · Incident Response
SQL Server LockBit + RAID-5 degraded · ERP DB · if one more disk fails the data is gone
A manufacturing firm's SQL Server 2019 was encrypted by LockBit, and at the same time the RAID-5 array has 1 failed disk (DEGRADED). If a second disk fails the data is completely lost. ERP + accounting + sales hold 8 days of data. The last clean backup is 6 days old. You will make 11 critical decisions in sequence.
Before you start the scenario
- You are the decision-maker in this incident · every choice leaves time/cost/reputation behind
- There are no wrong answers · just like in real life · but some paths are more expensive
- You can restart it anytime · try different paths
- At the end, a 3-axis score + alternative routes are shown