Skip to content

About

Ransomware Activated Fuse. This public repository provides documentation, issue tracking, and community support. The application source code is maintained privately and is not distributed through this repository.

Resources

Security policy

Stars

0 stars

Watchers

0 watching

Forks

Latest commit

 

History

7 Commits

Folders and files

Repository files navigation

SnapShield

SnapShield by 45Drives protects Samba file servers from ransomware. It watches file activity on your shares, scores suspicious behaviour, plants honeyfiles that no legitimate user should touch, and stops an attack before it spreads.

This repository is the public home for SnapShield's documentation and bug reports. The packages themselves come from the 45Drives package repository.

How it works

How SnapShield works: 1. Watch — SnapShield's Samba module sees every file change on your protected shares. 2. Score — each change is scored against your snapshots, with behaviour checks and decoy honeyfiles. 3. Stop — suspicious clients are banned before the attack spreads, and you are alerted. 4. Recover — restore affected files from snapshots in the SnapShield dashboard.

Quick start

On the file server, as root:

curl -sSL https://raw.githubusercontent.com/45Drives/SnapShield-public/main/setup.sh | sudo bash

This adds the 45Drives Community repository, installs Cockpit and the SnapShield Cockpit plugin, and turns Cockpit on. Then:

  1. Open https://<your-server>:9090 and sign in with an administrator account.
  2. Choose Snapshield Dashboard in the menu.
  3. Follow the setup wizard. It installs the rest of SnapShield and configures it.

Enterprise customers add --enterprise:

curl -sSL https://raw.githubusercontent.com/45Drives/SnapShield-public/main/setup.sh | sudo bash -s -- --enterprise

Prefer to read a script before running it? Download it first, then run it: curl -sSLO https://raw.githubusercontent.com/45Drives/SnapShield-public/main/setup.sh && less setup.sh && sudo bash setup.sh. Add --dry-run to see every change without making any. The installation guide covers all options and manual setup.

Supported systems

Operating system Versions
Rocky Linux, RHEL, AlmaLinux 8, 9
Ubuntu 20.04 LTS, 22.04 LTS

Documentation

Start with the documentation index, or jump to:

Community and Enterprise

Community Enterprise
Price Free Paid subscription per server, with a six-month free trial
Ransomware protection Included Included
Control Panel management — Included
Support Documentation, the 45HomeLab Forum and GitHub issues 45Drives support at info@45drives.com — see SUPPORT.md

Every server starts on Community, and the license — not the package repository — decides the edition: an Enterprise license unlocks Enterprise features on a server installed from either repository. See Licensing for the full comparison.

Questions

Ask questions and get help from other users on the 45HomeLab Forum. See SUPPORT.md for all the ways to get help.

Reporting bugs and requesting features

Open an issue and pick a template. Please include your SnapShield version and operating system, and remove hostnames, IP addresses and license keys from any logs you paste.

Found a security vulnerability? Do not open a public issue. Follow SECURITY.md instead.

Releases

Release notes are published under Releases.

About

Ransomware Activated Fuse. This public repository provides documentation, issue tracking, and community support. The application source code is maintained privately and is not distributed through this repository.

Resources

Security policy

Stars

0 stars

Watchers

0 watching

Forks

Releases

Packages

Used by

Contributors

Languages