I noticed some of my Hyper-V virtual servers went missing today. After checking the logs, I found that certain virtual servers were deleted and their disk files disappeared as well. Fortunately, I managed to restore everything. Strangely, Huntress didn't flag any threats. Has anyone experienced this before? Is it a common issue or could it be something malicious? What should I do next?
2 Answers
That's a concerning situation! Generally, virtual servers shouldn't just disappear like that. I’d recommend you look into possible threats. Bringing in an expert to investigate might be a good idea, especially since you haven't seen any flags from Huntress.
When you mention Hyper-V servers, I assume you're talking about the VMs in Hyper-V Manager, right? Just clarify that you’re checking the correct locations since the failover cluster and Hyper-V Manager can show different statuses.
Yes, I mean the Hyper-V VMs in the manager. I’ve checked and nothing unusual is showing on the host. I've reset all credentials already.
Definitely reset all your admin accounts as a precaution. I checked the network logs, and everything seems normal from known hosts, but it’s better to be safe.