file/folder deletion by user | NetApp | Page 1

mild smelt Jan 7, 2026, 5:45 AM

#

Hi All,

I believe we can autid the file/folder deletion from Dii? Could you please help on where on the Dii Console I can view them?

shrewd kraken Jan 7, 2026, 3:33 PM

#

You're thinking of Workload Security, the anti-ransomware feature in DII. You can find it here.

mild smelt Jan 9, 2026, 7:41 AM

#

Do we have to enable any settings on Dii or the Netapp to get this report ?

shrewd kraken Jan 9, 2026, 8:18 AM

#

Do you have the Workload Security menu item but nothing is showing under Forensics? To actually get any information in there you need to deploy an agent and collectors for the SVM's you want to monitor. The underlying technology used is fpolicy in ONTAP.

mild smelt Jan 22, 2026, 2:57 PM

#

@shrewd kraken on the user column i see the SIDs and not the user name..

#

i have added the AD collector as well. i can see the username once i click on the SID hyperlink.. i see the screenshot you shared above has the username displayed

#file/folder deletion by user