Protect store and ecommerce servers from ransomware.

As REI's case study puts it, Mimic protects REI's AD estate from ransomware and alerts them to unauthorized changes. REI put Active Directory first, with plans to extend protection to its other critical applications. For what a Mimic node does on a domain controller today, read the Active Directory protection page.

On a protected server, the changes it needs stop at the point of execution: deleting shadow copies, stopping a protected security tool or changing files the store's applications depend on. DashCam records each blocked attempt: what it tried to change, when and the process behind it. Registers and handhelds stay out of scope, so the tools on them keep that job.

A holiday freeze holds planned changes until peak season ends. It doesn't hold attackers. Mimic keeps checking each change to the store, order and checkout servers it protects and stops unauthorized ones at the point of execution. Patches that wait for the freeze to lift are the window Virtual Patching covers, with a safeguard for the specific mechanism an analyzed vulnerability depends on.

Mimic protects the servers behind stores and ecommerce. In stores, that's the back-office and point-of-sale servers. Online, it's the ecommerce application and database servers. Behind both sit the order management and inventory servers and Active Directory. Each protected server gets a Mimic node and its own known-good profile. Registers, handhelds, store workstations, laptops and network devices stay out of scope.