# Module `netapp_ontap.models.anti_ransomware_volume`

Copyright © 2022 NetApp Inc. All rights reserved.

This file has been automatically generated based on the ONTAP REST API documentation.

## Classes

`class AntiRansomwareVolumeSchema (*, only: Union[Sequence[str], Set[str]] = None, exclude: Union[Sequence[str], Set[str]] = (), many: bool = False, context: Dict = None, load_only: Union[Sequence[str], Set[str]] = (), dump_only: Union[Sequence[str], Set[str]] = (), partial: Union[bool, Sequence[str], Set[str]] = False, unknown: str = None)`

  The fields of the AntiRansomwareVolume object

  ### Ancestors

  - netapp_ontap.resource.ResourceSchema
  - marshmallow.schema.Schema
  - marshmallow.base.SchemaABC

  ### Class variables

  `attack_probability: str GET`

    Probability of a ransomware attack.
    `none` No files are suspected of ransomware activity.
    `low` A number of files are suspected of ransomware activity.
    `moderate` A moderate number of files are suspected of ransomware activity.
    `high` A large number of files are suspected of ransomware activity.

    Valid choices:

    - none
    - low
    - moderate
    - high
  `attack_reports: List[AntiRansomwareAttackReport] GET`

    The attack_reports field of the anti_ransomware_volume.

  `dry_run_start_time: ImpreciseDateTime GET`

    Time when Anti-ransomware monitoring `state` is set to dry-run value for starting evaluation mode.

  `space: AntiRansomwareVolumeSpace GET`

    The space field of the anti_ransomware_volume.

  `state: str GET POST PATCH`

    Anti-ransomware state.
    `disabled` Anti-ransomware monitoring is disabled on the volume. This is the default state in a POST operation.
    `disable_in_progress` Anti-ransomware monitoring is being disabled and a cleanup operation is in effect. Valid in GET operation.
    `dry_run` Anti-ransomware monitoring is enabled in the evaluation mode.
    `enabled` Anti-ransomware monitoring is active on the volume.
    `paused` Anti-ransomware monitoring is paused on the volume.
    `enable_paused` Anti-ransomware monitoring is paused on the volume from its earlier enabled state. Valid in GET operation.
    `dry_run_paused` Anti-ransomware monitoring is paused on the volume from its earlier dry_run state. Valid in GET operation.
    For POST, the valid Anti-ransomware states are only `disabled`, `enabled` and `dry_run`, whereas for PATCH, `paused` is also valid along with the three valid states for POST.

    Valid choices:

    - disabled
    - disable_in_progress
    - dry_run
    - enabled
    - paused
    - enable_paused
    - dry_run_paused
  `surge_as_normal: bool GET POST PATCH`

    Indicates whether or not to set the surge values as historical values.

  `suspect_files: List[AntiRansomwareVolumeSuspectFiles] GET`

    The suspect_files field of the anti_ransomware_volume.