Srinivasan Krishnappa
Ransomware & database recovery engineer · 10 years in data recovery
Srinivasan Krishnappa is the ransomware and database recovery engineer behind AS. He has handled and resolved more than 656 ransomware recovery cases across a wide range of industries and technology environments, working with ransomware families and variants including LockBit, LockBit 3.0, Locky, Makop, Akira, Everest, Play, Medusa, among many others.
His work spans complex enterprise environments — VMware ESXi and virtual-machine recovery, Veeam Backup and VBK recovery, Microsoft SQL Server, SAP and SAP HANA, Microsoft Dynamics NAV, Focus ERP, hospital information systems (HMIS) and other large-scale database and ERP applications — for hospitals, universities, export companies, manufacturers and other enterprises running mission-critical systems.
His specialization goes beyond conventional file recovery: he works at the database and backend-structure level, analysing and reconstructing database structures, tables and relationships, indexes, metadata, database pages, headers and allocation structures, along with corrupted database objects, damaged records, virtual-machine storage and backup structures. Because enterprise applications ultimately depend on their underlying databases, understanding those internal structures and relationships is what makes advanced recovery possible.
He builds each recovery approach from the actual condition of the underlying data — from complex database corruption and ransomware damage to backup and virtual-machine failures. AS is deliberately a one-person practice: the engineer who assesses your case is the one who does the recovery, and every case begins with an honest assessment of what is realistically recoverable. Where data cannot be brought back, he says so — there are no guaranteed-recovery claims here, because no one can honestly make them.
The technical posts published here come from that casework: what to do in the first hour, what makes a situation worse, and what an assessment can realistically establish.
Dealing with a recovery situation?
Describe what happened and we'll tell you what looks realistic.
Posts by Srinivasan Krishnappa
Incidents & response6
- Most Active Ransomware Groups in 2026: The Current Ranking5 min read · Oct 14, 2026
- Should You Pay the Ransom? What to Weigh7 min read · Sep 24, 2026
- Suspected Data Theft by an Employee? First Steps6 min read · Sep 24, 2026
- Why Ransomware Finds Your Backups First6 min read · Sep 24, 2026
- Multiple Systems Down at Once? Where to Start6 min read · Sep 24, 2026
- Ransomware and Partly Encrypted Database Files5 min read · Sep 21, 2026
Ransomware families46
- Crypto24 Ransomware Recovery: Stealthy Attacks and EDR Bypass4 min read · Oct 15, 2026
- Embargo Ransomware Recovery: Rust Toolkit That Disables Security Tools4 min read · Oct 15, 2026
- Gunra Ransomware Recovery: Conti Code, Windows and Linux4 min read · Oct 15, 2026
- Kairos Data Extortion: Stolen Data Without Encryption4 min read · Oct 15, 2026
- Nova Ransomware Recovery: The Rust Encryptor Formerly RALord4 min read · Oct 15, 2026
- Devman Ransomware Recovery: The DragonForce Spin-off4 min read · Oct 15, 2026
- KillSec Ransomware Recovery: After the Operation KillSwitch Takedown5 min read · Oct 15, 2026
- NightSpire Ransomware Recovery: .nspire Files, Databases and VMs5 min read · Oct 15, 2026
- MedusaLocker Ransomware Recovery: What's Recoverable4 min read · Oct 14, 2026
- Spirals Ransomware Recovery: What's Recoverable4 min read · Oct 14, 2026
- Emperador Ransomware: New Extortion Group of 20263 min read · Oct 14, 2026
- Panzer Ransomware Recovery: What's Recoverable4 min read · Oct 14, 2026
- Settra Ransomware Recovery: What's Recoverable4 min read · Oct 14, 2026
- 0Apt Ransomware Recovery: What's Recoverable5 min read · Oct 6, 2026
- Hunters International Ransomware Recovery: What's Recoverable5 min read · Oct 4, 2026
- Brain Cipher Ransomware Recovery: What's Recoverable3 min read · Oct 2, 2026
- Chaos Ransomware Recovery: What's Recoverable4 min read · Oct 2, 2026
- Interlock Ransomware Recovery: What's Recoverable4 min read · Oct 2, 2026
- AuditTeam Ransomware: What Is Known So Far3 min read · Oct 2, 2026
- Storm Ransomware: A New Group Hitting US Firms Fast3 min read · Oct 2, 2026
- MetaEncryptor Ransomware Recovery: What's Recoverable3 min read · Sep 27, 2026
- ShinyHunters: Data-Theft Extortion From Cloud Platforms4 min read · Sep 27, 2026
- Silent Ransom Group (Luna Moth): Data Theft Without Encryption4 min read · Sep 27, 2026
- Dire Wolf Ransomware Recovery: What's Recoverable4 min read · Sep 27, 2026
- Vexy Ransomware: New Group With India as Its Top Target3 min read · Sep 27, 2026
- Payload Ransomware Recovery: What's Recoverable4 min read · Sep 24, 2026
- Deadlock Ransomware Recovery: What's Recoverable4 min read · Sep 24, 2026
- Krybit Ransomware Recovery: What's Recoverable4 min read · Sep 24, 2026
- Everest Ransomware Recovery: What's Recoverable4 min read · Sep 14, 2026
- Lynx Ransomware Recovery: What's Recoverable4 min read · Sep 14, 2026
- Anubis Ransomware Recovery: What's Recoverable4 min read · Sep 14, 2026
- Rhysida Ransomware Recovery: What's Recoverable4 min read · Sep 14, 2026
- Black Basta Ransomware Recovery Guide4 min read · Sep 12, 2026
- LockBit 5.0 Ransomware Recovery: ESXi, NAS and Veeam Backups7 min read · Sep 12, 2026
- Cl0p Ransomware Recovery: What's Recoverable3 min read · Sep 12, 2026
- Cactus Ransomware Recovery: What's Recoverable3 min read · Sep 12, 2026
- INC Ransom Recovery: What's Recoverable3 min read · Sep 12, 2026
- RansomHub Ransomware Recovery Guide3 min read · Sep 12, 2026
- LockBit Ransomware Recovery: What's Recoverable4 min read · Sep 12, 2026
- Medusa Ransomware Recovery: What's Recoverable4 min read · Sep 12, 2026
- SafePay Ransomware Recovery: What's Recoverable3 min read · Sep 12, 2026
- DragonForce Ransomware Recovery Guide3 min read · Sep 12, 2026
- Play Ransomware Recovery: What's Recoverable4 min read · Sep 12, 2026
- Qilin Ransomware Recovery: What's Recoverable4 min read · Sep 12, 2026
- The Gentlemen Ransomware Recovery Guide4 min read · Sep 12, 2026
- Akira Ransomware Recovery: Real Cases and What's Recoverable8 min read · Sep 12, 2026
Servers, storage & hardware15
- NAS and RAID Ransomware Recovery: Synology, QNAP and Server Arrays8 min read · Oct 14, 2026
- How to Recover Permanently Deleted Files in Windows 10 and 117 min read · Oct 13, 2026
- Recovering Data From an Encrypted Drive5 min read · Sep 24, 2026
- Water Damaged Drive? Don't Power It On5 min read · Sep 24, 2026
- SAN or Storage Array Offline? What to Do First6 min read · Sep 24, 2026
- Server Won't Boot? What to Check First6 min read · Sep 22, 2026
- SD Card or USB Drive Not Readable? Do This First5 min read · Sep 21, 2026
- External Hard Drive Not Detected? What to Do First6 min read · Sep 21, 2026
- Formatted a Drive or Lost a Partition? Read This6 min read · Sep 21, 2026
- NAS Volume Degraded or Crashed? What to Do First6 min read · Sep 21, 2026
- SSD Failure Is Different: What to Know Before You Act5 min read · Sep 21, 2026
- Deleted Files by Mistake? What to Do First5 min read · Sep 21, 2026
- Hard Drive Clicking or Not Detected? What to Do First5 min read · Sep 21, 2026
- RAID Rebuild Failed or Stuck? Do This Before Retrying5 min read · Sep 21, 2026
- Multi-Disk RAID Failure: What's Actually Recoverable6 min read · Aug 4, 2026
Databases & applications15
- How to Recover an MSSQL Database After a Ransomware Attack7 min read · Oct 16, 2026
- How to Recover MySQL Data from .ibd Files6 min read · Oct 11, 2026
- SQL Server Database in SUSPECT or RECOVERY PENDING: What to Do6 min read · Oct 11, 2026
- Ransomware-Encrypted SQL Server Database Recovery: MDF and BAK Files10 min read · Oct 3, 2026
- Oracle Database Ransomware Recovery: Datafiles and DMP Exports10 min read · Oct 3, 2026
- 1C Infobase Won't Open? What to Check First6 min read · Sep 24, 2026
- Tally Company Data Corrupted? What to Do First6 min read · Sep 24, 2026
- Exchange Won't Mount or PST Corrupted? First Steps5 min read · Sep 22, 2026
- SAP HANA Won't Start? What to Check First5 min read · Sep 22, 2026
- SQL Server Database Will Not Attach: What to Check5 min read · Sep 21, 2026
- Dropped or Truncated a Table? What to Do First5 min read · Sep 21, 2026
- Oracle Data File Corruption: Steps Before You Repair It5 min read · Sep 21, 2026
- PostgreSQL Will Not Start: Before You Reset the WAL5 min read · Sep 21, 2026
- MySQL InnoDB Corruption: Before You Force Recovery5 min read · Sep 21, 2026
- SQL Server Corruption: Steps Before You Make It Worse5 min read · Aug 18, 2026
Virtualisation7
- How to Repair a VHDX File That Will Not Mount6 min read · Oct 11, 2026
- VMware ESXi Ransomware: Encrypted VMDK Recovery10 min read · Oct 3, 2026
- Hyper-V Ransomware: Encrypted VHDX Recovery10 min read · Oct 3, 2026
- ESXi Datastore or VM Missing? Check This First6 min read · Sep 22, 2026
- Deleted a Virtual Machine? Your Recovery Options5 min read · Sep 21, 2026
- Hyper-V VM Will Not Start: Broken AVHDX Checkpoints5 min read · Sep 21, 2026
- VMware Datastore Corruption: VMFS & vSAN Recovery5 min read · Aug 27, 2026
Backup & disaster recovery11
- Corrupted Veeam Backup File (VBK or VIB): What the Errors Mean and What Can Be Recovered8 min read · Oct 15, 2026
- Ransomware-Encrypted Veeam VBK Recovery: Akira, LockBit and Others9 min read · Oct 3, 2026
- Microsoft 365 Is Not a Backup6 min read · Sep 24, 2026
- Your Recovery Time Is Longer Than You Think7 min read · Sep 24, 2026
- Acronis Backup Won't Restore? What to Do First5 min read · Sep 22, 2026
- How to Test a Disaster Recovery Plan and How Often6 min read · Sep 21, 2026
- IT Disaster Recovery Plan: What It Must Include6 min read · Sep 21, 2026
- Test Your Database Backups Before You Need Them5 min read · Sep 21, 2026
- Veeam Backup Will Not Restore: Common Causes5 min read · Sep 21, 2026
- SQL Server Backup Will Not Restore: What to Try5 min read · Sep 21, 2026
- The 3-2-1 Backup Rule: Why It Still Works in 20264 min read · Sep 2, 2026