backup▌

Design and implement comprehensive backup and disaster recovery strategies to ensure data protection, business continuity, and rapid recovery from infrastructure failures.

Assess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.

Validate backup integrity through cryptographic hash verification, automated restore testing, corruption detection, and recoverability checks to ensure backups are reliable for disaster recovery and ransomware response scenarios.

Test and validate ransomware recovery procedures including backup restore operations, RTO/RPO target verification, recovery sequencing, and clean restore validation to ensure organizational resilience against destructive ransomware attacks.

Executes structured recovery from a ransomware incident following NIST and CISA frameworks, including environment isolation, forensic evidence preservation, clean infrastructure rebuild, prioritized system restoration from verified backups, credential reset, and validation against re-infection. Covers Active Directory recovery, database restoration, and application stack rebuild in dependency order. Activates for requests involving ransomware recovery, post-encryption restoration, or disaster recovery from ransomware.

Implements immutable backup strategy using restic with S3-compatible storage and object lock for ransomware-resistant data protection. Automates backup creation, integrity verification via restic check --read-data, snapshot retention policy enforcement, and restore testing. Integrates with AWS S3 Object Lock, MinIO, and Backblaze B2 for WORM (Write Once Read Many) storage that prevents backup deletion or encryption by ransomware actors.

Designs and implements a ransomware-resilient backup strategy following the 3-2-1-1-0 methodology (3 copies, 2 media types, 1 offsite, 1 immutable/air-gapped, 0 errors on restore verification). Configures backup schedules aligned to RPO/RTO requirements, implements backup credential isolation to prevent ransomware from compromising backup infrastructure, and establishes automated restore testing. Activates for requests involving ransomware backup planning, backup resilience, air-gapped backup design, or backup recovery point objective configuration.

Encrypted backup and restore for OpenClaw Agent workspace files with auto-generated AES-256-CBC passwords. \n \n Supports three core operations: upload workspace files with auto-generated encryption passwords, download and decrypt previous backups, and delete remote backups from soul-upload.com \n Automatically backs up default OpenClaw files (SOUL.md, MEMORY.md, IDENTITY.md, AGENTS.md, TOOLS.md) or user-specified files; stores recovery information including auto-generated passwords in .openclaw

Export Google Sheets spreadsheets as CSV files for backup or local processing. \n \n Requires gws-sheets and gws-drive skills as prerequisites \n Offers three export approaches: retrieve spreadsheet metadata, export via Drive API with MIME type specification, or read sheet values directly in CSV format \n Supports flexible range selection and sheet targeting for granular control over exported data \n

Category: test