{"slug":"recovering-from-ransomware-attack","source_name":"recovering-from-ransomware-attack","name":"Recovering From Ransomware Attack","description":"Executes structured recovery from a ransomware incident following NIST and CISA frameworks, including environment isolation, forensic evidence preservation, clean infrastructure rebuild, prioritized system restoration from verified backups, credential reset, and validation against re-infection. Covers Active Directory recovery, database restoration, and application stack rebuild in dependency order. Activates for requests involving ransomware recovery, post-encryption restoration, or disaster recovery from ransomware.","version":1,"lift":{"pass_rate_delta_pts":18.18,"pass_rate_pct":22.7,"total_cases":22,"passed_cases":5,"tokens_delta_pct":142.1,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-07-28T11:53:54.655540+00:00"},"skill_score":0.2273,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":18.18,"with_pass_pct":22.7,"without_pass_pct":4.5,"tokens_delta_pct":142.1,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":true,"completed_at":"2026-07-28T11:53:54.655540+00:00","run_id":"6f3c0c06-4e81-4f83-8d2a-d34e2527086f","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"Apache-2.0","install_count":0,"manifest_hash":"6cf9dbf6cf534f391620b10d9d0b83b0acff3fcb8a901f3679f43204950c7ba4","raw_url":"https://app.decimal.ai/s/recovering-from-ransomware-attack/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/recovering-from-ransomware-attack"}