@tinker@infosec.exchange I once worked at a business that said the "Backups were air gapped" I asked how the backups could be occurring? They said "Oh, we stand up an interface between the two networks when the backup automation runs." Great...how long does the backup run? (Take a guess) It was 21hrs! The air gapped network was connected to the infected network for 21 hrs A DAY!