Abstract: In some embodiments, disclosed subject matter involves proactive monitoring and detection of anomalies in user data hosted by a cloud storage server and user interaction with data to trigger quarantine of user data stored in the cloud storage. In at least one embodiment, data recovery from one or more quarantine states is available to a user after authentication. Quarantine levels may permit or prohibit various actions on the user data by the user who owns the data, an asynchronous process for data cleanup, and access by other authorized users, etc. In an embodiment, quarantine levels are associated with the user and affect the user data space rather than merely individual files. The proactive monitoring may include collection of telemetry based on the API calls to the cloud server, scanning of user file system and hierarchy, and other file or data space corruption. Other embodiments are described and claimed.

Abstract: In some embodiments, disclosed subject matter involves proactive monitoring and detection of anomalies in user data hosted by a cloud storage server and user interaction with data to trigger quarantine of user data stored in the cloud storage. In at least one embodiment, data recovery from one or more quarantine states is available to a user after authentication. Quarantine levels may permit or prohibit various actions on the user data by the user who owns the data, an asynchronous process for data cleanup, and access by other authorized users, etc. In an embodiment, quarantine levels are associated with the user and affect the user data space rather than merely individual files. The proactive monitoring may include collection of telemetry based on the API calls to the cloud server, scanning of user file system and hierarchy, and other file or data space corruption. Other embodiments are described and claimed.