Abstract: Techniques and configurations for data management are described. Features may be extracted from backup data stored in a data management system for a target object, where the backup data may reflect the target object at a point-in-time. An anomaly associated with the target object may be detected based on the features extracted from the backup data. Based on detecting the anomaly, a malware identity associated with the anomaly may be identified based on the features extracted from the backup data. The identified malware identity may be indicated via a user interface.

Abstract: Subject matter related to data management is disclosed. A request to restore target objects of a computing system may be received, where a data management system may store multiple snapshots for the target objects and metadata for the snapshots. The snapshots may be filtered using metadata for the snapshots to obtain a set of snapshots that are available for restoring respective target objects. From among the set of snapshots, suggested snapshots that are available for restoring respective target objects may be identified. The suggested snapshots may be indicated.