Change runbook that record changes & allow selective rebuild

There's a request for "Change runbook" that documents/records changes from Day 1
so that in the event of bad changes (malicious or inadvertent ones) being introduced
over along the line of changes, we can rebuild a server/system back selectively,
dropping the "bad" change so that we can bring up the system to a "clean" slate.

Was told it's not "Change Control" nor CRs that we are looking at here.

I've suggested that a 'bare metal' backup be done with incremental backups (think
EMC has one such product) but this is not what the team requires.

Any document, tools or method are much appreciated.
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

sunhuxAuthor Commented:

Above URL looks like what my colleague referred to.

I think taking a full bare metal backup with a combination
of differential plus incremental backups will enable us to
skip certain change/state that is bad/corrupt in the rebuild
sunhuxAuthor Commented:
In fact a continuous backup that we could selectively skip certain
days (where there is insidious tampering) backup would be ideal
as after the insidious/malicious change, there could be good
data/changes that follow that need to be recovered/restored
sunhuxAuthor Commented:
For eg:

Day 1: the initial good build
Day 2: legit/good updates were made
Day 3: an insidious/malicious update were made
Day 4: good legit updates/changes were made

We want to restore till Day 2, skip Day 3, restore Day 4
Active Protection takes the fight to cryptojacking

While there were several headline-grabbing ransomware attacks during in 2017, another big threat started appearing at the same time that didn’t get the same coverage – illicit cryptomining.

Bagaudin SatuevGlobal Community EvangelistCommented:
You shall meet these requirements with GFS backup scheme.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
sunhuxAuthor Commented:
The link provided is about Acronis backup:
is GFS a filesystem and is it supported on
Windows & Solaris platforms?
sunhuxAuthor Commented:
Googling gives links that GFS = Grandfth, Fathr, Son.

Is GFS supported on backup tools like BackupExec,
Veeam,  Oracle native/RMan backup ?
Bagaudin SatuevGlobal Community EvangelistCommented:
Hi Sunhux,

Indeed the link provided is referring to setting up GFS scheme under Acronis Backup 12.5.

Since you tagged Acronis I was under the impression that you're using our products - please correct me if that is not the case.

As for other backup tools, you'd better consult with the relevant products user guides to be 100% sure.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.