Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ NAS Administrator's Guide
  3. Section II. Using NAS-Data-Protection (D-NAS)
  4. Using true image restore
  5. About true image restore
NetBackup™ NAS Administrator's Guide

About true image restore

A True Image Restore (TIR) recovers the contents of a directory as they were at the time of the previous incremental or full backup. The files deleted before the backup are not restored.

About true image restore information

The Collect true image restore information option, in D-NAS policy, specifies whether the NAS policy can collect the information necessary to perform a true image restore.

NetBackup begins gathering TIR data for each incremental or full backup of the policy. The TIR information is collected for each volume regardless of whether any files were changed.

Collect true image restore is not supported along with Vendor Change Tracking (VCT) unless you have enabled accelerator. If the NetBackup admin wants to enable both TIR and VCT options in the backup policy, then accelerator must be enabled in the NAS policy.

NetBackup admin can perform TIR restore using single-stream or multi-stream restore.

An example of TIR

The table below shows the files that were backed up in the /vol1/dir/ directory between 12/01/2024 and 12/04/2024. The NAS policy that ran the backups had the Collect true image restore information option selected.

Table: Sample backups taken before a TIR

Day

Type of backup

Backed-up files

12/01/2024

Full

file1 file2 dirA/fileA dirB/fileB file3

12/02/2024

Incremental

file1 file2 dirA/fileA ---------- -----

12/02/2024

Incremental

file1 file2 dirA/fileA ---------- -----

12/03/2024

Incremental

file1 file2 dirA/fileA ---------- -----

12/04/2024

Incremental

file1 file2 ---------- ---------- ----- ---------- file4

Note:

The dashes ( ------ ) indicate the files were deleted before the backup.

If you restore the 12/04/2024 version of the /vol1/dir/ directory, you can see the following results:

After a regular restore

The restored directory contains all files and directories that ever existed in /vol1/dir/ from 12/01/2024 (last full backup) through 12/04/2024:

file1
file2
dirA/fileA
dirB/fileB
file3
dirC/fileC
file4

After a TIR

The restored directory contains only the files and directories that existed at the time of the incremental backup done on 12/04/2024:

file1
file2
file4

NetBackup does not restore any of the files that were deleted before the 12/04/2024 incremental backup. NetBackup did not restore these files or directories because they did not exist at the time of the incremental backup. The last selected incremental backup was the reference for the TIR.

Feedback

Was this page helpful?
Previous

Using true image restore

Next

Configuring TIR information retention time

Feedback

Was this page helpful?