Vaulted copies are backup copies kept apart from everyday systems, accounts, or network access. This isolation helps prevent attackers or malware from altering, encrypting, or deleting backups along with production data.
In ransomware recovery, vaulted copies can provide a more trustworthy source for restoration, but isolation alone does not prove that a backup is clean. Defenders should restrict and monitor access to the vault, preserve recovery points, and verify restored data and systems for malicious changes before returning them to service.