The only real mitigation strategy that is smart towards these sorts of attacks is to block them at the sting or Main network and even within the provider now. You normally takes a snapshot of the server at any time you would like. Also, we do deliver automated weekly server backups being an addon