Embodiments described herein relate to a method for managing file based backups (FBBs). The method may include obtaining a FBB mount request for a FBB mount of a FBB from an application, wherein the application is executing in a production host environment and the FBB is stored on backup storage; in response to the FBB mount request: enabling access to a portion of the FBB by the application; notifying a cyber sense device that the access is enabled; providing, to the cyber sense device, a storage location of the portion of the FBB for which access was enabled; receiving, from the cyber sense device, a security event notification; and performing, in response to the security event notification, a security action set.