malware malicious restore-from-backup:
  type: dict
  return_type: NullAgentResponse
  cli:
    users:
      - root
  check_with:
    - backup_is_enabled
  schema:
    ids:
      type: list
      schema:
        type: integer
        coerce: int
      required: true
      positional: true
      help: IDs from the malicious list
    items:
      rename: ids
    user:
      type: string
      nullable: true
  help: Try to restore files from backup