There is no guide.
Copy the following files/directories to the logs.
cp /opt/starwind/starwind-virtual-san/drive_c/starwind/hba_rescan.conf /opt/starwind/starwind-virtual-san/drive_c/starwind/logs
cp -a /etc/netplan/ /opt/starwind/starwind-virtual-san/drive_c/starwind/logs
cp /etc/fstab/ /opt/starwind/starwind-virtual-san/drive_c/starwind/logs
Finally, You need to pull the CVM logs in the standard way (Log in to the Web management interface -> Select the gear-shaped button -> Expand the VM name view -> Support Bundle). Check that the files you attempted to pull out are in the log bundles (they should be under /opt/starwind/starwind-virtual-san/driv_c/starwind/logs in the archive)
Last but not least: please make sure to follow backup best practices and have solid backups
https://www.starwindsoftware.com/best-p ... practices/. Solid backups of your production VMs are the only thing you can count on in case of encryption.