Security & Threat Response
Ransomware protection and canary files
Axionac watches for the behaviour of ransomware — rapid mass file changes and tampering with decoy "canary" files — and can stop it before it spreads.
Ransomware encrypts a victim's files fast, so Axionac looks for the behaviour rather than waiting on a signature.
How detection works
- Canary files — hidden decoy files are planted on the device. A process that touches them is behaving like ransomware and is flagged immediately.
- Mass-change detection — a sudden burst of file modifications across many folders raises an alert.
What happens on detection
Depending on your policy, Axionac can alert your team, stop the offending process, and isolate the device from the network to contain the spread. Legitimate backup and patch activity is recognised so it is not mistaken for an attack.