Detecting Ransomware Using Windows Minifilters to Intercept File Change Events

A security researcher has released a new proof-of-concept (PoC) tool on GitHub designed to stop ransomware at the deepest level of the operating system. Part of a broader Endpoint Detection and Response (EDR) strategy named “Sanctum,” the project demonstrates how defenders can use Windows Minifilters to detect and intercept malicious file encryption before it destroys […]

The post Detecting Ransomware Using Windows Minifilters to Intercept File Change Events appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.