Skill UI

Deploys Python watchdog monitors for deceptive canary files placed in critical directories, alerting via email/Slack/syslog whenever ransomware touches them so teams can respond before encryption.

Deploys canary files, honeypot shares, and deception appliances to surface ransomware attempts before encryption, feeding PowerShell and SIEM alerts so responders can triage incidents triggered by high-confidence decoy activity.

Deploys honeytoken decoy files across critical shares and endpoints, watches them with file-integrity or OS-level observers, and alerts SOCs when ransomware modifies, encrypts, or renames a canary, offering a precise detection layer that complements backups and EDR.