Ransomware & Cryptors
Common Vectors: LockBit, BlackCat, zero-day polymorphic encryptersScans file hashes after encryption has already started, often failing on zero-day variants.
Monitors file system I/O velocity in microsecond intervals. Instantly halts mass-rename/encryption loops and isolates the offending process.
