Hacker News Reader

After ransomware attack an unusually large number of old files will have changed. Maybe the backup server can monitor that metric?

I monitor file integrity with OSSEC and Monit, but I would like to prevent it from happening.