Skip to main content

K-Ransom Shield

Stop ransomware before it encrypts everything

K-Ransom Shield watches for typical ransomware behaviour and responds within moments: suspending the process, terminating its process tree and isolating the computer from the network.

Join the pilot programmeRequest a demo

The problem

Ransomware encrypts thousands of files within minutes and deletes local backups. Every second counts between the first file hit and the response.

What the module does

  • Decoy files

    Hidden files in user folders: any change triggers a critical alert.

  • Behavioural signals

    Bursts of renames, rising file entropy, known extensions, deletion of shadow copies.

  • Automatic response

    Suspension, termination of the process tree, network isolation and an explained alert in the console.

  • Protected shadow copies

    Windows shadow copies are protected from deletion by an unauthorised program.

How it works

  1. Monitoring

    The agent watches file writes and risky commands.

  2. Detection

    Several matching signals trigger the response.

  3. Containment

    The process is stopped and the computer isolated, except for the Kayzen management channel.

What you should know

  • The module is planned for phase 3; it will be tested only with a harmless in-house simulator.
  • No protection is infallible: keep offline, tested backups.
  • The internal target (stop in under 2 seconds) will be measured and published together with its method.

Frequently asked questions

Questions about this module

Do I still need backups?

Yes, always. An offline, regularly tested backup remains the best insurance against data loss.

Does isolation cut off the whole network?

It cuts everything except the secure channel between the agent and the console, to allow remote analysis and restoration of service.

Complementary modules

Practical cybersecurity guides

Want to try this module?

The pilot programme gives you access to modules as they are delivered, free of charge and with no commitment.

Join the pilot programmeDiscover the platform