Creating check for Windows FileServer to see if a cryptotrojaner is running

Hi,

why not using thresholds on Disk IO Summary or for single Disk IO checks? It’s build in and just needs to be configured. Also CPU IO Wait could be an indicator.

HTH,
Alex