Creating check for Windows FileServer to see if a cryptotrojaner is running

Just use the built in Levels For Disk IO rule if you specifically want to monitor activity. I use it ensuring bottlenecks are spotted across certain hosts that are critical.

image

Cheers,