Microsoft Defender
Controlled folder access: ransomware protection that works
Roll out Defender controlled folder access against ransomware: audit mode, events 1123 and 1124, allowing apps, adding protected folders and enforcing by ring.
Intermediate