GuardMode provides you with many customizable methods of detecting ransomware on your device:
Honeypot and decoy files
Write operations threshold
Detecting file renaming with abnormal file extensions
To modify any of the options select the Nodes tab from the DPX Dashboard, click on your GuardMode Agent Node, and select the Security tab: