Adding malware detection rules
GuardMode provides you with many customizable methods of detecting ransomware on your device:
- Honeypot and decoy files
- Write operations threshold
- Detecting file renaming with abnormal file extensions
To modify any of the options select the Nodes tab from the DPX Dashboard, click your GuardMode Agent Node, and select the Security tab:
![[image expected here]](/assets/images/dpx - nodes - security tab-1dba5512e5a5411bf73b73acf296f089.png)