{"slug":"deploying-decoy-files-for-ransomware-detection","source_name":"deploying-decoy-files-for-ransomware-detection","name":"Deploying Decoy Files For Ransomware Detection","description":"Deploys canary files (honeytokens) across file systems to detect ransomware encryption activity in real time. Uses strategically placed decoy documents monitored via file integrity monitoring or OS-level watchdogs to trigger alerts when ransomware modifies or encrypts them. Activates for requests involving ransomware canary deployment, honeyfile setup, deception-based ransomware detection, or file integrity monitoring for encryption.","version":1,"lift":{"pass_rate_delta_pts":31.82,"pass_rate_pct":50,"total_cases":22,"passed_cases":11,"tokens_delta_pct":58.8,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-07-28T01:28:17.592695+00:00"},"skill_score":0.5,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":31.82,"with_pass_pct":50,"without_pass_pct":18.2,"tokens_delta_pct":58.8,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":true,"completed_at":"2026-07-28T01:28:17.592695+00:00","run_id":"6e5b28aa-0847-4a64-bebc-3dcd083fb74d","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":null,"content_status":"clean","indexable":true},"license":"Apache-2.0","install_count":0,"manifest_hash":"7e5a63ad6e848a26cc7e55ed6148e3e90d61f505174888f42cf59164c0391a28","raw_url":"https://app.decimal.ai/s/deploying-decoy-files-for-ransomware-detection/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/deploying-decoy-files-for-ransomware-detection"}