Resilio should have a ransomware protection that recognizes a massive file change in a very short time and asks the user if recent changes should be synced or if the changes should be rolled back using the unchanged files from the archive folders.
I think a huge amount of changes in lot of different files within a few minutes, should be quite simple to detect via the logs resilio uses. Hence the sending pc should stop syncing immediately and the recieving end should ask if those changes are actually wanted.
this would add immense value to resilio and would stop once and for all those nasty ransomware attacks.
