With the help of its CryptoGuard technology, Sophos is able to detect spontaneous and harmful data encryption. It also stops ransomware immediately after detection and prevents traffic on the network, even for trusted data and processes, should they be manipulated or misappropriated. The technology can automatically restore files to their original state. This is possible because CryptoGuard works at the data system level, where it keeps track of all remote computers and their local processes.