Ransomware defense using fanotify and append only archives