Just a simple HoneyPot: share some files and check them for changes using hash
I have created to avoid ransomware attacks. Just calculate the hash of the files and check them continuosly. If the hash is not the same the file have been modified (encripted?). In that case an mail alert is sent.