1. A method for mitigating the effect of a ransomware attack on an endpoint, comprising: deploying a plurality of data items in a plurality of file directories on the endpoint, each of the deployed data items being hidden from operating system processes executed on the endpoint and including data for baiting a ransomware process to request access to the deployed data items, the deploying based on a protection priority level assigned to the file directories and user files in the file directories, the protection priority level derived from the quantity and frequency of historical accesses, by a user of the endpoint, to the file directories and user files in the file directories, such that, the number of data items deployed in each respective file directory increases with respect to the protection priority level assigned to the respective file directory and the files in the respective file directory; detecting at least one access event associated with a request by a process to access at least one of the deployed data items on the endpoint; and responding to the detecting of the at least one access event by taking at least one action against the process associated with the detected access event.