Ransomware is a type of malware that disables access to computing resources, demanding a ransom for restoration. It is categorized into crypto-ransomware, which encrypts files, and locker ransomware, which locks system access. This paper proposes an anomaly-based detection and prevention system with pre- and post-encryption stages. The developed Intrusion Detection System (IDS) monitors resource usage, triggering alerts upon detecting anomalous behavior during active attacks. By analyzing post-recovery parameters and logging adverse effects, the system improves detection accuracy. The solution effectively identifies and mitigates both crypto and locker ransomware attacks.