1. A method, comprising: storing one or more storage rules for each of one or more storage locations, along with one or more actions to be taken for each storage rule that is violated; intercepting an I/O operation issued to a storage subsystem; determining whether the I/O operation violates one or more of the storage rules; and in response to determining that the I/O operation violates one or more of the storage rules, identifying an application that issued the I/O operation; and performing each of the one or more actions associated with the one or more of the violated storage rules.