Best way to deal with incremental encrypted updates?

Solved by keeping track of the last time a backup was conducted and finding files that were modified after that time on the next run. At least that’s how I handled it in my script: