https://blogs.technet.microsoft.com/office365security/how-to-deal-with-ransomware/?lipi=urn%3Ali%3Apage%3Ad_flagship3_profile_view_base_recent_activity_details_all%3BdZTSrzuCQPeNjAWkScnA0A%3D%3D