Updating capabilities we use to see Ransomware, increasing telemetry pull for Ransomware attacks and add in correlation to have a better view into how, when and where an attack started from