This is the ALERTS Pane. Within this view, you’re
presented with the alerts relevant to your investigation.

In this instance, we’re viewing the Threat Intelligence, Knowledge Base, TOR, and TLS Certificate Chain based alerts

The END STATE of any successful ransomware campaign is NOT taking control of a computer or server.
It’s taking control of the data and monetizing that control. Attackers will try to get as much data out of the network as possible before notifying you that they’re there and that they want payment.

Our world class ATTACK INTELLIGENCE notifies you of these activities before the attacker has a chance to take complete control of your data.

Here we have Three alerts highlighted for triage