https://5dok.net/document/9ynexp0y-mining-ransomware-signatures-from-network-traffic.html