Port 22

Defenders beware: A case for post-ransomware investigations