Interlock Ransomware File Encryption Activity

Detects file modification patterns consistent with Interlock ransomware including characteristic file extensions and ransom note creation.