The Gentlemen ransom note extortion email addresses detected
Detects the presence of known ransomware extortion note file names on endpoints or communication attempts with associated extortion contact email addresses in email logs.
Microsoft Sentinel (KQL)
