Ransomware hits healthcare - Possible compromised accounts

Identify accounts that have logged on to affected endpoints. Check for specific alerts.