https://www.obsidiansecurity.com/blog/saas-ransomware-observed-sharepoint-microsoft-365/