We recommend creating an entire playbook so you know what you need to do to recover from a ransomware attack.