Begin 2018-03-06 12:00:00
End 2018-03-06 12:50:00
Affected Windows users with homedirectory on home2 (check yours in

During the process of restoring the homedirectory of the affected user of the ransomware, the samba server was restarted, however it stopped, but not start. This was noticed only 45 minutes later. We have ajusted our monitoring to help us notice this more quickly.