Active Ransomware Attack Detection