from my experience responding to these. orgs that entertain the ide of paying the ransom often do not care about root cause analysis to the degree they should.

from my experience responding to these. orgs that entertain the ide of paying the ransom often do not care about root cause analysis to the degree they should. orgs that completely ignore payment as an option spend their time identifying the entry point, and vulns, and close those before restoring or rebuilding.