Segment One - Understanding ransomware, how it works and steps to consider to increase your chances of getting data back. Segment Two - Ransomware continued, pitfalls, decryption process and protecting backups. Segment Three - Forensic images, track 0 and negative tracks. Segment Four - Forensic images continued, MD5 hash and how not to ruin a forensic case.