Human-operated ransomware attacks: A preventable disaster - Microsoft Security
In human-operated ransomware attacks, adversaries exhibit extensive knowledge of systems administration and common network security misconfigurations, perform thorough reconnaissance, and adapt to what they discover in a compromised network.
Microsoft Threat Protection Intelligence Team