Oh hey, that Microsoft "Advanced Ransomware Protection" rule that never seemed to do anything just did something.