Is There a Way to Detect Ransom Where Attacks?

We provide likeapi integrations with other security tools. Another lay is you could actually run periodic vulnerablity scans on a network on a basis. If these cans detect something suspicious, that could be a trigger too to plug in a api integration or a manual intervention to flip the ransomer kill switch. How long does it take for a valnaplty scano to run? Rict? Does that depend on the the network? An army deviseso soit it definitely depends upon the size of the network.