Is There a Time Series of Ransomware in Machine Learning?

It took us like a long time to collect a data set. We just had this raw ransom wers from the data vas, and we were running. And our objective was, in a limited time frame, which in our case was 20 mille second, we should be able to detect whether this is a benign or ransom t The thing is, the ransom were may or may not be n and cripting or sniffing around the network,. Could be just liing there, dormant for a while, and then start searching there is like the context switching vav.