Forensic Investigation Process Following a Ransomware Attack