Thwarting ransomware with zero trust