Respond to a catastrophic ransomware attack paralyzing a regional hospital network. Recover patient data from shadow copies, identify the initial access broker's entry point via TrickBot, and trace the lateral movement using Cobalt Strike beacons.