Ransomware - digital preservation of evidence and forensics