Text this: Hermes ransomware v2.1 action monitoring using next generation security operation center (NGSOC) complex correlation rules