The role of “Threat Hunting” as an enabler in ransomware incident response