A hospital in Arusha falls victim to a ransomware attack, which encrypts critical patient data, medical records, and administrative systems. The attackers demand a large ransom payment in exchange for the decryption keys to unlock the files and restore access to the hospital's systems. The hospital's operations are severely disrupted, patient care is compromised, and there are concerns about potential data breaches and privacy violations.

Fortunately, the hospital has a special digital forensic department of which you are assigned the case to investigate. As part of your assessment for the situation, identify possible digital evidence that should be acquired and investigated and explain how they will help you and your team.