This repo is created to perform data mining techniques on malicious and benign I/O Request Packet (IRP) logs on Windows machine to extract useful pieces of information to build a ransomware detection scheme.