Network alarm appliance and software detects, automatically investigates and responds to threats in real-time. Creating an understanding of how the organization operates, and monitors for events that are malicious and abnormal to the environment to reduce cyber risk of ransomware or any other attacks. Network and email-monitoring software communicate to create full loop monitoring of the network to easily remediate threats that spread throughout the environment such as any malicious software, any links that may contain viruses, account compromises and any spoofing that may occur.