- Added rule_response_action to Ransomware Activity alerts, now returning a terminate_sessions field indicating automatic session termination based on the Admin Console setting.
- Session termination is disabled by default; when enabled, terminate_sessions is true for triggered alerts, while other Shield alerts remain unchanged.
- Introduced automated remediation for ransomware activity in Box Shield Pro.