Add passive file churn sensor beta

src/OCSentinelCli/RansomwareBetaDetector.cs

@@ -22,6 +22,12 @@ internal static class RansomwareBetaDetector
         ScanSecurityProcesses(signals, errors, since, configuration);
         ScanPowerShellScriptBlocks(signals, errors, since, configuration);
         ScanSysmonProcesses(signals, errors, since, configuration);
+        RansomwareFileChurnSummary fileChurn = RansomwareFileChurnDetector.Scan(configuration, errors);
+        RansomwareSignal? fileChurnSignal = RansomwareFileChurnDetector.CreateSignal(fileChurn, configuration);
+        if (fileChurnSignal is not null)
+        {
+            signals.Add(fileChurnSignal);
+        }
 
         List<RansomwareSignal> distinctSignals = signals
             .OrderBy(signal => signal.Timestamp)
@@ -50,11 +56,13 @@ internal static class RansomwareBetaDetector
         return new RansomwareBetaSummary
         {
             Enabled = true,
+            AlertingEnabled = configuration.RansomwareBetaAlertingEnabled,
             State = state,
             Reason = reason,
             LookbackMinutes = lookbackMinutes,
             Signals = distinctSignals,
-            SmbSessions = smbSessions
+            SmbSessions = smbSessions,
+            FileChurn = fileChurn
         };
     }