This talk investigates the use of Graph based Machine Learning as an alternative method to detect the early stages of a ransomware attack, that often involve the deployment of tools like Cobalt strike. We introduce a methodology for Graph based machine learning, from developing a graph model and feature extraction, through to supervised and unsupervised machine learning techniques. The talk will provide the audience with a practical hands-on approach that can be used to deploy Graph based techniques on their own datasets.