Trend Micro WFBS - Ransomware detected?

I logged onto our server to do a routine check - when I went onto WFBS, it is showing that there were two encryption attempts blocked and that 1 device was affected with ransomware. How can I find out which device it was within our business?