Detecting File & FileLess Mimikatz from it's origin in Memory (LSASS) on May 17, 2020 Credential Dumping elk Hunting Mimikatz ioc mimikatz siem splunk threat hunting +