https://orbitbrain.com/blog/lockbit-ransomware-abuses-windows-defender-for-payload-loading/