How to detect and mitigate living off the land attacks