Hunting for Windows credential access attacks with Wazuh