ELK 2 Anatomy of a Ransomware Attack: Unmasking BYOVD and RDP Shadowing in the Wild Oct 25, 2026 Logstash Configurations file Dec 26, 2024