Embracing offensive tooling: Building detections against Koadic using EQL | Elastic Blog