https://www.haktechs.com/wdtoggle-a-beacon-object-file-bof-for-cobalt-strike-which-uses-direct-system-calls-to-enable-wdigest-credential-caching/