EDRSandblast: bypass EDR detections and LSASS protections