ketshash v1.5 releases: detecting suspicious privileged NTLM connections