Interesting TTP: Disabling EDR with WDAC