https://actu365.com/tek/securite-informatique/2021/09/30/ghostemperor-from-proxylogon-to-kernel-mode/