Active Directory Microsoft EDR-Redir Windows Filesystem DLL Hijacking Shadow Escape Model Context Protocol MCP