PowerShell Audit Logging: Catch Intruders Living off the Land