https://blog.cyble.com/2022/09/06/adversaries-actively-utilizing-powershell-empire/