https://www.varonis.com/blog/direct-send-exploit