S12cybersecurity / CredGuardRuntimeShutdown Runtime Credential Guard deactivation via \\LSA_ISO_DISABLE_CREDENTIAL_GUARD + LSASS NT hash extraction (Win11 24H2) security windows reverse-engineering