handle table manipulation detector

drop security evtx csv · detect handle duplication from privileged processes to attacker processes · identify token duplication and privilege escalation via handle table manipulation · surface cross-process resource theft · runs locally