The implant ensures defenders only see legit Microsoft services rather than unknown external domains, making it more ...