[rwth-security] Abusing Windows Telemetry for Persistence