Protect Your Service Accounts: Detecting Service Accounts Authenticating from a New HostChristian Kirsch