How to Spot and Stop Active Directory Attacks Faster