The dual-use dilemma: Rethinking detection for remote access tool abuse The Red Canary Blog: Information Security Insights