Form 0 0 661 497 Form Module code_executing credentials persistence privesc recon situation_awareness winlist