Threat Actors Leverage Cloud Logs to Bypass Defender Visibility