Trellix SecondSight identifies subtle indicators of an active breach