Some EDRs stop thread hijacking. But @sentinelone.com invented a new attack class: line hijacking.