Detecting Attackers in a Windows Active Directory Network