PDFiD: GoToE And GoToR Detection (“NTLM Credential Theft”) //TOP\