Potential SAM database user credentials dumped with DCshadow

Detects scenarios where an attacker would dump user passwords using the DCshadow attack.