Unveiling Image-Load & Registry malicious activity using VQL #VelociraptorIR and #WindowsDefender