Using syscalls to bypass AV and EDR with Freeze and cobalt strike