Linux EDR Default User Password Attack Detection and Forensics