Elastic found 23 RMM abuse cases, a 16-second intrusion, and 8 minutes from infostealer to login. Find out how attackers use signed software you trust.