Retrieving NTLM Hashes without Touching LSASS: Internal Monologue Attack