ShadowDragon Investigate vs threat_note (2026)