Tag registry monitoring DCOM attacks