Open Internet by MindsNetSolarWinds SUNBURST — what the logs actually showed (DNS analysis, Splunk queries, 5 detection gaps)