Defending Large Language Models Against Attacks With Residual Stream Activation Analysis