Source: https://conf.splunk.com/files/2019/slides/SEC1556.pdf