Source: https://conf.splunk.com/files/2019/slides/SEC1908.pdf