https://www.sans.org/reading-room/whitepapers/warfare/practical-attack-detection-analysis-response-big-data-semantics-kill-chains-withi-35990