https://www.sans.org/reading-room/whitepapers/casestudies/eaudit-designing-generic-tool-review-entitlements-36027