https://www.sans.org/reading-room/whitepapers/forensics/forensic-analysis-industrial-control-systems-36277