https://www.sans.org/reading-room/whitepapers/analyst/logrhythm-7-review-reducing-detection-response-times-36502