https://www.sans.org/reading-room/whitepapers/microsoft/securing-windows-10-giac-enterprise-endpoint-ise-m-6100-security-project-practicum-technica-36592