https://www.sans.org/reading-room/whitepapers/OpenSource/ise6100-giac-enterprises-final-step-step-description-36947