https://www.sans.org/reading-room/whitepapers/forensics/portable-system-network-forensics-data-collection-analysis-37100