https://www.sans.org/reading-room/whitepapers/threats/generating-hypotheses-successful-threat-hunting-37172