https://www.sans.org/reading-room/whitepapers/testing/out-protecting-confidentiality-penetration-testing-37187