https://www.youtube.com/watch?v=_rlEpPwSIoc&t=6421s
https://www.sans.org/webcast/recording/citrix/117299/381380