https://isc.sans.edu/diary/rtfdumps+Find+Option/29174/