https://www.splunk.com/en_us/blog/security/castlerat-malware-detection-splunk-mitre-attck.html