https://www.elastic.co/security-labs/under-the-sadbridge-with-gosar